Radius Server - Make Changes in Dictionary file

This is Interesting: Free IT Magazines  
Home > Archive > Radius Server > October 2006 > Make Changes in Dictionary file





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Make Changes in Dictionary file
tms433

2006-09-25, 1:50 am

Ok, I get it, I see all the warnings, but I need to make a change in
the dictionary file. I am able to do this in products like Radiator,
but I can't seem to get this done in the dnary.mdb file and have it
stick.

I need this:

Attribute #1 of Vendor 7000 should be Slipstream-Auth

This completely exists within Radiator as this:

VENDORATTR 7000 Slipstream-Auth 1 string

I have opened up dnary.mdb within Access, and added this variable (yes,
I backed up the old dnary.mdb) and saved it back, put it on the server
in place of the old file.. and it still doesn't find this attribute.

This is a "Must Have" feature. I've found three other RADIUS products
that I can use this with, I'd just prefer to not pay the $800 for
Radiator and instead make IAS do this.

Anyone have any tips on why adding this to the MDB file doesn't present
it as an option?

tms433

2006-09-25, 1:50 am

I should add, I need this to be an attribute so I can pass with a
"TRUE" or "False" variable.

tms433 wrote:
> Ok, I get it, I see all the warnings, but I need to make a change in
> the dictionary file. I am able to do this in products like Radiator,
> but I can't seem to get this done in the dnary.mdb file and have it
> stick.
>
> I need this:
>
> Attribute #1 of Vendor 7000 should be Slipstream-Auth
>
> This completely exists within Radiator as this:
>
> VENDORATTR 7000 Slipstream-Auth 1 string
>
> I have opened up dnary.mdb within Access, and added this variable (yes,
> I backed up the old dnary.mdb) and saved it back, put it on the server
> in place of the old file.. and it still doesn't find this attribute.
>
> This is a "Must Have" feature. I've found three other RADIUS products
> that I can use this with, I'd just prefer to not pay the $800 for
> Radiator and instead make IAS do this.
>
> Anyone have any tips on why adding this to the MDB file doesn't present
> it as an option?


FenderAxe

2006-09-26, 1:21 pm

"tms433" <jpebcac@hotmail.com> wrote in
news:1159147590.865039.311860@i3g2000cwc.googlegroups.com:

> I should add, I need this to be an attribute so I can pass with a
> "TRUE" or "False" variable.
>
> tms433 wrote:
>
>

As far as I know you can add VSAs using the IAS snapin. Its fairly simple.
Look up Vendor Specific attributes in the help file, it says how to do it.
You don't need to touch the mdb file. (In fact I'd get rid of the one you
edited and put the original back.)

FA
jpebcac@gmail.com

2006-09-30, 7:27 pm

The issue I run into is that if I use the VSA option within the snapin,
it puts them as Attribute 26, not 7000, which is what I need.

Am I missing something here?

FenderAxe wrote:
> "tms433" <jpebcac@hotmail.com> wrote in
> news:1159147590.865039.311860@i3g2000cwc.googlegroups.com:
>
> As far as I know you can add VSAs using the IAS snapin. Its fairly simple.
> Look up Vendor Specific attributes in the help file, it says how to do it.
> You don't need to touch the mdb file. (In fact I'd get rid of the one you
> edited and put the original back.)
>
> FA


jpebcac@gmail.com

2006-09-30, 7:27 pm

Example from the help file:

-------------------------------
Look at the list to see whether your vendor-specific attribute is
already in the list of available RADIUS attributes. If it is,
double-click it, and then configure it as specified in your NAS
documentation. If the vendor-specific attribute is not in the list of
available RADIUS attributes:
Double-click Vendor-Specific, and then click Add.
Specify the vendor for your network access server.
To specify the NAS vendor by selecting the name from the list, click
Select from list, and then select the vendor of the NAS for which you
are configuring the VSA. If you are using Routing and Remote Access as
your NAS, click Microsoft. If the vendor is not listed, specify the
vendor by typing the vendor code.

To specify the NAS vendor by typing the vendor code, click Enter Vendor
Code and then type the vendor code in the space provided. (If you do
not know the vendor code for your NAS, see IETF RFC 1007 for a list of
SMI Network Management Private Enterprise Codes.)

Specify whether the attribute conforms to the RADIUS RFC VSA
specification. If you are not sure, see your NAS documentation.
---------------------------------

Which is fine and dandy except Microsoft's list doesn't have a Vendor
ATTR 7000 in it's lists (period).

FenderAxe wrote:
> "tms433" <jpebcac@hotmail.com> wrote in
> news:1159147590.865039.311860@i3g2000cwc.googlegroups.com:
>
> As far as I know you can add VSAs using the IAS snapin. Its fairly simple.
> Look up Vendor Specific attributes in the help file, it says how to do it.
> You don't need to touch the mdb file. (In fact I'd get rid of the one you
> edited and put the original back.)
>
> FA


James McIllece [MS]

2006-10-02, 7:54 pm

jpebcac@gmail.com wrote in
news:1159659721.635037.288240@k70g2000cwa.googlegroups.com:

Hi there --

Can you please restate in a nutshell what you are trying to accomplish? If
so I can forward your question to the product team. Thanks.



--
James McIllece, Microsoft

Please do not send email directly to this alias. This is my online account
name for newsgroup participation only.

This posting is provided "AS IS" with no warranties, and confers no rights.
tms433

2006-10-07, 7:40 pm

OK, we buy through a VISP (VirtualISP) for all of our employs so that
we can have them in the field for dialin. They point RADIUS for our
domain at our server. Which is fine.

When a user connects, I need to pass back this variable to their RADIUS
requester:

VENDOR ATTR 7000 Slipstream-Auth="true"

??

James McIllece [MS] wrote:
> jpebcac@gmail.com wrote in
> news:1159659721.635037.288240@k70g2000cwa.googlegroups.com:
>
> Hi there --
>
> Can you please restate in a nutshell what you are trying to accomplish? If
> so I can forward your question to the product team. Thanks.
>
>
>
> --
> James McIllece, Microsoft
>
> Please do not send email directly to this alias. This is my online account
> name for newsgroup participation only.
>
> This posting is provided "AS IS" with no warranties, and confers no rights.


James McIllece [MS]

2006-10-10, 1:41 am

"tms433" <jpebcac@hotmail.com> wrote in
news:1160264908.490981.219970@m73g2000cwd.googlegroups.com:

>
>


OK, thanks -- I forwarded the question, if I receive a response I will post
it here.

--
James McIllece, Microsoft

Please do not send email directly to this alias. This is my online account
name for newsgroup participation only.

This posting is provided "AS IS" with no warranties, and confers no rights.
jpebcac@gmail.com

2006-10-18, 1:34 am

Thanks James. I'll eagerly await a response!!

Passing slipstream for Compression support is becoming more and more
important for those of us who use IAS in an dialin backend.

James McIllece [MS] wrote:
> "tms433" <jpebcac@hotmail.com> wrote in
> news:1160264908.490981.219970@m73g2000cwd.googlegroups.com:
>
>
> OK, thanks -- I forwarded the question, if I receive a response I will post
> it here.
>
> --
> James McIllece, Microsoft
>
> Please do not send email directly to this alias. This is my online account
> name for newsgroup participation only.
>
> This posting is provided "AS IS" with no warranties, and confers no rights.


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com