Re: IPv6 question, plus changelog not accessible?
Karl Auer wrote: I'm interesting in using FreeRADIUS with IPv6 (not as a RADIUS transport, but in an IPv6-enabled environment). It works. Looking at the roadmap for version 2, there is this little snippet, under the heading Done: IPv6 (not IPv6 home server realms, Raghu has a patch) What does not IPv6 home server realms mean? Nothing. Please read the configuration files that are shipped with the server for examples of how to configure IPv6. If you look at the development roadmap page on the Wiki, you'll see it was last edited April 2007. i.e. 8 months before 2.0 was released. If you read doc/ChangeLog that ships with the server, you will see full support for IPv6. I tried to find out more by looking at the change log, but the wiki wants me to log in to look at it; I don't have an account and can't see how to create one. It doesn't exist. The change log would be interesting for another reason too - I need to upgrade a server from 2.0.x to 2.1.1 sometime, and need to know if I can just install over the top or not. The server ships with a file called doc/ChangeLog. It contains a full list of changes. If you read the main freeradius.org page, it lists the changes for the most recent version. If you click on the 2.1.1 release on the right hand side of the page, it brings you to an HTML page that lists all of the changes for all versions released this year. The page also contains links to older releases, going back to 2005. If you just cd raddb, and then grep -i ipv6 *, you will see a lot of references to IPv6 in the clients proxy configuration files. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Is there a ChangeLog
Tacio Santos [EMAIL PROTECTED] wrote: I don't know how well is syslog in freeradius supported, but if freeradius can log to syslog, I think one could use syslog-ng to log it further to a database. The CVS snapshots support logging to syslog. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Is there a ChangeLog
Anson Rinesmith [EMAIL PROTECTED] wrote: That's my problem, I DON'T know how to tell them apart. Looking at any entry from the radius.log file, I don't know if it for my customers, ISP2 or ISP3. Using the 'cli' won't help as we have overlapping customer bases. So... how do you expect to be able to tell them apart if you had logging straight to SQL? Decide what information you need to distinguish users first, THEN work on how to log it, and where. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Is there a ChangeLog
-Original Message- From: [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Thursday, July 22, 2004 10:38 AM To: [EMAIL PROTECTED] Subject: Re: Is there a ChangeLog Anson Rinesmith [EMAIL PROTECTED] wrote: That's my problem, I DON'T know how to tell them apart. Looking at any entry from the radius.log file, I don't know if it for my customers, ISP2 or ISP3. Using the 'cli' won't help as we have overlapping customer bases. So... how do you expect to be able to tell them apart if you had logging straight to SQL? Decide what information you need to distinguish users first, THEN work on how to log it, and where. The only thing that makes sense is to distinguish this by the called number. This information is not in the log file of the version I have. My hope was that the newer versions might have the ability to sort the information or provide more information in the log for me to make that distinction. I'm obviously getting a NO on both cases. Where would be a good place for me to look, if I want to change the code to do what I need? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Is there a ChangeLog
On Thu, 22 Jul 2004, Anson Rinesmith wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Thursday, July 22, 2004 10:38 AM To: [EMAIL PROTECTED] Subject: Re: Is there a ChangeLog Anson Rinesmith [EMAIL PROTECTED] wrote: That's my problem, I DON'T know how to tell them apart. Looking at any entry from the radius.log file, I don't know if it for my customers, ISP2 or ISP3. Using the 'cli' won't help as we have overlapping customer bases. So... how do you expect to be able to tell them apart if you had logging straight to SQL? Decide what information you need to distinguish users first, THEN work on how to log it, and where. The only thing that makes sense is to distinguish this by the called number. This information is not in the log file of the version I have. My hope was that the newer versions might have the ability to sort the information or provide more information in the log for me to make that distinction. I'm obviously getting a NO on both cases. Where would be a good place for me to look, if I want to change the code to do what I need? Why can't you use the client part of the log? For instance: Auth: Login OK: [username] (from client prometheus port 176 cli cli) client part Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Kostas Kalevras Network Operations Center [EMAIL PROTECTED] National Technical University of Athens, Greece Work Phone: +30 210 7721861 'Go back to the shadow' Gandalf - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Is there a ChangeLog
