Re: (RADIATOR) Multiple databases

2000-10-12 Thread Ron Hensley

I dont get the Framed-IP-Address on Start records, thus my SQL doesn't log
them to the RADONLINE database
A look at the printout detail files, shows that information is not sent by
my NAS terminal servers, Bay 5399's.
When a user gets assigned a static ip address, with a reply item of
Framed-IP-Address = x.y.z.a then that
does get logged, and does therefore make it into SQL. However for the
regular users whom get
 Framed-IP-Address = 255.255.255.254 which tells the NAS to dynamically
assign the address, it doesn't get sent in
accounting packets.

Is this normal or is there a way to pluck the dynamic ip address the NAS
assigns and get it logged?
The Framed-IP-Address does show on all Stop records. Don't know if this is
something the NAS would
have to be taught to do perhaps, to send that info after its assigned the ip
address?

Thu Oct 12 04:07:23 2000
Acct-Status-Type = Start
Acct-Session-Id = "ae0b0862"
Acct-Delay-Time = 24
NAS-Port = 41
Annex-83 = "<0><0>N<133>"
NAS-Port-Type = Async
Annex-Unauthenticated-Time = 27
User-Name = "qism"
Service-Type = Framed-User
Framed-Protocol = PPP
Called-Station-Id = "xxx"
Calling-Station-Id = "xx"
Idle-Timeout = 900
Connect-Info = "48000  21600 V.90"
Annex-Transmit-Speed = 48000
Annex-Receive-Speed = 21600
Annex-96 = "V.90"
Annex-86 = "V.42bis"
Annex-97 = "V.42"
Annex-89 = "<0><0><0><31>"
Annex-94 = "<0><0><0><22>"
Annex-82 = "<0><0><0><1>"
Annex-81 = "<0><0><0><1>"
Acct-Authentic = RADIUS
NAS-IP-Address = x.y.z.a
Timestamp = 971338019
- Original Message -
From: "Hugh Irvine" <[EMAIL PROTECTED]>
To: "Elias" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Thursday, October 12, 2000 9:10 PM
Subject: Re: (RADIATOR) Multiple databases


>
> Hello Elias -
>
> >
> > Hi,
> >
> > I want to set-up a multiple database environment so that if one database
goes
> > down, the backup will take over. My config is as shown below. Is there
anything
> > wrong with it? When radiusxx goes down, radiator does not switch over to
> > radiusyy automatically. Thanks.
> >
> > 
> > 
> > DBSource radiusxx
> >..
> >..
> > 
> >
> > 
> > DBSource radiusyy
> >..
> >..
> > 
> > 
> >
> > 
> > DBSource radiusyy
> > ..
> > ..
> >  
> >
>
> To set up multiple databases, you specify them like this:
>
> 
> 
> DBSource radiusxx
> DBSource radiusyy
> ..
> ..
> 
>
> 
>
> Have a look at section 6.26 in the Radiator 2.16.3 reference manual for
further
> details on AuthBy SQL.
>
> regards
>
> Hugh
>
> --
> Radiator: the most portable, flexible and configurable RADIUS server
> anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
> Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
> Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
>
>
>
> ===
> Archive at http://www.starport.net/~radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
>


===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



RE: (RADIATOR) Logging Timestamp

2000-10-12 Thread Anton Sparrius

Hi,

FYI

I've added a little code to add a "milliseconds" report to the log file.
You need to download and install the Time-HiRes-01.20.tar.gz package which
can be downloaded from CPAN.

Then, a small adjustment to LogFILE.pm,

(at the beginning of the module)

use Time::HiRes qw( usleep ualarm gettimeofday tv_interval );

(in sub log)

sub log
{
my ($self, $p, $s) = @_;

my $seconds;
my $micro;

if ($p <= $self->{Trace})
{
($seconds, $micro) = gettimeofday;

my $ctime = localtime(time);
my $message = "$ctime.$micro: $Radius::Log::priorityToString[$p]:
$s\n";



This changes the output of the timestamping to

Fri Oct 13 12:57:01 2000.171639: DEBUG: Packet dump:

While the milliseconds are added after the year, they do at least give you
the ability to view with a lot more precision how long all steps are taking,
and if there is a delay occuring somewhere.

Regards,

Anton.


> Hello Anton -
>
> On Thu, 12 Oct 2000, Anton Sparrius wrote:
> > Hi,
> >
> > When logging Radiator timestamps each log entry as :
> >
> > Thu Oct 12 19:01:42 2000:
> >
> > I need to get this to show more accuracy than just seconds.
> >
> > The code is in LogFILE.pm which says :
> >
> > my $ctime = localtime(time);
> > my $message = "$ctime: $Radius::Log::priorityToString[$p]: $s\n";
> >
>
> These are the standard Perl times in seconds, so no, not with the
> standard
> routines.
>
> regards
>
> Hugh


===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) radonline missing entries?

2000-10-12 Thread Hugh Irvine


Hello Charles -

On Fri, 13 Oct 2000, Charles Sprickman wrote:
> On Thu, 12 Oct 2000, Hugh Irvine wrote:
> 
> > > At trace 3, I see no oddities associated with this
> > > username.  Any ideas how to track this down??  
> > 
> > Yes - use trace 4 and watch what happens.
> 
> I knew you'd say that :)
> 
> Found my problem:
> 

Good - well done.

> -MySQL session db definition
> 
> Identifier SDB_mysql
> 
> DBSourcedbi:mysql:radius:localhost
> DBUsername  
> DBAuth  
> [snip]
> Timeout 30
>   Identifier sessiondb
> FailureBackoffTime  200
> 
> 
> That extra "Identifier" line threw something off, and all requests were
> going to the other session database I have configured.  Odd behaviour, but
> easy to find once I had the trace at 4.  I saw ALL handlers were using my
> other session db, even though only one was configured to do so.
> 

What would have happened is this - the second Identifier would have overwritten
the first, and then if any other Handler tried to access SDB_mysql, it would
not have been found. Then, if the other session database was the last one in
the configuration file, it would have been used by default, which is what you
observed.

Isn't trace 4 wonderful?  I couldn't live without it...

:-)

regards

Hugh

-- 
Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.



===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Multiple databases

2000-10-12 Thread Hugh Irvine


Hello Elias -

> 
> Hi,
> 
> I want to set-up a multiple database environment so that if one database goes
> down, the backup will take over. My config is as shown below. Is there anything
> wrong with it? When radiusxx goes down, radiator does not switch over to
> radiusyy automatically. Thanks.
> 
> 
> 
> DBSource radiusxx
>..
>..
> 
> 
> 
> DBSource radiusyy
>..
>..
> 
> 
> 
> 
> DBSource radiusyy
> ..
> ..
>  
> 

To set up multiple databases, you specify them like this:



DBSource radiusxx
DBSource radiusyy
..
..




Have a look at section 6.26 in the Radiator 2.16.3 reference manual for further
details on AuthBy SQL.

regards

Hugh

-- 
Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.



===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) Multiple databases

2000-10-12 Thread Mike McCauley


--- Forwarded mail from [EMAIL PROTECTED]

Date: Fri, 13 Oct 2000 10:40:20 +1000 (EST)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: BOUNCE [EMAIL PROTECTED]:Non-member submission from [Elias
<[EMAIL PROTECTED]>]

>From mikem  Fri Oct 13 10:40:15 2000
Received: by oscar.open.com.au (8.9.0/8.9.0) id KAA22720
for [EMAIL PROTECTED]; Fri, 13 Oct 2000 10:40:11 +1000 (EST)
>Received: from ipop3 (ipop3.tm.net.my [202.188.0.247]) by perki.connect.com.au
with ESMTP id LAA28179
  (8.8.8/IDA-1.7 for <[EMAIL PROTECTED]>); Fri, 13 Oct 2000 11:36:55 +1100
(EST)
Disposition-notification-to: [EMAIL PROTECTED]
Received: from ipop3 (ipop3.tm.net.my [202.188.0.247]) by perki.connect.com.au
with ESMTP id LAA28179
  (8.8.8/IDA-1.7 for <[EMAIL PROTECTED]>); Fri, 13 Oct 2000 11:36:55 +1100
(EST)
Received: from elias (parkview-100-227.tm.net.my [202.188.100.227])
 by ipop3.tm.net.my (iPlanet Messaging Server 5.0  (built Oct  2 2000))
 with SMTP id <[EMAIL PROTECTED]> for [EMAIL PROTECTED]; Thu,
 12 Oct 2000 12:06:43 +0800 (SGT)
Date: Thu, 12 Oct 2000 12:05:24 +0800
From: Elias <[EMAIL PROTECTED]>
Subject: Multiple databases
To: [EMAIL PROTECTED]
Message-id: <010801c03401$a5d9cd20$[EMAIL PROTECTED]>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
X-Priority: 3
X-MSMail-priority: Normal
Content-Type: multipart/alternative;
 boundary="Boundary_(ID_99hi7gx0d057IYaHwtB49A)"

This is a multi-part message in MIME format.

--Boundary_(ID_99hi7gx0d057IYaHwtB49A)
Content-type: text/plain; charset=iso-8859-1
Content-transfer-encoding: 7BIT

Hi,

I want to set-up a multiple database environment so that if one database goes
down, the backup will take over. My config is as shown below. Is there anything
wrong with it? When radiusxx goes down, radiator does not switch over to
radiusyy automatically. Thanks.



DBSource radiusxx
   ..
   ..



DBSource radiusyy
   ..
   ..




DBSource radiusyy
..
..
 


- Elias -

--Boundary_(ID_99hi7gx0d057IYaHwtB49A)
Content-type: text/html; charset=iso-8859-1
Content-transfer-encoding: 7BIT








Hi,
 
I want to set-up a multiple database environment
so
that if one database goes down, the backup will take over. My config is as
shown
below. Is there anything wrong with it? When radiusxx goes down, radiator does
not switch over to radiusyy automatically. Thanks.
 


   

   
DBSource radiusxx
  
..
  
..    
   


  
   

   
DBSource radiusyy
  
..
  
..   
   


 

DBSource
radiusyy
   
..
   
..
 
 
 
- Elias -

--Boundary_(ID_99hi7gx0d057IYaHwtB49A)--



---End of forwarded mail from [EMAIL PROTECTED]

-- 
Mike McCauley   [EMAIL PROTECTED]
Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985   Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, Active Directory etc etc 
on Unix, Win95/8, 2000, NT, MacOS 9, MacOS X
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) radonline missing entries?

2000-10-12 Thread Charles Sprickman

On Thu, 12 Oct 2000, Hugh Irvine wrote:

> > At trace 3, I see no oddities associated with this
> > username.  Any ideas how to track this down??  
> 
> Yes - use trace 4 and watch what happens.

I knew you'd say that :)

Found my problem:

-MySQL session db definition

Identifier SDB_mysql

DBSourcedbi:mysql:radius:localhost
DBUsername  
DBAuth  
[snip]
Timeout 30
Identifier sessiondb
FailureBackoffTime  200


That extra "Identifier" line threw something off, and all requests were
going to the other session database I have configured.  Odd behaviour, but
easy to find once I had the trace at 4.  I saw ALL handlers were using my
other session db, even though only one was configured to do so.

