mysql woes

2005-11-30 Thread Ayres G.J.

Hello all,
I have freeradius-1.0.5 running using mysql, and have some questions
I have been unable to resolve or find any answers too.

If I have the below entry in my radcheck table, and the appropriate info in
the proxy.conf I can log in to my 802.1x network using WPA and EAP fine, and
the request is forwarded and accepted. 

mysql> SELECT * from radcheck;
++--+++---+
| id | UserName | Attribute  | op | Value |
++--+++---+
|  1 | gaz1 | proxy-to-realm | := | uwsradius |
++--+++---+
1 row in set (0.00 sec)

This does not result in any of the accounting taking place into the db tho,
only the post_auth accouting is done in the radpostauth table. Is this
because the connection is proxied? (sqltrace does not contain any attepts to
log any accounting except the postauth stuff).

I had some experimental entries in my user file that did dynamic VLAN'ing,
and now I want to put them into the mysql database. 

They were :

gaz1 NAS-IP-Address==x.x.x.x, Proxy-To-Realm := uwsradius
Frame-Type := Framed,
Tunnel-Medium-Type:1 := IEEE-802,
Tunnel-Type:1 := VLAN,
Tunnel-Private-Group-ID:1 := 667

How do I put this information into the mysql database? I have tried creating
a group and adding it to radgroupcheck, and adding it as separate lines in
radcheck which does not work. (as seen below) I don't get any errors or
anything to work with, so I am stuck.

++---+---++--+
| id | GroupName | Attribute | op | Value|
++---+---++--+
|  1 | comms | Frame-Type| := | Framed   |
|  3 | comms | Tunnel-Medium-Type:1  | := | IEEE-802 |
|  4 | comms | Tunnel-Type:1 | := | VLAN |
|  5 | comms | Tunnel-Private-Group-ID:1 | := | 667  |
++---+---++--+
4 rows in set (0.00 sec)

Thanks for anyhelp,
Gareth.

- - - - - - - - - - - - - - - -
Gareth Ayres
Wireless Network Officer
Library & Information Services
University of Wales Swansea,
Singleton Park,
Wales, UK
SA2 8PP
e-mail: [EMAIL PROTECTED]

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: mod_auth_radius values

2005-08-19 Thread Ayres G.J.
Hi,
I have written a php script that lists the request and response
headers, the result of which is below:

Request Headers
Accept: */*
Accept-Language: en-gb
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Host: xx
Connection: Keep-Alive
Authorization: Basic bHNreVJlZ2o6ZnSpZGF5Mw==
Cookie: foo=bar

Response Headers
Set-Cookie: RADIUS=51f673efff8c5h235410d95289666de85305b928; path=/;
X-Powered-By: PHP/4.4.0

After the cookie is set the 'Set-Cookie' header appears in the Request
Header as 'Cookie: foo=bar;
RADIUS=51f673efff8c5h235410d95289666de85305b928;'.
(I have modified the values above slightly incase I am inadvertently sending
a username/password to the list ;)

Ive read through mod_auth_radius-2.0.c and it appears the cookie is a MD5
hash of the users information. So, is it possible to get the information
from the cookie?

Gareth.


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Alan
DeKok
Sent: 18 August 2005 16:25
To: FreeRadius users mailing list
Subject: Re: mod_auth_radius values 

"Ayres G.J." <[EMAIL PROTECTED]> wrote:
>   I am developing a web system that authenticates users to a web site
> through free radius using the mod_auth_radius module for apache. It all
> works fine, but I would like to get the username of the user that has
> authenticated for use on pages once they have authenticated. 

  It's in the HTTP headers.  The username & password are sent in every
request.

> I am not sure how to go about this. I guess that the values are set in a
> cookie or in the HTTP Headers by mod_auth_radius? Does anyone know a way I
> could retrieve the values, either through HTML or PHP?

  Not HTML.  Maybe PHP, if it allows you to get HTTP headers.  See the
module source code for where the headers are, and the PHP docs for how
to get at them.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


mod_auth_radius values

2005-08-18 Thread Ayres G.J.
Hello all,
I am developing a web system that authenticates users to a web site
through free radius using the mod_auth_radius module for apache. It all
works fine, but I would like to get the username of the user that has
authenticated for use on pages once they have authenticated. 

I am not sure how to go about this. I guess that the values are set in a
cookie or in the HTTP Headers by mod_auth_radius? Does anyone know a way I
could retrieve the values, either through HTML or PHP?

Thanks,
Gareth.

- - - - - - - - - - - - - - - -
Gareth Ayres
Wireless Network Officer
Library & Information Services
University of Wales Swansea,
Singleton Park,
Wales, UK
SA2 8PP
e-mail: [EMAIL PROTECTED]
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html