(RADIATOR) WARNING messages polluting my log :-/
Hello guys, Has anyone seen these kinds of errors in their authlog? WARNING: OnlineDatabase Could not find a Client for NAS xxx.xxx.xxx.xxx to double-check Simultaneous-Use. Perhaps you do not have a reverse DNS for that NAS? Where OnlineDatabase is the Identifier for my SQL SessionDatabase. I must say, that the IP address for NAS is not in my Clients file, so I'm actually wondering where that IP address comes from, and why I'm getting these errors for a NAS that shouldn't even be replied to. Thanks, -Andy -- Andy De Petter - http://www.techos.be/andy - [EMAIL PROTECTED] (ROT13) Senior System Engineer - Skynet Operations - http://www.skynet.be === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) check attributes
*This message was transferred with a trial version of CommuniGate(tm) Pro*
Just forget what I said.
there is a hole difference between Dic (from Diciembre in spanish) and Dec
(from December in english)
that was my prob.
Best regards
Hello there:
I got the next realm config in my radius.cfg file:
Realm whatever
RejectHasReason
AuthBy SQL
DBSourcedbi:mysql:radius
DBUsername XX
DBAuth XX
DefaultSimultaneousUse 1
AuthSelect select PASSWORD, TIMELEFT, CHECKATTR from SUBSCRIBERS
where USERNAME = '%n' and TIMELEFT 0
AuthColumnDef 0,User-Password,check
AuthColumnDef 1,Session-Timeout,reply
AuthColumnDef 2,GENERIC,check
AccountingStopsOnly
AcctSQLStatement update SUBSCRIBERS set
TIMELEFT=TIMELEFT-0%{Acct-Session-Time} where USERNAME='%n'
/AuthBy
/Realm
I want to set into the CHECKATTR database field for a user this:
Service-Type = Framed-User, NAS-Port-Type = Async, Expiration=Dic 29 2001
but I think I'm doing something wrong. No matter what date I set in the
Expiration attribute, radiator always said:
Reply-Message = Request Denied
Reply-Message = Expiration date has passed
What am I doing wrong?
Sergio Alejandro Gonzalez
Director Operativo
SkyNet de Colombia.
Bogota, Colombia, South America.
57 (+1) 6 422 020
57 (+3) 7 285 094
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
Sergio Alejandro Gonzalez
Director Operativo
SkyNet de Colombia.
Bogota, Colombia, South America.
57 (+1) 6 422 020
57 (+3) 7 285 094
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
(RADIATOR) Using /etc/group
Hi, Is it possible for Radiator to examine the Unix group that a user is a member of to determine their connection profile (eg session time, idle time, etc.)? I am currently authenticating to /etc/passwd andwriting to a flat detail file but would like to use the user's group to determine their connection profile. Barry Andersson
(RADIATOR) Cisco NAS boxen trouble
I was having trouble getting Framed-IP-Address to update in the Session database and couldn't figure out why. I got the following response from Cisco and thought I'd post it in case it helps anyone else. Chris - I see that you are having difficulty with the aaa accounting on PPP connections. The problem you describe is the result of ther router sending the accounting START record BEFORE the IPCP negotiation is complete. There are two ways to change this. The recommended way is to tell the router to send accounting UPDATEs when there is new information. This will accomplish what you are after -- getting the Framed-IP-Address sent to the Radius server. This is accomplished through this global configuration mode: aaa accounting update newinfo If, however, your accounting software cannot deal with START, UPDATE, and STOP records, there is another option, though it is officially not supported: aaa accounting delay-start Either of these should accomplish what you are after === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
