Re: RADIUS porting....start with Merit!

John W. Temples (john@kuwait.net)
Sat, 4 Nov 1995 01:26:08 +0300 (GMT)

> I am in the same boat with the SCP patch. The merit version compiled
> fine and seems to work ok, but my users all are used to the SCP options
> and changing things now is not an option. (things got quite spam like
> last time I changed the authentication method).

I looked at the SCP patch, and I thought it was extremely ugly since
the S/C/P show up in the accounting records, and I thought the idea of
telling users to use an upper case S followed by lower case signon
would be just too confusing for them. "But you said always use lower
case!" etc. And every user had to be put in the "users" file, several
times over.

I found it not too difficult to patch the Livingston RADIUS server to
honor the User-Service-Type coming from the PM to at least be able to
automatically distinguish between shell logins and PPP logins with PAP.
So I just have "DEFAULT" and "DEFAULT.ppp" entries in "users", the
users don't have to be told to do anything unusual when they log in,
they have both shell and PPP access automatically with the same
account, and I don't have to maintain the "users" file.

The only downside is that SLIP can't be offered automatically, though I
see no real need to offer it, and if an exception came up, it could be
handled by adding the user to the "users" file.

--
John W. Temples, III       ||       Providing the first public access Internet
Gulfnet Kuwait             ||            site in the Arabian Gulf region