Send the Accounting to two servers
Dear All, im using freeradius as a proxy radius and need to proxy the accounting to two different servers, can i do that? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: wholesale issue
Dear, i have added this to huntgroups but nothing happened; if i want to use mysql database as a backend is there any way to do that? [EMAIL PROTECTED] wrote: You can use huntgroups: isp1 Realm == isp1realm Calling-Statin-Id = numbe1, Calling Station-Id = number2 Ivan Kalik Kalik Informatika ISP Dana 13/9/2007, "Ashraf Al-Basti" <[EMAIL PROTECTED]> piše: Dear All, i want to setup a freeradius as a proxy radius for a wholesale, and want to limit the access by using the calling-station-id; so [EMAIL PROTECTED] can connect only from any calling-station-id that belong to isp1, (ex, 555111, 333222) and [EMAIL PROTECTED] can connect only from any calling-station-id that belong to isp2 i have all the calling station id which belong to the ISPs, but i didnt have the username for every ISP, and want to use the realm instead of the username to do that. can i use the checkval to check for the calling-station-id and realm, or is there anyway to do that? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
wholesale issue
Dear All, i want to setup a freeradius as a proxy radius for a wholesale, and want to limit the access by using the calling-station-id; so [EMAIL PROTECTED] can connect only from any calling-station-id that belong to isp1, (ex, 555111, 333222) and [EMAIL PROTECTED] can connect only from any calling-station-id that belong to isp2 i have all the calling station id which belong to the ISPs, but i didnt have the username for every ISP, and want to use the realm instead of the username to do that. can i use the checkval to check for the calling-station-id and realm, or is there anyway to do that? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: strip domain
Dear All, what i did is to add the following in the radcheck and in the authorize section to add sql and remove the suffix; because if i leave the suffix in the authorize section it will do the proxy even it didnt match the query in the sql. so i remove the suffix and so cant do stripping for the domain please advice Ashraf Al-Basti wrote: > Dear, > i had did proxying the users based on the domain and the pstn no. > using sql query on the radcheck table, but i need to strip the > username before proxying it. please advice > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
strip domain
Dear, i had did proxying the users based on the domain and the pstn no. using sql query on the radcheck table, but i need to strip the username before proxying it. please advice - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Proxy ADSL users
Dear All, is there any way to limit the access for ADSL user to be from a specific ATM port? I have an ATM DSLM and want to proxy the request to a specific ISP, depending on some attribute, and need a help to do know the attributes which i can use to do that? i did that for the dial up users using Called-Station-Id, but for the ATM DSLM i didnt know what can i use to do the same? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
add new arributes in the proxy reply message
Dear, i need to add attributes in the proxy reply message, how can i do that using attrib_rewrite? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Oracle 10g
Dear All, this is what i have, rlm_sql (sql): Could not link driver rlm_sql_oracle: rlm_sql_oracle.so: cannot open shared object file: No such file or directory rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the search path of your system's ld. radiusd.conf[10]: sql: Module instantiation failed. radiusd.conf[1844] Unknown module "sql". radiusd.conf[1773] Failed to parse authorize section. the rlm_sql_oracle.so is missing, any one have any idea about that. Peter Nixon wrote: On Tue 22 May 2007, Ashraf Al-Basti wrote: Dear All, is it possible to run Freeradius using oracle 10g DB on different servers? yes i have freeradius 1.0.1-3 under Redhat AS4 (rpm package). please how can compile freeradius to use the oracle DB? On SUSE, you simple rebuild my spec file after changing: %define _oracle_support 0 to %define _oracle_support 1 You need the oracle devel package installed of course. For RedHat you will need to do something similar.. Cheers - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Oracle 10g
Dear All, is it possible to run Freeradius using oracle 10g DB on different servers? i have freeradius 1.0.1-3 under Redhat AS4 (rpm package). please how can compile freeradius to use the oracle DB? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: SQL query in Pre-Proxy
