RE : sample freeradius SNMP queries
Hi, I would like to use EAP TTLS with an authentication with a LDAP server Is it possbile with freeradius 0.9.3 ??? Where can I fin documentation about FREERADIUS and LDAP nd FREERADIUS and EAP TTLS ??? Thank u -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Alan DeKok Envoyé : mardi 2 décembre 2003 17:56 À : [EMAIL PROTECTED] Objet : Re: sample freeradius SNMP queries "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote: > I compiled freeradius with SNMP support and now I would like to try to > test it. I am running 0.9.1 on redhat 9.0 . You should upgrade to 0.9.3. > Could someone send me some sample snmp queries to get me started. I > am interested in things like performance, number of users etc. Uh... FreeRADIUS doesn't implement an SNMP daemon. It uses another protocol called SMUX, to connect to an SNMP daemon, and supply it statistics. As for SNMP queries, see the MIB files distributed with the server. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: sample freeradius SNMP queries
"[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote: > I compiled freeradius with SNMP support and now I would like > to try to test it. I am running 0.9.1 on redhat 9.0 . You should upgrade to 0.9.3. > Could someone send me some sample snmp queries to get me > started. I am interested in things like performance, number of users > etc. Uh... FreeRADIUS doesn't implement an SNMP daemon. It uses another protocol called SMUX, to connect to an SNMP daemon, and supply it statistics. As for SNMP queries, see the MIB files distributed with the server. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
sample freeradius SNMP queries
Hi, I compiled freeradius with SNMP support and now I would like to try to test it. I am running 0.9.1 on redhat 9.0 . Could someone send me some sample snmp queries to get me started. I am interested in things like performance, number of users etc. Thanks, Dave - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: FreeRADIUS / ucd-snmp-4.2.3 snmp errors in config.log
> From: [EMAIL PROTECTED] > Sent: Friday, 26 September 2003 8:03 AM > > $ LIBS=-lssl -lcrypto > > $ export LIBS > > $ ./configure > > that may help. > Thanks, it's getting better! I did as you suggested and now > I am only getting: > > /usr/lib/libsnmp.so: undefined reference to `des_cbc_encrypt' > /usr/lib/libsnmp.so: undefined reference to `des_key_sched' Your libsnmp.so is compiled against OpenSSL 0.9.6. In OpenSSL 0.9.7, these becamse DES_cbc_encrypt etc. So you'll have to build FreeRADIUS against OpenSSL 0.9.6 instead. This means installing the 0.9.6 devel package, the name of which I can't tell you. It should have 0.9.6 and devel in it though, and force you to remove openssl-devel-0.9.7a-5. :-) And while you're at it, can you look in your config.log (without the LIBS line above) and see why it didn't try -lcrypto for you automatically? It's the test around configure:7940. It doesn't link in -lssl but from your function list before I don't think it should need to. (The test before it is 7918, the results of that test are probably relevant to 7940) -- = Paul "TBBle" Hampson Bubblesworth Pty Ltd (ABN: 51 095 284 361) [EMAIL PROTECTED] On a sidewalk near Portland State University someone wrote `Trust Jesus', and someone else wrote `But Cut the Cards'. - Random signature generator 3.0 by Paul "TBBle" Hampson = - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRADIUS / ucd-snmp-4.2.3 snmp errors in config.log
> > $ LIBS=-lssl -lcrypto > $ export LIBS > $ ./configure > > that may help. Thanks, it's getting better! I did as you suggested and now I am only getting: /usr/lib/libsnmp.so: undefined reference to `des_cbc_encrypt' /usr/lib/libsnmp.so: undefined reference to `des_key_sched' - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: FreeRADIUS / ucd-snmp-4.2.3 snmp errors in config.log
> From: Alan DeKok > Sent: Thursday, 25 September 2003 6:47 PM > "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote: > > When I run the configure script I get the following errors in config.log: > > > > /usr/lib/gcc-lib/i386-redhat-linux/3.2.2/../../../libsnmp.so: undefined > > reference to `EVP_DigestInit' > The SNMP libraries were built to use OpenSSL. Yuck. > > I am not sure how to fix this. > Do: > $ LIBS=-lssl -lcrypto > $ export LIBS > $ ./configure > that may help. If not, let the configure process run, ignoring the > complaints, and edit the Makefiles by hand. There's nothing magic > about 'configure', it's just a short-cut for the common cases. Currently, configure tests if -lsnmp requires -lcrypto... (aclocal.m4:3923) after trying without... Might be worth checking if those errors have actually caused HAVE_LIBSNMP to be undefined, ie those errors may be the _first_ attempt to find libsnmp, the second (with -lcrypto) may have worked. -- = Paul "TBBle" Hampson Bubblesworth Pty Ltd (ABN: 51 095 284 361) [EMAIL PROTECTED] On a sidewalk near Portland State University someone wrote `Trust Jesus', and someone else wrote `But Cut the Cards'. - Random signature generator 3.0 by Paul "TBBle" Hampson = - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRADIUS / ucd-snmp-4.2.3 snmp errors in config.log
"[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote: > When I run the configure script I get the following errors in config.log: > > /usr/lib/gcc-lib/i386-redhat-linux/3.2.2/../../../libsnmp.so: undefined > reference to `EVP_DigestInit' The SNMP libraries were built to use OpenSSL. Yuck. > I am not sure how to fix this. Do: $ LIBS=-lssl -lcrypto $ export LIBS $ ./configure that may help. If not, let the configure process run, ignoring the complaints, and edit the Makefiles by hand. There's nothing magic about 'configure', it's just a short-cut for the common cases. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
FreeRADIUS / ucd-snmp-4.2.3 snmp errors in config.log
Hello, I am trying to get snmp support in FreeRADIUS 0.9.1 on a Red Hat 9 box. I have installed: ucd-snmp-4.2.3-1.i386.rpm ucd-snmp-devel-4.2.3-1.i386.rpm ucd-snmp-utils-4.2.3-1.i386.rpm and resolved any dependancy isses. When I run the configure script I get the following errors in config.log: /usr/lib/gcc-lib/i386-redhat-linux/3.2.2/../../../libsnmp.so: undefined reference to `EVP_DigestInit' /usr/lib/gcc-lib/i386-redhat-linux/3.2.2/../../../libsnmp.so: undefined reference to `EVP_DigestFinal' /usr/lib/gcc-lib/i386-redhat-linux/3.2.2/../../../libsnmp.so: undefined reference to `EVP_md5' /usr/lib/gcc-lib/i386-redhat-linux/3.2.2/../../../libsnmp.so: undefined reference to `HMAC' /usr/lib/gcc-lib/i386-redhat-linux/3.2.2/../../../libsnmp.so: undefined reference to `EVP_sha1' /usr/lib/gcc-lib/i386-redhat-linux/3.2.2/../../../libsnmp.so: undefined reference to `des_cbc_encrypt' /usr/lib/gcc-lib/i386-redhat-linux/3.2.2/../../../libsnmp.so: undefined reference to `des_key_sched' /usr/lib/gcc-lib/i386-redhat-linux/3.2.2/../../../libsnmp.so: undefined reference to `EVP_DigestUpdate' /usr/lib/gcc-lib/i386-redhat-linux/3.2.2/../../../libsnmp.so: undefined reference to `RAND_bytes' . /usr/lib/libsnmp.so: undefined reference to `EVP_DigestInit' /usr/lib/libsnmp.so: undefined reference to `EVP_DigestFinal' /usr/lib/libsnmp.so: undefined reference to `EVP_md5' /usr/lib/libsnmp.so: undefined reference to `HMAC' /usr/lib/libsnmp.so: undefined reference to `EVP_sha1' /usr/lib/libsnmp.so: undefined reference to `des_cbc_encrypt' /usr/lib/libsnmp.so: undefined reference to `des_key_sched' /usr/lib/libsnmp.so: undefined reference to `EVP_DigestUpdate' /usr/lib/libsnmp.so: undefined reference to `RAND_bytes' .. I am not sure how to fix this. I have seen other posts related to ucd-snmp4.2.3 that suggest installing openSSL. I already had openssl096b-0.9.6b-6, openssl-0.9.7a-5 and openssl-devel-0.9.7a-5 installed. Any suggestions or ideas on how fix this? Thanks, Dave - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Problems with SNMP support on RedHat 9.0 with net-snmp-5.0.6-17 and freeradius-0.9.1
