Radius policy multiple authenticator support
View Patent ↗A method for providing multiple authenticator support when responding to RADIUS Access Request messages is disclosed. The method for providing multiple authenticator support when responding to RADIUS Access Request messages includes receiving a RADIUS Access Request message, retrieving customer authentication information having a first and second authenticator value; attempting authentication against the first authenticator value, and in the event that a failure to authenticate occurs, then attempting authentication against the second authenticator value. In the event of a successful authentication against either the first or second authenticator value, a RADIUS Access Accept message is provided. Examples of first and second authenticator values include a UserName and a MAC address. The method for providing multiple authenticator support when responding to RADIUS Access Request messages provides advantages over single authenticator value systems known in the art.
1. A method performed by a RADIUS server for processing a RADIUS Access Request message, the method comprising:
receiving said RADIUS Access Request message at the RADIUS server;
retrieving a single-value customer authentication information comprising a first authenticator attribute and a second authenticator attribute from a Policy Manager Database to the RADIUS server;
authenticating said Access Request against said first authenticator attribute, and
when a successful authentication occurs, respond with a RADIUS Access Accept message; and
when a successful authentication does not occur, then
authenticating said Access Request against said second authenticator attribute, and
when a successful authentication occurs, respond with a RADIUS Access Accept; and
when a successful authentication does not occur, then
respond with a RADIUS Access Reject message.
2. The method as claimed in claim 1 wherein
said first authenticator attribute is a UserName.
3. The method as claimed in claim 2 wherein
said second authenticator attribute is a Media Access Control address.
4. The method as claimed in claim 1 wherein
said first authenticator attribute is a Media Access Control address.
5. The method as claimed in claim 4 wherein
said second authenticator attribute is a UserName.
6. A non-transitory machine readable storage medium encoded with instructions forexecution by a network processor within a RADIUS Server for processing a RADIUS Access Request message, the medium comprising:
instructions for receiving a RADIUS Access Request message at the RADIUS server;
instructions for retrieving a single-value customer authentication information comprising a first authenticator attribute and a second authenticator attribute from a Policy Manager Database to the RADIUS server;
instructions for authenticating said Access Request against said first authenticator attribute, and
when a successful authentication occurs, respond with a RADIUS Access Accept message; and
when a successful authentication does not occur, then
authenticating said Access Request against said second authenticator attribute, and
when a successful authentication occurs, respond with a RADIUS Access Accept; and
when a successful authentication does not occur, then respond with a RADIUS Access Reject message.
7. The non-transitory machine readable storage medium as claimed in claim 6 wherein the instructions specify that said first authenticator attribute is a UserName.
8. The non-transitory machine readable storage medium as claimed in claim 7 wherein the instructions specify that said second authenticator attribute is Media Access Control address.
9. The non-transitory machine readable storage medium as claimed in claim 6 wherein the instructions specify that said first authenticator attribute is a Media Access Control address.
10. The non-transitory machine readable storage medium as claimed in claim 9 wherein the instructions specify that said second authenticator attribute is a UserName.