configuration parameters for perl module in rlm_perl

2013-09-14 Thread Cornelius Kölbel
Hi list, is there are recommended way to pass configuration parameter to a rlm_perl module? My rlm_perl module, would need to have additional configuration parameters. I would like to avoid having the perl module read an additional configuration file. Is there a possibility to add such paramters

Re: configuration parameters for perl module in rlm_perl

2013-09-14 Thread Alan DeKok
Cornelius Kölbel wrote: I would like to avoid having the perl module read an additional configuration file. Then edit the source code to rlm_perl, and add those features. Is there a possibility to add such paramters somewhere in the freeradius config like in /etc/freeradius/modules/perl

Re: configuration parameters for perl module in rlm_perl

2013-09-14 Thread Cornelius Kölbel
Am 14.09.2013 14:50, schrieb Alan DeKok: Cornelius Kölbel wrote: I would like to avoid having the perl module read an additional configuration file. Then edit the source code to rlm_perl, and add those features. Is there a possibility to add such paramters somewhere in the freeradius

Re: Rlm_perl in func_authenticate

2013-09-02 Thread Mehdi Ravanbakhsh
thanks for your replay On Sep 2, 2013 12:36 AM, Alan DeKok al...@deployingradius.com wrote: Mehdi Ravanbakhsh wrote: i have some problem in Understanding of capability of Rlm_perl in authenticate ... if i use this : DEFAULT Auth-Type = Perl Fall-Through = yes then all

Rlm_perl in func_authenticate

2013-09-01 Thread Mehdi Ravanbakhsh
Hi All i have some problem in Understanding of capability of Rlm_perl in authenticate ... if i use this : DEFAULT Auth-Type = Perl Fall-Through = yes then all user authenticate be done with this Auth-Type ? So what is happen to PAP , CHAP module ? and what is the relation of all

Re: Rlm_perl in func_authenticate

2013-09-01 Thread Alan DeKok
Mehdi Ravanbakhsh wrote: i have some problem in Understanding of capability of Rlm_perl in authenticate ... if i use this : DEFAULT Auth-Type = Perl Fall-Through = yes then all user authenticate be done with this Auth-Type ? Yes. That's what you told it to do. So what

Re: rlm_perl hashes

2013-08-31 Thread Alan DeKok
Mehdi Ravanbakhsh wrote: If i remove SQL module in default (site enable) in any section then %RAD_CHECK hashes is still available in rlm_perl ? Yes. The modules are completely independent. In my plan i need to transfer all policy mechanism to my database (PostgreSQL) function but we

rlm_perl hashes

2013-08-30 Thread Mehdi Ravanbakhsh
Hello All If i remove SQL module in default (site enable) in any section then %RAD_CHECK hashes is still available in rlm_perl ? In my plan i need to transfer all policy mechanism to my database (PostgreSQL) function but we have some limitation in xlat , so i need to pass all value pairs from

rlm_perl issue

2013-08-22 Thread Dean, Barry
accounting record! Which is a lot at my site! 2) Errors If the socket set-up fails, the PAN::API module calls croak(), which on my system terminated FreeRADIUS, which seems like what would happen? Thu Aug 22 13:53:03 2013 : Error: rlm_perl: perl_embed:: module = /etc/raddb/perl.pl

Re: rlm_perl issue

2013-08-22 Thread Phil Mayers
On 22/08/13 16:46, Dean, Barry wrote: Anyone want to throw in 2 cents/pennies worth to this? Yep, don't do it like this. Instead, write the user/ip entries to a file using the linelog module, and use a long-running perl process to tail the file (using File::Tail) and post them to the PAN.

Re: RLM_PERL mysql disconnect : what is the preferred handling ?

2013-08-13 Thread Alan DeKok
itquestioner wrote: We've found in the freeradius wiki, that the correct way to manage connection to mysql is to initiate the connection in the CLONE function. But where should we put $dbh-disconnect() to be sure that any connection will also be closed ? Whatever the result of the request

RLM_PERL mysql disconnect : what is the preferred handling ?

