(RADIATOR) Re: SNMP software for Simultaneous-Use attribute
Hugh: I made a mistake. The version I have not been able to get is for Windows. The URL you sent me is for Linux. 'Tunde Ogedengbe Linkserve Limited Plot 308, Adeola Odeku Street Victoria Island Lagos - Nigeria Tel: +234 1 2623900 Fax: +234 1 2623906 URL: http://www.linkserve.net - Original Message - From: "Hugh Irvine" <[EMAIL PROTECTED]> To: "'Tunde Ogedengbe" <[EMAIL PROTECTED]>; "Mike McCauley" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Tuesday, January 22, 2002 1:51 AM Subject: Re: SNMP software for Simultaneous-Use attribute > > Hello 'Tunde - > > You should use the NET-SNMP package available from Sourceforge. > > http://sourceforge.net/projects/net-snmp/ > > regards > > Hugh > > > On Tue, 22 Jan 2002 01:20, 'Tunde Ogedengbe wrote: > > Help > > > > I need help from anyone using RADIATOR on Linux. We have not been able to > > implement Simultaneous-Use successfuly because of our inability to obtain > > install a Linux-based SNMP software. Can anyone help pls? > > > > 'Tunde > > -- > Radiator: the most portable, flexible and configurable RADIUS server > anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. > - > Nets: internetwork inventory and management - graphical, extensible, > flexible with hardware, software, platform and database independence. === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) SNMP software for Simultaneous-Use attribute
Help I need help from anyone using RADIATOR on Linux. We have not been able to implement Simultaneous-Use successfuly because of our inability to obtain install a Linux-based SNMP software. Can anyone help pls? 'Tunde === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Some Problems with Encrypted Password
I need guidelines on Password encryption. We are running SQL Server based customer system on Windows 2000. We desire to encrypt the password on the SQL platform to ensure that our Customer database is not hijacked. Going through your manual, there is ONLY a reference to Unix encrypted password. How do we successfully interface RADIUS with our external SQL server based Database with encrypted password? We need to obtain a Windows based SNMPget software to enable us query the Netservers directly to check customer simultaneous logins. Can you pls help with any reference? 'Tunde Ogedengbe Linkserve Limited Plot 308, Adeola Odeku Street Victoria Island Lagos - Nigeria Tel: +234 1 2623900 Fax: +234 1 2623906 URL: http://www.linkserve.net - Original Message - From: "Hugh Irvine" <[EMAIL PROTECTED]> To: "Sam Silvester" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Wednesday, November 28, 2001 9:42 PM Subject: Re: (RADIATOR) Error message on startup > > Hello Sam - > > It sounds like you have a problem with your dictionary file. You > should always start with the standard Radiator dictionary (in the > file called "dictionary" in the distribution and add or delete > entries from it with your favourite text editor. > > BTW - the latest version is Radiator 2.19 and you should really upgrade. > > regards > > Hugh > > > > At 12:58 +1030 01/11/26, Sam Silvester wrote: > >Hi everyone. > > > >I'm getting the following when I start Radiator: (I've turned trace up to 4) > > > >Use of uninitialized value in concatenation (.) at Radius/Rdict.pm line 167, > > line 730. > >... > > > >... > >Use of uninitialized value in concatenation (.) at Radius/Rdict.pm line 167, > > line 770. > >Use of uninitialized value in length at radiusd line 312. > >Use of uninitialized value in numeric eq (==) at radiusd line 329. > >Use of uninitialized value in numeric eq (==) at radiusd line 365. > >Use of uninitialized value in numberic ne (!=) at radiusd line 175. > >Use of uninitialized value in subtraction (-) at radiusd line 177. > > > >Now the server seems to start fine apart from that. In the log file I get > > > >INFO: Server started: Radiator 2.17.1 on radiusserver.network.big > > > >but using radpwtst I get "No Reply" for everything! > > > >Any help much appreciated! > > > >-Sam. > > > >=== > >Archive at http://www.open.com.au/archives/radiator/ > >Announcements on [EMAIL PROTECTED] > >To unsubscribe, email '[EMAIL PROTECTED]' with > >'unsubscribe radiator' in the body of the message. > > -- > > NB: I am travelling this week, so there may be delays in our correspondence. > > Radiator: the most portable, flexible and configurable RADIUS server > anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, > Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc. > Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X. > === > Archive at http://www.open.com.au/archives/radiator/ > Announcements on [EMAIL PROTECTED] > To unsubscribe, email '[EMAIL PROTECTED]' with > 'unsubscribe radiator' in the body of the message. === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Re: UseAddressHInt Problems
I have implemented UseAddressHint option to allow customers connect with specific Framed-IP-Address addresses on their machines. However, the system rather than use the specified IPs is allocating from its pool to the connect. What can be wrong? I am using Radiator 2.18 'Tunde Ogedengbe Linkserve Limited 22 Akin Adesola Street Victoria Island Lagos - Nigeria Tel: +234 1 2623900 Fax: +234 1 2623906 URL: http://www.linkserve.net - Original Message - > From: "Hugh Irvine" <[EMAIL PROTECTED]> > To: "Kyle" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> > Sent: Saturday, August 11, 2001 1:48 AM > Subject: Re: (RADIATOR) Handler clause > > > > > > Hello Kyle - > > > > What you show below is not correct. Keep in mind that what is used in > either > > Realms or Handlers is the information received in the incoming request > (for > > the most part). > > > > If you want to send different attributes to different NAS clients, you > should > > use the PostAuthHook construct, perhaps in conjunction with a StartupHook > > and/or some information in a database. > > > > There are some example hooks that implement a scheme like this in the file > > called "goodies/hooks.txt" in the Radiator distribution. > > > > Alternatively you could do something like this: > > > > # define Client clauses with Identifiers > > > > > > Identifier Ascend > > .. > > > > > > > > Identifier Patton > > .. > > > > > > # define Handlers > > > > > > .. > > > > > > > > .. > > > > > > Note that the above will work for a small number of Realms and NAS's, but > for > > anything more you should consider the hooks. > > > > regards > > > > Hugh > > > > > > On Saturday 11 August 2001 01:58, Kyle wrote: > > > Hugh, > > > Is is legal in the realms.cfg file to place a clause indside > > > of a clause? Lets say if I wanted to do something like: > > > > > > > > > > > > > > > > > > > > > // Make some replies > > > > > > > > > // Make some other replies > > > > > > > > > > > > > > > > > > > > > I remember reading something on this, but cant find it again. Basicaly, > > > I want to be able to take a single value, such as idle-timeout, and be > > > able to pass it to a nas in its correct format. I.E, out Ascend would > > > take the value as Ascend-Idle-Timeout where as our Patton would take the > > > value as just Idle-Timeout. > > > > -- > > Radiator: the most portable, flexible and configurable RADIUS server > > anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. > > - > > Nets: internetwork inventory and management - graphical, extensible, > > flexible with hardware, software, platform and database independence. > > === > > Archive at http://www.open.com.au/archives/radiator/ > > Announcements on [EMAIL PROTECTED] > > To unsubscribe, email '[EMAIL PROTECTED]' with > > 'unsubscribe radiator' in the body of the message. > > > === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) patch for getProfiles
Mike/Hugh:
I have a profile file with each attribute of the profile having a minimum of
150 characters. I have observed that only the first profile works
successfully. Other reply attributes for profiles after the next one do not
attach to user connections. We are using ver 2.18. Is there anything you
can do for us?
'Tunde Ogedengbe
Linkserve Limited
22 Akin Adesola Street
Victoria Island
Lagos - Nigeria
Tel: +234 1 2623900
> Fax: +234 1 2623906
> URL: http://www.linkserve.net
> - Original Message -
> From: "Mike McCauley" <[EMAIL PROTECTED]>
> To: "Christian Hammers" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> Sent: Wednesday, April 19, 2000 3:10 PM
> Subject: Re: (RADIATOR) patch for getProfiles
>
>
> > Hi Christian.
> >
> > Thanks for the patch. We have applied it for the next release.
> >
> > Cheers.
> >
> > On Apr 18, 1:02pm, Christian Hammers wrote:
> > > Subject: (RADIATOR) patch for getProfiles
> > > Hello
> > >
> > > The problem I reported regarding the cut off in getProfiles has had
> > > a different cause. (the position 254 was arbitrary):
> > > Some attributes like the vendor-specifig cisco-avpair attributes
> requires
> > > colons in them causing the getProfiles function to fail as it takes
> > > colons as seperators itself. Here's a working patch:
> > >
> > > bye,
> > >
> > > -christian-
> > >
> > > --- getProfiles.orig Tue Apr 18 12:44:38 2000
> > > +++ getProfiles Tue Apr 18 12:59:15 2000
> > > @@ -33,7 +33,6 @@
> > > && return);
> > >
> > > my $record;
> > > -my ($profile, $identifier, $attributes);
> > >
> > > while ()
> > > {
> > > @@ -42,14 +41,14 @@
> > > next if /^#/ || /^\s*$/;
> > >
> > > chomp($record = $_);
> > > -
> > > - if(($profile, $identifier, $attributes)
> > > - = split(/:/, $record))
> > > +
> > > + # Format: $profile:$identifier:$attributes
> > > + # We cannot use split due to ':' in attributes like cisco-avpair
> > > + if ($record =~ /^([^:]+):([^:]+):(.*)/)
> > > {
> > > # add Profile to GlobalVars for use by PostAuthHook
> > > - &main::log($main::LOG_DEBUG,
> > > - "setVariable |".$profile.$identifier."|,|".$attributes."|");
> > > - &main::setVariable($profile.$identifier, $attributes);
> > > + &main::log($main::LOG_DEBUG,"setVariable |$1|.|$2|=|$3|");
> > > + &main::setVariable($1.$2, $3);
> > > }
> > > }
> > > close(FILE);
> > >
> > > --
> > > Christian HammersWESTEND GmbH - Aachen und Dueren Tel
> 0241/701333-0
> > > [EMAIL PROTECTED] Internet & Security for ProfessionalsFax
> 0241/911879
> > >
> > > ===
> > > Archive at http://www.starport.net/~radiator/
> > > Announcements on [EMAIL PROTECTED]
> > > To unsubscribe, email '[EMAIL PROTECTED]' with
> > > 'unsubscribe radiator' in the body of the message.
