MySQL and ids and such

2002-06-26 Thread Cosby, Christopher
Title: MySQL and ids and such





Reading sql.conf says (summarized) "use any query/tables you want" and that item 0 should be "Row ID (currently unused)".  Great.  I want to ignore that id column and create a new primary key.  Is there any reason that I can't create a primary key on (UserName, Attribute) as a compound index?  It was thus be saying that for each user an attribute can once and only once.  Is that a safe assumption?  I ask because I like the functionality of "replace into..." of MySQL, but it only works with the primary key in a table.

So, it'll look like this.  But, will it work properly?


mysql> desc radcheck;
+---+--+--+-+-+---+
| Field | Type | Null | Key | Default | Extra |
+---+--+--+-+-+---+
| UserName  | varchar(64)  |  | PRI | |   |
| Attribute | varchar(32)  |  | PRI | |   |
| Value | varchar(253) |  | | |   |
| op    | char(2)  | YES  | | NULL    |   |
+---+--+--+-+-+---+
4 rows in set (0.00 sec)


mysql> show index from radcheck;
+--++--+--+-+---+-+--++-+

| Table    | Non_unique | Key_name | Seq_in_index | Column_name | Collation | Cardinality | Sub_part | Packed | Comment |

+--++--+--+-+---+-+--++-+

| radcheck |  0 | PRIMARY  |    1 | UserName    | A |    NULL | NULL | NULL   | |

| radcheck |  0 | PRIMARY  |    2 | Attribute   | A |   2 | NULL | NULL   | |

+--++--+--+-+---+-+--++-+

2 rows in set (0.00 sec)


:: sql.conf ::
authorize_check_query = "SELECT 1,UserName,Attribute,Value,op FROM ${authcheck_table} WHERE UserName = '%{SQL-User-Name}'"

authorize_reply_query = "SELECT 1,UserName,Attribute,Value,op FROM ${authreply_table} WHERE UserName = '%{SQL-User-Name}'"



Christopher S. Cosby
SciCare Software Services




 - - - - - - -  Appended by Scientific-Atlanta, Inc.  - - - - - - -  
This e-mail and any attachments may contain information which is confidential, proprietary, privileged or otherwise protected by law. The information is solely intended for the named addressee (or a person responsible for delivering it to the addressee). If you are not the intended recipient of this message, you are not authorized to read, print, retain, copy or disseminate this message or any part of it. If you have received this e-mail in error, please notify the sender immediately by return e-mail and delete it from your computer. 




pam_radius_auth

2002-06-12 Thread Cosby, Christopher
Title: pam_radius_auth





All,


I'm trying to do the impossible it seems and would appreciate some help.  I want to use your pam_radius_auth module to make pppd-2.4.1 auth off of freeradius using MSCHAPv2.  I've gotten OpenSSH to work fine with the pam_radius_auth module, so at least the module and the radius server are working (although not complete for pppd, just haven't added some of the CHECK/REPLY items).  I have also gotten pppd to use p_r_a when using PAP authentication.  Works fine using pppd auth login -chap +pap.  As soon as I add `+chap -pap', everything goes to hell, meaning at that point pppd won't even attempt to use PAM.  I'll post this on the pppd list as well.

The question:
Is it possible to use pam_radius_auth with pppd to do MSCHAPv2 auth against freeradius?


Thanks in advance.


Christopher S. Cosby <[EMAIL PROTECTED]>
SciCare Software Services




 - - - - - - -  Appended by Scientific-Atlanta, Inc.  - - - - - - -  
This e-mail and any attachments may contain information which is confidential, proprietary, privileged or otherwise protected by law. The information is solely intended for the named addressee (or a person responsible for delivering it to the addressee). If you are not the intended recipient of this message, you are not authorized to read, print, retain, copy or disseminate this message or any part of it. If you have received this e-mail in error, please notify the sender immediately by return e-mail and delete it from your computer. 




RE: freeradius 0.2 with oracle8.1.7

2001-08-30 Thread Cosby, Christopher
Title: RE: freeradius 0.2 with oracle8.1.7





This brings up a question I've been wondering about for some time now.  It's clear how to enable MySQL, Postgres, Oracle and the likes.  I have Oracle, Informix, MySQL, and Postgres installed on my system and working fine.  If I were to build freeradius, how would I tell the configure script to ignore everything except MySQL?  I don't ever intend to use Oracle or Posgres as my SQL backend, so why build?  If someone will give me the short answer, I might even be persuaded to write some semi-official documentation on it.

Christopher S. Cosby
Scientific-Atlanta, Inc.
SciCare Broadband Services
[EMAIL PROTECTED]



-Original Message-
From: Oleg Serdyukov [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 30, 2001 6:55 AM
To: [EMAIL PROTECTED]
Subject: Re: freeradius 0.2 with oracle8.1.7



Hello!


> Then I add the --with-oracle-home-dir=...,just like :
> ./configure --localstatedir=/var --sysconfdir=/etc --with-oracle-home-dir=/u01/app/oracle/product/8.1.7
> The directory is the $ORACLE_HOME directory, isn't it? Then I try $ORACLE_BASE ,it still fail.
>
> what should I do?


My command line is:
./configure --prefix=/usr/local/freeradius --with-raddbdir=/etc/raddb
--with-logdir=/var/log/radius --with-threads --with-thread-pool
--with-oracle-home-dir=/u01/app/oracle/product/8.1.7
--with-oracle-include-dir=/u01/app/oracle/product/8.1.7/rdbms/demo
(Oracle 8.1.7 & RedHat Linux 7.1 & FreeRadius 0.2)


/etc/raddb/sql.conf:
driver = "rlm_sql_oracle"
server = "localhost"
login = "user"
password = "password"
radius_db = "ORA8" # Oracle SID



With best regards,
-- 
Oleg Serdyukov, OLE-RIPE
Utel NOC. Kiev, Ukraine



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html







- - - - - - - Appended by Scientific-Atlanta, Inc. - - - - - - -

EN-US;mso-bidi-language:AR-SA">This e-mail and any attachments may contain information which is confidential, proprietary, privileged or otherwise protected by law. The information is solely intended for the named addressee (or a person responsible for delivering it to the addressee). If you are not the intended recipient of this message, you are not authorized to read, print, retain, copy or disseminate this message or any part of it. If you have received this e-mail in error, please notify the sender immediately by return e-mail and delete it from your computer.