Thanks,

Charles

> hth
> 
> Hugh
> 
> -- 
> Radiator: the most portable, flexible and configurable RADIUS server 
> anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
> Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
> Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
> 
> 
> 
> ===
> Archive at http://www.starport.net/~radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
> 


===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Logging Timestamp

2000-10-12 Thread Hugh Irvine


Hello Anton -

On Thu, 12 Oct 2000, Anton Sparrius wrote:
> Hi,
> 
> When logging Radiator timestamps each log entry as :
> 
> Thu Oct 12 19:01:42 2000:
> 
> I need to get this to show more accuracy than just seconds.
> 
> The code is in LogFILE.pm which says :
> 
> my $ctime = localtime(time);
> my $message = "$ctime: $Radius::Log::priorityToString[$p]: $s\n";
> 

These are the standard Perl times in seconds, so no, not with the standard
routines.

regards

Hugh

-- 
Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.



===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) How is LDAP check done with multiple handlers to the same LDAP se rver

2000-10-12 Thread Hugh Irvine


Hello Karel -

On Thu, 12 Oct 2000, [EMAIL PROTECTED] wrote:
> Hello All,
> 
> I'm using 2.16.1 (including patches) and AuthLDAPSDK for LDAP
> authentication. My config file contains several handlers (different
> Called-Station-Id's), but which all authenticate against the same LDAP
> server. When testing with the same user/password the following showed up:
> 
> handler 1 could not authenticate
> handler 2 could authenticate
> 
> I know there is some 'bug' in the LDAPSDK module not noting when the LDAP
> connection is reset by some means. 
> 
> Questions:
> According to the manual a new LDAP connection is set up each time a request
> is initiated. I thought that LDAPSDK does not do this but reuses the LDAP
> connection for several subsequent requests (long time ago I've been sniffing
> and saw one connection setup and several LDAP requests following, this was
> with Radiator 2.14.1). Anybody knows this for sure?
> Does Radiator setup a new/separate LDAP connection to the same LDAP server
> if a different Handler is authenticating? This question relates to the
> former one, as I still presume Radiator sets up an LDAP connection once
> using LDAPSDK and tries to reuse this one.
> 

There have been a number of changes in the various versions of the LDAP code,
so you should have a read through the history file ("doc/history.html") to see
what changes were made. Specifically, the connection behaviour has changed at
least once, because Radiator originally tried to open and maintain a single
connection, but there were some servers that fell over with multiple queries on
the connection. There is now a "HoldServerConnection" parameter to control this
behaviour. This was added in 2.16, so have a look at section 6.32.15 in the
manual to check.

regards

Hugh


-- 
Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.



===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Radmin install with remote sql server

2000-10-12 Thread Hugh Irvine


Hello Lisa -

On Fri, 13 Oct 2000, Lisa Goulet wrote:
> Hi Colleagues,
> 
> In my test setup I had the Postgresql/Radmin/Radiator servers all in one
> machine and it worked fine. 
> 
> Now I'm trying to install Radmin on one server with Postgresql DB on
> another. The installPostgresql.sh has the error below. I tried variations on
> dbname such as: database=radmin:pgsql_server_ip_address but to no avail. I
> even created the database radmin and user radmin on the postgres db by hand
> but still get the error. Help!
> 

I would have thought that you would have to set up the database directly on the
machine that is running it. There is a section in the Radiator 2.16.3 manual
that describes setting up PostgreSQL (section 22.6).

hth

Hugh

-- 
Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.



===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) what's the best way to stress-test radiator?

2000-10-12 Thread Hugh Irvine


Hello Herbert -

On Fri, 13 Oct 2000, Herbert Kornfeld wrote:
> Thanks Hugh.  Are you saying that running radpwtst on the same server as
> Radiator is a bad thing?  The reason I ask is that I ran n local copies
> of radpwtst simultaneously, and performance dropped through the floor
> even with n as low as 3.  I'm running a twin-CPU HP server with 1/2gb of
> ram, perl-ldap-0.22.
> 

Yes, running lots of copies of radpwtst on the same machine as Radiator will
skew the results significantly. We provide radpwtst as a test tool, not as a
high-performance radius packet generator. That is why I suggested running
multiple seperate machines, each one running an instance of radpwtst, all of
them querying the same Radiator host (you can use PC's for this, or whatever is
handy).

Have a look at section 23.0 in the Radiator 2.16.3 reference manual to see some
of the performance figures that we saw during our testing (using this
technique).

regards

Hugh


-- 
Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.



===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Radmin install with remote sql server

2000-10-12 Thread Mike McCauley

Hello Lisa,

This looks very much like some sort of protection/permission issue withteh
POstgreSQL server, rather than Radiator.

have you been able to connect to the server with the POstgreSQL command line
utilities?

Cheers.

On Oct 12,  5:13pm, Lisa Goulet wrote:
> Subject: (RADIATOR) Radmin install with remote sql server
>
> Hi Colleagues,
>
> In my test setup I had the Postgresql/Radmin/Radiator servers all in one
> machine and it worked fine.
>
> Now I'm trying to install Radmin on one server with Postgresql DB on
> another. The installPostgresql.sh has the error below. I tried variations on
> dbname such as: database=radmin:pgsql_server_ip_address but to no avail. I
> even created the database radmin and user radmin on the postgres db by hand
> but still get the error. Help!
>
> All platforms are FreeBSD.
>
> Error:
> psql: FATAL 1:  SetUserId: user 'root' is not in 'pg_shadow'
> createdb: database creation failed
> Shall the new user be allowed to create databases? (y/n) Shall the new user
> be allowed to create more new users? (y/n) psql: FATAL 1:  SetUserId: user
> 'root' is not in 'pg_shadow'
> createuser: creation of user "radmin" failed
> DBI->connect(dbname=radmin) failed: FATAL 1:  Database "radmin" does not
> exist in the system catalog.
>  at Radmin/DBSQL.pm line 195
> Could not connect to SQL database dbi:Pg:dbname=radmin: FATAL 1:  Database
> "radmin" does not exist in the system catalog.
>
>
> Thanks in advance,
> Lisa
>
> ===
> Archive at http://www.thesite.com.au/~radiator/
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
>-- End of excerpt from Lisa Goulet



-- 
Mike McCauley   [EMAIL PROTECTED]
Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985   Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, Active Directory etc etc 
on Unix, Win95/8, 2000, NT, MacOS 9, MacOS X
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Radmin install with remote sql server

2000-10-12 Thread Mike Hickey

Hi Lisa

Root has not been setup as a Postgres user. Do:

su - postgres 
createuser

Then shell back to root and run the script again.


Mike

Lisa Goulet wrote:

> 
> Error: 
> psql: FATAL 1:  SetUserId: user 'root' is not in 'pg_shadow'
> createdb: database creation failed
> Shall the new user be allowed to create databases? (y/n) Shall the new user
> be allowed to create more new users? (y/n) psql: FATAL 1:  SetUserId: user
> 'root' is not in 'pg_shadow'
> createuser: creation of user "radmin" failed
> DBI->connect(dbname=radmin) failed: FATAL 1:  Database "radmin" does not
> exist in the system catalog.
>  at Radmin/DBSQL.pm line 195
> Could not connect to SQL database dbi:Pg:dbname=radmin: FATAL 1:  Database
> "radmin" does not exist in the system catalog.
> 
> 
> Thanks in advance,
> Lisa
> 
> 


===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) what's the best way to stress-test radiator?

2000-10-12 Thread Herbert Kornfeld


Thanks Hugh.  Are you saying that running radpwtst on the same server as
Radiator is a bad thing?  The reason I ask is that I ran n local copies
of radpwtst simultaneously, and performance dropped through the floor
even with n as low as 3.  I'm running a twin-CPU HP server with 1/2gb of
ram, perl-ldap-0.22.

The radpwtst command I used was

/opt/perl5/bin/radpwtst -s myserver -time \
-iterations 20 \
-secret xx \
-auth_port 1812 \
-chap \
-user [EMAIL PROTECTED] \
-password password \
-noacct \
-nas_ip_address 1.2.3.4 \
-nas_port 2 \
-service_type 2 \
-dictionary /path/to/dictionary \
"NAS-Port-Type=Virtual"

and I started a handful of them with a driver that just did

run-radpwtst &
run-radpwtst &
...

