Re: snmp problem
> Oguzhan Kayhan wrote: >> Hi, >> I am trying snmp on debian 32 bit. With freeradius 2.0.5. and net-snmp >> 5.4.1 > > Why are you running 2.0.5? It was the default package for debian. Ok we will recompile the new version and give a try. Thank you. > >> I did all just like on http://wiki.freeradius.org/SNMP_HOWTO. >> >> Changed radiusd.conf as >> snmp= yes >> $INCLUDE snmp.con > > SNMP doesn't work in 2.0.5. The functionality has been replaced, and > expanded, in 2.1.1. > > Alan DeKok. > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: snmp problem
Oguzhan Kayhan wrote: > Hi, > I am trying snmp on debian 32 bit. With freeradius 2.0.5. and net-snmp 5.4.1 Why are you running 2.0.5? > I did all just like on http://wiki.freeradius.org/SNMP_HOWTO. > > Changed radiusd.conf as > snmp= yes > $INCLUDE snmp.con SNMP doesn't work in 2.0.5. The functionality has been replaced, and expanded, in 2.1.1. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
snmp problem
Hi, I am trying snmp on debian 32 bit. With freeradius 2.0.5. and net-snmp 5.4.1 I did all just like on http://wiki.freeradius.org/SNMP_HOWTO. Changed radiusd.conf as snmp= yes $INCLUDE snmp.con and remove comment on line smux_password = verysecret and added the line on snmpd.conf of snmpdaemon "smuxpeer .1.3.6.1.4.1.11344.1.1.1 verysecret" Enabled smux on snmpd too by removing -smux parameter. But i got the following error on freeradius debug.. SMUX connect try 1 SMUX SMUX open oid: 1.3.6.1.4.1.11344.1.1.1 SMUX open progname: radiusd SMUX open password: verysecret SMUX SMUX register oid: 1.3.6.1.2.1.67.1.1.1.1 SMUX register priority: -1 SMUX register operation: 1 SMUX SMUX register oid: 1.3.6.1.2.1.67.2.1.1.1 SMUX register priority: -1 SMUX register operation: 1 SMUX register message send failed: Broken pipe And also snmpd gives the following error: refused smux peer: oid SNMPv2-SMI::enterprises.11344.1.1.1, descr radiusd Is it a bug regarding to snmp or freeradius? Or did i miss something? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Hotspot snmp problem
Hi everyone, Finally, have it working.. I did not comment out the radutmp in radius.conf for the session database. I had uncommented sql, although lots of good that did. Thanks again, Robin At 03:26 PM 8/16/2005, you wrote: Robin <[EMAIL PROTECTED]> wrote: > The detail files appear to be fine with start, alive and stop > packets being listed, but radius.log and radwtmp and radutmp are > empty. If radutmp is empty, the debug log will tell you why. > Is it possible, I inadvertently set everything to log to the db > only? Certainly. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Hotspot snmp problem
Robin <[EMAIL PROTECTED]> wrote: > The detail files appear to be fine with start, alive and stop > packets being listed, but radius.log and radwtmp and radutmp are > empty. If radutmp is empty, the debug log will tell you why. > Is it possible, I inadvertently set everything to log to the db > only? Certainly. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Hotspot snmp problem
Hi,,, Once again, I apologize for my lack of understanding. I have been trying to read all debug messages and start radiusd with -X however the only files which get populated are ones created in the radacct directory. The detail files appear to be fine with start, alive and stop packets being listed, but radius.log and radwtmp and radutmp are empty. Is it possible, I inadvertently set everything to log to the db only? Sorry for testing your patience... I think once I get up this curve a bit, I should not have to ask these bad questions. Thank you, Robin At 05:09 PM 8/15/2005, you wrote: Robin <[EMAIL PROTECTED]> wrote: > I still see no output in the radutmp file, even though during loading it says, A few problems: 1) If the server does not receive accounting packets, nothing will go into radutmp, OR into SQL. 2) if you configure Simultaneous-Use counting via SQL, you don't need radutmp > When I have an account start time and end time in the radacct, does that > not mean simul checking should be working? Why ask questions when you can read the debug log, and see exactly what the server is doing, and why? We don't know how you've configured your system, you've only given summaries. YOU know how you've configured your system. READ the debug logs. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Hotspot snmp problem
Robin <[EMAIL PROTECTED]> wrote: > I still see no output in the radutmp file, even though during loading it says, A few problems: 1) If the server does not receive accounting packets, nothing will go into radutmp, OR into SQL. 2) if you configure Simultaneous-Use counting via SQL, you don't need radutmp > When I have an account start time and end time in the radacct, does that > not mean simul checking should be working? Why ask questions when you can read the debug log, and see exactly what the server is doing, and why? We don't know how you've configured your system, you've only given summaries. YOU know how you've configured your system. READ the debug logs. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Hotspot snmp problem
Hi again,
I have been doing reading on the Simultaneous-use with the radutmp module
and sql. I was hoping someone could help clarify some confusion I
have. Using the Sql notes I inserted the Simultaneous attribute to the
radgroupcheck table, although I did change the dialup attribute to dynamic
as that is the group my login belongs to. Using the sql.conf I uncommented
the simul_count_query (simul_verify_query was already uncommented).
