RE: (RADIATOR) Radonline flushing every 2 hours

2002-02-26 Thread Anton Krall

Also when radiator does this.. Is there a log entry to show the action?

Saludos
 
Anton Krall
Director de Tecnología
Inter.net México / Panamá
 
Tel; 5241-7609 Directo 
Tel: 5241-7600 Conmutador
Celular: 0445-105-5160 Mobile
ICQ: 4979450
email:  [EMAIL PROTECTED]
web: http://www.mx.inter.net
 
Outside Mexico:
Office: +52(555)241-7609
PBX: +52(555)241-7600
Mobile: +52(555)105-5160


Original > -Original Message-
Original > From: [EMAIL PROTECTED] 
Original > [mailto:[EMAIL PROTECTED]] On Behalf Of 
Original > Frank Danielson
Original > Sent: Martes, 26 de Febrero de 2002 06:47 p.m.
Original > To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Original > Subject: RE: (RADIATOR) Radonline flushing every 2 hours
Original > 
Original > 
Original > Hugh-
Original > 
Original > For general education purposes could you elaborate 
Original > on Radiator clearing entries for a NAS if it sees a 
Original > NAS restart? I'm not sure how Radiator would detect 
Original > that event and if some certain Client config is 
Original > needed support this.
Original > 
Original > Thanks.
Original > 
Original > -Original Message-
Original > From: Hugh Irvine [mailto:[EMAIL PROTECTED]]
Original > Sent: Tuesday, February 26, 2002 5:33 PM
Original > To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Original > Subject: Re: (RADIATOR) Radonline flushing every 2 hours
Original > 
Original > 
Original > 
Original > Hello Anton -
Original > 
Original > Please send me a copy of your configuration file (no 
Original > secrets) together with a 
Original > trace 4 debug showing what is happening.
Original > 
Original > Radiator will automatically remove all entries for a 
Original > NAS if it sees a NAS 
Original > restart, but I can't think of any reason why the 
Original > entire RADONLINE table would 
Original > be cleared.
Original > 
Original > regards
Original > 
Original > Hugh
Original > 
Original > 
Original > On Wed, 27 Feb 2002 08:45, Anton Krall wrote:
Original > > Guys.. Im having problems with my radonline table 
Original > on mysql.. Seems 
Original > > that every 2 hours.. The ocntents flush and start 
Original > from 0... Anybody 
Original > > has any problems like this?
Original > >
Original > > I noticed this because Im graphing the radonline 
Original > total user count 
Original > > every 5 minute from MRTG, and I noticed that every 
Original > 2 hours.. The 
Original > > database flushes and the graph on MRTG looks 
Original > funny... Like restarted 
Original > > from 0 every 2 hours..
Original > >
Original > > Anybody has any ideas?
Original > >
Original > > Saludos
Original > >
Original > > Anton Krall
Original > > Director de Tecnología
Original > > Inter.net México / Panamá
Original > >
Original > > Tel; 5241-7609 Directo
Original > > Tel: 5241-7600 Conmutador
Original > > Celular: 0445-105-5160 Mobile
Original > > ICQ: 4979450
Original > > email:  [EMAIL PROTECTED]
Original > > web: http://www.mx.inter.net
Original > >
Original > > Outside Mexico:
Original > > Office: +52(555)241-7609
Original > > PBX: +52(555)241-7600
Original > > Mobile: +52(555)105-5160
Original > >
Original > > ===
Original > > Archive at http://www.open.com.au/archives/radiator/
Original > > Announcements on [EMAIL PROTECTED]
Original > > To unsubscribe, email '[EMAIL PROTECTED]' with 
Original > 'unsubscribe 
Original > > radiator' in the body of the message.
Original > 
Original > -- 
Original > Radiator: the most portable, flexible and 
Original > configurable RADIUS server anywhere. Available on 
Original > *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
Original > -
Original > Nets: internetwork inventory and management - 
Original > graphical, extensible, flexible with hardware, 
Original > software, platform and database independence. === 
Original > Archive at http://www.open.com.au/archives/radiator/
Original > Announcements on [EMAIL PROTECTED]
Original > To unsubscribe, email '[EMAIL PROTECTED]' with
Original > 'unsubscribe radiator' in the body of the message.
Original > ===
Original > Archive at http://www.open.com.au/archives/radiator/
Original > Announcements on [EMAIL PROTECTED]
Original > To unsubscribe, email '[EMAIL PROTECTED]' with
Original > 'unsubscribe radiator' in the body of the message.
Original > 
Original > 

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) Radiator bug?

