RE: Radius server health monitor :
Check out 'monit' too. It's able to take some defined actions when the server dies or something goes wrong. kr, Bart -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Devaraj Hattibelegal Patil Sent: dinsdag 7 maart 2006 15:44 To: FreeRadius users mailing list Subject: RE: Radius server health monitor : Can I get any idea on writing our own new open code? I mean I am looking for new small really light wait application which does monitoring and uses the best method (either snmp ping or Server status message or some radius API). Regards, Devah -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] g] On Behalf Of Peter Nixon Sent: Tuesday, March 07, 2006 4:50 AM To: FreeRadius users mailing list Subject: Re: Radius server health monitor : On Mon 06 Mar 2006 15:11, Devaraj Hattibelegal Patil wrote: > Radius server health monitor: I was looking from best way monitor the > health of the Radius server. Can some body suggest the best possible > way? > Thanks in advance Nagios, OpenNMS (Which I use) and many other NMS systems have radius monitoring plugins that work just fine. They can also monitor your backend auth and accounting stores for you (LDAP and SQL for example) -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: free realm
thanks! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dusty Doris Sent: maandag 20 februari 2006 6:27 To: FreeRadius users mailing list Subject: Re: free realm > I'm looking for a solution to add a 'free' realm to my conf. > The object is to always send an access-accept if freeradius receives a > request from a NAS with username e.g. 'free/nonexistinguser/password' > > Is this possible with freeradius? > > thanks and have a nice week-end, > Bart Sure. Read the users manpage (man 5 users) and the comments in the users file. Here are some hints. DEFAULT Realm == "somerealm", Auth-Type := Accept or DEFAULT User-Name =~ "[EMAIL PROTECTED]@somedomain$", Auth-Type := Accept or someusernameAuth-Type := Accept etc... - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
free realm
Hi, I'm looking for a solution to add a 'free' realm to my conf. The object is to always send an access-accept if freeradius receives a request from a NAS with username e.g. 'free/nonexistinguser/password' Is this possible with freeradius? thanks and have a nice week-end, Bart - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
rlm_attr_filter local proxied domains
Hi All,
I was wondering if I could use rlm_attr_filter to filter out
attributes from LOCAL proxied domains.
e.g. in proxy.conf
realm EDPNET {
type= radius
authhost = LOCAL
accthost = LOCAL
}
I tried adding EDPNET to the attr file but the attr_filter returns noop
thank you for any pointers in the right direction.
kind regards,
Bart
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: howto reset rlm_sqlcounter
thanks for your reply Alan, I didn't mean the max-all-sessions value but the actual counter value. If a user has 15600seconds of online time ad is online for e.g. 3600 seconds, where do these 3600 seconds get stored with rlm_sqlcounter? thanks, kind regards, Bart van Daal -Original Message- From: Alan DeKok [mailto:[EMAIL PROTECTED] Sent: donderdag 22 september 2005 19:36 To: FreeRadius users mailing list Subject: Re: howto reset rlm_sqlcounter Bart van Daal <[EMAIL PROTECTED]> wrote: > two possible options I think of to reset the counter are: > 1. write a program to manipulate the gdbm file. Where is this file stored? If you're using rlm_sqlcounter, it's not in a GDBM file. It's in SQL. If you're using rlm_counter, the location of the GDBM file is set in the configuration file. > 2. keep adding the minutes to the allready existing value for the > session-time. You can't do that. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
howto reset rlm_sqlcounter
Hi All, I'm authenticating users who can buy a specified amount of time to go online. I'm using the rlm_sqlcounter module with a reset=never option because there is no specified amount of time in which users have to use their minutes. A user can also buy additional minutes or when his minutes are depleted, a new subscription. two possible options I think of to reset the counter are: 1. write a program to manipulate the gdbm file. Where is this file stored? 2. keep adding the minutes to the allready existing value for the session-time. I was wondering if there was an 'easy' way to reset the counter for a user. thanks, kind regards, Bart van Daal Bart van Daal Network Operations Van Landeghemstraat 20 9100 SINT-NIKLAAS [EMAIL PROTECTED] www.edpnet.be T +32 (0)3 265 67 00 F +32 (0)3 265 67 01 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: radsqlrelay for 1.0.2