2013-08-12 Thread itquestioner
Hi,   First question from beginners We've found in the freeradius wiki, that the correct way to  manage connection to mysql is to initiate the connection in the CLONE function. But where should we put $dbh-disconnect() to be sure that any connection will also be closed ? Whatever the  result 

Freeradius 3.0 hints, rlm_perl

2013-07-21 Thread Thomas Glanzmann
. While trying that I also build a 3.0 GIT HEAD and there were a few problems, I trippeled about: - HINTS does not work the way it did before. Especially this no longer works for me: DEFAULT User-Name =~ ^v104([^@]+) User-Name := %{1}@V104.GMVL.DE - rlm_perl does

Re: Freeradius 3.0 hints, rlm_perl

2013-07-21 Thread Arran Cudbard-Bell
than it used to be. - rlm_perl does not seem to register itself as module correctly because I get the following error message as soon as I: ... authorize { update control { Auth-Type := perl } } ... Message is: (0) WARNING: Unknown value

Re: Freeradius 3.0 hints, rlm_perl

2013-07-21 Thread Thomas Glanzmann
/etc/freeradius/sites-enabled/default +- entering group authenticate {...} rlm_perl: Added pair User-Name = administra...@v104.gmvl.de rlm_perl: Added pair User-Password = Pa$$w0rd rlm_perl: Added pair NAS-IP-Address = 10.104.1.0 rlm_perl: Added pair Reply-Message = Enter SMS one time password

Re: Freeradius 3.0 hints, rlm_perl

2013-07-21 Thread A . L . M . Buxey
Hi, While trying that I also build a 3.0 GIT HEAD and there were a few problems, I trippeled about: - HINTS does not work the way it did before. Especially this no longer works for me: DEFAULT User-Name =~ ^v104([^@]+) User-Name := %{1}@V104.GMVL.DE I

Re: Freeradius 3.0 hints, rlm_perl

2013-07-21 Thread Thomas Glanzmann
Hello Arran, Can you provide a backtrace please? I'll see if I can fix it. Program received signal SIGSEGV, Segmentation fault. 0x08052f8a in rad_authenticate (request=0x863f138) at src/main/auth.c:542 542 (auth_item-da-attr == PW_USER_PASSWORD)) { (gdb) bt

Re: Freeradius 3.0 hints, rlm_perl

2013-07-21 Thread Arran Cudbard-Bell
On 21 Jul 2013, at 22:33, Thomas Glanzmann tho...@glanzmann.de wrote: Hello Arran, Can you provide a backtrace please? I'll see if I can fix it. Program received signal SIGSEGV, Segmentation fault. 0x08052f8a in rad_authenticate (request=0x863f138) at src/main/auth.c:542 542

Re: Freeradius 3.0 hints, rlm_perl

2013-07-21 Thread Thomas Glanzmann
Hello Alan, I bleieve hitns is going the way of the dodo eventually - unlang can do the work for you eg if (%{User-Name} =~ ^v104([^@]+) ) { update request { %{User-Name} := %{1}@V104.GMVL.DE } } I tried: server default { listen {

Re: Freeradius 3.0 hints, rlm_perl

2013-07-21 Thread Thomas Glanzmann
authenticate { (0) - entering group authenticate {...} rlm_perl: Added pair User-Name = bla rlm_perl: Added pair User-Password = fasel rlm_perl: Added pair Auth-Type = perl (0) [perl] = reject (0) Failed to authenticate the user. (0) Using Post-Auth-Type Reject (0) # Executing group from file

Re: Freeradius 3.0 hints, rlm_perl

2013-07-21 Thread Susan Brown
On 21 Jul 2013, at 23:17, Thomas Glanzmann tho...@glanzmann.de wrote: Hello Arran, Oh I have a pretty good idea of what's gone on. Could you git pull and rebuild. You'll probably see an abort this time round. I did a git pull # Wipe the working directory clean git reset --hard

Re: Freeradius 3.0 hints, rlm_perl

2013-07-21 Thread Arran Cudbard-Bell
On 21 Jul 2013, at 23:47, Susan Brown a.cudba...@freeradius.org wrote: On 21 Jul 2013, at 23:17, Thomas Glanzmann tho...@glanzmann.de wrote: Hello Arran, Oh I have a pretty good idea of what's gone on. Could you git pull and rebuild. You'll probably see an abort this time round. I

Re: Freeradius 3.0 hints, rlm_perl

2013-07-21 Thread Thomas Glanzmann
Hello Arran, Something was caching the pointer to request-password when it shouldn't have. Should be fixed now. I pulled the fix and can no longer reproduce the issue, I tried with 100 authentications in a row. Thank you for fixing it. Cheers, Thomas - List info/subscribe/unsubscribe?

rlm_perl not found

2013-06-28 Thread Thomas Hermarij Maimann Andersen
Hi, I have a yum install free radius which I'm trying to use the perl module. I am following the examples/instructions here http://wiki.freeradius.org/modules/Rlm_perl But I'm getting an error when starting radiusd. server { # from file /etc/raddb/radiusd.conf modules { Module: Creating

