Re: NAS-Prompt-User (trial #2) ...

Paul Gregg (pgregg@niweb.com)
5 Jun 1997 15:18:07 GMT

Joe Bou-Farah (Joe.Bou-Farah@matrox.com) wrote:
|
| I ve been trying to set a RADIUS account that can open a
| NAS-Prompt.
|
| I tried numerous combinations of syntax, and I tested
| each one of these combinations, by telneting to the NAS.
| But instead of obtaining the NAS prompt, I get the
| following error message: "Authentication failed"
|
|
| Assuming the following:
|
| username of my user is : toto
| that the IP address of my NAS is : A.B.C.D
| and that the type of my connection is: async
|
|
| I have tried all of the following:
|
| --------------------------------------------
|
| toto Auth=System
| Service-Type=NAS-Prompt-User
|
| --------------------------------------------
|
| toto Auth=System
| Service-Type=NAS-Prompt-User,
| NAS-IP-Address=A.B.C.D
|
| --------------------------------------------
|
| toto Auth=System
| Service-Type=NAS-Prompt-User,
| NAS-IP-Address=A.B.C.D,
| NAS-Port-Type=Async
|
| --------------------------------------------
|
| toto Auth=System,Service-Type=NAS-Prompt-User
| NAS-IP-Address=A.B.C.D,
| NAS-Port-Type=Async
|
| --------------------------------------------
|
| toto Auth=System, Service-Type=NAS-Prompt-User, NAS-Port-Type=Async
| NAS-IP-Address=A.B.C.D,
|
|
| but they all failed ..
|
| Am I missing an attribute (may more) ??

Looks like you missed the right one.

It's:
login checkitems
Reply items

So:
toto Auth=System, NAS-Port-Type=Async
Service-Type=NAS-Prompt-User,
NAS-IP-Address=A.B.C.D

This will allow todo to authenticate via the System method *if* they are
dialled in on an Async line.

Another thing:

You are using Radius 1.16 ?
If you are Radius 2.0 you should use User-Service-Type

Paul.

--
 The Internet Business Ltd, Holywood House, Innis Court, Holywood, BT18 9HF
 pgregg@tibus.net                                     http://www.tibus.net/
            Phone: +44 (0)1232-424190  Fax: +44 (0)1232-424709 
           Eight out of every five people are math illiterates.