Compile Error on HP-UX11.0

2004-02-13 Thread Suhr, Gunnar

Hello,

i'm trying to compile freeRadius 0.9.3 on a HP-UX 11.0 OS, but it stop's with the 
following error :

/usr/ccs/bin/ld -b +h rlm_eap_tls-0.9.3.sl +b /usr/local/lib -o 
.libs/rlm_eap_tls-0.9.3.sl  rlm_eap_tls.lo eap_tls.lo cb.lo tls.lo mppe_keys.lo  
-lcrypto -lssl -lnsl -lc
/usr/ccs/bin/ld: Can't find library: crypto

The file libcrypto.a is located in /usr/local/lib  . 

ll /usr/local/lib/libcrypto.a

-rw-r--r--   1 root   sys2211230 Nov 10 00:13 /usr/local/lib/libcrypto.a

Before compiling i defined the following enviroment-variables:

LDFLAGS='-L/opt/openssl/lib -L/usr/local/lib -L/usr/local/odbcsdk/lib 
-L/opt/heimdal/lib -L/opt/pgsql/lib'
LD_LIBRARY_PATH=/usr/lib:/usr/local/lib:/usr/dt/lib:/usr/contrib/lib:/usr/local/odbcsdk/lib:/usr/contrib/X11R6/lib:/usr/local/oraclelib/lib:/opt/pgsql/lib


Does anyone have an idea, how to fix the problem ?

Thanks ... Gunnar

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Pipe AVs to file

2004-02-13 Thread Alan DeKok
ROY [EMAIL PROTECTED] wrote:
 Which source file must I edit to harvest AV pairs from an
 Accounting-Request packet?

  None.  If you read the docs, you would see how to log AV's to a file.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: why freeradius doesn't log anything?

2004-02-13 Thread Alan DeKok
[EMAIL PROTECTED] wrote:
 I'm a very first time user of freeradius and I encountered some problems while
 trying to get logs...in fact I have no logs at all.

  Is it receiving packets?  This is in the FAQ...

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Problems with EAP/TTLS+PAP and LDAP

2004-02-13 Thread Alan DeKok
Arne Brutschy [EMAIL PROTECTED] wrote:
 What I'm doing is to read the vlan id from ldap and give it to the
 switch. The port the user is connected to will be added to that specific
 vlan afterwards. This works just fine with EAP-MD5 or when I'm using my
 real username outside the tunnel.

  Then it should work if you have the real username inside of the
tunnel, and use_tunneled_reply = yes.

 I tried to use tunneled_reply (which makes more sense), but this didn't 
 work, either. Sniffing shows that there are no tunnel* attributes added 
 to the access accept packet.

  Why the heck are you doing packet sniffing when you could run the
server in debugging mode to see what it's doing?

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: username limits

2004-02-13 Thread Theodore Knab
I think the only limitation is that the username has to be greater or equal to 
one character. Normally, the limitations would not be on Free-Radius but the back-end 
that is being used. With usernames and passwords, Radius just tells the gate-keeping 
device if a client is allowed or not. Usernames and passwords are normally a limitation
found in the backend db. 

For example, you can define the maximum limitation in the sql database
if you use that. 

#mysql example with limits of 1 char login and 2 char password

create table example.flat_database( 
lkid INTEGER NOT NULL AUTO_INCREMENT,
loginid varchar(1) NOT NULL,
passoword varchr(2) NOT NULL,
PRIMARY KEY(lkid)
);

With Unix usernames and passwords it depends on what hash your system is using.

Most Unix systems store 128 characters for usernames and allow you to store
passwords at 8 characters with Crypt. With MD5 Hashes the password sizes can be
greatly increased.

On 13/02/04 08:14 -0600, Anson Rinesmith wrote:
 Is there a MIN/MAX on username sizes for freeradius?
 
  
 
 Anson Rinesmith
 
  
 

-- 
--
Ted Knab
Chester, Maryland  21619 USA
--
45865602e6164796f6e60237471647560216e646022756c6967696f6
e602963702f62637f6c6564756e202242796e67602f6e6a0

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Patch for PEAP MSCHAPV2. Is it ok ?

2004-02-13 Thread Alan DeKok
Pierluigi Frullani [EMAIL PROTECTED] wrote:
 After a very long hunt, I've discovered a bug in rlm_mschap module, in
 freeradius snapshot 20040130.

