<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.0.6603.0">
<TITLE>Mutliple Authentication REALMS</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">Hi,</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> It</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">’</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">s been a long time, as the</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">freeRADIUS</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"></FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">software I</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">’</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">ve being using for the last 3 years hasn</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">’</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">t needed looking at since installation.</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"></FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> </SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> </FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">So a big thank</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"></FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">you to the development team</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT FACE="Wingdings" SIZE=2>J</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> However, as with most things it</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">’</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">s so good I</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">’</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">ve now got to redesign and re-implement</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> to encompass more of our infrastructure</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">, and I</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">’</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">m having problems.</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> I have a number of settings in the _</FONT></SPAN><SPAN LANG="en-gb"><I></I></SPAN><SPAN LANG="en-gb"><I><FONT SIZE=2 FACE="Arial">users</FONT></I></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">_ file that</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">are</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">based on the _</FONT></SPAN><SPAN LANG="en-gb"><I></I></SPAN><SPAN LANG="en-gb"><I><FONT SIZE=2 FACE="Arial">Called_Station_ID</FONT></I></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">_ then</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> proxy the requests to a specified REALM.</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> i.e.</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> </FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>DEFAULT</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> </SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>Called-Station-Id ==</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>“</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1><a telephone number></FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>”</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>, Proxy-To-Realm :=</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>“</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>NULL</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>”</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>Fall-Through = Yes</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> DEFAULT Called-Station-Id ==</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>“</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1><another telephone number></FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>”</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>, Proxy-To-Realm :=</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>“</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>NULL</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>”</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>Fall-Through = Yes</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> DEFAULT Called-Station-Id ==</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>“</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1><yet another number></FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>”</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>, Proxy-To-Realm :=</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>“</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>SPECIAL</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>”</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>Fall-Through = Yes</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">Now, the NULL realm is defined in the proxy.conf file as:</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> </FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>r</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>ealm NULL {</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> </SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>t</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>ype = radius</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> </SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>a</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>uthhost = radiusserver.some.domain:1645</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> </SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>a</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>ccthost = radiusserver.some.domain:1646</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>Secret = radiussecret</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> }</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">This</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">works</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> and actually</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">points to</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> a MS IAS server</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">going</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">against an NT4 Domain.</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">Now I need to authenticate a different set of users (who dial a different number) against an LDAP repository, so as you can see from my _</FONT></SPAN><SPAN LANG="en-gb"><I></I></SPAN><SPAN LANG="en-gb"><I><FONT SIZE=2 FACE="Arial">users</FONT></I></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">_ file I direct them at the</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">“</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">SPECIAL</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">”</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> realm, which I have set as follows in proxy.conf:</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> realm SPECIAL {</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>type = radius</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>authhost = LOCAL</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>accthost = LOCAL</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> }</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"></FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> </SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">My plan was for this to then use the local radius server, which has an _</FONT></SPAN><SPAN LANG="en-gb"><I></I></SPAN><SPAN LANG="en-gb"><I><FONT SIZE=2 FACE="Arial">ldap</FONT></I></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">_ module configure, which from what I can make out is