(RADIATOR) A little confused by FAQ 71

2000-06-10 Thread Robert Mann



71. My MAX sends authentication request for silly user names like 
"banner","route1" etcBy Default Ascend MAX will try to configure 
itself at startup by asking forvarious configuration items from the Radius 
server.You can turn this behavior off with: read 
EXTERNAL-AUTH set rad-auth-client allow-auth-config-rqsts = 
noWhere 
exactly do you enter these commands in an Ascend MAX?This is not valid for 
Terminal Server or Diag.Thank you,
Robert MannSenior Systems AdministratorOneMain.com
 


(RADIATOR) Duplicate accounting records - MySQL

2000-06-10 Thread Robert Mann




What is the easiest way to address this problem 
with MySQL.  I am working on a companies Radiator server that uses MySQL as 
its database server for accounting and there are many duplicate records.  
In MS SQL it was easy as I could use a constraint that would prevent 
it from happening but it is my understanding that MySQL does not have this 
functionality.  If I am wrong please right me and give me an example.  
If I am right then how do you work around this problem?
 
Thank you,
Robert MannSenior Systems 
AdministratorOneMain.com


Re: (RADIATOR) AuthBy SQL question

2000-06-10 Thread Hugh Irvine


Hello Froilan -

On Sat, 10 Jun 2000, Froilan Mendoza wrote:
> Hello Hugh,
> 
> Thanks for responding ...
> 
> On Sat, 10 Jun 2000, Hugh Irvine wrote:
> 
> > I notice that your Postgress table definitions are in lower case, and your
> > AuthSelect is in upper case. Is this correct? 
> 
> Postgres is not case-sensitive.  
> 
> radiator=> select PASSWORD from SUBSCRIBERS where USERNAME = 'mikem';
> password
> 
> fred
> (1 row)
> 
> 
> > Also, if you want to use the
> > "checkattr" and "replyattr" fields, you will need to modify your AuthSelect
> > statement together with the corresponding AuthColumnDef's.
> 
> Of course.  Only I would like to do the most simple auth method first
> before complicating things for me :)
> 
> 
> > And does the inbound test packet in fact contain a password of "fred"?
> 
> Of course.  I even tried NULLING the password in the postgres database (as
> it said in the docs that if the password is NULL, it would accept ANY
> password), to no avail.
>  
> > You might try something like this:
> > 
> >  
> > RewriteUsername s/^([^@]+).*/$1/
> > 
> > DBSourcedbi:Pg:dbname=radiator
> > DBUsername  postgres  
> > DBAuth  MYPOSTGRESPASSWORD
> > 
> > AuthSelect  select password from subscribers where \
> > username='%n'
> > AuthColumnDef   0, User-Password, check
> > 
> > AccountingTable accounting
> > AcctColumnDef   USERNAME,User-Name
> > AcctColumnDef   TIME_STAMP,Timestamp,integer
> > AcctColumnDef   ACCTSTATUSTYPE,Acct-Status-Type
> > AcctColumnDef   ACCTDELAYTIME,Acct-Delay-Time,integer
> > AcctColumnDef   ACCTINPUTOCTETS,Acct-Input-Octets,integer
> > AcctColumnDef   ACCTOUTPUTOCTETS,Acct-Output-Octets,integer
> > AcctColumnDef   ACCTSESSIONID,Acct-Session-Id
> > AcctColumnDef   ACCTSESSIONTIME,Acct-Session-Time,integer
> > AcctColumnDef   ACCTTERMINATECAUSE,Acct-Terminate-Cause
> > AcctColumnDef   NASIDENTIFIER,NAS-Identifier
> > AcctColumnDef   NASIDENTIFIER,NAS-IP-Address
> > AcctColumnDef   NASPORT,NAS-Port,integer
> > AcctColumnDef   FRAMEDIPADDRESS,Framed-IP-Address
> > 
> > 
> > 
> > 
> > 
> > If the field names are indeed case-sensitive, you will have to change the
> > AcctColumnDef's as well.
> 
> 
> I did, however, still tried your config above, changing the case of the
> letters.  I still get this:
> 
> Sat Jun 10 10:44:37 2000: DEBUG: Handling request with Handler
> 'Realm=testroy'
> Sat Jun 10 10:44:37 2000: DEBUG: Rewrote user name to mikem
> Sat Jun 10 10:44:37 2000: DEBUG: Deleting session for mikem@testroy,
> 208.155.152.42, 1025
> Sat Jun 10 10:44:37 2000: DEBUG: Handling with Radius::AuthSQL
> Sat Jun 10 10:44:37 2000: DEBUG: Handling with Radius::AuthSQL
> Sat Jun 10 10:44:37 2000: DEBUG: Query is: select password from
> subscribers where username='mikem'
> 
> Sat Jun 10 10:44:37 2000: DEBUG: Radius::AuthSQL looks for match with
> mikem
> Sat Jun 10 10:44:37 2000: DEBUG: Radius::AuthSQL REJECT: Bad Password
> Sat Jun 10 10:44:37 2000: DEBUG: Query is: select password from
> subscribers where username='DEFAULT'
> 
> Sat Jun 10 10:44:37 2000: INFO: Access rejected for mikem: Bad Password
> Sat Jun 10 10:44:37 2000: DEBUG: Packet dump:
> *** Sending to 208.155.152.42 port 1645 
> 
> 
> Additional question -- Why do I get Query is: select password from
> subscribers where username='DEFAULT'.  This might be the cause ...
> 