Trace is 0 and the directory is on the same host.  The attributes being
searched on (username/password) are keyed in the directory for maximum
performance.  In fact I can see that the directory turns around a search
in under 10 milliseconds.

I used 20 iterations to give the later invocations of radpwtst time to
get into their stride before the earlier ones finished.

Here are the total numbers:
1 user:  20 per sec
2 users: 16 (ie each radpwtst averaged 8/sec, so in total 16)
3 users: 11.25 (3.75)
4 users: 10.67 (2.67)
5 users: 10 (2)
10 users: 8.58 (0.858)

To my untrained eye these numbers don't look so hot.  What am I
missing?  Even if there is some overhead with running radpwtst on the 
server, I would not expect this much impact.  With 50 NASes and 100,000
users in the directory, I could really do with having an order of
magnitude improvement.  Otherwise (whisper it quietly) the management
will start suggesting Cisco Access Registrar or Nortel Preside.  Any
tips on these scalability and performance issues gratefully received.

TIA

--herb



>From: Hugh Irvine <[EMAIL PROTECTED]>
>
[snip]
>Just set up Radiator on one or two additional machines and run multiple 
>copies of radpwtst on each one against the Radiator host. Thats what we do 
>here for our own stress testing.
>
[snip]

_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.


===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) Radmin install with remote sql server

2000-10-12 Thread Lisa Goulet


Hi Colleagues,

In my test setup I had the Postgresql/Radmin/Radiator servers all in one
machine and it worked fine. 

Now I'm trying to install Radmin on one server with Postgresql DB on
another. The installPostgresql.sh has the error below. I tried variations on
dbname such as: database=radmin:pgsql_server_ip_address but to no avail. I
even created the database radmin and user radmin on the postgres db by hand
but still get the error. Help!

All platforms are FreeBSD.

Error: 
psql: FATAL 1:  SetUserId: user 'root' is not in 'pg_shadow'
createdb: database creation failed
Shall the new user be allowed to create databases? (y/n) Shall the new user
be allowed to create more new users? (y/n) psql: FATAL 1:  SetUserId: user
'root' is not in 'pg_shadow'
createuser: creation of user "radmin" failed
DBI->connect(dbname=radmin) failed: FATAL 1:  Database "radmin" does not
exist in the system catalog.
 at Radmin/DBSQL.pm line 195
Could not connect to SQL database dbi:Pg:dbname=radmin: FATAL 1:  Database
"radmin" does not exist in the system catalog.


Thanks in advance,
Lisa

===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Accounting

2000-10-12 Thread Ron Hensley

I get that from Connect-Info. I guess it would depend
on what information your NAS is sending over, but
a quick look with trace 4 of what information is getting
sent from your NAS should show what Attribute
has the information you want.

I use this:
   AcctColumnDef   CONNECTINFO,Connect-Info
(Of course I had to add the CONNECTINFO field to the
ACCOUNTING table)

A search of your dictionary for the word connect
should pull up any usable Attributes 

[ronh@shore]$grep -i connec /etc/Radiator/dictionary
ATTRIBUTE   Connect-Info77  string
ATTRIBUTE   Connect-Rate1007integer

--
Ron Hensley  ([EMAIL PROTECTED]) CCNA #10082337
Network Administrator - ICNet Internet Services
--

On Thu, 12 Oct 2000, Matthias Fechner (Temp) wrote:

> Hi
> 
> i need in the accounting the connection speed(like 64000 for one
> isdn-channel or 128000 for two isdn channel).
> With the Line:
> AcctColumnDef   ACCTTERMINATECAUSE,Acct-Terminate-Cause
> I can specify the column in the database, but what keyword(variable) i
> need(the name) for the connectionspeed?
> 
> 
> Matthias Fechner
> 
> 
> ===
> Archive at http://www.starport.net/~radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
> 


===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) Accounting

2000-10-12 Thread Matthias Fechner (Temp)

Hi

i need in the accounting the connection speed(like 64000 for one
isdn-channel or 128000 for two isdn channel).
With the Line:
AcctColumnDef   ACCTTERMINATECAUSE,Acct-Terminate-Cause
I can specify the column in the database, but what keyword(variable) i
need(the name) for the connectionspeed?