  That's good, but why didn't you just do a CVS update?  The bug was
discussed on this mailing list in the past two weeks, and has already
been fixed.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: EAP-Message in logs

2004-02-13 Thread Alan DeKok
Theodore Knab [EMAIL PROTECTED] wrote:
 It is working, however I am getting this error in my log file.
 
 Thu Feb 12 16:39:17 2004 : Error: rlm_eap: EAP-Message not found
 
 What does that mean ?

  Nothing.  The message has been deleted in the latest CVS snapshots.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: username limits

2004-02-13 Thread Alan DeKok
Anson Rinesmith [EMAIL PROTECTED] wrote:
 Is there a MIN/MAX on username sizes for freeradius?

  RADIUS protocol limitations.  0-253 bytes.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Compile Error on HP-UX11.0

2004-02-13 Thread Alan DeKok
Suhr, Gunnar [EMAIL PROTECTED] wrote:
 /usr/ccs/bin/ld: Can't find library: crypto
 
 The file libcrypto.a is located in /usr/local/lib  . 

  There's no libcrypto.so.  Go read up some more on Unix library
systems  dynamic linking.

 Does anyone have an idea, how to fix the problem ?

$ ./configure --disable-shared

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Patch for PEAP MSCHAPV2. Is it ok ? (Alan DeKok)

2004-02-13 Thread Pierluigi Frullani
Re: Patch for PEAP MSCHAPV2. Is it ok ? (Alan DeKok)
 Pierluigi Frullani [EMAIL PROTECTED] wrote:
 After a very long hunt, I've discovered a bug in rlm_mschap module, in
 freeradius snapshot 20040130.

   That's good, but why didn't you just do a CVS update?  The bug was
 discussed on this mailing list in the past two weeks, and has already
 been fixed.

   Alan DeKok.

I apologize, Alan.
In the past two weeks I spent a lot of time tweaking the radiusd.conf file
and the AccessPoint config, because, after reading a lot of messages about
this problem, I was relly sure the error was on my ( config ) side.
After all this work ( and maybe a thousand of search and modifiy for the
configs file ) I decided to give a look at the code, and I found it.
Being one of the most disscussed problem lately I decided to post the fix,
and after I clicked on send I realized that someone other discovered it
too.

Apologize again.
Pigi

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: PLEASE HELP!freeradius and mysql

2004-02-13 Thread Gustavo A. Lozano
It is more a MySQL question than a Radius question.

but the answer is:

check the mysql.sock in your /tmp directory

It happens in the configuration/installation time that files go to one
place or another when you build the MySQL server.

If you dont want to reinstall everything just create a link for the sock
file.

Rgds

G.



On Fri, 2004-02-13 at 10:34, Ciolo_-^DusT^-_WebMaster wrote:
  Try that SQL statement in mysql using the user and password you have
  setup in the database configuration.
 
  Example :
 
  mysql -uradius -p radius
  Enter password:{rootpass}
  ...
  mysql SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username
 = 'fredf' ORDER BY id;
  ++--+---+---++
  | id | UserName | Attribute | Value | op |
  ++--+---+---++
  |  1 | fredf| User-Password | wilma | == |
  ++--+---+---++
  1 row in set (0.01 sec)
  ...
 I tried it but I stop in the login because I have back this error:
 ERROR 2002: Can't connect to local MySQL server through socket
 '/var/lib/mysql/mysql.sock' (2)
 
 looking for it I notice that mysql.sock doesn't exist!
 
 I'm using mysql 3.23.49 on RH 7.3
 
 I hope somebody will replay!
 
 PS: I have in this machine others applications that works with mysql without
 problem... for example a phpnuke site...
 
 byez
 CioloWeb
 
 
 
 - 
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- 
Gustavo A. Lozano Noldata Corporation
[EMAIL PROTECTED]   Calle 46 No. 40-19
CTO   Bogota D.C. Colombia
Noldata Corporation   http://noldata.com 

 I know not with what weapons World War III will be fought,
but World War IV will be fought with sticks and stones.
   Albert Einstein


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: freeradius+postgresql: access-reject

2004-02-13 Thread Guy Fraser
Truong Manh Cuong wrote:

Hi all,
I installed freeradius 0.93 and use postgresql. I don't know how to config radius for authorizing. it rejects all request because it use system account.
I want to config radius so that it query account in postgresql database. how to do it ?
it reported that rlm_unix not found. I just comment all line related with unix.
thanks and regards,
Manh Cuong.
 

