Re: Ascend-Data-Filter Issues
Jeff [EMAIL PROTECTED] said Actually the best answer for me if I were alittle stronger in mysql to create the import query would be a script that I could run to convert the users and import them into the radius database As you noticed, users2mysql is a good place to start. And don't be put off by the SQL itself. The queries and data structures in rlm_sql are very, straight forward. No funky third normal forms or complex relations. It's all very basic select, insert and update, on a really simple schema. when our billing software adds removes locks accounts, then dealing with the filters, etc. That way billing program creates file, query imports to sql, radius operates through the sql end and not users file I have seen the one in the source, users2mysql just not sure its actually the correct format to import usersfor what i need. I was thinking del all imported items when a new users file is ready for import then repopulate with the import query the new. As long as you selectively remove specific groups of users, rather than dropping entire tables, there's nothing wrong with that approach. Then you can have other groups (like 'staff') that might not be featured in the billing file, which don't get blown away when your import script runs. And as you grow your service, and start synchronizing SQL user data from other sources, you just use the same approach so that nothing is stomping on everyone elses toes by blowing the tables away. The user2mysql script is still a good place to start looking, though. It wouldn't take much modification to do what you need. Really just a 'garbage collection' pass back the other way, iterating through the db users and removing those that are no longer in the billing file. If you aren't familiar with perl, it's worth learning. It's not that hard, plenty of great online resources, and essential for the kind of work you need to do. Then auths, etc would be handled through the sql end where the control is alot easier and appears more effective And I could be running things as freeradius is designed to run. Thus my stuff adapts to the workiing model, instead of me trying to change a working model to mine. Yes. That's the idea. Part of good provisioning is providing the 'shims' between different components, such that you minimize (and hopefully eliminate) any customization of the components themselves. It's a common issue when bolting together packages that deal with data that has no formal standard (like a RADIUS users file!). Which is why Alan's repeated advice was 'modify the source data'. I think he only mentioned modifying C code as a piece of negative reinforcement! -- hugh - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Ascend-Data-Filter Issues
Actually the best answer for me if I were alittle stronger in mysql to create the import query would be a script that I could run to convert the users and import them into the radius database when our billing software adds removes locks accounts, then dealing with the filters, etc. That way billing program creates file, query imports to sql, radius operates through the sql end and not users file I have seen the one in the source, users2mysql just not sure its actually the correct format to import usersfor what i need. I was thinking del all imported items when a new users file is ready for import then repopulate with the import query the new. Then auths, etc would be handled through the sql end where the control is alot easier and appears more effective And I could be running things as freeradius is designed to run. Thus my stuff adapts to the workiing model, instead of me trying to change a working model to mine. _ From: Alan DeKok [mailto:[EMAIL PROTECTED] To: FreeRadius users mailing list [mailto:[EMAIL PROTECTED] Sent: Sat, 30 Jun 2007 01:26:22 -0400 Subject: Re: Ascend-Data-Filter Issues Jeff wrote: My software issues the Ascend-Data-Filter as such to the users file As you've noted before. The answer won't change. I have noticed to get the Ascend-Data-Filter to read th other filters to the next line it needs the += or its stops on the 1st one. The documentation describes this behavior, and explains it. Which is out of context with other radius servers I am dealing with Different products. Different behaviors. If this is a problem, please call Ford, and ask them why their cars don't look the same as GM's cars. Is it possible to get freeradius to read each line and keep the syntax as the = instead of += Sure. Patch the source code. That's why source is included. If I could do as such as the format as my other servers would help me trmendously. I actually though the standard was = instead of += There is no standard for the users file. None. FreeRADIUS (and Cistron before it) have been doing it this way for nearly 10 years now. Any software that can't produce users file entries for FreeRADIUS is broken. The manufacturers have chosen to not support the most popular and widely used RADIUS server on the planet. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Ascend-Data-Filter Issues
