(RADIATOR) Client Identifier and TACACS

Markus Moeller huaraz at moeller.plus.com
Sun Feb 3 08:26:28 CST 2008


I have the following configuration : 

.
<ServerTACACSPLUS>
.
.
</ServerTACACSPLUS>
.
<Client 192.168.1.1>
    TACACSPLUSkey test
    Identifier Location1
</Client>
<Client 192.168.10.1>
    TACACSPLUSkey test2
    Identifier Location1
</Client>
...

<Handler Client-Identifier=Location1>
.
  AuthBy Server1
.
</Handler>

<Handler>
.
 AuthBy GlobalServer
.
</Handler>


but I see on the debug that always the Handler with GlobalServer is selected not the one with Client-identifier. Can I use the Identifier only with Radius not with TACACS+  ?

Sun Feb  3 14:16:28 2008: DEBUG: TACACSPLUS derived Radius request packet dump:
Code:       Access-Request
Identifier: UNDEF
Authentic:  <229><11>kl<238><235><230>^<217>?<228>3l<253><243><128>
Attributes:
        NAS-IP-Address = 192.168.1.1
        NAS-Port-Id = "tty18"
        Calling-Station-Id = "192.168.20.1"
        Service-Type = Login-User
        Request-Protocol = TACACS+
        User-Name = "fred"
        User-Password = test

Sun Feb  3 14:16:28 2008: DEBUG: Handling request with Handler ''

Is there a way to debug more ?

Thank you
Markus
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.open.com.au/pipermail/radiator/attachments/20080203/fe67bd9a/attachment.html>


More information about the radiator mailing list