Probably the easiest way is to comment out the unix and files entries in radiusd.conf.





- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Restrict to NAS-Port-Type

2004-02-13 Thread Paulo Fragoso
Hi,

We have a Freeradius 0.9.3 + Mysql to authenticate 02 systems. The frist 
system is a RAS (Lucent MAX6000) and the second system is a FreeBSD 5.1 
+ MPD to implement PPTP vpn.

All is working fine, but we would like to restric PPTP users to only 
connect to vpn server. So we have created our radgroupcheck this way:

mysql select * from radgroupcheck;
++---+--++-+
| id | GroupName | Attribute| op | Value   |
++---+--++-+
|  1 | dynamic   | Auth-Type| := | Local   |
|  2 | dynamic   | Simultaneous-Use | := | 5   |
|  3 | static| Auth-Type| := | Local   |
|  4 | static| Simultaneous-Use | := | 1   |
|  5 | virtual   | Auth-Type| := | Local   |
|  6 | virtual   | Simultaneous-Use | := | 1   |
|  8 | virtual   | NAS-Port-Type| := | Virtual |
++---+--++-+
7 rows in set (0.00 sec)
and users to connect only at vpn:

mysql select * from usergroup where groupname='virtual';
+--+--+---+
| id   | UserName | GroupName |
...
| 1946 | testevpn | virtual   |
...
Why users in virtual usergroup can connect to RAS? If connecting to 
RAS the NAS-Port-Type is Async not Virtual:

mysql select UserName,NASPortType,AcctStartTime,AcctStopTime from 
radacct where username='testevpn';
+--+-+-+-+
| UserName | NASPortType | AcctStartTime   | AcctStopTime|
+--+-+-+-+
| testevpn | Virtual | 2004-02-12 16:16:03 | 2004-02-12 16:16:07 |
| testevpn | Virtual | 2004-02-12 16:17:15 | 2004-02-12 16:17:18 |
| testevpn | Virtual | 2004-02-12 16:17:53 | 2004-02-12 16:18:03 |
| testevpn | Async   | 2004-02-13 13:56:03 | 2004-02-13 13:56:11 |
| testevpn | Async   | 2004-02-13 14:01:54 | 2004-02-13 14:02:08 |
| testevpn | Virtual | 2004-02-13 14:29:33 | 2004-02-13 14:29:48 |
+--+-+-+-+

What's wrong?

Paulo Fragoso.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: radius.log rotate?

2004-02-13 Thread Guy Fraser
Anson Rinesmith wrote:

Does the radius.log file rotate when it gets large?

If not, has anyone written a script to do this?

 

Thanks,

 

 

Anson

 

I have been meaning to look into having the log file dynamically named.

I made a patch for Cistron Radius that dynamically named.

Example:

/var/log/radius/%Y%b%d.log

Today's file is :

/var/log/radius/2004Feb13.log

I will look at this issue, and try to get the patch into CVS.
Hopfully the patch will make it into CVS before v1.0.
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


remove me

2004-02-13 Thread Stepon Esfandiary




remove me

-- 
Wavetex Email Signature


  

  Stepon Esfandiary 
System Administrator / Programmer
903.597.7566 (v)
903.533.1699 (f)
  [EMAIL PROTECTED] 
  
  
  
This message is
confidential, intended only for the named recipient(s)and may contain
information that is privileged or exempt from disclosure under
applicable law. If you are not the intended recipient(s), you are
notified that the dissemination, distribution or copying of this
message is strictly prohibited. If you receive this message in error,
or are not the named recipient(s), please notify the sender and delete
this e-mail from your computer.
  
  

  





inline: wavetex_logo.jpg

RE: radius.log rotate?

2004-02-13 Thread Anson Rinesmith
I found that for now the easiest way for me is to edit newsyslog.conf
(FreeBSD 4.6) and add that file in there. Works pretty well so far.

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:freeradius-
 [EMAIL PROTECTED] On Behalf Of Guy Fraser
 Sent: Friday, February 13, 2004 11:33 AM
 To: [EMAIL PROTECTED]
 Subject: Re: radius.log rotate?
 
