Re: Cisco-AVpair accounting client-mac-address with unlang

2010-01-08 Thread Bjørn Mork
Alan DeKok al...@deployingradius.com writes: Maybe something like: if (*Cisco-AVpair =~ /^client-mac-address=(.+)$/) { i.e. * means any one matches Is it ever useful to match on a single one? You'll always have a hard time knowing the order and number of attributes. I believe

Re: Calling-Station-Id

2010-01-08 Thread Bjørn Mork
Osmany osm...@oc.quimefa.cu writes: On Thu, 2010-01-07 at 09:06 -0500, Osmany wrote: On Thu, 2010-01-07 at 08:42 -0500, Michel Bulgado wrote: Bjørn Mork wrote: Michel Bulgado mic...@casa.co.cu writes: Try this way, remember the operator.

Re: Calling-Station-Id

2010-01-08 Thread Alan Buxey
Hi, I had the checkval line commented out. I just uncommented it and that's it. I also went further but commenting all of the modules that I did not need in the authorize section as well as in the preacct section. so things like the suffix, mschap, chap, etc I commented out so that

Re: radiusd -X On First Boot

2010-01-08 Thread Alan Buxey
Hi, I've modified the RPM to run /etc/raddb/certs/bootstrap if it's the initial install (not an upgrade) and /etc/raddb/certs/server.pem does not exist. This should remove the need to run the server in debug mode initially. Actually I had opened a bug report to myself a few months ago

Re: FreeBSD 8.0 port + perl hook problem

2010-01-08 Thread Nick Rogers
Thank's, I'll take a look. I was able to get things working by using libtool 1.5 instead of 2.2, but given that libtool and libltdl 1.5 are no longer in the latest FreeBSD ports tree, its a major PITA to get this going. On Thu, Jan 7, 2010 at 11:39 PM, Alan DeKok al...@deployingradius.comwrote:

Does FreeRadius support different replies for same user via check-attributes?

2010-01-08 Thread Tobbe Millan
Hi! I would like a specific request item to set which attribute to reply. For example... IF; A request comes with User-Name: XXX, Password: YYY and Attribute A = Go1 The Access-Accept should include Attribute Go=Service1 BUT IF; A request comes with User-Name: XXX, Password: YYY and Attribute

Re: Cisco-AVpair accounting client-mac-address with unlang

2010-01-08 Thread Bryan Campbell
See the following link and the associated reference posts. What you need is already built-in. It takes two steps (5 minutes) to get access to the attributes. The only question then is how you will format your SQL statements to write the attributes out to the database (another 5 minutes).

Re: Does FreeRadius support different replies for same user via check-attributes?

2010-01-08 Thread James J J Hooper
--On Friday, January 08, 2010 03:35:00 PM +0100 Tobbe Millan ejp2...@tninet.se wrote: Hi! I would like a specific request item to set which attribute to reply. For example... IF; A request comes with User-Name: XXX, Password: YYY and Attribute A = Go1 The Access-Accept should include

Re: Cisco-AVpair accounting client-mac-address with unlang

2010-01-08 Thread Joe Maimon
According to what I see turning on cisco vsa hack can overwrite any existing attributes that happen to match the value in the avpair and also seems to possibly delete information from the avpair -- its not clear to me exactly what it does. In any event, I just need to solve this little

Re: Cisco-AVpair accounting client-mac-address with unlang

2010-01-08 Thread Alan DeKok
Joe Maimon wrote: According to what I see turning on cisco vsa hack can overwrite any existing attributes that happen to match the value in the avpair The Cisco boxes don't send: Cisco-AVPair = foo = bar foo = bar *both* in the same packet. and also seems to possibly

Ang: Re: Does FreeRadius support different replies for same user via check-attributes?

2010-01-08 Thread Tobbe Millan
Thanks! Can unlang be used directly when reply attribute is set? I do not want to have a if-statement for each user. It would cause problems if I have hundreds of users... My hopes was that in mySQL (which I'm using) I could have 2 check attributes (for Go1 and Go2) and then directly set the

Re: Ang: Re: Does FreeRadius support different replies for same uservia check-attributes?

2010-01-08 Thread Gabriel Blanchard
we have about 60,000 users and having if-statements for every single one of them is not a problem... On 2010-01-08, at 10:50 AM, Tobbe Millan wrote: Thanks! Can unlang be used directly when reply attribute is set? I do not want to have a if-statement for each user. It would cause

Re: Cisco-AVpair accounting client-mac-address with unlang

2010-01-08 Thread Joe Maimon
Hi Alan, I could use vsa hack. But it is a hack and its impact is a bit larger than the actual functionality I want. I just want to leave everything else unchanged but to have the mac address represented as calling-station-id, which for anything ethernet and not POTS related, it is. unlang

Re: Cisco-AVpair accounting client-mac-address with unlang

2010-01-08 Thread Alan DeKok
Joe Maimon wrote: I could use vsa hack. But it is a hack and its impact is a bit larger than the actual functionality I want. I just want to leave everything else unchanged but to have the mac address represented as calling-station-id, which for anything ethernet and not POTS related, it is.

