Accounting problem

2003-07-07 Thread Chhai Thach
Title: Accounting problem







I received this warning message:

rlm_acct_unique: WARNING: Attribute 87 was not found in request, unique ID MAY be inconsistent

and radius does not update the accounting data once the user disconnected. The Acct ID doesn't match hence cannot update? Any idea how to fix it?

Thanks

Chhai Thach




convert citron radius accounting file to freeradius mysql

2003-06-10 Thread Chhai Thach
Hi all,

I'm looking for a script that reads citron radius log file and dump into
the FR mysql database. 

Thanks,
Chhai 



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Exec-Program-Wait on PHP4

2003-03-13 Thread Chhai Thach
I think it's possible by cheating... although I have not tested it.

Inside the exe-program-wait sh script, call your php file and pass the
variables to it


Chhai

-Original Message-
From: Eric [mailto:[EMAIL PROTECTED] 
Sent: Thursday, 13 March 2003 8:05 PM
To: [EMAIL PROTECTED]
Subject: Exec-Program-Wait on PHP4 

It is possible on not?

- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


multiple value in radcheck

2003-02-11 Thread Chhai Thach
Is there anyway to enter multiple values for radcheck or radreply?

For example, I only want a user to dial to certain pop number 881234566
and 881234567. This doesn't work. 

Called-Station-Id := 881234566, 881234567

Is it possible? 

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



help with Exec-program-wait

2003-02-06 Thread Chhai Thach
I have been trying to execute a perl script using Exec-Program-Wait.
First I created an SH file called exec-program-wait, then from inside
the sh program, I run ./myperlscript

I get this error:

radius_xlat:  '/usr/tarka/bin/exec-program-wait'
Exec-Program: /usr/tarka/bin/exec-program-wait
/usr/tarka/bin/exec-program-wait: ./myperlscript: No such file or
directory
Exec-Program-Wait: value-pairs: Reply-Message += "Hello, %u", 
Exec-Program: returned: 0

My purpose is to run the perl script, rather than SH. And it seems this
is the only way I can figure out how.

Can any help? Thanks.

Chhai

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



RE: One login and many users

2003-01-13 Thread Chhai Thach
Why would you need to do that? What are you trying to achieve? I think one login and 
one password has the same affect as one login and 1000 password because there is no 
uniqueness about it. 


-Original Message-
From: leaobicalho [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, 14 January 2003 5:34 AM
To: [EMAIL PROTECTED]
Subject: One login and many users

Hi friends, me again...
I need have one user with 1000
password, how can i do it? sample, i
need many passwords and one login only

thanks

gracias...

 
__
E-mail Premium BOL
Antivírus, anti-spam e até 100 MB de espaço. Assine já!
http://email.bol.com.br/



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



RE: Network User Authentication

2002-12-02 Thread Chhai Thach









Use PPTP for VPN. Make sure you have
configured your NAS to support VPN and the user can dial to your NAS using IP
address or host name. 

 

Chhai

 



Frontier ISP Pty Ltd

Internet
access in any flavour

Phone:  +61 8 8241 5166

Fax: +61 8 8241 5123

Web: www.frontierisp.net.au



 

-Original
Message-
From: jeevan
[mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, 3 December 2002
5:09 PM
To:
[EMAIL PROTECTED]
Subject: Network User
Authentication

 



Hi





 





Can I use freeRadius for
authenticating (non dialin) users who want





to log into my network from internet
.If so How to.





 





With Regards





jeevan





 





 










RE: SQL Authentication Failure

2002-11-28 Thread Chhai Thach









See
below

 

-Original
Message-
From: Vijay Reddy
[mailto:[EMAIL PROTECTED]] 
Sent: Friday, 29
 November 2002
4:25
 PM
To: [EMAIL PROTECTED]
Subject: SQL Authentication
Failure

 



Hi,





 





   I Installed 
FreeRadius and MySQL on Linux ,I inserted the record in the radcheck using
query into the server





 





Insert into
radcheck(UserName,Attribute,Value) values
("vreddy","vreddy","test");





 





