RE: (PM) RE: (RADIUS) Group issues on NT Radius (take 3)

James Courtier-Dutton (dutton@livingston-ent.co.uk)
Wed, 24 Mar 1999 22:51:00 -0000

Hello
I don't know who started this tread, but it sounds like they are trying to
use the group feature in Windows NT.
If you use Lucent Radius NT, it will only look up users on the local machine
which has Radius NT installed.
It does not look for the PDC.
But, if the local machine is the PDC or a BDC the local user table will be
an exact copy of the Domain user table.
If a user in the local user table and also if that user is in group "dialin"
(for example) as well as other groups, the user will be permitted.
I hope this clears things up a bit.
Cheers
James

> -----Original Message-----
> From: owner-portmaster-users@livingston.com
> [mailto:owner-portmaster-users@livingston.com]On Behalf Of Josh Moormann
> Sent: Tuesday, March 23, 1999 11:25
> To: Dave Burgess
> Cc: portmaster-users@livingston.com
> Subject: (PM) RE: (RADIUS) Group issues on NT Radius (take 3)
>
>
> 0, you wrote:
> >
> >
> > Should be:
> > Framed-Netmask = 255.255.255.255,
> >
> > Note the mask and the COMMA
>
> Fixed it, graci...
>
> >
> > > Framed-Routing = None,
> > > Framed-MTU = 1500,
> > > Framed-Compression = Van-Jacobsen-TCP-IP,
> > > Port-Limit=1
> >
> > No comma here either. By the way, Port-Limit only works with
> > ISDN dial-ups.
>
> Comprendo... Mistyped it in my original post.
>
> > Unfortunately, I'm absolutely no help when it comes to your Group check
> > item under NT. In Unix, this relates to the customer's default
> group from
> > their log-in. How ever you would set that up (the VMS ACL paradigm
> > notwithstanding) will likely work for you in NT.
> >
>
> I changed the users Primary Group from Domain Users to the Global "RAS"
> group I created on the PDC, no luck there either...
>
>
> -
> To unsubscribe, email 'majordomo@livingston.com' with
> 'unsubscribe portmaster-users' in the body of the message.
> Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>
>
>

-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.
Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>