thanks Roy, is it possible to build it against the 1.0.2 tree or am I stuck with the cvs version. The libraries differ from the cvs version and the 1.0.2 version. regards, Bart -Original Message- From: ROY [mailto:[EMAIL PROTECTED] Sent: vrijdag 4 maart 2005 2:43 To: Bart Van Daal Subject: RE: radsqlrelay for 1.0.2 Hi Bart, On Thu, 2005-03-03 at 15:36 +0100, Bart Van Daal wrote: > Hi Nicolas, hi Roy, > > Nicolas I'm currently using your radsqlrelay.c with the 1.0.2 release > and I've patched the makefile. I'm very new to this whole patching and > code-hacking thing. I'm getting the following error message while > making radsqlrelay: > thanks for any pointers how to compile radsqlrelay. The patches were already committed on the current CVS. You may try building from it. I've done some stress tests on the version and it looks OK so far. Regards, Roy - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: radsqlrelay for 1.0.2
Hi Nicolas, hi Roy, Nicolas I'm currently using your radsqlrelay.c with the 1.0.2 release and I've patched the makefile. I'm very new to this whole patching and code-hacking thing. I'm getting the following error message while making radsqlrelay: thanks for any pointers how to compile radsqlrelay. Bart gcc -march=pentium3 -O3 -pipe -fomit-frame-pointer -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG -I../include -DHOSTINFO=\"\" -DRADIUSD_VERSION=\"1.0.2\" -o xlat.o -c xlat.c gcc -march=pentium3 -O3 -pipe -fomit-frame-pointer -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG -I../include -DHOSTINFO=\"\" -DRADIUSD_VERSION=\"1.0.2\" -c valuepair.c gcc -march=pentium3 -O3 -pipe -fomit-frame-pointer -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG -I../include -DHOSTINFO=\"\" -DRADIUSD_VERSION=\"1.0.2\" -c timestr.c gcc -L../lib radsqlrelay.o mainconfig.o util.o nas.o client.o log.o conffile.o files.o xlat.o valuepair.o timestr.o ../lib/.libs/libradius.so -o radsqlrelay radsqlrelay.o(.text+0xf26): In function `init_sql': : undefined reference to `lt_preloaded_symbols' radsqlrelay.o(.text+0xf2d): In function `init_sql': : undefined reference to `lt_dlpreload_default' radsqlrelay.o(.text+0xf32): In function `init_sql': : undefined reference to `lt_dlinit' radsqlrelay.o(.text+0xf53): In function `init_sql': : undefined reference to `lt_dlopenext' radsqlrelay.o(.text+0xf5e): In function `init_sql': : undefined reference to `lt_dlerror' radsqlrelay.o(.text+0xfa9): In function `init_sql': : undefined reference to `lt_dlsym' radsqlrelay.o(.text+0x1027): In function `init_sql': : undefined reference to `lt_dlclose' radsqlrelay.o(.text+0x1051): In function `init_sql': : undefined reference to `lt_dlerror' radsqlrelay.o(.text+0x10a9): In function `init_sql': : undefined reference to `lt_dlsetsearchpath' radsqlrelay.o(.text+0x10b3): In function `init_sql': : undefined reference to `lt_dlerror' ../lib/.libs/libradius.so: undefined reference to `crypt' collect2: ld returned 1 exit status make: *** [radsqlrelay] Error 1 -Original Message- From: Nicolas Baradakis [mailto:[EMAIL PROTECTED] Sent: dinsdag 22 februari 2005 14:35 To: freeradius-users@lists.freeradius.org Subject: Re: radsqlrelay for 1.0.2 ROY wrote: > > This version can be built in the 1.0.x source tree. It has been > > modified to fix the detail file locking issue under heavy load. > > Since you are running tests on radsqlrelay, I'd be grateful if I > > could receive some feedback from you on this version. > > There were a lot off differences between v1.3 against your v1.1.2.4 > (code wise). I'm no C coder myself so I can't tell from the diff > output what functionalities were changed. If there's a big advantage > using the > 1.1.2.4 I'd be happy to test it for you. Under heavy load you can see the following error message many times in the file /var/log/freeradius/radius.log Error: rlm_detail: Failed to aquire filelock for /var/log/freeradius/radacct/detail-relay, giving up It's a known problem of radrelay, and it was reported on the mailing list by different people. I've had exactly the same errors with radsqlrelay (which shares a lot of code with radrelay). http://lists.cistron.nl/archives/freeradius-users/2004/09/frm00877.html http://lists.cistron.nl/archives/freeradius-users/2004/10/frm00864.html The changes I made to radsqlrelay.c fix this. My own tests are OK, but I'm interested to get other people's opinion. Even if you've never seen the "Failed to aquire filelock" message, just tell me if the new version works exactly like before. That will help, too. -- Nicolas Baradakis - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Multiple Logins
