How config the Linux to let the freeradius auto-boot when the rad ius bootup.

2005-10-25 Thread Yan-GTAC Li
Title: How config the Linux to let the freeradius auto-boot when the radius bootup. The Linux version is RedHat 9. Thanks a lot! Rico - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: recommended restart-wrapper for freeradius

2005-10-25 Thread Ilia Chipitsine
try using radiusd from inittab: r1:35:respawn:/usr/sbin/radiusd -f and do not forget to remove radiusd from /etc/rc.d/*** hi - we're having the freeradius 1.0.2 daemon dying occasionally for mysterious reasons - we're still investuigating the cause. however - when it dies the radiusd.pid

Re: counter with Session Octet Limit

2005-10-25 Thread Ilia Chipitsine
I did the same thing by: 1) adding quota script to authorize section, it just calculates how many bytes (if any) can be downloaded 2) patching VPN server in order to understand passed parameter Hello, I am using freeRadius 1.0.2, and I would like to limit weekly bandwidth for my VPN (

Fw: Billing and provisioning

2005-10-25 Thread Madhvi Gokool
Hi As an addendum to below:- Say the user has 500s of connection time left and he replenishes his account (36000 s)- is there another way apart from manually , that we can alter the Max-Monthly-Session ? - it should become 36500 s. We are assuming that the counter was not reset. M -

AW: SUSPENSION OF ACCOUNT

2005-10-25 Thread Marc . Werner
Hi, Perhaps you can write a shellscript which edits /etc/raddb/users ...it's just an idea. Cheers Marc -Ursprngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von maruna Gesendet: Dienstag, 25. Oktober 2005 10:48 An: 'FreeRadius users mailing

RE: counter with Session Octet Limit

2005-10-25 Thread Stefan A.
Gurus, I want to give the user a second chance to type his password correctly by using a radius challenge. I'm not sure how to do this and did not find anything about this in the documentation nor in my stored email of this list. What should happen: The user tries to authenticate using his

(no subject)

2005-10-25 Thread Fabio
Hi, is there an option to limit the number of Authentication Request of a user, if she uses a wrong password for x times? Thanks, Fabio - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Limiting Authentication Request on wrong password

2005-10-25 Thread Fabio
Hi, is there an option to limit the number of Authentication Request of a user, if she uses a wrong password for x times? Thanks, Fabio - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: SUSPENSION OF ACCOUNT

2005-10-25 Thread Nicolas Baradakis
maruna wrote: I use FreeRadius v 1.0.5 with postgresql 7.3.4 on redhat Linux ES3 and its been working well. However, I want to create accounts where these accounts will be suspended after let say a month and this suspension continue until the account is renewed manually. Can someone give

freeradius and mysql - no matching entry in db

2005-10-25 Thread Luqman H
i have fedora core 4 and freeradius-1.0.5 and this is what i do... # radtest luqe mypassword localhost 1812 testing123 Sending Access-Request of id 24 to 127.0.0.1:1812 User-Name = luqe User-Password = mypassword NAS-IP-Address = dns.mammiri.net NAS-Port = 1812

Re: Limiting Authentication Request on wrong password

2005-10-25 Thread Nicolas Baradakis
Fabio wrote: is there an option to limit the number of Authentication Request of a user, if she uses a wrong password for x times? There is no such option, but you can block an account after N failed login attempts by running a custom script or a custom SQL query when a request is rejected:

Issue an Access Challenge to retry password

2005-10-25 Thread Stefan A.
Gurus, I want to give the user a second chance to type his password correctly by using a radius challenge. I'm not sure how to do this and did not find anything about this in the documentation nor in my stored email of this list. What should happen: The user tries to authenticate using his

RE: SUSPENSION OF ACCOUNT

2005-10-25 Thread Jonathan De Graeve
I don't think it's possible with the module sqlcounter. You have to change the value of the attribute Expiration when the account is renewed. Its possible with Expiration AND/OR Sqlcounter J. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius and mysql - no matching entry in db

2005-10-25 Thread Lewis Bergman
Luqman H said: No matching entry in the database for request from user [luqe] but if i'm quering manually on mysql: mysql SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'luqe' ORDER BY id; +-+--+---+--++ | id | UserName |

SETUP DEFAULT- assigned profile

2005-10-25 Thread Global Net, LLC
How do I convert this to be used with freeradius? I am migrating from vircom radius over to freeradius Vircom radius (VopRadius) Used a file called profiles.txt in it you could assign extra attributes to the login for a group by the key Profile="" In their login attributes Anyway it

Re: freeradius and mysql - no matching entry in db

2005-10-25 Thread Luqman H
2005/10/25, Lewis Bergman [EMAIL PROTECTED]: mysql SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'luqe' ORDER BY id; +-+--+---+--++ | id | UserName | Attribute | Value| op |

Re: Profiles Text File

2005-10-25 Thread Alan DeKok
Global Net, LLC [EMAIL PROTECTED] wrote: My problem in migrating is that VOPRadius used a profiles.txt file to add certain items to a user login detail. items are called in the users logon text file as one of the items. username=billy password=1234 profile=smtpfilter FreeRADIUS does

Re: counter with Session Octet Limit

2005-10-25 Thread Alan DeKok
Stefan A. [EMAIL PROTECTED] wrote: I want to give the user a second chance to type his password correctly by using a radius challenge. I'm not sure how to do this and did not find anything about this in the documentation nor in my stored email of this list. You will have to write your own

Re: FreeRadius with NTLM

2005-10-25 Thread Alan DeKok
Jaygopal Upadhyay [EMAIL PROTECTED] wrote: Can anyone provide me with steps on how to configure FreeRadius to use samba and allow access to WI-FI to valid domain users? Read radiusd.conf. Look for ntlm_ath. Read samba's documentation to see how to configure it. Alan DeKok. - List

