RE: Packet of Disconnect PHP
I didn't even know there were Radius functions in PHP... Anyway, I did do my POD with PHP: First get all the information you need from the database: SELECT `radcheck`.`username`, `radcheck`.`attribute`, `radcheck`.`value`*1024*1024*1024, `radacct`.`framedipaddress`, `radacct`.`xascendsessionsvrkey`, `radacct`.`nasipaddress`, `radacct`.`acctstoptime`, `radacct`.`realm` FROM `radcheck` CROSS JOIN `radacct` ON `radcheck`.`username` = `radacct`.`username` WHERE . Then you can use this to pipe it through radclient, assuming your web server hosting this script is the same as your Radius server this is quite easy: $disconnect=exec(' echo "User-Name = '.$row[0].', Framed-IP-Address = '.$row[3].', X-Ascend-Session-Svr-Key = '.$row[4].', NAS-IP-Address = '.$row[5].'" | radclient -x NAS.IP.ADD.RESS:PORT disconnect SECRET '); This way I am iterating through a list of accounts returned by the query (do some calculations) and then kick them off the network. Maybe not the most sophisticated method but it does the trick. Hope this helps Kind regards Marius Pesé Mindspring Computing -Original Message- From: freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org [mailto:freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org] On Behalf Of Arran Cudbard-Bell Sent: Wednesday, August 03, 2011 8:21 AM To: FreeRadius users mailing list Subject: Re: Packet of Disconnect PHP Its possible... IIRC (and this was a long long time a go) type is just an integer value http://www.php.net/manual/en/function.radius-create-request.php and also though there are two constants defined, it can actually be *any* integer value, so just use type 40 for POD. You'll need to make sure you have the right combination of attributes to identify the user, some NAS are *VERY* picky. -Arran PS I think the RADIUS stuff is an extension, so you'll need to install it using PECL. On 3 Aug 2011, at 01:03, mark fennema wrote: > Hello, I'm working on getting a hotspot set up, and I need the ability > to have a user log themselves out, so that they can connect on another > computer. I have it set up so that the user can enter their > information and have it log them out, but it doesn't disconnect them > from the router, so they can continue using the internet until they > disconnect from the wireless, so I need to send a packet of > disconnect. Is there a way to do this in php? > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > Arran Cudbard-Bell a.cudba...@freeradius.org RADIUS - Half the complexity of Diameter - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Cant Start Radius Server MAC OSX (snow leopard)
Hi Alan, David Looks like the type of quote used just might be the issue... “password” is pretty in MS Word, but UNIX prefers "password" Kind regards Marius Pesé Mindspring Computing -Original Message- From: freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org [mailto:freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org] On Behalf Of Alan Buxey Sent: Monday, August 15, 2011 10:12 AM To: FreeRadius users mailing list Subject: Re: Cant Start Radius Server MAC OSX (snow leopard) Hi, > Starting - reading configuration files ... > including configuration file /private/etc/raddb/radiusd.conf > Unable to open file "/private/etc/raddb/radiusd.conf": Permission denied > Errors reading /private/etc/raddb/radiusd.conf sometimes its not permissions, but the code reading the configurations files encounters an error - eg when reading radiusd.conf - which pulls in all the files, and the error lies there.. > CHANGES I MADE PRIOR TO GETTING THIS ERROR exactly > Using textwrangler I edited /etc/raddb/users yes. > user1 Cleartext-Password := “password” > Service-Type = NAS-Prompt-User, > cisco-avpair = “webvpn:user-vpn-group=SLRgroup1” ...and then you saw the errors in the debug log regarding this entry - this entry is wrong (or the server cannot read it due to incorrect. maybe user1 Cleartext-Password := “password” Service-Type = "NAS-Prompt-User", cisco-avpair = “webvpn:user-vpn-group=SLRgroup1” ? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Redundant Accounting
Hi everyone, I have set up a FreeRadius2 v2.1.8 installation a while back and configured it according to our needs. It is running smoothly, currently doing Auth and Acc on one box with a MySQL database and a detail file being used. We now want to set up a second box which basically shall do the exact same thing as the first does as a failover and also give us two identical accounting tables in the databases. Can you guys point me in the right direction for this - google just doesn't seem to like me on this one. Thanks so much Marius - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Redundant Accounting