> > >-- End of excerpt from Christian Hammers
> >
> >
> >
> > --
> > Mike McCauley [EMAIL PROTECTED]
> > Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
> > 24 Bateman St Hampton, VIC 3188 Australia http://www.open.com.au
> > Phone +61 3 9598-0985 Fax +61 3 9598-0955
> >
> > Radiator: the most portable, flexible and configurable RADIUS server
> > anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
> > Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
> > 2000, NT, MacOS X
> > ===
> > Archive at http://www.starport.net/~radiator/
> > Announcements on [EMAIL PROTECTED]
> > To unsubscribe, email '[EMAIL PROTECTED]' with
> > 'unsubscribe radiator' in the body of the message.
> >
>
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
(RADIATOR) Re: GetProfile
I have created a table of profiles to return various attributes for> different categories of customers. Only attrributes of the 1st profile are being returned successfully. The others are ignored. What can be the problem? Below is my profile table: email:3com:Idle-Timeout =120,Framed-Protocol=PPP,Framed-IP-Netmask=255.255.255.0, USR-IP-Input-Filter = "1 ACCEPT dst-addr = x.x.x.x/19",USR-IP-Input-Filter = "2 DENY" full:3com:Idle-Timeout = 120,Framed-Protocol=PPP,Framed-IP-Netmask=255.255.255.0 full-x.x.x.x:3com:Idle-Timeout = 120,Framed-Protocol=PPP,Framed-IP-Netmask=255.255.255.0,Framed-IP-Address =x.x.x.x full-x.x.x.x:3com:Idle-Timeout =120,Framed-Protocol=PPP,Framed-IP-Netmask=255.255.255.0,Framed-IP-Address = x.x.x.x full-y.y.y.y:3com:Idle-Timeout =120,Framed-Protocol=PPP,Framed-IP-Netmask=255.255.255.0,Framed-IP-Address = y.y.y.y === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) patch for getProfiles
Mike/Hugh:
I have a profile file with each attribute of the profile having a minimum of
150 characters. I have observed that only the first profile works
successfully. Other reply attributes for profiles after the next one do not
attach to user connections. We are using ver 2.18. Is there anything you
can do for us?
'Tunde Ogedengbe
Linkserve Limited
22 Akin Adesola Street
Victoria Island
Lagos - Nigeria
Tel: +234 1 2623900
Fax: +234 1 2623906
URL: http://www.linkserve.net
- Original Message -
From: "Mike McCauley" <[EMAIL PROTECTED]>
To: "Christian Hammers" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Wednesday, April 19, 2000 3:10 PM
Subject: Re: (RADIATOR) patch for getProfiles
> Hi Christian.
>
> Thanks for the patch. We have applied it for the next release.
>
> Cheers.
>
> On Apr 18, 1:02pm, Christian Hammers wrote:
> > Subject: (RADIATOR) patch for getProfiles
> > Hello
> >
> > The problem I reported regarding the cut off in getProfiles has had
> > a different cause. (the position 254 was arbitrary):
> > Some attributes like the vendor-specifig cisco-avpair attributes
requires
> > colons in them causing the getProfiles function to fail as it takes
> > colons as seperators itself. Here's a working patch:
> >
> > bye,
> >
> > -christian-
> >
> > --- getProfiles.orig Tue Apr 18 12:44:38 2000
> > +++ getProfiles Tue Apr 18 12:59:15 2000
> > @@ -33,7 +33,6 @@
> > && return);
> >
> > my $record;
> > -my ($profile, $identifier, $attributes);
> >
> > while ()
> > {
> > @@ -42,14 +41,14 @@
> > next if /^#/ || /^\s*$/;
> >
> > chomp($record = $_);
> > -
> > - if(($profile, $identifier, $attributes)
> > - = split(/:/, $record))
> > +
> > + # Format: $profile:$identifier:$attributes
> > + # We cannot use split due to ':' in attributes like cisco-avpair
> > + if ($record =~ /^([^:]+):([^:]+):(.*)/)
> > {
> > # add Profile to GlobalVars for use by PostAuthHook
> > - &main::log($main::LOG_DEBUG,
> > - "setVariable |".$profile.$identifier."|,|".$attributes."|");
> > - &main::setVariable($profile.$identifier, $attributes);
> > + &main::log($main::LOG_DEBUG,"setVariable |$1|.|$2|=|$3|");
> > + &main::setVariable($1.$2, $3);
> > }
> > }
> > close(FILE);
> >
> > --
> > Christian HammersWESTEND GmbH - Aachen und Dueren Tel
0241/701333-0
> > [EMAIL PROTECTED] Internet & Security for ProfessionalsFax
0241/911879
> >
> > ===
> > Archive at http://www.starport.net/~radiator/
> > Announcements on [EMAIL PROTECTED]
> > To unsubscribe, email '[EMAIL PROTECTED]' with
> > 'unsubscribe radiator' in the body of the message.
> >-- End of excerpt from Christian Hammers
>
>
>
> --
> Mike McCauley [EMAIL PROTECTED]
> Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
> 24 Bateman St Hampton, VIC 3188 Australia http://www.open.com.au
> Phone +61 3 9598-0985 Fax +61 3 9598-0955
>
> Radiator: the most portable, flexible and configurable RADIUS server
> anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
> Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
> 2000, NT, MacOS X
> ===
> Archive at http://www.starport.net/~radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
>
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
(RADIATOR) GetProfile
I have created a table of profiles to return various attributes for different categories of customers. Only attrributes of the 1st profile are being returned successfully. The others are ignored. What can be the problem? Below is my profile table: email:3com:Idle-Timeout = 120,Framed-Protocol=PPP,Framed-IP-Netmask=255.255.255.0, USR-IP-Input-Filter = "1 ACCEPT dst-addr = x.x.x.x/19",USR-IP-Input-Filter = "2 DENY" full:3com:Idle-Timeout = 120,Framed-Protocol=PPP,Framed-IP-Netmask=255.255.255.0 full-x.x.x.x:3com:Idle-Timeout = 120,Framed-Protocol=PPP,Framed-IP-Netmask=255.255.255.0,Framed-IP-Address = x.x.x.x full-x.x.x.x:3com:Idle-Timeout = 120,Framed-Protocol=PPP,Framed-IP-Netmask=255.255.255.0,Framed-IP-Address = x.x.x.x full-y.y.y.y:3com:Idle-Timeout = 120,Framed-Protocol=PPP,Framed-IP-Netmask=255.255.255.0,Framed-IP-Address = y.y.y.y === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Re: Grouping Check & Repl Attributes
I have different Check & Reply Attributes for different categories of customers. For instance, I apply Filter "USR-IP-Input Filter" on some customers, I restrict some customers to connect at a particular period while other customers have no restriction. With a large size of customers, I want to avoid setting up these attributes for each customer. I want to be able to create 4 default categories of attributes of Check & Reply items. I can now specify which category each customer belongs to. 'Tunde Ogedengbe Linkserve Limited 22 Akin Adesola Street Victoria Island Lagos - Nigeria Tel: +234 1 2623900 Fax: +234 1 2623906 URL: http://www.linkserve.net - Original Message - From: "Hugh Irvine" <[EMAIL PROTECTED]> To: "'Tunde Ogedengbe" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Tuesday, September 11, 2001 2:28 AM Subject: Re: Grouping Check & Repl Attributes > > Hello 'Tunde - > > On Tuesday 11 September 2001 05:12, 'Tunde Ogedengbe wrote: > > Hugh: > > > > I have three categories of Check & Reply Items. How can I avoid repeating > > the Check & Reply Items for each user by attaching each user to its Check & > > Reply Attribute Group. > > > > I am using MySQL to authenticate. > > > > I am not quite sure I understand what you are trying to do, could you provide > a bit more detail on the requirement please? > > thanks > > Hugh > > > -- > Radiator: the most portable, flexible and configurable RADIUS server > anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. > - > Nets: internetwork inventory and management - graphical, extensible, > flexible with hardware, software, platform and database independence. > === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Re: REPLYATTR SQL problem