"[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote: > > Why not build & install net-snmp with ucd-snmp compatibility? > > If I build net-snmp with ucd-snmp compatibility then will the snmp support > in FreeRadius build properly and work on RedHat 9? I would certainly hope so... > Or is it a case of FreeRADIUS can only use ucd-snmp, not net-snmp > even if net-snmp is compiled with ucd-snmp compatibility? I have no clue why you would be asking that question. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Problems with SNMP support on RedHat 9.0 with net-snmp-5.0.6-17 and freeradius-0.9.1
> > I did not see that in the FreeRADIUS install documentation. > > Will FreeRADIUS have support for net-snmp in the future? > > If someone supplies patches. > > > > When you built & installed net-snmp? > > > > When I built and installed FreeRadius I used > > ./configure --enable-ucd-snmp-compatibility > > As I said, that won't make any difference. > > > I am planning on using SNMP to monitor FreeRADIUS as well as other things > > on that box, so I thought using net-snmp would be the better option. > > Why not build & install net-snmp with ucd-snmp compatibility? If I build net-snmp with ucd-snmp compatibility then will the snmp support in FreeRadius build properly and work on RedHat 9? Or is it a case of FreeRADIUS can only use ucd-snmp, not net-snmp even if net-snmp is compiled with ucd-snmp compatibility? thanks for your patience - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Problems with SNMP support on RedHat 9.0 with net-snmp-5.0.6-17 and freeradius-0.9.1
"[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote: > I did not see that in the FreeRADIUS install documentation. > Will FreeRADIUS have support for net-snmp in the future? If someone supplies patches. > > When you built & installed net-snmp? > > When I built and installed FreeRadius I used > ./configure --enable-ucd-snmp-compatibility As I said, that won't make any difference. > I am planning on using SNMP to monitor FreeRADIUS as well as other things > on that box, so I thought using net-snmp would be the better option. Why not build & install net-snmp with ucd-snmp compatibility? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Problems with SNMP support on RedHat 9.0 with net-snmp-5.0.6-17 and freeradius-0.9.1
> > I am trying to compile freeradius-0.9.1 with snmp support > > on a RedHat 9.0 with net-snmp-5.0.6-17. > > FreeRADIUS can only use ucd-snmp, not net-snmp. I did not see that in the FreeRADIUS install documentation. Will FreeRADIUS have support for net-snmp in the future? > > > I am using --enable-ucd-snmp-compatibility when I run configure. > > When you built & installed net-snmp? When I built and installed FreeRadius I used ./configure --enable-ucd-snmp-compatibility > If you're using it for FreeRADIUS, it won't make any difference. I am planning on using SNMP to monitor FreeRADIUS as well as other things on that box, so I thought using net-snmp would be the better option. Thanks, Dave - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Problems with SNMP support on RedHat 9.0 with net-snmp-5.0.6-17 and freeradius-0.9.1
"[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote: > I am trying to compile freeradius-0.9.1 with snmp support > on a RedHat 9.0 with net-snmp-5.0.6-17. FreeRADIUS can only use ucd-snmp, not net-snmp. > I am using --enable-ucd-snmp-compatibility when I run configure. When you built & installed net-snmp? If you're using it for FreeRADIUS, it won't make any difference. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Problems with SNMP support on RedHat 9.0 with net-snmp-5.0.6-17 and freeradius-0.9.1
Hello, I am trying to compile freeradius-0.9.1 with snmp support on a RedHat 9.0 with net-snmp-5.0.6-17. I found the following errors in config.log: In file included from configure:7707: /usr/include/ucd-snmp/asn1.h:7:2: #error "Please update your headers or configure using --enable-ucd-snmp-compatibility" In file included from configure:7708: /usr/include/ucd-snmp/snmp.h:7:2: #error "Please update your headers or configure using --enable-ucd-snmp-compatibility" In file included from configure:7709: /usr/include/ucd-snmp/snmp_impl.h:9:2: #error "Please update your headers or configure using --enable-ucd-snmp-compatibility" I am using --enable-ucd-snmp-compatibility when I run configure. When I did a search on this list, I did find a thread on this subject, Dated: Tue, 29 Jul 2003, RE: Need Help with SNMP. The previous post suggests: 1. remove the ifdefs in the headers files in /usr/include/ucd-snmp If I do this, I get the following errors: /usr/lib/gcc-lib/i386-redhat-linux/3.2.2/../../../libsnmp.so: undefined reference to `EVP_DigestInit' [SNIPPED OUT OTHER ERRORS] /usr/lib/gcc-lib/i386-redhat-linux/3.2.2/../../../libsnmp.so: undefined reference to `AES_cfb128_encrypt' AND /usr/lib/libsnmp.so: undefined reference to `EVP_DigestInit' [SNIPPED OUT OTHER ERRORS] /usr/lib/libsnmp.so: undefined reference to `AES_cfb128_encrypt' 2. OR down grade to ucd-snmp-4.2.6 since the net-snmp-5.0.6-17 headers contain: asn1.h- #ifdef UCD_COMPATIBLE #include #else #error "Please update your headers or configure using --enable-ucd-snmp-compatibility" #endif AND the previous post also says: "I think that when the --enable-ucb-snmp-compatibility switch is passed to ./configure, the configure script does not #define UCD_COMPATABILITY. This might be the problem." Sorry for such a long post, I was wondering if anyone has any other suggestions or work arounds? Thanks, Dave - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
FreeRADIUS and SNMP
Hi, I have a problem with FreeRADIUS and SNMP. I have compiled and installed FreeRADIUS on a Red Hat Linux 7.2/i386 with SNMP support. FreeRADIUS connects successfully to the SNMP agent (ucd-snmp 4.2.4). The problem is that I am not able to do anything with SNMP. On the mailing list archive I found the following email http://www.mail-archive.com/[EMAIL PROTECTED]/msg18911.html which says that: "Then try this: snmpwalk -v 2c -c public localhost .1.3.6.1.2.1.67.1.1.1.1.1.0 You should get the FreeRADIUS version back." When I do this, FreeRADIUS seems to get and parse the request from the agent as the following is printed in the FR debug output: SMUX read start SMUX read len: 38 SMUX message received type: 161 rest len: 34 SMUX_GETNEXT SMUX GET message parse: len 34 SMUX GET reqid: 332 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.1.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 1 SMUX function call index is 2 SMUX GETRSP send SMUX GETRSP reqid: 332 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 41 --- Walking the entire request list --- And in fact the same kind of output is printed for several differend OID. However, the snmpwalk result is: 67.1.1.1.1.1.0 = No more variables left in this MIB View I am obviously doing something wrong but any hints as to what? By the way. If the smux_password is incorrect in snmp.conf, FreeRADIUS crashes with "Broken pipe" when trying to register to SMUX agent. -- Tero Turtiainen [EMAIL PROTECTED] Tel: +358 40 702 8754 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Snmp?
Zoup <[EMAIL PROTECTED]> wrote: > can you guys please give me some hints about using snmp on freeradius ? > is this possible to bind it to another port beside standard snmp port (116?) > are freeradius using this port at all ?! :) FreeRADIUS isn't an SNMP daemon, so it doesn't bind to port 116. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Snmp?
> From: Zoup > Sent: Saturday, 30 August 2003 7:09 PM > can you guys please give me some hints about using snmp on freeradius ? > is this possible to bind it to another port beside standard snmp port (116?) > are freeradius using this port at all ?! :) I don't know which one you mean, altough I _assume_ it's the first answer you're after: FreeRADIUS doesn't talk SNMP directly. It registers with the SNMP multiplexer running on your system, and communicates through it. So it shouldn't bind port 116 at all. For making SNMP queries to NAS's, it uses the snmpget and snmpwalk programs on your system. (See checkrad.pl) -- = Paul "TBBle" Hampson Bubblesworth Pty Ltd (ABN: 51 095 284 361) [EMAIL PROTECTED] This is a one line proof...if we start sufficiently far to the left. -- Cambridge University Math Department - Random signature generator 3.0 by Paul "TBBle" Hampson = - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Snmp?
can you guys please give me some hints about using snmp on freeradius ? is this possible to bind it to another port beside standard snmp port (116?) are freeradius using this port at all ?! :) thanks :) -- Those who do not do politics will be done in by politics ! :) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Radius snmp monitoring
> From: Oleg Ustinov > Sent: Saturday, 23 August 2003 3:48 AM > I've compile Radius with SNMP option and have configured SNMP.conf but I'm > not sure about it is right. > I use net-snmp (latest) on Linux. You need to use ucd-snmp (libsnmp4) with FreeRADIUS. It doesn't support net-snmp (libsnmp5) yet. There should have been errors during configure that caused snmp to not be built. Have another look at the output of configure. Install ucd-snmp, reconfigure and rebuild FreeRADIUS. Then try this: snmpwalk -v 2c -c public localhost .1.3.6.1.2.1.67.1.1.1.1.1.0 You should get the FreeRADIUS version back. -- = Paul "TBBle" Hampson Bubblesworth Pty Ltd (ABN: 51 095 284 361) [EMAIL PROTECTED] This is a one line proof...if we start sufficiently far to the left. -- Cambridge University Math Department - Random signature generator 3.0 by Paul "TBBle" Hampson = - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Radius snmp monitoring
More info: If I try to get Radius stats per snmpwalk - I get follow: [EMAIL PROTECTED] root]# snmpwalk -v 2c -c N3CT15 localhost .1.3.6.1.4.1.3317.1.3.1 SNMPv2-SMI::enterprises.3317.1.3.1 = No Such Object available on this agent at this OID [EMAIL PROTECTED] root]# Why? rgs -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Oleg Ustinov Sent: Friday, August 22, 2003 7:48 PM To: [EMAIL PROTECTED] Subject: Radius snmp monitoring Hello All, I'm new in a FreeRadius and some time have a question (as you all too) Biggest is how I can monitor Radius with snmp (is it On or Off - only). I've compile Radius with SNMP option and have configured SNMP.conf but I'm not sure about it is right. If somebody let to see an example, will be greate! Now question - what I need ask by SNMPWALK to test is Radius on or off (maybe some quality param more) I use net-snmp (latest) on Linux. Best regards, - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Radius snmp monitoring
Hello All, I'm new in a FreeRadius and some time have a question (as you all too) Biggest is how I can monitor Radius with snmp (is it On or Off - only). I've compile Radius with SNMP option and have configured SNMP.conf but I'm not sure about it is right. If somebody let to see an example, will be greate! Now question - what I need ask by SNMPWALK to test is Radius on or off (maybe some quality param more) I use net-snmp (latest) on Linux. Best regards, - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Freeradius snmp and MIBS problem
I've configured the Freeradius to work with snmp. I discovered that I only get snmp response on some of the MIBS but not the others. Does Freeradius treat or manipulate all MIBS, if yes, why I cannot get reply for such MIB: radiusAccServTotalInvalidRequests, I am getting replies only on radiusAccServTotalRequests, radiusAccServUpTime, radiusAccServResetTime and radiusAccClientTable. Appreciate your help. Regards Yasser Ahmed Hosny - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Need Help with SNMP
Harrie Hazewinkel <[EMAIL PROTECTED]> wrote: > > It's part of autoconf. Ask them. > > Maybe I should ask, but you use it from them. > So why are you using it?? Because it's the best solution for a horrible problem. The whole point of using a tool is to see that it works. Knowing HOW it works is much less relevant. > Anyway, I believe just testing if the files are there > is enough for checking the existance of include files. No. You're got to check if the *compiler* thinks they exist, and if the *compiler* thinks that they are well-formed. The best way to do those checks is to compile a test program ,and #include the files. > Anyway, do people think that upgrading to NET-SNMP > is usefull and start adding AgentX based agent?? Sure. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Need Help with SNMP
On Thursday, July 31, 2003, at 04:25 PM, Alan DeKok wrote: Harrie Hazewinkel <[EMAIL PROTECTED]> wrote: While looking at it to upgrade to net-snmp, I was wondering why you do a compile test for some include files and not just a check?? It's part of autoconf. Ask them. Maybe I should ask, but you use it from them. So why are you using it?? Anyway, I believe just testing if the files are there is enough for checking the existance of include files. Anyway, do people think that upgrading to NET-SNMP is usefull and start adding AgentX based agent?? I am willing to work on it. Harrie - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: SNMP testing
On Thu, Jul 31, 2003 at 04:17:28PM -0500, Mark Key wrote: > Ethernet->Mod Config->SNMP options > Read Comm= > R/W Comm Enable=Yes > R/W Comm=write > Security=Yes > RD Mgr1= > WR Mgr1= > > Can someone post an snmpget or other snmp command statement that would > test the communication between my radius and my Max 6? snmpwalk MAXIP write system write will work, cause you did set it as R/W community. You can also use . Note that the call can be different depending on your snmp implementation. Try to use man snmpget or man snmpwalk... Oliver. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
SNMP testing
Howdy, I have a Ascend Max 6 which I wish freeradius to be able to check simultaneous usage via snmp. I have net-snmp-5.0.6-8.80.2 installed on the radius server. I have done the following configurations on the max. Ethernet->Mod Config->SNMP options Read Comm= R/W Comm Enable=Yes R/W Comm=write Security=Yes RD Mgr1= WR Mgr1= I am new to NAS configurations so I although I believe the above to be enough to have enabled SNMP on the Max 6 I am still not sure, and it may even be incorrect. Now for the question. Can someone post an snmpget or other snmp command statement that would test the communication between my radius and my Max 6? Thanks Mark Key - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Need Help with SNMP
I answer any questions where I have experience in the subject. Since my needs for FreeRadius are limited, I don't want to say anything that could be counterproductive for someone. As I become more familiar with the system, I will gladly pitch in and spend more time answering others' questions so that you may devote more time to development. I appreciate very much your efforts, I've just seen some of the replies you've given as somewhat abrupt. My apologies, Steven - Original Message - From: "Alan DeKok" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, July 31, 2003 12:53 PM Subject: Re: Need Help with SNMP > Steven Fries <[EMAIL PROTECTED]> wrote: > > What Mr. DeKok means is... > > > > He's a giant jerk and thinks he's too important to answer your questions, so > > he has to make snide remarks questioning your intelligence to make himself > > feel all nerdy and stuff. > > Hmm... I answer about 100x more questions on this list than you do, > so I don't see what you're complaining about. If you don't like my > responses, you should have the balls to answer questions yourself. > > But you don't. Instead, you whine about how you don't like my > answers. So even though I'm provably friendlier and more helpful than > you are, you think I should be doing more. That's not rude, it's just > stupid. > > I've got a simple response: Pay me to help you, and I'll be > endlessly polite. If you're not going to pay me, and if you're not > going to lift a finger to help people, then shut up, and stop > complaining about my answers. > > Alan DeKok. > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Need Help with SNMP
***Wonders who p**sed in Steven's cheerios this morning At 07:02 AM 7/31/03, you wrote: What Mr. DeKok means is... He's a giant jerk and thinks he's too important to answer your questions, so he has to make snide remarks questioning your intelligence to make himself feel all nerdy and stuff. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Need Help with SNMP
Hey gentlemen Cool down and relax...this is supposed to be mailing list ...not a WWF arena... People are doing great here in this mailing list..maybe its because of the magnitude of queries they (developers) receive and replies, keeps them in a little pressure...and if I ask silly question without doing my homework properly, then what more could I expect as an answer? Ats - Original Message - From: "Alan DeKok" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, July 31, 2003 11:23 PM Subject: Re: Need Help with SNMP > Steven Fries <[EMAIL PROTECTED]> wrote: > > What Mr. DeKok means is... > > > > He's a giant jerk and thinks he's too important to answer your questions, so > > he has to make snide remarks questioning your intelligence to make himself > > feel all nerdy and stuff. > > Hmm... I answer about 100x more questions on this list than you do, > so I don't see what you're complaining about. If you don't like my > responses, you should have the balls to answer questions yourself. > > But you don't. Instead, you whine about how you don't like my > answers. So even though I'm provably friendlier and more helpful than > you are, you think I should be doing more. That's not rude, it's just > stupid. > > I've got a simple response: Pay me to help you, and I'll be > endlessly polite. If you're not going to pay me, and if you're not > going to lift a finger to help people, then shut up, and stop > complaining about my answers. > > Alan DeKok. > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Need Help with SNMP
Steven Fries <[EMAIL PROTECTED]> wrote: > What Mr. DeKok means is... > > He's a giant jerk and thinks he's too important to answer your questions, so > he has to make snide remarks questioning your intelligence to make himself > feel all nerdy and stuff. Hmm... I answer about 100x more questions on this list than you do, so I don't see what you're complaining about. If you don't like my responses, you should have the balls to answer questions yourself. But you don't. Instead, you whine about how you don't like my answers. So even though I'm provably friendlier and more helpful than you are, you think I should be doing more. That's not rude, it's just stupid. I've got a simple response: Pay me to help you, and I'll be endlessly polite. If you're not going to pay me, and if you're not going to lift a finger to help people, then shut up, and stop complaining about my answers. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Need Help with SNMP
What Mr. DeKok means is... He's a giant jerk and thinks he's too important to answer your questions, so he has to make snide remarks questioning your intelligence to make himself feel all nerdy and stuff. Best advice, keep playing till you get something. You wrote: > "Atanu Das" <[EMAIL PROTECTED]> wrote: > > But while I run the snmpget query in the test environment I get the > > following message > > > > [EMAIL PROTECTED] snmp]# snmpget -v2c -c myradius localhost > > .1.3.6.1.2.1.67.1.1.1.1.5.0 > > SNMPv2-SMI::mib-2.67.1.1.1.1.5.0 = Counter32: 0 > > [EMAIL PROTECTED] snmp]# snmpget -v2c -c myradius localhost > > .1.3.6.1.2.1.67.2.1.1.1.5.0 > > SNMPv2-SMI::mib-2.67.2.1.1.1.5.0 = Counter32: 0 > So... what are the values you're querying? Most people don't keey > ~8 digit numbers in their heads for every MIB query, and if you can't > be bothered to look them up, I don't think you should expect that > anyone else would, either. > Alan DeKok. > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html --
