Salut Hugh,
Content de voir que tu r�agis toujours aussi vite !
> > - I have the choice to use AuthBy SYSTEM or AuthBy UNIX in order to
> > authenticate local users by shadow passwords. What is it suggested to do ?
> >
>
> AuthBy UNIX will read the entire password file into memory (and re-read the
> file if it is modified), so the performance is very good.
>
> AuthBy SYSTEM will use the system calls to ask for a user record, so depending
> on your system this can be significantly slower.
>
> See sections 6.21 and 6.31 in the reference manual for further details.
>
> There are also some indicative perfomance numbers in section 22.0 of the manual.
In fact, performance are not so important for me. What I observe is that the
process memory size is doubling with AuthBy UNIX (45 Mo !). That's why I will
choose AuthBy SYSTEM. In the same idea, is there a way to not load users file
at the radiusd start ? By this way, I will reduce the memory use of radiusd
and furthermore, I will not have to restart it each time I modify users file.
Other questions :
- what could be the interest of <Log SYSLOG> instead of <Log File> ?
- no problem to have several NAS (10) sending accounting in one detail file
(ex: locking problem ?) ?
- no problem of loss of accounting with radiator ? I remember that with GRIC
Traveler server has a Relog process...
- is it possible to define default check and reply items like :
Auth-Type = System
User-Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-Netmask = 255.255.255.0,
Framed-Routing = None,
Framed-MTU = 1500,
Ascend-Idle-Limit = 600
for each user instead of defining them in users file ?
In this case, do other entries in users file take precedence on default one ?
- futhermore, I noticed that when I have the same ""Filename %D/users"
directive for 2 different Real closures, the file is loaded twice. How to
avoid that ?
- finally, I have the following problem :
Thu Feb 10 15:19:56 2000: DEBUG: Radius::AuthFILE looks for match with p50fr
Thu Feb 10 15:19:56 2000: DEBUG: Radius::AuthFILE REJECT: Check item
User-Service-Type expression 'Framed-User' does not match '' in request
Thu Feb 10 15:19:56 2000: INFO: Access rejected for p50fr: Check item
User-Service-Type expression 'Framed-User' does not match '' in request
with :
<Realm>
<AuthBy FILE>
Filename %D/users
</AuthBy>
and :
p50fr Password = "fdsfdsfsdf",
User-Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-Address = 193.149.103.161,
Framed-Netmask = 255.255.255.240,
Ascend-Idle-Limit = 300
Thanks in advance for your help. Gildas.
>
> hth
>
> Hugh
>
> ps - et alors l'hiver a Paris? aujourd'hui on avait 39 degres ici ....
Ce n'est pas dr�le ;-) Comme d'habitude : 10 degr�s, vent et pluie !
>
> --
> Radiator: the most portable, flexible and configurable RADIUS server
> anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
> Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
> NT, Rhapsody
>
--
Gildas PERROT, [EMAIL PROTECTED] __o
FranceNet, 28 rue Desaix, 75015 Paris ---_ \<,_
http://www.francenet.fr ---- (_)/ (_)
�
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