-Original Message- From: freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org [mailto:freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Tuesday, June 22, 2010 10:19 AM To: FreeRadius users mailing list Subject: Re: Redundant Accounting Marius Pesé wrote: > Hi everyone, > > I have set up a FreeRadius2 v2.1.8 installation a while back and > configured it according to our needs. It is running smoothly, currently > doing Auth and Acc on one box with a MySQL database and a detail file > being used. We now want to set up a second box which basically shall do > the exact same thing as the first does as a failover and also give us > two identical accounting tables in the databases. You're trying to configure: = RADIUS + MySQL NAS -> / \ = RADIUS + MySQL Don't. Instead, configure = RADIUS = = MySQL NAS -> / \ - / \ = RADIUS =/ \= MySQL i.e. Configure MySQL failover for the two RADIUS servers. This turns the problem into a MySQL problem, rather than a RADIUS one. It also gives you two points of failover, rather than one. Alan DeKok. Hi Alan, Thanks for your reply. You are right about the scenario I am trying to achieve: RADIUS1 + MySQL NAS --< | RADIUS2 + MySQL (Trying to point out the synchronized databases on both servers) I read the MySQL white paper on the solution you are proposing, but since we are a fairly small company we are actually hoping to find a solution using only two servers as in the first scenario you depictured. Do you think there is another reason besides scalability not to run mySQL and Radius on the same box? Is mySQL clustering the way to get redundant accounting either way or is there something in FreeRadius one can use for our smaller setup? Thanks again Marius - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Redundant Accounting
-Original Message- From: freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org [mailto:freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Tuesday, June 22, 2010 11:22 AM To: FreeRadius users mailing list Subject: Re: Redundant Accounting Marius Pesé wrote: > Thanks for your reply. You are right about the scenario I am trying to > achieve: > > RADIUS1 + MySQL > NAS --< | > RADIUS2 + MySQL > > (Trying to point out the synchronized databases on both servers) That's a database replication issue. > I read the MySQL white paper on the solution you are proposing, but since we > are a fairly small company we are actually hoping to find a solution using > only two servers as in the first scenario you depictured. > Do you think there is another reason besides scalability not to run mySQL and > Radius on the same box? Look at MySQL master-master replication. > Is mySQL clustering the way to get redundant accounting either way or is > there something in FreeRadius one can use for our smaller setup? You can use MySQL clustering. The code is GPL, so there's no cost other than time. Alan DeKok. Hi Alan, So you would advise not to use any built-in Radius functionality? I thought I could achieve this with using one of the copy-acct-to-home-server modules or something like that... Regards Marius - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Redundant Accounting
-Original Message- From: freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org [mailto:freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Tuesday, June 22, 2010 12:40 PM To: FreeRadius users mailing list Subject: Re: Redundant Accounting Marius Pesé wrote: > So you would advise not to use any built-in Radius functionality? What did my message say? Just double-checking. > I thought I could achieve this with using one of the copy-acct-to-home-server > modules or something like that... You drew a picture showing how you wanted MySQL to MySQL communication. This is a MySQL issue, and has nothing to do with RADIUS. Alan DeKok. Thanks for your advice, now I can concentrate my research on mySQL. Regards Marius - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RadSQLRelay
Hi everyone, We are still struggling to get our FreeRadius2 servers running on CentOS5.5 to relay accounting packages to one another. Right now I have one FR2 server with a local mySQL database and one additional machine just running mysqld. The FR2 machine writes it's own database and the textfile with the queries without problems. However if we start radsqlrelay (radsqlrelay -d mysql -b freeradius -h 196.25.xxx.xxx -u root -p /var/log/radius/radacct/relay/sql-relay) it opens quite a few connections to the secondary database, but does not seem to use the text file with the queries, also it does not give any debug output, regardless of the -x option. Tried both path and path+file for the filename, hostname and IP for the the secondary database system. Without debugging output fairly hard to figure out. Anybody else know this problem? Regards Marius - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: RadSQLRelay
