[RADIATOR] we're sending empty realms to eduroam tlrs servers

Ullfig, Roberto Alfredo rullfig at uic.edu
Tue Jul 13 19:38:25 UTC 2021


So I noticed a doc here for handling empty realms:

https://wiki.geant.org/pages/viewpage.action?pageId=121346324

Are the Handlers executed in order from top to bottom?

---
Roberto Ullfig - rullfig at uic.edu
Systems Administrator
Enterprise Applications & Services | Technology Solutions
University of Illinois - Chicago
________________________________
From: radiator <radiator-bounces at lists.open.com.au> on behalf of Ullfig, Roberto Alfredo <rullfig at uic.edu>
Sent: Tuesday, July 13, 2021 2:07 PM
To: radiator at lists.open.com.au <radiator at lists.open.com.au>
Subject: [RADIATOR] we're sending empty realms to eduroam tlrs servers

Where would I configure a rejection if the user does not supply a domain name? I assume it would be in this section:

<Handler>
        <AuthBy SUSPEND>
XXX
        </AuthBy>
        <AuthBy HASHBALANCE>
XXX
                AuthPort 1812
                AcctPort 1813
                <Host tlrs1.eduroam.us>
                </Host>
                <Host tlrs2.eduroam.us>
                </Host>
        </AuthBy>

I think it would be a bad idea to append our domain if the user doesn't. Or is this something that can be configured on the Cisco wireless controllers upstream from Radius?

---
Roberto Ullfig - rullfig at uic.edu
Systems Administrator
Enterprise Applications & Services | Technology Solutions
University of Illinois - Chicago
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.open.com.au/pipermail/radiator/attachments/20210713/f9e54a52/attachment.html>


More information about the radiator mailing list