Re: Login-Time Problem Freeradius-0.9.1

2003-10-12 Thread Kostas Kalevras
On Sat, 11 Oct 2003, apellido jr., wilfredo p wrote:

 Good day Mr. Kalevras, thanks for the reply. I think
 the problem is my NAS (Cyclades Ze using Portslave)
 and Portmaster. And i got another one problem
 Simultaneous-Use doesnt work also. if the user is
 already connected then i tried to connect using
 radtest unfortunately it is accepted. In dialup_admin
 Online user report shows it disconnected

Well that means that the session has not been logged in the radacct table as
open. Make sure that accounting works correctly and that the user sessions are
correctly logged in the accounting database. Also make sure that the module
handling the session checking (either sql or radutmp) is listed both in the
session and accounting sections.

 but it radius
 log (radius -xx) nothing stating that the user is
 disconnected. In reality the user still connected.
 Lastly, I got no log in my radius.log and i know that
 the problem also related to my NAS. I got no any
 Manual so i tried to search any documentation in web
 but unfortunately im still hanging looking for
 anything. Do u have any Suggestion ? thanks very much

 =
 [ apellido jr., wilfredo p. ]
 +63 034 4880-449

 If you can't hear me, it's because i'm in parentheses.

 __
 Do you Yahoo!?
 The New Yahoo! Shopping - with improved product search
 http://shopping.yahoo.com

 -
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


--
Kostas Kalevras Network Operations Center
[EMAIL PROTECTED]   National Technical University of Athens, Greece
Work Phone: +30 210 7721861
'Go back to the shadow' Gandalf

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Login-Time Problem Freeradius-0.9.1

2003-10-11 Thread Kostas Kalevras
On Fri, 10 Oct 2003, apellido jr., wilfredo p wrote:

 Good day, im just wondering if my configuration is
 correct. I tried to limit the internet access of the
 user april from 11 pm - 3 am then i got this entry in
 my DB. After 3 am why isnt it the user (april) is
 still Online?

Make sure that radiusd is sending back a Session-Timeout attribute and that your
NAS is honnoring it.

 I tried to disconnect her and when she
 login once again she cant, i got this reply msg from
 radius :

 Reply-Message = You are calling outside your allowed
 timespan\r\n

 That's what i actually expect. What im missing here?
 thanks thanks.

--
Kostas Kalevras Network Operations Center
[EMAIL PROTECTED]   National Technical University of Athens, Greece
Work Phone: +30 210 7721861
'Go back to the shadow' Gandalf

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Login-Time Problem Freeradius-0.9.1

2003-10-11 Thread apellido jr., wilfredo p
Good day Mr. Kalevras, thanks for the reply. I think
the problem is my NAS (Cyclades Ze using Portslave)
and Portmaster. And i got another one problem
Simultaneous-Use doesnt work also. if the user is
already connected then i tried to connect using
radtest unfortunately it is accepted. In dialup_admin
Online user report shows it disconnected but it radius
log (radius -xx) nothing stating that the user is
disconnected. In reality the user still connected.
Lastly, I got no log in my radius.log and i know that
the problem also related to my NAS. I got no any
Manual so i tried to search any documentation in web
but unfortunately im still hanging looking for
anything. Do u have any Suggestion ? thanks very much

=
[ apellido jr., wilfredo p. ]
+63 034 4880-449

If you can't hear me, it's because i'm in parentheses.

__
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Login-Time Problem Freeradius-0.9.1

2003-10-10 Thread apellido jr., wilfredo p
Good day, im just wondering if my configuration is
correct. I tried to limit the internet access of the
user april from 11 pm - 3 am then i got this entry in
my DB. After 3 am why isnt it the user (april) is
still Online? I tried to disconnect her and when she
login once again she cant, i got this reply msg from
radius : 

Reply-Message = You are calling outside your allowed
timespan\r\n

That's what i actually expect. What im missing here?
thanks thanks. 