Re: Need Help with SNMP
"Atanu Das" <[EMAIL PROTECTED]> wrote: > But while I run the snmpget query in the test environment I get the > following message > > [EMAIL PROTECTED] snmp]# snmpget -v2c -c myradius localhost > .1.3.6.1.2.1.67.1.1.1.1.5.0 > SNMPv2-SMI::mib-2.67.1.1.1.1.5.0 = Counter32: 0 > [EMAIL PROTECTED] snmp]# snmpget -v2c -c myradius localhost > .1.3.6.1.2.1.67.2.1.1.1.5.0 > SNMPv2-SMI::mib-2.67.2.1.1.1.5.0 = Counter32: 0 So... what are the values you're querying? Most people don't keey ~8 digit numbers in their heads for every MIB query, and if you can't be bothered to look them up, I don't think you should expect that anyone else would, either. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Need Help with SNMP
Harrie Hazewinkel <[EMAIL PROTECTED]> wrote: > While looking at it to upgrade to net-snmp, I was wondering why > you do a compile test for some include files and not just a > check?? It's part of autoconf. Ask them. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Need Help with SNMP
Greetings Everybody and special thanks to Mr. Phillip Blow and Mr. Alan DeKok I got my radius compiled with SNMP support. But while I run the snmpget query in the test environment I get the following message [EMAIL PROTECTED] snmp]# snmpget -v2c -c myradius localhost .1.3.6.1.2.1.67.1.1.1.1.5.0 SNMPv2-SMI::mib-2.67.1.1.1.1.5.0 = Counter32: 0 [EMAIL PROTECTED] snmp]# snmpget -v2c -c myradius localhost .1.3.6.1.2.1.67.2.1.1.1.5.0 SNMPv2-SMI::mib-2.67.2.1.1.1.5.0 = Counter32: 0 At the time of runnning this command, five accounting session was there and 18 authentication request were taking place simultaneously. Well Just like that, is the message natural??? Ats - Original Message - From: "Harrie Hazewinkel" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: "Harrie Hazewinkel" <[EMAIL PROTECTED]> Sent: Thursday, July 31, 2003 6:10 PM Subject: Re: Need Help with SNMP > > On Tuesday, July 29, 2003, at 08:01 PM, Alan DeKok wrote: > > > "Atanu Das" <[EMAIL PROTECTED]> wrote: > >> net-snmp-5.0.6-17 > > > > FreeRADIUS can't use net-snmp. > > While looking at it to upgrade to net-snmp, I was wondering why > you do a compile test for some include files and not just a > check?? Do you want to make sure the files contain a content > you expect?? If so, you need to use various types defined > in there and not just 'int a = 1;' > > > > >> This is just a wild guess. But I have the ucd-snmp as well net-snmp > >> headers in /usr/include/ucd-snmp and /usr/include/net-snmp. > > > > Then get the server to look at *only* ucd-snmp, and ignore net-snmp. > > > > > > regards, > Harrie > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Need Help with SNMP
On Tuesday, July 29, 2003, at 08:01 PM, Alan DeKok wrote: "Atanu Das" <[EMAIL PROTECTED]> wrote: net-snmp-5.0.6-17 FreeRADIUS can't use net-snmp. While looking at it to upgrade to net-snmp, I was wondering why you do a compile test for some include files and not just a check?? Do you want to make sure the files contain a content you expect?? If so, you need to use various types defined in there and not just 'int a = 1;' This is just a wild guess. But I have the ucd-snmp as well net-snmp headers in /usr/include/ucd-snmp and /usr/include/net-snmp. Then get the server to look at *only* ucd-snmp, and ignore net-snmp. regards, Harrie - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Need Help with SNMP
Ats, The way I got this working was to remove the ifdefs in the headers files in /usr/include/ucd-snmp. Then it complies fine. I have also started making some other changes to allow more snmp information to be collected (it was to a pre 0.9.0 snapshot), but will need a bit more time to sort it out and the patches will need to be approved. Alan, I think that when the --enable-ucb-snmp-compatibility switch is passed to ./configure, the configure script does not #define UCD_COMPATABILITY. This might be the problem. Cheers, Philip Blow Senior Technical Manager Simply Wireless > -Original Message- > From: Atanu Das [mailto:[EMAIL PROTECTED] > Sent: Wednesday, 30 July 2003 4:46 AM > To: [EMAIL PROTECTED] > Subject: Re: Need Help with SNMP > > > Hi Alan, > > Thanks for such a prompt reply. I got your point. > > I think I will have to install the **OLD** version of ucd-snmp > (ucd-snmp-4.2.6) in my RedHat 9 box. > The headers that i have in /usr/include/ucd-snmp are > > asn1.h- > #ifdef UCD_COMPATIBLE > #include > #else > #error "Please update your headers or configure > using --enable-ucd-snmp-compatibility" > #endif > --snmp.h--- > #ifdef UCD_COMPATIBLE > #include > #else > #error "Please update your headers or configure > using --enable-ucd-snmp-compatibility" > #endif > > ---snmp_impl.h- > #ifdef UCD_COMPATIBLE > #include > #include > #include > #else > #error "Please update your headers or configure > using --enable-ucd-snmp-compatibility" > #endif > > and all the files are using the headers of net-snmp. This has > left me with > no choice :) > > Thanks anyway > > Regards, > > Ats > > - Original Message - > From: "Alan DeKok" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, July 29, 2003 11:31 PM > Subject: Re: Need Help with SNMP > > > > "Atanu Das" <[EMAIL PROTECTED]> wrote: > > > net-snmp-5.0.6-17 > > > > FreeRADIUS can't use net-snmp. > > > > > This is just a wild guess. But I have the ucd-snmp as > well net-snmp > > > headers in /usr/include/ucd-snmp and /usr/include/net-snmp. > > > > Then get the server to look at *only* ucd-snmp, and > ignore net-snmp. > > > > Alan DeKok. > > > > - > > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > > > > > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Need Help with SNMP
Hi Alan, Thanks for such a prompt reply. I got your point. I think I will have to install the **OLD** version of ucd-snmp (ucd-snmp-4.2.6) in my RedHat 9 box. The headers that i have in /usr/include/ucd-snmp are asn1.h- #ifdef UCD_COMPATIBLE #include #else #error "Please update your headers or configure using --enable-ucd-snmp-compatibility" #endif --snmp.h--- #ifdef UCD_COMPATIBLE #include #else #error "Please update your headers or configure using --enable-ucd-snmp-compatibility" #endif ---snmp_impl.h- #ifdef UCD_COMPATIBLE #include #include #include #else #error "Please update your headers or configure using --enable-ucd-snmp-compatibility" #endif and all the files are using the headers of net-snmp. This has left me with no choice :) Thanks anyway Regards, Ats - Original Message - From: "Alan DeKok" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, July 29, 2003 11:31 PM Subject: Re: Need Help with SNMP > "Atanu Das" <[EMAIL PROTECTED]> wrote: > > net-snmp-5.0.6-17 > > FreeRADIUS can't use net-snmp. > > > This is just a wild guess. But I have the ucd-snmp as well net-snmp > > headers in /usr/include/ucd-snmp and /usr/include/net-snmp. > > Then get the server to look at *only* ucd-snmp, and ignore net-snmp. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Need Help with SNMP
"Atanu Das" <[EMAIL PROTECTED]> wrote: > net-snmp-5.0.6-17 FreeRADIUS can't use net-snmp. > This is just a wild guess. But I have the ucd-snmp as well net-snmp > headers in /usr/include/ucd-snmp and /usr/include/net-snmp. Then get the server to look at *only* ucd-snmp, and ignore net-snmp. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Need Help with SNMP
Hello all,
Freeradius
0.9.0linux-2.4.20-8net-snmp-5.0.6-17net-snmp-utils-5.0.6-17net-snmp-devel-5.0.6-17
I am trying to compile freeradius with snmp support. Initially i have
installed all the net-snmp modules as mentioned above hoping for a clean
compilation. The compilation went along fine without any errors and the system
was very much ready. I configured my /etc/snmp/snmpd.conf file and also
/etc/raddb/snmp.conf file and put the necessary values. The radius in debug mode
started without any errors, but i can see that radius is **NOT** loading the
SNMP module. A "snmpget" query is also returning errors which means that
something was wrong in compilation.After that i read the config.log
file
>>>>><<<<<<<
int main() { int foo = offsetof(struct utmpx, ut_xtime);
return 0; }configure:7433: checking for working constconfigure:7509:
checking type of OSconfigure:7524: checking for developer gcc
flagsconfigure:7539: checking for crypt in -lcryptconfigure:7639:
checking for setkey in -lcipherconfigure:7687: checking for
asn1.h,snmp.h,snmp_impl.hconfigure:7715: gcc -c -g -O2 -D_REENTRANT
-D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith
-Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes
-Wmissing-prototypes -Wmissing-declarations -Wnested-externs conftest.c
1>&5In file included from
configure:7707:/usr/include/ucd-snmp/asn1.h:7:2: #error "Please update your
headers or configure using --enable-ucd-snmp-compatibility"In file included
from configure:7708:/usr/include/ucd-snmp/snmp.h:7:2: #error "Please update
your headers or configure using --enable-ucd-snmp-compatibility"In file
included from configure:7709:/usr/include/ucd-snmp/snmp_impl.h:9:2: #error
"Please update your headers or configure using
--enable-ucd-snmp-compatibility"configure:7710: warning: function
declaration isn't a prototypeconfigure: In function
`main':configure:7711: warning: unused variable `a'configure: failed
program was:#line 7690 "configure"#include "confdefs.h"
#ifdef HAVE_SYS_TYPES_H#include #endif#ifdef
HAVE_STDINT_H#include #endif#ifdef
HAVE_STDIO_H#include #endif#ifdef
HAVE_NETDB_H#include #endif#ifdef
HAVE_UNISTD_H#include #endif#include
#include #include
int main() { int a = 1;; return 0;
}configure:7756: gcc -c -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall
-D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align
-Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations
-Wnested-externs -I/usr/include conftest.c 1>&5In file included
from configure:7748:/usr/include/ucd-snmp/asn1.h:7:2: #error "Please update your
headers or configure using --enable-ucd-snmp-compatibility"In file included
from configure:7749:/usr/include/ucd-snmp/snmp.h:7:2: #error "Please update your
headers or configure using --enable-ucd-snmp-compatibility"In file included
from configure:7750:/usr/include/ucd-snmp/asn1.h:7:2: #error "Please update
your headers or configure using --enable-ucd-snmp-compatibility"In file
included from configure:7749:/usr/include/ucd-snmp/snmp.h:7:2: #error "Please
update your headers or configure using --enable-ucd-snmp-compatibility"In
file included from configure:7750:/usr/include/ucd-snmp/snmp_impl.h:9:2: #error
"Please update your headers or configure using
--enable-ucd-snmp-compatibility"configure:7751: warning: function
declaration isn't a prototypeconfigure: In function
`main':configure:7752: warning: unused variable `a'configure: failed
program was:
>>>>><<<<<<<
Is it possible that because of the errors above radius is not compiled with
snmp support? If that is the case, how to compile it?
This is just a wild guess. But I have the ucd-snmp as well net-snmp headers
in /usr/include/ucd-snmp and /usr/include/net-snmp.