Re: rlm_perl not found

2013-06-28 Thread Scott Armitage
On 28 Jun 2013, at 12:30, Thomas Hermarij Maimann Andersen t...@itu.dk wrote: Hi, I have a yum install free radius which I'm trying to use the perl module. I am following the examples/instructions here http://wiki.freeradius.org/modules/Rlm_perl But I'm getting an error when starting

Re: Trucation of octet attribute handled by rlm_perl

2013-02-28 Thread Iliya Peregoudov
All attributes in rlm_perl scripts should be text. rlm_perl convert them to text before function call and convert them from text after function return. So you should use $RAD_REPLY{'DHCP-Classless-Static-Route'} = '0x'.unpack('H*', $route); On 28.02.2013 11:05, Бен Томпсон wrote: Hello

Re: Trucation of octet attribute handled by rlm_perl

2013-02-28 Thread Бен Томпсон
Many thanks for you help. 2013/3/1 Iliya Peregoudov iperegu...@cboss.ru: All attributes in rlm_perl scripts should be text. rlm_perl convert them to text before function call and convert them from text after function return. So you should use $RAD_REPLY{'DHCP-Classless-Static-Route'} = '0x

Trucation of octet attribute handled by rlm_perl

2013-02-27 Thread Бен Томпсон
Hello everyone I am having a slight problem with rlm_perl and I would really appreciate any advice/help. I have a perl script which rlm_perl adds a value to the DHCP-Classless-Static-Route attribute something like this :- perl script snippets ... my $route = pack('C7', split

rlm_perl RAD_REQUEST

2013-02-21 Thread Derek Wuelfrath
EHLO list! We're running into a strange issue here and would like the input of the FreeRADIUS community. Using rlm_perl with our own perl module for post_auth, everything is running smoothly until, for an unknown reason, it looks like the RAD_REQUEST hash is becoming empty. Here's a snippet

Need to change response type to Access-Challenge from rlm_perl

2013-02-18 Thread Walter Goulet
perl {...} rlm_perl: RAD_REQUEST: User-Name = test rlm_perl: RAD_REQUEST: User-Password = 42594190 rlm_perl: RAD_REQUEST: NAS-IP-Address = 192.168.65.1 rlm_perl: AMIS request: http://amis.jdt.com:8080/auth/authenticate/test/42594190 rlm_perl: Result after authamis call - true rlm_perl: RAD_REPLY: Reply

Re: Need to change response type to Access-Challenge from rlm_perl

2013-02-18 Thread Walter Goulet
; } Here is the relevant debug output: Found Auth-Type = perl # Executing group from file /opt/app/freeradius/etc/raddb/sites-enabled/default +- entering group perl {...} rlm_perl: RAD_REQUEST: User-Name = test rlm_perl: RAD_REQUEST: User-Password = 42594190 rlm_perl: RAD_REQUEST

rlm_perl changing User-Name and proxy requests

2013-01-11 Thread Ti Leggett
I have an issue with rlm_perl changing the request User-Name attribute but the proxy request not honoring it. First I'll describe what I'm trying to accomplish and why and then what I'm doing. I'm running a branch of 2.2.1 that has some krb5 realm fixes in it. I have multiple realms that users

Re: rlm_perl changing User-Name and proxy requests

2013-01-11 Thread A . L . M . Buxey
hi, dont play with User-Name, update/modify Stripped-User-Name instead and use that in the authn/authz stages alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_perl changing User-Name and proxy requests

2013-01-11 Thread Ti Leggett
On Jan 11, 2013, at 2:32 PM, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: [snip] Yeah it'll just bog down your LDAP server instead. You should use rlm_cache to cache the result of the LDAP lookup (once you have all this working)*. Have you added nostrip for all the realms? The

Re: rlm_perl changing User-Name and proxy requests

2013-01-11 Thread Arran Cudbard-Bell
On 11 Jan 2013, at 19:58, Ti Leggett legg...@mcs.anl.gov wrote: I have an issue with rlm_perl changing the request User-Name attribute but the proxy request not honoring it. First I'll describe what I'm trying to accomplish and why and then what I'm doing. I'm running a branch of 2.2.1

Re: rlm_perl changing User-Name and proxy requests

2013-01-11 Thread Phil Mayers
not sure rlm_perl does the same? If that is the case, OP may find that putting the new username in an interim / temp variable then forcing update via unlang works: authorize { ... myperl update request { User-Name := %{The-Var} } ... } This is a WAG though... - List info/subscribe