-Original Message- From: Of Alan DeKok Sent: Wednesday, July 07, 2010 4:10 PM To: FreeRadius users mailing list Subject: Re: RadSQLRelay Marius Pesé wrote: > We are still struggling to get our FreeRadius2 servers running on > CentOS5.5 to relay accounting packages to one another. ? raddb/sites-available/copy-acct-to-home-server > However if we start radsqlrelay Uh... why? > (radsqlrelay -d mysql -b freeradius -h > 196.25.xxx.xxx -u root -p /var/log/radius/radacct/relay/sql-relay) > it opens quite a few connections to the secondary database, but does not > seem to use the text file with the queries, also it does not give any > debug output, regardless of the –x option. Tried both path and path+file > for the filename, hostname and IP for the the secondary database system. > Without debugging output fairly hard to figure out. Anybody else know > this problem? I haven't used radsqlrelay for a long, long, time. The detail file reader/write works fine. Alan DeKok. Thanks Alan, acct relay works fine now using proxy.conf and copy-acct-to-home-server! One final question: Is it possible to replicate the Users table (mysql) using FreeRadius2? The idea is never having to worry if a new user was properly created on both servers (or deleted on both servers). Easiest way seems to be updating the php script to talk to two databases, but if FreeRadius can compare and update its user tables itself it might be even more reliable. Thanks again Marius - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Proxying creates 200 Attributes resulting in DoS warning
After spending some more time on our FreeRadius2 project it managed once again to leave me clueless. The error message: WARNING: Possible DoS attack from host 196.25.xxx.xx: Too many attributes in request (received 201, max 200 are allowed). Googleing showed that it most likely is the result of a mis-configuration in proxy.conf. This is our proxy.conf without comments: proxy server { default_fallback = no } home_server copy-acct-to-home-server-B { type = acct ipaddr = 196.25.xxx.xx port = 1646 secret = xx } home_server_pool my_acct_failover { type = fail-over home_server = copy-acct-to-home-server-B } realm DEFAULT { acct_pool = my_acct_failover } realm LOCAL { } Might look a bit odd because we played around for quite a bit. Who can spot the fatal error? Thanks Marius - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Proxying creates 200 Attributes resulting in DoS warning
Hi Alan, Managed to get that one right, but now its stripping off the realm despite me having set nostrip, and the second server then complains about not knowing the user. Where else can a realm get stripped except for proxy.conf and sites-enabled/default? -Original Message- From: freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org [mailto:freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Wednesday, July 28, 2010 5:04 PM To: FreeRadius users mailing list Subject: Re: Proxying creates 200 Attributes resulting in DoS warning Marius Pesé wrote: > After spending some more time on our FreeRadius2 project it managed once > again to leave me clueless. The error message: > > WARNING: Possible DoS attack from host 196.25.xxx.xx: Too many attributes in > request (received 201, max 200 are allowed). See the "security" section of radiusd.conf. > Googleing showed that it most likely is the result of a mis-configuration in > proxy.conf. You are very likely proxying packets FROM the server TO itself, in an infinite loop. Stop that. > This is our proxy.conf without comments: Have you tried running the server in debugging mode? Do you see it proxying packets to itself in an endless loop? Does the debug log show WHY the packets were proxied? If the packets really do have more than 200 real attributes, edit radiusd.conf to allow this. If the packets have dozens of "Proxy-State" attributes, you've misconfigured the server and broken it. Configure to proxy packets to *other* RADIUS servers, not to itself. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Adding additional row to radcheck table
Hi everyone, Radcheck usually stores CAP and PASSWORD, I have added an additional value to the dictionary and wanted to add that as a row in radcheck, like IDUsername Attribute Op Value 66 b...@internet cancelled == no However when I then try to authenticate debug returns "No known good password" even though the Crypt-Password Attribute is still there. Deleting the line in the radcheck table and everything works again. Anybody see what I missed? Regards Marius - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Use both SQL and SQL-LOG
Hi everyone, I'm using mySQL to log accounting data, and also want to save the queries (not the packets) to a text file to use with a different program. Since that is both in sites-enabled/default, they seem to be mutually exclusive. Or maybe I'm just a bit blind - it's Friday after all. Any hint would be appreciated. Regards Marius - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Use both SQL and SQL-LOG