mysql select * from radcheck;
++--+-++-+
| id | UserName | Attribute   | op | Value
  |
++--+-++-+
|  1 | janine   | User-Password   | == | janine   
  |
|  2 | apellido | User-Password   | := | apellido 
  |
|  4 | jinh | User-Password   | := | jinh 
  |
|  9 | april| User-Password   | := | april
  |
|  8 | cache| User-Password   | := | cache
  |
| 10 | april| Max-Monthly-Session | := | 36000
  |
| 11 | april| Login-Time  | := |
Al2300-0300 |
| 12 | april| Expiration  | =  | 31
October 2003 |
| 13 | cache| Expiration  | == | 31
October 2003 |
| 15 | cache| Login-Time  | := | 2300-2400
  |
++--+-++-+
10 rows in set (0.03 sec)


=
[ apellido jr., wilfredo p. ]
+63 034 4880-449

If you can't hear me, it's because i'm in parentheses.

__
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Login-Time problem

2001-12-17 Thread Aleksandr Kuzminsky

On Sat, 15 Dec 2001, power jessie wrote:

 Date: Sat, 15 Dec 2001 15:25:41 -0800
 From: power jessie [EMAIL PROTECTED]
 Reply-To: [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: Login-Time problem



 Version  : FreeRADIUS 0.4
 Platform : FreeBSD 4.3 Release

 I can't seem to make Login-Time to work for me, everytime
 i add a Login-Time attribute to either user or group
 in the mysql table, it always reject the request...
 but if i remove the Login-Time attribute, it authenticate
 successfuly.

 What am i lacking here? any leads pls ...
I do as Randy Moore adviced (see Simultaneous-Use in SQL table?),
e.g. patch sql.conf and modify sql-scheme.
Then Login-Time attribute put to radgroupcheck table
| GroupName | Attribute  | Value   | op |

| mygroup   | Login-Time | al0900-1800 | := |

In usergroup point that ingoth belong to mygroup
| UserName | GroupName |

| ingoth   | mygroup   |
And it seems work.
But I have not clear understanding what mean := in op field.

---
Aleksandr Kuzminsky,AK476-RIPE
System Administrator,   AK16-UANIC
ISP NBI.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Re: Login-Time problem

2001-12-17 Thread aland

power jessie [EMAIL PROTECTED] wrote:
 i also wonder what does ':=' do? how does it differ from '=='?

  'man users'

 also, is it possible for 'Login-Time' to have two or more 
 time span in a day,  say in Monday 9:00 - 10:00 AM and then 
 1:00 - 3:00 PM. can it be done? 

  Yes.  See the documentation that comes with the server.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Login-Time problem

2001-12-14 Thread power jessie



Version  : FreeRADIUS 0.4
Platform : FreeBSD 4.3 Release

I can't seem to make Login-Time to work for me, everytime
i add a Login-Time attribute to either user or group
in the mysql table, it always reject the request...
but if i remove the Login-Time attribute, it authenticate
successfuly.

What am i lacking here? any leads pls ...

Thanks In Advance!

feliz navidad!
jessie


here's the ouput from radtest :

eagle # radtest jessie test localhost 0 testing123
Sending Access-Request of id 44 to 127.0.0.1:1812
  User-Name = jessie
Password = \025\004\331\036\223dp*\0060|\005u\021/\252
  NAS-IP-Address = eagle.power.com.ph
NAS-Port-Id = 0
rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=44, length=20

and the output from radiusd -A -X

rlm_sql: Released sql socket id: 4
rlm_sql: Pairs do not match [jessie]
  modcall[authorize]: module sql returns notfound
modcall: group authorize returns ok
auth: No Auth-Type configuration for the request, rejecting the user
auth: Failed to validate the user.
Login incorrect: [jessie/test] (from nas local port 0)
Sending Access-Reject of id 44 to 127.0.0.1:1119
Finished request 3
Going to the next request
--- Walking the entire request list ---
Waking up in 6 seconds...
--- Walking the entire request list ---
Cleaning up request 3 ID 44 with timestamp 3c1b6695
Nothing to do.  Sleeping until we see a request.


---
This mail is certified Virus Free. No need to worry.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.306 / Virus Database: 166 - Release Date: 12/4/2001


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html