>>>>>>>>>>>>><<<<<<<<<<<<<<<<<<<<<[EMAIL PROTECTED]
net-snmp]# lsagent
library net-snmp-config.h
pdu_api.h
system
varbind_api.hconfig_api.h machine
net-snmp-includes.h session_api.h
types.h version.hdefinitions.h
mib_api.h output_api.h
snmpv3_api.h utilities.h
[EMAIL PROTECTED] net-snmp]# ls
../ucd-snmp/agent_index.h
header_complex.h
snmp_agent.h
snmp-tc.h
ucd-snmp-config.hagent_read_config.h
int64.h
snmp_alarm.h
snmpusm.h
ucd-snmp-includes.hagent_registry.h
keytools.h
snmp_api.h
snmpv3.h
util_funcs.hagent_trap.h
mib.h
snmp_client.h
snmp_vars.h
var_struct.hasn1.h
mibincl.h
snmp_debug.h
Re: Cisco snmp simultaneous use
I found the source of my problem but I don't how to fix it:
in radiusd.conf
session {
# radutmp
sql
}
If I set it to radutmp, it works, simultaneous-use works.
If I set to sql, simultaneous-use does not work. Authentication passes all
the time.
Can anyone tell me what I am doing wrong. note that I am using postgres as a
database.
> Hi,
>
> I trying to set up simultaneaous use with freeradius 0.9 pre-release and
> snmp.
>
> Here is my config:
>
> naslist:
>
> 1.2.3.4 ciscoshortnamecisco
>
> naspasswd:
>
> 1.2.3.4 SNMPsnmppassword
>
> Also inserted:
> INSERT INTO radgroupcheck (GroupName, Attribute, op, Value)
> values("dialup", "Simultaneous-Use", ":=", "1");
> (Of course I have a group dialin)
>
>
> when I run checkrad manually, I see in /var/log/freeradius/checkrad.log:
>
> snmpget: /usr/bin/snmpget -r 1 -t 5 1.2.3.4 snmppassword
> .iso.org.dod.internet.private.enterprises.9.2.9.2.1.18.66
> user at port S66: user
> Returning 1 (double detected)
>
> However when I run it with "freeradius -x", it seems checkrad is not
beeing
> executed because I see not log in checkrad.log.
>
>
> With SQL, Simultaneous-Use works fine but I want to use it snmp wich is
more
> reliable.
>
> I am going, I tried everything with no success. The weird thing is that I
> made it work about a month ago with version 0.81
> Is there a bug or is it me ?
>
> Thanks in advance for your help
>
> Mohsen CHIRARA
>
>
>
>
---
Ce mail ne contient pas de virus. This mail is virus free
Scanné par Escan Checked by Escan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Cisco snmp simultaneous use
Hi,
I trying to set up simultaneaous use with freeradius 0.9 pre-release and
snmp.
Here is my config:
naslist:
1.2.3.4 ciscoshortnamecisco
naspasswd:
1.2.3.4 SNMPsnmppassword
Also inserted:
INSERT INTO radgroupcheck (GroupName, Attribute, op, Value)
values("dialup", "Simultaneous-Use", ":=", "1");
(Of course I have a group dialin)
when I run checkrad manually, I see in /var/log/freeradius/checkrad.log:
snmpget: /usr/bin/snmpget -r 1 -t 5 1.2.3.4 snmppassword
.iso.org.dod.internet.private.enterprises.9.2.9.2.1.18.66
user at port S66: user
Returning 1 (double detected)
However when I run it with "freeradius -x", it seems checkrad is not beeing
executed because I see not log in checkrad.log.
With SQL, Simultaneous-Use works fine but I want to use it snmp wich is more
reliable.
I am going, I tried everything with no success. The weird thing is that I
made it work about a month ago with version 0.81
Is there a bug or is it me ?
Thanks in advance for your help
Mohsen CHIRARA
---
Ce mail ne contient pas de virus. This mail is virus free
Scanné par Escan Checked by Escan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: can't turn off SNMP
> From: Dave Mason > Sent: Saturday, 21 June 2003 1:59 AM > Woops - As you might guess libltdl is a different problem. My build > machine seems to have a different version installed, libltdl.so.3. If > configure would use libltdl.so I'd be OK - is that an option? I don't think so. The ABI/API changes between soversions, I hope. libltdl.so.0's pretty old now, isn't it? -- = Paul "TBBle" Hampson Bubblesworth Pty Ltd (ABN: 51 095 284 361) [EMAIL PROTECTED] The Creation of the Universe was made possible by a grant from Texas Instruments. -- PBS - Random signature generator 3.0 by Paul "TBBle" Hampson = - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: can't turn off SNMP
Woops - As you might guess libltdl is a different problem. My build machine seems to have a different version installed, libltdl.so.3. If configure would use libltdl.so I'd be OK - is that an option? Dave Dave Mason wrote: Hi, This is related to some similar SNMP questions that appeared recently. I'm building a radius server on a machine that has SNMP libraries installed, but I want to run it on one that does not have them. I ran configure both with --with-snmp=no and --without-snmp. In both cases, when I build the server and move it to the other machine, it cant run there because libltdl.so.0 is missing. When I built the server on the machine without SNMP, I never saw that error. Any ideas? Regards, Dave -- Dave Mason (817)481-4412 x139 voice, (817)481-4461 fax, [EMAIL PROTECTED] Transat Technologies180 State St, Suite 240, Southlake, TX 76092 Integrating 3GSM and WLANhttp://www.transat-tech.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
can't turn off SNMP
Hi, This is related to some similar SNMP questions that appeared recently. I'm building a radius server on a machine that has SNMP libraries installed, but I want to run it on one that does not have them. I ran configure both with --with-snmp=no and --without-snmp. In both cases, when I build the server and move it to the other machine, it cant run there because libltdl.so.0 is missing. When I built the server on the machine without SNMP, I never saw that error. Any ideas? Regards, Dave - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: How to turn off SNMP
User for Free Radius mail list <[EMAIL PROTECTED]> wrote: > SNMP is compiled into my binary but I do not wish to use it. In debug mode > I keep seeing messages like: > "Can't connect to SNMP agent with SMUX: Connection refused" > > Is there a way in the "radiusd.conf" file to turn off the SNMP agent? Grab the CVS snapshot from tomorrow, and give it a try. It should have snmp disabled by default, and you can enable it at run-time, if you care. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
How to turn off SNMP
SNMP is compiled into my binary but I do not wish to use it. In debug mode I keep seeing messages like: "Can't connect to SNMP agent with SMUX: Connection refused" Is there a way in the "radiusd.conf" file to turn off the SNMP agent? Thanks, Ken Rea - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: SNMP
Hi, --On Tuesday, August 20, 2002 5:09 PM -0300 Luis Vitorio Cargnini <[EMAIL PROTECTED]> wrote: > Iupdated the freeradius sing cvs i copy the mib files to my > /usr/local/share/snmp/mibs but my agetn doesn't seem to be using by the > snmpd, i'm using net-snmp someone knows or experienced the same problem > ?? No, the current SNMP agent functionality is based on the SMUX part of the NET-SNMP. It neither works with NET-SNMP 5.0.3 last month when I looked at it. Harrie > On Tue, 2002-08-20 at 15:43, Alan DeKok wrote: >> Luis Vitorio Cargnini <[EMAIL PROTECTED]> wrote: >> > Hi How could i use SNMP and how to make the FreeRADISU eith SNMP i >> > done everithing like issaid in docs but snmp doesn't seem to hava the >> > MIBS of Radius. >> >> Hmm... that would be a good point. >> >> If you're using CVS, do: >> >> cvs update -d mibs >> >> from the top-level directory. Otherwise, look for a 'mibs' >> directory in tonight's CVS snapshot. >> >> Alan DeKok. >> >> - >> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html >> > -- > Thanks && Regards > Luís Vitório Cargnini > TRDC - Telenova Communications Corp. > Harrie Internet Management Consulting mailto: [EMAIL PROTECTED] http://www.lisanza.net/ Author of MOD-SNMP, enabling SNMP management the Apache HTTP server - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: SNMP
Luis Vitorio Cargnini <[EMAIL PROTECTED]> wrote: > Iupdated the freeradius sing cvs i copy the mib files to my > /usr/local/share/snmp/mibs but my agetn doesn't seem to be using by the > snmpd, i'm using net-snmp someone knows or experienced the same problem Sorry, I don't know much about SNMP. Other people have got it to work, so it *is* possible. I would suggest consulting your SNMP daemon documention to discover how to debug the problem. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
SNMP Again
Excuse me everyone my dummies question, How to add the Radius to the SNMP AGENT on my system i couldn't control FRADIUS information i does snmpwalk i doesn't seem nothing what i must do to add FRADIUS to my SNMP ? How to do to use SNMP on FRADIUS I must use UCD_SNMP ?? This work with Net-SNMP (sucessor of UCD)??? What i need do on my SNMP system to they work with FRADIUS??? -- Thanks && Regards Luís Vitório Cargnini TRDC - Telenova Communications Corp. signature.asc Description: This is a digitally signed message part
Re: SNMP
Iupdated the freeradius sing cvs i copy the mib files to my /usr/local/share/snmp/mibs but my agetn doesn't seem to be using by the snmpd, i'm using net-snmp someone knows or experienced the same problem ?? On Tue, 2002-08-20 at 15:43, Alan DeKok wrote: > Luis Vitorio Cargnini <[EMAIL PROTECTED]> wrote: > > Hi How could i use SNMP and how to make the FreeRADISU eith SNMP i done > > everithing like issaid in docs but snmp doesn't seem to hava the MIBS of > > Radius. > > Hmm... that would be a good point. > > If you're using CVS, do: > > cvs update -d mibs > > from the top-level directory. Otherwise, look for a 'mibs' > directory in tonight's CVS snapshot. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > -- Thanks && Regards Luís Vitório Cargnini TRDC - Telenova Communications Corp. signature.asc Description: This is a digitally signed message part
Re: SNMP
thanks i updated using cvs and i'll try right now. On Tue, 2002-08-20 at 15:43, Alan DeKok wrote: > Luis Vitorio Cargnini <[EMAIL PROTECTED]> wrote: > > Hi How could i use SNMP and how to make the FreeRADISU eith SNMP i done > > everithing like issaid in docs but snmp doesn't seem to hava the MIBS of > > Radius. > > Hmm... that would be a good point. > > If you're using CVS, do: > > cvs update -d mibs > > from the top-level directory. Otherwise, look for a 'mibs' > directory in tonight's CVS snapshot. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > -- Thanks && Regards Luís Vitório Cargnini TRDC - Telenova Communications Corp. signature.asc Description: This is a digitally signed message part
Re: SNMP
Luis Vitorio Cargnini <[EMAIL PROTECTED]> wrote: > Hi How could i use SNMP and how to make the FreeRADISU eith SNMP i done > everithing like issaid in docs but snmp doesn't seem to hava the MIBS of > Radius. Hmm... that would be a good point. If you're using CVS, do: cvs update -d mibs from the top-level directory. Otherwise, look for a 'mibs' directory in tonight's CVS snapshot. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
[PATCH] compiling with SNMP fails on FreeBSD
HI, It seems that compiling of SNMP fails on my FreeBSD system. The problem is that it can find an asn1.h file in the /usr/include/ directory. However, that file is from a Kerberos package. As a result configure believe that configure looks then only in /usr/include for the other snmp header files (snmp_impl.h and snmp.h) in the same directory. Testing if snmph and snmp_impl.h are there fails then and will not get included. As a result the compilation breaks, since it really needs them all 3. The attached patch fixes this by combining the 3 snmp files into a single HAVE_..._H. The likely hood that they are not in the same directory is little. Also the patch looks first if it can find these include files as . (HAVE_UCD_SNMP..._H) which I believe is better if you can find the include files that way. The change that they are not ucd-snmp is then pretty little. The patch also fixes a library dependancy in the src/main/Makefile.in. If the module libraires or the ltdl library changes radiusd is not relinked again. I also noticed that many 'Makefile'-s and 'Makefile.in'-s are in the CVS repository. I suggest to delete the 'Makefile'-s, since these are generated from the 'Makefile.in'-s. And some '.cvsignore' files would not hurt either. After applying the attached patch one should also execute 'autoheader;'autoconf'. Harrie Internet Management Consulting mailto: [EMAIL PROTECTED] http://www.lisanza.net/ -------- Author of MOD-SNMP, enabling SNMP management the Apache HTTP server snmp-configure.patch Description: Binary data
SNMP
Could someone explain me if there is any way of fetch information about freeradius using SNMP? What is the configuration needed to do this? Regards.
