user specific settings in users file overwritten by DEFAULT settings?



I have a user specified in my users file like this:

 

isdn          Auth-Type = System

                Service-Type = Framed,

                Framed-Protocol = MPP,

                Framed-Routing = None,

                Ascend-Maximum-Time = 18000,

                Ascend-Idle-Limit = 900,

                Ascend-Assign-IP-Pool = 0,

                Ascend-Maximum-Channels = 2,

                Fall-Through = "1"

 

Then at the bottom of the file I have:

 

DEFAULT Auth-Type = System       

        Fall-Through = 1             

DEFAULT Service-Type == Framed-User  

        Framed-IP-Address = 255.255.255.254,     

        Framed-MTU = 576,

        Service-Type = Framed-User,                

        Fall-Through = Yes                 

DEFAULT Framed-Protocol == PPP             

        Framed-Protocol = PPP,             

        Framed-Compression = Van-Jacobson-TCP-IP,

        Ascend-Maximum-Time = 18000,

        Idle-Timeout = 900

 

When I authenticate as this user, I see:

 

Thu Aug 17 13:18:26 2006 : Debug:     users: Matched isdn at 21

Thu Aug 17 13:18:26 2006 : Debug:     users: Matched DEFAULT at 133

Thu Aug 17 13:18:26 2006 : Debug:     users: Matched DEFAULT at 135

Thu Aug 17 13:18:26 2006 : Debug:     users: Matched DEFAULT at 140

Thu Aug 17 13:18:26 2006 : Debug:   modsingle[authorize]: returned from files (rlm_files) for request 5

Thu Aug 17 13:18:26 2006 : Debug:   modcall[authorize]: module "files" returns ok for request 5

Thu Aug 17 13:18:26 2006 : Debug: modcall: group authorize returns ok for request 5

Thu Aug 17 13:18:26 2006 : Debug:   rad_check_password:  Found Auth-Type System

Thu Aug 17 13:18:26 2006 : Debug: auth: type "System"

Thu Aug 17 13:18:26 2006 : Debug:   Processing the authenticate section of radiusd.conf

Thu Aug 17 13:18:26 2006 : Debug: modcall: entering group authenticate for request 5

Thu Aug 17 13:18:26 2006 : Debug:   modsingle[authenticate]: calling unix (rlm_unix) for request 5

Thu Aug 17 13:18:26 2006 : Debug:   HASH:  user isdn found in hashtable bucket 59493

Thu Aug 17 13:18:26 2006 : Debug:   modsingle[authenticate]: returned from unix (rlm_unix) for request 5

Thu Aug 17 13:18:26 2006 : Debug:   modcall[authenticate]: module "unix" returns ok for request 5

Thu Aug 17 13:18:26 2006 : Debug: modcall: group authenticate returns ok for request 5

Thu Aug 17 13:18:26 2006 : Auth: Login OK: [isdn/8293] (from client 192.168.0.3 port 1060 cli 6143677963)

Sending Access-Accept of id 2 to 192.168.0.3:7010

        Service-Type = Framed-User

        Framed-Routing = None

        Ascend-Maximum-Time = 18000

        Ascend-Idle-Limit = 900

        Ascend-Assign-IP-Pool = 0

        Ascend-Maximum-Channels = 2

        Framed-IP-Address = 255.255.255.254

        Framed-MTU = 576

        Framed-Protocol = PPP

        Framed-Compression = Van-Jacobson-TCP-IP

        Idle-Timeout = 900

 

Can anyone tell me why the radius server is ignoring the isdn entry in the users file and instead returning the DEFAULT entry?

 

Thanks,

Andrew

 



This archive was generated by a fusion of Pipermail (Mailman edition) and MHonArc.