Re: (RADIATOR) Determine IP address request came to

2002-08-25 Thread Mike McCauley

Hi Timothy,

On Mon, 26 Aug 2002 12:15, Hugh Irvine wrote:
> Hello Tim -
>
> As far as I know this is an issue with Perl, although I have copied this
> mail to Mike for his comments.

Unfortunately, there appears to be no way in perl (or in C for that matter) 
for an application to discover after the fact what interface address a UDP 
packet arrived on.

Cheers.

>
> BTW - you can see the IP addresses in a packet dump of the incoming
> requests using snoop or tcpdump, but this doesn't really help at the
> application level.
>
> regards
>
> Hugh
>
> On Sunday, August 25, 2002, at 02:28 PM, Timothy G. Wells wrote:
> > Greetings,
> >
> > Has there been anything added to radiator to allow me to determine
> > which IP a request came into radiator with? This is needed for a server
> > with multiple IP's and one radiator process binding to all addresses.
> >
> > I brought this up maybe a year ago but no such attribute existed. I
> > think it would be very helpful in general.
> >
> > Thanks,
> >
> > -- Tim
> >
> >
> > -- This message has been scanned for viruses and
> > dangerous content by IntelliBlock MailScanner (www.intelliblock.net),
> > and is
> > believed to be clean.
> >
> > ===
> > Archive at http://www.open.com.au/archives/radiator/
> > Announcements on [EMAIL PROTECTED]
> > To unsubscribe, email '[EMAIL PROTECTED]' with
> > 'unsubscribe radiator' in the body of the message.
>
> NB: I am travelling this week, so there may be delays in our
> correspondence.

-- 
Mike McCauley   [EMAIL PROTECTED]
Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985   Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, Active Directory etc etc 
on Unix, Win95/8, 2000, NT, MacOS 9, MacOS X etc etc

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Determine IP address request came to

2002-08-25 Thread Hugh Irvine


Hello Tim -

As far as I know this is an issue with Perl, although I have copied this 
mail to Mike for his comments.

BTW - you can see the IP addresses in a packet dump of the incoming 
requests using snoop or tcpdump, but this doesn't really help at the 
application level.

regards

Hugh


On Sunday, August 25, 2002, at 02:28 PM, Timothy G. Wells wrote:

> Greetings,
>
> Has there been anything added to radiator to allow me to determine 
> which IP a request came into radiator with? This is needed for a server 
> with multiple IP's and one radiator process binding to all addresses.
>
> I brought this up maybe a year ago but no such attribute existed. I 
> think it would be very helpful in general.
>
> Thanks,
>
> -- Tim
>
>
> -- This message has been scanned for viruses and
> dangerous content by IntelliBlock MailScanner (www.intelliblock.net), 
> and is
> believed to be clean.
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
>
>

NB: I am travelling this week, so there may be delays in our 
correspondence.

--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Session-Timeout = "until nnnn" ??

2002-08-25 Thread Hugh Irvine


Hello Brian -

Could you please send me a copy of your configuration file (no secrets) 
together with a trace 4 debug from Radiator showing what is happening. I 
would also like to see the user record that is being used.

thanks

Hugh


On Saturday, August 24, 2002, at 09:22 AM, [EMAIL PROTECTED] wrote:

>
> Hi Folks,
>
> I am using Radiator 2.18.2 which, according to the ref manual allows a 
> reply
> parameter like this..
>
> Session-Timeout="until 0250"
>
> Which is supposed to set the session-timeout value to the number of 
> seconds
> between now and 2:50am.
>
> It doesnt work for me.  Rather than upgrading needlessly (everything 
> else works
> perfectly) am I setting it wrong or is it broken in 2.18.2
>
> The error in the logfile says :
>
> There is no value named until 0250 for attribute Session-Timeout. Using 
> 0.
>
>
> We already set the session-timeout parameter using session-timeout = 
> 86400 (1
> day) and this works fine.  Changing 604800 to "until 0250" (with double 
> quotes)
> breaks it.
>
> Regards,  Brian.
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
>
>

NB: I am travelling this week, so there may be delays in our 
correspondence.