Hugh: The length of the CHECKATTR & REPLYATTR is 400 characters. Find below some information (Config, ReplyAttr & Trace 4 Debug) Config File: Foreground LogStdout LogDir e:/radiator/radiator-2.18.2 DbDir e:/radiator/radiator-2.18.2 Trace 3 LogFile %L/logfile AuthPort 1645 AcctPort 1646 #DictionaryFile %D/dictionary Secret xxx IgnoreAcctSignature # This will authenticate users from SubsInfo PasswordLogFileName pwdtunde AcctLogFileName %L/detail # Adjust DBSource, DBUsername, DBAuth to suit your DB DefaultSimultaneousUse 5 DBSource dbi:ODBC:optiusers DBUsername sa DBAuth dl380linkserve AuthSelect select PASSWORD, CHECKATTR, REPLYATTR from SubsInfo where USERNAME='%n' AuthColumnDef 0, User-Password, check AuthColumnDef 1, GENERIC, check AuthColumnDef 2, GENERIC, reply # store accounting records in RADUSAGEmm table AccountingTable AcctInfo AcctColumnDef USERNAME,User-Name AcctColumnDef TIME_STAMP,Timestamp,integer AcctColumnDef ACCTSTATUSTYPE,Acct-Status-Type AcctColumnDef ACCTDELAYTIME,Acct-Delay-Time,integer AcctColumnDef ACCTINPUTOCTETS,Acct-Input-Octets,integer AcctColumnDef ACCTOUTPUTOCTETS,Acct-Output-Octets,integer AcctColumnDef ACCTSESSIONID,Acct-Session-Id AcctColumnDef ACCTSESSIONTIME,Acct-Session-Time,integer AcctColumnDef ACCTTERMINATECAUSE,Acct-Terminate-Cause AcctColumnDef NASIDENTIFIER,NAS-Identifier AcctColumnDef NASPORT,NAS-Port,integer AcctColumnDef FRAMEDIPADDRESS,Framed-IP-Address # You can arrange to log accounting to a file if the # SQL insert fails with AcctFailedLogFileName # That way you could recover from a broken SQL # server AcctFailedLogFileName %D/missedaccounting ReplyAttr Values --- Idle-Timeout = 120, Framed-Protocol = PPP, Framed-IP-Netmask = 255.255.255.0, Filter-Id = "email", USR-IP-Input-Filter = "1 ACCEPT dst-addr = 195.166.232.000/24", USR-IP-Input-Filter = "2 ACCEPT dst-addr = 195.166.228.000/24", USR-IP-Input-Filter = "3 ACCEPT dst-addr = 195.166.226.000/24", USR-IP-Input-Filter = "4 ACCEPT dst-addr = 195.166.230.000/24", USR-IP-Input-Filter = "5 ACCEPT dst-addr = 195.166.232.000/24", USR-IP-Input-Filter = "6 REJECT tcp-dst-port = 80", USR-IP-Input-Filter = "7 REJECT tcp-src-port = 80", USR-IP-Input-Filter = "8 DENY" Trace 4 Debug - Tue Sep 11 10:03:30 2001: ERR: Attribute number 38998 (vendor 429) is not define d in your dictionary Tue Sep 11 10:03:30 2001: ERR: Attribute number 39000 (vendor 429) is not define d in your dictionary Tue Sep 11 10:03:32 2001: ERR: Attribute number 39049 (vendor 429) is not define d in your dictionary DBD::ODBC::st fetchrow failed: [Microsoft][ODBC Microsoft Access Driver]String d ata, right truncated on column number 3 (REPLYATTR) (SQL-01004)(DBD: st_fetch/SQ LFetch (long truncated) err=1) at Radius/SqlDb.pm line 283. Tue Sep 11 10:03:32 2001: INFO: Access rejected for merinv: No such user Tue Sep 11 10:03:33 2001: ERR: Attribute number 38998 (vendor 429) is not define d in your dictionary Tue Sep 11 10:03:33 2001: ERR: Attribute number 39000 (vendor 429) is not define d in your dictionary Tue Sep 11 10:03:33 2001: ERR: Attribute number 39001 (vendor 429) is not define d in your dictionary Tue Sep 11 10:03:33 2001: ERR: Attribute number 39051 (vendor 429) is not define d in your dictionary Tue Sep 11 10:03:33 2001: ERR: Attribute number 39049 (vendor 429) is not define d in your dictionary Tue Sep 11 10:03:33 2001: ERR: Attribute number 38998 (vendor 429) is not define d in your dictionary Tue Sep 11 10:03:33 2001: ERR: Attribute number 39000 (vendor 429) is not define d in your dictionary 'Tunde Ogedengbe Linkserve Limited 22 Akin Adesola Street Victoria Island Lagos - Nigeria Tel: +234 1 2623900 Fax: +234 1 2623906 URL: http://www.linkserve.net - Original Message - From: "Hugh Irvine" <[EMAIL PROTECTED]> To: "'Tunde Ogedengbe" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Tuesday, September 11, 2001 2:25 AM Subject: (RADIATOR) Re: REPLYATTR SQL problem > > Hello 'Tunde - > > On Tuesday 11 September 2001 04:35, 'Tunde Ogedengbe wrote: > > Hello: > > > > Does the RELPYATTR field have a field length limitation? I am having > > problems with Attributes loaded in my SQL database which is about 400 long. > > The ODBC Driver is reporting an error "String truncated ". I am > > authenticating via MySQL. Pls help resolve this problem. > > > > The REPLYATTR field is defined in your database - what size have you defined > it to be? And when are you getting the error? As usual, I will need to see a > copy of the configuration file (no secrets) together with a trace 4 debug > from
(RADIATOR) Grouping Check & Repl Attributes
Hugh: I have three categories of Check & Reply Items. How can I avoid repeating the Check & Reply Items for each user by attaching each user to its Check & Reply Attribute Group. I am using MySQL to authenticate. 'Tunde Ogedengbe Linkserve Limited 22 Akin Adesola Street Victoria Island Lagos - Nigeria Tel: +234 1 2623900 Fax: +234 1 2623906 URL: http://www.linkserve.net - Original Message - From: "Hugh Irvine" <[EMAIL PROTECTED]> To: "Paul Thorton" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Monday, September 10, 2001 5:30 AM Subject: Re: (RADIATOR) CHAP / PAP > > Hello Paul - > > You configure this on the NAS, specifying PAP first and CHAP second. > > regards > > Hugh > > > On Monday 10 September 2001 13:03, Paul Thorton wrote: > > Hi, > > > > Is there any way we can deny CHAP requests in Radiator and upon > > rejection request a > > PAP authentication from the client? > > > > I.E. If a customer dials in with a default authentication of CHAP and > > their secondary auth > > is PAP, we want the first method to fail and second method to be used. > > > > Regards, > > > > Paul Thornton. > > === > > Archive at http://www.open.com.au/archives/radiator/ > > Announcements on [EMAIL PROTECTED] > > To unsubscribe, email '[EMAIL PROTECTED]' with > > 'unsubscribe radiator' in the body of the message. > > -- > Radiator: the most portable, flexible and configurable RADIUS server > anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. > - > Nets: internetwork inventory and management - graphical, extensible, > flexible with hardware, software, platform and database independence. > === > Archive at http://www.open.com.au/archives/radiator/ > Announcements on [EMAIL PROTECTED] > To unsubscribe, email '[EMAIL PROTECTED]' with > 'unsubscribe radiator' in the body of the message. > === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) REPLYATTR SQL problem
Hello: Does the RELPYATTR field have a field length limitation? I am having problems with Attributes loaded in my SQL database which is about 400 long. The ODBC Driver is reporting an error "String truncated ". I am authenticating via MySQL. Pls help resolve this problem. 'Tunde Ogedengbe Linkserve Limited 22 Akin Adesola Street Victoria Island Lagos - Nigeria Tel: +234 1 2623900 Fax: +234 1 2623906 URL: http://www.linkserve.net - Original Message - From: "Hugh Irvine" <[EMAIL PROTECTED]> To: "Paul Thorton" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Monday, September 10, 2001 5:30 AM Subject: Re: (RADIATOR) CHAP / PAP > > Hello Paul - > > You configure this on the NAS, specifying PAP first and CHAP second. > > regards > > Hugh > > > On Monday 10 September 2001 13:03, Paul Thorton wrote: > > Hi, > > > > Is there any way we can deny CHAP requests in Radiator and upon > > rejection request a > > PAP authentication from the client? > > > > I.E. If a customer dials in with a default authentication of CHAP and > > their secondary auth > > is PAP, we want the first method to fail and second method to be used. > > > > Regards, > > > > Paul Thornton. > > === > > Archive at http://www.open.com.au/archives/radiator/ > > Announcements on [EMAIL PROTECTED] > > To unsubscribe, email '[EMAIL PROTECTED]' with > > 'unsubscribe radiator' in the body of the message. > > -- > Radiator: the most portable, flexible and configurable RADIUS server > anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. > - > Nets: internetwork inventory and management - graphical, extensible, > flexible with hardware, software, platform and database independence. > === > Archive at http://www.open.com.au/archives/radiator/ > Announcements on [EMAIL PROTECTED] > To unsubscribe, email '[EMAIL PROTECTED]' with > 'unsubscribe radiator' in the body of the message. > === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Authentication Problem
I need help pls! and very URGENTLY too! My RADIATOR Authentication is suddenly rejecting all passwords. It is logging encrypted passwords in password.log. I am not using encryption at all. I am authentication via ODBC. I tried with User flat file without any success. 'Tunde Ogedengbe Linkserve Limited 22 Akin Adesola Street Victoria Island Lagos - Nigeria Tel: +234 1 2623900 Fax: +234 1 2623906 URL: http://www.linkserve.net - Original Message - From: "Hugh Irvine" <[EMAIL PROTECTED]> To: "Harrison Ng" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Monday, September 10, 2001 11:11 AM Subject: Re: (RADIATOR) FW: Load Balancing > > Hello Harrison - > > No - seconds only are supported. > > regards > > Hugh > > > On Monday 10 September 2001 17:23, Harrison Ng wrote: > > > > BTW, can those time related parameters accepts milliseconds, such as > > RetryTimeout, FailureBackoffTime. > > > > Harrison > > > > > -Original Message- > > > From: Harrison Ng > > > Sent: Monday, September 10, 2001 3:21 PM > > > To: '[EMAIL PROTECTED]' > > > Subject: Load Balancing > > > > > > Hi, > > > > > > We are using Ericsson GSN, the primary and secondary failover timer in > > > GSN is restricted to merely 6 seconds. After these 6 secs, it drops the > > > call. > > > > > > So our radiator server need to respond very fast, I mean fast in doing > > > username/password authentication, accounting logging, ip address > > > allocation and forward accounting information to 3rd party business > > > partners and reply back to GSN at last. If we divide 6 secs into 2 > > > halves, there will be only 3 secs for primary radius, and 3 secs for > > > secondary radius. > > > > > > Our first question is it possible to change the behaviour (perhaps an > > > extra parameter) of so > > > that when radius proxy does not receive response from the first radius > > > server, then just stop it and let the radius server marked failure and > > > reply nothing to GSN. Let the radius server sit still until > > > FailureBackupoffTime is reached. Do not even try to forward request to > > > the second listed, until the list is exhausted. > > > > > > Second can we set the timeout value (perhaps to zero) for the very first > > > accounting forward packet. The RetryTimeout only suitable for > > > retransmitting packet. Lost accounting packet is not a concern to us, as > > > long as the radius server work very fast. > > > > > > We tried optimize every things such as using radius proxy to distribute > > > loading to several radius server, put database server in another unix > > > box, field indexing, lots of memory and etc. Maybe our question is a bit > > > strange. Perhaps someone can suggest us a workaround. Thanks. > > > > > > > > > Regards, > > > Harrison > > > SmarTone BroadBand Services Ltd. > > > Content-Type: text/html; charset="iso-8859-1"; name="Attachment: 1" > Content-Transfer-Encoding: quoted-printable > Content-Description: > > > -- > Radiator: the most portable, flexible and configurable RADIUS server > anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. > - > Nets: internetwork inventory and management - graphical, extensible, > flexible with hardware, software, platform and database independence. > === > Archive at http://www.open.com.au/archives/radiator/ > Announcements on [EMAIL PROTECTED] > To unsubscribe, email '[EMAIL PROTECTED]' with > 'unsubscribe radiator' in the body of the message. > === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Re: Authentication BY SQL
QL
> Thu Sep 6 15:20:43 2001: DEBUG: Handling with Radius::AuthSQL
> Thu Sep 6 15:20:43 2001: DEBUG: Query is: select PASSWORD, CHECKATTR,
> REPLYATTR
> from SUbsInfo where USERNAME='prawa'
>
> Thu Sep 6 15:20:43 2001: DEBUG: Radius::AuthSQL looks for match with
prawa
> Thu Sep 6 15:20:43 2001: DEBUG: Radius::AuthSQL REJECT: Bad Password
> Thu Sep 6 15:20:43 2001: DEBUG: Query is: select PASSWORD, CHECKATTR,
> REPLYATTR
> from SUbsInfo where USERNAME='DEFAULT'
>
> Thu Sep 6 15:20:43 2001: INFO: Access rejected for prawa: Bad Password
> Thu Sep 6 15:20:43 2001: DEBUG: Packet dump:
> *** Sending to 195.166.231.247 port 1645
> Code: Access-Reject
> Identifier: 124
> Authentic: <227>&B<176><135>"vOb<9>ob<217><220><167>Y
> Attributes:
> Reply-Message = "Request Denied"
>
> Thu Sep 6 15:20:43 2001: ERR: Attribute number 39049 (vendor 429) is not
> define
> d in your dictionary
> Thu Sep 6 15:20:43 2001: DEBUG: Packet dump:
> *** Received from 195.166.231.247 port 1645
> Code: Access-Request
> Identifier: 125
> Authentic: <143><1><232><228><0><150><158><243><205>$<215><182>f<6>k<157>
> Attributes:
> User-Name = "spaspool"
> User-Password =
> "A<161><31><192><154>L<229>%4<133><239><211><10><233><18
> 6><249>"
> NAS-IP-Address = 195.166.231.247
> NAS-Port = 260
> Acct-Session-Id = "16975037"
> USR-Interface-Index = 1516
> Service-Type = Framed-User
> Framed-Protocol = PPP
> USR-Chassis-Call-Slot = 2
> USR-Chassis-Call-Span = 1
> USR-Chassis-Call-Channel = 4
> USR-Connect-Speed = NONE
> Calling-Station-Id = ""
> Called-Station-Id = ""
> NAS-Port-Type = Async
>
> Thu Sep 6 15:20:43 2001: DEBUG: Handling request with Handler
> 'Realm=DEFAULT'
> Thu Sep 6 15:20:43 2001: DEBUG: Deleting session for spaspool,
> 195.166.231.247
> , 260
> Thu Sep 6 15:20:43 2001: DEBUG: Handling with Radius::AuthSQL
> Thu Sep 6 15:20:43 2001: DEBUG: Handling with Radius::AuthSQL
> Thu Sep 6 15:20:43 2001: DEBUG: Query is: select PASSWORD, CHECKATTR,
> REPLYATTR
> from SUbsInfo where USERNAME='spaspool'
>
> Thu Sep 6 15:20:43 2001: DEBUG: Radius::AuthSQL looks for match with
> spaspool
> Thu Sep 6 15:20:43 2001: DEBUG: Radius::AuthSQL REJECT: Bad Password
> Thu Sep 6 15:20:43 2001: DEBUG: Query is: select PASSWORD, CHECKATTR,
> REPLYATTR
> from SUbsInfo where USERNAME='DEFAULT'
>
> Thu Sep 6 15:20:43 2001: INFO: Access rejected for spaspool: Bad Password
> Thu Sep 6 15:20:43 2001: DEBUG: Packet dump:
> *** Sending to 195.166.231.247 port 1645
> Code: Access-Reject
> Identifier: 125
> Authentic: <143><1><232><228><0><150><158><243><205>$<215><182>f<6>k<157>
> Attributes:
> Reply-Message = "Request Denied"
>
> Thu Sep 6 15:20:45 2001: ERR: Attribute number 39049 (vendor 429) is not
> define
> d in your dictionary
> Thu Sep 6 15:20:45 2001: DEBUG: Packet dump:
> *** Received from 195.166.231.247 port 1645
> Code: Access-Request
> Identifier: 126
> Authentic: {<247><248>X<149><145><159><215>v<130><187>J<161><235><242>!
> Attributes:
> User-Name = "prawa"
> User-Password =
> "<185>o<197>q<1><(<177><252><195>A#<181><217><21><227>"
> NAS-IP-Address = 195.166.231.247
> NAS-Port = 12
> Acct-Session-Id = "721209"
> USR-Interface-Index = 1268
> Service-Type = Framed-User
> Framed-Protocol = PPP
> USR-Chassis-Call-Slot = 1
> USR-Chassis-Call-Span = 1
> USR-Chassis-Call-Channel = 12
> USR-Connect-Speed = NONE
> Calling-Station-Id = ""
> Called-Station-Id = ""
> NAS-Port-Type = Async
>
> Thu Sep 6 15:20:45 2001: DEBUG: Handling request with Handler
> 'Realm=DEFAULT'
> Thu Sep 6 15:20:45 2001: DEBUG: Deleting session for prawa,
> 195.166.231.247, 1
> 2
> Thu Sep 6 15:20:45 2001: DEBUG: Handling with Radius::AuthSQL
> Thu Sep 6 15:20:45 2001: DEBUG: Handling with Radius::AuthSQL
> Thu Sep 6 15:20:45 2001: DEBUG: Query is: select PASSWORD, CHECKATTR,
> REPLYATTR
> from SUbsInfo where USERNAME='prawa'
>
> Thu Sep 6 15:20:45 2001: DEBUG: Radius::AuthSQL looks for match with
prawa
> Thu Sep 6 15:20:45 2001: DEBUG: Radius::AuthSQL REJECT: Bad Password
> Thu Sep 6 15:20:45 2001: DEBUG: Query is: select PASSWORD, CHECKATTR,
> REPLYATTR
> from SUbsInfo where USERNAME='DEFAULT'
>
> Thu Sep 6 15:20:45 2001: INFO: Access rejected for prawa: Bad Password
> Thu Sep 6 15:20:45 2001: DEBUG: Packet dump:
> *** Sending to 195.166.231.247 port 1645
> Code: Access-Reject
> Identifier: 126
> Authentic: {<247><248>X<149><145><159><215>v<130><187>J<161><235><242>!
> Attributes:
> Reply-Message = "Request Denied"
>
>
> 'Tunde Ogedengbe
> Linkserve Limited
> 22 Akin Adesola Street
> Victoria Island
> Lagos - Nigeria
> Tel: +234 1 2623900
> Fax: +234 1 2623906
> URL: http://www.linkserve.net
> - Original Message -
> From: "Hugh Irvine" <[EMAIL PROTECTED]>
> To: "'Tunde Ogedengbe" <[EMAIL PROTECTED]>
> Cc: <[EMAIL PROTECTED]>
> Sent: Thursday, September 06, 2001 12:22 AM
> Subject: (RADIATOR) Re: IP restriction
>
>
> >
> > Hello 'Tunde -
> >
> > On Wednesday 05 September 2001 21:18, 'Tunde Ogedengbe wrote:
> > > I have a set of Netservers. How do I restrict the use of of IP to a
> > > particular Netserver within Radius?
