Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
(ASCEND) Radius Security Bug
For anyone who is using the Radius accounting files as a billing tool, this
may be of importance to you...
I just happened to be sitting and watching the terminal on the Max4048 this
morning and noticed a user getting logged in as "jdoe @nisa.net" (where
jdoe is, of course, the users name)... This worked...
I then went into the radius accouting logs and found:
User-Name = "jdoe @nisa.net"
However, if you parse your radius logs and take the username as-is, you
will obviously never see any time used by the user unless you parse the
User-Name field down from the space....
---------------------------------
Jamie Penner
Nisa Internet Technologies Inc.
Nanaimo, BC Canada
EMail: jpenner@nisa.net
URL: http://www.nisa.com
Ph: 250-751-1111
Fax: 250-758-3511
---------------------------------
++ Ascend Users Mailing List ++
To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd: <http://www.nealis.net/ascend/faq>
Follow-Ups: