Re: (ASCEND) Ascend RADIUS - what now? (fwd)

[MegaZone <megazone@megazone.org>]

Once upon a time Tim Basher shaped the electrons to say...
>they are basically just vendor specific attributes that were not using
>the Vendor-Specific attribute for encoding.  Considering the fact that
>the Vendor-Specific attribute encoding did not exist when Ascend started
>adding vendor specific attributes, you cannot fault them for their
>approach - only for the time it took them to switch to proper use.

I can grant them the early days - but VSA has been around for what, 2+ years
now?  That's forever in Internet time.  And they continued to pour on the
bogons.  VSAs are not all that complex - just a string with a certain format.
And even that format is a SHOULD - you don't have to use it, and 3Com did
not.  What I can't approve of is, as you say, the time they took to switch.

>TAOS 7.0.0 now supports the use of the Vendor-Specific attribute to encode
>all the Ascend vendor specific attributes.  It is not enabled by default,

TAOS yes.  But, maybe I'm missing something, their included RADIUS server
does not appear to support VSAs.  So users buying a box are getting a server
full of bogons.  They can switch to Cistron, etc, or buy the commercial
server.

What should have been done long ago is switching to VSAs with an appropriate
VSA dictionary.

And some of them are redundant - Ascend-Max-Session-Time?

And I'm ignoring the raft of non-RFC 'Code' values for the packets.

-MZ
-- 
-=*X GOT CLUE? ISPF II - SAN DIEGO, CA 3/6-10 <URL:http://www.ispf.com/> X*=-
<URL:mailto:megazone@megazone.org> Gweep, Discordian, Author, Engineer, me..
Join ISP/C Internet Service Providers' Consortium <URL:http://www.ispc.org/>
"A little nonsense now and then, is relished by the wisest men" 781-788-0130
<URL:http://www.megazone.org/>  <URL:http://www.gweep.net/>  Hail Discordia!
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>