Now we started the Radius Server as
radiusd -X,and when we started the test client with options as below





 





radtest vreddy test localhost 0
testing123





 





client is sending & resending
the Access-Request packets,but server is not responding,the following error is
occured at Server Side





 





rad_recv: Access-Request packet from
host 127.0.0.1:33380, id=72, length=58
    User-Name = "vreddy"
    User-Password = "vreddy"
    NAS-IP-Address = 255.255.255.255
    NAS-Port = 0
modcall: entering group authorize
  modcall[authorize]: module
"preprocess" returns ok
rlm_chap: Could not find proper Chap-Password attribute in request

 

I think the client dial up tries to use
CHAP but you only have User-Password stored in your database. 

If you change the dial up client to PAP it
should works. 

 


  modcall[authorize]: module "chap"
returns noop
  modcall[authorize]: module "mschap"
returns notfound
    rlm_realm: No '@' in User-Name = "vreddy", looking
up realm NULL
    rlm_realm: No such realm NULL
  modcall[authorize]: module "suffix"
returns noop
radius_xlat:  'vreddy'
rlm_sql (sql): sql_set_user escaped user --> 'vreddy'
radius_xlat:  'SELECT id,UserName,Attribute,Value,op
FROM radcheck WHERE Username = 'vreddy' ORDER BY id'
rlm_sql (sql): Reserving sql socket id: 4
rlm_sql_mysql: query:  SELECT id,UserName,Attribute,Value,op
FROM radcheck WHERE Username = 'vreddy' ORDER BY id
rlm_sql: unknown attribute 
rlm_sql (sql): Error getting data from database
rlm_sql (sql): SQL query error; rejecting user
rlm_sql (sql): Released sql socket id: 4
  modcall[authorize]: module "sql"
returns fail
modcall: group authorize returns fail
Finished request 0
Going to the next request





 





 





 





regards





Vijay Reddy





 





 










RE: Freeradius-Users digest, Vol 1 #1300 - 1 msg

2002-11-27 Thread Chhai Thach
Dialup_admin comes with freeradius. You should find in the freeradius
install folder after you decompressed it. 

- Chhai


-Original Message-
From: Iq [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, 28 November 2002 5:23 PM
To: [EMAIL PROTECTED]
Subject: Re: Freeradius-Users digest, Vol 1 #1300 - 1 msg

Hi,
what is this dial-up admin and where do i get it from 
 
> Use dialup_admin to view usage. You can find the sql queries in the =
> source code
> 
regards,

Iqtadar Raja


- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



RE: Linux+freeradius+mysql

2002-11-27 Thread Chhai Thach
Use dialup_admin to view usage. You can find the sql queries in the source code

Chhai


-Original Message-
From: Iq [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, 28 November 2002 3:29 PM
To: [EMAIL PROTECTED]
Subject: Linux+freeradius+mysql

Hi everyone,
   tried freeradius with mysql, got it working but how do I
get usage details out of radacct table. Is there a query provided anywhere.
I made two sessions and got both of them in radacct.
Bellow is a copy of  what I got in radacct


mysql> select * from radacct where Username='iraja';
+---+---+--+--+---+-
-+---+-+-+-+
-+---+---+---+--
---+--+-+--+
+-++-+--
--+---+
| RadAcctId | AcctSessionId | AcctUniqueId | UserName | Realm | NASIPAddress
| NASPortId | NASPortType | AcctStartTime   | AcctStopTime|
AcctSessionTime | AcctAuthentic | ConnectInfo_start | ConnectInfo_stop  |
AcctInputOctets | AcctOutputOctets | CalledStationId | CallingStationId |
AcctTerminateCause | ServiceType | FramedProtocol | FramedIPAddress |
AcctStartDelay | AcctStopDelay |
+---+---+--+--+---+-
-+---+-+-+-+
-+---+---+---+--
---+--+-+--+
+-++-+--
--+---+
| 2 | 7100034B  |  | iraja|   | 203.14.183.2
|12 | Async   | 2002-11-26 22:27:39 | 2002-11-26 22:29:08 |
89 | RADIUS| 38666 LAPM/V42BIS | 24000 LAPM/V42BIS |1399
| 1064 | 87966000|  | User-Request
| Framed-User | PPP| 203.14.193.11  |  0 |
0 |
| 4 | 7100034C  |  | iraja|   | 203.14.183.2
|11 | Async   | 2002-11-26 22:30:46 | 2002-11-26 22:36:12 |
326 | RADIUS| 52000 LAPM/V42BIS | 52000 LAPM/V42BIS |
159179 |  1355687 | 87966000|  |
User-Request   | Framed-User | PPP| 203.14.193.12   |
0 | 0 |
+---+---+--+--+---+-
-+---+-+-+-+
-+---+---+---+--
---+--+-+--+
+-++-+--
--+---+
2 rows in set (0.00 sec)

