HMMM. I'll have to think about the roam perspective of SPA. :(
> With check attributes, it doesn't work as I a explained earlier. I am using
> ODBC only
> In the text file it looks like this :
>
> xxxxxxx Password = "yyyyyy", Expiration = "Aug 01 1998"
> Framed-Protocol = 1
> NAS-Port-Type = 2
> Port-Limit = 1
> User-Service = 0
If you are running in ODBC only mode, the text file doesn't matter.
Not sure if you meant something else above?
> the authentication process is like the following:
>
> decrypted password:dghgdhdfgfh
>
> sql statement: RadGetConfigs 91
>
> loading radius defaults for this type...
> SQL statement : RadGetATConfigs 'ISDN '
>
> User-Service = Framed-user (2)
> Framed-protocol = PPP (1)
> Port-Limit = 1 (1)
> NAS-Port-Type = ISDN (2)
> Sending Ack of id 239 to c33de104
> User-Service = Framed-user
> Framed-protocol = PPP
> Port-Limit = 1
> NAS-Port-Type = ISDN
You need to make NAS-Port-Type a CHECK attribute, not a reply attribute.
You need RadiusNT 2.5 for this, and in the RadATConfigs table, the
NAS-Port-Type record should havde the RadCheck value set to 1. All
other
records will have RadCheck set to either NULL or 0.
> >
> >Are you trying to use server port access ot check attributes? Is
> >this in ODBC mode or text? What does the authentication request
> >look like that should fail, but doesn't?
> >--
> >Dale E. Reed Jr. (daler@iea-software.com)
-- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com