Re: (RADIATOR) The question for VoIP providers
On Thu, 20 Apr 2000, Hugh Irvine wrote: On Wed, 19 Apr 2000, Rustam Povarov wrote: Could you, please, advise what type of billing do you use for VoIP with Radiator and Cisco. We have Intel server platform and Linux or FreeBSD. Thank you. There is an item in the FAQ here: http://www.open.com.au/radiator/faq.html#72 and there is some Cisco documentation in a seperate message. I recently helped another customer with this and apparently the Cisco does some odd things - like sending an initial accounting request *before* sending the access request. To handle this my suggestion was to use a custom session database to keep track of the accounting requests and then match the access requests later. All of this using an SQL database of course. It is looks like I made my previous question wrong. I did not mean the procedures of cooperation between the billing and Radiator. The right question is "what _exactly_ ready billing systems (names of products and names of manufactors") regulary use ITSP's with Radius". We are in a process of desiding what exactly billing system we will use and just need the advises which will help you understand right would it be better to make our personal billing or buy ready system, and if buy - what exactly. Thanks in advance! -- Best regards, Rustam Povarov CzeTel spol. s r.o. mailto:[EMAIL PROTECTED] === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Access-Request Attributes?
Hello Colin - On Thu, 20 Apr 2000, colinc wrote: Hi, Was browsing throught the archives, and i noticed that some access-requests have more attributes than the default. eg : Code: Access-Request Identifier: 209 Authentic: G$205D151157173qf2051727249*198169 Attributes: User-Name = "user" CHAP-Password = "1213222g:M180189Xw190213"e159156231" NAS-Identifier = "204.111.111.11" NAS-Port = 6307 NAS-Port-Type = Async Service-Type = Framed-User Framed-Protocol = PPP State = "" Client-Port-DNIS = "748" Acct-Session-Id = "308488437" Ascend-Data-Rate = 31200 Ascend-Xmit-Rate = 33600 The first thing to understand about Radius is there is no default. Different NAS vendors implement different sets of attributes in the Access and Accounting requests. Where do i specify what access-request attributes i want to check? It depends on which AuthBy you are using. If you are using the "default-user" file that we have discussed previously, you would do something like this: # file %D/default-users DEFAULT *some check items here*, Auth-Type = CheckUNIX, Group = Group1 *the reply items here* ... Note that in a users file, the first line contains the check items (starting at column 1) and the second and subsequent lines contain the reply items (with white space in column 1). Have a read through the manual and the example configuration files in the distribution to get a feel for how to do various things with the different AuthBy clauses. hth Hugh -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc. Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X. === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Running a Stored Procedure before auth from MS-SQL Database
hi
I'm running radiator-2.15 on a NT server and need to do a SQL
authentication and accounting from a MS-SQL server database. And also I
need to run a Stored Procedure for each login which calculate session
timeout value for every user for a prepaid Dollar amount.
Here all authentication and accounting is working properly but this
procedure is not working. When I run this procedure from SQL Query
analyzer it works properly.
Can you guys help me to put these few line to execute in proper place in
the AuthSQL.pm module. I had included this in AuthSQL.pm module as
follows.
Would you please advice me any wrong why this is not working as it is???
OR is there any way to do this kind of things
thanks
Lakmin
C#
# Handle a request
# This function is called for each packet. $p points to a Radius::
# packet
# REVISIT:should we fork before handling. There might be long
timeouts?
