>>>>> "Stefan" == Stefan Paetow <[log in to unmask]> writes:
Stefan> Hi, As part of our work in this space, we?ve been working
Stefan> primarily with the Chargeable-User-Identity, but part of the
Stefan> older Wiki docs still appear to require the User-Name
Stefan> attribute to be set by the RADIUS server? Is this still
Stefan> required, and if so, for how long?
Username is required if your service wants to know the username.
The username will be what GSS-API returns to the application as the
username.
If no username is set then the connection will be treated as anonymous.
If your application looks at other attributes to make authorization
decisions then this is fine.
Making authorization decisions based on chargable-user-identity doesn't
seem like it uses that attribute correctly. As I understand things,
that attribute is intended for accounting purposes.
--Sam
|