> > >
> >
> > I don't understand the question, sorry.
> >
> > Could you explain what you mean?
> >
> > thanks
> >
> > Hugh
> >
> >
> > --
> > Radiator: the most portable, flexible and configurable RADIUS server
> > anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
> > -
> > Nets: internetwork inventory and management - graphical, extensible,
> > flexible with hardware, software, platform and database independence.
> > ===
> > Archive at http://www.open.com.au/archives/radiator/
> > Announcements on [EMAIL PROTECTED]
> > To unsubscribe, email '[EMAIL PROTECTED]' with
> > 'unsubscribe radiator' in the body of the message.
> >
>
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
(RADIATOR) Authentication BY SQL
25
Authentic: <143><1><232><228><0><150><158><243><205>$<215><182>f<6>k<157>
Attributes:
User-Name = "spaspool"
User-Password =
"A<161><31><192><154>L<229>%4<133><239><211><10><233><18
6><249>"
NAS-IP-Address = 195.166.231.247
NAS-Port = 260
Acct-Session-Id = "16975037"
USR-Interface-Index = 1516
Service-Type = Framed-User
Framed-Protocol = PPP
USR-Chassis-Call-Slot = 2
USR-Chassis-Call-Span = 1
USR-Chassis-Call-Channel = 4
USR-Connect-Speed = NONE
Calling-Station-Id = ""
Called-Station-Id = ""
NAS-Port-Type = Async
Thu Sep 6 15:20:43 2001: DEBUG: Handling request with Handler
'Realm=DEFAULT'
Thu Sep 6 15:20:43 2001: DEBUG: Deleting session for spaspool,
195.166.231.247
, 260
Thu Sep 6 15:20:43 2001: DEBUG: Handling with Radius::AuthSQL
Thu Sep 6 15:20:43 2001: DEBUG: Handling with Radius::AuthSQL
Thu Sep 6 15:20:43 2001: DEBUG: Query is: select PASSWORD, CHECKATTR,
REPLYATTR
from SUbsInfo where USERNAME='spaspool'
Thu Sep 6 15:20:43 2001: DEBUG: Radius::AuthSQL looks for match with
spaspool
Thu Sep 6 15:20:43 2001: DEBUG: Radius::AuthSQL REJECT: Bad Password
Thu Sep 6 15:20:43 2001: DEBUG: Query is: select PASSWORD, CHECKATTR,
REPLYATTR
from SUbsInfo where USERNAME='DEFAULT'
Thu Sep 6 15:20:43 2001: INFO: Access rejected for spaspool: Bad Password
Thu Sep 6 15:20:43 2001: DEBUG: Packet dump:
*** Sending to 195.166.231.247 port 1645
Code: Access-Reject
Identifier: 125
Authentic: <143><1><232><228><0><150><158><243><205>$<215><182>f<6>k<157>
Attributes:
Reply-Message = "Request Denied"
Thu Sep 6 15:20:45 2001: ERR: Attribute number 39049 (vendor 429) is not
define
d in your dictionary
Thu Sep 6 15:20:45 2001: DEBUG: Packet dump:
*** Received from 195.166.231.247 port 1645
Code: Access-Request
Identifier: 126
Authentic: {<247><248>X<149><145><159><215>v<130><187>J<161><235><242>!
Attributes:
User-Name = "prawa"
User-Password =
"<185>o<197>q<1><(<177><252><195>A#<181><217><21><227>"
NAS-IP-Address = 195.166.231.247
NAS-Port = 12
Acct-Session-Id = "721209"
USR-Interface-Index = 1268
Service-Type = Framed-User
Framed-Protocol = PPP
USR-Chassis-Call-Slot = 1
USR-Chassis-Call-Span = 1
USR-Chassis-Call-Channel = 12
USR-Connect-Speed = NONE
Calling-Station-Id = ""
Called-Station-Id = ""
NAS-Port-Type = Async
Thu Sep 6 15:20:45 2001: DEBUG: Handling request with Handler
'Realm=DEFAULT'
Thu Sep 6 15:20:45 2001: DEBUG: Deleting session for prawa,
195.166.231.247, 1
2
Thu Sep 6 15:20:45 2001: DEBUG: Handling with Radius::AuthSQL
Thu Sep 6 15:20:45 2001: DEBUG: Handling with Radius::AuthSQL
Thu Sep 6 15:20:45 2001: DEBUG: Query is: select PASSWORD, CHECKATTR,
REPLYATTR
from SUbsInfo where USERNAME='prawa'
Thu Sep 6 15:20:45 2001: DEBUG: Radius::AuthSQL looks for match with prawa
Thu Sep 6 15:20:45 2001: DEBUG: Radius::AuthSQL REJECT: Bad Password
Thu Sep 6 15:20:45 2001: DEBUG: Query is: select PASSWORD, CHECKATTR,
REPLYATTR
from SUbsInfo where USERNAME='DEFAULT'
Thu Sep 6 15:20:45 2001: INFO: Access rejected for prawa: Bad Password
Thu Sep 6 15:20:45 2001: DEBUG: Packet dump:
*** Sending to 195.166.231.247 port 1645
Code: Access-Reject
Identifier: 126
Authentic: {<247><248>X<149><145><159><215>v<130><187>J<161><235><242>!
Attributes:
Reply-Message = "Request Denied"
'Tunde Ogedengbe
Linkserve Limited
22 Akin Adesola Street
Victoria Island
Lagos - Nigeria
Tel: +234 1 2623900
Fax: +234 1 2623906
URL: http://www.linkserve.net
- Original Message -
From: "Hugh Irvine" <[EMAIL PROTECTED]>
To: "'Tunde Ogedengbe" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Thursday, September 06, 2001 12:22 AM
Subject: (RADIATOR) Re: IP restriction
>
> Hello 'Tunde -
>
> On Wednesday 05 September 2001 21:18, 'Tunde Ogedengbe wrote:
> > I have a set of Netservers. How do I restrict the use of of IP to a
> > particular Netserver within Radius?
> >
>
> I don't understand the question, sorry.
>
> Could you explain what you mean?
>
> thanks
>
> Hugh
>
>
> --
> Radiator: the most portable, flexible and configurable RADIUS server
> anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
> -
> Nets: internetwork inventory and management - graphical, extensible,
> flexible with hardware, software, platform and database independence.
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
>
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Re: IP restriction
Hugh: We have series of Netservers that assign specific range of IP to connecting customers. We want to force compliance from within Radius. This means that specifying in RADIUS what IP range the Netserver can assign to the customer. 'Tunde Ogedengbe Linkserve Limited 22 Akin Adesola Street Victoria Island Lagos - Nigeria Tel: +234 1 2623900 Fax: +234 1 2623906 URL: http://www.linkserve.net - Original Message - From: "Hugh Irvine" <[EMAIL PROTECTED]> To: "'Tunde Ogedengbe" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Thursday, September 06, 2001 12:22 AM Subject: (RADIATOR) Re: IP restriction > > Hello 'Tunde - > > On Wednesday 05 September 2001 21:18, 'Tunde Ogedengbe wrote: > > I have a set of Netservers. How do I restrict the use of of IP to a > > particular Netserver within Radius? > > > > I don't understand the question, sorry. > > Could you explain what you mean? > > thanks > > Hugh > > > -- > Radiator: the most portable, flexible and configurable RADIUS server > anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. > - > Nets: internetwork inventory and management - graphical, extensible, > flexible with hardware, software, platform and database independence. > === > Archive at http://www.open.com.au/archives/radiator/ > Announcements on [EMAIL PROTECTED] > To unsubscribe, email '[EMAIL PROTECTED]' with > 'unsubscribe radiator' in the body of the message. > === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) IP restriction
I have a set of Netservers. How do I restrict the use of of IP to a particular Netserver within Radius? 'Tunde Ogedengbe Linkserve Limited 22 Akin Adesola Street Victoria Island Lagos - Nigeria Tel: +234 1 2623900 Fax: +234 1 2623906 URL: http://www.linkserve.net === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Radiator on Windows 2000
We are planning to move our Radiator Radius from Linux to Windows 2000. I need instruction on how to make Radiusd run as a service automatically. 'Tunde Ogedengbe Linkserve Limited 22 Akin Adesola Street Victoria Island Lagos - Nigeria Tel: +234 1 2623900 Fax: +234 1 2623906 URL: http://www.linkserve.net - Original Message - From: "Hugh Irvine" <[EMAIL PROTECTED]> To: "'Tunde Ogedengbe" <[EMAIL PROTECTED]> Sent: Tuesday, September 04, 2001 12:15 PM Subject: Re: Re: (RADIATOR) SimultaneousUse > > Hello 'Tunde - > > There are two different files - one for debug messages (known as the > log file), and the other for accounting information (known as the > detail file). I need to see a copy of a trace 4 debug file as written > to the log file (not an accounting detail file). > > thanks > > Hugh > > > > At 9:57 +0200 01/9/4, 'Tunde Ogedengbe wrote: > >Hugh: > > > >I dont understand. It was the accounting output (detail) that I sent to you > >under trace 4 debug. Do you require a different trace level? > > > >'Tunde Ogedengbe > >Linkserve Limited > >22 Akin Adesola Street > >Victoria Island > >Lagos - Nigeria > >Tel: +234 1 2623900 > >Fax: +234 1 2623906 > >URL: http://www.linkserve.net > >- Original Message - > >From: "Hugh Irvine" <[EMAIL PROTECTED]> > >To: "'Tunde Ogedengbe" <[EMAIL PROTECTED]> > >Sent: Monday, September 03, 2001 12:41 AM > >Subject: Re: Re: (RADIATOR) SimultaneousUse > > > > > >> > >> Hello 'Tunde - > >> > >> Thanks for sending this, however it is the accounting output from the > >> detail file, not a trace 4 debug. Could you please send me the trace > >> 4 debug showing what is happening? > >> > >> thanks > >> > >> Hugh > >> > >> > >> > >> >Pls find below the sample details records for our connection: > >> > > >> >Sat Sep 1 15:15:08 2001 > >> >User-Name = "x" > >> >NAS-IP-Address = x.x.x.x > >> >Acct-Status-Type = Stop > >> >Acct-Session-Id = "50332430" > >> >Acct-Delay-Time = 0 > >> >Acct-Authentic = RADIUS > >> >Service-Type = Framed-User > >> >NAS-Port-Type = Async > >> >NAS-Port = 769 > >> >USR-Modem-Training-Time = 16 > >> >USR-Interface-Index = 2025 > >> >USR-Chassis-Call-Slot = 4 > >> >USR-Chassis-Call-Span = 16 > >> >USR-Chassis-Call-Channel = 1 > >> >USR-Unauthenticated-Time = 7 > >> >Calling-Station-Id = "" > >> >Called-Station-Id = "" > >> >USR-Modulation-Type = v34 > >> >USR-Simplified-MNP-Levels = NONE > >> >USR-Simplified-V42bis-Usage = NONE > >> >USR-Connect-Speed = 28800_BPS > >> >Framed-Protocol = PPP > >> >Framed-IP-Address = x.x.x.x > >> >Acct-Session-Time = 93 > >> >Acct-Terminate-Cause = User-Request > >> >Acct-Input-Octets = 4685 > >> >Acct-Output-Octets = 1756 > >> >Acct-Input-Packets = 104 > >> >Acct-Output-Packets = 69 > >> >Timestamp = 999353708 > >> > > >> >Sat Sep 1 15:15:09 2001 > >> >Acct-Session-Id = "3100131A" > >> >User-Name = "x" > >> >NAS-IP-Address = x.x.x.x > >> >NAS-Port = 10 > >> >Acct-Status-Type = Start > >> >Acct-Authentic = RADIUS > >> >Service-Type = Framed-User > >> >Framed-Protocol = PPP > >> >Framed-IP-Address = x.x.x.x > >> >Acct-Delay-Time = 0 > >> >Timestamp = 999353709 > >> > > >> >Sat Sep 1 15:15:09 2001 > >> >User-Name = "" > >> >NAS-IP-Address = x.x.x.x > >> >Acct-Status-Type = Start > >> >Acct-Session-Id = "328015" > >> >Acct-Delay-Time = 0 > >> >Acct-Authentic = RADIUS > >> >Service-Type = Framed-User > >> >NAS-Port-Type = Async > >> >NAS-Port = 6 > >> >USR-Modem-Training-Time = 11 > >> >USR-Interface-Index = 1262 > >> >USR-Chassis-Call-Slot = 1 > >> >USR-Chassis-Call-Span = 1 > >> >USR-Chassis-Call-Channel = 6 > >> >USR-Unauthenticated-Time = 4 > >> >Calling-Station-Id = "" > >> >Called-Station-Id
Re: Re: (RADIATOR) SimultaneousUse
Hugh: See conf below: (radius.cfg) Foreground LogStdout Trace 3 PidFile /usr/local/etc/raddb/radiusd.pid AuthPort 1645 AcctPort 1646 LogDir /usr/local/etc/raddb DbDir /usr/local/etc/raddb LogFile %L/logfile.%Y.%m.%d DictionaryFile %D/dictionary SnmpgetProg /usr/bin/snmpget Secret IgnoreAcctSignature AcctLogFileName %L/detail.%Y.%m.%d RejectHasReason Identifier Check-FILE Filename %D/users DefaultSimultaneousUse 1 Identifier Check-UNIX Filename/etc/shadow DefaultSimultaneousUse 1 'Tunde Ogedengbe ORIGINAL MESSAGE BELOW Hello Camilo, Hello 'Tunde - In general, problems with simultaneous use are usually due to dropped accounting packets (sometimes congested links, sometimes NAS bugs, sometimes configuration problems with Radiator). I am happy to assist with any problems, but I need to see what is going on. Please send me a copy of the configuration file (no secrets) together with a trace 4 debug from Radiator showing the problem. It would also be helpful if you could provide some description of what you are trying to accomplish. thanks Hugh On Thursday 30 August 2001 01:04, Camilo Fernando Corena G. wrote: > I have the same problem. > > Someone can help us??? > > 'Tunde Ogedengbe wrote: > > Hello: > > > > We are having problems with this attribute. In some of our > > installations, the attribute does not work at all and so no restriction > > is enforced. On another installation, it works but with severe > > problems. For instance customers with an attribute of 1 who previously > > connected to our system and later disconnected are having problems > > reconnecting. This has resulted in a serious problem in which a > > significant percentage of connection problems were related to the > > SimultaneousUse attribute. What we have done in the interim is to set > > the attribute to 3. How can we resolve this problem? > > > > 'Tunde Ogedengbe > > Linkserve Limited > > 22 Akin Adesola Street > > Victoria Island > > Lagos - Nigeria > > Tel: +234 1 2623900 > > Fax: +234 1 2623906 > > URL: http://www.linkserve.net > > - Original Message - > > From: "Hugh Irvine" <[EMAIL PROTECTED]> > > To: "lloyd" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> > > Cc: <[EMAIL PROTECTED]> > > Sent: Wednesday, August 29, 2001 8:48 AM > > Subject: (RADIATOR) Re: two authby clauses > > > > > Hello Lloyd - > > > > > > What exactly are you trying to do? > > > > > > thanks > > > > > > Hugh > > > > > > On Wednesday 29 August 2001 14:28, lloyd wrote: > > > > hi, > > > > how do i configure radiator in such a way that before it proxy's to > > > > another radius server, it checks for the Called-Station-Id in say a > > > > flat file or a database? > > > > > > > > > > > > will this work (file based with only one field: > > > > telephonenumbers). > > > > > > > > > > > > Identifier calledstationid > > > > FileName %d/Called-Station-ID > > > > > > > > > > > > > > > > Identifier radiusproxy> > > > > Host ***.***.***.*** > > > > Secret ** > > > > AuthPort > > > > AcctPort > > > > > > > > > > > > > > > > AuthByPolicy ContinueAlways > > > > AuthBy calledstationid > > > > AuthBy radiusproxy > > > > > > > > > > > > > > > > Lloyd Dagoc > > > > InterDotNet Philippines Inc. > > > > > > -- > > > Radiator: the most portable, flexible and configurable RADIUS server > > > anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. > > > - > > > Nets: internetwork inventory and management - graphical, extensible, > > > flexible with hardware, software, platform and database independence. > > > === > > > Archive at http://www.open.com.au/archives/radiator/ > > > Announcements on [EMAIL PROTECTED] > > > To unsubscribe, email '[EMAIL PROTECTED]' with > > > 'unsubscribe radiator' in the body of the message. > > > > === > > Archive at http://www.open.com.au/archives/radiator/ > > Announcements on [EMAIL PROTECTED] > > To unsubscribe, email '[EMAIL PROTECTED]' with > > 'unsubscribe radiator' in the body of the message. -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. - Nets: internetwork inventory and management - graphical, extensible, flexible with hardware, software, platform and database independence. All Linkserve mails have been certified to be virus-free, thanks for your patronage. === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) SimultaneousUse
Hello: We are having problems with this attribute. In some of our installations, the attribute does not work at all and so no restriction is enforced. On another installation, it works but with severe problems. For instance customers with an attribute of 1 who previously connected to our system and later disconnected are having problems reconnecting. This has resulted in a serious problem in which a significant percentage of connection problems were related to the SimultaneousUse attribute. What we have done in the interim is to set the attribute to 3. How can we resolve this problem? 'Tunde Ogedengbe Linkserve Limited 22 Akin Adesola Street Victoria Island Lagos - Nigeria Tel: +234 1 2623900 Fax: +234 1 2623906 URL: http://www.linkserve.net - Original Message - From: "Hugh Irvine" <[EMAIL PROTECTED]> To: "lloyd" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Wednesday, August 29, 2001 8:48 AM Subject: (RADIATOR) Re: two authby clauses > > Hello Lloyd - > > What exactly are you trying to do? > > thanks > > Hugh > > On Wednesday 29 August 2001 14:28, lloyd wrote: > > hi, > > how do i configure radiator in such a way that before it proxy's to > > another radius server, it checks for the Called-Station-Id in say a flat > > file or a database? > > > > > > will this work (file based with only one field: telephonenumbers). > > > > > > Identifier calledstationid > > FileName %d/Called-Station-ID > > > > > > > > Identifier radiusproxy> > > Host ***.***.***.*** > > Secret ** > > AuthPort > > AcctPort > > > > > > > > AuthByPolicy ContinueAlways > > AuthBy calledstationid > > AuthBy radiusproxy > > > > > > > > Lloyd Dagoc > > InterDotNet Philippines Inc. > > -- > Radiator: the most portable, flexible and configurable RADIUS server > anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. > - > Nets: internetwork inventory and management - graphical, extensible, > flexible with hardware, software, platform and database independence. > === > Archive at http://www.open.com.au/archives/radiator/ > Announcements on [EMAIL PROTECTED] > To unsubscribe, email '[EMAIL PROTECTED]' with > 'unsubscribe radiator' in the body of the message. > === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Radiator using SQL