Re: How to: Administratively drop dial-in user via SNMP
Hi, On Mon, May 13, 2002 at 05:13:58PM -0500, Chris Parker wrote: > invokes the 'pm_reset' utility ( available from www.portmasters.com ). > /usr/local/bin/pm_reset $IP $PW $TTY oki, but if you are already there, a utility like this can be coded using Perl and Net::Telnet as well (I didn't look at that utility yet). > >http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/121t/121t3/dt_asmib.htm Good information, thanks. Does anyone beside me have severe difficulties accessing the technical info on Cisco's site? For me, the glamour parts load well, but the content parts often yield errors and/or take very long to load. Best, --Toni++ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: How to: Administratively drop dial-in user via SNMP
At 02:05 AM 5/14/2002 +0400, Fduch the Pravking wrote: >Does anybody know how to drop a user connection >to Cisco and/or PortMaster NAS via SNMP? Cannot be done via SNMP. You'll have to script a telnet session to do it, or something along the lines of the following code snippet which invokes the 'pm_reset' utility ( available from www.portmasters.com ). # $TTY is the NAS-Port-Id # $PW is the administrative ( !root ) password # $IP is the NAS IP address /usr/local/bin/pm_reset $IP $PW $TTY For Cisco's you can do this via SNMP with later releases ( 12.2 and up ). More information is available from here: http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/121t/121t3/dt_asmib.htm -Chris -- \\\|||/// \ StarNet Inc. \Chris Parker \ ~ ~ / \ WX *is* Wireless!\ Director, Engineering | @ @ |\ http://www.starnetwx.net \ (847) 963-0116 oOo---(_)---oOo--\-- \ Wholesale Internet Services - http://www.megapop.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
How to: Administratively drop dial-in user via SNMP
Does anybody know how to drop a user connection to Cisco and/or PortMaster NAS via SNMP? With Cisco, it's possible to drop a user setting ifAdminStatus.XX to down(2) and then up(1), where ifDescr.XX = "AsyncYY", and AsyncYY corresponds NAS-Port = YY in radius packet. Maybe there's a more elegant way? But with PortMasters, it's much harder. They have dynamic ifTable, and they don't respond on set ifAdminStatus.XX. I don't even know how to join interfaces.ifTable and livingston.livinstonSerialTable tables... We have PM-2e and PM-3, if it does matter. Maybe it's the wrong place to ask, would anyone suggest another? Thanks in advice. -- Fduch M. Pravking - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
configure and /usr/local/include/ucd-snmp under FreeBSD
I think I have found a bug in FreeRadius' configure script. I have a FreeBSD-4.4 box with the ucd-snmp-4.0.1 port installed; snmp.h is in /usr/local/include/ucd-snmp/ configure fails to locate the correct ucd-snmp include directory but still decides to include snmp support anyway. As a result, compilation crashes later on, as soon as "oid" is referenced. Snippet from the './configure' output: checking for asn1.h... yes checking for snmp.h... no checking for snmp_impl.h... no checking for snmp_build_var_op in -lsnmp... yes Snippet from the 'gmake' output: Making all in main... gmake[4]: Entering directory /u/home/telinco/build/freeradius-0.5/src/main' gcc -g -O2 -pthread -D_THREAD_SAFE -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG -I../include -I/usr/include/ucd-snmp -c radiusd.c In file included from ../include/radius_snmp.h:26, from radiusd.c:83: ../include/smux.h:47: syntax error before d' ../include/smux.h:51: syntax error before d' ../include/smux.h:81: syntax error before d' ../include/smux.h:88: syntax error before d' ../include/smux.h:127: syntax error before ' ../include/smux.h:130: syntax error before d' ../include/smux.h:131: syntax error before d' ../include/smux.h:134: syntax error before d' ../include/smux.h:135: syntax error before *' ../include/smux.h:135: syntax error before *' Now, a workaround appears to be changing the order in which the directories are tested in the 'configure' script: --- configure.orig Wed Mar 6 16:02:25 2002 +++ configure Thu Apr 4 11:24:43 2002 @@ -3767,7 +3767,7 @@ if test "x$SNMP_INCLUDE" = "x"; then old_CFLAGS="$CFLAGS" - for try in /usr/include/ucd-snmp /usr/local/include/ucd-snmp $snmp_include_dir; do + for try in /usr/local/include/ucd-snmp /usr/include/ucd-snmp $snmp_include_dir; do CFLAGS="$old_CFLAGS -I$try" cat > conftest.$ac_ext < This does actually exist on my system, as /usr/include/asn1.h (part of Kerberos) and /usr/include/openssl/asn1.h, and hence it is found. There is also /usr/local/include/ucd-snmp/asn1.h, which is probably what it should have been looking for. [Aside: a clean FreeBSD-4.5 system does not have /usr/include/asn1.h so this problem may not occur there] (2) *Whether or not* asn1.h was found, the script starts looking for it in other directories anyway. The relevant code is: -- #include ], [ int a = 1;], SNMP_INCLUDE="", SNMP_INCLUDE=) dnl # dnl # If not, look for it in a number of directories. dnl # if test "x$SNMP_INCLUDE" = "x"; then old_CFLAGS="$CFLAGS" for try in /usr/include/ucd-snmp /usr/local/include/ucd-snmp $snmp_include_dir ; do CFLAGS="$old_CFLAGS -I$try" AC_TRY_COMPILE([ -- Now, the first section has two different results (SNMP_INCLUDE is set to the empty string or SNMP_INCLUDE is unset), but in both cases, the following 'if' condition will always return TRUE. It then starts searching for asn1.h again, with /usr/include/ucd-snmp in the include path. On my system, even though this directory does not exist, it will find asn1.h anyway, as explained above. Hence it will always decide to add -I/usr/include/ucd-snmp to the include path, and then finish. So there seems to be two problems: 1. autoconf is unable to tell the difference between an unset string and an empty string 2. asn1.h may exist anyway and spoof autoconf For 1, I would propose the following solution: initialise SNMP_INCLUDE to "NOTFOUND", so that the empty string can be interpreted unambiguously as "found, no special include required" For 2, I think it would make sense to look for before . Of course, having multiple asn1.h files may still be a problem, but hopefully the one we -Include first will take precedence. Regards, Brian Candler. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: SNMP
Title: Message Does anyone have the complete steps to set up snmp with freeradius server? I am really struggling with this... I have set up snmp like the snmp.conf file said and I get nothing back...No results for the radiusMIBS 1.3.6.1.2.1.67 when I try to query the mibs... I would appreciate any help... Thank you, Ray Hunter Firmware Engineer ENTERASYS NETWORKS -Original Message-From: Hunter, Ray [mailto:[EMAIL PROTECTED]] Sent: Thursday, March 21, 2002 1:04 PMTo: '[EMAIL PROTECTED]'Subject: RE: SNMP What is the exact mib that I need to query...What I would like to do is radius server statistics for various clients access the radius server. I added the OID 1.3.6.1.4.1.3317.1.3.1. to the snmpd.conf file and I still do not get a response...I am trying to query that mib, is there another one that I should try to query? Thank you, Ray Hunter Firmware Engineer ENTERASYS NETWORKS > -Original Message- > From: Alan DeKok [mailto:[EMAIL PROTECTED]] > Sent: Thursday, March 21, 2002 12:33 PM > To: [EMAIL PROTECTED] > Subject: Re: SNMP > > > "Hunter, Ray" <[EMAIL PROTECTED]> wrote: > > I have searched the documentation for detailed instructions > on how to > > configure freeradius to work with ucd-snmp, but to no > avail. I have > > added the line "smuxpeer .1.3.6.1.4.1.3317.1.3.1 verysecret" to the > > snmpd.conf file and restarted both daemons. If does not work... > > It's worked in the past, and the SNMP code hasn't been > touched for a while, so it should still work now. > > What does it say in debug mode? That should tell you more > of what's going on. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >
RE: SNMP