working:</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> </FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>l</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>dap {</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> </SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>s</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>erver =</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>“</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>127.0.0.1</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>”</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> </SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>b</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>asedn =</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>“</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>dc=some,dc=domain,dc=co,dc=uk</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>”</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> </SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>f</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>ilter =</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>“</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>(uid=%u)</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>”</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> </SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>s</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>tart_tls = no</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> </SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>d</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>ictionary_mapping = ${rad</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>dbdir}/ldap.attrmap</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>ldap_connections_number = 5</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>timeout = 4</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>timelimit = 3</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>net_timeout = 1</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> }</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">And then in the authorize and authenticate sections simply include _</FONT></SPAN><SPAN LANG="en-gb"><I></I></SPAN><SPAN LANG="en-gb"><I><FONT SIZE=2 FACE="Arial">ldap</FONT></I></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">_</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> </FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>a</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>uthorize {</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> </SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>p</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>reprocess</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> </SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>c</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>hap</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> </SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>e</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>ap</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> </SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>l</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>dap</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> </SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>f</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>iles</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> </SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>m</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>schap</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> </FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>}</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> </FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>a</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>uthenticate {</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>Auth-Type PAP {</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> </SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>p</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>ap</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>}</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>Auth-Type CHAP {</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>chap</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>}</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>Auth-Type {</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>mschap</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>}</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>unix</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> </SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>l</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>dap</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> </SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>e</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>ap</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> </FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>}</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">Now all I see when using NTRadping, and sending the additional _</FONT></SPAN><SPAN LANG="en-gb"><I></I></SPAN><SPAN LANG="en-gb"><I><FONT SIZE=2 FACE="Arial">Called_Station_Id</FONT></I></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">_ attribute set to the required number is the</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">following</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"></FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">in my _</FONT></SPAN><SPAN LANG="en-gb"><I></I></SPAN><SPAN LANG="en-gb"><I><FONT SIZE=2 FACE="Arial">radius.log</FONT></I></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">_</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> </FONT></SPAN><SPAN LANG="en-gb"><B></B></SPAN><SPAN LANG="en-gb"><B> <FONT SIZE=2 FACE="Arial">Error: Dropping packet from client Dave_Test:2328</FONT></B></SPAN><SPAN LANG="en-gb"><B></B></SPAN><SPAN LANG="en-gb"><B> <FONT SIZE=2 FACE="Arial">–</FONT></B></SPAN><SPAN LANG="en-gb"><B></B></SPAN><SPAN LANG="en-gb"><B><FONT SIZE=2 FACE="Arial"> ID:</FONT></B></SPAN><SPAN LANG="en-gb"><B></B></SPAN><SPAN LANG="en-gb"><B><FONT SIZE=2 FACE="Arial"> 2 due to dead request 5018</FONT></B></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">When I run the radiusd with the</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">–</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">X flag (bearing in mind it</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">’</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">s an Production Service) I can make out the call being made to my LDAP server and a</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">“</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">rlm_ldap authorize</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">”</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">, but then the request just finishes without giving me and Access-Accept packet, and the relevant settings from the _</FONT></SPAN><SPAN LANG="en-gb"><I></I></SPAN><SPAN LANG="en-gb"><I><FONT SIZE=2 FACE="Arial">radreply</FONT></I></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">_ table in the Postgres Database?