RE: Problems with Freeradius 0.9.0/CVS-Snapshot on OpenBSD 3.3
I also looked at the /usr/includes and so on but the gethostbyname_r
function didn't exist. Perhaps this is the Problem.
-Original Message-
From: Paul Hampson [mailto:[EMAIL PROTECTED]
Sent: Mittwoch, 20. August 2003 20:47
To: [EMAIL PROTECTED]
Subject: RE: Problems with Freeradius 0.9.0/CVS-Snapshot on OpenBSD 3.3
> From: Rietsch Thierry
> Sent: Wednesday, 20 August 2003 7:05 PM
> I am trying to compile the Freeradius Server on OpenBSD 3.3. I've tried
> both, the 0.9.0- and the CVS Snapshot-Versions but i get the same error.
> The configure script runs without a problem. Then when I try to build the
> server with the "make" command, i'll get the following error:
>
> ---
> gmake[3]: Entering directory
> `/usr/src2/freeradius/freeradius-snapshot-20030819/src/modules/rlm_dbm'
> /usr/src2/freeradius/freeradius-snapshot-20030819/libtool --mode=link gcc
> rlm_dbm_parser.o ../../lib/libradius.a -lresolv -lpthread -o
> rlm_dbm_parser
> gcc rlm_dbm_parser.o -o rlm_dbm_parser ../../lib/libradius.a -lresolv
> -lpthread
> misc.c:60: Undefined symbol `_gethostbyaddr_r' referenced from text
segment
> misc.c:105: Undefined symbol `_gethostbyname_r' referenced from text
segment
During the 'configure' process, what 'gethostbyname' and 'gethostbyaddr'
were
selected? It should be right near the end of the main configure run, right
before it announces that the top_builddir is.
(Here's the relevant output from my Linux machine, for comparison:)
checking gethostbyaddr_r() syntax... GNU-style
checking gethostbyname_r() syntax... GNU-style
top_builddir=/home/tbble/frcvs/tmep/head
The following warning may be relevant, but may not be... Certainly
glibc2 doesn't require -lresolv for the gethostby*_r code to work.
In fact, I can't see what -lresolv is needed for on my system, since
the only thing configure checks it for is inet_aton, which is actually
in the libc (glibc-2.3.1) on my system... Maybe that configure check could
be enhanced to not pull in libresolv if it doesn't need to.
Anyway, if you can work out what we need to do to have access to
gethostby{name,addr}* on OpenBSD 3.3 (preferably the re-entrant versions)
that would be great. And I'd be interested to know where inet_aton lives
on OpenBSD.
> Also i get the following warning during the build process:
> --
> *** Warning: This library needs some functionality provided by -lresolv.
> *** I have the capability to make that library automatically link in when
> *** you link to this library. But I can only do this if you have a
> *** shared version of the library, which you do not appear to have.
>
> *** Warning: libtool could not satisfy all declared inter-library
> *** dependencies of module rlm_exec. Therefore, libtool will create
> *** a static module, that should work as long as the dlopening
> *** application is linked with the -dlopen flag.
> --
And as a thought, does configuring with --enable-static avoid this? I
have some recollection of OpenBSD being mentioned as broken with dynamic
linking, in the same pile as MacOS X.
--
=
Paul "TBBle" Hampson
Bubblesworth Pty Ltd (ABN: 51 095 284 361)
[EMAIL PROTECTED]
This is a one line proof...if we start
sufficiently far to the left.
-- Cambridge University Math Department
-
Random signature generator 3.0 by Paul "TBBle" Hampson
=
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Problems with Freeradius 0.9.0/CVS-Snapshot on OpenBSD 3.3
Hi
First, thanks for your help.
The configure script thakes the GNU Style _gethostby{addr,name}_r as it told
in the output:
--
checking gethostbyaddr_r() syntax... GNU-style
checking gethostbyname_r() syntax... GNU-style
--
I don't know if this is really correct, shouldn't take it BSD-style? I see
that this option
exists in the configure script.
inet_aton:
The inet_aton function is in the inet.h header file:
---
arpa/inet.h:int inet_aton(const char *, struct in_addr *);
---
[EMAIL PROTECTED] grep inet_aton /usr/lib/*
Binary file libc.a matches
Binary file libc.so.29.0 matches
Binary file libc_p.a matches
Binary file libc_pic.a matches
Binary file libkrb5.a matches
Binary file libkrb5.so.5.0 matches
Binary file libkrb5_p.a matches
Binary file libkrb5_pic.a matches
Binary file libwrap.a matches
Binary file libwrap.so.3.0 matches
Binary file libwrap_p.a matches
Binary file libwrap_pic.a matches
--
I'll try to figure out how I can solve the problem with gethostbyaddr, if
you also have an idea told it me :)
Thierry
-Original Message-
From: Paul Hampson [mailto:[EMAIL PROTECTED]
Sent: Mittwoch, 20. August 2003 20:47
To: [EMAIL PROTECTED]
Subject: RE: Problems with Freeradius 0.9.0/CVS-Snapshot on OpenBSD 3.3
> From: Rietsch Thierry
> Sent: Wednesday, 20 August 2003 7:05 PM
> I am trying to compile the Freeradius Server on OpenBSD 3.3. I've tried
> both, the 0.9.0- and the CVS Snapshot-Versions but i get the same error.
> The configure script runs without a problem. Then when I try to build the
> server with the "make" command, i'll get the following error:
>
> ---
> gmake[3]: Entering directory
> `/usr/src2/freeradius/freeradius-snapshot-20030819/src/modules/rlm_dbm'
> /usr/src2/freeradius/freeradius-snapshot-20030819/libtool --mode=link gcc
> rlm_dbm_parser.o ../../lib/libradius.a -lresolv -lpthread -o
> rlm_dbm_parser
> gcc rlm_dbm_parser.o -o rlm_dbm_parser ../../lib/libradius.a -lresolv
> -lpthread
> misc.c:60: Undefined symbol `_gethostbyaddr_r' referenced from text
segment
> misc.c:105: Undefined symbol `_gethostbyname_r' referenced from text
segment
During the 'configure' process, what 'gethostbyname' and 'gethostbyaddr'
were
selected? It should be right near the end of the main configure run, right
before it announces that the top_builddir is.