2002-02-26 Thread Nick Rogness


There appears to be a bug of sorts in the RewriteFunction call.  Under
high loads, radiator would stop answering Access-Requests.  THe udp recv
buffers would pin out.  After further inspection, a level 4 trace
actually says everything was OK (Access-Accept) but the NAS would never
receive the packet.  After weeks of troubleshooting we nailed it down to
the Rewritefunction we were using.



.
.
.
# this line is wrapping
RewriteFunction sub { my ($a) = shift; my ($n) = 
`/usr/local/bin/getvdomain-chap $a domain.com db1.gwtc.net 
db2.gwtc.net`; return $n;}
.
.
.



During this "outage", sockstat (or lsof) would show that when
/usr/local/bin/getvdomain-chap was running, it too was listening on udp
1645 and 1646.  Keep in mind that during low traffic periods it would work
like a charm...

This happens on several different UNIX OS's.

However, getvdomain actually is suppose to talk to a DB, pull an id out of
the database, and authenticate based on the system password for that id.
I shutoff all that functionality when we started having problems. So all
it did was return the username and we authenticated off a flat users file.
This did not resolve the problem.

I finally had to use a RewriteUsername clause which fixed the problem
temporarily:
 
RewriteUsername s/^([^@]+).*/$1/

The funny thing is, it says it is actually working.  The username is being
rewritten properly, etc.  It just stops working, radpwtst displays no
reply during this time.  As soon as traffic is shifted away, it recovers
and starts working again.  A packet dump on the wire reviels that some
packets are getting back to the NAS...in the order of 2/50.

Please advise as I can not find any documentation on RewriteFunction...did
it get taken out of the documentation or something?

Radiator version 2.18.4.


Nick Rogness <[EMAIL PROTECTED]>
 - Don't mind me...I'm just sniffing your packets

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



RE: (RADIATOR) Radonline flushing every 2 hours

2002-02-26 Thread Frank Danielson

Hugh-

For general education purposes could you elaborate on Radiator clearing
entries for a NAS if it sees a NAS restart? I'm not sure how Radiator would
detect that event and if some certain Client config is needed support this.

Thanks.

-Original Message-
From: Hugh Irvine [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, February 26, 2002 5:33 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: (RADIATOR) Radonline flushing every 2 hours



Hello Anton -

Please send me a copy of your configuration file (no secrets) together with
a 
trace 4 debug showing what is happening.

Radiator will automatically remove all entries for a NAS if it sees a NAS 
restart, but I can't think of any reason why the entire RADONLINE table
would 
be cleared.

regards

Hugh


On Wed, 27 Feb 2002 08:45, Anton Krall wrote:
> Guys.. Im having problems with my radonline table on mysql.. Seems that
> every 2 hours.. The ocntents flush and start from 0... Anybody has any
> problems like this?
>
> I noticed this because Im graphing the radonline total user count every
> 5 minute from MRTG, and I noticed that every 2 hours.. The database
> flushes and the graph on MRTG looks funny... Like restarted from 0 every
> 2 hours..
>
> Anybody has any ideas?
>
> Saludos
>
> Anton Krall
> Director de Tecnología
> Inter.net México / Panamá
>
> Tel; 5241-7609 Directo
> Tel: 5241-7600 Conmutador
> Celular: 0445-105-5160 Mobile
> ICQ: 4979450
> email:  [EMAIL PROTECTED]
> web: http://www.mx.inter.net
>
> Outside Mexico:
> Office: +52(555)241-7609
> PBX: +52(555)241-7600
> Mobile: +52(555)105-5160
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) re: re config file

2002-02-26 Thread buck lane

ok, i sent you the file, now i got a questoin to get radiator to talk to 
a MS SQL server i have to get an ODBC driver manager ( unixODBC ) a ODBC 
driver ( FreeTDS OOB ) and i need to install perl-DBi and DBD::ODBC so 
radiator can talk to unixODBC, could someone let me know if i am missing 
a step?