I am reconfiguring Radiator to use an SQL database. Connection is to be made via ODBC. 1.How do I define the data structure in the database to accomodate all Radius attributes ? 2.How do I setup Radiator to query the database and return relevant attributes associated with the record. eg. Simultaneous-use, filter-id, etc. 'Tunde Ogedengbe - Original Message - From: "Hugh Irvine" <[EMAIL PROTECTED]> To: "Roger Mangraviti" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Wednesday, July 25, 2001 8:47 AM Subject: Re: (RADIATOR) appending realm to the end of a user. > > Hello Roger - > > What you show below will not work because the AuthBy RADIUS clause does not > operate in the way you are expecting, and in any case the AuthByPolicy that > you are using will not do the right thing. The reason for this is that the > AuthBy RADIUS clause is asynchronous and returns immediately, therefore the > AuthByPolicy will not work correctly. > > If you explain what you are trying to do, I will be happy to make some > suggestions. > > Note that we also offer consulting and installation services if required. > > regards > > Hugh > > > On Wednesday 25 July 2001 16:18, Roger Mangraviti wrote: > > Hi Hugh, > > > > I have been playing with the config a bit and i'm trying to achieve the > > following: > > > > account to one sql server, with the realm appended to the user. > > proxy auth to 2 different radius auth servers. > > > > the problem being is that customers may not be appending a realm to the > > username. > > this is the main part of my config: > > > > > > > > > > > > #strip realm > > RewriteUsername s/^([^@]+).*/$1/ > > > > AuthByPolicy ContinueUntilAccept > > > > > > # Adjust DBSource, DBUsername, DBAuth to suit your DB > > > > DBSourcedbi:mysql:radius:localhost > > DBUsername radius > > DBAuth xx > > > > # You may want to tailor these for your ACCOUNTING table > > # You can add your own columns to store whatever you like > > AccountingTable ACCOUNTING > > > > AcctColumnDef USERNAME,UserName > > AcctColumnDef TIME_STAMP,Timestamp,integer > > AcctColumnDef ACCTSTATUSTYPE,Acct-Status-Type > > AcctColumnDef ACCTDELAYTIME,Acct-Delay-Time,integer > > AcctColumnDef ACCTINPUTOCTETS,Acct-Input-Octets,integer > > AcctColumnDef ACCTOUTPUTOCTETS,Acct-Output-Octets,integer > > AcctColumnDef ACCTSESSIONID,Acct-Session-Id > > AcctColumnDef ACCTSESSIONTIME,Acct-Session-Time,integer > > AcctColumnDef ACCTTERMINATECAUSE,Acct-Terminate-Cause > > AcctColumnDef NASIDENTIFIER,NAS-Identifier > > AcctColumnDef NASPORT,NAS-Port,integer > > AcctColumnDef FRAMEDIPADDRESS,Framed-IP-Address > > > > # You can arrange to log accounting to a file if the > > # SQL insert fails with AcctFailedLogFileName > > # That way you could recover from a broken SQL > > # server > > #AcctFailedLogFileName %D/missedaccounting > > > > > > > > > > AuthenticateAccounting > > > > AddToReply Class = atu.com.au > > > > FailureBackoffTime 60 > > > > Synchronous > > > > Secret xx > > RetryTimeout 1 > > Retries 1 > > > > > > AuthPort1812 > > AcctPort1813 > > > > > > AcctFailedLogFileName %D/missedaccounting > > > > > > > > > > > > AuthenticateAccounting > > > > AddToReply Class = viper.net.au > > > > FailureBackoffTime 60 > > > > Synchronous > > > > Secret xx > > RetryTimeout 1 > > Retries 1 > > > > > > > > AuthPort1812 > > AcctPort1813 > > > > > > AcctFailedLogFileName %D/missedaccounting > > > > > > > > > > > > > > authentication seems to work (for a while till it freezes, which i need to > > debug), but the sql logging is not > > appending the realm
(RADIATOR) Re: Optigold Billing System
Hugh:
Thanks. Can you pls explain how the
MacRadius works with Radiator & Optigold.
'Tunde Ogedengbe
Linkserve Limited
22 Akin Adesola Street
Victoria Island
Lagos - Nigeria
Tel: +234 1 2623900
Fax: +234 1 2623906
URL: http://www.linkserve.net
- Original Message -
From: "Hugh Irvine" <[EMAIL PROTECTED]>
To: "'Tunde Ogedengbe" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Tuesday, February 27, 2001 4:05 AM
Subject: Re: Optigold Billing System
>
> Hello 'Tunde -
>
> Radiator does not integrate directly with Optigold at this time, however
with
> the use of MacRADIUS, you can proxy from Radiator to Optigold very easily.
>
> We have tried to contact Optigold several times to integrate Radiator
> directly, however we have never had a response from them.
>
> regards
>
> Hugh
>
> On Tuesday 27 February 2001 03:14, 'Tunde Ogedengbe wrote:
> > We are evaluating Optigold Billing software. Does Radiator integrate
with
> > Optigold?
> >
> > 'Tunde Ogedengbe
> > Linkserve Limited
> > 22 Akin Adesola Street
> > Victoria Island
> > Lagos - Nigeria
> > Tel: +234 1 2623900
> > Fax: +234 1 2623906
> > URL: http://www.linkserve.net
> > - Original Message -
> > From: "Hugh Irvine" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> > Sent: Wednesday, February 14, 2001 1:26 AM
> > Subject: Re: (RADIATOR) Cisco AS5300 VoIP / Radiator
> >
> > > Hello Jeremy -
> > >
> > > At 17:54 -0500 01/2/13, List Account wrote:
> > > >Hi,
> > > >
> > > > We're trying to setup Radiator to work with our Cisco AS5300 to
> > > >do Voice over IP. We have things (basically) working, it will
> > > >authenticate off of caller ID, etc. But, there are a few extras
> > > >we'd like to do and need some advice on.
> > > >
> > > > First, has anyone used Simultaneous-Use with the AS5300 using
> > > >account numbers and PINs? For example, Joe User dials in, enters an
> > > >account number, a PIN, and makes a call. Let's say his wife picks
> > > >up the phone at some other location, dials in, and enters the same
> > > >account number and PIN. It shouldn't let her use it if he's already
> > > >on. One interesting thing to note is that the AS5300 seems to be
> > > >sending a null User-Name ("") when they use account/PIN.
> > > >
> > > > Second, whenever multiple users are dialed into the unit, only
> > > >one user is showing up in the online user database. I have the
> > > >radwho.cgi setup to work with it, and it only shows one entry in the
> > > >database. We are just using a standard DBM database file for now,
> > > >until we get things working, at which point we'll migrate it to
> > > >something better.
> > > >
> > > > If anyone has any ideas that may help, it would be appreciated.
> > > >Thanks. :)
> > >
> > > If you use a , you can provide your own queries
> > > to tailor the simultaneous use behaviour to your own requirements.
> > >
> > > regards
> > >
> > > Hugh
> > >
> > > --
> > >
> > > NB: I am travelling this week, so there may be delays in our
> >
> > correspondence.
> >
> > > Radiator: the most portable, flexible and configurable RADIUS server
> > > anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
> > > Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
> > > Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
> > >
> > > ===
> > > Archive at http://www.starport.net/~radiator/
> > > Announcements on [EMAIL PROTECTED]
> > > To unsubscribe, email '[EMAIL PROTECTED]' with
> > > 'unsubscribe radiator' in the body of the message.
>
> --
> Radiator: the most portable, flexible and configurable RADIUS server
> anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
> -
> Nets: internetwork inventory and management - graphical, extensible,
> flexible with hardware, software, platform and database independence.
>
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
(RADIATOR) Optigold Billing System
We are evaluating Optigold Billing software. Does Radiator integrate with
Optigold?
'Tunde Ogedengbe
Linkserve Limited
22 Akin Adesola Street
Victoria Island
Lagos - Nigeria
Tel: +234 1 2623900
Fax: +234 1 2623906
URL: http://www.linkserve.net
- Original Message -
From: "Hugh Irvine" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Wednesday, February 14, 2001 1:26 AM
Subject: Re: (RADIATOR) Cisco AS5300 VoIP / Radiator
>
> Hello Jeremy -
>
> At 17:54 -0500 01/2/13, List Account wrote:
> >Hi,
> >
> > We're trying to setup Radiator to work with our Cisco AS5300 to
> >do Voice over IP. We have things (basically) working, it will
> >authenticate off of caller ID, etc. But, there are a few extras
> >we'd like to do and need some advice on.
> >
> > First, has anyone used Simultaneous-Use with the AS5300 using
> >account numbers and PINs? For example, Joe User dials in, enters an
> >account number, a PIN, and makes a call. Let's say his wife picks
> >up the phone at some other location, dials in, and enters the same
> >account number and PIN. It shouldn't let her use it if he's already
> >on. One interesting thing to note is that the AS5300 seems to be
> >sending a null User-Name ("") when they use account/PIN.
> >
> > Second, whenever multiple users are dialed into the unit, only
> >one user is showing up in the online user database. I have the
> >radwho.cgi setup to work with it, and it only shows one entry in the
> >database. We are just using a standard DBM database file for now,
> >until we get things working, at which point we'll migrate it to
> >something better.
> >
> > If anyone has any ideas that may help, it would be appreciated.
> >Thanks. :)
> >
>
> If you use a , you can provide your own queries
> to tailor the simultaneous use behaviour to your own requirements.
