Experience with xtRadius - or any other Radius server?

Every problem I have run into has been because of a typo. Secifically in the "agreed" common passphrase.

They all have to agree on what each one is. They don't have to be the same one for each system, but between trusts they do.

IOW: ( -> describes a trust)

A -> B and B -> A have to use the same password
B -> C and C -> B have to use the same password
C -> D and D -> C have to use the same password
D -> A and A -> D have to use the same password

C & A don't trust each other directly, but through D or B they do, and B & D don't trust each other directly but through A or C they do. That is only if you have the "domain" routing setup properly.

Now Domain routing isn't "DNS domain" it is more like "Windows Domain" or a King's Domain of Rule. So if any of them know the domain and how to check against it... you should be good to go.

You could also setup a single "Routing" radious authentication machine and have it trusted by eveything... then have it determine where to get auth info. Matter of choice I guess.

Post #63,982 by Yendor 11/20/02 6:36:00 AM Reply	Experience with xtRadius - or any other Radius server? Just wondering if there's someone out there with experience with a Radius server package. Gonna have to set up xtRadius and looking for someone to ping if I run into errors. Thanks. -YendorMike [link\|http://www.hope-ride.org/\|http://www.hope-ride.org/]
Post #63,988 by folkert 11/20/02 8:52:43 AM Reply	Remember... Every problem I have run into has been because of a typo. Secifically in the "agreed" common passphrase. They all have to agree on what each one is. They don't have to be the same one for each system, but between trusts they do. IOW: ( -> describes a trust) A -> B and B -> A have to use the same password B -> C and C -> B have to use the same password C -> D and D -> C have to use the same password D -> A and A -> D have to use the same password C & A don't trust each other directly, but through D or B they do, and B & D don't trust each other directly but through A or C they do. That is only if you have the "domain" routing setup properly. Now Domain routing isn't "DNS domain" it is more like "Windows Domain" or a King's Domain of Rule. So if any of them know the domain and how to check against it... you should be good to go. You could also setup a single "Routing" radious authentication machine and have it trusted by eveything... then have it determine where to get auth info. Matter of choice I guess. `[link\|mailto:curley95@attbi.com\|greg] - Grand-Master Artist in IT [link\|http://www.iwethey.org/ed_curry/\|REMEMBER ED CURRY!!!] Your friendly Homeland Security Officer reminds: Hold Thumbprint to Screen for 5 seconds, we'll take the imprint, or Just continue to type on your keyboard, and we'll just sample your DNA.`
Post #64,003 by boxley 11/20/02 9:21:00 AM Reply	give me a holler woxley at tampbay dot rr dot com will work for cash and other incentives [link\|http://home.tampabay.rr.com/boxley/resume/Resume.html\|skill set] "Fifty-one percent of a nation can establish a totalitarian regime, suppress minorities and still remain democratic." Correction: All that can be achieved with 51 percent of the voters!" Ilanna Mercer
Post #64,008 by Yendor 11/20/02 9:34:26 AM Reply	email sent woxley at tampabay dot rr dot com :) -YendorMike [link\|http://www.hope-ride.org/\|http://www.hope-ride.org/]
Post #64,082 by boxley 11/20/02 1:37:04 PM Reply	check for email subject update will work for cash and other incentives [link\|http://home.tampabay.rr.com/boxley/resume/Resume.html\|skill set] "Fifty-one percent of a nation can establish a totalitarian regime, suppress minorities and still remain democratic." Correction: All that can be achieved with 51 percent of the voters!" Ilanna Mercer

Welcome to IWETHEY!