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) AuthRADIUS (non)forking problem

2002-02-26 Thread Hugh Irvine


Hello Damir -

As always, many thanks for your very valuable contributions.

Mike will apply the fixes for the next release.

regards

Hugh


On Wed, 27 Feb 2002 00:06, Damir Dzeko wrote:
> Hello,
>
> Using Radiator with AuthRADIUS module to handle requests for GRIC
> authentication I noticed strange problems. Although in my
> configuration was specified that handler for that type of request
> should fork, no forking occured.
>
> That caused our radiusd to block forever(!). That could be because
> some bug exists in Select.pm (in process_timeouts function perhaps?).
>
> Useful information could be that I'm using AuthRADIUS with "Synchronous"
> flag set.
>
> I traced bug to AuthRADIUS::handle_request function which overrides
> default handle_request function defined in its superclass AuthGeneric.
>
> Other Auth* modules which do not redefine handle_request worked fine
> with 'Fork' option set, but this one never forked.
>
> Because of that I added the same piece of code found in
> AuthGeneric::handle_request into AuthRADIUS::handle_request
>
> # Now we might fork before processing the request
> # Should only do this for "slow" authentication methods
> return ($main::IGNORE, 'forked')
>   if $self->{Fork} && !$self->handlerFork;
>
> I hope you will include that in new release of Radiator.
>
> Also, it would be of great help if someone could correct the
> bug that caused my radiusd to wait forever (almost for one
> hour) in this loop:
>
>  while (! defined $p->{RadiusResult})
>   {
>   ...
>
>   &Radius::Select::process_timeouts();
>   }
>  return ($p->{RadiusResult});
>
> During that period users of ISP that I work for could not
> connect to our dial-up service and that is certainly something
> that should happen never again.
>
> -d
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) re config file

2002-02-26 Thread Hugh Irvine


Hello Buck -

Please send me a trace 4 debug from Radiator showing what is happening.

thanks

Hugh


On Wed, 27 Feb 2002 10:13, buck lane wrote:
> hey all, i am trying to use radpwtst to test to see if i can
> authenticate, i am authenticating to a ms sql DB on win2k.  i have
> unixODBC with the FreeTDS OOB.  i can access the database through the
> isql test.  when i try to use radpwtst i get no reply from the server.
> here is an example of my config file
>
>
> Foreground
> #LogStdout
> LogDir/var/log/radius
> DbDir/etc/radiator
> # Use a low trace level in production systems. Increase
> # it to 4 or 5 for debugging, or use the -trace flag to radiusd
> Trace 5
>
> # You will probably want to add other Clients to suit your site,
> # one for each NAS you want to work with
>
> #NAS list
> #
> 
> Identifier usa1
> Secret secret
> 
> 
> Identifier usa2
> Secret secret
> 
> 
> Identifier dci1
> Secret secret
> 
> 
> Identifier dci2
> Secret secret
> 
>
> #authentication
> #
> 
> DBSource dbi:ODBC:dsn_in_unixODBC
> DBUsername root
> DBAuth password
> AuthSelect select password from AUTHDB where username='%n' and
> analogaccess='-1'
> 
>
>
> any comments or help would be great, thanks,
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) re config file

2002-02-26 Thread buck lane

hey all, i am trying to use radpwtst to test to see if i can 
authenticate, i am authenticating to a ms sql DB on win2k.  i have 
unixODBC with the FreeTDS OOB.  i can access the database through the 
isql test.  when i try to use radpwtst i get no reply from the server. 
here is an example of my config file


Foreground
#LogStdout
LogDir/var/log/radius
DbDir/etc/radiator
# Use a low trace level in production systems. Increase
# it to 4 or 5 for debugging, or use the -trace flag to radiusd
Trace 5   

# You will probably want to add other Clients to suit your site,
# one for each NAS you want to work with

#NAS list
#

Identifier usa1
Secret secret


Identifier usa2
Secret secret


Identifier dci1
Secret secret   


Identifier dci2
Secret secret


#authentication
#

DBSource dbi:ODBC:dsn_in_unixODBC
DBUsername root
DBAuth password  
AuthSelect select password from AUTHDB where username='%n' and 
analogaccess='-1'



any comments or help would be great, thanks,

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Radonline flushing every 2 hours

2002-02-26 Thread Hugh Irvine


Hello Anton -

Please send me a copy of your configuration file (no secrets) together with a 
trace 4 debug showing what is happening.

Radiator will automatically remove all entries for a NAS if it sees a NAS 
restart, but I can't think of any reason why the entire RADONLINE table would 
be cleared.

regards

Hugh


On Wed, 27 Feb 2002 08:45, Anton Krall wrote:
> Guys.. Im having problems with my radonline table on mysql.. Seems that
> every 2 hours.. The ocntents flush and start from 0... Anybody has any
> problems like this?
>
> I noticed this because Im graphing the radonline total user count every
> 5 minute from MRTG, and I noticed that every 2 hours.. The database
> flushes and the graph on MRTG looks funny... Like restarted from 0 every
> 2 hours..
>
> Anybody has any ideas?
>
> Saludos
>
> Anton Krall
> Director de Tecnología
> Inter.net México / Panamá
>
> Tel; 5241-7609 Directo
> Tel: 5241-7600 Conmutador
> Celular: 0445-105-5160 Mobile
> ICQ: 4979450
> email:  [EMAIL PROTECTED]
> web: http://www.mx.inter.net
>
> Outside Mexico:
> Office: +52(555)241-7609
> PBX: +52(555)241-7600
> Mobile: +52(555)105-5160
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Time of day login

2002-02-26 Thread Hugh Irvine


Hi Leon -

Ahhh - I didn't understand the question.

I don't actually know what will happen - you might try some experiments and 
let me know the results.

