Does anyone know if I can set a TC to add a realm to a username before it sends the request to the RADIUS server? We are doing some consolidation and are trying to avoid problems with duplicate user names. -- Lewis Bergman Texas Communications 4309 Maple St. Abilene, TX 79602-8044 325-691-3301 800-299-6962
On Wed, 2005-07-13 at 15:42 -0500, Lewis Bergman wrote:
Does anyone know if I can set a TC to add a realm to a username before it sends the request to the RADIUS server? We are doing some consolidation and are trying to avoid problems with duplicate user names.
I don't know of or see any way to make the ARC do this... You might have more luck trying to get your RADIUS server to assign a default realm by NAS-Identifier or NAS-IP-Address. -- Ben Winslow <rain@bluecherry.net>
-----Original Message----- Subject: [USR-TC] Realms Does anyone know if I can set a TC to add a realm to a username before it sends the request to the RADIUS server? We are doing some consolidation and are trying to avoid problems with duplicate user names. -- Lewis Bergman Texas Communications 4309 Maple St. Abilene, TX 79602-8044 325-691-3301 800-299-6962 ----------------------- You can use the DNIS number in the Realms file for Cistron radius to direct the radius request to the appropriate server. Anyway, Instead of the "realm" you put the dial-up number with a "+" in front. I suppose that means you need to have one radius server for each realm?? An excerpt from that config file. # # realms This file contains a list of realms. When a user logs # in with @realm as the last part of the loginname, # the realm part is looked up in this file. If found, # the request is sent to the listed remote radius server. # # You will also have to set up a DEFAULT entry in the 'users' # file to accept responses for that realm. See doc/README.proxy # and the 'users' file for more information. # # # Description of the fields: # # * The first field is a realm name. # +55512345 matches all users who are calling to <====== # number 55512345, provided that you NAS sends the <====== # Called-Station-Id attribute to the server. <====== # NULL matches users without a realm # DEFAULT matches all realms except the NULL realm # # * The second field is a hostname. Optional is :port to # use a non-standard port. In that case, port is the # authentication port and the accounting port is taken # as port + 1. # If this field is set to LOCAL, the request is processed # locally without sending it to a remote radius server.
participants (3)
-
Ben Winslow -
Lewis Bergman -
Randy McMillan