 Anson Rinesmith wrote:
 
  Does the radius.log file rotate when it gets large?
 
  If not, has anyone written a script to do this?
 
 
 
  Thanks,
 
 
 
 
 
  Anson
 
 
 
 I have been meaning to look into having the log file dynamically named.
 
 I made a patch for Cistron Radius that dynamically named.
 
 Example:
 
 /var/log/radius/%Y%b%d.log
 
 Today's file is :
 
 /var/log/radius/2004Feb13.log
 
 I will look at this issue, and try to get the patch into CVS.
 Hopfully the patch will make it into CVS before v1.0.
 
 
 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: PLEASE HELP!freeradius and mysql

2004-02-13 Thread Ciolo_-^DusT^-_WebMaster
thanx for replaying
now  I will check

- Original Message -
From: Theodore Knab [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, February 13, 2004 5:37 PM
Subject: Re: PLEASE HELP!freeradius and mysql


 You get that error when you don't have the mysql server running.

 So if the server is running, you need to check the host firewall.

 [EMAIL PROTECTED]:~$ mysql -u testdummy -h localhost
 ERROR 2002: Can't connect to local MySQL server through socket
'/var/run/mysqld/
 mysqld.sock' (2)



 On 13/02/04 16:34 +0100, Ciolo_-^DusT^-_WebMaster wrote:
   Try that SQL statement in mysql using the user and password you have
   setup in the database configuration.
  
   Example :
  
   mysql -uradius -p radius
   Enter password:{rootpass}
   ...
   mysql SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE
Username
  = 'fredf' ORDER BY id;
   ++--+---+---++
   | id | UserName | Attribute | Value | op |
   ++--+---+---++
   |  1 | fredf| User-Password | wilma | == |
   ++--+---+---++
   1 row in set (0.01 sec)
   ...
  I tried it but I stop in the login because I have back this error:
  ERROR 2002: Can't connect to local MySQL server through socket
  '/var/lib/mysql/mysql.sock' (2)
 
  looking for it I notice that mysql.sock doesn't exist!
 
  I'm using mysql 3.23.49 on RH 7.3
 
  I hope somebody will replay!
 
  PS: I have in this machine others applications that works with mysql
without
  problem... for example a phpnuke site...
 
  byez
  CioloWeb
 
 
 
  -
  List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

 --
 --
 Ted Knab
 Chester, Maryland  21619 USA
 --
 45865602e6164796f6e60237471647560216e646022756c6967696f6
 e602963702f62637f6c6564756e202242796e67602f6e6a0

 -
 List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Restrict to NAS-Port-Type

2004-02-13 Thread Alan DeKok
Paulo Fragoso [EMAIL PROTECTED] wrote:
 All is working fine, but we would like to restric PPTP users to only 
 connect to vpn server. So we have created our radgroupcheck this way:
...
 |  8 | virtual   | NAS-Port-Type| := | Virtual |

  That won't do what you want.  Use '=='.  See also man users

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Request for an out-of-date CVS version

2004-02-13 Thread Jason2
My apologies to the postmaster for sending this from the wrong email addy.


Hullo folks,

Would anyone on list happen to have one of the older CVS source sets that
compiles successfully for PEAP?

I've finally threshed out the stupidity oif user problems I was having
before so teh PEAP module compiles successfully. :)

But yesterday's CVS, being teh currently -worked upon code that it is,
won't compile. 

If not, I'll jsut keep checking out the CVS occasionally hoping to get
lucky *g*

Thanks guys,
Jason

P.S. 
Nice turn around on support issues here. 
And very informative jsut reading what's going on 

Dominant: Lonely Guy/Nanny/Archivist
Recessive: Lurker/Therapist/Palooka
What's YOUR genes? http://www.winternet.com/~mikelr/flame1.html


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


FreeRadius, Cygwin and MySQL

2004-02-13 Thread A. Clausen
Before I even bother attempting this, is it possible?  I'm running Mysql on
a Win2000 machine, and have managed to get FreeRadius 0.9.3 compiled under
Cygwin on the same machine.  If it won't work, then I'll just stick to
periodic scans of the detail file and building the users file from the
database.

