Using Exec-Program = program %f

[Paulo Angelo]

Hi All,

I'm having some problems with Free Radius 0.4 when I try to
execute a external program (a shell script).

I've created a user in users file like:


pa  Auth-Type := Local, Password == pa
Service-Type = Framed-User,
Exec-Program = /root/sh %u %f,
Framed-Protocol = PPP


But, using portslave-1.2.0pre12-8cl on a Linux box, it can't
get the Framed IP address from the user, I don't know if the problem is
with the Portslave or with the configuration or cause Free Radius really
can't get the IP address.

I can connect using this user, but it execute the program
(/root/sh) like :

/root/sh pa ?.?.?.?

What should I do?


Thank you

Paul Angel


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Realms and authorization/authentication

[Paulo Lima]

Hi,

I am having difficulties to find a way to configure 
freeradius (0.3) for the following application:

3 realms (isp1.com, isp2.com and isp3.com), using 
ldap, for each ISP I would need to use a different LDAP server.

I can configure different instances of the LDAP 
module using ldap ISP1 { ...} and so on, each instance can have a different 
server assigned, however I could not find a way that authorize would use the 
different ldap instance according to the realm.

If I just do a sequential search through all ldap 
instance I run into a problem where the same username can be used on the 
different ISPs.

Does anybory now a way to configure such an 
application using freeradius?

Question about LDAP

[Paulo Lima]

Hi Freeradius users!

resent

I have a question related to the LDAP module 
for Freeradius. The other Radius servers I looked at that do support LDAP, 
have 2 different options for LDAP, the first called "bind" will take the 
uid+realm and passwd and attempt to bind to the ldap server, if if goes through 
it accepts the radius request, the second method uses a search where the server 
is already binded to the ldap server using an administrative psswd and it 
searchs for the uid and compares with the passwd stored at the ldap server. I 
notice that Freeradius supports the first method , anybody knows if it also 
supports the second method?

Thanks,

PAulo/

LDAP module

[Paulo Lima]

Hi Freeradius users!

I have a question related to the LDAP module 
for Freeradius. The other Radius servers I looked at that do support LDAP, 
have 2 different options for LDAP, the first called "bind" will take the 
uid+realm and passwd and attempt to bind to the ldap server, if if goes through 
it accepts the radius request, the second method uses a search where the server 
is already binded to the ldap server using an administrative psswd and it 
searchs for the uid and compares with the passwd stored at the ldap server. I 
notice that Freeradius supports the first method , anybody knows if it also 
supports the second method?

Thanks,

PAulo/

Does freeradius support login / logout program execution?

[Paulo]

Hi. New to this list so hello all.

My name is Paulo and i live work in lisbon, portugal.

i have a question - well more like a multi part question/problem monster!

I am running cistron radius. I want to limit access per month to a certain
amount of hours. this must be based on callling number id - not username.

solution was to make a c program that entered a record into a mysql database
if it didn't exist, or check total time if it exists when someone logs in.
fine.

then i wanted to execute another program at logout to update the time. not
fine! cistron does not seem to support this.

my question : does Free radius support this? someone on the cistron radius
mailling list told me yes but i can see this documented anywhere. if its
does, can these programs be anything (i.e. perl, tcl, php, whatever)

any help much appreciated
-paulo  (i-m g-o-i-n-g m-a-d)



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html