<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style>
</head>
<body class='hmmessage'><div dir='ltr'>
Are we in a bad mood?<br><br><div>> Date: Tue, 11 Oct 2011 08:46:28 +0200<br>> From: aland@deployingradius.com<br>> To: freeradius-users@lists.freeradius.org<br>> Subject: Re: Local Auth if Proxy Auth fails ---OR--- Proxy Auth if Local Auth fails<br>> <br>> ρΓΛΟ όΜΜΑΔ ηΕΞΞΑΔΨΕΧΙή (ngs) wrote:<br>> > I am beginner in RADIUS. I guessed you talked about <br>> > "sites-available/default"<br>> > because Cisco does not use any realms when sends its packets to the RADIUS.<br>> <br>> I talked about realms because I wanted to talk about realms.<br>> <br>> > I think it's needed "expanding of my task boundaries" :-) I want to make<br>> > Cisco<br>> > devices authenticate users when ther enter the device via telnet/ssh. It<br>> > would<br>> > be three-stage procedure:<br>> > - Windows DC if IAS (Microsoft RADIUS) is accessible;<br>> > - if no - RADIUS local DB if it is accessible;<br>> > - if no - Cisco's local DB (NAS local authentication).<br>> > <br>> > So If I correctly understood I need to use "authenticate" section.<br>> <br>> No. My example was correct.<br>> <br>> > But what is further I don't clearly imagine. I guess when Access-Request<br>> > is incoming,<br>> > RADIUS in accordance with suggested scheme must change realm of request and<br>> > continue process packet with new conditions, is it right?<br>> <br>> No. My example was correct.<br>> <br>> > I must define new realm, for example "ias", and I must define<br>> > home-server for it,<br>> > do I?<br>> <br>> That's the only thing you got right.<br>> <br>> Alan DeKok.<br>> -<br>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html<br></div> </div></body>
</html>