mysql>


If you have any questions or comments, kindly do not hesitate to contact us
at Golden IT.

kind regards,

 Internet Services Administrator
Golden IT
Ph:  +61 (3) 97052511
Fax: +61 (3) 97052544
Email: [EMAIL PROTECTED]
Web: www.goldenit.net.au


-
Please advise the originator by telephone (03)9705 2511 in the event that
this transmission is incomplete.
IF THIS EMAIL HAS BEEN SENT TO YOU BY MISTAKE: please call (03) 9705 2511
and destroy it immediately. This email may contain Information which is
confidential or which is subject to legal professional privilege. You must
not use this email or the Information in it. Any confidentiality or
privilege is not waived or lost because this email has been sent to you by
mistake.


- Original Message -
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, November 28, 2002 2:30 PM
Subject: Freeradius-Users digest, Vol 1 #1298 - 10 msgs


> Send Freeradius-Users mailing list submissions to
> [EMAIL PROTECTED]
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://lists.cistron.nl/mailman/listinfo/freeradius-users
> or, via email, send a message with subject or body 'help' to
> [EMAIL PROTECTED]
>
> You can reach the person managing the list at
> [EMAIL PROTECTED]
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Freeradius-Users digest..."
>
>
> Today's Topics:
>
>1. RE: Re: FreeRadius 0.8, Oracle 8.1.7. Problem with CPU load
(Novoselsky Alexander)
>2. Re: User Configuartion Help and Interesting Scenario (Alan Wong)
>3. Re: EAP/TLS testing: SSL_set_my_callback (Artur Hecker)
>4. Re: SSL_read Error: EAP-TLS (Artur Hecker)
>5. RE: use freeradius to clear line (Chhai  Thach)
>6. RE: use freeradius to clear line (Chhai  Thach)
>

RE: use freeradius to clear line

2002-11-27 Thread Chhai Thach
Radzap doesn't seem to work for me either. I have two users stuck in FR
but they have disconnected from NAS a long time ago. 

-Chhai

-Original Message-
From: Vitaliy Karlov [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, 28 November 2002 1:51 AM
To: [EMAIL PROTECTED]
Subject: Re: use freeradius to clear line

On Wed, Nov 27, 2002 at 10:10:33AM -0500, Alan DeKok wrote:
> "Chhai  Thach" <[EMAIL PROTECTED]> wrote:
> > Is there a way to manually disconnect the user using freeradius
instead
> > of NAS?
> 
>   Did you bother reading the FAQ?

May be I wrong, but in FR-0.8 radzap is broken!

I yourself want delete user from line, but nothing more, then log-entry:
in radius.log "Error: No clients entry for localhost", did not recieve
:(
In client and  clients.conf I have records for localhost!

Any suggestion?

PS. Now I use radzap from FR-0.7...

-- 
WBR, Vitaliy Karlov [KV1670-RIPE]

- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



RE: use freeradius to clear line

2002-11-27 Thread Chhai Thach
Thanks Alan!

I read the FAQ once before and I remembered that freeradius could kick
users but I forgot that it was in the FAQ if that make sense at all!

Chhai

-Original Message-
From: Alan DeKok [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, 28 November 2002 1:41 AM
To: [EMAIL PROTECTED]
Subject: Re: use freeradius to clear line 

"Chhai  Thach" <[EMAIL PROTECTED]> wrote:
> Is there a way to manually disconnect the user using freeradius
instead
> of NAS?