Marius Pesé wrote: > I’m using mySQL to log accounting data, and also want to save the > queries (not the packets) to a text file to use with a different > program. Since that is both in sites-enabled/default, they seem to be > mutually exclusive. No. Why would you conclude that? Alan DeKok. Hi Alan, I assumed that to be the case because uncommenting sql_log didn't work and the comment says: # Instead of sending the query to the SQL server, # write it into a log file. So essentially uncommenting the line should call modules/sql_log which should write into the text file, correct? Maybe I'm simply having a permissions issue then... Thanks for the advice Marius - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: SQL query error; rejecting user
That's not a bug, that is someone trying to use the MS SQL schema on a MySQL server. Obviously those files will only work for the database server they were written for. -Original Message- From: freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org [mailto:freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org] On Behalf Of Daniel Sandulescu Sent: Tuesday, October 12, 2010 10:46 AM To: FreeRadius users mailing list Subject: Re: SQL query error; rejecting user If I want to upload schema.sql same bug as here: http://www.mail-archive.com/freeradius-users@ lists.freeradius.org/msg61853.html - Original Message - From: "Alan Buxey" To: "FreeRadius users mailing list" Sent: Tuesday, October 12, 2010 11:20 AM Subject: Re: SQL query error; rejecting user > Hi, >> So I did, I deleted everything in / etc / raddb and I configuration, >> again >> depending on the requirements there. > > check that the raddb directory is the right onw - I seem to recall that > one > of your logs showed it was /usr/local/etc/raddb/ > > the default configuration works for basic tests etc - it certainly doesnt > have the blank query error that you posted. > > alan > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Proxying: 2nd server's database doesn't write the realm field
Hi everyone, in my FreeRadius setup accounting requests are proxied to a secondary server, the realm is stripped but still written to database on server1, but server2 only writes the username, the realm field remains empty. Can anyone point me in the right direction on this one? Thanks Marius - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Proxying: 2nd server's database doesn't write the realm field
Hi Alan, switched stripping off in radiusd on server1 and restarted the daemon but nothing seems to have changed. Server1's DB still has the stripped username in username field and the realm in realm field, server2 has the stripped username but no realm. Should I send a debug output or can you tell from the top of your head where I went wrong? Thanks MArius -Original Message- From: freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org [mailto:freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Friday, January 28, 2011 10:50 AM To: FreeRadius users mailing list Subject: Re: Proxying: 2nd server's database doesn't write the realm field Marius Pesé wrote: > in my FreeRadius setup accounting requests are proxied to a secondary > server, the realm is stripped but still written to database on server1, > but server2 only writes the username, the realm field remains empty. Can > anyone point me in the right direction on this one? Don't strip the realm on server 1. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Duplicate Accounting maybe once, twice a day
Hi everyone, we are having an issue on our FreeRadius setup where our redundant servers will maybe once, twice a day create duplicate accounting entries. I have switched the servers to debug for a full day and caught one of these incidents in the log file, see attached. The strange thing is it only happens maybe once a day, regardless of realm or user, and the other couple of hundred accounting requests are fine. Can anyone see why this particular one would bounce back and forth? Our setup consists of two virtually identical FreeRadius2 servers, each with their own mySQL database, so each of them is capable of doing Auth and Acct, and proxies Acct to the other one. Also I changed the acct_update_alt query to write to a failover table since I thought this was the alt query being triggered, but this does not make a difference. Still duplicates in radacct table. Thanks! Marius __ Marius Pesé Senior Software Developer B.Sc. Computer Science [cid:image003.jpg@01CBF85B.77F8AF50]<http://www.mindspring.co.za/> Unit 5, Doncaster Office ParkMindspring Computing Punters Way, Kenilworth P O Box 46926 Cape Town, South Africa Glosderry 7702 Phone: +27 21 657 1780 Fax : +27 21 671 7599 Cell : 072 100 70 73 E-mail: mar...@mindspring.co.za<mailto:mar...@mindspring.co.za> <>rad_recv: Accounting-Request packet from host 196.43.1.87 port 1820, id=1, length=261 Acct-Session-Id = "3/0/0/5.159_00A0493F" Framed-Protocol = PPP Framed-IP-Address = 41.144.110.38 User-Name = "aba...