Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: (ASCEND) multiple clients using *one* rad server
Corey wrote:
> On Tue, 14 Jul 1998, Tony Porczyk wrote:
>> Corey wrote:
>>> [...]
>> Let me see if I understand correctly:
>> 1. You want to run radius on *one* UNIX host
>> [...]
> And the correct answer is! ... ( drumroll ) ..... Number 1 !!
> What I'm looking for specifically, though, is a way around the need
> for more than one instance of radiusd running on one server ( or on
> two different servers ) - mainly so that we only have to maintain one
> users file and one daemon... Give me convenience or give me death!
In that situation (I actually thought you *wanted* to use multiple users
files), Willie's advice with NAS-Identifier should be the best. I
cannot verify your setup today, but I will try this very scenario
tomorrow to see how it works.
To clarify the confusion with NAS-Identifier vs. NAS-IP-Address, here is
my understanding of it. NAS-Identifier, listed as attribute 4 in the
dictionary for the Ascend Modified Free RADIUS takes ip address as its
value. If you look at RFC 2138 (RADIUS), you will see that it lists
NAS-IP-Address as attribute 4, and it also uses ip address as its value.
Since the MAX uses attribute numbers (not names), NAS-Identifier as
implemented in the AMFR is a functional equivalent of NAS-IP-Address.
However, RFC 2138 also lists NAS-Identifier as attribute 32. AMFR doesn't
use it. RFC says NAS-Identifier takes a unique string as a value (fully
qualified domain name is given as an example). That's why Willie asked
which version of RADIUS you were using, and why he gave you a choice of
attributes :-)
t.
---------------------------------------------------------------------
Tony Porczyk * tony@infobound.com * San Jose, California
GIT/ED d++(!d) s++:++ a? C++++ USB++++$ P+ E- W(--) N++ !k w--- M- V?
PS+++ PE++ Y+ PGP-- t+@ 5++ X-- R* b- D---- e* V-- h* r+++(*)+++(*)>?
---------------------------------------------------------------------
++ Ascend Users Mailing List ++
To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd: <http://www.nealis.net/ascend/faq>
Follow-Ups:
References: