help-gnu-radius
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Help-gnu-radius] default Suffix


From: Sergey Poznyakoff
Subject: Re: [Help-gnu-radius] default Suffix
Date: Tue, 04 Sep 2001 16:28:53 +0300

Hello,

Basically, there are three errors in your configuration. First,
the DEFAULT profile lacks Auth-Type attribute. Second, "@domain.sk"
is not a suffix, its a realm name. Third, the Auth-Type attribute
can't be used in reply-pairs (like in your `test' profile).
The corrected configuration would look like:

raddb/users:

DEFAULT Auth-Type = <your-auth-type>
        Service-Type = Login,
                     Reply-Message = "\nHello...",
                     Cisco-AVPair = "shell:priv-lvl=15"

raddb/realms:

domain.sk       LOCAL   strip

The exact check-list of the DEFAULT profile depends on Auth-Type.
For example, it may contain Auth-Data attribute for Auth-Type = SQL
or Auth-Type = PAM, etc.

The place where you store authentication information for particular
users also depends on Auth-Type. For Auth-Type = System, it is your
system passwd database, for Auth-Type = SQL it's the SQL database
described in raddb/sqlserver, for Auth-Type = PAM it depends on
the particular PAM stack you will be using, etc...

Regards,
Sergey



reply via email to

[Prev in Thread] Current Thread [Next in Thread]