regards

Hugh


On Wed, 27 Feb 2002 03:04, Leon Oosterwijk wrote:
> Hugh,
>
> I was aware of the relevance that Session-Timeout="Until Time" has. Which
> is why I asked what would happen if I used it without a properly matching
> Time attribute.
>
>
> Sincerely,
>
> Leon Oosterwijk
> ISDN-NET Inc.
> www.isdn.net
> +1 615-221-4200
>
> > -Original Message-
> > From: Hugh Irvine [mailto:[EMAIL PROTECTED]]
> > Sent: Monday, February 25, 2002 11:52 PM
> > To: Leon Oosterwijk; [EMAIL PROTECTED]
> > Cc: Leon Oosterwijk
> > Subject: Re: (RADIATOR) Time of day login
> >
> >
> >
> > Hello Leon -
> >
> > The more usual case is to specify a number of seconds as the value
> >
> > Session-Timeout = 3600
> >
> > the "until Time" syntax only has relevance when used in
> > conjunction with a
> > Time check item.
> >
> > regards
> >
> > Hugh
> >
> > > What would happen if I specified a Session-Timeout
> >
> > attribute with the
> >
> > > "AddtoReplyIfNotExist" clause but i didn't specify a Time
> >
> > attribute? I
> >
> > > have a user population where some have time restrictions but others
> > > don't. Would the Session-Timeout = "until Time" cause
> >
> > RADIATOR to sent
> >
> > > weird Sessiontimeouts to the NAS, or would it deny access?
> > >
> > > Leon
> > >
> > > > -Oorspronkelijk bericht-
> > > > Van: Hugh Irvine [mailto:[EMAIL PROTECTED]]
> > > > Verzonden: Monday, February 25, 2002 7:29 PM
> > > > Aan: Leon Oosterwijk; '[EMAIL PROTECTED]'
> > > > Onderwerp: Re: (RADIATOR) Time of day login
> > > >
> > > >
> > > >
> > > > Hello Leon -
> > > >
> > > > The "Time" and "until Time" constructs are Radiator specific.
> > > >
> > > > A reply attribute of
> > > >
> > > > Session-Timeout = "until Time"
> > > >
> > > > will cause Radiator to calculate the Session-Timeout
> >
> > value according
> >
> > > > to the amount of time (number of seconds) remaining until
> >
> > the Time
> >
> > > > check item expires.
> > > >
> > > > As mentioned, check section 13.1.13 in the manual.
> > > >
> > > > regards
> > > >
> > > > Hugh
> > > >
> > > > On Tue, 26 Feb 2002 01:16, Leon Oosterwijk wrote:
> > > > > Is this a RADIUS-interpreted attribute or a NAS-interpreted
> > > > > attribute?
> > > > >
> > > > >
> > > > >
> > > > > Sincerely,
> > > > >
> > > > > Leon Oosterwijk
> > > > > ISDN-NET Inc.
> > > > > www.isdn.net
> > > > > +1 615-221-4200
> > > > >
> > > > > > -Original Message-
> > > > > > From: Hugh Irvine [mailto:[EMAIL PROTECTED]]
> > > > > > Sent: Sunday, February 24, 2002 11:56 PM
> > > > > > To: Barry Andersson; [EMAIL PROTECTED]
> > > > > > Subject: Re: (RADIATOR) Time of day login
> > > > > >
> > > > > >
> > > > > >
> > > > > > Hello Barry -
> > > > > >
> > > > > > You would use a Session-Timout = "until Time" reply attribute.
> > > > > >
> > > > > > See sections 13.1.13 and 13.2.8 in the Radiator
> >
> > reference manual
> >
> > > > > > ("doc/ref.html").
> > > > > >
> > > > > > regards
> > > > > >
> > > > > > Hugh
> > > > > >
> > > > > > On Mon, 25 Feb 2002 15:30, Barry Andersson wrote:
> > > > > > > Hi,
> > > > > > >
> > > > > > > Just wondering if we restrict login by time of day in the
> > > > > >
> > > > > > users file
> > > > > >
> > > > > > > whether it automatically sets the session timeout
> >
> > for one of
> >
> > > > > > > those users.
> > > > > > >
> > > > > > > That is, assuming we allow logins from 9am to 5pm, if
> > > > > >
> > > > > > someone logs in
> > > > > >
> > > > > > > at 4pm will they get a Session-Timeout of 3600 seconds?
> > > > > > >
> > > > > > > If not, is there some way to configure Radiator to do so?
> > > > > > >
> > > > > > > Barry Andersson
> > > > > >
> > > > > > --
> > > > > > Radiator: the most portable, flexible and configurable RADIUS
> > > > > > server anywhere. Available on *NIX, *BSD, Windows 95/98/2000,
> > > > > > NT, MacOS X.
> > > > > > -
> > > > > > Nets: internetwork inventory and management - graphical,
> > > > > > extensible, flexible with hardware, software, platform and
> > > > > > database independence. === Archive at
> > > > > > http://www.open.com.au/archives/radiator/
> > > > > > Announcements on
> > > > > > [EMAIL PROTECTED]
> > > > > > To unsubscribe, email '[EMAIL PROTECTED]' with
> >
> > 'unsubscribe
> >
> > > > > > radiator' in the body of the message.
> > > > >
> > > > > ===
> > > > > Archive at http://www.open.com.au/archives/radiator/
> > > > > Announcements on [EMAIL PROTECTED]
> > > > > To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe
> > > > > radiator' in the body of the message.
> > > >
> > > > --
> > > > Radiator: the most portable, flexible and configurable
> >
> > RADIUS server
> >
> > > > anywhere. Available on *NIX, *BSD, Windows 95/98/2000,
> >
> > NT, MacOS X.
> >
> > > > -
> > > > Nets: internetwork inventory and management - graphical,
> >
> >

(RADIATOR) Radonline flushing every 2 hours

2002-02-26 Thread Anton Krall

Guys.. Im having problems with my radonline table on mysql.. Seems that
every 2 hours.. The ocntents flush and start from 0... Anybody has any
problems like this?

