Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

(ASCEND) Radius Group Check (fwd)

Once upon a time Kevin Steinhaus shaped the electrons to say...
>I'm using Livingstons Radius 2.01 on DEC OSF1 ver. 3.4  and am trying to get
>the Group Check option to work with our new MAX 6096.  Below is what I have
>in the users file:
>
>kevins  Password = "UNIX", Group = "system"
>        User-Service = Framed-User,
>        Framed-Protocol = PPP,
>        Framed-MTU = 1500,
>        Ascend-Maximum-Call-Duration = 300,
>        Ascend-Idle-Limit = 900
>
>
>Here are the groups I'm in
># groups kevins
>system users sysadmin operator _users
>
>With the above users file I am unable to authenticate,  I remove the Group =
>and everything works perfect.  I believed this to be a radius problem but
>I've been told that this just doesn't  work with the  Ascend.

You've been lied to.  The 'Group' check item is completely internal to
RADIUS.  Not only doesn't the NAS have any control over this, IT CANNOT!
This is an internal system call by the RADIUS daemon.

Now - I hope you have a PortMaster, since it is illegal to run Lucent
RADIUS without owning one.  So, does this happen with the PM?  If this
is working with the PM and NOT the MAX, I will be shocked.  (If you don't
have a PM, I refer you to Cistron RADIUS.  It is free, has a super-set of
the Lucent RADIUS features, and can be used with any NAS.)

You can also run 'radiusd -x', debug mode, and watch what the server is
doing when it tries to auth this user.  

Presuming you are using this legally, I'd bring this up on
portmaster-radius@livingston.com.  That's the support list for Lucent RADIUS.

There is also a list for Cistron RADIUS, and one general purpose list -
isp-radius@isp-radius.com

-MZ
-- 
<URL:mailto:megazone@megazone.org> Gweep, Discordian, Author, Engineer, me..
Join ISP/C Internet Service Providers' Consortium <URL:http://www.ispc.org/>
"A little nonsense now and then, is relished by the wisest men" 781-788-0130
<URL:http://www.megazone.org/>  <URL:http://www.gweep.net/>  Hail Discordia!
 ====================================================================
 ISPF, The Forum for ISPs by ISPs.  October 26-28, 1998, Atlanta, GA.
  Three days of clues, news, and views from the industry's best and
  brightest. http://www.ispf.com/ for information and registration.
 ====================================================================

++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>