Re: (RADIATOR) Log Directory unavailable

2003-10-10 Thread Hugh Irvine
Hello Kevin -

You should really only use local disks for log files.

For remote logging you should use  or .

Most operators tend to use SQL databases for user definitions, 
accounting and logging.

regards

Hugh

On Saturday, Oct 11, 2003, at 04:05 Australia/Melbourne, Kevin McKee 
wrote:

We are running RADIATOR 3.7 under Solaris on 4 servers.  I'd like to 
be able to have all four servers put their log files in the same 
place, so I created a file share on a fifth machine and pointed all of 
the log files to that machine.  However, when then network connection 
is dropped to the log server, all four RADIATOR servers stop 
responding to RADIUS requests and the process won't even respond to a 
SIGHUP.
 
Is there a way to create a backup Log Directory that RADIATOR will 
switch to if the primary directory is unavailable?  Or is there a 
better way to get my log files and details files in the same place?
 
-    _   _
Kevin McKee, Network Mgr   _ __ | |_(_)
Northwest Telephone, Inc. | '_ \| __| |
Tel: +1 509 661 2000 x112 | | | | |_| |
Fax: +1 509 661 2020  |_| |_|\__|_|
 
-
This email and the files transmitted with it are confidential
and intended solely for the use of the individual or entity to
which they are addressed. If you have received this email in
error, please notify the sender.



This footnote also confirms that this email message
and attachments have been scanned for the presence
of computer viruses.
-
NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.


Re: (RADIATOR) Log Directory unavailable

2003-10-10 Thread Stegen Smith
Good Afternoon Kevin,

Perhaps on the fifth machine you can just set it up as a syslog server.  
Setup Radiator to use , vs .  I'd probably set the 
Facility to something other than 'user' (which is the default radiator 
uses) within the radiator configuration.  (See Radiator Manual section 
6.11.1) So then you can configure the syslog server to log to say 
'/var/adm/radiator.log' vs '/var/adm/messages'.

Now I've never tried this before, but I'm just going on what the 
documetation says you can do, and what we know syslog should be able to 
do. ;)

My 2 cents, hopefully they're worth that!

Stegen

Kevin McKee wrote:

We are running RADIATOR 3.7 under Solaris on 4 servers.  I'd like to be 
able to have all four servers put their log files in the same place, so 
I created a file share on a fifth machine and pointed all of the log 
files to that machine.  However, when then network connection is dropped 
to the log server, all four RADIATOR servers stop responding to RADIUS 
requests and the process won't even respond to a SIGHUP.

 
Is there a way to create a backup Log Directory that RADIATOR will 
switch to if the primary directory is unavailable?  Or is there a 
better way to get my log files and details files in the same place?
 
-_   _
Kevin McKee, Network Mgr   _ __ | |_(_)
Northwest Telephone, Inc. | '_ \| __| |
Tel: +1 509 661 2000 x112 | | | | |_| |
Fax: +1 509 661 2020  |_| |_|\__|_|
 
-
This email and the files transmitted with it are confidential
and intended solely for the use of the individual or entity to
which they are addressed. If you have received this email in
error, please notify the sender.
This footnote also confirms that this email message
and attachments have been scanned for the presence
of computer viruses.
-


--
-
Stegen Smith
Systems Engineer | Network Services
NetLojix Communications, Inc.
e - [EMAIL PROTECTED]
v - 805.884.6300
f - 805.884.6311
w - www.netlojix.com
-
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.


(RADIATOR) Log Directory unavailable

2003-10-10 Thread Kevin McKee
Title: Message



We are running 
RADIATOR 3.7 under Solaris on 4 servers.  I'd like to be able to have all 
four servers put their log files in the same place, so I created a file share on 
a fifth machine and pointed all of the log files to that machine.  However, 
when then network connection is dropped to the log server, all four 
RADIATOR servers stop responding to RADIUS requests and the process won't 
even respond to a SIGHUP.
 
Is there a way to 
create a backup Log Directory that RADIATOR will switch to if the primary 
directory is unavailable?  Or is there a better way to get my log files and 
details files in the same place?
 
-    
_   _ Kevin McKee, Network 
Mgr   _ __ | |_(_) Northwest Telephone, Inc. | '_ \| __| | Tel: +1 509 661 2000 x112 | | | | |_| | 
Fax: +1 509 661 
2020  |_| |_|\__|_| 
 
-
This email and the files transmitted with it are confidential
and intended solely for the use of the individual or entity to 
which they are addressed. If you have received this email in
error, please notify the sender.