Title: RE: SNMP What is the exact mib that I need to query...What I would like to do is radius server statistics for various clients access the radius server. I added the OID 1.3.6.1.4.1.3317.1.3.1. to the snmpd.conf file and I still do not get a response...I am trying to query that mib, is there another one that I should try to query? Thank you, Ray Hunter Firmware Engineer ENTERASYS NETWORKS > -Original Message- > From: Alan DeKok [mailto:[EMAIL PROTECTED]] > Sent: Thursday, March 21, 2002 12:33 PM > To: [EMAIL PROTECTED] > Subject: Re: SNMP > > > "Hunter, Ray" <[EMAIL PROTECTED]> wrote: > > I have searched the documentation for detailed instructions > on how to > > configure freeradius to work with ucd-snmp, but to no > avail. I have > > added the line "smuxpeer .1.3.6.1.4.1.3317.1.3.1 verysecret" to the > > snmpd.conf file and restarted both daemons. If does not work... > > It's worked in the past, and the SNMP code hasn't been > touched for a while, so it should still work now. > > What does it say in debug mode? That should tell you more > of what's going on. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >
SNMP
Title: SNMP Version: Freeradius 0.5 System: RedHat 7.1 SNMP: ucd-snmp rpms (standard with redhat) Configure: with snmp and threads I have searched the documentation for detailed instructions on how to configure freeradius to work with ucd-snmp, but to no avail. I have added the line "smuxpeer .1.3.6.1.4.1.3317.1.3.1 verysecret" to the snmpd.conf file and restarted both daemons. If does not work... Any suggestions on setting this up properly? Thank you, Ray Hunter Firmware Engineer I ENTERASYS NETWORKS Phone: 801.887.9888 Fax: 801.972.5789 Email: [EMAIL PROTECTED] www: www.enterasys.com
Re: SNMP
"Hunter, Ray" <[EMAIL PROTECTED]> wrote: > I have searched the documentation for detailed instructions on how to > configure freeradius to work with ucd-snmp, but to no avail. I have added > the line "smuxpeer .1.3.6.1.4.1.3317.1.3.1 verysecret" to the snmpd.conf > file and restarted both daemons. If does not work... It's worked in the past, and the SNMP code hasn't been touched for a while, so it should still work now. What does it say in debug mode? That should tell you more of what's going on. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Lucent MAX SNMP question !
Ok thanx I will do same thing and will put the result on the list .
--
Regards
=
/ Seyyed Hamid Reza/WINDOWS FOR NOW !!/
/ Hashemi Golpayegani / Linux for future , FreeBSD for ever /
/Morva System Co. / - /
/ Network Administrator/ [EMAIL PROTECTED] , ICQ# : 42209876 /
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Aleksandr
Kuzminsky
Sent: Saturday, February 23, 2002 8:17 PM
To: [EMAIL PROTECTED]
Subject: RE: Lucent MAX SNMP question !
On Fri, 22 Feb 2002, Hamid Hashemi Golpayegani wrote:
> Date: Fri, 22 Feb 2002 17:36:14 +0330
> From: Hamid Hashemi Golpayegani <[EMAIL PROTECTED]>
> Reply-To: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Subject: RE: Lucent MAX SNMP question !
>
> Do you mean that If I change Acct Checkpoint to an integer then the
> MAX will send accounting update packet to the radius in every this
> number in seconds ?!
If you set "Acct Checkpoint" to the non-zero value, MAX will send
update-packets to the RADIUS server. RADIUS catch this packets and write
they to the detail file or to the sql database(depending your server
configuration). If you are using detail for accounting, you'll see
"update" record in detail file. If you are using sql, record in the
table radacct will be updated every `Acct Checkpoint` seconds. But, with
default sql.conf you will not get input/optput traffic updated. Look,
sql.conf---
accounting_update_query = "UPDATE ${acct_table1} SET FramedIPAddress =
'%{Framed-IP-Address}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND
UserName = '%{SQL-User-Name}' AND NASIPAddress= '%{NAS-IP-Address}'"
sql.conf---
updated only FramedIPAddress. Try at least something like this
sql.conf---
accounting_update_query = "UPDATE ${acct_table1} SET FramedIPAddress =
'%{Framed-IP-Address}', AcctInputOctets = '%{Acct-Input-Octets}',
AcctOutputOctets = '%{Acct-Output-Packets}' WHERE AcctSessionId =
'%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress=
'%{NAS-IP-Address}'"
sql.conf---
---
Aleksandr Kuzminsky,AK476-RIPE
System Administrator, AK16-UANIC
ISP NBI.
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Lucent MAX SNMP question !
On Fri, 22 Feb 2002, Hamid Hashemi Golpayegani wrote:
> Date: Fri, 22 Feb 2002 17:36:14 +0330
> From: Hamid Hashemi Golpayegani <[EMAIL PROTECTED]>
> Reply-To: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Subject: RE: Lucent MAX SNMP question !
>
> Do you mean that If I change Acct Checkpoint to an integer then the MAX
> will send accounting update packet to the radius in every this number in
> seconds ?!
If you set "Acct Checkpoint" to the non-zero value, MAX will send
update-packets to the RADIUS server. RADIUS catch this packets and
write they to the detail file or to the sql database(depending your
server configuration). If you are using detail for accounting,
you'll see "update" record in detail file. If you are using sql, record
in the table radacct will be updated every `Acct Checkpoint` seconds.
But, with default sql.conf you will not get input/optput traffic updated.
Look,
sql.conf---
accounting_update_query = "UPDATE ${acct_table1} SET FramedIPAddress =
'%{Framed-IP-Address}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName =
'%{SQL-User-Name}' AND
NASIPAddress= '%{NAS-IP-Address}'"
sql.conf---
updated only FramedIPAddress. Try at least something like this
sql.conf---
accounting_update_query = "UPDATE ${acct_table1} SET FramedIPAddress =
'%{Framed-IP-Address}', AcctInputOctets = '%{Acct-Input-Octets}',
AcctOutputOctets = '%{Acct-Output-Packets}' WHERE AcctSessionId =
'%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND
NASIPAddress= '%{NAS-IP-Address}'"
sql.conf---
---
Aleksandr Kuzminsky,AK476-RIPE
System Administrator, AK16-UANIC
ISP NBI.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Lucent MAX SNMP question !
Do you mean that If I change Acct Checkpoint to an integer then the MAX will send accounting update packet to the radius in every this number in seconds ?! -- Regards = / Seyyed Hamid Reza/WINDOWS FOR NOW !!/ / Hashemi Golpayegani / Linux for future , FreeBSD for ever / /Morva System Co. / - / / Network Administrator/ [EMAIL PROTECTED] , ICQ# : 42209876 / -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Aleksandr Kuzminsky Sent: Saturday, February 23, 2002 12:03 PM To: [EMAIL PROTECTED] Subject: Re: Lucent MAX SNMP question ! > I want to get usage of BytesInOctets and ByteOutOctets of a session ID > or a username from Lucent MAX 3000 ( TAOS ) with snmp . so any idea > that what is the snmpget command should be ?! I read in this list that > we can kill a session with this command remotly : > > snmpset NAS_Ip_Address write .1.3.6.1.4.1.529.12.3.1.3.sessID_to_kill > i 1 > > so How can I get information about KB upload and download with snmp ?! I think it is possible next way. MAX can send update packets to the RADIUS(see Ethernet>Mod Config>Accounting...>Acct Checkpoint for MAX 6000). They contain information about traffic and will be wrotten to detail file or sql table. Then read it and kill who you want. I didn't do this really, but think it will go. Anyway post here your results, please. --- Aleksandr Kuzminsky,AK476-RIPE System Administrator, AK16-UANIC ISP NBI. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Lucent MAX SNMP question !
> I want to get usage of BytesInOctets and ByteOutOctets of a session ID or a > username from Lucent MAX 3000 ( TAOS ) with snmp . so any idea that what is > the snmpget command should be ?! > I read in this list that we can kill a session with this command remotly : > > snmpset NAS_Ip_Address write .1.3.6.1.4.1.529.12.3.1.3.sessID_to_kill i 1 > > so How can I get information about KB upload and download with snmp ?! I think it is possible next way. MAX can send update packets to the RADIUS(see Ethernet>Mod Config>Accounting...>Acct Checkpoint for MAX 6000). They contain information about traffic and will be wrotten to detail file or sql table. Then read it and kill who you want. I didn't do this really, but think it will go. Anyway post here your results, please. --- Aleksandr Kuzminsky,AK476-RIPE System Administrator, AK16-UANIC ISP NBI. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Lucent MAX SNMP question !
