help-gnu-radius
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Help-gnu-radius] about LHS and RHS


From: Sergey Poznyakoff
Subject: Re: [Help-gnu-radius] about LHS and RHS
Date: Tue, 15 Jun 2004 10:03:48 +0300

sy sy <address@hidden> wrote:

> I do not understand LHS and RHS.
> Can you explain them to me 

The file raddb/users consists of entries, called "user profiles".
Each user profile consists of three parts, separated by any amount
of whitespace:

LABEL  LHS RHS

where:
  LABEL -- is a word tagging this particular profile
  LHS and RHS are two "pair-lists". (the acronyms stand for
  'left-hand side' and 'right-hand side'). Sometimes these
  are also called 'check-pairs' and 'reply-pairs', correspondingly.

"Pair-list" is a list of "attribute-value pairs", delimited by
commas.

"Attribute-value pair" has the following syntax:

  ATTRIBUTE-NAME OP VALUE

Where
  ATTRIBUTE-NAME is the name of the attribute, assigned to it in
  the dictionary file.
  OP is a comparison operation. The only OP allowed in RHS is '='.
  In LHS, it can be any of:
    =, !=, <, <=, >, >=
  with usual meanings associated with these symbols.
  VALUE is a value of the attribute. 
   
So, a comma delimits parts of a pair-list, while whitespace delimits
parts of a profile. Notice that unlike other radiuses GNU Radius
requires that all three parts of a user profile be present. If you
need to specify an empty pair-list, place a word NULL in place of it.

> and show me a example ?

DEFAULT    Auth-Type = System,
                      Simultaneous-Use = 1
           Service-Type = Framed-User,
                      Framed-Protocol = PPP

Here, the label is 'DEFAULT', LHS is `Auth-Type = System,
Simultaneous-Use = 1' and RHS is `Service-Type = Framed-User,
Framed-Protocol = PPP'         

You will find complete description in the accompanying documentation.
It is also available on line in various formats:

          http://www.gnu.org/software/radius/manual

Regards,
Sergey




reply via email to

[Prev in Thread] Current Thread [Next in Thread]