--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) USR/3Com Total Control and radiator

2002-08-25 Thread Hugh Irvine


Hi Bob -

The thing to do is put a packet sniffer (snoop/tcpdump/ethereal/...) on 
the ethernet interface where the current radius server is running and 
have a look at the radius packet dumps to see what radius attributes are 
used. Once you know what is required it is quite simple to configure 
Radiator to do the same thing.

regards

Hugh


On Friday, August 23, 2002, at 05:26 PM, Bob Shafer wrote:

> We're using radiator to handle our Cisco VPN servers, amoung other 
> things.
>
> We still have some modems, USR Total Control modems, that we keep 
> thinking
> will go away, but they don't.  We're using 3Com's radius server for
> authentication and accounting.  I'd like to get rid of those servers and
> just use Radiator.
>
> I've read in the documenation and the FAQ about using the two together,
> and looked in the goodies file.  I *think* the authentication and
> accounting will be pretty straight forward.  But I'll have to try it to
> see.
>
> What I'm running up against is that these modems are old enough that we
> implemented "menus" on them to allow for limited telnet access for
> character cell terminals as well as for ppp and slip.
>
> So someone can log on and "type" a login and password, then enter a host
> name or "ppp" or "slip" to connect.
>
> I just checked our logs in the vague hope that no one is still accessing
> the modems in this manner and everyone was using ppp.  It seems we still
> have a fair number of folks who use the telnet capability, and some who
> even have scripts that enter "slip" or "ppp" rather than letting their
> systems negotiate ppp.
>
> So I might be stuck with having to implement the "menu" from Radiator.
> Being careful not change anything so that I don't break old, and 
> reliable,
> scripts.
>
> The 3Com radiuis server seems to implement these in their user
> configuration file by using "templates" and "scripts" but I have no idea
> how to translate that concept to Radiator.
>
> Has anyone done this, and/or can someone give me some pointers on the
> subject.
>
> Thanks,
>
> Bob Shafer
> University of Denver
>
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
>
>

NB: I am travelling this week, so there may be delays in our 
correspondence.

--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



RE: (RADIATOR) Determine IP address request came to

2002-08-25 Thread Martin Edge

Ah, re-reading, I now understand your query ..

Not in the list I have of attributes, anyhow..



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On
Behalf Of Martin Edge
Sent: Monday, August 26, 2002 9:07 AM
To: Timothy G. Wells; [EMAIL PROTECTED]
Subject: RE: (RADIATOR) Determine IP address request came to


I think %c..

Check the docco

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On
Behalf Of Timothy G. Wells
Sent: Sunday, August 25, 2002 10:29 PM
To: [EMAIL PROTECTED]
Subject: (RADIATOR) Determine IP address request came to


Greetings,

Has there been anything added to radiator to allow me to determine which IP
a request came into radiator with? This is needed for a server with
multiple IP's and one radiator process binding to all addresses.

I brought this up maybe a year ago but no such attribute existed. I think
it would be very helpful in general.

Thanks,

-- Tim


--
This message has been scanned for viruses and
dangerous content by IntelliBlock MailScanner (www.intelliblock.net), and is
believed to be clean.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



RE: (RADIATOR) Determine IP address request came to

2002-08-25 Thread Martin Edge

I think %c..

Check the docco

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On
Behalf Of Timothy G. Wells
Sent: Sunday, August 25, 2002 10:29 PM
To: [EMAIL PROTECTED]
Subject: (RADIATOR) Determine IP address request came to


Greetings,

Has there been anything added to radiator to allow me to determine which IP
a request came into radiator with? This is needed for a server with
multiple IP's and one radiator process binding to all addresses.

I brought this up maybe a year ago but no such attribute existed. I think
it would be very helpful in general.

Thanks,

-- Tim


--
This message has been scanned for viruses and
dangerous content by IntelliBlock MailScanner (www.intelliblock.net), and is
believed to be clean.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) Determine IP address request came to

2002-08-25 Thread Timothy G. Wells

Greetings,

Has there been anything added to radiator to allow me to determine which IP 
a request came into radiator with? This is needed for a server with 
multiple IP's and one radiator process binding to all addresses.

I brought this up maybe a year ago but no such attribute existed. I think 
it would be very helpful in general.

Thanks,

-- Tim


-- 
This message has been scanned for viruses and
dangerous content by IntelliBlock MailScanner (www.intelliblock.net), and is
believed to be clean.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Session-Timeout = "until nnnn" ??

2002-08-25 Thread Brian Morris

> I remember playing with that reply value and I remember making it work..
> have you tried using  the value  as a time instead of as an integer..
> something like  02:50 instead of 0250?

Yep,

Also tried single quotes and permutations of 02:50 2:50 0250 and 250 all
with the same error as a result.

I'm still working on it though.

Regards,  Brian.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.