Re: Cisco-AVpair accounting client-mac-address with unlang

2010-01-08 Thread Joe Maimon
Alan DeKok wrote: Joe Maimon wrote: I could use vsa hack. But it is a hack and its impact is a bit larger than the actual functionality I want. I just want to leave everything else unchanged but to have the mac address represented as calling-station-id, which for anything ethernet and not

Re: FreeBSD 8.0 port + perl hook problem

2010-01-08 Thread Nick Rogers
FYI. I got it to work with libltdl/libtools 2.2 by enabling the function that uses the new libltdl API as you suggested. Thanks again . If anyone has the same problem, I had to add a patch to the FreeBSD port and upgrade it to FreeRADIUS 2.1.8. The following is the patch I added to the port in

BUG: 2.1.8

2010-01-08 Thread Коньков Евгений
Hi After installing FreeRadius 2.1.8 in 'sites-enabled' I notice new enables site: 'control-socket' In its header I have read: # For now, anyone who has permission to connect to the socket # has nearly complete control over the server. Be warned! # # This functionality is NOT

Re: BUG: 2.1.8

2010-01-08 Thread Alan DeKok
Коньков Евгений wrote: Hi After installing FreeRadius 2.1.8 in 'sites-enabled' I notice new enables site: 'control-socket' ... I think you must remove that from 'sites-enables' The default is to permit read operations only. i.e. the control socket cannot be used to *change* anything.

Re: FreeBSD 8.0 port + perl hook problem

2010-01-08 Thread Alan DeKok
Nick Rogers wrote: FYI. I got it to work with libltdl/libtools 2.2 by enabling the function that uses the new libltdl API as you suggested. Thanks again . If anyone has the same problem, I had to add a patch to the FreeBSD port and upgrade it to FreeRADIUS 2.1.8. The following is the patch I

rlm_sqlippool required?

2010-01-08 Thread John Kane
Is the rlm_sqlippool required when allocating IPs from an SQL DB? I am trying to set this up on a 1.1.3 install, and don't see that module. Thanks, John This message is confidential to Prodea Systems, Inc unless otherwise indicated or apparent from its nature. This message is directed to the

Re[2]: FreeBSD 8.0 port + perl hook problem

2010-01-08 Thread Коньков Евгений
Здравствуйте, Alan. Вы писали 8 января 2010 г., 20:48:23: AD Nick Rogers wrote: FYI. I got it to work with libltdl/libtools 2.2 by enabling the function that uses the new libltdl API as you suggested. Thanks again . If anyone has the same problem, I had to add a patch to the FreeBSD port

winbindd_privileged error?

2010-01-08 Thread freeradius
I had everything working fine, and now it's not. (I use the ldap module to auth) When I look through the logs, I'm getting a winbindd_privileged error. I've seen that before, where you apply: chgrp radiusd /var/cache/samba/winbindd_privileged chmod g+rw

Re: winbindd_privileged error?

2010-01-08 Thread James J J Hooper
--On 08 January 2010 17:14 -0500 freerad...@corwyn.net wrote: I had everything working fine, and now it's not. (I use the ldap module to auth) When I look through the logs, I'm getting a winbindd_privileged error. I've seen that before, where you apply: chgrp radiusd

Re: winbindd_privileged error?

2010-01-08 Thread James J J Hooper
--On 08 January 2010 22:24 + James J J Hooper jjj.hoo...@bristol.ac.uk wrote: --On 08 January 2010 17:14 -0500 freerad...@corwyn.net wrote: I had everything working fine, and now it's not. (I use the ldap module to auth) When I look through the logs, I'm getting a

Re: ld.so.1: radiusd: fatal: relocation error: file /usr/local/lib/rlm_sql_mysql-2.1.7.so: symbol mysql_next_result: referenced symbol not found

2010-01-08 Thread Nereida Bernal
Hi Alan. I've found the library but it is in another path: /usr/local/mysql-5.0.88-solaris10-sparc/lib/libmysqlclient.a /usr/local/mysql-5.0.88-solaris10-sparc/lib/libmysqlclient.so /usr/local/mysql-5.0.88-solaris10-sparc/lib/libmysqlclient.so.15

Mysql database

2010-01-08 Thread Noro Hasina
Hi all! I'm a project aim to take in place an hot spot with freeradius. I've installed freeradius with source in the freeradius web site, Now, I should create the database but, mysql.sql but I don't find it. Anyone could help me pliz. where can I get it please? Thank you! - List

Re: ld.so.1: radiusd: fatal: relocation error: file /usr/local/lib/rlm_sql_mysql-2.1.7.so: symbol mysql_next_result: referenced symbol not found

2010-01-08 Thread Alan DeKok
Nereida Bernal wrote: Hi Alan. I've found the library but it is in another path: .. How can I be sure if the dynamic linker can find it? Read the documentation for your operating system? Configuring a dynamic linker isn't a RADIUS problem. Alan DeKok. - List

Re: FreeBSD 8.0 port + perl hook problem

2010-01-08 Thread Alan DeKok
Коньков Евгений wrote: vpn# make Make.inc, line 83: Missing dependency operator Use gmake. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html