Hi, do you mean that i have to do the following: in the radcheck i have to put usernamecalling-station-id=number and in the radreply, usernameproxy-to-realm:=domain could you please send me the whole process for the request. [EMAIL PROTECTED] wrote: Make user entry: thatuser Calling-Station-Id==number, Proxy-To-Realm:="domain" Put attributes in radcheck if you are using SQL. Ivan Kalik Kalik Informatika ISP Dana 17/5/2007, "Ashraf Al-Basti" <[EMAIL PROTECTED]> piše: Dear, or is there any way to do authentication before doing proxy Ashraf Al-Basti wrote: Dear all, i want to use freeradius as a proxy server for more than domain, but i need to do some query from the DB before doing proxy. i have a DB that contain the username and the telephone number and the domain for that user. i want to do a query to check if for that data, if matched to do proxy if not to cancel the proxy. please advice... - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: SQL query in Pre-Proxy
Dear, or is there any way to do authentication before doing proxy Ashraf Al-Basti wrote: >Dear all, >i want to use freeradius as a proxy server for more than domain, but i >need to do some query from the DB before doing proxy. >i have a DB that contain the username and the telephone number and the >domain for that user. i want to do a query to check if for that data, if >matched to do proxy if not to cancel the proxy. >please advice... >- >List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
SQL query in Pre-Proxy
Dear all, i want to use freeradius as a proxy server for more than domain, but i need to do some query from the DB before doing proxy. i have a DB that contain the username and the telephone number and the domain for that user. i want to do a query to check if for that data, if matched to do proxy if not to cancel the proxy. please advice... - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Radius to Diameter Gateway
Dear, Is there any way to make Freeradius to work as Radius/Diameter gateway? If not is there any recommended software that can do that? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Prepaid system
Dear All, could you please recommend a free prepaid system for hotspot service? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: remove the white space
Hi, when i try to use `tr -d \n` it always failed with this error odcall: entering group pre-proxy for request 0 radius_xlat: '/bin/bash /var/www/html/Test 11' Exec-Program: /bin/bash /var/www/html/Test 11 Exec-Program output: Exec-Program: returned: 0 modcall[pre-proxy]: module "DB" returns ok for request 0 radius_xlat: 'wanadoo' radius_xlat: Running registered xlat function of module exec for string '/bin/cat /var/www/html/user | tr -d ' rlm_exec (exec): Executing /bin/cat /var/www/html/user | tr -d radius_xlat: '/bin/cat /var/www/html/user | tr -d ' Exec-Program: /bin/cat /var/www/html/user | tr -d /bin/cat: invalid option -- d Try `/bin/cat --help' for more information. Exec-Program output: Exec-Program: returned: 1 rlm_exec (exec): result 1 radius_xlat: '' Bjørn Mork wrote: Ashraf Al-Basti <[EMAIL PROTECTED]> writes: Thanks, but if i want to read from file using cat how to do that? a) don't write the \n to the file in the first place, or b) pipe the output through `tr -d \n`, or c) write a simple script to read the file and preprocess the data as you like before feeding it to freeradius Bjørn - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: remove the white space
Thanks, but if i want to read from file using cat how to do that? Bjørn Mork wrote: Ashraf Al-Basti <[EMAIL PROTECTED]> writes: i have successfully replace the username from a file but it add "\n" or a white space for it, i'm using echo or cat command and the same result, here is the output for the debug, please advice how can i remove it. echo(1): -n do not output the trailing newline Bjørn - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
remove the white space
Dear,
i have successfully replace the username from a file but it add "\n" or
a white space for it, i'm using echo or cat command and the same result,
here is the output for the debug,
please advice how can i remove it.
modcall: entering group pre-proxy for request 1
radius_xlat: 'wanadoo'
radius_xlat: Running registered xlat function of module exec for string
'/bin/echo 11'
rlm_exec (exec): Executing /bin/echo 11
radius_xlat: '/bin/echo 11'
Exec-Program: /bin/echo 11
Exec-Program output: 11
Exec-Program-Wait: plaintext: 11
Exec-Program: returned: 0
rlm_exec (exec): result 0
radius_xlat: '11 '
rlm_attr_rewrite: Changed value for attribute User-Name from 'wanadoo'
to '11 '
rlm_attr_rewrite: Could not find value pair for attribute User-Name
modcall[pre-proxy]: module "fixusername" returns ok for request 1
radius_xlat:
'/var/log/radius/radacct/172.16.5.188/pre-proxy-detail-20070206'
rlm_detail:
/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d
expands to /var/log/radius/radacct/172.16.5.188/pre-proxy-detail-20070206
modcall[pre-proxy]: module "pre_proxy_log" returns ok for request 1
modcall: group pre-proxy returns ok for request 1
Sending Access-Request of id 1 to 10.3.83.11:1812
User-Name = "11\n"
NAS-IP-Address = 10.0.0.2
Called-Station-Id = "080010101"
User-Password = "11"
Proxy-State = 0x31
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: rewrite accounting request
Dear All,
Anyone can help how to rewrite the password attribute, i want to replace
the password with a new one from a file. i'm trying to use the "echo"
but it didnt work....