Re: rlm_perl changing User-Name and proxy requests

2013-01-11 Thread Ti Leggett
On Jan 11, 2013, at 2:35 PM, a.l.m.bu...@lboro.ac.uk wrote: hi, dont play with User-Name, update/modify Stripped-User-Name instead and use that in the authn/authz stages How do I get the remote servers I'm proxying for to understand Stripped-User-Name. As far as I can tell

Re: rlm_perl changing User-Name and proxy requests

2013-01-11 Thread Arran Cudbard-Bell
attribute? It is, request-username appears to be pointing to the original User-Name pair instead of the new perl one. AFAICT the pairmove code handles this specially (fixup) but I'm not sure rlm_perl does the same? Yes, unfortunately. That would have been a nice simple fix. https://github.com

Re: rlm_perl changing User-Name and proxy requests

2013-01-11 Thread A . L . M . Buxey
Hi, How do I get the remote servers I'm proxying for to understand Stripped-User-Name. As far as I can tell Stripped-User-Name isn't even in the Access-Request to the proxyied server. ah, missed the proxy bit. as Phil says, use a temp value and then set User-Name to that just before the

Re: rlm_perl changing User-Name and proxy requests

2013-01-11 Thread Ti Leggett
On Jan 11, 2013, at 3:21 PM, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: @leggett If you don't mind rebuilding the server, could you change: https://github.com/FreeRADIUS/freeradius-server/blob/v2.x.x/src/main/modcall.c#L686 And add: RDEBUG(Cached username is \%s\, list

Re: rlm_perl changing User-Name and proxy requests

2013-01-11 Thread Arran Cudbard-Bell
Just after modcall_single() Or call_modsingle even... -Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_perl changing User-Name and proxy requests

2013-01-11 Thread Arran Cudbard-Bell
On 11 Jan 2013, at 20:51, Ti Leggett legg...@mcs.anl.gov wrote: On Jan 11, 2013, at 2:35 PM, a.l.m.bu...@lboro.ac.uk wrote: hi, dont play with User-Name, update/modify Stripped-User-Name instead and use that in the authn/authz stages How do I get the remote servers I'm proxying

Re: share information between authorize and authenticate sections (rlm_perl rlm_python)

2012-12-13 Thread Alan Buxey
Hi, in perl, i could write some new attributes in RAD_CHECK ??, then authenticate() will access them. in python, attributes are read only, so i cannot use them to pass information to authenticate(). A simple database, like redis, could be a solution by adding info with the id of the

Re: share information between authorize and authenticate sections (rlm_perl rlm_python)

2012-12-13 Thread Phil Mayers
On 12/12/12 22:04, laurent.fe...@free.fr wrote: Hello, If someone can advise me... How to share information between the authorize() function and the authenticate() function within a perl or python script ? Just set an attribute: authorize { update request { Tmp-String-0 :=

Re: share information between authorize and authenticate sections (rlm_perl rlm_python)

2012-12-13 Thread laurent . feron
and authenticate sections (rlm_perl rlm_python) On 12/12/12 22:04, laurent.fe...@free.fr wrote: Hello, If someone can advise me... How to share information between the authorize() function and the authenticate() function within a perl or python script ? Just set an attribute: authorize

share information between authorize and authenticate sections (rlm_perl rlm_python)

2012-12-12 Thread laurent . feron
Hello, If someone can advise me... How to share information between the authorize() function and the authenticate() function within a perl or python script ? For example, i get some information from a database in authorize() that will reuse it in authenticate()? I could resubmit the sql request

Re: share variables in perl script (rlm_perl)

2012-12-05 Thread laurent . feron
variables in perl script (rlm_perl) Hello Laurent, Meaning, when i start the first radtest that modifies the global variable, only the sixth request can view the global variable modified by the first request( i guess the sixth one turns into the first thread). I had the very same problem

Re: share variables in perl script (rlm_perl)

2012-12-04 Thread laurent . feron
, and not public. Regards, Laurent - Mail original - De: Iliya Peregoudov iperegu...@cboss.ru À: FreeRadius users mailing list freeradius-users@lists.freeradius.org Envoyé: Mardi 4 Décembre 2012 08:14:13 Objet: Re: share variables in perl script (rlm_perl) Arran Cudbard-Bell wrote: On 29 Nov 2012

Re: share variables in perl script (rlm_perl)

2012-12-04 Thread John Dennis
On 12/04/2012 09:30 AM, laurent.fe...@free.fr wrote: Hello, thanks for your respond. I tried memcached as suggested by John Denins. Seems working very well. i thought of Redis, if memcached does not satisfied me (i don't see), Redis could be an option. In term of security, i have to be sure

Re: share variables in perl script (rlm_perl)

2012-12-03 Thread Iliya Peregoudov
Arran Cudbard-Bell wrote: On 29 Nov 2012, at 22:14, laurent.fe...@free.fr wrote: Hello, In a perl script (where authorize() and authenticate() are defined), i was able to set a global variable. when a radius request comes, the script may modify the variable, and the next request has the new

share variables in perl script (rlm_perl)

2012-11-29 Thread laurent . feron
Hello, In a perl script (where authorize() and authenticate() are defined), i was able to set a global variable. when a radius request comes, the script may modify the variable, and the next request has the new value. I test with radiusd -X, and everything is fine. when radiusd is started as

Re: share variables in perl script (rlm_perl)

2012-11-29 Thread Arran Cudbard-Bell
On 29 Nov 2012, at 22:14, laurent.fe...@free.fr wrote: Hello, In a perl script (where authorize() and authenticate() are defined), i was able to set a global variable. when a radius request comes, the script may modify the variable, and the next request has the new value. I test with

Re: share variables in perl script (rlm_perl)

2012-11-29 Thread John Dennis
On 11/29/2012 05:14 PM, laurent.fe...@free.fr wrote: Hello, In a perl script (where authorize() and authenticate() are defined), i was able to set a global variable. when a radius request comes, the script may modify the variable, and the next request has the new value. I test with radiusd -X,

rlm_perl without DynaLoader

2012-11-22 Thread Julius Plenz
Hi, when using rlm_perl with a very simple Perl script that does *not* use DynaLoader to load some *.so files, upon thread exit, FreeRADIUS (current v2.x.x branch) throws errors: Error: Could not get @DynaLoader::dl_librefs for unloading. The errors originate from rlm_perl_get_handles

Re: rlm_perl without DynaLoader

2012-11-22 Thread Alan DeKok
Julius Plenz wrote: when using rlm_perl with a very simple Perl script that does *not* use DynaLoader to load some *.so files, upon thread exit, FreeRADIUS (current v2.x.x branch) throws errors: Error: Could not get @DynaLoader::dl_librefs for unloading. That shouldn't be an error

Re: rlm_perl without DynaLoader

2012-11-22 Thread Julius Plenz
Hi, Alan! * Alan DeKok al...@deployingradius.com [2012-11-22 15:22]: Why is this an error case, rather than no libs, no unloading necessary? It's a minor bug. Thank you for the bug fix I found at

Re: rlm_perl without DynaLoader

2012-11-22 Thread Alan DeKok
Julius Plenz wrote: Hi, Alan! * Alan DeKok al...@deployingradius.com [2012-11-22 15:22]: Why is this an error case, rather than no libs, no unloading necessary? It's a minor bug. Thank you for the bug fix I found at

random questions on rlm_perl.c (was: rlm_perl and threads)

2012-11-16 Thread Edgar Fuß
Digging through the rlm_perl source, I stumbled over the following: 1. Is it on purpose that it normally checks USE_ITHREADS and only perl_xlat checks WITH_ITHREADS? 2. Is it also on purpose that radiusd::radog is newXS'd only after perl_parse()? That hit me because as it is, you can't log

Re: rlm_perl and threads

2012-11-15 Thread Edgar Fuß
To answer my own question: In the module init code, can I tell whether I'm in the threading case or not? Yes: use Config and check $Config{useithreads}. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_perl and threads

2012-11-14 Thread Edgar Fuß
Thanks, this has been very helpful. If I read the source correctly, it works as follows: -- A global interpreter is created that runs the module initialization code. -- When a perl function is going to be called, the global interpreter is used in the non-threading case. In the threading case, if

rlm_perl and threads

2012-11-05 Thread Edgar Fuß
Sorry if this sounds like a stupid question with an obvious answer, but I could not easily find this documented. If I have an rlm_perl script, is it possible that multiple instances of it are running concurrently due to FreeRADIUS' threading? - List info/subscribe/unsubscribe? See http

Re: rlm_perl and threads

2012-11-05 Thread Phil Mayers
On 05/11/12 12:34, Edgar Fuß wrote: Sorry if this sounds like a stupid question with an obvious answer, but I could not easily find this documented. If I have an rlm_perl script, is it possible that multiple instances of it are running concurrently due to FreeRADIUS' threading? Yes. Likely

Re: rlm_perl and threads

2012-11-05 Thread Edgar Fuß
Yes. Likely, even. Thanks. So will these then be two distinct Perl interpreters or two instances of the same Perl interpreter? From the Perl script's point of view, what will the two instances share? Can you hint me to any documentation covering this? - List info/subscribe/unsubscribe? See

Re: rlm_perl and threads

2012-11-05 Thread Phil Mayers
-server/blob/master/src/modules/rlm_perl/rlm_perl.c#L254 ...and the rest of that file. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_perl and threads

2012-11-05 Thread Sander Eerdekens
The old wiki used to contain more information on this. I'm currently in the process of making our rlm_perl module multithreaded as well. Some pointers: perl -V | grep -i multipl ... useithreads=define, usemultiplicity=define Compile-time options: HAS_TIMES MULTIPLICITY PERLIO_LAYERS check

Re: rlm_perl and dynamic_clients

2012-09-01 Thread Steven Eksteen
} } dynamic-clients-pl } } --- rad_recv: Access-Request packet from host 192.168.0.200 port 58738, id=36, length=212 server dynamic_client_server { rlm_perl: RAD_REQUEST: Packet-Src-IP-Address-0 = 192.168.0.200 rlm_perl: RAD_REPLY: FreeRADIUS-Client-Shortname = Internal rlm_perl: RAD_REPLY

Re: rlm_perl and dynamic_clients

2012-09-01 Thread Alan DeKok
-available? It contains *extensive* documentation and examples. rlm_perl: RAD_REPLY: FreeRADIUS-Client-Shortname = Internal You didn't read the documentation. Go do that. This is WELL DOCUMENTED. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_perl and dynamic_clients

2012-08-31 Thread Steven Eksteen
Hi, I was wondering how would I use Packet-Src-IP-Address using Perl for Dynamic Clients. I thought it might be part of the RAD_REQUEST hash. If some direction could be made as to setting FreeRADIUS-Client-Shortname, FreeRADIUS-Client-Secret, etc. too I would be very grateful. I already have Perl

Re: rlm_perl and dynamic_clients

2012-08-31 Thread Alan DeKok
Steven Eksteen wrote: I was wondering how would I use Packet-Src-IP-Address using Perl for Dynamic Clients. I'm wondering why you didn't read my previous message. You knowm the one you replied to, and quoted verbatim? The one that had the answer to your questions? I thought it might be

rlm_perl and dynamic_clients

2012-08-28 Thread Steven Eksteen
Hi, I was wondering how would I use Packet-Src-IP-Address using Perl for Dynamic Clients. I thought it might be part of the RAD_REQUEST hash. If some direction could be made as to setting FreeRADIUS-Client-Shortname, FreeRADIUS-Client-Secret, etc. too I would be very grateful. I already have Perl

Re: rlm_perl and dynamic_clients

2012-08-28 Thread Alan DeKok
Steven Eksteen wrote: I was wondering how would I use Packet-Src-IP-Address using Perl for Dynamic Clients. I thought it might be part of the RAD_REQUEST hash. It's not, but you can do: server dynamic_client_server { authorize { update request {

Re: rlm_perl and dynamic_clients

2012-08-28 Thread Steven Eksteen
Thank you. Much appreciated On Tue, Aug 28, 2012 at 4:14 PM, Alan DeKok al...@deployingradius.com wrote: Steven Eksteen wrote: I was wondering how would I use Packet-Src-IP-Address using Perl for Dynamic Clients. I thought it might be part of the RAD_REQUEST hash. It's not, but you can

Accessing nas ip with rlm_python and rlm_perl

2012-07-25 Thread Carl Pierre
Hello: Is it at all possible to access this information within these modules? I am trying to code different behavior in my code based on IP. Regards, - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Accessing nas ip with rlm_python and rlm_perl

2012-07-25 Thread Arran Cudbard-Bell
On 25 Jul 2012, at 14:57, Carl Pierre wrote: Hello: Is it at all possible to access this information within these modules? I am trying to code different behavior in my code based on IP. NAS-IP-Address yes, Client-IP-Address maybe not, i'd have to check the code… Are you definitely trying

Re: rlm_perl module not executing authenticate

2012-06-15 Thread Diego Matute
and it looks like best practice nowadays is to let the server figure it out and not set it explicitly in /etc/raddb/users, however it isn't being set. It isn't being set because the default distribution doesn't use rlm_perl. If you want to *force* usage of rlm_perl, you need to set Auth

Re: rlm_perl module not executing authenticate

2012-06-15 Thread Diego Matute
Got it. Thanks. On Wed, Jun 13, 2012 at 1:57 AM, Alan DeKok al...@deployingradius.comwrote: Diego Matute wrote: What is the best practice for this? Should the Auth-Type be set in /etc/raddb/users, within the module, /etc/raddb/sites-available/*? It should be set wherever you want.

Re: rlm_perl module not executing authenticate

2012-06-13 Thread Alan DeKok
Diego Matute wrote: What is the best practice for this? Should the Auth-Type be set in /etc/raddb/users, within the module, /etc/raddb/sites-available/*? It should be set wherever you want. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_perl module not executing authenticate

2012-06-12 Thread Alan DeKok
Diego Matute wrote: I've installed freeradius and other packages on a vanilla amazon ec2 instance and am trying to get the rlm_perl module working. Ultimately the authenticate function in the perl script is not being run. Here are the details. ... 1/ Request comes in and authorize is being

Re: rlm_perl module not executing authenticate

2012-06-12 Thread Diego Matute
Thanks for the quick response. Inline. On Tue, Jun 12, 2012 at 10:44 AM, Alan DeKok al...@deployingradius.comwrote: Diego Matute wrote: I've installed freeradius and other packages on a vanilla amazon ec2 instance and am trying to get the rlm_perl module working. Ultimately

Re: rlm_perl module not executing authenticate

2012-06-12 Thread Fajar A. Nugraha
.  It isn't being set because the default distribution doesn't use rlm_perl.  If you want to *force* usage of rlm_perl, you need to set Auth-Type. If you want to let the server just do the right thing, leave everything alone. What is the best practice for this? Should the Auth-Type be set

RE: rlm_perl added pairs disapear after eap authentication

2012-06-01 Thread Peter Kaagman
@lists.freeradius.org Onderwerp: rlm_perl added pairs disapear after eap authentication Hi there list, After getting (p)eap an mschap working I'm faced with the following problem: The client gets authenticated through mschap and receives an Access-Accept but the rlm_perl added pair which where added

Re: rlm_perl added pairs disapear after eap authentication

2012-06-01 Thread John Dennis
On 06/01/2012 09:08 AM, Peter Kaagman wrote: But it seems to be a bumpy road and ran into yet another problem: rlm_perl will not let me load modules. I found reference to this problem on the list in December 2009 in which Alan replied: Looking at het examples on the Wiki it seems other

rlm_perl added pairs disapear after eap authentication

2012-05-31 Thread Peter Kaagman
Hi there list, After getting (p)eap an mschap working I'm faced with the following problem: The client gets authenticated through mschap and receives an Access-Accept but the rlm_perl added pair which where added in request 0 are not send to the client. Resulting in a client ending up

Re: rlm_perl added pairs disapear after eap authentication

2012-05-31 Thread Alan DeKok
Peter Kaagman wrote: After getting (p)eap an mschap working I'm faced with the following problem: The client gets authenticated through mschap and receives an Access-Accept but the rlm_perl added pair which where added in request 0 are not send to the client. That's how the server works

RE: rlm_perl added pairs disapear after eap authentication

2012-05-31 Thread Peter Kaagman
no discussion there :D Funny thing is though... the attributes you tell me not to set in rlm_perl are set automagicly (at least to me it looks like magic at the moment)... I did not make them up ;) Neither do I manually set an auth-type other than a default one in the users file as instructed by the rlm_perl

Re: rlm_perl added pairs disapear after eap authentication

2012-05-31 Thread Alan DeKok
Peter Kaagman wrote: Funny thing is though... the attributes you tell me not to set in rlm_perl are set automagicly (at least to me it looks like magic at the moment)... I did not make them up ;) They're not set in the default configuration. Someone changed them. And it's local to you

Re: rlm_perl added pairs disapear after eap authentication

2012-05-31 Thread Matthew Newton
-Medium-Type := 6 Tunnel-Private-Group-Id := 999 } to the outer post-auth section. 3. Verify that the server a) works, and b) sends the above attributes in the Access-Accept (check the debug output). 4. Only after all the above, replace the update reply {} with rlm_perl, and work

Re: Accessing radwho information or accounting request from rlm_perl

2012-05-09 Thread Alan DeKok
eluna wrote: As you can see the NAS-IP-Address attributes are different, and I need a method to get the value of the accounting request because when I need to for example deauthenticate a user, i need to know what access point is is actually associated to. Any solutions or hints are very much