I have an issue My software issues the Ascend-Data-Filter as such to the users file Ascend-Data-Filter = ip in forward tcp est, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in drop tcp dstport = 25, Ascend-Data-Filter = ip in forward, I have noticed to get the Ascend-Data-Filter to read th other filters to the next line it needs the += or its stops on the 1st one. IE I have to do this with freeradius to read each line Ascend-Data-Filter += ip in forward tcp est, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in drop tcp dstport = 25, Ascend-Data-Filter += ip in forward, Which is out of context with other radius servers I am dealing with Is it possible to get freeradius to read each line and keep the syntax as the = instead of += If I could do as such as the format as my other servers would help me trmendously. I actually though the standard was = instead of += - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Ascend-Data-Filter Issues
Are those filters different for every user? If they are the same (or there are just a few conbinations) make DEFAULT entry with them and don't put them in every users configuration. Ivan Kalik Kalik Informatika ISP Dana 29/6/2007, Jeff [EMAIL PROTECTED] piše: I have an issue My software issues the Ascend-Data-Filter as such to the users file Ascend-Data-Filter = ip in forward tcp est, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in drop tcp dstport = 25, Ascend-Data-Filter = ip in forward, I have noticed to get the Ascend-Data-Filter to read th other filters to the next line it needs the += or its stops on the 1st one. IE I have to do this with freeradius to read each line Ascend-Data-Filter += ip in forward tcp est, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in drop tcp dstport = 25, Ascend-Data-Filter += ip in forward, Which is out of context with other radius servers I am dealing with Is it possible to get freeradius to read each line and keep the syntax as the = instead of += If I could do as such as the format as my other servers would help me trmendously. I actually though the standard was = instead of += - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Ascend-Data-Filter Issues
suppose we could, but it does grow. Be nice if one could have the file include another file for defaults and call that file from the users file _ From: [EMAIL PROTECTED] To: FreeRadius users mailing list [mailto:[EMAIL PROTECTED] Sent: Fri, 29 Jun 2007 17:36:57 -0400 Subject: Re: Ascend-Data-Filter Issues Are those filters different for every user? If they are the same (or there are just a few conbinations) make DEFAULT entry with them and don't put them in every users configuration. Ivan Kalik Kalik Informatika ISP Dana 29/6/2007, Jeff [EMAIL PROTECTED] piše: I have an issue My software issues the Ascend-Data-Filter as such to the users file Ascend-Data-Filter = ip in forward tcp est, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in drop tcp dstport = 25, Ascend-Data-Filter = ip in forward, I have noticed to get the Ascend-Data-Filter to read th other filters to the next line it needs the += or its stops on the 1st one. IE I have to do this with freeradius to read each line Ascend-Data-Filter += ip in forward tcp est, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in drop tcp dstport = 25, Ascend-Data-Filter += ip in forward, Which is out of context with other radius servers I am dealing with Is it possible to get freeradius to read each line and keep the syntax as the = instead of += If I could do as such as the format as my other servers would help me trmendously. I actually though the standard was = instead of += - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Ascend-Data-Filter Issues
No need. You can create groups with rlm_password, make DEFAULT entry for each group and add appropriate filters to users in those groups. Ivan Kalik Kalik Informatika ISP Dana 29/6/2007, Jeff [EMAIL PROTECTED] piše: suppose we could, but it does grow. Be nice if one could have the file include another file for defaults and call that file from the users file _ From: [EMAIL PROTECTED] To: FreeRadius users mailing list [mailto:[EMAIL PROTECTED] Sent: Fri, 29 Jun 2007 17:36:57 -0400 Subject: Re: Ascend-Data-Filter Issues Are those filters different for every user? If they are the same (or there are just a few conbinations) make DEFAULT entry with them and don't put them in every users configuration. Ivan Kalik Kalik Informatika ISP Dana 29/6/2007, Jeff [EMAIL PROTECTED] piĹĄe: I have an issue My software issues the Ascend-Data-Filter as such to the users file Ascend-Data-Filter = ip in forward tcp est, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in drop tcp dstport = 25, Ascend-Data-Filter = ip in forward, I have noticed to get the Ascend-Data-Filter to read th other filters to the next line it needs the += or its stops on the 1st one. IE I have to do this with freeradius to read each line Ascend-Data-Filter += ip in forward tcp est, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in drop tcp dstport = 25, Ascend-Data-Filter += ip in forward, Which is out of context with other radius servers I am dealing with Is it possible to get freeradius to read each line and keep the syntax as the = instead of += If I could do as such as the format as my other servers would help me trmendously. I actually though the standard was = instead of += - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Ascend-Data-Filter Issues