-Original Message- From: [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] On Behalf Of Kostas Kalevras Sent: Thursday, July 22, 2004 11:26 AM To: [EMAIL PROTECTED] Subject: RE: Is there a ChangeLog On Thu, 22 Jul 2004, Anson Rinesmith wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Thursday, July 22, 2004 10:38 AM To: [EMAIL PROTECTED] Subject: Re: Is there a ChangeLog Anson Rinesmith [EMAIL PROTECTED] wrote: That's my problem, I DON'T know how to tell them apart. Looking at any entry from the radius.log file, I don't know if it for my customers, ISP2 or ISP3. Using the 'cli' won't help as we have overlapping customer bases. So... how do you expect to be able to tell them apart if you had logging straight to SQL? Decide what information you need to distinguish users first, THEN work on how to log it, and where. The only thing that makes sense is to distinguish this by the called number. This information is not in the log file of the version I have. My hope was that the newer versions might have the ability to sort the information or provide more information in the log for me to make that distinction. I'm obviously getting a NO on both cases. Where would be a good place for me to look, if I want to change the code to do what I need? Why can't you use the client part of the log? For instance: Auth: Login OK: [username] (from client prometheus port 176 cli cli) client part We are hosting multiple ISP's on the same RAS box. Looking at which client it came from doesn't help. I guess I could take the username and do a lookup into the database to find out whose customer that is. I appreciate everyone's input. I think I have enough ammo to dig in and get this done. I'll be sure to post my results (successful or not) back to the list. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Kostas Kalevras Network Operations Center [EMAIL PROTECTED] National Technical University of Athens, Greece Work Phone: +30 210 7721861 'Go back to the shadow' Gandalf - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Is there a ChangeLog
I don't have anything yet, I have found the squid2mysql stuff but have not had time to look at modifying it yet. Anson Rinesmith wrote: If you've got some code working for postgre, I'm sure I could port that to work for mysql. I'm willing to do the work, I just don't know where to get the differentiating information from freeradius so I know what ISP that user belongs to. Something based on Called-Station-ID like the users and acct_users file (DEFAULT Called-Station-Id == 1234567890, Proxy-To-Realm := ISP1) would be useful. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Is there a ChangeLog
Anson Rinesmith wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Wednesday, July 21, 2004 1:23 PM To: [EMAIL PROTECTED] Subject: Re: Is there a ChangeLog Anson Rinesmith [EMAIL PROTECTED] wrote: My biggest issue is that I want to bring in a second and third ISP to use our radius service. I want to present each ISP with their error log, without seeing the other ISPs errors. I am currently at a loss on how to do this. As I said, post-process them. If you can tell the messages apart when putting them into any theoretical DB, you can tell them apart when reading them from radiusd.conf. That's my problem, I DON'T know how to tell them apart. Looking at any entry from the radius.log file, I don't know if it for my customers, ISP2 or ISP3. Using the 'cli' won't help as we have overlapping customer bases. If you are using realms and they are not being stripped, they should appear in the log file. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Is there a ChangeLog
I think that is what I am going to try first. I guess a perl script that watches the radius.log file is the way to go. My perl is a big rusty, anyone that could get me on the right line, feel free to email me off list. arinesmith at bigrivertelephone.com I'll keep a close eye on my spam filter, so that if you get blocked, I can whitelist it through. Again, thanks to everyone for their responses. -Original Message- From: [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] On Behalf Of Guy Fraser Sent: Thursday, July 22, 2004 2:27 PM To: [EMAIL PROTECTED] Subject: Re: Is there a ChangeLog Anson Rinesmith wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Wednesday, July 21, 2004 1:23 PM To: [EMAIL PROTECTED] Subject: Re: Is there a ChangeLog Anson Rinesmith [EMAIL PROTECTED] wrote: My biggest issue is that I want to bring in a second and third ISP to use our radius service. I want to present each ISP with their error log, without seeing the other ISPs errors. I am currently at a loss on how to do this. As I said, post-process them. If you can tell the messages apart when putting them into any theoretical DB, you can tell them apart when reading them from radiusd.conf. That's my problem, I DON'T know how to tell them apart. Looking at any entry from the radius.log file, I don't know if it for my customers, ISP2 or ISP3. Using the 'cli' won't help as we have overlapping customer bases. If you are using realms and they are not being stripped, they should appear in the log file. I think that is what I am going to try first. I guess a perl script that watches the radius.log file is the way to go. My perl is a big rusty, anyone that could get me on the right line, feel free to email me off list. arinesmith at bigrivertelephone.com I'll keep a close eye on my spam filter, so that if you get blocked, I can whitelist it through. Again, thanks to everyone for their responses. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Is there a ChangeLog