</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rad_recv: Access-Request packet from host</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=1>xx.xx.xx.xx</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>:2796, id=4, length=62</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>User-Name = "unextest20"</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>User-Password = "nexus"</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"> <FONT SIZE=1>Called-Station-Id = "</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>xxxxxxxxxx</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>"</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rad_lowerpair: User-Name now 'unextest20'</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>modcall: entering group authorize for request 14</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> modcall[authorize]: module "preprocess" returns ok for request 14</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> modcall[authorize]: module "chap" returns noop for request 14</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> modcall[authorize]: module "eap" returns noop for request 14</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> rlm_realm: No '@' in User-Name = "unextest20", looking up realm NULL</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> rlm_realm: Found realm "NULL"</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> rlm_realm: Adding Stripped-User-Name = "unextest20"</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> rlm_realm: Proxying request from user unextest20 to realm NULL</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> rlm_realm: Adding Realm = "NULL"</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> rlm_realm: Preparing to proxy authentication request to realm "NULL" </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> modcall[authorize]: module "suffix" returns updated for request 14</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>radius_xlat: 'unextest20'</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rlm_sql (sql): sql_set_user escaped user --> 'unextest20'</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>radius_xlat: 'SELECT id, UserName, Attribute, Value, Op ??FROM radcheck ??WHERE Username = 'unextest20' ??ORDER BY id'</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rlm_sql (sql): Reserving sql socket id: 8</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op ??FROM radcheck ??WHERE Username = 'unextest20' ??ORDER BY id</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rlm_sql_postgresql: Status: PGRES_TUPLES_OK</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rlm_sql_postgresql: affected rows = </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>radius_xlat: 'SELECT radgroupcheck.id, radgroupcheck.GroupName, ??radgroupcheck.Attribute, radgroupcheck.Value,radgroupcheck.Op ??FROM radgroupcheck, usergroup ??WHERE usergroup.Username = 'unextest20' AND usergroup.GroupName = radgroupcheck.GroupName ??ORDER BY radgroupcheck.id'</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rlm_sql_postgresql: query: SELECT radgroupcheck.id, radgroupcheck.GroupName, ??radgroupcheck.Attribute, radgroupcheck.Value,radgroupcheck.Op ??FROM radgroupcheck, usergroup ??WHERE usergroup.Username = 'unextest20' AND usergroup.GroupName = radgroupcheck.GroupName ??ORDER BY radgroupcheck.id</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rlm_sql_postgresql: Status: PGRES_TUPLES_OK</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rlm_sql_postgresql: affected rows = </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>radius_xlat: 'SELECT id, UserName, Attribute, Value, Op ??FROM radreply ??WHERE Username = 'unextest20' ??ORDER BY id'</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op ??FROM radreply ??WHERE Username = 'unextest20' ??ORDER BY id</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rlm_sql_postgresql: Status: PGRES_TUPLES_OK</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rlm_sql_postgresql: affected rows = </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>radius_xlat: 'SELECT radgroupreply.id, radgroupreply.GroupName, radgroupreply.Attribute, ??radgroupreply.Value, radgroupreply.Op ??FROM radgroupreply,usergroup ??WHERE usergroup.Username = 'unextest20' AND usergroup.GroupName = radgroupreply.GroupName ??ORDER BY radgroupreply.id'</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rlm_sql_postgresql: query: SELECT radgroupreply.id, radgroupreply.GroupName, radgroupreply.Attribute, ??radgroupreply.Value, radgroupreply.Op ??FROM radgroupreply,usergroup ??WHERE usergroup.Username = 'unextest20' AND usergroup.GroupName = radgroupreply.GroupName ??ORDER BY radgroupreply.id</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rlm_sql_postgresql: Status: PGRES_TUPLES_OK</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rlm_sql_postgresql: affected rows = </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rlm_sql (sql): Released sql socket id: 8</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> modcall[authorize]: module "sql" returns ok for request 14</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rlm_ldap: - authorize</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rlm_ldap: performing user authorization for unextest20</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>radius_xlat: '(uid=unextest20)'</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>radius_xlat: 'dc=s</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>ome</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>,dc=</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>domain</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>,dc=co,dc=uk'</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>ldap_get_conn: Got Id: 0</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rlm_ldap: performing search in dc=s</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>ome</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>,dc=</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>domain</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=1>,dc=co,dc=uk, with filter (uid=unextest20)</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rlm_ldap: looking for check items in directory...</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rlm_ldap: looking for reply items in directory...</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>rlm_ldap: user unextest20 authorized to use remote access</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>ldap_release_conn: Release Id: 0</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> modcall[authorize]: module "ldap" returns ok for request 14</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> users: Matched DEFAULT at 90</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> modcall[authorize]: module "files" returns ok for request 14</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1> modcall[authorize]: module "mschap" returns noop for request 14</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>modcall: group authorize returns updated for request 14</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=1>Finished request 14</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">I</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">’</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">m kinda</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">lost and going round in circles at the minute. </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">If one of you guys has had to do something similar, or can see any</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"> <FONT SIZE=2 FACE="Arial">glaring</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial"> omissions in my config (which I seem to think there is) could you please point me in the right direction.</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">TIA</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-gb"><FONT SIZE=2 FACE="Arial">Dave Shepherd</FONT></SPAN><SPAN LANG="en-gb"></SPAN><SPAN LANG="en-gb"></SPAN></P>
</BODY>
</HTML>