Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

(ASCEND) initial menu & ppp startup & no cmdline

We have a max 2000 running 6.0.4.  We also have a lot of users who have
dumb terminals or old software, and thus can't make an immediate
(framed) ppp connection, but need to go through a terminal interface to
start it.

Ideally, what I'd like is this:
1) such users get a login/password prompt when they connect (not the
   system password).
2) they then see an initial menu listing some hosts and `start ppp' as options.
3) they can't switch out of that menu to get to the command line.
4) the users are defined through radius, not on the max itself.

I guess my most important question is
How to enable ppp from the terminal server (i.e., unframed for
radius-defined users?

And my secondary questions are
- is it possible to define `start ppp' as a menu option in any way other
  than through an explicit ascend-menu-item for every user?
- is it possible to disable the 0 option in any way other than through
  ascend-menu-item?  The docs sure seem to say initialscrn=menu and
  togglescrn=no should do it, but they don't.


The details: I've been able to accomplish #1 above by setting
ethernet->mod config->tserv options->passwd to the empty string,
and ...->tserv options->security=full.

The others are eluding me, in various ways.  Here is what I've tried:

a) a simple radius entry, like this:
karl1    Password = "pw"
     Ascend-Assign-IP-Pool = 1
- I then define the host list in ...->tserv options->host #[123] text/addr
  and set tserv options->toggle scrn=no and initial scrn=menu.
- I get the login/password prompt, login as karl1, but then the 0 option to
  switch to the command line still works, despite toggle scrn=no.  ???
- When I try ppp from the command line that I shouldn't have been able to
  get to, it says `Requested Service Not Authorized'.
- And, there's no way to specify start ppp in the menu that I can see.

b) So I try a more complicated radius entry, like this:
karl2     Password = "pw"
     Ascend-Menu-Item = "myhost;myhost",
     Ascend-Menu-Item = "ppp;start ppp",
     Ascend-Assign-IP-Pool = 1
- Still with initial scrn=menu and toggle scrn=no.
- Now when I login as karl2 the 0 option does not work, this is good.
- But the ppp option still fails, as expected, `Requested Service Not
  Authorized'.

c) I also set up a user karl3 for myself on the max (in
ethernet->connections).  Logging in as karl3 gets me the same menu, 0
works, and ppp *does* work, presumably because I have
tserv options->ppp=yes.  The manuals state clearly that setting is
irrelevant to radius users, which is indeed my experience, but say
nothing that I can see about how to then enable ppp for them.


I feel like I'm missing something basic.  I did try various other radius
attributes, like User-Service, Framed-Protocols, etc., but none helped
the situation.  Is there some combination there I should be using?  Is
there something in the Ethernet->Answer profile that has to be done?

Any help appreciated.  I've tried dejanews/web/faq/manuals/etc., as I've
alluded to.  TIA.

karl@cs.harvard.edu
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>
Follow-Ups: