On Apr 16, 10:09am, me wrote:
> Subject: Re: (RADIATOR) replyattr and fixed ip's
> Hi I understood all but part 3

I meant that you should check that your NAS will allocate an address from its
pool if and only if there was no static address sent back by Radiator. Thats
the normal behaviour for a NAS, but you should check.

Cheers.


>
> I assume you meant, that the pool specified in our NAS does not contain
> any of the statis IP's
>
> Iqbal
>
> Mike McCauley wrote:
> >
> > Hello Iqbal,
> >
> > On Apr 15, 11:54am, me wrote:
> > > Subject: (RADIATOR) replyattr and fixed ip's
> > > Hi
> > >
> > > I origiannly used to have asimple query which authenticated users fine
> > > select Password etc etc , however I now want to assign some of my users
> > > with fixed IP addresses (they are currently assigned from a pool in our
> > > NAS).
> > OK, should be no problem.
> >
> > >
> > > The fixed IP's used to be assigned from the flat radius users file
> > > Fixed-IP-Address=xxx.xxx.xxx.xxx
> > I guess you mean Framed-IP-Address, but fine.
> >
> > >
> > > However when i went down the sql route I cant seem to assign these fixed
> > > IP, the "normal" customers work fine.
> > >
> > > Then i decided to alter the Authselect statement
> > >
> > > ...select PASSWORD,CHECKATTR,REPLYATTR from SUBSCRIBERS where
> > > USERNAME='%n'
> > Hmm, its a bit hard to tell without seeing your config file, but I would
> > suggect this approach:
> >
> > 1. Make a new column in your database for the framed ip address, call it,
say
> > FRAMEDIPADDRESS.
> >
> > 2. use this in your config file:
> >         AuthSelect select PASSWORD,FRAMEDIPADDRESS from SUBSCRIBERS \
> >                 where USERNAME='%n'
> >         AuthColumnDef 0,User-Password,check
> >         AuthColumnDef 1,Framed-IP-Address,reply
> >
> > Then, whenever a user has an entry in FRAMEDIPADDRESS, it will be used to
set
> > Framed-IP-Address in the reply. If FRAMEDIPADDRESS is NULL, then it will
not be
> > set in the reply.
> >
> > 3. Make sure your NAS uses a pool adddress of a static address is not
supplied
> > by radius.
> >
> > (it _is_ possible to do something similar using REPLYATTR as you are
trying,
> > but its a bit harder to set up, and wastes some space)
> >
> > Hope that helps.
> >
> > Cheers.
> >
> > >
> > > now nothing gets access no dynamic IP customers or fixed.
> > >
> > > I had a look at the logfile, and in there it does say Access Accept
> > >
> > > Thu Apr 15 10:57:34 1999: DEBUG: Handling request with Handler 'Realm='
> > > Thu Apr 15 10:57:34 1999: DEBUG: Handling with Radius::AuthSQL
> > > Thu Apr 15 10:57:34 1999: DEBUG: Query is: select PASSWORD, CHECKATTR,
> > > REPLYATTR
> > >
> > >   from SUBSCRIBERS where USERNAME='mirza'
> > >
> > > Thu Apr 15 10:57:34 1999: DEBUG: Radius::AuthSQL looks for match with
> > > mirza
> > > Thu Apr 15 10:57:34 1999: DEBUG: Packet dump:
> > > *** Sending to 193.218.160.68 port 3760 ....
> > > Code:       Access-Accept
> > > Identifier: 13
> > > Authentic:  7<21><196>u<0>u<24><188><0><0>M<1><0><0>l<153>
> > > Attributes:
> > >         Service-Type = Framed
> > >         Framed-Protocol = PPP
> > >         Framed-IP-Netmask = 255.255.255.0
> > >         Framed-Routing = None
> > >         Framed-MTU = 1500
> > >         Framed-Compression = Van-Jacobson-TCP-IP
> > >
> > > etc etc
> > >
> > > but they get an entry into the accounting logs, then disconnect. the
> > > fixed Ips dont even get that far.
> > >
> > > My CheckATTR in the db is NULL, but the replies are the ones above. I
> > > havent got any replies for fixed IP ones cause they dont get that far.
> > >
> > > Iqbal
> > >
> > > ===
> > > To unsubscribe, email '[EMAIL PROTECTED]' with
> > > 'unsubscribe radiator' in the body of the message.
> > >-- End of excerpt from me
> >
> > --
> > Mike McCauley                               [EMAIL PROTECTED]
> > Open System Consultants Pty. Ltd            Unix, Perl, Motif, C++, WWW
> > 24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
> > Phone +61 3 9598-0985                       Fax   +61 3 9598-0955
> >
> > Radiator: the most portable, flexible and configurable RADIUS server
> > anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
> > Platypus, Freeside, external, etc etc on Unix, Win95/8, NT, Rhapsody
>
> ===
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
>-- End of excerpt from me



-- 
Mike McCauley                               [EMAIL PROTECTED]
Open System Consultants Pty. Ltd            Unix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985                       Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, external, etc etc on Unix, Win95/8, NT, Rhapsody
===
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

Reply via email to