I still see no output in the radutmp file, even though during loading it says,
Module: Loaded radutmp
radutmp: filename = "/usr/local/var/log/radius/radutmp"
radutmp: username = "%{User-Name}"
radutmp: case_sensitive = yes
radutmp: check_with_nas = no
radutmp: perm = 384
radutmp: callerid = yes
Module: Instantiated radutmp (radutmp)
radacct has lots of details,
|65 | 0090274649581b0d | 37805f4083612f79 | robyn| |
69.67.164.218 | 0 | Ethernet| 2005-08-15 15:45:00 | 2005-08-15
15:47:06 | 126
| | | | 704551
|55748 | 00-90-0E-00-B2-72 | 00-90-27-46-49-58 |
Session-Timeout| ||
10.59.1.2 | 0 | 0 |
When I have an account start time and end time in the radacct, does that
not mean simul checking should be working?
Sorry for my lack of understanding on this process, I have read lots of
docs, I think it's just going to take me a little longer to get it. :)
Thank you again for all your help,
Robin
At 12:21 PM 8/11/2005, you wrote:
Robin <[EMAIL PROTECTED]> wrote:
> Is there anyway to test for Simultaneous use without checkrad?
Yes. The server already does this.
As I said, the server maintains a database. The only purpose of
checkrad is to catch corner cases.
> I have read past posts about using an sql only method and I
> understand this has it's own problems. However, if anyone has any
> docs which could help me out it's appreciated.
The server comes with documentation for Simultaneous-Use, which
includes documentation on configuring it via the "radutmp" module, and
in SQL. Please read the documentation.
> Ideally I would like to have checkrad speak to the AP and it's
> probably possible except snmpwalk'ing the device does not appear to
> provide user login information.
Then there's no use in having checkrad talk to the NAS, is there?
Alan DeKok.
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Hotspot snmp problem
Robin <[EMAIL PROTECTED]> wrote: > Is there anyway to test for Simultaneous use without checkrad? Yes. The server already does this. As I said, the server maintains a database. The only purpose of checkrad is to catch corner cases. > I have read past posts about using an sql only method and I > understand this has it's own problems. However, if anyone has any > docs which could help me out it's appreciated. The server comes with documentation for Simultaneous-Use, which includes documentation on configuring it via the "radutmp" module, and in SQL. Please read the documentation. > Ideally I would like to have checkrad speak to the AP and it's > probably possible except snmpwalk'ing the device does not appear to > provide user login information. Then there's no use in having checkrad talk to the NAS, is there? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Hotspot snmp problem
Hi again, Is there anyway to test for Simultaneous use without checkrad? I have read past posts about using an sql only method and I understand this has it's own problems. However, if anyone has any docs which could help me out it's appreciated. Ideally I would like to have checkrad speak to the AP and it's probably possible except snmpwalk'ing the device does not appear to provide user login information. Thanks again for all the help, Robin At 03:04 PM 8/10/2005, you wrote: Robin <[EMAIL PROTECTED]> wrote: > I'm not sure what is the best way to handle this. I can snmpwalk the > device however the output does not appear to have information regarding > logins. The manufacturer does not respond to queries so I'm hoping someone > else may have worked with this device. The simplest way to deal with this is to set "nastype = other". This will make the server believe it's database, and will not run checkrad. checkrad isn't necessary, but it can help catch some corner cases. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Hotspot snmp problem
Robin <[EMAIL PROTECTED]> wrote: > I'm not sure what is the best way to handle this. I can snmpwalk the > device however the output does not appear to have information regarding > logins. The manufacturer does not respond to queries so I'm hoping someone > else may have worked with this device. The simplest way to deal with this is to set "nastype = other". This will make the server believe it's database, and will not run checkrad. checkrad isn't necessary, but it can help catch some corner cases. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hotspot snmp problem
Hello, A couple of us at work have been playing with a hotspot controller (Internet Subscriber Server II ISS-4000) using freeradius and mysql for authentication. We are having problems with checkrad (totally to do with the AP not being nice). I'm not sure what is the best way to handle this. I can snmpwalk the device however the output does not appear to have information regarding logins. The manufacturer does not respond to queries so I'm hoping someone else may have worked with this device. Any help is appreciated, Robin - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