  Did you bother reading the FAQ?

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



use freeradius to clear line

2002-11-26 Thread Chhai Thach
Hi there

Is there a way to manually disconnect the user using freeradius instead
of NAS?  

- Chhai

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



MS-Chap bug??

2002-11-25 Thread Chhai Thach
I have got freeradius 0.8 to authenticate using MS-Chap just fine by
itself if I set DEFAULT Auth-Type := MS-Chap, which mean it wouldn't
authenticate using anything else like chap or PAP. 

I've removed the default auth type completely, Chap works, but MS-Chap
won't. Seems that freeradius auto doesn't detect MS Chap and set
Auth-Type to MS Chap? Could this be a bug? 

rad_recv: Access-Request packet from host x:1645, id=97, length=131
Framed-Protocol = PPP
User-Name = "micro"
MS-CHAP-Challenge = 0xafcc8e6aa8d39643
MS-CHAP-Response =
0x0a01c73a7f8ba45a
ad1bd9e132fb54075a7f779294a808a42961
NAS-Port = 7
NAS-Port-Type = Virtual
Service-Type = Framed-User
NAS-IP-Address = 
modcall: entering group authorize
  modcall[authorize]: module "preprocess" returns ok
  modcall[authorize]: module "mschap" returns notfound
rlm_chap: Could not find proper Chap-Password attribute in request
  modcall[authorize]: module "chap" returns noop
rlm_realm: No '@' in User-Name = "micro", looking up realm NULL
rlm_realm: No such realm NULL
  modcall[authorize]: module "suffix" returns noop
radius_xlat:  'micro'


Chhai

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



RE: serious radclient bug! (2)

2002-11-25 Thread Chhai Thach
-- I have a feeling that the password stored inside your database is encrypted.


I have sql and chap in authorize section and the password is cleartext for
sure =) freeradius even finds it!

rlm_chap: Using clear text password testpasswd for user test
-- it says that when the password you are storing is encrypted :)

Chhai

On Tue, 26 Nov 2002, Chhai  Thach wrote:

