Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

(ASCEND) user-service, framed-protocol, ppp, telnet



When I define this radius user:

karl     Password = "pw"
     Ascend-Menu-Item = "ppp;start ppp",
     Ascend-Menu-Item = "telnet;telnet anywhere",
     Ascend-Assign-IP-Pool = 1

(no User-Service attribute!), the ppp option does not work (Requested
Service Not Authorized), while telnet does.  Grr.  Help?

I do have ethernet->mod config->tserv options->ppp = yes  on the max.

Ascend's radius configuration guide clearly states (p.1-17 in my copy):
  If [the User-Service] attribute is not specified, both framed and
  unframed services are available.

In fact, I tried various combinations of user-service and
framed-protocol, with the following results:

user-service unspecified and framed-protocol unspecified: telnet ok, can't ppp.
user-service unspecified and framed-protocol=ppp: telnet ok, can't ppp.
user-service=framed-user and framed-protocol unspecified: can't telnet, ppp ok.
user-service=framed-user and framed-protocol=ppp, starts ppp immediately.
user-service=shell-user, can't do anything.

Is it possible to define a radius entry so that the user can do either
one from an ascend-menu-item menu?  This doesn't seem too outlandish a
desire ... Obviously I could define two radius entries per user, one for
ppp and one for login, but equally obviously I'd rather not if I don't
have to.

This is version 6.0.4 on a max 2024, and ascend radius 1.16 from
ftp.ascend.com, if that might matter.

Web/manual/etc searches to no avail.  TIA.  

karl@cs.harvard.edu
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>