Well, the only other thing I can think of is that you are getting the encrypted
password instead of the plaintext password for some reason. You could try:

> > AuthSelect  select password from subscribers where \
> > username='%n'
> > AuthColumnDef   0, Encrypted-Password, check

Just to see what happens.

Radiator will always look for a DEFAULT user unless you disable that feature.

regards

Hugh

-- 
Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.



===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) A little confused by this FAQ.

2000-06-10 Thread Mike McCauley


--- Forwarded mail from [EMAIL PROTECTED]

Date: Sun, 11 Jun 2000 08:10:19 +1000 (EST)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: BOUNCE [EMAIL PROTECTED]:Non-member submission from ["Robert
Mann" <[EMAIL PROTECTED]>]

>From mikem  Sun Jun 11 08:10:13 2000
Received: by oscar.open.com.au (8.9.0/8.9.0) id IAA20021
for [EMAIL PROTECTED]; Sun, 11 Jun 2000 08:10:12 +1000 (EST)
>Received: from frank.easyway.com (adsl-63-199-67-170.dsl.bkfd14.pacbell.net
[63.199.67.170]) by perki.connect.com.au with SMTP id IAA17144
  (8.8.8/IDA-1.7 for <[EMAIL PROTECTED]>); Sun, 11 Jun 2000 08:05:13 +1000
(EST)
Received: from frank.easyway.com (adsl-63-199-67-170.dsl.bkfd14.pacbell.net
[63.199.67.170]) by perki.connect.com.au with SMTP id IAA17144
  (8.8.8/IDA-1.7 for <[EMAIL PROTECTED]>); Sun, 11 Jun 2000 08:05:13 +1000
(EST)
Received: (qmail 21008 invoked from network); 10 Jun 2000 22:09:29 -
Received: from adsl-63-199-67-174.dsl.bkfd14.pacbell.net (HELO rdm)
(63.199.67.174)
  by adsl-63-199-67-170.dsl.bkfd14.pacbell.net with SMTP; 10 Jun 2000 22:09:29
-
Message-ID: <001601bfd327$cb25ca60$[EMAIL PROTECTED]>
From: "Robert Mann" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: A little confused by this FAQ.
Date: Sat, 10 Jun 2000 15:04:05 -0700
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4029.2901
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4029.2901
Content-Type: text/plain;
charset="iso-8859-1"

71. My MAX sends authentication request for silly user names like "banner",
"route1" etc

By Default Ascend MAX will try to configure itself at startup by asking for
various configuration items from the Radius server.

