Re: FreeRADIUS with MS SQL

2002-02-10 Thread Michael Vasilenko

On Sun, 10 Feb 2002, Alan DeKok wrote:

AD> Michael Vasilenko <[EMAIL PROTECTED]> wrote:
AD> > I need to setup RADIUS wich works with MS SQL, can somebody give me an
AD> > advice? Does FreeRADIUS can do this? ODBC or something?
AD>
AD>   ODBC should work in the latest CVS snapshot.

in latest CVS snapshot make is just broken:

Making static in rlm_sql_unixodbc...
gmake[9]: Entering directory
`/usr/local/src/freeradius/radiusd/src/modules/rlm_sql/drivers/rlm_sql_unixodbc'
gmake[9]: *** No rule to make target `static'.  Stop.
gmake[9]: Leaving directory
`/usr/local/src/freeradius/radiusd/src/modules/rlm_sql/drivers/rlm_sql_unixodbc'
gmake[8]: *** [common] Error 1

radius:/usr/local/src/freeradius/radiusd/src/modules/rlm_sql/drivers/rlm_sql_unixodbc#
./configure
loading cache ./config.cache
checking for gcc... (cached) gcc
checking whether the C compiler (gcc  ) works... yes
checking whether the C compiler (gcc  ) is a cross-compiler... no
checking whether we are using GNU C... (cached) yes
checking whether gcc accepts -g... (cached) yes
checking how to run the C preprocessor... (cached) gcc -E
checking for sql.h... yes
checking for SQLConnect in -lodbc... yes
updating cache ./config.cache
creating ./config.status
creating Makefile
sed: ./Makefile.in: No such file or directory

AD>   Alan DeKok.
-- 
Michael Vasilenko


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Re: Simultaneous Use not working

2002-02-10 Thread Graham @ LEC Dalby

No, I'm not using realms.  It is just the straight username / password.

checkrad isn't even getting called.  If i run checkrad manually it gives the
results you would expect, but radiusd isn't running it at all - ever.

- Original Message -
From: "Randy Moore" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, February 11, 2002 2:15 PM
Subject: Re: Simultaneous Use not working


> Are you using realms?  If so, you'll need to get a current CVS
> snapshot.  Even v 0.4 will not work. (radutmp stores the username with the
> realm stripped, but the checksimul routine looks for usernames without the
> realm stripped).
>
> There are *lots* of fixes to the SQL handling code, even since v 0.4.  I'd
> recommend setting up a test server with the latest CVS to see if it works
> for you.
>
> At 12:31 PM 2/11/2002 +1000, you wrote:
> >Simultaneous Use is not working for me.  The checkrad script works fine
when
> >I call it manually, but it is never executed by radius.  I have turned
> >debugging on in checkrad - but the script is never executed.  running
> >radiusd -xx does not give any indication that it is trying to call
checkrad
> >or that it is doing anything about the Simultaneous Use.  I am using
> >Freeradius 0.3 (had such a time getting it running smoothly with my
> >PostgreSQL database, other than simultaneous use, that i'm too scared to
try
> >0.4).  I have read all of the doc's about simultaneous use, as well as
> >followed the instructions given in one of the archived posts.  However in
> >that post, it doesn't look like the person having the problem got it
sorted
> >out either.  What am I doing wrong?
> >
> >In my users file I have:
> >
> >DEFAULT Auth-Type := System, Simultaneous-Use :=1
> > Fall-Through = 1
> >
> >in radiusd.conf I have
> >authorize {
> > preprocess
> >#   counter
> >#   attr_filter
> > suffix
> > sql
> > files
> >}
> >authenticate {
> > unix
> >}
> >preacct {
> > suffix
> > files
> > preprocess
> >}
> >
> >accounting {
> >#   acct_unique
> > detail
> >#   counter
> > unix
> > sql
> > radutmp
> >#   sradutmp
> >}
> >
> >session {
> > radutmp
> >}
> >
> >
> >
> >-
> >List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
>
> Randy Moore
> Axion Information Technologies, Inc.
>
> email [EMAIL PROTECTED]
> phone   301-408-1200
> fax301-445-3947
>
>
> -
> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
>



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Re: Simultaneous Use not working

2002-02-10 Thread Randy Moore

Are you using realms?  If so, you'll need to get a current CVS 
snapshot.  Even v 0.4 will not work. (radutmp stores the username with the 
realm stripped, but the checksimul routine looks for usernames without the 
realm stripped).

There are *lots* of fixes to the SQL handling code, even since v 0.4.  I'd 
recommend setting up a test server with the latest CVS to see if it works 
for you.

At 12:31 PM 2/11/2002 +1000, you wrote:
>Simultaneous Use is not working for me.  The checkrad script works fine when
>I call it manually, but it is never executed by radius.  I have turned
>debugging on in checkrad - but the script is never executed.  running
>radiusd -xx does not give any indication that it is trying to call checkrad
>or that it is doing anything about the Simultaneous Use.  I am using
>Freeradius 0.3 (had such a time getting it running smoothly with my
>PostgreSQL database, other than simultaneous use, that i'm too scared to try
>0.4).  I have read all of the doc's about simultaneous use, as well as
>followed the instructions given in one of the archived posts.  However in
>that post, it doesn't look like the person having the problem got it sorted
>out either.  What am I doing wrong?
>
>In my users file I have:
>
>DEFAULT Auth-Type := System, Simultaneous-Use :=1
> Fall-Through = 1
>
>in radiusd.conf I have
>authorize {
> preprocess
>#   counter
>#   attr_filter
> suffix
> sql
> files
>}
>authenticate {
> unix
>}
>preacct {
> suffix
> files
> preprocess
>}
>
>accounting {
>#   acct_unique
> detail
>#   counter
> unix
> sql
> radutmp
>#   sradutmp
>}
>
>session {
> radutmp
>}
>
>
>
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Randy Moore
Axion Information Technologies, Inc.

email [EMAIL PROTECTED]
phone   301-408-1200
fax301-445-3947


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



freeradius with PostgreSQL...

2002-02-10 Thread Gus Rios

Hi,
How can i install freeradius with postgreSQL?
What are the arguments for 'configure' ?
or what other things i have to do?

regards,

_
Hable con sus amigos en línea, pruebe MSN Messenger: http://messenger.msn.es


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



(no subject)

2002-02-10 Thread Gus Rios

Hi,
How can i install freeradius with postgreSQL?
What are the arguments for 'configure' ?
or what other things i have to do?

regards,

_
Descargue GRATUITAMENTE MSN Explorer en 
http://explorer.yupimsn.com/intl.asp.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Simultaneous Use not working

2002-02-10 Thread Graham @ LEC Dalby

Simultaneous Use is not working for me.  The checkrad script works fine when
I call it manually, but it is never executed by radius.  I have turned
debugging on in checkrad - but the script is never executed.  running
radiusd -xx does not give any indication that it is trying to call checkrad
or that it is doing anything about the Simultaneous Use.  I am using
Freeradius 0.3 (had such a time getting it running smoothly with my
PostgreSQL database, other than simultaneous use, that i'm too scared to try
0.4).  I have read all of the doc's about simultaneous use, as well as
followed the instructions given in one of the archived posts.  However in
that post, it doesn't look like the person having the problem got it sorted
out either.  What am I doing wrong?

In my users file I have:

DEFAULT Auth-Type := System, Simultaneous-Use :=1
Fall-Through = 1

in radiusd.conf I have
authorize {
preprocess
#   counter
#   attr_filter
suffix
sql
files
}
authenticate {
unix
}
preacct {
suffix
files
preprocess
}

accounting {
#   acct_unique
detail
#   counter
unix
sql
radutmp
#   sradutmp
}

session {
radutmp
}



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Re: FreeRADIUS with MS SQL

2002-02-10 Thread Alan DeKok

Michael Vasilenko <[EMAIL PROTECTED]> wrote:
> I need to setup RADIUS wich works with MS SQL, can somebody give me an
> advice? Does FreeRADIUS can do this? ODBC or something?

  ODBC should work in the latest CVS snapshot.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Re: unable to get a clean gmake

2002-02-10 Thread Alan DeKok

the ACTUAL zeke <[EMAIL PROTECTED]> wrote:
> the version that produces these errors is:
> 
>  freeradius-snapshot-20020209

  Hmm... if you look in the src/module/rlm_unix directory, you'll see
that there are compatibility functions.

  do:

cd src/module/rlm_unix
rm config.cache
./configure
make

  The module *should* build correctly.  Please watch out for any
errors or warnings.

  Once it's built, you should be able to do 'make install' from that
directory to get it installed.

> has freeradius ever worked on BSDI? if so, what options need to be
> added to ./configure. i think that could be my only problem.

  I'm not sure if it's worked on BSDI.  The only problem is the
compatibility functions in rlm_unix.  If you don't mind poking at the
make files and/or source code, you can probably get it to work.

> i am sorry to be such a pain, we have used merit AAA successfully for many
> years, but suddenly qwest needs Ascend-Data-Filter, which is broken in AAA
> but several users (none on BSDI) are passing filters successfully from
> freeradius according to qwest.

  Yes.  It does work for some people.
 
> we are up against a deadline of tuesday. we have a machine available to
> load with your recommended flavor of linux as an alternate solution.

  I use Linux for my development, so it's definitely tested there.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Re: unable to get a clean gmake

2002-02-10 Thread the ACTUAL zeke

the version that produces these errors is:

 freeradius-snapshot-20020209

Z   Upgrade to the latest CVS snapshot.
Z   Alan DeKok.

has freeradius ever worked on BSDI? if so, what options need to be
added to ./configure. i think that could be my only problem.

i am sorry to be such a pain, we have used merit AAA successfully for many
years, but suddenly qwest needs Ascend-Data-Filter, which is broken in AAA
but several users (none on BSDI) are passing filters successfully from
freeradius according to qwest.

we are up against a deadline of tuesday. we have a machine available to
load with your recommended flavor of linux as an alternate solution.

thanks again ...z


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



FreeRADIUS with MS SQL

2002-02-10 Thread Michael Vasilenko


Hello

I need to setup RADIUS wich works with MS SQL, can somebody give me an
advice? Does FreeRADIUS can do this? ODBC or something?

Thanks

-- 
Michael Vasilenko


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Re: Freeradius configuration.

2002-02-10 Thread Alan DeKok

rakesh jha <[EMAIL PROTECTED]> wrote:
> Framed-IP-address = x.x.x.10+,
> Fall-Through = Yes,
> Session-timeout = 1800
>  
> Is there any way I can restrict users so that do not get IP address beyond
> x.x.x.235.

  No.  The port number is added to the IP address, ot get the address
to give to the user.  See the 'doc' directory for more information.

  You'll have to change your IP address layout, OR go to NAS managed
IP pools.

> Another thing I want to do is that another user say USER2 should also be
> able to get IP assigned from this pool. What I mean that user1 and user2
> should get IP assigned from the pool.

  When you use 'x.x.x.10+" for an IP address, there is no "pool".
Nothing is managed, and you can have as many users as you want using
the same configuration.

> Also will multiple sessions with same user name be allowed?

  That's a different issue.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Re: unable to get a clean gmake

2002-02-10 Thread Alan DeKok

the ACTUAL zeke <[EMAIL PROTECTED]> wrote:
> i have tried several builds, we are running BSDI BSD/OS 4.2
> compiled under:
...
> the output of check-radiusd-config is pasted below
> 
> /usr/local/sbin/radiusd: can't resolve symbol 'fgetgrent'

  Upgrade to the latest CVS snapshot.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



unable to get a clean gmake

2002-02-10 Thread the ACTUAL zeke

please let me begin by thanking you for your help ...zeke

i have tried several builds, we are running BSDI BSD/OS 4.2
compiled under:

GNU Make version 3.78.1, by Richard Stallman and Roland McGrath.
Built for i386-pc-bsdi4.2
Copyright (C) 1988, 89, 90, 91, 92, 93, 94, 95, 96, 97, 98, 99
Free Software Foundation, Inc.   

the output of check-radiusd-config is pasted below

/usr/local/sbin/radiusd: can't resolve symbol 'fgetgrent'
/usr/local/sbin/radiusd: can't resolve symbol 'fgetpwent'
/usr/local/sbin/radiusd: can't resolve symbol 'fgetgrent'
/usr/local/sbin/radiusd: can't resolve symbol 'fgetpwent'
Starting - reading configuration files ...
reread_config:  reading radiusd.conf
Config:   including file: /usr/local/etc/raddb/proxy.conf
Config:   including file: /usr/local/etc/raddb/clients.conf
Config:   including file: /usr/local/etc/raddb/snmp.conf
Config:   including file: /usr/local/etc/raddb/sql.conf
 main: prefix = "/usr/local"
 main: localstatedir = "/usr/local/var"
 main: logdir = "/usr/local/var/log/radius"
 main: libdir = "/usr/local/lib"
 main: radacctdir = "/usr/local/var/log/radius/radacct"
 main: hostname_lookups = no
read_config_files:  reading dictionary
read_config_files:  reading clients
read_config_files:  reading realms
read_config_files:  reading naslist
 main: max_request_time = 30
 main: cleanup_delay = 5   
 main: debug_level = 0
read_config_files:  entering modules setup
Module: Library search path is /usr/local/lib
radiusd.conf[328] Failed to link to module 'rlm_unix': file not found
mail%  

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
|  Zeke's General Store, Inc -- nationwide Internet
|  (800) 732-2675 (928) 428-1112 
|  Zeke's is a privately held Arizona corporation


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Freeradius configuration.

2002-02-10 Thread rakesh jha



Hi 
All,
 
I have installed 
freeradius on caldera linuX V3.1. It is running reasonably Ok. Last week I had a 
problem. Radius assigned the dial-in user an address which was outside the pool. 
On Cisco 5300 we have made a pool of IP address x.x.x.10 to x.x.x.235 and 
from x.x.x.236 address for framed IP assignment. Last week an user was assigned 
IP in range of x.x.x.236.
 
I have defined 
users as following:
 
user1    auth-type:local, 
password=="abcxyz",
Framed-IP-address = 
x.x.x.10+,
Fall-Through = 
Yes,
Session-timeout = 
1800
 
Is there any way I 
can restrict users so that do not get IP address beyond x.x.x.235. Is there a 
way to refresh the IP assignement so users do not go beyond x.x.x.235 
address.
 
Another thing I 
want to do is that another user say USER2 should also be able to get IP assigned 
from this pool. What I mean that user1 and user2 should get IP assigned from the 
pool. Also will multiple sessions with same user name be 
allowed?
 
Thanks
 
Rakesh 
Jha
Kuwait




 Disclaimer: 

Any non 
official business related views, opinions or other information presented in this 
electronic mail are solely those of the sender/author. Burgan Bank does not 
endorse or accept responsibility for these opinions, views or conclusion. 

 
   

   
If you are not the addressee 
indicated in this electronic mail or responsible for delivering this electronic 
message to the intended recipient, you should delete this message and notify the 
sender immediately. 
Burgan Bank