[RADIATOR] AuthAttrDef for multi-value Radius attribute check

Garry Shtern Garry.Shtern at twosigma.com
Wed Sep 18 06:51:23 CDT 2013


Heikki,

I was under the impression that RquestOr is already supported if one lists values separated by a space. Are you proposing to change the separator character to pipe and offering explicit method?

Thanks.



Sent with Good (www.good.com)


-----Original Message-----
From: Heikki Vatiainen [hvn at open.com.au<mailto:hvn at open.com.au>]
Sent: Wednesday, September 18, 2013 10:31 AM Coordinated Universal Time
To: radiator at open.com.au
Subject: Re: [RADIATOR] AuthAttrDef for multi-value Radius attribute check


On 09/18/2013 01:14 PM, Heikki Vatiainen wrote:

> Thanks, noted. Also noted Garry's message. Something like
> %{RequestOr:attributename} should be quite straight forward to do and
> understand. However, %{RequestAnd:attributename} requires a bit more.
>
>
> Synatax like this might be a possibility:
>
> mikem User-Password=fred, %{RequestOr:Framed-IP-Address}=1.2.3.4|2.3.4.5

The above should be RequestAnd like this.

mikem User-Password=fred, %{RequestAnd:Framed-IP-Address}=1.2.3.4|2.3.4.5

> Here the request would be accepted if:
> User-Password = fred, and
> Framed-IP-Address = 1.2.3.4, and
> Framed-IP-Address = 2.3.4.5
>
> As another example, the required values (e.g., 1.2.3.4 and 2.3.4.5)
> could come from a multivalued LDAP attribute.
>
> If there are examples how the above would be put in use, please let us know.

--
Heikki Vatiainen <hvn at open.com.au>

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS,
NetWare etc.
_______________________________________________
radiator mailing list
radiator at open.com.au
http://www.open.com.au/mailman/listinfo/radiator
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.open.com.au/pipermail/radiator/attachments/20130918/5c5f17ad/attachment.html 


More information about the radiator mailing list