-- 
Aaron Clausen
[EMAIL PROTECTED]


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


MD5 password encryption problem

2004-02-13 Thread Mike Lampson
Hello all,

I have searched the mailing list archived and have failed to find a solution
to my particular problem.

I am trying to switch the entries in our users file from Unix crypt to MD5
encryption.  My entry in the users file looks like this:

mikelampson Auth-Type := PAP, Crypt-Password ==
cc03e747a6afbbcbf8be7668acfebee5
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Address = 255.255.255.254,
Framed-IP-Netmask = 255.255.255.255,
Framed-Compression = Van-Jacobson-TCP-IP

The above Crypt-Password is for the string test123 and was generated by
using the md5_hex function from the Digest::MD5 Perl library.

The top portion of the authenticate section of radiusd.conf is as follows:

Auth-Type PAP {
pap
}

And the pap section looks like this:

# PAP module to authenticate users based on their stored password
#
#  Supports multiple encryption schemes
#  clear: Clear text
#  crypt: Unix crypt
#md5: MD5 ecnryption
#   sha1: SHA1 encryption.
#  DEFAULT: crypt
pap {
#encryption_scheme = crypt
encryption_scheme = md5
}

And finally the relevant lines when running radiusd -X is as follows:

rad_recv: Access-Request packet from host xxx.xxx.xxx.xxx:3091, id=26,
length=51
User-Name = mikelampson
User-Password = test123
modcall: entering group authorize for request 1
  modcall[authorize]: module preprocess returns ok for request 1
  modcall[authorize]: module chap returns noop for request 1
rlm_realm: No '@' in User-Name = mikelampson, looking up realm NULL
rlm_realm: No such realm NULL
  modcall[authorize]: module suffix returns noop for request 1
users: Matched mikelampson at 129
  modcall[authorize]: module files returns ok for request 1
modcall: group authorize returns ok for request 1
  rad_check_password:  Found Auth-Type PAP
auth: type Crypt
auth: Failed to validate the user.

I am using NTRadPing to generate the request.

Any suggestions appreciated.

Thanks,

Mike


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: freeradius+postgresql: access-reject

2004-02-13 Thread Jeremy Davis
Try changing the Auth-type from system to local in the users file.

Jeremy


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Truong
Manh Cuong
Sent: Friday, February 13, 2004 6:20 AM
To: [EMAIL PROTECTED]
Subject: freeradius+postgresql: access-reject


Hi all,
I installed freeradius 0.93 and use postgresql. I don't know how to config radius for 
authorizing. it rejects all request because it use system account.
I want to config radius so that it query account in postgresql database. how to do it ?
it reported that rlm_unix not found. I just comment all line related with unix.
thanks and regards,
Manh Cuong.
.mmz yv


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: response: Access-Reject

2004-02-13 Thread Jeremy Davis



Run 
the server is debug mode, radiusd -X and see if it is trying to authenticate via 
system or local.

Jeremy


  -Original Message-From: 
  [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]On Behalf Of Truong 
  Manh CuongSent: Thursday, February 12, 2004 10:25 PMTo: 
  [EMAIL PROTECTED]Subject: response: 
  Access-Reject
  
  Hi 
  all,
  It is a long time that I didnt 
  use freeradius. So I fogot howto config radius 
  server.
  I use NTRadPing and it response: 
  accessReject. 
  Could you please help me how to 
  config radius:
  Which file need: (I config 
  radiusd.conf,client,postgresql.conf)
  In radiusd.conf, what should I 
  need to mention ?
  Thanks and 
  Regards,
  Manh 
  Cuong.


RE: zero packet

2004-02-13 Thread Jeremy Davis



Write 
a script to parse the file and delete those entries, this could be done in a 
number of languages.

Jeremy


  -Original Message-From: 
  [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]On Behalf Of Anson 
  RinesmithSent: Friday, February 13, 2004 9:33 AMTo: 
  [EMAIL PROTECTED]Subject: zero 
  packet
  
  Is there a way to 
  eliminate
  
  Thu Feb 12 10:01:46 2004 : 
  Error: rlm_sql: Stop packet with zero session length
  . (user '', nas 
  '192.168.0.1')
  
  messages from my radius.log 
  ?
  I know what they are and what they 
  mean, I just dont want to see them.
  
