Re: howto check authorizations on a regular time basis ?

2005-02-18 Thread Pierre Bourgin
Thor Spruyt a écrit :
Pierre Bourgin wrote:
My EAP-TLS stuff is working, but I've noticed that once a wireless
client (supplicant) is allowed to use the WLAN network, the AP
(freeRadius client in terminology) never re-check authorization of the 
supplicant to use
this wireless network until the supplicant is leaving this WLAN
network then comes back.
Look at your AP documentation.
[...]
I've tried to modify my "attrs" file like this (copy below), but
since I did not find the exact meaning of Session-Timeout and
Idle-Timeout keywords,
Session-Timeout = seconds after which the session has to be terminated
Idle-Timeout = seconds that the user did nothing (was idle) after which 
to terminate the session
OK, thanks for your reply and these definitions.
Regards,
Pierre Bourgin
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: howto check authorizations on a regular time basis ?

2005-02-18 Thread Alan DeKok
 Pierre Bourgin <[EMAIL PROTECTED]> wrote:
> I've tried to modify my "attrs" file like this (copy below), but since I did 
> not find the exact meaning of Session-Timeout and Idle-Timeout keywords, 

  http://www.freeradius.org/rfc/attributes.html

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: howto check authorizations on a regular time basis ?

2005-02-18 Thread Thor Spruyt
Pierre Bourgin wrote:
My EAP-TLS stuff is working, but I've noticed that once a wireless
client (supplicant) is allowed to use the WLAN network, the AP
(freeRadius client in terminology) never re-check authorization of the 
supplicant to use
this wireless network until the supplicant is leaving this WLAN
network then comes back.
Look at your AP documentation.
I would like that the Access Point re-checks authorization of
supplicants every hour for instance without ending its wireless
"session" if the authorization (and authentication) is still ok.
Look at your AP documentation.
I've tried to modify my "attrs" file like this (copy below), but
since I did not find the exact meaning of Session-Timeout and
Idle-Timeout keywords,
Session-Timeout = seconds after which the session has to be terminated
Idle-Timeout = seconds that the user did nothing (was idle) after which to 
terminate the session

--
Groeten, Regards, Salutations,
Thor Spruyt
M: +32 (0)475 67 22 65
E: [EMAIL PROTECTED]
W: www.thor-spruyt.com
www.salesguide.be
www.telenethotspot.be
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


howto check authorizations on a regular time basis ?

2005-02-18 Thread Pierre Bourgin
Hello,
I'm testing freeRadius 1.0.1 to manage a WLAN network by using EAP-TLS.
Even if the freeRadius server is a NetBSD-2.99.14/i386 OS running in a 
VMware 3.x (host OS is windows XP), it's working nice ;-)

My EAP-TLS stuff is working, but I've noticed that once a wireless client 
(supplicant) is allowed to use the WLAN network, the AP (freeRadius client 
in terminology) never re-check authorization of the supplicant to use this 
wireless network until the supplicant is leaving this WLAN network then 
comes back.

I would like that the Access Point re-checks authorization of supplicants 
every hour for instance without ending its wireless "session" if the 
authorization (and authentication) is still ok.

I've tried to modify my "attrs" file like this (copy below), but since I did 
not find the exact meaning of Session-Timeout and Idle-Timeout keywords, 
it's a bit empiristic (and does not work, of course).
I designed my conf. with short values just for debugging purpose (30 sec and 
60 sec).

$ cat /etc/raddb/attrs
[snip]
DEFAULT
[snip]
Session-Timeout <= 30,
Idle-Timeout <= 60,
[snip]
Any clue ?
Thanks in advance for any reply,
Pierre Bourgin
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html