> OK, clue me in here. As far as I can tell you have a great idea that
> could be really convenient but isn't fully functional.
>
> What would be ideal, would be to have a PPP (PAP/CHAP) login if PPP is
> detected... and a telnet/rlogin if PPP is NOT auto-detected. While using
> ONE username authenticated from the /etc/password file. No prefixed
> letters or whatever required.
>
> Why is this so hard? It's not. I hacked the source for the earlier
> radius to do just that. And was told this would be an implementation.
This works just fine with Radius 2.0 if setup right.
Here is the relevant part of my users file that does a PPP connect if PAP
is used, or does a rlogin if PAP is not used. All usernames and passwords
are pulled from the unix passwd and shadow files.
You do have to have the default entries in the right order, or only some
of the entries work.
# This is for <username>.ppp (starts dynamic ppp)
DEFAULT1 Auth-Type = System, Suffix = ".ppp"
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Address = 255.255.255.254,
Framed-Routing = None,
Framed-MTU = 1500
# This is for PAP
DEFAULT2 Auth-Type = System, Framed-Protocol = PPP
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Address = 255.255.255.254,
Framed-Routing = None,
Framed-MTU = 1500
# This is for <username>.cslip (starts dynamic CSLIP)
DEFAULT3 Auth-Type = System, Suffix = ".cslip"
Service-Type = Framed-User,
Framed-Protocol = SLIP,
Framed-IP-Address = 255.255.255.254,
Framed-Routing = None,
Framed-MTU = 1006,
Framed-Compression = Van-Jacobsen-TCP-IP
# This is for <username>.slip (starts dynamic SLIP)
DEFAULT4 Auth-Type = System, Suffix = ".slip"
Service-Type = Framed-User,
Framed-Protocol = SLIP,
Framed-IP-Address = 255.255.255.254,
Framed-Routing = None,
Framed-MTU = 1006,
Framed-Compression = None
# This is for shell logins
DEFAULT5 Auth-Type = System
Service-Type = Login-User,
Login-Host = 206.11.208.3,
Login-Service = Rlogin