Re: Modules cleanup

2002-10-19 Thread Alan DeKok
[EMAIL PROTECTED] wrote:
> I'm slightly change modules.c and modules.h in order to make
> module_list_free() public accessible. And I place call to
> this function in radiusd.c sig_fatal() function. 

  That won't work.  If it does, then it works by accident.Signal
call handling functions should do NO work, other than setting a
variable.


  So have sig_fatal() set a variable 'do_exit', and have the code in
the main loop after the select check for do_exit, on EINTR.  It can
then go to a special 'close and exit' routine.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Re: Binaries/Config & Multi Realm questions

2002-10-19 Thread Alan DeKok
"Tim D. McCracken" <[EMAIL PROTECTED]> wrote:
> I have built FreeRadius on my 'development' machine and want to copy the
> binaries and configuration over to multiple productions machines.  Is there
> a list or script anywhere that I can use to get all the necessary files.

  do:

R=~/tmp make install

  And the 'installation' should go into '~/tmp/usr/local/bin/radiusd',
etc.  You can then create a 'tar' file from ~/tmp, and un-tar it to
install it on different machines.

> As I recall from previous postings, I need to run multiple daemons to
> support multiple domains where the users are not providing the realms.

  I don't think so.  See 'doc/duplicate_users'

> Finally, where is there a list of all the variables available when
> configuring the MySql queries?  I have reviewed the .conf file for MySql,
> and am curious if there are other variables available.

  doc/variables.txt ??

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Re: Time Limits

2002-10-19 Thread Mattt
On Sun, 2002-10-20 at 05:51, Roy Wills wrote:
> I am new to FreeRadius and am wondering if there is a way to block web access during 
>certain times of the day. I am using a web proxy program that authenticates through 
>FreeRadius and need 
> to block access to certain users between say 6 pm and 6am. Is that possible with 
>freeradius?

Yes, it's possible - but made terribly difficult by the fact that you
may need to actually read the documentation with the source, or even on
the web site, or (in the case of your particular question) in one of
thousands of such postings to the list... Unfortunately, documentation
and advice on how to set up what you're after is *everywhere* - you may
need to t(h)read carefully (hehe), for fear that said info may jump out
and bite you on the... erm... I'm sure you get the picture *grin*...

-- 
Cheers,
 Mattt.  icq   : 117539757 
 aboveNetworks   www   : www.above.nq4u.net
 [EMAIL PROTECTED]jabber: [EMAIL PROTECTED]
 
   What's got four legs and an arm?  A happy Pit Bull...


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Time Limits

2002-10-19 Thread Roy Wills
I am new to FreeRadius and am wondering if there is a way to block web access during 
certain times of the day. I am using a web proxy program that authenticates through 
FreeRadius and need 
to block access to certain users between say 6 pm and 6am. Is that possible with 
freeradius?

Thanks in advance



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



this Error in log: What does it mean ?

2002-10-19 Thread Gian-Carlo Baldarelli
Radius 0.7.1

Login ok, but first line indicate one error

Fri Oct 18 23:10:41 2002 : Error: rlm_sql_authorize: no rows returned from
query (no such user)
Fri Oct 18 23:10:41 2002 : Auth: Login OK: [giancarlo] (from nas easy@1
port 22555 cli 43746040)

What kind ok error is ?


my config

mysql> select * from radcheck;
++---+---+--+--+
| id | UserName  | Attribute | Value| op   |
++---+---+--+--+
|  1 | giancarlo | User-Password | hp3ehp3  | NULL |
++---+---+--+--+

mysql> select * from radgroupcheck;
++---+---++--+
| id | GroupName | Attribute | Value  | op   |
++---+---++--+
|  1 | stop  | Auth-Type | reject | :=   |
++---+---++--+

mysql> select * from radgroupreply;
++---+---+---+--+--+
| id | GroupName | Attribute | Value | op   | prio |
++---+---+---+--+--+
|  1 | dialin| Auth-Type | PAP   | NULL |0 |
++---+---+---+--+--+
1 row in set (0.00 sec)

mysql> select * from radreply;
Empty set (0.00 sec)


mysql> select * from usergroup;
++---+---+
| id | UserName  | GroupName |
++---+---+
|  1 | giancarlo | dialin|
++---+---+
2 rows in set (0.00 sec)


==


authorize {
preprocess
#chap
#counter
#attr_filter
#eap
suffix
sql
files
}

###
==
# Authentication.
#

authenticate {
#   unix
#   mschap
#   authtype CHAP {
#   chap
#   }
#   authtype PAP {
#   pap
# }
#sql
#
}

#==
accounting {
  detail
sql
  radutmp
}


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Modules cleanup

2002-10-19 Thread delphi
Hi!

I'm slightly change modules.c and modules.h in order to make
module_list_free() public accessible. And I place call to
this function in radiusd.c sig_fatal() function. At now after
killing radiusd there is correct cleanup of rlm_sql module
at least (so connection to sql server is correctly closes).

Are my changes correct? (question for developers especially).


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Re: Access_attr not working??

2002-10-19 Thread Kostas Kalevras
On Fri, 18 Oct 2002, Josh Kleensang wrote:

>
> I can't seem to get access rejected when I have
> dialupAccess = false (and access_attr = "dialupAccess" and
> access_attr_used_for_allow = yes).
> I have tried the latest CVS snapshot... and this
> was working with versions prior to 0.7. (well at least .5)
>
> Thanks.

See doc/rlm_ldap:
If it exists and is set to FALSE the user is denied remote access.
^

So you need to set it to FALSE ,not false.

--
Kostas Kalevras Network Operations Center
[EMAIL PROTECTED]  National Technical University of Athens, Greece
Work Phone: +30 210 7721861
'Go back to the shadow' Gandalf


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html