@msp.co.za" X-Ascend-Connect-Progress = LAN-Session-Up X-Ascend-PreSession-Time = 3 X-Ascend-Xmit-Rate = 4096000 X-Ascend-Data-Rate = 4096000 Acct-Session-Time = 3404 Acct-Input-Octets = 970 Acct-Output-Octets = 994 X-Ascend-Pre-Input-Octets = 86 X-Ascend-Pre-Output-Octets = 91 Acct-Input-Packets = 62 Acct-Output-Packets = 62 X-Ascend-Pre-Input-Packets = 5 X-Ascend-Pre-Output-Packets = 6 Acct-Authentic = RADIUS Acct-Status-Type = Interim-Update NAS-Port-Type = Virtual NAS-Port = 805634207 NAS-Port-Id = "3/0/0/5.159" Connect-Info = "AutoShapedVC" Calling-Station-Id = "0182932392" Class = "NL1" Service-Type = Framed-User NAS-IP-Address = 196.43.27.100 X-Ascend-Session-Svr-Key = "01FB51D4" Acct-Delay-Time = 5 Telkom-Access-Type = "DSL" Proxy-State = 0x3436 +- entering group preacct {...} ++[preprocess] returns ok [acct_unique] Hashing 'NAS-Port = 805634207,Client-IP-Address = 196.43.1.87,NAS-IP-Address = 196.43.27.100,Acct-Session-Id = "3/0/0/5.159_00A0493F",User-Name = "aba...@msp.co.za"' [acct_unique] Acct-Unique-Session-ID = "bf140131ce2e1d1f". ++[acct_unique] returns ok [suffix] Looking up realm "msp.co.za" for User-Name = "aba...@msp.co.za" [suffix] Found realm "msp.co.za" [suffix] Adding Stripped-User-Name = "abacus" [suffix] Adding Realm = "msp.co.za" [suffix] Proxying request from user abacus to realm msp.co.za [suffix] Preparing to proxy accounting request to realm "msp.co.za" ++[suffix] returns updated ++[files] returns noop +- entering group accounting {...} [radutmp] expand: /var/log/radius/radutmp -> /var/log/radius/radutmp [radutmp] expand: %{User-Name} -> aba...@msp.co.za ++[radutmp] returns ok [sql] expand: %{User-Name} -> aba...@msp.co.za [sql] sql_set_user escaped user --> 'aba...@msp.co.za' [sql] expand: %{Acct-Input-Gigawords} -> [sql] ... expanding second conditional [sql] expand: %{Acct-Input-Octets} -> 970 [sql] expand: %{Acct-Output-Gigawords} -> [sql] ... expanding second conditional [sql] expand: %{Acct-Output-Octets} -> 994 [sql] expand:UPDATE radacct SET framedipaddress = '%{Framed-IP-Address}', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets= '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username= '%{SQL-User-Name}' AND nasipaddress= '%{NAS-IP-Address}' ->UPDATE radacct SET framedipaddress = '41.144.110.38', acctsessiontime = '3404', acctinputoctets = '0'
RE: FW: Duplicate Accounting maybe once, twice a day
Hi Alan, thanks for the quick reply. If accounting packets are sent twice per default, do you have a guess as to why 1 or 2 per day lead to duplicate entries and the other hundred or so just have 1 entry? Thanks Marius From: freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org [freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org] On Behalf Of Alan DeKok [al...@deployingradius.com] Sent: Wednesday, April 13, 2011 12:12 PM To: FreeRadius users mailing list Subject: Re: FW: Duplicate Accounting maybe once, twice a day Marius Pesé wrote: > This is both the same package. Maybe the odd thing is not the duplicate every > once in a while but rather the fact that the bulk of them is not duplicated? Accounting packets WILL get sent twice. There's little you can do to avoid that. You need to design the system so that it handles duplicate accounting packets. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Radius Database
Try the file sql.conf in your radius root directory for setting which database to use. As for manipulating individual queries try sql/mysql/dialup.conf Kind regards Marius Pesé Mindspring Computing -Original Message- From: freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org [mailto:freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org] On Behalf Of SC@ Sent: Friday, May 06, 2011 3:40 PM To: freeradius-users@lists.freeradius.org Subject: Re: Radius Database I think you didn't understand my problem... I have no problem with one software particularly... I have installed freeradius, i have imported its database, i have written in, i have connected my computer to a switch to test and all is right. In an other hand, I have created a website to manage a database, i have create a database with phpmyadmin to test and all is right... but i don't know how to connect both... the database of freeradius is in a file, the database of phpmy admin is in an other... when i modify my website's code to manage my radius database it is not find because it is not at the right place... that's why I want freeradius to create its database at another place... but i don't think it is a problem of knowledge with that softwares, it is way to change but where and how ? I know this website (http://wiki.freeradius.org/SQL_HOWTO) because i have installed freeradius with that, but when they talk about mysql it is to import the database of freeradius (schema.sql) !!! so... someone can help me ? -- View this message in context: http://freeradius.1045715.n5.nabble.com/Radius-Database-tp4375341p4375938.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html