I have never used that, where is the documentation on setting the up, ie using filters, etc _ From: [EMAIL PROTECTED] To: FreeRadius users mailing list [mailto:[EMAIL PROTECTED] Sent: Fri, 29 Jun 2007 19:29:10 -0400 Subject: Re: Ascend-Data-Filter Issues No need. You can create groups with rlm_password, make DEFAULT entry for each group and add appropriate filters to users in those groups. Ivan Kalik Kalik Informatika ISP Dana 29/6/2007, Jeff [EMAIL PROTECTED] piše: suppose we could, but it does grow. Be nice if one could have the file include another file for defaults and call that file from the users file _ From: [EMAIL PROTECTED] To: FreeRadius users mailing list [mailto:[EMAIL PROTECTED] Sent: Fri, 29 Jun 2007 17:36:57 -0400 Subject: Re: Ascend-Data-Filter Issues Are those filters different for every user? If they are the same (or there are just a few conbinations) make DEFAULT entry with them and don't put them in every users configuration. Ivan Kalik Kalik Informatika ISP Dana 29/6/2007, Jeff [EMAIL PROTECTED] piĹĄe: I have an issue My software issues the Ascend-Data-Filter as such to the users file Ascend-Data-Filter = ip in forward tcp est, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in drop tcp dstport = 25, Ascend-Data-Filter = ip in forward, I have noticed to get the Ascend-Data-Filter to read th other filters to the next line it needs the += or its stops on the 1st one. IE I have to do this with freeradius to read each line Ascend-Data-Filter += ip in forward tcp est, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in drop tcp dstport = 25, Ascend-Data-Filter += ip in forward, Which is out of context with other radius servers I am dealing with Is it possible to get freeradius to read each line and keep the syntax as the = instead of += If I could do as such as the format as my other servers would help me trmendously. I actually though the standard was = instead of += - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Ascend-Data-Filter Issues
Never mind I found it, let my fingers do the walking _ From: Jeff [mailto:[EMAIL PROTECTED] To: FreeRadius users mailing list [mailto:[EMAIL PROTECTED] Sent: Fri, 29 Jun 2007 20:37:25 -0400 Subject: Re: Ascend-Data-Filter Issues I have never used that, where is the documentation on setting the up, ie using filters, etc _ From: [EMAIL PROTECTED] To: FreeRadius users mailing list [mailto:[EMAIL PROTECTED] Sent: Fri, 29 Jun 2007 19:29:10 -0400 Subject: Re: Ascend-Data-Filter Issues No need. You can create groups with rlm_password, make DEFAULT entry for each group and add appropriate filters to users in those groups. Ivan Kalik Kalik Informatika ISP Dana 29/6/2007, Jeff [EMAIL PROTECTED] piše: suppose we could, but it does grow. Be nice if one could have the file include another file for defaults and call that file from the users file _ From: [EMAIL PROTECTED] To: FreeRadius users mailing list [mailto:[EMAIL PROTECTED] Sent: Fri, 29 Jun 2007 17:36:57 -0400 Subject: Re: Ascend-Data-Filter Issues Are those filters different for every user? If they are the same (or there are just a few conbinations) make DEFAULT entry with them and don't put them in every users configuration. Ivan Kalik Kalik Informatika ISP Dana 29/6/2007, Jeff [EMAIL PROTECTED] piĹĄe: I have an issue My software issues the Ascend-Data-Filter as such to the users file Ascend-Data-Filter = ip in forward tcp est, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in forward dstip a.a.a.a/32, Ascend-Data-Filter = ip in drop tcp dstport = 25, Ascend-Data-Filter = ip in forward, I have noticed to get the Ascend-Data-Filter to read th other filters to the next line it needs the += or its stops on the 1st one. IE I have to do this with freeradius to read each line Ascend-Data-Filter += ip in forward tcp est, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in forward dstip a.a.a.a/32, Ascend-Data-Filter += ip in drop tcp dstport = 25, Ascend-Data-Filter += ip in forward, Which is out of context with other radius servers I am dealing with Is it possible to get freeradius to read each line and keep the syntax as the = instead of += If I could do as such as the format as my other servers would help me trmendously. I actually though the standard was = instead of += - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Ascend-Data-Filter Issues
Jeff wrote: My software issues the Ascend-Data-Filter as such to the users file As you've noted before. The answer won't change. I have noticed to get the Ascend-Data-Filter to read th other filters to the next line it needs the += or its stops on the 1st one. The documentation describes this behavior, and explains it. Which is out of context with other radius servers I am dealing with Different products. Different behaviors. If this is a problem, please call Ford, and ask them why their cars don't look the same as GM's cars. Is it possible to get freeradius to read each line and keep the syntax as the = instead of += Sure. Patch the source code. That's why source is included. If I could do as such as the format as my other servers would help me trmendously. I actually though the standard was = instead of += There is no standard for the users file. None. FreeRADIUS (and Cistron before it) have been doing it this way for nearly 10 years now. Any software that can't produce users file entries for FreeRADIUS is broken. The manufacturers have chosen to not support the most popular and widely used RADIUS server on the planet. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
