[RADIATOR] AuthByPolicy - Always do every authentication method

Hugh Irvine hugh at open.com.au
Wed Mar 25 15:19:19 CST 2009


Hello Alex -

I don't think there is anything wrong with your configuration - the  
debug shows you are doing the first AuthBy GROUP and the second AuthBy  
GROUP.

However, what you are looking at is an accounting request, not an  
authentication request.

regards

Hugh


On 25 Mar 2009, at 23:50, Alex Massover wrote:

> Hi!
>
> I'm working with accounting and trying to log every request to SQL  
> prior to sending it to application server.
>
> Docs state for AuthByPolicy:
> "- anything else
> Always do every authentication method. Returns the result of the  
> last one."
>
> And this is exactly what I need, i.e. always do SQL and after send  
> it to application server and return the result of application server.
>
> Here what I have:
>
> cat radius.cfg | grep AuthBy
>
> <AuthBy GROUP>
> AuthByPolicy Every
>        <AuthBy SQL>
>        </AuthBy>
>        <AuthBy GROUP>
>        AuthByPolicy ContinueUntilAccept
>                        <AuthBy URL>
>                        </AuthBy>
>                        <AuthBy URL>
>                        </AuthBy>
>                        <AuthBy URL>
>                        </AuthBy>
>                <AuthBy INTERNAL>
>                        </AuthBy>
>        </AuthBy>
> </AuthBy>
>
> But the requests never continue beyond the SQL:
>
> Wed Mar 25 11:56:16 2009: DEBUG: Handling with Radius::AuthGROUP:
> Wed Mar 25 11:56:16 2009: DEBUG: Handling with Radius::AuthSQL:
> Wed Mar 25 11:56:16 2009: DEBUG: Handling accounting with  
> Radius::AuthSQL
> ...
> Wed Mar 25 11:56:16 2009: DEBUG: Handling with Radius::AuthGROUP:
> Wed Mar 25 11:56:16 2009: DEBUG: AuthBy GROUP result: ACCEPT,
> Wed Mar 25 11:56:16 2009: DEBUG: Accounting accepted
>
>
> What can be wrong with my configuration please?
>
> --
> Best Regards,
> Alex Massover
>
>
>
>
> This mail was sent via Mail-SeCure System.
>
>
>
> _______________________________________________
> radiator mailing list
> radiator at open.com.au
> http://www.open.com.au/mailman/listinfo/radiator



NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
Have you checked the RadiusExpert wiki:
http://www.open.com.au/wiki/index.php/Main_Page

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.




More information about the radiator mailing list