This footnote also confirms that this email message
and attachments have been scanned for the presence 
of computer viruses.
-




(RADIATOR) Mailing list policy

2003-10-10 Thread Mike McCauley
Hello all,

Open System Consultants operates a number of free access mailing lists
(including this one) for the benefit of the user community.

We have recently clarified our policies concerning the use of and our
participation on these lists, and we would like to bring them to the
attention of all list subscribers.  The policy is documented at:

http://www.open.com.au/mailistpolicy.html

Cheers.

-- 
Mike McCauley   [EMAIL PROTECTED]
Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985   Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, 
TTLS, PEAP etc on Unix, Windows, MacOS etc.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.


Re: (RADIATOR) AddToReply

2003-10-10 Thread Hugh Irvine
Hello Andrea -

If you want to add the attributes shown below for everyone that does 
not have them set in their reply attributes (ie. only have the ones 
that are different in the user records) you should do something like 
this:


.
AddToReplyIfNotExist Class = 3, Idle-Timeout = 600


I see from your other mail that you have already learned how to change 
the AuthSelect statement.

regards

Hugh

On Friday, Oct 10, 2003, at 11:36 Australia/Melbourne, Andrea 
Brancatelli wrote:

in my SUBSCRIBERS table I have the following entry:

Username = ugo
Password = 
Checkattr = (NULL)
ReplyAttr = 'Class = 3, Idle-Timeout = 600'
TimeLeft = (NULL)
WHERE am I supposed to see the replyattr? The access point is not 
doing what is specified there and radpwtst doesn't show any reply 
attribute as well. what's wrong?

I have to send "Class = 3, Idle-Timeout = 600" to almost anyone. How 
do I do that? The best solution would be a per-user granularity (so 
the SUBSCRIBERS table fits) but it doesn't seem to work.

Any suggestion?

here's radpwtst output:

Reading dictionary file '/etc/radiator/dictionary'
sending Access-Request...
Packet dump:
*** Sending to 127.0.0.1 port 1645 
Code:   Access-Request
Identifier: 161
Authentic:  1234567890123456
Attributes:
    User-Name = "ugo"
    Service-Type = Framed-User
    NAS-IP-Address = 203.63.154.1
    NAS-Port = 1234
    Called-Station-Id = "123456789"
    Calling-Station-Id = "987654321"
    NAS-Port-Type = Async
    User-Password = 
"<145>g<172><177><131><203><179>k<178>1<195>]<152><25>7<136>"

Packet dump:
*** Received from 127.0.0.1 port 1645 
Code:   Access-Accept
Identifier: 161
Authentic:  <132>|<244>c<160><148><17><28><28>kxD<144>
Attributes:
OK
sending Accounting-Request Start...
Packet dump:
*** Sending to 127.0.0.1 port 1646 
Code:   Accounting-Request
Identifier: 162
Authentic:  <0><0><0><0><0><0><0><0><0><0><0><0><0><0><0><0>
Attributes:
    User-Name = "ugo"
    Service-Type = Framed-User
    NAS-IP-Address = 203.63.154.1
    NAS-Port = 1234
    NAS-Port-Type = Async
    Acct-Session-Id = "1234"
    Acct-Status-Type = Start
    Called-Station-Id = "123456789"
    Calling-Station-Id = "987654321"
    Acct-Delay-Time = 0
Packet dump:
*** Received from 127.0.0.1 port 1646 
Code:   Accounting-Response
Identifier: 162
Authentic:  -<203>Fc<170>z~f<169><19><233><139><223><231>8<225>
Attributes:
OK
sending Accounting-Request Stop...
Packet dump:
*** Sending to 127.0.0.1 port 1646 
Code:   Accounting-Request
Identifier: 163
Authentic:  <0><0><0><0><0><0><0><0><0><0><0><0><0><0><0><0>
Attributes:
    User-Name = "ugo"
    Service-Type = Framed-User
    NAS-IP-Address = 203.63.154.1
    NAS-Port = 1234
    NAS-Port-Type = Async
    Acct-Session-Id = "1234"
    Acct-Status-Type = Stop
    Called-Station-Id = "123456789"
    Calling-Station-Id = "987654321"
    Acct-Delay-Time = 0
    Acct-Session-Time = 1000
    Acct-Input-Octets = 2
    Acct-Output-Octets = 3
Packet dump:
*** Received from 127.0.0.1 port 1646 
Code:   Accounting-Response
Identifier: 163
Authentic:  
<248>a<136>X<242><233><202><174><164>v<152><194><218><22>A<8>
Attributes:

OK


NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.