SQL NAS table

2005-10-25 Thread Alex M
Can some one point me to the documentation on use of SQL NAS table? So that I can add nas devices to the DB and not a text file? Thanks! - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: SQL NAS table

2005-10-25 Thread Guy Fraser
On Tue, 2005-25-10 at 12:52 -0400, Alex M wrote: Can some one point me to the documentation on use of SQL NAS table? So that I can add nas devices to the DB and not a text file? ...snip... There has been discussion on this in the past, here is a message I sent as a response to this list,

RE: SUSPENSION OF ACCOUNT

2005-10-25 Thread maruna
How can this one be done automatically after certain period of counts e.g. after a month of login? -Original Message- From: Edward Rempala [mailto:[EMAIL PROTECTED] Sent: Tuesday, October 25, 2005 5:59 PM To: [EMAIL PROTECTED]; 'FreeRadius users mailing list' Subject: RE: SUSPENSION OF

adding a stop packet

2005-10-25 Thread Chuck
We are using freeradius with mysql. Is there some kind of script to easily add a fake stop date/time to a user when one gets missed? Currently I am looking them up in the accounting table and manually editing the entry. Would like to find something that just takes username as input and creates

RE: SQL NAS table

2005-10-25 Thread Alex M
Ok I have this table, id SERIAL PRIMARY KEY, nasname VARCHAR(128), shortname VARCHAR(32) NOT NULL, typeVARCHAR(30), ports int4, secret VARCHAR(60) NOT NULL, community

RE: adding a stop packet

2005-10-25 Thread Michael Markstaller
I'm running something like this from crontab: UPDATE radacct SET AcctStopTime = FROM_UNIXTIME(unix_timestamp(AcctStartTime) + AcctSessionTime), AcctTerminateCause = 'NoStopRecv', AcctStopDelay = (unix_timestamp(now()) - (unix_timestamp(AcctStartTime) + AcctSessionTime)), AcctSessionTime =

RE: adding a stop packet

2005-10-25 Thread Jonathan De Graeve
I use automatic timestamps on update /default and run a script every minute to check if there are some records which hasn't been updated for 15minutes or more J. -- Jonathan De Graeve Network/System Administrator Imelda vzw Informatica Dienst 015/50.52.98 [EMAIL PROTECTED] -Oorspronkelijk

Cisco and No NAS-Port seen (checkrad)

2005-10-25 Thread Miguel
Hi, im having problems implementing simultaneous-use on a cisco AS5400, is the same problem addresses in this thread http://lists.cistron.nl/pipermail/freeradius-users/2005-March/041894.html Ok, i know what the problem is, but how can i instruct the cisco that it must send the NAS-Port

Denying /dev/null shell accounts

2005-10-25 Thread Scott Walker
Hi All, I have requirements that I prevent users with a shell of /dev/null from authenticating against freeradius server. Using the rpm provided with RHEL4.0: radiusd: FreeRADIUS Version 1.0.1 I am using the unix module and pam. /dev/null is not listed as a valid shell in /etc/shells, and

help newbie here

2005-10-25 Thread achan awungshi
Hello friends, can you please suggest me whether i can used this freeradius for caching/proxy server only ? If yes please let me know. thanking you. Regards, Achandash __ Yahoo! FareChase: Search multiple travel sites in one click.

Re: Cisco and No NAS-Port seen (checkrad)

2005-10-25 Thread Miguel
Jonathan De Graeve wrote: Depends on the nas. Which nas? Cisco AS5400 --- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: adding a stop packet

2005-10-25 Thread Chuck
On Tuesday 25 October 2005 03:54 pm, Alan DeKok wrote: Thanks all of you for the suggestions! Chuck [EMAIL PROTECTED] wrote: We are using freeradius with mysql. Is there some kind of script to easily add a fake stop date/time to a user when one gets missed? radzap. Alan DeKok. -

RE: help newbie here

2005-10-25 Thread Seferovic Edvin
If you mean for proxying the radius request - the answer is YES Regards -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of achan awungshi Sent: Dienstag, 25. Oktober 2005 23:13 To: freeradius-users@lists.freeradius.org Subject: help newbie here Hello

RE: SQL NAS table

2005-10-25 Thread Alex M
I have set the NAS table to to have values: Nasname: my ip addres Secret: testing123 When im trying to test the connection, on the server im getting unknown client... Why? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Guy Fraser Sent: Tuesday,

Re: Denying /dev/null shell accounts

2005-10-25 Thread Kevin Bonner
On Tuesday 25 October 2005 16:42, Scott Walker wrote: Hi All, I have requirements that I prevent users with a shell of /dev/null from authenticating against freeradius server. Using the rpm provided with RHEL4.0: radiusd: FreeRADIUS Version 1.0.1 I am using the unix module and pam.

Re: Freeradius and What's Up Gold Continued

2005-10-25 Thread gk
Without some thresholds* WUG is real painful so we have WUG up'n running with the following values to check our freeradius servers: - Poll Frequency: 1 (every 60 seconds) - Poll Timeout : 5 (seconds) - *Trigger:4 (generate notifications after 4 subsequent failures)

Changes to the current CVS snapshot

2005-10-25 Thread Alan DeKok
This doesn't apply to 1.0.x, but I've just made some changes to the current CVS to add the following features: - updated ERX dictionary (bug #284) - encrypt IP address data types (bug #283) - decrypt IP address data types (new code) - Support for Starent's 16/16-bit attributes As

Re: freeradius and mysql - no matching entry in db

2005-10-25 Thread Luqman H
if i include the user file, - rlm_sql_mysql: query: SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'luqe' AND usergroup.GroupName = radgroupreply.GroupName ORDER