Accessing radwho information or accounting request from rlm_perl

2012-05-08 Thread eluna
I need to get the NAS-IP-Address attribute from the Accounting request and not from the Access request because because I am working with a WDS environment. These are the access and accounting requests: rad_recv: Access-Request packet from host 10.33.0.33 port 1645, id=36, length=211

Re: MAC-Auth issues with rlm_perl

2012-03-26 Thread Phil Mayers
on http://wiki.freeradius.org/Rlm_perl, but I get the following error: /etc/freeradius/users[204]: Parse error (check) for entry DEFAULT: Unknown value Perl for attribute Auth-Type Why are you trying to set Auth-Type to Perl? Since the requests are MSCHAP, unless you've written a full MSCHAP

MAC-Auth issues with rlm_perl

2012-03-25 Thread Glen Harris
a text file of MAC addresses. My script watches the file's mtime and re-loads it as necessary. I've followed the instructions on http://wiki.freeradius.org/Rlm_perl, but I get the following error: /etc/freeradius/users[204]: Parse error (check) for entry DEFAULT: Unknown value Perl for attribute

rlm_perl, aaa, dialup admin

2012-03-08 Thread Fabricio Flores
Hi... I have a lot of problems configuring freeRadius. First I have a web service and a perl client to obtain users and password from an external database. I used with rlm_perl with an script perl in the authetication func and it works... but i need to implement dialup admin (or daloradius

Re: confused by logging targets for rlm_perl

2012-02-22 Thread Alan DeKok
Olivier Bilodeau wrote: http://wiki.freeradius.org/Rlm_perl#Logging refers to: 0 - Debug 1 - Auth Those are wrong. See src/include/radiusd.h, L_DBG, etc. I've fixed the Wiki. I expected Debug not to go out in radius.log and Auth to do since I specified Auth to yes in radiusd.conf

confused by logging targets for rlm_perl

2012-02-21 Thread Olivier Bilodeau
Hi there! It's been a while.. François turned out to be our official freeradius-users correspondent lately ;) So, I'm changing some things in our rlm_perl module and tried to make a better use of the logging facilities provided by the freeradius core. http://wiki.freeradius.org/Rlm_perl#Logging

Re: rlm_perl and returning 1 attribute with same name

2012-02-20 Thread Johan Meiring
On 2012/02/17 02:38 PM, Mike wrote: Hello, I am using rlm_perl and I have an application where I would like to return possibly more than 1 Filter-Id in my response. In perl, the relevent code would be this: $RAD_REPLY{'Filter-Id'} = some_filter Unfortunately, this also will only create 1

rlm_perl and returning 1 attribute with same name

2012-02-17 Thread Mike
Hello, I am using rlm_perl and I have an application where I would like to return possibly more than 1 Filter-Id in my response. In perl, the relevent code would be this: $RAD_REPLY{'Filter-Id'} = some_filter Unfortunately, this also will only create 1 avpair by the name 'Filter-Id'. How

Re: rlm_perl and returning 1 attribute with same name

2012-02-17 Thread Pavel Klachan
using rlm_perl and I have an application where I would like to return possibly more than 1 Filter-Id in my response. In perl, the relevent code would be this: $RAD_REPLY{'Filter-Id'} = some_filter Unfortunately, this also will only create 1 avpair by the name 'Filter-Id'. How would I go about

Re: rlm_perl and Threaded Perl??

2012-02-14 Thread Simon Earthrowl
Hardware: based on ESX host: 4 core 2.1GHz processor (have 24 cores to play with) 8GB Memory (have more as needed) CentOS 5.7 x84_64 (latest patches) MySQL 5.5.20 - Same VM and supplied by Oracle FreeRadius 2.1.12-7 - complied here, with MySQL libraries for version 5.5.20

Re: rlm_perl and Threaded Perl??

2012-02-14 Thread Fajar A. Nugraha
On Tue, Feb 14, 2012 at 7:57 PM, Simon Earthrowl searthr...@eseye.com wrote: Hardware: based on ESX host:     4 core 2.1GHz processor (have 24 cores to play with)     8GB Memory (have more as needed) err ... that's not really much these days. Limitations so far:     4 million dial-in

Re: rlm_perl and Threaded Perl??

2012-02-14 Thread Alan DeKok
Simon Earthrowl wrote: Limitations so far: 4 million dial-in potential users (16 million gets a bit slow - so looking for other improvements) You need to design your solution VERY carefully. Scaling to 4M users isn't the same as 1K or 100K users. In bound transaction rate

  1   2   3   4   5   6   7   8   >