Thanks Alan, but I need to rephrase my question. What I want to know is, if you don't use the simultaneous-use parameter, can you login unlimited times or does freeradius have a limit on the number of sessions with one user/pass combo? thanks, Bart > -Original Message- > From: Alan DeKok [mailto:[EMAIL PROTECTED] > Sent: maandag 28 juni 2004 18:44 > To: [EMAIL PROTECTED] > Subject: Re: Multiple Logins > > Bart Van Daal <[EMAIL PROTECTED]> wrote: > > does freeradius has a limit on the amount of users that can > be logged > > in with the same username/password combo? > > doc/Simultaneous-Use > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Multiple Logins
Hello, does freeradius has a limit on the amount of users that can be logged in with the same username/password combo? I'm not using a session-db and I had a user that uses the same account in multiple locations. He wasn't able to connect with more than 5 locations until I explicitly filled in an AcctEndTime in the radacct table. Vriendelijke groeten, sincères salutations, best regards Bart van Daal Tel + 32 3 780 74 80 www.edpnet.net <http://www.edpnet.net/> EDPnet Technical Department EDPnet confidential proprietary business information - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: FreeRadius+MySQL+PHP
Hi Felipe, check out dialup_admin that came with the package. > -Original Message- > From: Felipe Neuwald [mailto:[EMAIL PROTECTED] > Sent: donderdag 27 mei 2004 15:49 > To: [EMAIL PROTECTED] > Subject: FreeRadius+MySQL+PHP > > Hello Folks, > > Today I'm using FreeRadius getting login information from > system user accounts. I wanna migrate the accounts to MySQL, and use > FreeRadius+MySQL. I made some test and today everything is > working fine > with this solution, FreeRadius+MySQL. > > What I wanna know, is if exist one PHP admin interface or > something like it to work with FreeRadius+MySQL. > > Best Regards, > -- > Felipe Neuwald > [EMAIL PROTECTED] > +55 61 3038-5038 > +55 61 8135-8918 > -- > Chave pública PGP / PGP public key: > http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x8AE508F3 > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Acct-Stop Packet with radclient
Hello, I would like to know if the following radclient command effectively sends a stop packet to the radius server. Or is it just a test and doesn't the stop packet get written to the accounting table? echo "User-name=test, NAS-Port-Id = 2147483647, Acct-Session-Id = E8FA5426-40603536, Acct-Status-Type = 2, Password = test, Termination-Action = RADIUS-Request" | radclient localhost:1646 acct testsecret thanks, Bart - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Using IPPOOLS with FreeRadius +MYSQL
I think the correct way to do this would be to add the entry in
the radcheck table.
insert into radcheck (UserName,Attribute,op,Value)
values ('','Pool-Name',':=','');
I'm not sure about this, maybe someone could second it.
Bart
>From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
>Sent: vrijdag 12 maart 2004 11:04
>To: [EMAIL PROTECTED]
>Subject: Using IPPOOLS with FreeRadius +MYSQL
>Hi All,
>
>I have a FreeRadius + Mysql up and running fine under Mandrake Linux 9.1.
>Questions here
>
> How can I assign pool of IP addresses to one Wireless AP in
MYSQL ?
>I read following reply in past but can't make out what U need
to add in MYSQL tables ...
> snip <
>Regards,
>
>Sagar
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
WHFC problems
I know this isn't really the place to ask but i'm really at a loss here, this is a mail I sent to the developer of whfc but I thougth I'd post it on the mailinglist, maybe anyone has a suggestion about it. I'm using whfc as a client for faxmailings, so i've set up a database where the phone-numbers are stored. For instance for region Antwerp I've got 900 phonenumbers in a single entry. Now when I try to send a fax I select the entry so all the numbers get selected press OK to send the fax to the recipients, but I get an : 'OOPS is not a valid dial string'. I've checked the dialstring format and that's correct. None of the other numbers get queued. So I was wondering if there's a limit of the numbers you can queue when sending a fax. thanks in advance Vriendelijke groeten, sincères salutations, best regards Bart van Daal Tel + 32 3 780 74 80 www.edpnet.net <http://www.edpnet.net/> EDPnet Technical Department EDPnet confidential proprietary business information - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