> In the radius.conf file under the authenticate function, it say: 
> 
> 
> Most people want CHAP authentication
> A back-end database listed in the 'authorize' section
> MUST supply a CLEAR TEXT password.  Encrypted passwords
> won't work.
> 
> 
> I couldn't get MS-Chap going though with neither encrypted or unencripted password. 
> 
> 
> 
> 
> -Original Message-
> From: Evren Yurtesen [mailto:[EMAIL PROTECTED]] 
> Sent: Tuesday, 26 November 2002 2:19 PM
> To: [EMAIL PROTECTED]
> Subject: serious radclient bug! (2)
> 
> Sorry, maybe this is not a bug =)
> But still I couldnt get freeradius to work with MySQL and CHAP
> I use plain text passwords in MySQL and everything else seems fine
> 
> in radcheck I have
> Username AttributeValue   Op
> test User-Passwd  testpassed  :=
> 
> in radgroupcheck
> GroupName  Attribute  Value  op  
> 64Kbit/s   Auth-Type  CHAP   := 
> 
> and test user is in this group...
> 
> I get this error
> 
> tunnel:/usr/local/dialup_admin#radclient localhost auth testing123
> User-Name = "test"
> CHAP-Password = "testpasswd"
> Received response ID 242, code 3, length = 32
> Ascend-Data-Rate = 64000
> tunnel:/usr/local/dialup_admin#
> 
> and my -sxx output is...
> 
> tunnel:/usr/local/etc/raddb#radiusd -sxx
> Starting - reading configuration files ...
> reread_config:  reading radiusd.conf
> Config:   including file: /usr/local/etc/raddb/clients.conf
> Config:   including file: /usr/local/etc/raddb/sql.conf
>  main: prefix = "/usr/local"
>  main: localstatedir = "/usr/local/var"
>  main: logdir = "/var/log"
>  main: libdir = "/usr/local/lib"
>  main: radacctdir = "/var/log/radacct"
>  main: hostname_lookups = no
> read_config_files:  reading dictionary
> read_config_files:  reading clients
> read_config_files:  reading realms
> read_config_files:  reading naslist
>  main: max_request_time = 30
>  main: cleanup_delay = 5
>  main: max_requests = 1024
>  main: delete_blocked_requests = 0
>  main: port = 0
>  main: allow_core_dumps = no
>  main: log_stripped_names = no
>  main: log_auth = no
>  main: log_auth_badpass = no
>  main: log_auth_goodpass = no
>  main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid"
>  main: user = "(null)"
>  main: group = "(null)"
>  main: usercollide = no
>  main: lower_user = "no"
>  main: lower_pass = "no"
>  main: nospace_user = "no"
>  main: nospace_pass = "no"
>  main: proxy_requests = no
>  security: max_attributes = 200
>  security: reject_delay = 1
>  main: debug_level = 0
> read_config_files:  entering modules setup
> Module: Library search path is /usr/local/lib
> Module: Loaded CHAP 
> Module: Instantiated chap (chap) 
> Module: Loaded SQL 
>  sql: driver = "rlm_sql_mysql"
>  sql: server = "localhost"
>  sql: port = ""
>  sql: login = "radius"
>  sql: password = "radius2best"
>  sql: radius_db = "radius"
>  sql: acct_table = "radacct"
>  sql: acct_table2 = "radacct"
>  sql: authcheck_table = "radcheck"
>  sql: authreply_table = "radreply"
>  sql: groupcheck_table = "radgroupcheck"
>  sql: groupreply_table = "radgroupreply"
>  sql: usergroup_table = "usergroup"
>  sql: nas_table = "nas"
>  sql: dict_table = "dictionary"
>  sql: sqltrace = no
>  sql: sqltracefile = "/var/log/sqltrace.sql"
>  sql: deletestalesessions = yes
>  sql: num_sql_socks = 5
>  sql: sql_user_name = "%{User-Name}"
>  sql: authorize_check_query = "SELECT id,UserName,Attribute,Value,op FROM
> radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id"
>  sql: authorize_reply_query = "SELECT id,UserName,Attribute,Value,op FROM
> radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id"
>  sql: authorize_group_check_query = "SELECT
> 
>radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op
> FROM radgroupcheck,usergroup WHERE usergroup.Username = '%{SQL-User-Name}'
> AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY
&

RE: serious radclient bug! (2)

2002-11-25 Thread Chhai Thach
In the radius.conf file under the authenticate function, it say: 


Most people want CHAP authentication
A back-end database listed in the 'authorize' section
MUST supply a CLEAR TEXT password.  Encrypted passwords
won't work.


I couldn't get MS-Chap going though with neither encrypted or unencripted password. 




-Original Message-
From: Evren Yurtesen [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, 26 November 2002 2:19 PM
To: [EMAIL PROTECTED]
Subject: serious radclient bug! (2)

Sorry, maybe this is not a bug =)
But still I couldnt get freeradius to work with MySQL and CHAP
I use plain text passwords in MySQL and everything else seems fine

in radcheck I have
Username AttributeValue   Op
test User-Passwd  testpassed  :=

in radgroupcheck
GroupName  Attribute  Value  op  
64Kbit/s   Auth-Type  CHAP   := 

and test user is in this group...

I get this error

tunnel:/usr/local/dialup_admin#radclient localhost auth testing123
User-Name = "test"
CHAP-Password = "testpasswd"
Received response ID 242, code 3, length = 32
Ascend-Data-Rate = 64000
tunnel:/usr/local/dialup_admin#

and my -sxx output is...