Hi , I want to get usage of BytesInOctets and ByteOutOctets of a session ID or a username from Lucent MAX 3000 ( TAOS ) with snmp . so any idea that what is the snmpget command should be ?! I read in this list that we can kill a session with this command remotly : snmpset NAS_Ip_Address write .1.3.6.1.4.1.529.12.3.1.3.sessID_to_kill i 1 so How can I get information about KB upload and download with snmp ?! --- Regards = / Seyyed Hamid Reza/WINDOWS FOR NOW !!/ / Hashemi Golpayegani / Linux for future , FreeBSD for ever / /Morva System Co. / - / / Network Administrator/ [EMAIL PROTECTED] , ICQ# : 42209876 / - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Can't connect to SNMP agent with SMUX: Connection refused...
At 08:49 AM 2/15/2002 +0300, Do-Risika RAFIEFERANTSIARONJY wrote: >Chris Parker wrote: > > > > At 01:32 PM 2/14/2002 +0300, Do-Risika RAFIEFERANTSIARONJY wrote: > > > > >Hi everybody, > > > > > >Can someone tell me what this error means ? and what should i do to > > >avoid this ? > > > > Reconfigure and compile without SNMP enabled: > > > > ./configure --without-snmp > > make > > make install > >but does it mind if i leave like this ? (because it was installed from a >debian package :-) I'd install from source anyway. FreeRADIUS is a fast moving target at this stage of development, so you should generally run the latest CVS snapshot. > > >Can it cause that my Simultaneous-Use feature does'not work ? > > > > What does your testing show? > > >First, i don't find any line containing Simultaneous-Use when i run >radiusd -sx, as it is adviced in the faq, Well, during initialization, which is what you show, no, it's not called. It only shows up when processing requests. >After that, when i run manually the checkrad script, with a patton nas >(which is supposed to be supported), i have the following error : 'SNMP >Error: no response received'. The problem is that i know that there is a >password in the nas a password asociated with this snmp community >'monitor', but i don't know where should i do it in the freeradius >config. I tried to put it in the naspasswd but it doesn't work, and in >the docs, it seems that snmp doesn't need password. That would be why it's not working then. Until you get the checkrad script and your patton box to agree on an SNMP community to use, then it won't work. Sorry. >I have another nas which is an usr hiperarc, there was the same problem >with this one (no snmp server), but when i put the user/pass in the >naspasswd file, the wasn't errors nor returned values, so i ask myself >if is it normal or not ? > >indri:/etc/raddb# /usr/sbin/checkrad usrhiper 208.153.83.3 10338 jayme >0a020a02 >indri:/etc/raddb# Yup, that's working. >indri:/etc/raddb# /usr/sbin/checkrad patton 208.153.83.226 10338 jayme >0a020a02 >SNMP Error: >no response received >SNMPv1_Session (remote host: "208.153.83.226" [208.153.83.226].161) > community: "monitor" > request ID: -545558884 > PDU bufsize: 8000 bytes > timeout: 2s > retries: 5 > backoff: 1) > at /usr/sbin/checkrad line 176 >checkrad: >indri:/etc/raddb# Yup, that's not working. >That was my testing, what would you advice for me because i really need >this feature ? I use mysql on authentication and on accounting ... Fix the patton so that it allows SNMP. BTW, you probably want to change you community now since you just posted it to the list. :) -Chris -- \\\|||/// \ Chris Parker-Manager, Development Engineering \ ~ ~ / \ WX *is* Wireless!\ [EMAIL PROTECTED] | @ @ |\ http://www.starnetwx.net \ (847) 963-0116 oOo---(_)---oOo--\-- \ Without C we would have 'obol', 'basi', and 'pasal' - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Can't connect to SNMP agent with SMUX: Connection refused...
Chris Parker wrote: > > At 01:32 PM 2/14/2002 +0300, Do-Risika RAFIEFERANTSIARONJY wrote: > > >Hi everybody, > > > >Can someone tell me what this error means ? and what should i do to > >avoid this ? > > Reconfigure and compile without SNMP enabled: > > ./configure --without-snmp > make > make install but does it mind if i leave like this ? (because it was installed from a debian package :-) > >Can it cause that my Simultaneous-Use feature does'not work ? > > What does your testing show? First, i don't find any line containing Simultaneous-Use when i run radiusd -sx, as it is adviced in the faq, indri:/etc/raddb# radiusd -sx Starting - reading configuration files ... Module: Loaded SQL rlm_sql: Driver rlm_sql_mysql loaded and linked rlm_sql: Attempting to connect to root@localhost:/radius rlm_sql: Connected new DB handle, #0 rlm_sql: Connected new DB handle, #1 rlm_sql: Connected new DB handle, #2 rlm_sql: Connected new DB handle, #3 rlm_sql: Connected new DB handle, #4 Module: Instantiated sql (sql) Module: Loaded Counter Module: Instantiated counter (daily_counter) Module: Instantiated counter (monthly_counter) Module: Loaded Acct-Unique-Session-Id Module: Instantiated acct_unique (acct_unique) Module: Loaded detail Module: Instantiated detail (detail) Module: Loaded radutmp Module: Instantiated radutmp (radutmp) Can't connect to SNMP agent with SMUX: Connection refused Listening on IP address *, ports 1812/udp and 1813/udp. Ready to process requests. After that, when i run manually the checkrad script, with a patton nas (which is supposed to be supported), i have the following error : 'SNMP Error: no response received'. The problem is that i know that there is a password in the nas a password asociated with this snmp community 'monitor', but i don't know where should i do it in the freeradius config. I tried to put it in the naspasswd but it doesn't work, and in the docs, it seems that snmp doesn't need password. indri:/etc/raddb# /usr/sbin/checkrad patton 208.153.83.226 10338 jayme 0a020a02 SNMP Error: no response received SNMPv1_Session (remote host: "208.153.83.226" [208.153.83.226].161) community: "monitor" request ID: -545558884 PDU bufsize: 8000 bytes timeout: 2s retries: 5 backoff: 1) at /usr/sbin/checkrad line 176 checkrad: indri:/etc/raddb# I have another nas which is an usr hiperarc, there was the same problem with this one (no snmp server), but when i put the user/pass in the naspasswd file, the wasn't errors nor returned values, so i ask myself if is it normal or not ? indri:/etc/raddb# /usr/sbin/checkrad usrhiper 208.153.83.3 10338 jayme 0a020a02 indri:/etc/raddb# indri:/etc/raddb# /usr/sbin/checkrad patton 208.153.83.226 10338 jayme 0a020a02 SNMP Error: no response received SNMPv1_Session (remote host: "208.153.83.226" [208.153.83.226].161) community: "monitor" request ID: -545558884 PDU bufsize: 8000 bytes timeout: 2s retries: 5 backoff: 1) at /usr/sbin/checkrad line 176 checkrad: indri:/etc/raddb# That was my testing, what would you advice for me because i really need this feature ? I use mysql on authentication and on accounting ... Any help would be appreciated, @+ -- Do-Risika RAFIEFERANTSIARONJY mailto:[EMAIL PROTECTED] Simicro Internet, mailto:[EMAIL PROTECTED], http://internet.simicro.mg Tel : (+261) 20 22 648 83 (GMT +3), Fax : (+261) 20 22 661 83 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Can't connect to SNMP agent with SMUX: Connection refused ...
At 01:32 PM 2/14/2002 +0300, Do-Risika RAFIEFERANTSIARONJY wrote: >Hi everybody, > >Can someone tell me what this error means ? and what should i do to >avoid this ? Reconfigure and compile without SNMP enabled: ./configure --without-snmp make make install >Can it cause that my Simultaneous-Use feature does'not work ? What does your testing show? -Chris -- \\\|||/// \ Chris Parker-Manager, Development Engineering \ ~ ~ / \ WX *is* Wireless!\ [EMAIL PROTECTED] | @ @ |\ http://www.starnetwx.net \ (847) 963-0116 oOo---(_)---oOo--\-- \ Without C we would have 'obol', 'basi', and 'pasal' - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Can't connect to SNMP agent with SMUX: Connection refused ...
Hi everybody, Can someone tell me what this error means ? and what should i do to avoid this ? Can it cause that my Simultaneous-Use feature does'not work ? Thanx, -- Do-Risika RAFIEFERANTSIARONJY mailto:[EMAIL PROTECTED] Simicro Internet, mailto:[EMAIL PROTECTED], http://internet.simicro.mg Tel : (+261) 20 22 648 83 (GMT +3), Fax : (+261) 20 22 661 83 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: SNMP Woes
Peter Machell <[EMAIL PROTECTED]> wrote: > I've decided to shutoff all SNMP action for the time being. This is probably a good idea. In fact, *everyone* should probably turn off SNMP, unless NO ONE can send packets to your SNMP machine. > Does anyone have a script that will finger a Cisco 5300 for checkrad? If you have the sample 'finger' output, I'd suggest poking through the checkrad source, and seeing how it parses the finger output for other NAS boxes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
SNMP Woes
I've decided to shutoff all SNMP action for the time being. Does anyone have a script that will finger a Cisco 5300 for checkrad? Here's a sample finger: peter@rolex 09:50pm$ finger @timex | grep tty 1 tty 1 tahlia Async interface 00:00:06 PPP: (ip address) TIA, Peter. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
can it be fatal error ? (Can't connect to SNMP agent with SMUX: conection refused)
I have a trouble with portslave and freradius. executing on debug mode y see an error: Can't connect to SNMP agent with SMUX What does it means ? What is SMUX for ? I searched but I only got not answered messages. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