  Anson Rinesmith
  


SQL.conf to force user case Sensitive

2004-02-13 Thread sarky



Hello all 
Well i have asked this question before now i have 
edited sql.conf and hashed the lines below in the other way 2 and the system 
still doesnt check case sensitive anyone know any solution to double 
login?

 # Use these for case sensitive usernames. 
WARNING: Slower queries!authorize_check_query = "SELECT 
id,UserName,Attribute,Value,op FROM${authcheck_table} WHERE STRCMP(Username, 
'%{SQL-User-Name}') = 0 ORDER BYid"authorize_reply_query = "SELECT 
id,UserName,Attribute,Value,op FROM${authreply_table} WHERE STRCMP(Username, 
'%{SQL-User-Name}') = 0 ORDER 
BYid"# authorize_check_query = 
"SELECT id,UserName,Attribute,Value,op FROM${authcheck_table} WHERE Username 
= '%{SQL-User-Name}' ORDER BY id"# 
authorize_reply_query = "SELECT id,UserName,Attribute,Value,op 
FROM${authreply_table} WHERE Username = '%{SQL-User-Name}' ORDER BY 
id" # Use these for case 
sensitive usernames. WANRING: Slower 
queries! 
authorize_group_check_query = 
"SELECT${groupcheck_table}.id,${groupcheck_table}.GroupName,${groupcheck_table}.Attribute,${groupcheck_table}.Value,${groupcheck_table}.opFROM 
${groupcheck_table},${usergroup_table} 
WHERESTRCMP(${usergroup_table}.Username, '%{SQL-User-Name}') = 0 
AND${usergroup_table}.GroupName = ${groupcheck_table}.GroupName ORDER BY 
${groupcheck_table}.id" 
authorize_group_reply_query = 
"SELECT${groupreply_table}.id,${groupreply_table}.GroupName,${groupreply_table}.Attribute,${groupreply_table}.Value,${groupreply_table}.opFROM 
${groupreply_table},${usergroup_table} 
WHERESTRCMP(${usergroup_table}.Username, '%{SQL-User-Name}') = 0 
AND${usergroup_table}.GroupName = ${groupreply_table}.GroupName ORDER BY 
${groupreply_table}.id"# 
authorize_group_check_query = 
"SELECT${groupcheck_table}.id,${groupcheck_table}.GroupName,${groupcheck_table}.Attribute,${groupcheck_table}.Value,${groupcheck_table}.opFROM 
${groupcheck_table},${usergroup_table} WHERE${usergroup_table}.Username = 
'%{SQL-User-Name}' AND${usergroup_table}.GroupName = 
${groupcheck_table}.GroupName ORDER BY 
${groupcheck_table}.id"# 
authorize_group_reply_query = 
"SELECT${groupreply_table}.id,${groupreply_table}.GroupName,${groupreply_table}.Attribute,${groupreply_table}.Value,${groupreply_table}.opFROM 
${groupreply_table},${usergroup_table} WHERE${usergroup_table}.Username = 
'%{SQL-User-Name}' AND${usergroup_table}.GroupName = 
${groupreply_table}.GroupName ORDER BY ${groupreply_table}.id"
Sarky


Re: radius.log rotate?

2004-02-13 Thread Guy Fraser
Anson Rinesmith wrote:

I found that for now the easiest way for me is to edit newsyslog.conf
(FreeBSD 4.6) and add that file in there. Works pretty well so far.
 

Absolutely.

After spending a while reading the code in CVS, I have determined it 
will take
a bit of work to have dynamically named log files. In order to make it work
consistantly with the rest of FreeRadius I am considering a rlm_log feature.

This rlm_log feature would be similar to rlm_detail in naming 
convention, but
one significant difference. Some information will not have a radius request
associated with it, so it will have to have a system log, where that 
type of
data will be located.

The reason I am considering this feature, is that some people have asked 
for it
and I work for an ISP that administrates other smaller ISP's. I have 
been asked
in the past to give access to people in affialiated ISP's, but they only 
want to
see traffic for their realm. A log file named like :

%L/%{Realm}/%Y%m%d.log

That translates to:

/path/to/logdir/SomeISP.com/20040213.log

Would make it possible to do, and files would be renamed on the fly.

