Re: (RADIATOR) Newbie question: Radiator setup and config

2001-06-26 Thread Hugh Irvine


Hello Steve -

As has been mentioned elsewhere, a coy of the configuration file (no 
secrets) and a trace 4 debug from Radiator are needed to see what is 
happening.

thanks

Hugh


At 4:12 PM -0400 6/25/01, Stephen Caporossi wrote:
I am in the process of evaluating Radiator as well as setting up my
first radius server, and have a few questions about verifying the system
is working properly/configuring it to authenticate to /etc/shadow. 

I am running RHLinux 7.1 and Radiator 2.18.2.  It appears that the
install went OK and when I run radpwtst, without any arguments, it works
fine.  However, after configuring radius.cfg
to authenticate to /etc/shadow and/or to the users flat file, it returns

Sending Access-Request...
Rejected: Request Denied

radpwtst -user username -password password

In the logfile, it tells me
Access rejected for username:No such user

the accounting works OK

I added the user and password to the /usr/local/etc/users file and the
account also is created on the Linux box.  Any ideas and or suggestions
would be appreciated.

Thanks, Steve
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

-- 

NB: I am travelling this week, so there may be delays in our correspondence.

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) PIX and radiator

2001-06-26 Thread Hugh Irvine


Hello Anton -



   Guys.. I configured my cisco pix to use radius and authenticate with
   radiator.

   But Im getting a problem.. when a user tries to login.. radiator
   answers:

   authentication disabled-.

   What does this mean?

It sounds like you have AccountingOnly set in your AuthBy clause.

Send me a copy of the configuration file (no secrets) and a trace 4 
debug from Radiator showing what is happening.

thanks

Hugh
-- 

NB: I am travelling this week, so there may be delays in our correspondence.

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) Radiator Accounting Thru MS SQL Server

2001-06-26 Thread jsajjad

Hi all,

Would anybody kindly let me guide the tips and procedure for how to
configure Radiator Server on Linux box 6.2 for sending users' Accounting
logs to  MS SQL Server Machine. Would i have to install some additioanal
software or Radiator itself provides the feature/facility for this task.

Looking forward for a positive reply.
 
Regards
Javaid Sajjad 

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) How can I log failed accounting information onlyonce?

2001-06-26 Thread Vangelis Kyriakakis

   Well, I found out that the multiple entries were caused by the
retransmissions of the Access Server towards the Radius proxy not from the proxy
to the other RADIUS server.
   I used the AccountingHandled attribute so when the proxy RADIUS gets an
accounting packet from the Access server ACKs it without wait for an ACK from
the other RADIUS server.
   Is this the right approach?

  thanks
Vangelis

Hugh Irvine wrote:

 Hello Vangelis -

 At 5:20 PM +0300 6/25/01, Vangelis Kyriakakis wrote:
 Hello,
 
I want to be able to send accounting information to a RADIUS
 server  via proxy RADIUS and log accounting information, that didn't
 reach this server after some retries, in a local file.
If I use AcctFailedLogFileName I get one line for every failed
 retransmission of the packet. Is there a configuration I can use in
 order to log only one line for each failed accounting packet?

 My reading of the code (in AuthRADIUS.pm, sub forward()) indicates
 that the AcctFailed processing occurs after all retries have timed
 out (just before the NoReplyHook is called).

 Can you send me a copy of the configuration file (no secrets)
 together with a trace 4 debug from Radiator showing what is happening?

 thanks

 Hugh

 --

 NB: I am travelling this week, so there may be delays in our correspondence.

 Radiator: the most portable, flexible and configurable RADIUS server
 anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
 Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
 Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
 ===
 Archive at http://www.open.com.au/archives/radiator/
 Announcements on [EMAIL PROTECTED]
 To unsubscribe, email '[EMAIL PROTECTED]' with
 'unsubscribe radiator' in the body of the message.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) How can I log failed accounting informationonlyonce?

2001-06-26 Thread Hugh Irvine


Hello Vangelis -

At 1:49 PM +0300 6/26/01, Vangelis Kyriakakis wrote:
Well, I found out that the multiple entries were caused by the
retransmissions of the Access Server towards the Radius proxy not 
from the proxy
to the other RADIUS server.
I used the AccountingHandled attribute so when the proxy RADIUS gets an
accounting packet from the Access server ACKs it without wait for an ACK from
the other RADIUS server.
Is this the right approach?


If you just want to send the accounting request and not worry about 
the reply, then yes, AccountingHandled is the right approach.

regards

Hugh

-- 

NB: I am travelling this week, so there may be delays in our correspondence.

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Radiator Accounting Thru MS SQL Server

2001-06-26 Thread Hugh Irvine


Hello Javaid -

The usual approach is to use the free version of Sybase for Linux, 
and configure Radiator with an AuthBy SQL clause together with DBI 
and DBD-Sybase. You will find further information in sections 6.26 
and 23.0 in the Radiator 2.18.2 reference manual. This topic has also 
been discussed many times on the mailing list, so have a look at the 
archive site too:

http://www.open.com.au/archives/radiator/

regards

Hugh


At 3:33 PM +0500 6/26/01, [EMAIL PROTECTED] wrote:
Hi all,

Would anybody kindly let me guide the tips and procedure for how to
configure Radiator Server on Linux box 6.2 for sending users' Accounting
logs to  MS SQL Server Machine. Would i have to install some additioanal
software or Radiator itself provides the feature/facility for this task.

Looking forward for a positive reply.

Regards
Javaid Sajjad

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

-- 

NB: I am travelling this week, so there may be delays in our correspondence.

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) Quoted and escaped password

2001-06-26 Thread talist

Hello,

I would like to add the definition of a variable that would provide the
quoted and escaped password returned from the NAS.
Something similar to %0 (for username) but for returned passwords in the
AuthSQL context.
Could someone tell me where is the %0 defined in the radiator perl modules.
The current %P (decrypted user password) is fine but my custom update query
is failing whenever the dialin user is sending quotes.






===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) question

2001-06-26 Thread admin



I need to reduce my Ascend-Data-Filter from length 
28 to 26 Any ideas how? 


Thanks

Eric


(RADIATOR) WARNING: Bad authenticator in request from xxx.xxx.xxx.xxx

2001-06-26 Thread Frank E. Collette, IV

I have recently setup a 2000 server running radiator, which gets user
information etc from a Platypus 3.0 database.  So far I have worked out all
of the minor details except for the accounting side.  Everytime a customer
logs into our Max 6000 radiator gives this error message:

Tue Jun 26 16:23:53 2001: WARNING: Bad authenticator in request from
xxx.xxx.xxx.xxx (xxx.xxx.xxx.xxx)

Any idea how to fix this?  I do not have any client fields in my radius
config because radiator grabs these fields from the RadiusNT section in
plat.  Any help would be appreciated!

Thanks,

Frank E. Collette, IV
Bignet South
Systems Engineer
888-434-8364 x1016



===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.