Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: (ASCEND) Preventing spaces in usernames.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi,
The environment details are:
/usr/local/bin/radiusd: RADIUS version 1.16 (plus Ascend
extensions)
1997/12/22
NOSHADOW BINARY_FILTERS ASCEND_SECRET ASCEND_LOGOUT FreeBSD
We do have a DEFAULT entry:
DEFAULT Password = "UNIX"
User-Service = Framed-User,
Framed-Netmask = 255.255.255.0,
Framed-MTU = 1500,
Framed-Compression=Van-Jacobsen-TCP-IP,
Ascend-Idle-Limit = 3600
Connecting to:
max4060 system revision: eik.m40 6.0.2
Nothing special on this box.... no ospf etc...
Had about over 2 month's uptime, until recently... dammm...
well, I have a user named warren, his username on the unix
is warren
passwd entry minus a bit.
warren::1096:1000::0:0::/home/warren:/bin/date
, On the max session window, it shows as "warren weeks", and
this
causes havoc to my billing software.. He is not the only one
able to
do this,
type login on with "username @ yourdomain", <- I get a few
of these as
well.
I will remove the DEFAULT entry but not just yet.
Regards
Phillip.
-----BEGIN PGP SIGNATURE-----
iQA/AwUBNcm7oIs0gatEBaGCEQLMPQCfZlUfL0Di7p0rhMrQe+eDwg70SYkAoKeV
X+e1IvpeUkYM23EA5nbhAHbI
=dguk
-----END PGP SIGNATURE-----
Ricardo Freire wrote:
>
> >> How do I prevent users logging in with Spaces in their
> >> usernames?
> >> with Ascend radius.
> >
> >I guess it's safer for you to prevent it when REGISTERING the user on your
> >system. If you want to do it with Radius, you should execute an external
> >script, for example, in Perl with something like that (I did it on the
> fly):
>
> Daniel, I think you didn't get the point... It's NOT about registering...
> What Phillip is talking about is (I guess):
> I'm registered as "ricardo" on my Linux box. No spaces.
> But, if I connect (DUN) typing "ricardo " (one or more trailing spaces) and
> my password, Ascend RADIUS *LETS* me connect.
> Then, if a friend connects using "ricardo" and my password, my MAX4000
> *CONNECTS* me, because it considers ANOTHER login.
> So, I have TWO logins in the same MAX4k box. And on the RADIUS side, we know
> how difficult is to find a server that deals with multiple logins... :-(
>
> BUT, I think all this stuff is corrected in TAOS versions 6.X and above
> (have to check, however).
>
> Regards,
>
> Ricardo Freire
> All Ways DIgital Provider
> www.allways.com.br
> Salvador/BA- Brasil
>
> ++ Ascend Users Mailing List ++
> To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd: <http://www.nealis.net/ascend/faq>
--
-------------------------------------------------
Phillip Grasso
One Earth Internet Pty Limited
Phone +61 2 42269007 Fax: +61 2 42269003
Email: phillip@1earth.net http://www.1earth.net
PGP FINGERPRINT 06AA 1A36 2D3C 84E9 BE44 6CC1 8B34 81AB
4405 A182
--------------------------------------------------
++ Ascend Users Mailing List ++
To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd: <http://www.nealis.net/ascend/faq>
References: