(RADIATOR) AuthenticateAttribute question

Hugh Irvine hugh at open.com.au
Tue Feb 5 16:29:03 CST 2008


Hello Markus -

It would be most helpful to see a trace 4 debug showing what is  
happening.

regards

Hugh


On 6 Feb 2008, at 08:33, Markus Moeller wrote:

> Hi
>
> I try to change the attribute to authenticate a user/system. I have  
> the following setup where my LDAP connection fills an attribute My- 
> MAC-Address, which then check against file entries. The problem I  
> have is that I still get the User-Name as the compare value not My- 
> MAC-Address.  I did include a PostAuthHook sub { print ${$_[0]}- 
> >get_attr('My-MAC-Address') ; } and it has the correct MAC-Address.
>
> What could be the reason that I still compare the User-Name  
> attribute ?
>
> <AuthBy FILE>
>         Identifier MacFilter
>         AuthenticateAttribute My-MAC-Address
>         Filename %D/macs
> </AuthBy>
>
> <Handler Device-Class=class1>
>         AddToRequestIfNotExist Request-Protocol=Radius
>         AuthByPolicy ContinueUntilReject
>         AuthBy LDAPMACAuthorisation
>         AuthBy MacFilter
>         # Log accounting to the detail file in LogDir
>         AcctLogFileName %L/detail
> </Handler>
> <Handler>
>         AddToRequestIfNotExist Request-Protocol=Radius
>         AuthByPolicy ContinueUntilReject
>         AuthBy LDAPAuthorisation
>         AuthBy UserFilter
>         AuthBy PAMAuthentication
>         AuthLog LogAuthentication
>         # Log accounting to the detail file in LogDir
>         AcctLogFileName %L/detail
> </Handler>
>
> Thank you
> Markus



NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/ 
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
Have you checked the RadiusExpert wiki:
http://www.open.com.au/wiki/index.php/Main_Page

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.


--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list