Monitoring RadiusNT and the ANY password

Andras Tudos - Computronic, C3 ( (no email) )
Thu, 22 Jan 1998 12:30:18 +0100

Hi,

I try to monitor our RadiusNT servers with the superior SiteScope package.
Unfortunatelly it had no UDP port monitor, but I asked the developers to
extend their product and sent them the wupg example below. They did it and
it works for the first check, but the ANY password is being rewritten to
the garbage after the first check, so the second and forthcoming checks
fail. Any solution?

(If I remember correctly I used ANY passwords when we migrated users from
our previous - encrypted - auth. system, but now I cannot find the info
about using ANY as a permanent password. If it requires a registry change,
then is there a way to keep both funcionality eg. being able to monitor
RadiusNT with db connectivity check and to use a bianko password for first
time logins?)

Andras Tudos
C3, Budapest

>
>I created a user called "wupg" in Emerald, and gave it a
>password of "ANY" with a specific set of return attrbiutes that
>would surely not let someone log into the system (telnet to a
>non-existent host typically does it).
>
>Then chance the send and expect to:
>
>Send command on connect:
>\aD\@,0123456789012345\a\fwupg\b%18abcdefghijklmnop
>Expected command response: \bD\@
>
>This VERIFIES DB connectivity and works fairly well. The "ANY"
>password is supported in RadiusNT 2.2.41 and higher and will allow

>the garbage password to succeed.
>
>--
>Dale E. Reed Jr. (daler@iea.com)