Matthias Fechner


===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



RE: (RADIATOR) Calling Line Identification

2000-10-12 Thread Ingvar Berg (ERA)

How to implement it depends on what user db you have, Hugh will probably give you the 
full answer tomorrow. If you AuthBy LDAP, then you specify a search filter to define 
what user attribute should match Calling Line ID. Flat file is also real simple and 
(I'm guessing here) also SQL.

Reading the manual and FAQ will probably give you the hints you need to do the basic 
setup.

/Ingvar

> -Original Message-
> From: Erwin Wortel [mailto:[EMAIL PROTECTED]]
> Sent: den 11 oktober 2000 12:04
> To: [EMAIL PROTECTED]
> Subject: (RADIATOR) Calling Line Identification
> 
> 
> Hi,
> 
> At this moment I'm using callback for security reasons. But some of
> the users (for several reasons) cannot manage a callback 
> session to the NAS.
> Now I'm looking if I can implement Calling Line 
> Identification in Radiator,
> but I cannot find such a check-item. Can someone give any help.
> 
> T.i.a.
> 
> Erwin Wortel.
> 
> --
> Erwin Wortel, Academic Medical Center - Amsterdam
> E-Mail: [EMAIL PROTECTED], Telefoon +31 20 56 66788
> $*%@*!&(%72HaLLo#%@*&^$Doeei)#_+~toeteLeToet_%^@#$9+
> 
> Why is the word abbreviation so long?
> 
> 
> 
> ===
> Archive at http://www.starport.net/~radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
> 

===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) How is LDAP check done with multiple handlers to the same LDAP server

2000-10-12 Thread c . w . vandervelden

Hello All,

I'm using 2.16.1 (including patches) and AuthLDAPSDK for LDAP
authentication. My config file contains several handlers (different
Called-Station-Id's), but which all authenticate against the same LDAP
server. When testing with the same user/password the following showed up:

handler 1 could not authenticate
handler 2 could authenticate

I know there is some 'bug' in the LDAPSDK module not noting when the LDAP
connection is reset by some means. 

Questions:
According to the manual a new LDAP connection is set up each time a request
is initiated. I thought that LDAPSDK does not do this but reuses the LDAP
connection for several subsequent requests (long time ago I've been sniffing
and saw one connection setup and several LDAP requests following, this was
with Radiator 2.14.1). Anybody knows this for sure?
Does Radiator setup a new/separate LDAP connection to the same LDAP server
if a different Handler is authenticating? This question relates to the
former one, as I still presume Radiator sets up an LDAP connection once
using LDAPSDK and tries to reuse this one.

Regards,
Karel van der Velden



---
Karel van der Velden| Telephone : +31 50 5851003
KPN Telecom | Telefax   : +31 50 5853454
ICT/BPG P&C 2   | E-mail: [EMAIL PROTECTED]
P.O. Box 188| DISCLAIMER: This Statement is not an
official
NL-9700 AD Groningen| statement from, nor does it  represent an
The Netherlands | official position of, KPN Telecom 

---


===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) Logging Timestamp

2000-10-12 Thread Anton Sparrius

Hi,

When logging Radiator timestamps each log entry as :

Thu Oct 12 19:01:42 2000:

I need to get this to show more accuracy than just seconds.

The code is in LogFILE.pm which says :

my $ctime = localtime(time);
my $message = "$ctime: $Radius::Log::priorityToString[$p]: $s\n";

Can this be changed somehow to show milliseconds?  

Regards,
Anton

===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.