You can turn this behavior off with:

 read EXTERNAL-AUTH
 set rad-auth-client allow-auth-config-rqsts = no

___
Where exactly do you enter these commands in an Ascend MAX?
This is not valid for Terminal Server or Diag.

Thank you,
Robert Mann
Senior Systems Administrator
OneMain.com




---End of forwarded mail from [EMAIL PROTECTED]

-- 
Mike McCauley   [EMAIL PROTECTED]
Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985   Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, 
2000, NT, MacOS X
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) Duplicate Accounting Records with MySQL

2000-06-10 Thread Mike McCauley


--- Forwarded mail from [EMAIL PROTECTED]

Date: Sun, 11 Jun 2000 08:10:16 +1000 (EST)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: BOUNCE [EMAIL PROTECTED]:Non-member submission from ["Robert
Mann" <[EMAIL PROTECTED]>]

>From mikem  Sun Jun 11 08:10:10 2000
Received: by oscar.open.com.au (8.9.0/8.9.0) id IAA20013
for [EMAIL PROTECTED]; Sun, 11 Jun 2000 08:10:09 +1000 (EST)
>Received: from frank.easyway.com (adsl-63-199-67-170.dsl.bkfd14.pacbell.net
[63.199.67.170]) by perki.connect.com.au with SMTP id HAA16953
  (8.8.8/IDA-1.7 for <[EMAIL PROTECTED]>); Sun, 11 Jun 2000 07:55:01 +1000
(EST)
Received: from frank.easyway.com (adsl-63-199-67-170.dsl.bkfd14.pacbell.net
[63.199.67.170]) by perki.connect.com.au with SMTP id HAA16953
  (8.8.8/IDA-1.7 for <[EMAIL PROTECTED]>); Sun, 11 Jun 2000 07:55:01 +1000
(EST)
Received: (qmail 20951 invoked from network); 10 Jun 2000 21:59:16 -
Received: from adsl-63-199-67-174.dsl.bkfd14.pacbell.net (HELO rdm)
(63.199.67.174)
  by adsl-63-199-67-170.dsl.bkfd14.pacbell.net with SMTP; 10 Jun 2000 21:59:16
-
Message-ID: <001001bfd326$5d97a320$[EMAIL PROTECTED]>
From: "Robert Mann" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Duplicate Accounting Records with MySQL
Date: Sat, 10 Jun 2000 14:53:52 -0700
MIME-Version: 1.0
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4029.2901
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4029.2901
Content-Type: multipart/alternative;
boundary="=_NextPart_000_000D_01BFD2EB.B1280240"

This is a multi-part message in MIME format.

--=_NextPart_000_000D_01BFD2EB.B1280240
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

What is the easiest way to address this problem with MySQL.  I am =
working on a companies Radiator server that uses MySQL as its database =
server for accounting and there are many duplicate records.  In MS SQL =
it was easy as I could use a constraint that would prevent it from =
happening but it is my understanding that MySQL does not have this =
functionality.  If I am wrong please right me and give me an example.  =
If I am right then how do you work around this problem?

Thank you,

Robert Mann
Senior Systems Administrator
OneMain.com

--=_NextPart_000_000D_01BFD2EB.B1280240
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable








What is the easiest way to address this =
problem=20
with MySQL.  I am working on a companies Radiator server that uses =
MySQL as=20
its database server for accounting and there are many duplicate =
records. =20
In MS SQL it was easy as I could use a constraint that would =
prevent=20
it from happening but it is my understanding that MySQL does not have =
this=20
functionality.  If I am wrong please right me and give me an =
example. =20
If I am right then how do you work around this problem?
 