Well, it's Friday night and I'm an hour past going home time, so I'll 
get back
to this on Tuesday {Monday is a holiday :-)}.



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Error compiling Freeradius-0.9.3 on FreeBSD 4.9

2004-02-13 Thread Albert Miles Enabe





Albert Miles Enabe [EMAIL PROTECTED] wrote:
 I am trying to compile Freeradius-0.9.3 from ports collection with 
 --with-experimental-modules on FreeBSD 4.9. I am interested in using
 rlm_sqlcounter. It seems to me that the errors appear when compiling
 rlm_smb. Any help on this?

  Delete the rlm_smb directory.  The module shouldn't be used.

  Alan DeKok.Thanks. I have installed it by inserting the following line in the Makefile:CONFIGURE_ARGS+= --with-experimental-modules --without-rlm_smbHave a nice day.amenabe
Do you Yahoo!?
Yahoo! Finance: Get your refund fast by filing online

rlm_ippool error

2004-02-13 Thread apellido jr., wilfredo p
hello, good day i got this error when compiling the
latest cvs of freeradius. im using freebsd 4.8 ...
thanks ... any suggestion or comment 


/usr/include/netinet6/in6.h:122: syntax error before
`u_int8_t'
/usr/include/netinet6/in6.h:144: syntax error before
`u_int8_t'
/usr/include/netinet6/in6.h:149: syntax error before
`u_int32_t'
/usr/include/netinet6/in6.h:612: syntax error before
`*'
/usr/include/netinet6/in6.h:613: warning: type
defaults to `int' in declaration of
`inet6_option_append'
/usr/include/netinet6/in6.h:613: warning: function
declaration isn't a prototype
/usr/include/netinet6/in6.h:614: syntax error before
`*'
/usr/include/netinet6/in6.h:614: warning: type
defaults to `int' in declaration of
`inet6_option_alloc'
/usr/include/netinet6/in6.h:614: warning: data
definition has no type or storage class
/usr/include/netinet6/in6.h:615: syntax error before
`u_int8_t'
/usr/include/netinet6/in6.h:615: warning: function
declaration isn't a prototype
/usr/include/netinet6/in6.h:616: syntax error before
`u_int8_t'
/usr/include/netinet6/in6.h:616: warning: function
declaration isn't a prototype
/usr/include/netinet6/in6.h:631: syntax error before
`u_int8_t'
/usr/include/netinet6/in6.h:632: warning: function
declaration isn't a prototype
/usr/include/netinet6/in6.h:636: syntax error before
`u_int8_t'
/usr/include/netinet6/in6.h:637: warning: function
declaration isn't a prototype
/usr/include/netinet6/in6.h:638: syntax error before
`u_int8_t'
/usr/include/netinet6/in6.h:639: warning: function
declaration isn't a prototype
In file included from rlm_ippool.c:65:
/usr/local/include/gdbm.h:85: warning: function
declaration isn't a prototype
rlm_ippool.c: In function `ippool_instantiate':
rlm_ippool.c:244: warning: comparison between signed
and unsigned
gmake[5]: *** [rlm_ippool.o] Error 1
gmake[5]: Leaving directory
`/usr/local/radiusd/src/modules/rlm_ippool'
gmake[4]: *** [common] Error 1
gmake[4]: Leaving directory
`/usr/local/radiusd/src/modules'
gmake[3]: *** [all] Error 2
gmake[3]: Leaving directory
`/usr/local/radiusd/src/modules'
gmake[2]: *** [common] Error 1
gmake[2]: Leaving directory `/usr/local/radiusd/src'
gmake[1]: *** [all] Error 2
gmake[1]: Leaving directory `/usr/local/radiusd/src'
gmake: *** [common] Error 1
*** Error code 2


=
wilfredo pahilanga apellido jr.
technical support
mactan online
bacolod city, philippines
+63 34 4348311

__
Do you Yahoo!?
Yahoo! Finance: Get your refund fast by filing online.
http://taxes.yahoo.com/filing.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Unsubscribe

2004-02-13 Thread Arindam Roy
Unsubscribe
--
Your favorite stores, helpful shopping tools and great gift ideas. 
Experience the convenience of buying online with [EMAIL PROTECTED] 
http://shopnow.netscape.com/

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


unsubscribe

2004-02-13 Thread Arindam Roy
unsubscribe



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html