Re: (RADIATOR) Database support fault tolerance

2003-06-30 Thread Hugh Irvine
Hello Tony - There is already an AcctFailedLogFileName available in the AuthBy SQL clause that you can use to store the accounting records if the database is unreachable. See section 6.28.19 in the Radiator 3.6 reference manual ("doc/ref.html"). regards Hugh On Tuesday, Jul 1, 2003, at 14:5

Re: (RADIATOR) Database support fault tolerance

2003-06-30 Thread Hugh Irvine
Hello Dan - It seems to me there is a fundamental problem in trying to design something that relies on an SQL database, but should keep working without problems if the database goes away? Most operators that I have worked with tend to run their databases on large fault-tolerant SQL server mach

Re: (RADIATOR) Database support fault tolerance

2003-06-30 Thread Dan Melomedman
Hugh Irvine wrote: > > Hello Dan - > > It would be fairly simple to have Radiator write to a flat file for > accounting, and then have a cron job or similar load the data into the > database periodically. You will find a simple utility to do this in the > file "goodies/radimportacct". > > reg

Re: (RADIATOR) Database support fault tolerance

2003-06-30 Thread Hugh Irvine
Hello Dan - We try to make Radiator good at dealing with radius requests, while at the same time providing you with a wide range of facilities allowing you to interface with other systems. As mentioned previously there are alternatives available if database access cannot be assured. regards H

RE: Re: (RADIATOR) Database support fault tolerance

2003-06-30 Thread Tony Bunce
I'm going to have to agree that some sort of non-blocking queuing system would be a very nice feature. Should your data source ever fail, radiator could continue to operate while losing very little function and no loss of accounting records. This may also speed radiator up, as it would just hand t

(RADIATOR) PEAP with MSCHAPv2 problem

2003-06-30 Thread $BD9Bm!!6)90(B
Hi (B (BI'm testing wireless LAN connection by using peap(ms-chap2-v2). (BBut I have problems and can't see what is incorrect. (B (BSo I need you help for resolving problems. (B (BPlease give me any ideas. (B (BI'll describe testing environment(includes eap_peap.cfg and users file),server

Re: (RADIATOR)

2003-06-30 Thread Hugh Irvine
Hello Iin - You will find an example SQL configuration file in "goodies/sql.cfg", and you will also find a number of SQL table creation scripts in "goodies/***Create.sql". And have a look at section 6.28 in the Radiator 3.6 reference manual ("doc/ref.html"). regards Hugh On Tuesday, Jul 1,

(RADIATOR)

2003-06-30 Thread iin
Dear - , I want to save data from cisco to database, How i configure radius.cfg ? Please advice, Thanks Iin === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the messa

Fwd: Re: (RADIATOR) Database support fault tolerance

2003-06-30 Thread Dan Melomedman
Hugh Irvine wrote: > > Hello Dan - > > It would be fairly simple to have Radiator write to a flat file for > accounting, and then have a cron job or similar load the data into the > database periodically. You will find a simple utility to do this in the > file "goodies/radimportacct". I was h

Re: (RADIATOR) CHAP and PAP

2003-06-30 Thread Hugh Irvine
Hello Morph - I have not been able to find your records in our database, so could you please send me the name of the registered company that has purchased this copy of Radiator together with the username and password that you use to access the web site. Please reply to me directly. Many thank

Re: (RADIATOR) Database support fault tolerance

2003-06-30 Thread Bret Jordan
Why not just use a redundant authenticator, most DBs including LDAP engines can sync between multiple servers, then just point radiator at each one and if it can not talk to the first it will fail over to the next... Or better yet, just use a Foundry Server Iron (Layer 7 switch) to sit between

Re: (RADIATOR) Handler or Realm

2003-06-30 Thread Hugh Irvine
Hello Bret, Hello Herman - As Bret says, Realms are a subset of Handlers, but they are also much more efficient. A Realm is selected by doing a table lookup on the specified string, whereas the list of Handlers is evaluated in the order that they appear in the configuration file. In both cases

Re: (RADIATOR) Database support fault tolerance

2003-06-30 Thread Hugh Irvine
Hello Dan - It would be fairly simple to have Radiator write to a flat file for accounting, and then have a cron job or similar load the data into the database periodically. You will find a simple utility to do this in the file "goodies/radimportacct". regards Hugh On Tuesday, Jul 1, 2003, a

Re: (RADIATOR) BUG? EAP TLS hangs

2003-06-30 Thread Ken Wolstencroft
Thanks Mike, I'll download the patches and carry out my tests again... Ken - Original Message - From: "Mike McCauley" <[EMAIL PROTECTED]> To: "Ken Wolstencroft" <[EMAIL PROTECTED]>; "Denis Pavani" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Tuesday, July 01, 2003 12:38 AM Subject: Re:

Re: (RADIATOR) BUG? EAP TLS hangs

2003-06-30 Thread Mike McCauley
Hello Denis, On Tue, 1 Jul 2003 01:44 am, Denis Pavani wrote: > Hello, I got a strange behaviour from Radiator 3.6, on Solaris with > OpenSSL 0.9.7a > Most of time, all authentication are OK, but sometimes EAP-TLS stop > working, and gives errors as below. > Restarting the daemon (sending an HUP

Re: (RADIATOR) Radiator 3.5 & Rodopi 5.2sp3

2003-06-30 Thread Tim Jung
I installed this patch and everything has been working great. I have not had any problems at all with it and I am no longer getting these errors in the logs. Thank you very much for the help. Tim Jung Internet Gateway [EMAIL PROTECTED] - Original Message - From: "Mike McCauley" <[EMAIL

Re: (RADIATOR) BUG? EAP TLS hangs

2003-06-30 Thread Mike McCauley
Hello all, On Tue, 1 Jul 2003 04:27 am, Ken Wolstencroft wrote: > Hi Denis, > > I had the same problem and spent ages recompiling OpenSSL with all the ssl > version work arounds etc. > > The way I finally solved it was to add the following to the EAPTLS AuthBy: > > EAPTLS_SessionResumption 0 > >

(RADIATOR) Database support fault tolerance

2003-06-30 Thread Dan Melomedman
Our users are getting sick and tired due to RADIUS service unavailability every time something happens to the network where the database server sits, or the database server itself. To remind, we use LDAP for authentication, and SQL Server for sessions/logging. LDAP has been great, where database co

Re: (RADIATOR) BUG? EAP TLS hangs

2003-06-30 Thread Ken Wolstencroft
Hi Denis, I had the same problem and spent ages recompiling OpenSSL with all the ssl version work arounds etc. The way I finally solved it was to add the following to the EAPTLS AuthBy: EAPTLS_SessionResumption 0 Can anyone suggest why this happens in the first place and why stopping session re

Re: (RADIATOR) Handler or Realm

2003-06-30 Thread Bret Jordan
Use handlers, never use realms.. Handlers can do everything that realms can do and more. Bret Herman verschooten wrote: Hi, I am now using Radiator with a single default-realm for 4 different Client-sets. I use a rewrite username to strip off the realm if a client provides it. I now wa

(RADIATOR) Handler or Realm

2003-06-30 Thread Herman verschooten
Hi,   I am now using Radiator with a single default-realm for 4 different Client-sets.  I use a rewrite username to strip off the realm if a client provides it.  I now want to split the authentication to be able to use 2 separate Online-algorithms.  What do you propose I use, A Handler or

(RADIATOR) CHAP and PAP

2003-06-30 Thread morph
Hi all I've been looking for info in the mailing list without success so here is the question :) I need to be able to receive in my radius CHAP and PAP requests. For example if an user uses CHAP or PAP , my Radiator must be smart enough to check what kind of authentication method is receiving and

(RADIATOR) BUG? EAP TLS hangs

2003-06-30 Thread Denis Pavani
Hello, I got a strange behaviour from Radiator 3.6, on Solaris with OpenSSL 0.9.7a Most of time, all authentication are OK, but sometimes EAP-TLS stop working, and gives errors as below. Restarting the daemon (sending an HUP signal does not work, I must kill process and restart) fixes the situat