sub handle_request
{
my ($self, $p, $rp, $extra_checks) = @_;
my $type = ref($self);
$self-log($main::LOG_DEBUG, Handling with
$type);
# (Re)-connect to the database if necessary,
# No reply will be sent to the original requester if
we
# fail to connect
return ($main::IGNORE, 'Database failure') unless
$self-reconnect;
###
###
my $user_name = $p-getUserName;
# This line is added by
[EMAIL PROTECTED] for SQL calculation
my $qqq =
execute proc_tmp_calsess $user_name;
$self-do($qqq);
$self-log($main::LOG_DEBUG, LISL-NOC Custom Query is:
$qqq\n);
# my $sel = $self-prepare( 'execute proc_tmp_calsess $user_name' );
#my $sel = $self-prepare( $qqq );
#$sel-execute();
#$sel-finish();
##
##
# my $user_name = $p-getUserName;
if ($p-code eq 'Access-Request')
{
# Short circuit for no authentication
return ($main::REJECT, 'Authentication disabled')
if $self-{AuthSelect} eq '';
###
###
C:\Radiator-2.15perl radpwtst -user lakmin@cheapnet -password
X
sending Access-Request...
OK
sending Accounting-Request Start...
OK
sending Accounting-Request Stop...
OK
C:\Radiator-2.15
>From log file
Authentic: 1234567890123456
Attributes:
Session-Timeout = 75
Thu Apr 20 14:59:11 2000: DEBUG: Packet dump:
*** Received from 127.0.0.1 port 4687
Code: Accounting-Request
Identifier: 221
Authentic:
6140K2104g215U240245250;t9133C
Attributes:
User-Name =
lakmin@cheapnet
Service-Type =
Framed-User
NAS-IP-Address =
203.63.154.1
NAS-Port = 1234
NAS-Port-Type = Async
Acct-Session-Id =
1234
Acct-Status-Type = Start
Thu Apr 20 14:59:11 2000: DEBUG: Check if Handler Realm=lan should be
used to ha
ndle this request
Thu Apr 20 14:59:11 2000: DEBUG: Check if Handler Realm=cheapnet should
be used
to handle this request
Thu Apr 20 14:59:11 2000: DEBUG: Handling request with Handler
'Realm=cheapnet'
Thu Apr 20 14:59:11 2000: DEBUG: Rewrote user name to lakmin
Thu Apr 20 14:59:11 2000: DEBUG: Adding session for
lakmin@cheapnet, 203.63.154
.1, 1234
Thu Apr 20 14:59:11 2000: DEBUG: Handling with Radius::AuthSQL
Thu Apr 20 14:59:11 2000: DEBUG: Handling accounting with
Radius::AuthSQL
Thu Apr 20 14:59:11 2000: DEBUG: do query is: insert into
ACCOUNTING
(USERNAME, TIME_STAMP, ACCTSTATUSTYPE, ACCTSESSIONID, NASPORT)
values
('lakmin', 956221151, 'Start', '1234', 1234)
Thu Apr 20 14:59:11 2000: DEBUG: Accounting accepted
Thu Apr 20 14:59:11 2000: DEBUG: Packet dump:
*** Sending to 127.0.0.1 port 4687
Code: Accounting-Response
Identifier: 221
Authentic:
6140K2104g215U240245250;t9133C
Attributes:
Thu Apr 20 14:59:11 2000: DEBUG: Packet dump:
*** Received from 127.0.0.1 port 4687
Code: Accounting-Request
Identifier: 222
Authentic:
p]#710An=242155U(U223222Q
Attributes:
User-Name =
lakmin@cheapnet
Service-Type =
Framed-User
NAS-IP-Address =
203.63.154.1
NAS-Port = 1234
NAS-Port-Type = Async
Acct-Session-Id =
1234
Acct-Status-Type = Stop
Acct-Delay-Time = 0
Acct-Session-Time = 1000
Acct-Input-Octets =
2
Acct-Output-Octets =
3
Thu Apr 20 14:59:11 2000: DEBUG: Check if Handler Realm=lan should be
used to ha
ndle this request
Thu Apr 20 14:59:11 2000: DEBUG: Check if Handler Realm=cheapnet should
be used
to handle this request
Thu Apr 20 14:59:11 2000: DEBUG: Handling request with Handler
'Realm=cheapnet'
Thu Apr 20 14:59:11 2000: DEBUG: Rewrote user name to lakmin
Thu Apr 20 14:59:11 2000: DEBUG: Deleting session for
lakmin@cheapnet, 203.63.1
54.1, 1234
Thu Apr 20 14:59:11 2000: DEBUG: Handling with Radius::AuthSQL
Thu Apr 20
(RADIATOR) Authentication through MySQL database
Have an IRIX machine with Radiator RADIUS running - I want to authenticate/account users through a MySQL database - Am looking for any kind of info. on ths subject. Vidur === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Cisco NASes
I got a problem with AS5200 AS5300 We got to authenticate special usernames with empty password , usingtacacs there wasn't any problem but using radius , it seems (according to Cisco debug ...) the nas don't even bother to send radius packets to radiator . Any hints ? Paolo A. Spadari - System Administrator Logicom s.r.l [EMAIL PROTECTED]
