(RADIATOR) Internal Session Database

2003-11-02 Thread DUFOUR Geoffrey
Hello,

When working with an internal session database, how can I :

- clear an active session for a user in case of lost Accounting-Stop (I
don't know the Nas-Port value)
- clear all active sessions for a NAS

Remark : I don't want to use the NAS querying feature of Radiator.

If not possible :

Knowing that an Internal Session DB is faster than a SQL Session DB, it
would be great to have some kind of CLI allowing to view the content of
the internal session db (or to dump it to a file), to clear an active
session for a user and to clear all active sessions for a NAS.

But I guess I am not the first one to ask for this feature.

Regards.

Geoffrey
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.


(RADIATOR) Using LDAP in PreAuthHook

2003-11-02 Thread Harrison Ng
Title: Using LDAP in PreAuthHook





Hi,


My problem is when radiator processing accounting request packets (ie. accounting-start/accounting-stop),
it should query external LDAP database for new attribute-value (a-v) pairs, then either append/replace these 
a-v pairs to/in current request packet.


Can anyone give me direction on how to write PreAuthHook using LDAP and how to call functions in AuthLDAP2.pm modules.


Regards,
Harrison



** This Email is virus-scanned and identified clean.


Re: (RADIATOR) Internal Session Database

2003-11-02 Thread Hugh Irvine
Hello Geoffrey -

The Radiator session database (internal or external) tries to be 
self-healing, which is why a Delete is done when any new access 
request is received, using the NAS/NAS-Port combination. All existing 
sessions for a NAS are removed automatically when an Accounting-On is 
received, indicating that the NAS has restarted (there are also some 
other conditions - check the code for details).

It isn't really possible to do much with the internal session database, 
and the information is only relevant for a particular running instance 
of Radiator. If you want external visibility and persistence, you 
should use an SQL database.

regards

Hugh

On 02/11/2003, at 11:38 PM, DUFOUR Geoffrey wrote:

Hello,

When working with an internal session database, how can I :

- clear an active session for a user in case of lost Accounting-Stop (I
don't know the Nas-Port value)
- clear all active sessions for a NAS
Remark : I don't want to use the NAS querying feature of Radiator.

If not possible :

Knowing that an Internal Session DB is faster than a SQL Session DB, it
would be great to have some kind of CLI allowing to view the content of
the internal session db (or to dump it to a file), to clear an active
session for a user and to clear all active sessions for a NAS.
But I guess I am not the first one to ask for this feature.

Regards.

Geoffrey
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.


NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.


Re: (RADIATOR) Using LDAP in PreAuthHook

2003-11-02 Thread Hugh Irvine
Hello Harrison -

This topic has been discussed on the list several times:

	www.open.com.au/archives/radiator

And there are some example hooks in the file goodies/hooks.txt.

BTW - it might be simpler to use the Class attribute when processing 
the access request.

regards

Hugh

On 03/11/2003, at 2:28 PM, Harrison Ng wrote:

Hi,

My problem is when radiator processing accounting request packets (ie. 
accounting-start/accounting-stop),
it should query external LDAP database for new attribute-value (a-v) 
pairs, then either append/replace these
a-v pairs to/in current request packet.

Can anyone give me direction on how to write PreAuthHook using LDAP 
and how to call functions in AuthLDAP2.pm modules.

Regards,
Harrison
InterScan_Disclaimer.txt
NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.