tunnel:/usr/local/etc/raddb#radiusd -sxx
Starting - reading configuration files ...
reread_config:  reading radiusd.conf
Config:   including file: /usr/local/etc/raddb/clients.conf
Config:   including file: /usr/local/etc/raddb/sql.conf
 main: prefix = "/usr/local"
 main: localstatedir = "/usr/local/var"
 main: logdir = "/var/log"
 main: libdir = "/usr/local/lib"
 main: radacctdir = "/var/log/radacct"
 main: hostname_lookups = no
read_config_files:  reading dictionary
read_config_files:  reading clients
read_config_files:  reading realms
read_config_files:  reading naslist
 main: max_request_time = 30
 main: cleanup_delay = 5
 main: max_requests = 1024
 main: delete_blocked_requests = 0
 main: port = 0
 main: allow_core_dumps = no
 main: log_stripped_names = no
 main: log_auth = no
 main: log_auth_badpass = no
 main: log_auth_goodpass = no
 main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid"
 main: user = "(null)"
 main: group = "(null)"
 main: usercollide = no
 main: lower_user = "no"
 main: lower_pass = "no"
 main: nospace_user = "no"
 main: nospace_pass = "no"
 main: proxy_requests = no
 security: max_attributes = 200
 security: reject_delay = 1
 main: debug_level = 0
read_config_files:  entering modules setup
Module: Library search path is /usr/local/lib
Module: Loaded CHAP 
Module: Instantiated chap (chap) 
Module: Loaded SQL 
 sql: driver = "rlm_sql_mysql"
 sql: server = "localhost"
 sql: port = ""
 sql: login = "radius"
 sql: password = "radius2best"
 sql: radius_db = "radius"
 sql: acct_table = "radacct"
 sql: acct_table2 = "radacct"
 sql: authcheck_table = "radcheck"
 sql: authreply_table = "radreply"
 sql: groupcheck_table = "radgroupcheck"
 sql: groupreply_table = "radgroupreply"
 sql: usergroup_table = "usergroup"
 sql: nas_table = "nas"
 sql: dict_table = "dictionary"
 sql: sqltrace = no
 sql: sqltracefile = "/var/log/sqltrace.sql"
 sql: deletestalesessions = yes
 sql: num_sql_socks = 5
 sql: sql_user_name = "%{User-Name}"
 sql: authorize_check_query = "SELECT id,UserName,Attribute,Value,op FROM
radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id"
 sql: authorize_reply_query = "SELECT id,UserName,Attribute,Value,op FROM
radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id"
 sql: authorize_group_check_query = "SELECT
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op
FROM radgroupcheck,usergroup WHERE usergroup.Username = '%{SQL-User-Name}'
AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY
radgroupcheck.id"
 sql: authorize_group_reply_query = "SELECT
radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op
FROM radgroupreply,usergroup WHERE usergroup.Username = '%{SQL-User-Name}'
AND usergroup.GroupName = radgroupreply.GroupName ORDER BY
radgroupreply.id"
 sql: authenticate_query = "SELECT Value,Attribute FROM radcheck WHERE
UserName = '%{User-Name}' AND ( Attribute = 'User-Password' OR Attribute =
'Password' OR Attribute = 'Crypt-Password' ) ORDER BY Attribute DESC"
 sql: accounting_onoff_query = "UPDATE radacct SET AcctStopTime='%S',
AcctSessionTime=unix_timestamp('%S') - unix_timestamp(AcctStartTime),
AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay =
%{Acct-Delay-Time} WHERE AcctSessionTime=0 AND AcctStopTime=0 AND
NASIPAddress= '%{NAS-IP-Address}' AND AcctStartTime <= '%S'"
 sql: accounting_update_query = "UPDATE radacct SET FramedIPAddress =
'%{Framed-IP-Address}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND
UserName = '%{SQL-User-Name}' AND NASIPAddress= '%{NAS-IP-Address}' AND
AcctStopTime = 0"
 sql: accounting_start_query = "INSERT into radacct (RadAcctId,
AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId,
NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic,
ConnectInfo_start, ConnectInfo_stop, 

RE: Killer Daemon?

2002-11-24 Thread Chhai Thach









Doesn’t Freeradius
do that?

 

It it doesn’t,
you can write a perl scrip to run rsh
(rsh servername clear int ).

 

-Original
Message-
From: Andrew Hardman
[mailto:[EMAIL PROTECTED]] 
Sent: Monday, 25
 November 2002
3:55
 PM
To: Freeradius Users
Subject: Killer Daemon?