Ashraf Al-Basti wrote:
i change the process as follow to replace the username with a one from
a file but i have the following error,
attr_rewrite fixusername {
attribute = User-Name
# may be "packet", "reply", "proxy", "proxy_reply" or
"config"
searchin = proxy
searchfor ="wanadoo"
replacewith = %{exec:/bin/cat /var/www/html/user}
ignore_case = no
new_attribute = no
max_matches = 10
# ## If set to yes then the replace string will be
appended to the original string
# append = no
}
error
radius_xlat: 'wanadoo'
WARNING: Attempt to use unknown xlat function, or non-existent
attribute in string %{exec:/bin/cat}
radius_xlat: ''
rlm_attr_rewrite: xlat on replace string failed.
Alan DeKok wrote:
Ashraf Al-Basti wrote:
Thanks Alan..
But do have any idea to work around that?
See the FAQ. If the NAS doesn't send data in an accounting packet, go
read the NAS documentation to see how to configure it to send that
information.
But send User-Password? Nope. It's impossible.
Alan DeKok.
--
http://deployingradius.com - The web site of the book
http://deployingradius.com/blog/ - The blog
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: rewrite accounting request
i change the process as follow to replace the username with a one from a
file but i have the following error,
attr_rewrite fixusername {
attribute = User-Name
# may be "packet", "reply", "proxy", "proxy_reply" or
"config"
searchin = proxy
searchfor ="wanadoo"
replacewith = %{exec:/bin/cat /var/www/html/user}
ignore_case = no
new_attribute = no
max_matches = 10
# ## If set to yes then the replace string will be
appended to the original string
# append = no
}
error
radius_xlat: 'wanadoo'
WARNING: Attempt to use unknown xlat function, or non-existent attribute
in string %{exec:/bin/cat}
radius_xlat: ''
rlm_attr_rewrite: xlat on replace string failed.
Alan DeKok wrote:
Ashraf Al-Basti wrote:
Thanks Alan..
But do have any idea to work around that?
See the FAQ. If the NAS doesn't send data in an accounting packet, go
read the NAS documentation to see how to configure it to send that
information.
But send User-Password? Nope. It's impossible.
Alan DeKok.
--
http://deployingradius.com - The web site of the book
http://deployingradius.com/blog/ - The blog
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: rewrite accounting request
Thanks Alan.. But do have any idea to work around that? Alan DeKok wrote: Ashraf Al-Basti wrote: ... in the freeradius server we replace the username with a new one which is the same as the password, so we are using pre-proxy to call attr_rewrite that will replace the username with the new one. As an authintecation process every thing goes will, but for the Accounting the free radius didnt change the username and send it as it is to the another radius which mean that i couldnt do accounting for them. so could you please help me to solve like this problem. ... This is what i found in the log file, Why? Why aren't you running the server in debugging mode as suggested in the README, FAQ, INSTALL, and daily on this list? In any case, your post already contains the answer to your question: There's no "Password" attribute in accounting requests. The log files you posted show this clearly. Read them. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
rewrite accounting request
Dear All,
I need your help to configure FreeRadius to rewrite the User-Name
attribute in Accounting-Request.
my setup as follow; please correct me if i had a mistake,
i'm using Freeradius to do a proxy to another radius server. we are
using one username (wanadoo) as a default username for our prepaid card
system.
in the freeradius server we replace the username with a new one which is
the same as the password, so we are using pre-proxy to call attr_rewrite
that will replace the username with the new one. As an authintecation
process every thing goes will, but for the Accounting the free radius
didnt change the username and send it as it is to the another radius
which mean that i couldnt do accounting for them. so could you please
help me to solve like this problem.
attr_rewrite fixusername {
attribute = User-Name
searchin = proxy
searchfor ="wanadoo"
replacewith = %{Password}
ignore_case = no
new_attribute = no
max_matches = 10
append = no
}
pre-proxy {
fixusername
pre_proxy_log
}
This is what i found in the log file,
Packet-Type = Access-Request
Wed Jan 31 07:55:27 2007
User-Name = "114242"
User-Password = "114242"
NAS-IP-Address = 172.16.5.188
Client-IP-Address = 172.16.5.188
Stripped-User-Name = "wanadoo"
Realm = "coolnet"
Realm = "coolnet"
Proxy-State = 0x3833
Packet-Type = Accounting-Request
Wed Jan 31 07:55:27 2007
Acct-Session-Id = "76"
Acct-Status-Type = Start
User-Name = "wanadoo"
NAS-Port = 2
Service-Type = Framed-User
Framed-Protocol = PPP
Framed-IP-Address = 255.255.255.254
Class = 0x5376633d32
NAS-IP-Address = 172.16.5.188
Client-IP-Address = 172.16.5.188
Acct-Unique-Session-Id = "26331f725bfc7b96"
Stripped-User-Name = "wanadoo"
Realm = "coolnet"
Realm = "coolnet"
Proxy-State = 0x3834
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