(Here's the relevant output from my Linux machine, for comparison:)
checking gethostbyaddr_r() syntax... GNU-style
checking gethostbyname_r() syntax... GNU-style
top_builddir=/home/tbble/frcvs/tmep/head
The following warning may be relevant, but may not be... Certainly
glibc2 doesn't require -lresolv for the gethostby*_r code to work.
In fact, I can't see what -lresolv is needed for on my system, since
the only thing configure checks it for is inet_aton, which is actually
in the libc (glibc-2.3.1) on my system... Maybe that configure check could
be enhanced to not pull in libresolv if it doesn't need to.
Anyway, if you can work out what we need to do to have access to
gethostby{name,addr}* on OpenBSD 3.3 (preferably the re-entrant versions)
that would be great. And I'd be interested to know where inet_aton lives
on OpenBSD.
> Also i get the following warning during the build process:
> --
> *** Warning: This library needs some functionality provided by -lresolv.
> *** I have the capability to make that library automatically link in when
> *** you link to this library. But I can only do this if you have a
> *** shared version of the library, which you do not appear to have.
>
> *** Warning: libtool could not satisfy all declared inter-library
> *** dependencies of module rlm_exec. Therefore, libtool will create
> *** a static module, that should work as long as the dlopening
> *** application is linked with the -dlopen flag.
> --
And as a thought, does configuring with --enable-static avoid this? I
have some recollection of OpenBSD being mentioned as broken with dynamic
linking, in the same pile as MacOS X.
--
=
Paul "TBBle" Hampson
Bubblesworth Pty Ltd (ABN: 51 095 284 361)
[EMAIL PROTECTED]
This is a one line proof...if we start
sufficiently far to the left.
-- Cambridge University Math Department
-
Random signature generator 3.0 by Paul "TBBle" Hampson
=
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubsc
cannot compile with --with-experimental-modules in freebsd 4.8
sir, im trying to send my log but since the message is bigger than 65536 bytes - its refused. my mail bounce. if you have spare time to see my log here's the website. thanks configure: http://203.177.22.150:8080/configure.txt make http://203.177.22.150:8080/make.txt make install: http://203.177.22.150:8080/make-install.txt Sir i want to test the another option, what Mr. Paul Hampson said. how to add rlm_sqlcounter? Thank you very much = [ apellido jr., wilfredo p. ] +63 034 4880-449 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Patch for high load radius servers (against release_0_9_0_final)
> From: Hindrik Buining
> Sent: Friday, 22 August 2003 11:54 AM
> In threaded mode, freeradius drops the request if there are no threads
> available.
> In non-threaded mode, it doesn't process the requests fast enough for my
> needs.
> To get around the situation I wrote the following patch which does two
> things:
> 1. It increases the buffer size of the udp socket so the OS will buffer udp
> packets
> 2. It checks to make sure a thread is available to handle the request before
> it reads from the socket. If a thread is not available it sleeps for a mili
> second and tries again.
I seem to remember this being a long-standing TODO. Thankyou. However...
> ***
> *** 887,892
> --- 913,924
> }
> #endif
> +
> + while( !threads_available() ) {
> + radlog(L_ERR, "No threads available yet. Sleeping...");
> + select(0,NULL,NULL,NULL,&sleep_time);
> + }
> +
> status = select(max_fd + 1, &readfds, NULL, NULL, tv);
> #ifndef HAVE_PTHREAD_H
> /*
Shouldn't the loop appear after the select? That way if
there's no pending requests in the socket buffer, we don't
busy-wait needlessly when an io-wait would suffice.
It prolly shouldn't be an L_ERR either... That seems too
severe for something that loops every 1000us.
--
=
Paul "TBBle" Hampson
Bubblesworth Pty Ltd (ABN: 51 095 284 361)
[EMAIL PROTECTED]
This is a one line proof...if we start
sufficiently far to the left.
-- Cambridge University Math Department
-
Random signature generator 3.0 by Paul "TBBle" Hampson
=
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Patch for high load radius servers (against release_0_9_0_final)
Hi all,
I'm using freeradius as a radius server for a Cisco SSG (Service Selection
Gateway) which
we use to make people authenticate before they access the internet.
We then charge for the volume of traffic used.
The SSG sends large numbers (300+) of radius accounting alive packets back
to back
without waiting for a reply. With several thousand users (and hence
accounting
update packets) the burst rate of radius requests gets very high and
freeradius drops requests.
In threaded mode, freeradius drops the request if there are no threads
available.
In non-threaded mode, it doesn't process the requests fast enough for my
needs.
To get around the situation I wrote the following patch which does two
things:
1. It increases the buffer size of the udp socket so the OS will buffer udp
packets
2. It checks to make sure a thread is available to handle the request before
it reads
from the socket. If a thread is not available it sleeps for a mili
second and tries again.
I've found that running freeradius multithreaded backended into a db on
multi-cpu
machine increased by an order of magnitude the rate of accounting packets/s
that can be processed.
I'm running freeradius release 0.9.0_final on Solaris 8 on a variety of sun
sparc boxes backended into
Sybase and Postgresql. Freeradius was compiled under gcc 2.95.3
It helped me.
I hope it helps someone else too.
