Re: Hello & Radgroup questions

2005-03-15 Thread Alan DeKok
"J Morgan" <[EMAIL PROTECTED]> wrote:
> > Uh right.
> 
> I'm sorry I asked.

  No, it's just that certain areas of the server have nothing outside
of the source code for documentation.  So a request for tutorials is
often best answered by "yeah, that would be a good idea..."

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Hello & Radgroup questions

2005-03-15 Thread J Morgan
>>I hate to ask, but could you point me to any working
>>examples/tutorials/configs dealing with this?

> Uh right.

I'm sorry I asked.  I've been working on this for a few weeks now and am at
my wits end, hence why I asked the list.  Unfortunately there is no way for
you to know that I do not arbitrarily shoot off question with out making a
genuine effort to find the answers on my own.

>>  I'm not even sure where to apply the Client-Ip-Address attribute,
>> or how to define which MySQL radgroup is to be used once that is
>> configured.  Does this go in the clients.conf file?  Please let me
>> know if you need any snippets from my current running config.

  It's used like a RADIUS attribute.

  In the current CVS snapshot, doc/variables.txt describes a number of
"magic" variables which can be used anywhere you can use a RADIUS
attribute.  But those only apply to the CVS snapshot.

Thank you for the pointer I will look here for additional info.

>>Again I am using freeRadius 0.8.9 w/the MySQL integration.

> There is no 0.8.9.

My apologies, I should of looked on my server again for the version, it is
freeRadius-0.8.1

-J


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Hello & Radgroup questions

2005-03-15 Thread Alan DeKok
"J Morgan" <[EMAIL PROTECTED]> wrote:
> I hate to ask, but could you point me to any working
> examples/tutorials/configs dealing with this?

  Uh right.

>  I'm not even sure where to apply the Client-Ip-Address attribute,
> or how to define which MySQL radgroup is to be used once that is
> configured.  Does this go in the clients.conf file?  Please let me
> know if you need any snippets from my current running config.

  It's used like a RADIUS attribute.

  In the current CVS snapshot, doc/variables.txt describes a number of
"magic" variables which can be used anywhere you can use a RADIUS
attribute.  But those only apply to the CVS snapshot.

> Again I am using freeRadius 0.8.9 w/the MySQL integration.

  There is no 0.8.9.

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Hello & Radgroup questions

2005-03-15 Thread J Morgan
Alan DeKok replied:
>> I want the migration to the new vendor to be as seamless as possible.  Is
>> there a way to specify which group attributes are used in the reply,
based
>> on which radius peer is forwarding the authentication request?

>Use the Client-Ip-Address attribute to select which RADIUS client
>has sent the request.  You can then reply with per-client attributes.

I hate to ask, but could you point me to any working
examples/tutorials/configs dealing with this?  I'm not even sure where to
apply the  Client-Ip-Address attribute, or how to define which MySQL
radgroup is to be used once that is configured.  Does this go in the
clients.conf file?  Please let me know if you need any snippets from my
current running config.  

Again I am using freeRadius 0.8.9 w/the MySQL integration.

Thank you,

J.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Hello & Radgroup questions

2005-03-10 Thread Alan DeKok
"J Morgan" <[EMAIL PROTECTED]> wrote:
> I am migrating my dial-up base to a new vendor and ran into a problem with
> some of the current radius attributes causing the new vendors NAS's to choke
> and not complete the authentication process.

  That's... weird.  It shouldn't be happening.

> I want the migration to the new vendor to be as seamless as possible.  Is
> there a way to specify which group attributes are used in the reply, based
> on which radius peer is forwarding the authentication request?

  Use the Client-Ip-Address attribute to select which RADIUS client
has sent the request.  You can then reply with per-client attributes.

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Hello & Radgroup questions

2005-03-10 Thread J Morgan
Hello List :)

I've been thrust into the role of administering our companies Radius server.
I have spent a few hours searching on the net and in the O'Reilly Radius
book for an answer to the following question but it eludes me.

I am migrating my dial-up base to a new vendor and ran into a problem with
some of the current radius attributes causing the new vendors NAS's to choke
and not complete the authentication process.

To get around this I created a second radgroup and stripped it down to the
minimum attributes required for the new vendors network.  In testing this
fixed the above problem, but has created a new one.  If I don't have these
attributes for the current vendor then my customers will be unable to send
email via my mail servers, etc.

I want the migration to the new vendor to be as seamless as possible.  Is
there a way to specify which group attributes are used in the reply, based
on which radius peer is forwarding the authentication request?  I if this is
possible then I could make the users members of both radgroups and reply
with the corresponding radgroup of the asking vendor.

I am currently using freeRadius 0.8.1 w/MySQL.

_
-J Morgan


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html