I noticed this because Im graphing the radonline total user count every
5 minute from MRTG, and I noticed that every 2 hours.. The database
flushes and the graph on MRTG looks funny... Like restarted from 0 every
2 hours..

Anybody has any ideas?

Saludos
 
Anton Krall
Director de Tecnología
Inter.net México / Panamá
 
Tel; 5241-7609 Directo 
Tel: 5241-7600 Conmutador
Celular: 0445-105-5160 Mobile
ICQ: 4979450
email:  [EMAIL PROTECTED]
web: http://www.mx.inter.net
 
Outside Mexico:
Office: +52(555)241-7609
PBX: +52(555)241-7600
Mobile: +52(555)105-5160

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



RE: (RADIATOR) Time of day login

2002-02-26 Thread Leon Oosterwijk

Hugh, 

I was aware of the relevance that Session-Timeout="Until Time" has. Which is
why I asked what would happen if I used it without a properly matching Time
attribute. 


Sincerely,

Leon Oosterwijk
ISDN-NET Inc. 
www.isdn.net
+1 615-221-4200 

> -Original Message-
> From: Hugh Irvine [mailto:[EMAIL PROTECTED]] 
> Sent: Monday, February 25, 2002 11:52 PM
> To: Leon Oosterwijk; [EMAIL PROTECTED]
> Cc: Leon Oosterwijk
> Subject: Re: (RADIATOR) Time of day login
> 
> 
> 
> Hello Leon -
> 
> The more usual case is to specify a number of seconds as the value
> 
>   Session-Timeout = 3600
> 
> the "until Time" syntax only has relevance when used in 
> conjunction with a 
> Time check item.
> 
> regards
> 
> Hugh
> 
> 
> >
> > What would happen if I specified a Session-Timeout 
> attribute with the 
> > "AddtoReplyIfNotExist" clause but i didn't specify a Time 
> attribute? I 
> > have a user population where some have time restrictions but others 
> > don't. Would the Session-Timeout = "until Time" cause 
> RADIATOR to sent 
> > weird Sessiontimeouts to the NAS, or would it deny access?
> >
> > Leon
> >
> > > -Oorspronkelijk bericht-
> > > Van: Hugh Irvine [mailto:[EMAIL PROTECTED]]
> > > Verzonden: Monday, February 25, 2002 7:29 PM
> > > Aan: Leon Oosterwijk; '[EMAIL PROTECTED]'
> > > Onderwerp: Re: (RADIATOR) Time of day login
> > >
> > >
> > >
> > > Hello Leon -
> > >
> > > The "Time" and "until Time" constructs are Radiator specific.
> > >
> > > A reply attribute of
> > >
> > >   Session-Timeout = "until Time"
> > >
> > > will cause Radiator to calculate the Session-Timeout 
> value according 
> > > to the amount of time (number of seconds) remaining until 
> the Time 
> > > check item expires.
> > >
> > > As mentioned, check section 13.1.13 in the manual.
> > >
> > > regards
> > >
> > > Hugh
> > >
> > > On Tue, 26 Feb 2002 01:16, Leon Oosterwijk wrote:
> > > > Is this a RADIUS-interpreted attribute or a NAS-interpreted 
> > > > attribute?
> > > >
> > > >
> > > >
> > > > Sincerely,
> > > >
> > > > Leon Oosterwijk
> > > > ISDN-NET Inc.
> > > > www.isdn.net
> > > > +1 615-221-4200
> > > >
> > > > > -Original Message-
> > > > > From: Hugh Irvine [mailto:[EMAIL PROTECTED]]
> > > > > Sent: Sunday, February 24, 2002 11:56 PM
> > > > > To: Barry Andersson; [EMAIL PROTECTED]
> > > > > Subject: Re: (RADIATOR) Time of day login
> > > > >
> > > > >
> > > > >
> > > > > Hello Barry -
> > > > >
> > > > > You would use a Session-Timout = "until Time" reply attribute.
> > > > >
> > > > > See sections 13.1.13 and 13.2.8 in the Radiator 
> reference manual 
> > > > > ("doc/ref.html").
> > > > >
> > > > > regards
> > > > >
> > > > > Hugh
> > > > >
> > > > > On Mon, 25 Feb 2002 15:30, Barry Andersson wrote:
> > > > > > Hi,
> > > > > >
> > > > > > Just wondering if we restrict login by time of day in the
> > > > >
> > > > > users file
> > > > >
> > > > > > whether it automatically sets the session timeout 
> for one of 
> > > > > > those users.
> > > > > >
> > > > > > That is, assuming we allow logins from 9am to 5pm, if
> > > > >
> > > > > someone logs in
> > > > >
> > > > > > at 4pm will they get a Session-Timeout of 3600 seconds?
> > > > > >
> > > > > > If not, is there some way to configure Radiator to do so?
> > > > > >
> > > > > > Barry Andersson
> > > > >
> > > > > --
> > > > > Radiator: the most portable, flexible and configurable RADIUS 
> > > > > server anywhere. Available on *NIX, *BSD, Windows 95/98/2000, 
> > > > > NT, MacOS X.
> > > > > -
> > > > > Nets: internetwork inventory and management - graphical, 
> > > > > extensible, flexible with hardware, software, platform and 
> > > > > database independence. === Archive at 
> > > > > http://www.open.com.au/archives/radiator/
> > > > > Announcements on
> > > > > [EMAIL PROTECTED]
> > > > > To unsubscribe, email '[EMAIL PROTECTED]' with 
> 'unsubscribe 
> > > > > radiator' in the body of the message.
> > > >
> > > > ===
> > > > Archive at http://www.open.com.au/archives/radiator/
> > > > Announcements on [EMAIL PROTECTED]
> > > > To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe 
> > > > radiator' in the body of the message.
> > >
> > > --
> > > Radiator: the most portable, flexible and configurable 
> RADIUS server 
> > > anywhere. Available on *NIX, *BSD, Windows 95/98/2000, 
> NT, MacOS X.
> > > -
> > > Nets: internetwork inventory and management - graphical, 
> extensible, 
> > > flexible with hardware, software, platform and database 
> > > independence.
> >
> > ---
> 
> -- 
> Radiator: the most portable, flexible and configurable RADIUS 
> server anywhere. Available on *NIX, *BSD, Windows 95/98/2000, 
> NT, MacOS X.
> -
> Nets: internetwork inventory and management - graphical, 
> extensible, flexible with hardware, software, platform and 
> database independence.
> 
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscri

(RADIATOR) AuthRADIUS (non)forking problem

2002-02-26 Thread Damir Dzeko

Hello,

Using Radiator with AuthRADIUS module to handle requests for GRIC
authentication I noticed strange problems. Although in my 
configuration was specified that handler for that type of request
should fork, no forking occured.

That caused our radiusd to block forever(!). That could be because
some bug exists in Select.pm (in process_timeouts function perhaps?).

Useful information could be that I'm using AuthRADIUS with "Synchronous"
flag set.

I traced bug to AuthRADIUS::handle_request function which overrides
default handle_request function defined in its superclass AuthGeneric.

Other Auth* modules which do not redefine handle_request worked fine
with 'Fork' option set, but this one never forked.

Because of that I added the same piece of code found in
AuthGeneric::handle_request into AuthRADIUS::handle_request

# Now we might fork before processing the request
# Should only do this for "slow" authentication methods
return ($main::IGNORE, 'forked')
if $self->{Fork} && !$self->handlerFork;

I hope you will include that in new release of Radiator.

Also, it would be of great help if someone could correct the
bug that caused my radiusd to wait forever (almost for one
hour) in this loop:

 while (! defined $p->{RadiusResult})
{
  ...

&Radius::Select::process_timeouts();
}
 return ($p->{RadiusResult});

During that period users of ISP that I work for could not
connect to our dial-up service and that is certainly something
that should happen never again.

-d

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.