Regards,
- Hindrik
-
Hindrik Buining
Senior Network Services Engineer
Communications Unit
University of New South Wales
Sydney, Australia
+61-2-9385-1144(w)
+61-2-9385-1112(f)
-
*** radiusd.c.orig Thu Aug 14 13:49:00 2003
--- radiusd.c Thu Aug 14 13:53:20 2003
***
*** 139,145
--- 139,147
static int refresh_request(REQUEST *request, void *data);
#ifdef HAVE_PTHREAD_H
extern int rad_spawn_child(REQUEST *, RAD_REQUEST_FUNP);
+ extern int threads_available();
#else
+ static inline int threads_available() { return(1); }
#ifdef ALLOW_CHILD_FORKS
static int rad_spawn_child(REQUEST *, RAD_REQUEST_FUNP);
#endif
***
*** 284,289
--- 286,303
struct sigaction act;
#endif
+ /* Hindrik June 2003
+ * Variables used to increase the receive socket buffer size
+ */
+ int optval,optlen;
+
+ /* Hindrik May 2003
+ * We want to sleep for a few mili seconds
+ */
+ struct timeval sleep_time;
+ sleep_time.tv_sec=0;
+ sleep_time.tv_usec = 1000;
+
syslog_facility = LOG_DAEMON;
#ifdef OSFC2
***
*** 536,541
--- 550,564
perror ("acct socket");
exit(1);
}
+ optval = 256*1024;
+ optlen = sizeof(optval);
+ if( setsockopt(acctfd, SOL_SOCKET,
+ SO_RCVBUF, (void *)&optval, optlen)
+ ) {
+ perror( "Setting socket option");
+ exit(1);
+ }
+
sa = (struct sockaddr_in *) &salocal;
memset ((char *) sa, '\0', sizeof(salocal));
***
*** 769,774
--- 792,800
#endif
radlog(L_INFO, "Ready to process requests.");
+ #ifdef HAVE_PTHREAD_H
+ radlog(L_INFO, "Running with threads.");
+ #endif
start_time = time(NULL);
/*
***
*** 887,892
--- 913,924
}
#endif
+
+ while( !threads_available() ) {
+ radlog(L_ERR, "No threads available yet. Sleeping...");
+ select(0,NULL,NULL,NULL,&sleep_time);
+ }
+
status = select(max_fd + 1, &readfds, NULL, NULL, tv);
#ifndef HAVE_PTHREAD_H
/*
***
*** 2184,2189
--- 2216,
return request;
}
+
/*
* If we're using the thread pool, then the function in
* 'threads.c' replaces this one.
*** threads.c.orig Thu Aug 14 13:55:30 2003
--- threads.c Thu Aug 14 13:50:32 2003
***
*** 209,215
self->thread_num);
break;
}
-
/*
* Stupid implementations of sem_wait return on
* signals, but don't return -1.
--- 209,214
***
*** 297,302
--- 296,337
free(handle);
}
+
+
+ /*
+ * Check to see if we can process another request.
+ * Returns true if the threadpool is not full and all threads
+ * are busy.
+ *
+ *
+ */
+ int threads_available() {
+ THREAD_HANDLE *handle;
+
+ /* printf("threads_available():\tThread Count: total %d, max
%d\n",thread_pool.total_threads, thread_pool.max_threads); */
+
+ /* If we can still span another thread than we have threads available */
+ if (thread_pool.total_threads < thread_pool.max_threads) {
+ return(1);
+ }
+
+ /* Search the thread list looking for an available thread */
+ for (handle = thread_pool.head; handle != NULL; handle = handle->next){
+
+ /* Ignore threads which aren't running. */
+ if( handle->status != THREAD_RUNNING ) {
+ continue;
+ }
+
+ if (handle->request == NULL) {
+ /* radlog(L_INFO, "threads_available():\tFound a free request."); */
+ return(1); /* We've found an available thread */
+ }
+ }
+ return (0);
+
+ }
+
/*
* Spawn a new thread, and place it in the thread pool.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RES: Reply-Message from Exec-Program-Wait with exit code 1
> Hi, > > I have setup radius with mysql authentication and exec-program-wait for > authorization. > > Some examples of what the script does: > > If the user's account is ok, I output: > Reply-Message = "Your account is valid until xx/xx/xx." > Session-Timeout = 3600 > > If the user's has no more amount on his account, I output: > Reply-Message = "You have no amount left on your account." > and stop the script with exit code 1 > > If the user's account has expired, I output: > Reply-Message = "Your account has expired." > and stop the script with exit code 1 > > Now, when the script exits with code 1, freeradius sends an Auth-Reject > packet with the message "authentication failed (by external program)" > instead of the Reply-Message attribute. > > I tried with exiting with code 0 and Auth-Type = Reject, but then the login > is accepted instead of rejected. > > I just want the script to be able to reject a user while sending a proper > reply-message why he has been rejected. See this script example in PHP : Remember that windows users can't see any message returned from radius Sergio Jose Ferreira WGO Intenet Catalao - Go - Brazil - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Expiration with mysql
HI all I get a question about Expiration . when i make a user "boy" in the /raddb/users file,such as boy Auth-Type := Local, User-Password == "888", Expiration := "20 Aug 2003" it works well but when i put it in mysql ,like below ,it doesn't work | id | UserName| Attribute | Value | op | +-+-++---+--+ | 1 | boy | Expiration | "20 Aug 2003" | := | anybody can get me some message about Expiration use with mysql .Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
dialup_admin with ldap server
hi, I've installed dialup_admin and want to use it to monitor the activities of our radius server. We're using ldap database for user authentication. The FQA of dailup_admin mentions mySQL is needed as it's used to keep the radius accounting data. I'm wondering is it possible to keep the data in flat files? We aren't in favor of installing another database just for the purpose of radius accounting data storage, and we want to keep ldap for authentication use only. Do you have any suggestions on how to implement that? Also in the admin.conf, can we disable the use of sql database so the php scripts won't try to connect to sql database? Any help will be greatly appreciated. thanks, Annie Tong MAE Engineering MCI - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Reply-Message from Exec-Program-Wait with exit code 1
Hmm... I just bought the Radius book from O'Reilly (ordered 1 month ago), but of course Murphy had to show up... I don't find anything in the book about Exec-Program(-Wait) !!! Anybody any idea ?!? > Hi, > > I have setup radius with mysql authentication and exec-program-wait for > authorization. > > Some examples of what the script does: > > If the user's account is ok, I output: > Reply-Message = "Your account is valid until xx/xx/xx." > Session-Timeout = 3600 > > If the user's has no more amount on his account, I output: > Reply-Message = "You have no amount left on your account." > and stop the script with exit code 1 > > If the user's account has expired, I output: > Reply-Message = "Your account has expired." > and stop the script with exit code 1 > > Now, when the script exits with code 1, freeradius sends an Auth-Reject > packet with the message "authentication failed (by external program)" > instead of the Reply-Message attribute. > > I tried with exiting with code 0 and Auth-Type = Reject, but then the login > is accepted instead of rejected. > > I just want the script to be able to reject a user while sending a proper > reply-message why he has been rejected. > > Thanx. > > Thor Spruyt > System Engineer > Mobile: +32 (0)475 67 22 65 > Email: [EMAIL PROTECTED] > Loose those wires ! www.sinfilo.com > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
freeradius + iodbc + mssql
Hi List, I try use the freeradius+iodbc+freetds+mssql, but when start freeradius he says "Segmentation fault". The freetds (tsql) works fine, the iodbc (odbctest) works fine. Connect, select, insert, works normally, but freeradius not work. Freeradius backtrace: --skip-- sql: group_membership_query = "" sql: connect_failure_retry_delay = 60 sql: simul_count_query = "" sql: simul_verify_query = "" rlm_sql (sql): Driver rlm_sql_iodbc (module rlm_sql_iodbc) loaded and linked rlm_sql (sql): Attempting to connect to [EMAIL PROTECTED]:/radius rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_iodbc #0 Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 16384 (LWP 21663)] _iodbcdm_sqlerror (henv=0x8104330, hdbc=0x8104358, hstmt=0x62646f69, szSqlstate=0xbfffe3a0 "", pfNativeError=0xbfffe398, szErrorMsg=0x40237400 "", cbErrorMsgMax=256, pcbErrorMsg=0xbfffe39e, bDelete=1) at herr.c:273 273 thdbc = pstmt->hdbc; (gdb) bt #0 _iodbcdm_sqlerror (henv=0x8104330, hdbc=0x8104358, hstmt=0x62646f69, szSqlstate=0xbfffe3a0 "", pfNativeError=0xbfffe398, szErrorMsg=0x40237400 "", cbErrorMsgMax=256, pcbErrorMsg=0xbfffe39e, bDelete=1) at herr.c:273 #1 0x40251408 in SQLError (henv=0x8104330, hdbc=0x8104358, hstmt=0x62646f69, szSqlstate=0xbfffe3a0 "", pfNativeError=0xbfffe398, szErrorMsg=0x40237400 "", cbErrorMsgMax=256, pcbErrorMsg=0xbfffe39e) at herr.c:503 #2 0x4023605d in sql_error (sqlsocket=0x62646f69, config=0x8102ec0) at sql_iodbc.c:293 #3 0x40235ca3 in sql_init_socket (sqlsocket=0x8103ed0, config=0x8102ec0) at sql_iodbc.c:64 #4 0x4023150a in connect_single_socket (sqlsocket=0x8103ed0, inst=0x81022f0) at sql.c:70 #5 0x4023169a in sql_init_socketpool (inst=0x81022f0) at sql.c:130 #6 0x4023034d in rlm_sql_instantiate (conf=0x8102ec0, instance=0x62646f69) at rlm_sql.c:522 #7 0x080546d5 in find_module_instance (instname=0x80a5e38 "sql") at modules.c:358 #8 0x080555da in do_compile_modsingle (component=1, ci=0x80a5e18, filename=0x805dca2 "radiusd.conf", grouptype=0, modname=0xbfffe758) at modcall.c:773 #9 0x08055718 in compile_modsingle (component=1, ci=0x80a5e18, filename=0x805dca2 "radiusd.conf", modname=0xbfffe758) at modcall.c:788 #10 0x08054aae in load_component_section (cs=0x80a5d28, comp=1, filename=0x805dca2 "radiusd.conf") at modules.c:558 #11 0x08054d88 in setup_modules () at modules.c:834 #12 0x0804c3e0 in main (argc=2, argv=0xb964) at radiusd.c:443 #13 0x400f45cd in __libc_start_main () from /lib/libc.so.6 Any idea? Thanks. -- Marcus Grando - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RES: Phone Numbers per client
sergio jose ferreira wrote: Guy, Thanks, But I would like to use mysql table for do that. Just add a line to the radcheck table with the following info UserName | Attribute | Value | op -- usuario | Calling-Station-Id | 08738351590 | == Hope that helps, Keith - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: rlm_passwd and Group-Name
Le jeu 21/08/2003 à 21:05, 3APA3A a écrit : > Dear Eric Leblond, > > Probably you call passwd after file module. Make sure passwd is called > prior to file module to assume you can use results of rlm_passwd in > users file. I did not miss that point (at least this one) I've put passwd file before users in radiusd.conf. Logs show that the var is defined. BR, -- Eric Leblond <[EMAIL PROTECTED]> Init-Sys - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RES: Phone Numbers per client
Guy, Thanks, But I would like to use mysql table for do that. Sergio. -Mensagem original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] nome de Guy Fraser Enviada em: quinta-feira, 21 de agosto de 2003 17:29 Para: [EMAIL PROTECTED] Assunto: Re: Phone Numbers per client Hi I can't remember all the details but I believe you just put an entry in 'users' like : usernameAuth-Type = System , Calling-Station-Id := '1234567' [TAB]Fall-Through = Yes Guy sergio jose ferreira wrote: >Hi, > > How can I limit my clients to connect on my RAS only if them are using a >registred phone number ? Where I put this numbers ? radcheck ? > > thanks, > >Sergio Ferreira >WGO ISP >Brazil > > > >- >List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > > > -- Guy Fraser Network Administrator The Internet Centre 780-450-6787 , 1-888-450-6787 There is a fine line between genius and lunacy, fear not, walk the line with pride. Not all things will end up as you wanted, but you will certainly discover things the meek and timid will miss out on. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Phone Numbers per client
Hi I can't remember all the details but I believe you just put an entry in 'users' like : usernameAuth-Type = System , Calling-Station-Id := '1234567' [TAB]Fall-Through = Yes Guy sergio jose ferreira wrote: Hi, How can I limit my clients to connect on my RAS only if them are using a registred phone number ? Where I put this numbers ? radcheck ? thanks, Sergio Ferreira WGO ISP Brazil - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Guy Fraser Network Administrator The Internet Centre 780-450-6787 , 1-888-450-6787 There is a fine line between genius and lunacy, fear not, walk the line with pride. Not all things will end up as you wanted, but you will certainly discover things the meek and timid will miss out on. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: rlm_passwd and Group-Name
Dear Eric Leblond, Probably you call passwd after file module. Make sure passwd is called prior to file module to assume you can use results of rlm_passwd in users file. --Thursday, August 21, 2003, 9:42:12 PM, you wrote to [EMAIL PROTECTED]: EL> Hi, EL> I use rlm_passwd to create a Group-Name for each user. EL> But I'm not able to do any test with if it (FreeRADIUS Version 0.8.1). EL> I've add at the end of users : EL> DEFAULT Group-Name == "ADSL", Huntgroup-Name == "ADSL" EL> Service-Type = Framed-User, EL> Framed-Protocol = PPP, EL> Tunnel-Type = L2TP, EL> Tunnel-Medium-Type = IP, EL> RB-Tunnel-Local-Name = LACLD, EL> It does nothing, even if I see that Group-Name ADSL has been added EL> before. EL> What need to be done to have this test working EL> Thanks in advance, -- ~/ZARAZA Таким образом он умирает в шестой раз - и опять на новом месте. (Твен) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Phone Numbers per client
Hi, How can I limit my clients to connect on my RAS only if them are using a registred phone number ? Where I put this numbers ? radcheck ? thanks, Sergio Ferreira WGO ISP Brazil - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: clients.conf
> From: Jeremy Davis > Sent: Wednesday, 20 August 2003 1:12 AM > I understand that much. I the ips range from 141. 208. 65. to a few others. > I tried using the 0.0.0.0/1 but that only worked when the nas was behide a > firewall with a private address. Tried 0.0.0.0/0 ? I _think_ that works under the 0.9 release. 0.0.0.0/1 will only match servers whose first octect is less than 128... I'm guessing your private IP address was 10.x.x.x, and you compared it to Internet-valid server IPs which all happened to be above 127 for the first octet. :-) -- = Paul "TBBle" Hampson Bubblesworth Pty Ltd (ABN: 51 095 284 361) [EMAIL PROTECTED] This is a one line proof...if we start sufficiently far to the left. -- Cambridge University Math Department - Random signature generator 3.0 by Paul "TBBle" Hampson = - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
rlm_passwd and Group-Name
Hi, I use rlm_passwd to create a Group-Name for each user. But I'm not able to do any test with if it (FreeRADIUS Version 0.8.1). I've add at the end of users : DEFAULT Group-Name == "ADSL", Huntgroup-Name == "ADSL" Service-Type = Framed-User, Framed-Protocol = PPP, Tunnel-Type = L2TP, Tunnel-Medium-Type = IP, RB-Tunnel-Local-Name = LACLD, It does nothing, even if I see that Group-Name ADSL has been added before. What need to be done to have this test working Thanks in advance, -- Eric Leblond <[EMAIL PROTECTED]> Alphalink - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Which come first
> From: Jeff Sullivan > Sent: Friday, 15 August 2003 6:40 AM > Which values come first when authorizing > radreply or radgrouprepy? Surely it doesn't matter... If you use the operators correctly, you can control what overrides what, as far as I remember. > I put and expire in rad reply but they still get on. Sounds like a different problem to me. -- = Paul "TBBle" Hampson Bubblesworth Pty Ltd (ABN: 51 095 284 361) [EMAIL PROTECTED] This is a one line proof...if we start sufficiently far to the left. -- Cambridge University Math Department - Random signature generator 3.0 by Paul "TBBle" Hampson = - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Again - rlm_ippool problem.
> From: Kleyson Rios > Sent: Tuesday, 19 August 2003 9:52 PM > In my lib directory exist the files. > /usr/local/freeradius/lib/rlm_ippool-0.9.0.so Try: ldd /usr/local/freeradius/lib/rlm_ippool-0.9.0.so and make sure it's able to resolve it's linked libraries. > radiusd.conf[1258] Failed to link to module 'rlm_ippool': file not found -- Paul "TBBle" Hampson Bubblesworth Pty Ltd (ABN: 51 095 284 361) [EMAIL PROTECTED] This is a one line proof...if we start sufficiently far to the left. -- Cambridge University Math Department - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Segmentation fault on Freeradius
> From: Yasser Ahmed Hosny > Sent: Wednesday, 20 August 2003 12:53 PM > I am running Freeradius 0.9 and I am writing accounting records to an > Oracle DB ver 8i. If the Database goes down, the Freeradius gives a > segmentation fault error and dies. I've tried also to point to another > database as a fail-over option, but the same results were encountered. > Please find below the gdb output along with the debug output and the > configuration. > #0 sql_error (sqlsocket=0x1b2ba0, config=0x1a1078) at sql_oracle.c:49 > 49 OCIErrorGet((dvoid *) oracle_sock->errHandle, (ub4) 1, > (text *) NULL, > (gdb) bt > #0 sql_error (sqlsocket=0x1b2ba0, config=0x1a1078) at sql_oracle.c:49 > #1 0xfed630c8 in rlm_sql_accounting (instance=0x19e1f8, request=0x203190) at > rlm_sql.c:793 At first glance, this appears to be barfing because it's trying to contact the absent server with OCIErrorGet to find out why it can't contact the server As a test, try putting 'return msgbuf;' on line 48, right after the memset call. You'll get no error text in your logs, but if that fixes it then we've possibly hit a segfaulting bug in liboracleclient... It'd be worth checking the values of the parameters to OCIErrorGet to confirm they're what we'd expect... I think the command in GDB is 'print oracle_sock->errHandle' and the like... Mind you, I don't know the meaning of the parameters to OCIErrorCode anyway... It may just need some parameter checking before OCIErrorCode is called. Anyway, the reason it doesn't failover is because this segfault comes on the line before the module returns RLM_MODULE_FAIL, which I expect would trigger the failover. So with the 'return' inserted as described above, it should failover fine. -- = Paul "TBBle" Hampson Bubblesworth Pty Ltd (ABN: 51 095 284 361) [EMAIL PROTECTED] This is a one line proof...if we start sufficiently far to the left. -- Cambridge University Math Department - Random signature generator 3.0 by Paul "TBBle" Hampson = - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Compiling on Tru64 v5.1B
> From: [EMAIL PROTECTED] > Sent: Wednesday, 20 August 2003 9:33 PM > I was wondering if anybody has tried this combination. Doesn't look like it... > When I try to compile the software, make fails with a lot of errors. The > configure stage went without any error messages at all. Feel free to post the makefile errors and we can have a look. No promises though. Before you do that, make sure you're using GNU make, in case that's the problem. (Possibly installed as gmake) -- = Paul "TBBle" Hampson Bubblesworth Pty Ltd (ABN: 51 095 284 361) [EMAIL PROTECTED] This is a one line proof...if we start sufficiently far to the left. -- Cambridge University Math Department - Random signature generator 3.0 by Paul "TBBle" Hampson = - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: cannot compile with --with-experimental-modules in freebsd 4.8
> From: apellido jr., wilfredo p > Sent: Friday, 22 August 2003 2:23 AM >im trying to install the latest cvs of > freeradius (freeradius-snapshot-20030820)in freebsd > 4.8, without experimental modules the radius almost > work but since we are thinking of prepaid internet ( > 10 hrs , 20 hrs and unlimited where consumable for one > month) im trying to install with > --with-experimental-modules and here my log: > then make: > Making static dynamic in rlm_smb... > gmake[5]: Entering directory > `/usr/local/freeradius-snapshot-20030820/src/modules/rlm_smb' > gcc -g -O2 -pthread -D_THREAD_SAFE -Wall > -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual > -Wcast-align -Wwrite-strings - You seem to have trimmed off the rest of the line here. > gmake[5]: Leaving directory And there's no actual error visible here either... Try logging the errors to a file rather than (presumably?) cut and pasting them from the terminal emulator. Make sure you get stderr as well as stdout (if you're using bash, '>log 2>&1' is what I _think_ you need.) Alternatively, if it builds properly without --with-experimental, and you only need one or two other modules, try adding them to src/modules/stable. -- = Paul "TBBle" Hampson Bubblesworth Pty Ltd (ABN: 51 095 284 361) [EMAIL PROTECTED] This is a one line proof...if we start sufficiently far to the left. -- Cambridge University Math Department - Random signature generator 3.0 by Paul "TBBle" Hampson = - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: cannot compile with --with-experimental-modules in freebsd 4.8
"apellido jr., wilfredo p" <[EMAIL PROTECTED]> wrote: >im trying to install the latest cvs of > freeradius (freeradius-snapshot-20030820)in freebsd > 4.8, without experimental modules the radius almost > work but since we are thinking of prepaid internet ( > 10 hrs , 20 hrs and unlimited where consumable for one > month) im trying to install with > --with-experimental-modules and here my log: Nothing in what you posted shows what the error is. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRadius and Cygwin
Philip Blow wrote: Hi, I've got FreeRADIUS 0.9.0 working on CYGWIN but have not had a chance to post the changes for doc/CYGWIN. If you can wait I hope to do this in the next few days. I won't be needing it to next week. The problem is that are existing Radius server (an old version of RadiusNT) won't let us put into custom vendors and such to the dictionary file. It has served us well for five years, but now we have new equipment. If you could forward me a copy of the instructions when you're done, it would be most appreciated. -- Aaron Clausen [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
cannot compile with --with-experimental-modules in freebsd 4.8
hello, im trying to install the latest cvs of freeradius (freeradius-snapshot-20030820)in freebsd 4.8, without experimental modules the radius almost work but since we are thinking of prepaid internet ( 10 hrs , 20 hrs and unlimited where consumable for one month) im trying to install with --with-experimental-modules and here my log: /configure --localstatedir=/var --sysconfdir=/etc --enable-ltdl-install --with-rlm-mysql-lib-dir=/usr/local/lib/mysql --with-rlm-mysql-include-dir=/usr/local/include/mysql --with-experimental-modules then make: /usr/local/freeradius-snapshot-20030820/libtool --mode=link ld \ -module -static -g -O2 -pthread -D_THREAD_SAFE -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwri ar cru rlm_realm.a rlm_realm.o ranlib rlm_realm.a gmake[5]: Leaving directory `/usr/local/freeradius-snapshot-20030820/src/modules/rlm_realm' Making static dynamic in rlm_smb... gmake[5]: Entering directory `/usr/local/freeradius-snapshot-20030820/src/modules/rlm_smb' gcc -g -O2 -pthread -D_THREAD_SAFE -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings - gmake[5]: Leaving directory `/usr/local/freeradius-snapshot-20030820/src/modules/rlm_smb' gmake[4]: Leaving directory `/usr/local/freeradius-snapshot-20030820/src/modules' gmake[3]: Leaving directory `/usr/local/freeradius-snapshot-20030820/src/modules' gmake[2]: Leaving directory `/usr/local/freeradius-snapshot-20030820/src' gmake[1]: Leaving directory `/usr/local/freeradius-snapshot-20030820/src' *** Error code 2 Stop in /usr/local/freeradius-snapshot-20030820. anyone can suggest, please thanks = [ apellido jr., wilfredo p. ] +63 034 4880-449 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Antigen found VIRUS= W32/Sobig.f@MM (NAI) worm
Antigen for Exchange found your_document.pif infected with VIRUS= W32/[EMAIL PROTECTED] (NAI) worm. The message is currently Removed. The message, "Thank you!", was sent from [EMAIL PROTECTED] and was discovered in Realtime Scan Job\Brian Deitte\Inbox located at MACROMEDIA/NEWTON/S1001EXM01. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Debian Libtool (Was: FreeRADIUS now part of Red Hat Linux)
> From: Nicolas Baradakis > Sent: Thursday, 21 August 2003 9:46 PM > The "libtool" package in SID is now version 1.5 so you have to use > package "libtool1.4" to build freeradius because the projet uses old > version of the autotools. > >From description of package "libtool1.4" > < > Description: Generic library support script (obsolete version) > Obsolete compatibility package of GNU Libtool 1.4. Only required for > developing software using Autoconf 2.13. > > > I suggest to put "libtool | libtool1.4" in the line Build-Depends > of debian/control file, and it should be fine with all Debian > distributions. I'll go with libtool1.4 | libtool instead, so that libtool1.4 is chosen by default... Infact, it prolly should be versioned since we actually won't work with libtool after 1.5 got into Debian. Or I presume we won't. Unless anyone speaks up and says that libtool1.5 works, I'll fix this tomorrow, after I've had a look at the libtool docs on an Debian/unstable machine. Thankyou! -- = Paul "TBBle" Hampson Bubblesworth Pty Ltd (ABN: 51 095 284 361) [EMAIL PROTECTED] This is a one line proof...if we start sufficiently far to the left. -- Cambridge University Math Department - Random signature generator 3.0 by Paul "TBBle" Hampson = - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FR0.9.0 + oracle9.2.0.1.0 configure failed
Kevin,
try to set this environment variable:
CONFIG_SHELL=/bin/ksh
Andrea
At 07.58 21/08/03, you wrote:
Thanks Andrea,
Now the directory problem solved by links, but I still have other problem
here,
configure:1099: gcc -o conftest -g
-O2 conftest.c -L/usr/local/oracle/lib -loracleclient 1>&5
/usr/bin/ld: cannot find -loracleclient
collect2: ld returned 1 exit status
configure: failed program was:
#line 1092 "configure"
#include "confdefs.h"
extern char oracle_init();
int main() {
oracle_init()
; return 0; }
I cannot find this lib in oracle's lib path. Where can I find it? If you
have one ,can you send it to me?
Also, I'm a newbie on oracle, can you give me the oracle table schema for
voip authen and accounting ?
Thanks !
Kevin Jin
- Original Message -
From: "Andrea Gabellini" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, August 18, 2003 9:44 PM
Subject: Re: FR0.9.0 + oracle9.2.0.1.0 configure failed
At 12.00 18/08/03, you wrote:
>hi group,
>
>I'm trying on freeradius-0.9.0 and oracle9.2.0.1 on my Redhat 8.0. I got
>the follow errors:
>
> >checking for oci.h... no
> >configure: warning: oracle headers not found. Use
> --with-oracle-home-dir=.
> >configure: warning: sql submodule 'oracle' disabled
>
>I have searched the list and got failed also when I use
>--with-oracle-home-dir=/opt/oracle/product/9.2.0/
>--with-oracle-lib-dir=/opt/oracle/product/9.2.0/rdbms/demo/
>--with-oracle-include-dir=/opt/oracle/product/9.2.0/rdbms/demo/
>
>Anybody have ideas on this?
I setup the ORACLE_HOME environment variable and the LD_LIBRARY_PATH (I'm
using Solaris). The configure script find oracle itself. I'm using Oracle
8.1 and FR 0.8.1
LD_LIBRARY_PATH=/usr/local/lib:/usr/lib:/usr/local/oracle/lib
ORACLE_HOME=/usr/local/oracle
Andrea
>Thanks
>
>kevin
>ü¸¬¶)ߣû.nÇ+?·¿º{.nÇ+?·ÿI硶Úÿÿü0Ã÷ëyêÚv+¬þSàþX¬·û¬z»ÿ?Ù¥
---
This world may be another world's hell.
---
Ing. Andrea Gabellini
Email: [EMAIL PROTECTED]
Tel: 0549 886111 (Italy)
Tel. +378 0549 886111 (International)
Intelcom San Marino S.p.A.
Strada degli Angariari, 3
47891 Rovereta
Repubblic of San Marino
http://www.omniway.sm http://www.intelcom.sm
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
ü¸¬¶)ߣû.nÇ+·¿º{.nÇ+·ÿI硶Úÿÿü0Ã÷ëyêÚv+¬þàþX¬·û¬z»ÿÙ¥
---
All computers wait at the same speed.
---
Ing. Andrea Gabellini
Email: [EMAIL PROTECTED]
Tel: 0549 886111 (Italy)
Tel. +378 0549 886111 (International)
Intelcom San Marino S.p.A.
Strada degli Angariari, 3
47891 Rovereta
Repubblic of San Marino
http://www.omniway.sm http://www.intelcom.sm
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRADIUS now part of Red Hat Linux
Paul Hampson wrote: > I'm always happy to hear about bugs in the Debian build process. > No, let me rephrase that. If there are bugs in the Debian build > process, I'm happy to hear them. I'm happier if there are no bugs, > but I'm not that delusional. :-) The "libtool" package in SID is now version 1.5 so you have to use package "libtool1.4" to build freeradius because the projet uses old version of the autotools. >From description of package "libtool1.4" < Description: Generic library support script (obsolete version) Obsolete compatibility package of GNU Libtool 1.4. Only required for developing software using Autoconf 2.13. > I suggest to put "libtool | libtool1.4" in the line Build-Depends of debian/control file, and it should be fine with all Debian distributions. Index: debian/control === RCS file: /source/radiusd/debian/control,v retrieving revision 1.34 diff -u -r1.34 control --- control 10 Jul 2003 20:43:06 - 1.34 +++ control 21 Aug 2003 11:38:35 - @@ -1,5 +1,5 @@ Source: freeradius -Build-Depends: debhelper (>= 3.4.4), libltdl3-dev, libpam0g-dev, postgresql-dev, libmysqlclient10-dev | libmysqlclient-dev, libgdbm-dev | libgdbmg1-dev, libldap2-dev, libsasl2-dev, libsnmp4.2-dev, libiodbc2-dev, libkrb5-dev, libssl-dev, libtool, snmp, autoconf2.13, autotools-dev +Build-Depends: debhelper (>= 3.4.4), libltdl3-dev, libpam0g-dev, postgresql-dev, libmysqlclient10-dev | libmysqlclient-dev, libgdbm-dev | libgdbmg1-dev, libldap2-dev, libsasl2-dev, libsnmp4.2-dev, libiodbc2-dev, libkrb5-dev, libssl-dev, libtool | libtool1.4, snmp, autoconf2.13, autotools-dev Section: net Priority: optional Maintainer: Chad Miller <[EMAIL PROTECTED]> -- Nicolas Baradakis - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: cisco voip accounting
Hi, > Hi Alan, > Is it possible to give me a detail about the command so that I can > implement, coz i found the command dot1x services but can't understand > properly that which switch should I use. CISCO have lots and lots of easily readable and obtainable docs. as a quick help for interfaces you'll need to use something like dot1x port-control auto and in the main config, make sure that 'aaa' is being used...eg aaa authentication dot1x default group radius alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Re: Thank you!
Suggested Answer Bonjour, Merci davoir contacté le Support Technique dUbi Soft. Afin de traiter plus rapidement et plus efficacement votre problème, nous avons mis à votre disposition différentes aides disponibles sur notre site Internet, rubrique « Support » http://support.ubisoft.fr. 1. un guide de dépannage (« Avant toute chose ») précisant toutes les précautions à prendre pour le bon fonctionnement dun jeu vidéo. 2. la liste des « FAQ » (questions/ réponses) disponibles sur votre jeu. Au cas où la réponse à votre problème ne figurerait pas dans ces 2 sections, vous avez la possibilité de joindre notre Service Consommateurs en cliquant sur la section « Nous contacter » (toujours dans la rubrique « Support » de notre site Web). Nous vous ouvrirons gratuitement une boîte de messagerie à votre nom (section « Mon compte »), avec laquelle vous pourrez recevoir et envoyer tous les messages concernant les jeux Ubi Soft. A bientôt Léquipe Service Consommateurs Ubi Soft Thank You for contacting Ubi Soft Technical Support. We are no longer accepting standard e-mail support requests. Your original e-mail will not be processed. Please follow the steps below to find the answers you need. To better assist you, please visit our Technical Support website at http://support.ubi.com to view the solutions we have to frequently asked questions. It's easy to use our search to find the answers you need for a particular game: 1 - Go to http://support.ubi.com and click on "FAQ". 2 - Now click on "Find Answers" 3 - Now you can use our large database, which includes questions and answers for almost all of our games to search for your answer. *** If after searching our FAQ database you are still unable to find an answer, click on the "Ask a Question" tab. *** If you are replying to an e-mail and you are receiving this message, please go to http://ubisoft.custhelp.com/cgi-bin/ubisoft.cfg/php/enduser/acct_login.php to login to your incident using your user ID (email address). Once you log in, you will be able to update your support incident correctly. Again your original e-mail will not be processed. You will need to follow the steps listed above. Thank You, Ubi Soft Technical Support
Re: cisco voip accounting
You may find answer on this site:
http://www.cisco.com/en/US/tech/tk652/tk701/technologies_white_paper09186a00800d6b72.shtml
- Original Message -
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, August 21, 2003 2:19 PM
Subject: Re: cisco voip accounting
> Hi Alan,
> Is it possible to give me a detail about the command so that I can
> implement, coz i found the command dot1x services but can't understand
> properly that which switch should I use.
>
> Regards
>
> --
> Arup
>
> >Hi,
>
> > radius-server host XXX.XXX.XXX.XXX auth-port 1812 acct-port 1813
> > radius-server key abc123
> >
> > But no response received from cisco yet.
>
> >you've set up the radius server info, but havent actually
> >defined dot1x services. use the dot1x command to get things
> >going
> >?
>
> >alan
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
Ëbú?²æìr¸{û§²æìr¸y'Ûiÿü0ÁúÞz¶ë(®å˺ǫ²f
