[RADIATOR] Reject empty username?

Hugh Irvine hugh at open.com.au
Mon Feb 3 21:26:56 UTC 2020


Hi Robert -

As an alternative, you could use a Class attribute to store a copy of the username during authentication and return it in the Access-Accept.

Then you would always have the username present in the Class attribute in the subsequent accounting requests.

regards

Hugh


> On 4 Feb 2020, at 03:25, Robert Blayzor <rblayzor.bulk at inoc.net> wrote:
> 
> Would something like this work:
> 
> <Handler Request-Type = Accounting-Request, User-Name = /^.+/>
>   ...
> </Handler>
> #
> <Handler>
>   AccountingHandled
> </Handler>
> 
> 
> 
>> We're getting some clients that are just sending an empty (or no)
>> username attribute. Our database requires a non-null username. Rather
>> than just pump them into the database with some bunk username like
>> "NULL" or "none".... How can we silently ignore these accounting records
>> while sending a ACK back to the NAS so it doesn't keep sending them?
> 
> 
> -- 
> inoc.net!rblayzor
> XMPP: rblayzor.AT.inoc.net
> PGP:  https://pgp.inoc.net/rblayzor/
> _______________________________________________
> radiator mailing list
> radiator at lists.open.com.au
> https://lists.open.com.au/mailman/listinfo/radiator


--

Hugh Irvine
hugh at open.com.au

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, 
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER, SIM, etc. 
Full source on Unix, Linux, Windows, macOS, Solaris, VMS, NetWare etc.



More information about the radiator mailing list