Thank you,
Robert MannSenior Systems=20
AdministratorOneMain.com

--=_NextPart_000_000D_01BFD2EB.B1280240--




---End of forwarded mail from [EMAIL PROTECTED]

-- 
Mike McCauley   [EMAIL PROTECTED]
Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985   Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, 
2000, NT, MacOS X
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Accounting with MySQL

2000-06-10 Thread Hugh Irvine


Hello Robin -

On Sun, 11 Jun 2000, Robin Gruyters wrote:
> Hi,
> 
> Got a question, I see that with SQL accounting the date and time is not saved in
> the SQL database. Why?!?
> And isit possible to add this?
> 

You can add whatever you wish in the accounting records using the AcctColumnDef
statements. Have a look at section 6.25.12 in the Radiator 2.16 reference
manual.

regards

Hugh

-- 
Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.



===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) ipass --> perl test.pl

2000-06-10 Thread Hugh Irvine


Hello Christian -

On Sat, 10 Jun 2000, [EMAIL PROTECTED] wrote:
> hi,
> finally i found out how to solve myself the problem for the ipass module.
> the testscript seems not to be working, and i did not find out any
> suggestion in the mailarchive how to solve that "linking prob" ?
> 
> i have just read to get the new libs of ipass, libs i have are:
> 
> iPASS-Linux-486.tar.gz  11-Nov-1999 12:42   298k
> 
> i took also the ipass-perl mod version 1.5 from the open.com site.
> 
> following error exist:
> 
> perl test.pl 
> 1..6
> Can't load '/usr/lib/perl5/site_perl/5.005/i586-linux/auto/Ipass/Ipass.so'
> for module Ipass:
> /usr/lib/perl5/site_perl/5.005/i586-linux/auto/Ipass/Ipass.so: undefined
> symbol: __srandom at /usr/lib/perl5/5.00503/i586-linux/DynaLoader.pm line
> 169.
> 
>  at test.pl line 19
> BEGIN failed--compilation aborted at test.pl line 19.
> not ok 1
> 

I think you will find that there are different versions of the iPASS software,
some of which work with ipass-perl 1.4 and otheres that work with 1.5.

In any case, you should have a look at the Radiator 2.16 release notes
regarding the changes with iPASS support:

Due to changes in policy by iPASS, the preferred method of
interoperating with iPASS outbound is now to proxy to the iPASS radius
server. Altered documentation to suit.

hth

Hugh

-- 
Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.



===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) Accounting with MySQL

2000-06-10 Thread Robin Gruyters

Hi,

Got a question, I see that with SQL accounting the date and time is not saved in
the SQL database. Why?!?
And isit possible to add this?

-- 
Regards,

 Robin Gruyters - [EMAIL PROTECTED] - WISH BV - nic-hdl: RG3771-RIPE
 http://www.wish.net - tel: +31(0)413242500 - fax. +31(0)208762628
 PGP key ID DEB8C991 - Head Engineering / Web Designer / B.O.F.H.
 BOFH excuse: Me no internet, only janitor, me just wax floors.

===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) ipass --> perl test.pl

2000-06-10 Thread christian.steger


hi,
finally i found out how to solve myself the problem for the ipass module.
the testscript seems not to be working, and i did not find out any
suggestion in the mailarchive how to solve that "linking prob" ?

i have just read to get the new libs of ipass, libs i have are:

iPASS-Linux-486.tar.gz  11-Nov-1999 12:42   298k

i took also the ipass-perl mod version 1.5 from the open.com site.

following error exist:

perl test.pl 
1..6
Can't load '/usr/lib/perl5/site_perl/5.005/i586-linux/auto/Ipass/Ipass.so'
for module Ipass:
/usr/lib/perl5/site_perl/5.005/i586-linux/auto/Ipass/Ipass.so: undefined
symbol: __srandom at /usr/lib/perl5/5.00503/i586-linux/DynaLoader.pm line
169.

 at test.pl line 19
BEGIN failed--compilation aborted at test.pl line 19.
not ok 1


thanks for any help

christian steger


p.s.: thanks to hugh for answering my last message on the list

---
Christian Steger / Inode Telekommunikationsdienstleistungs GmbH
Feldgasse 3/3 - A-1080 Wien 
Tel.: +43 1 4094909 85 Fax.: +43 1 4094909 49
[EMAIL PROTECTED] / CS-552-RIPE / SC4700


===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.