RADIUS and mgetty
Gert Doering (gert@greenie.muc.de)
Sat, 7 Aug 1999 12:48:29 +0200
Hi,
On Thu, Aug 05, 1999 at 11:48:28AM +0200, Frank D. Cringle wrote:
> The usual case is that authentication and accounting are done by the
> program that mgetty starts, after it has accepted the call. For
> instance, if the caller wants to talk PPP, mgetty hands the line over
> to pppd and it is pppd that needs to talk to your radius server.
> Similarly for /bin/login if the caller wants a shell-prompt. There is
> no need for mgetty to get involved in this. Indeed, in the case of
> PPP, it doesn't make sense.
I agree. Better worded than my response :)
> The case of authenticating on the phone number is interesting. We
> have a terminal server[*] that can send radius queries based on
> calling number and called extension, before it even picks up the call.
> The answers influence whether the call is picked up and if so what
> services are offered. It seems to me that that should be done by an
> external program called by mgetty, rather than built in. If this
> program gives a positive response (pick up the call), it should also
> be able to tell mgetty how to handle the call - e.g., start pppd with
> a particular set of options.
Indeed. This can be done by "cnd-program" - mgetty runs this to help
deciding "shall I pick up this incoming call".
gert
--
Gert Doering
Mobile communications ... right now writing from *Berlin* :-))
... mobile phone: +49 177 2160221 ... or mail me: gert@greenie.muc.de