(RADIATOR) Re: Using UNIX password to authenticate
Ho do we make Radiator to authenticate in /etc/passwd in UNIX and also utilize differnt attributes for each user. The example given in the manual allows for a default attribute for all users. 'Tunde === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Re: Using UNIX password to authenticate
Hello 'Tunde - On Thu, 20 Apr 2000, tty wrote: Ho do we make Radiator to authenticate in /etc/passwd in UNIX and also utilize differnt attributes for each user. The example given in the manual allows for a default attribute for all users. You would keep a DEFAULT entry for the normal case and then add the additional users as individual entries with their specific attributes. # users file # # the configuration file must contain an AuthBy UNIX with Identifier Check-UNIX # # first specify a DEFAULT set of attributes for those users not specifically # listed in this file DEFAULT Auth-Type = Check-UNIX ... # then add those users who have special attributes user1 Auth-Type = Check-UNIX ... user2 Auth-Type = Check-UNIX ... ... hth Hugh -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc. Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X. === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Authentication through MySQL database
Hello Vidur - On Thu, 20 Apr 2000, Administrator wrote: Have an IRIX machine with Radiator RADIUS running - I want to authenticate/account users through a MySQL database - Am looking for any kind of info. on ths subject. There are a number of SQL examples, including mySQL in the goodies directory of the distribution. Also have a look at section 6.24 in the Radiator 2.15 reference manual where you will find a very complete description of all the AuthBy SQL parameters. The goodies directory also contains a mySQL creation script that will build the tables used in the example. You will need to install the DBI perl module together with the mySQL DBD module and of course install and configure mySQL. The Perl modules are available from CPAN: http://www.cpan.org/modules/by-module/DBI/DBI-1.13.tar.gz and http://www.cpan.org/modules/by-module/DBD/Msql-Mysql-modules-1.2213.tar.gz regards Hugh -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc. Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X. === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Running a Stored Procedure before auth from MS-SQL Database
Hello Lakmin - On Fri, 21 Apr 2000, S.K.D. Lakmin Premnath wrote: html font face="Courier New, Courier"hibr br I'm running radiator-2.15 on a NT server and need to do a SQL authentication and accounting from a MS-SQL server database. And also I need to run a Stored Procedure for each login which calculate session timeout value for every user for a prepaid Dollar amount.br br Here all authentication and accounting is working properly but this procedure is not working. When I run this procedure from SQL Query analyzer it works properly.br Can you guys help me to put these few line to execute in proper place in the AuthSQL.pm module. I had included this in AuthSQL.pm module as follows.br br Would you please advice me any wrong why this is not working as it is??? OR is there any way to do this kind of thingsbr There is no need to modify the code to do this, all you need to do is define an AcctSQLStatement in your configuration file that calls the stored procedure. If you do want to do this in Perl, you should put the code into a Hook. In either case, I think the correct syntax is "exec ". Have a look at the code in Radius/AuthRODOPI.pm to see an example call to a stored procedure. hth Hugh -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc. Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X. === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