Anson Rinesmith [EMAIL PROTECTED] wrote: This information is not in the log file of the version I have. My hope was that the newer versions might have the ability to sort the information or provide more information in the log for me to make that distinction. I'm obviously getting a NO on both cases. Where would be a good place for me to look, if I want to change the code to do what I need? src/main/auth.c, function rad_authlog(). The logging strings *should* be configurable in radiusd.conf... Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Is there a ChangeLog
Anson Rinesmith [EMAIL PROTECTED] wrote: I would like to find out what new features have been added since my version of FreeRADIUS. I looked but this was the best I found: It is a significant leap in functionality over 0.9.3, and contains too many bug fixes and feature enhancements to list in detail. Have you tried doc/ChangeLog? I'm looking specifically for what has changed in error reporting. Any new messages, can it be put to a DB, can it be separated by realm, etc. I'm not sure what you mean by that. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Is there a ChangeLog
My biggest issue is that I want to bring in a second and third ISP to use our radius service. I want to present each ISP with their error log, without seeing the other ISPs errors. I am currently at a loss on how to do this. -Original Message- From: [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Wednesday, July 21, 2004 1:02 PM To: [EMAIL PROTECTED] Subject: Re: Is there a ChangeLog Anson Rinesmith [EMAIL PROTECTED] wrote: Can the /var/log/radiusd.log file be sent to a database instead? Not currently. But you can write a script to post-process radiusd.log, and put it into a DB. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Is there a ChangeLog
Anson Rinesmith [EMAIL PROTECTED] wrote: My biggest issue is that I want to bring in a second and third ISP to use our radius service. I want to present each ISP with their error log, without seeing the other ISPs errors. I am currently at a loss on how to do this. As I said, post-process them. If you can tell the messages apart when putting them into any theoretical DB, you can tell them apart when reading them from radiusd.conf. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Is there a ChangeLog
On Wed, 21 Jul 2004, Anson Rinesmith wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Wednesday, July 21, 2004 9:06 AM To: [EMAIL PROTECTED] Subject: Re: Is there a ChangeLog Anson Rinesmith [EMAIL PROTECTED] wrote: I would like to find out what new features have been added since my version of FreeRADIUS. I looked but this was the best I found: It is a significant leap in functionality over 0.9.3, and contains too many bug fixes and feature enhancements to list in detail. Have you tried doc/ChangeLog? I'm looking specifically for what has changed in error reporting. Any new messages, can it be put to a DB, can it be separated by realm, etc. I'm not sure what you mean by that. Can the /var/log/radiusd.log file be sent to a database instead? I have written my own user interface and it would be much simpler if I could show my clients their error logs by querying a table, rather than parsing a file. You can use the perl script bin/log_badlogins from dialupadmin to log bad logins to the radacct. You can also use the post-auth section of the sql module to store authentication requests to the database. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Kostas Kalevras Network Operations Center [EMAIL PROTECTED] National Technical University of Athens, Greece Work Phone: +30 210 7721861 'Go back to the shadow' Gandalf - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Is there a ChangeLog
There was a program written to work with Squid that sent the logs to a database. It used a FIFO for the log file, so squid would write to the FIFO and The program would read from the FIFO. The program would decipher the logs and insert the relevant data into a table. I believe the program was written in Perl and was called squid2mysql or something like that. I think I may have ported it to PostgreSQL, I will see if I have it archived somewhere. I have considered making a rlm_log module but have not had time to delve into it yet. Once such a module exists having the data exported to a DB and file for redundancy, should not be too difficult. For now I will try to find the pipe based stuff, and see what I can do with it. Anson Rinesmith wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Wednesday, July 21, 2004 9:06 AM To: [EMAIL PROTECTED] Subject: Re: Is there a ChangeLog Anson Rinesmith [EMAIL PROTECTED] wrote: I would like to find out what new features have been added since my version of FreeRADIUS. I looked but this was the best I found: It is a significant leap in functionality over 0.9.3, and contains too many bug fixes and feature enhancements to list in detail. Have you tried doc/ChangeLog? I'm looking specifically for what has changed in error reporting. Any new messages, can it be put to a DB, can it be separated by realm, etc. I'm not sure what you mean by that. Can the /var/log/radiusd.log file be sent to a database instead? I have written my own user interface and it would be much simpler if I could show my clients their error logs by querying a table, rather than parsing a file. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html . -- Guy Fraser Network Administrator The Internet Centre 780-450-6787 , 1-888-450-6787 There is a fine line between genius and lunacy, fear not, walk the line with pride. Not all things will end up as you wanted, but you will certainly discover things the meek and timid will miss out on. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Is there a ChangeLog
-Original Message- From: [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Wednesday, July 21, 2004 1:23 PM To: [EMAIL PROTECTED] Subject: Re: Is there a ChangeLog Anson Rinesmith [EMAIL PROTECTED] wrote: My biggest issue is that I want to bring in a second and third ISP to use our radius service. I want to present each ISP with their error log, without seeing the other ISPs errors. I am currently at a loss on how to do this. As I said, post-process them. If you can tell the messages apart when putting them into any theoretical DB, you can tell them apart when reading them from radiusd.conf. That's my problem, I DON'T know how to tell them apart. Looking at any entry from the radius.log file, I don't know if it for my customers, ISP2 or ISP3. Using the 'cli' won't help as we have overlapping customer bases. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Is there a ChangeLog
If you've got some code working for postgre, I'm sure I could port that to work for mysql. I'm willing to do the work, I just don't know where to get the differentiating information from freeradius so I know what ISP that user belongs to. Something based on Called-Station-ID like the users and acct_users file (DEFAULT Called-Station-Id == 1234567890, Proxy-To-Realm := ISP1) would be useful. -Original Message- From: [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] On Behalf Of Guy Fraser Sent: Wednesday, July 21, 2004 1:27 PM To: [EMAIL PROTECTED] Subject: Re: Is there a ChangeLog There was a program written to work with Squid that sent the logs to a database. It used a FIFO for the log file, so squid would write to the FIFO and The program would read from the FIFO. The program would decipher the logs and insert the relevant data into a table. I believe the program was written in Perl and was called squid2mysql or something like that. I think I may have ported it to PostgreSQL, I will see if I have it archived somewhere. I have considered making a rlm_log module but have not had time to delve into it yet. Once such a module exists having the data exported to a DB and file for redundancy, should not be too difficult. For now I will try to find the pipe based stuff, and see what I can do with it. Anson Rinesmith wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Wednesday, July 21, 2004 9:06 AM To: [EMAIL PROTECTED] Subject: Re: Is there a ChangeLog Anson Rinesmith [EMAIL PROTECTED] wrote: I would like to find out what new features have been added since my version of FreeRADIUS. I looked but this was the best I found: It is a significant leap in functionality over 0.9.3, and contains too many bug fixes and feature enhancements to list in detail. Have you tried doc/ChangeLog? I'm looking specifically for what has changed in error reporting. Any new messages, can it be put to a DB, can it be separated by realm, etc. I'm not sure what you mean by that. Can the /var/log/radiusd.log file be sent to a database instead? I have written my own user interface and it would be much simpler if I could show my clients their error logs by querying a table, rather than parsing a file. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html . -- Guy Fraser Network Administrator The Internet Centre 780-450-6787 , 1-888-450-6787 There is a fine line between genius and lunacy, fear not, walk the line with pride. Not all things will end up as you wanted, but you will certainly discover things the meek and timid will miss out on. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Is there a ChangeLog
On Wed, Jul 21, 2004 at 02:27:46PM -0500, Anson Rinesmith wrote: If you've got some code working for postgre, I'm sure I could port that to work for mysql. I'm willing to do the work, I just don't know where to get the differentiating information from freeradius so I know what ISP that user belongs to. Something based on Called-Station-ID like the users and acct_users file (DEFAULT Called-Station-Id == 1234567890, Proxy-To-Realm := ISP1) would be useful. Sounds to me like the aforementioned post-auth SQL query support would suit you best. That way you can log whatever you like into mySQL. -- Paul TBBle Hampson, on an alternate email client. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