 



Hi





 





Does anyone know where i can get a
program to dis users once the server is full?





 





Kind Regards,






Andrew Hardman










RE: Usage (Traffic) Based RADIUS Accounting Question

2002-11-24 Thread Chhai Thach
How do you forge the alive packet in cisco? Could someone please give me
the commands? Appreciated.

-Original Message-
From: Jason Lixfeld [mailto:[EMAIL PROTECTED]] 
Sent: Sunday, 24 November 2002 3:13 AM
To: [EMAIL PROTECTED]
Subject: Re: Usage (Traffic) Based RADIUS Accounting Question

>   That's what "alive" packets are for.  They're "interim update"
> messages which tell you the accounting status while the user is logged
> in.

Yeah, I discovered those as I read on about Cisco's aaa implementation. 
I've turned them on and just need to figure out if they interact
properly with the defacto SQL back end.

>   It's bad.  If the NAS doesn't send alive packets, then you can forge
> them.  But *don't* forge stop packets.

Luckily my NAS does support them, so looks like problem solved lest any
problems with the sql side of FR.

>   Alan DeKok.
> 
> - 
> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
> 
-- 
Regards,

Jason A. LixfeldFastvibe Corporation
Senior IP Network Engineer  220-156 Front St. W
[EMAIL PROTECTED]   Toronto, ON M5V-2L6
-
tel://416.341.0099:223  fax://416.341.0088



- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



RE: dialup_admin error

2002-11-24 Thread Chhai Thach
Have you configured the config files properly? They are all in /dialup_admin/conf/

Chhai

-Original Message-
From: Leandro Machado [mailto:[EMAIL PROTECTED]] 
Sent: Saturday, 23 November 2002 4:34 AM
To: [EMAIL PROTECTED]
Subject: dialup_admin error

I´m running Apache 1.3.20 + PHP4 to support dialup_admin.

When I try to execute i have the following: "Could not include SQL library
functions. Aborting. "

I cant find any reference to it on mail list, suggestions?


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



freeradius 0.8 and mysql

2002-11-21 Thread Chhai Thach








Hi all

 

I have been testing freeradius 0.8
but I can’t seem to get the mysql
authentication going. When I run it in debug mode, this is what I get:

 

rlm_sql (sql): Driver rlm_sql_mysql
(module rlm_sql_mysql) loaded and linked

rlm_sql (sql): Attempting to connect to root@localhost:/radius

rlm_sql (sql): starting 0

rlm_sql (sql): Attempting to connect rlm_sql_mysql
#0

rlm_sql_mysql: Starting
connect to MySQL server for #0

rlm_sql (sql): Connected new DB handle, #0

rlm_sql (sql): starting 1

rlm_sql (sql): Attempting to connect rlm_sql_mysql
#1

rlm_sql_mysql: Starting
connect to MySQL server for #1

rlm_sql (sql): Connected new DB handle, #1

rlm_sql (sql): starting 2

rlm_sql (sql): Attempting to connect rlm_sql_mysql
#2

rlm_sql_mysql: Starting
connect to MySQL server for #2

rlm_sql (sql): Connected new DB handle, #2

rlm_sql (sql): starting 3

rlm_sql (sql): Attempting to connect rlm_sql_mysql
#3

rlm_sql_mysql: Starting
connect to MySQL server for #3

rlm_sql (sql): Connected new DB handle, #3

rlm_sql (sql): starting 4

rlm_sql (sql): Attempting to connect rlm_sql_mysql
#4

rlm_sql_mysql: Starting
connect to MySQL server for #4

rlm_sql (sql): Connected new DB handle, #4

Module: Instantiated sql (sql) 

Module: Loaded files 

 files: usersfile = "/usr/local/etc/raddb/users"



 

What seems to be wrong? Help appreciated. Thanks.

 

Chhai Thach

 

Frontier ISP Pty Ltd

Internet
access in any flavour

Phone:  +61 8 8241 5166

Fax: +61 8 8241 5123

Web: www.frontierisp.net.au