>
> regards
>
> Hugh
>
> --
>
> NB: I am travelling this week, so there may be delays in our
correspondence.
>
> Radiator: the most portable, flexible and configurable RADIUS server
> anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
> Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
> Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
>
> ===
> Archive at http://www.starport.net/~radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
>
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
(RADIATOR) Re: 3Com HyperARC & Idle Time
Is the Idle-Timeout value in seconds or minutes 'Tunde Ogedengbe Linkserve Limited 22 Akin Adesola Street Victoria Island Lagos - Nigeria Tel: +234 1 2623900 Fax: +234 1 2623906 URL: http://www.linkserve.net - Original Message - From: "Hugh Irvine" <[EMAIL PROTECTED]> To: "'Tunde Ogedengbe" <[EMAIL PROTECTED]>; "Mike McCauley" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Friday, November 03, 2000 9:28 AM Subject: Re: 3Com HyperARC & Idle Time > > Hello 'Tunde - > > On Fri, 03 Nov 2000, 'Tunde Ogedengbe wrote: > > How do I implement idle time with Radiator on 3Com HyperARC? > > > > You would send an Idle-Timeout reply attribute to the NAS in the access accept. > > hth > > Hugh > > -- > Radiator: the most portable, flexible and configurable RADIUS server > anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, > Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc. > Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X. > > === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Re: 3Com HyperARC & Idle Time
Hugh: Pls be more specific. I will appreciate a sample template. 'Tunde Ogedengbe Linkserve Limited 22 Akin Adesola Street Victoria Island Lagos - Nigeria Tel: +234 1 2623900 Fax: +234 1 2623906 URL: http://www.linkserve.net - Original Message - From: "Hugh Irvine" <[EMAIL PROTECTED]> To: "'Tunde Ogedengbe" <[EMAIL PROTECTED]>; "Mike McCauley" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Friday, November 03, 2000 9:28 AM Subject: Re: 3Com HyperARC & Idle Time > > Hello 'Tunde - > > On Fri, 03 Nov 2000, 'Tunde Ogedengbe wrote: > > How do I implement idle time with Radiator on 3Com HyperARC? > > > > You would send an Idle-Timeout reply attribute to the NAS in the access accept. > > hth > > Hugh > > -- > Radiator: the most portable, flexible and configurable RADIUS server > anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, > Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc. > Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X. > > === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) 3Com HyperARC & Idle Time
How do I implement idle time with Radiator on 3Com HyperARC? 'Tunde Ogedengbe Linkserve Limited 22 Akin Adesola Street Victoria Island Lagos - Nigeria Tel: +234 1 2623900 Fax: +234 1 2623906 URL: http://www.linkserve.net - Original Message - From: "Mike McCauley" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>; "Daniel Senie" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Thursday, April 06, 2000 6:18 PM Subject: Re: (RADIATOR) assigning fixed ip > Hello Froilan, > > You didnt send the access request that started this, but I suspect that you NAS > is sending very large NAS-Port numbers, and Radiator is using the large number > to generate the IP address, and wrapping it onto another class C address. > > Cheers. > > On Apr 6, 9:54am, Froilan Mendoza wrote: > > Subject: Re: (RADIATOR) assigning fixed ip > > > > Hi all again > > > > Here's my setup: > > > > > > Secret x > > FramedGroupBaseAddress 203.167.8.80 > > DupInterval 15 > > IgnoreAcctSignature > > > > > > > > > > RewriteUsername s/^([^@]+).*/$1/ > > > > Filename users > > > > > > > > > > users file: > > > > xxxUser-Password = "x", Service-Type = Framed-User > > Framed-Group = 0, > > Framed-Protocol = PPP, > > Framed-IP-Netmask = 255.255.255.255, > > Framed-Routing = None, > > Framed-MTU = 1500, > > Framed-Compression = Van-Jacobson-TCP-IP > > > > > > HOwever, when I try to login: > > > > Wed Apr 5 18:41:21 2000: DEBUG: Rewrote user name to xx@vpntest > > Wed Apr 5 18:41:21 2000: DEBUG: Handling request with Handler > 'Realm=vpntest' > > Wed Apr 5 18:41:21 2000: DEBUG: Rewrote user name to xx > > Wed Apr 5 18:41:21 2000: DEBUG: Deleting session for x@vpntest, > 172.7.10.3, 20210 > > Wed Apr 5 18:41:21 2000: DEBUG: Handling with Radius::AuthFILE > > Wed Apr 5 18:41:21 2000: DEBUG: Radius::AuthFILE looks for match with x > > Wed Apr 5 18:41:21 2000: DEBUG: Radius::AuthFILE ACCEPT: > > Wed Apr 5 18:41:21 2000: DEBUG: FramedGroup 0 address is being assigned > > Wed Apr 5 18:41:21 2000: DEBUG: Access accepted for x > > Wed Apr 5 18:41:21 2000: DEBUG: Packet dump: > > *** Sending to 172.7.10.1 port 1040 > > Code: Access-Accept > > Identifier: 60 > > Authentic: w<7><0><0><188><26><0><0>d+<0><0>s<4><0><0> > > Attributes: > > Proxy-State = 0 > > Framed-IP-Address = 203.167.87.145 <--- where did THIS come from??? > > Framed-Protocol = PPP > > Framed-IP-Netmask = 255.255.255.255 > > Framed-Routing = None > > Framed-MTU = 1500 > > Framed-Compression = Van-Jacobson-TCP-IP > > > > > > Thanks again for your usual speedy response. > > > > > > Sincerely, > > > > Froilan C. Mendoza > > Manager - Systems Management > > Tridel Technologies, Inc. > > http://www.tridel.net > > > > > > > > === > > Archive at http://www.starport.net/~radiator/ > > Announcements on [EMAIL PROTECTED] > > To unsubscribe, email '[EMAIL PROTECTED]' with > > 'unsubscribe radiator' in the body of the message. > >-- End of excerpt from Froilan Mendoza > > > > -- > Mike McCauley [EMAIL PROTECTED] > Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW > 24 Bateman St Hampton, VIC 3188 Australia http://www.open.com.au > Phone +61 3 9598-0985 Fax +61 3 9598-0955 > > Radiator: the most portable, flexible and configurable RADIUS server > anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, > Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, > 2000, NT, MacOS X > === > Archive at http://www.starport.net/~radiator/ > Announcements on [EMAIL PROTECTED] > To unsubscribe, email '[EMAIL PROTECTED]' with > 'unsubscribe radiator' in the body of the message. > === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Re: Using UNIX password to authenticate
Hello: I am sorry, noe of the examples explicitly addresed my problem. Comment on my following config: **radius.cfg** Identifier Check-UNIX Filename%D/users **Users file** tunde Auth-Type = Check-UNIX Service-Type = Framed-User, Framed-Protocol = PPP, Framed-IP-Netmask = 255.255.255.0 *** The system does not authenticate with these settings. Is there anything wrong? 'Tunde - Original Message - From: Hugh Irvine <[EMAIL PROTECTED]> To: 'Tunde Ogedengbe <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Sunday, April 23, 2000 12:30 AM Subject: Re: (RADIATOR) Re: Using UNIX password to authenticate > > Hello 'Tunde - > > There are complete, commented examples in the following files: > > radius.cfg > users > > both in the main Radiator distribution directory. > > There are also many examples in the "goodies" directory of the distribution. > > Please read through all of those first, together with the manual to clarify any > points that may arise. I'll be happy to assist with any issues after that. > > regards > > Hugh > > > On Sat, 22 Apr 2000, 'Tunde Ogedengbe wrote: > > Hugh: > > > > Can you please send me a sample config file and user setting? > > > > 'Tunde > > - Original Message - > > From: Hugh Irvine <[EMAIL PROTECTED]> > > To: tty <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> > > Sent: Friday, April 21, 2000 12:09 AM > > Subject: Re: (RADIATOR) Re: Using UNIX password to authenticate > > > > > > > > > > Hello 'Tunde - > > > > > > On Thu, 20 Apr 2000, tty wrote: > > > > Ho do we make Radiator to authenticate in /etc/passwd in UNIX and also > > > > utilize differnt attributes for each user. The example given in the > > manual > > > > allows for a default attribute for all users. > > > > > > > > > > You would keep a DEFAULT entry for the normal case and then add the > > additional > > > users as individual entries with their specific attributes. > > > > > > # users file > > > # > > > # the configuration file must contain an AuthBy UNIX with Identifier > > Check-UNIX > > > # > > > # first specify a DEFAULT set of attributes for those users not > > specifically > > > # listed in this file > > > > > > DEFAULT Auth-Type = Check-UNIX > > > ... > > > > > > # then add those users who have special attributes > > > > > > user1 Auth-Type = Check-UNIX > > > ... > > > > > > user2 Auth-Type = Check-UNIX > > > ... > > > > > > ... > > > > > > hth > > > > > > Hugh > > > > > > -- > > > Radiator: the most portable, flexible and configurable RADIUS server > > > anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, > > > Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc. > > > Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X. > > > > > > > -- > Radiator: the most portable, flexible and configurable RADIUS server > anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, > Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc. > Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X. > > > > === > Archive at http://www.starport.net/~radiator/ > Announcements on [EMAIL PROTECTED] > To unsubscribe, email '[EMAIL PROTECTED]' with > 'unsubscribe radiator' in the body of the message. > === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Re: Using UNIX password to authenticate
Hugh: Will these settings be in the config file or the user fie? 'Tunde - Original Message - From: Hugh Irvine <[EMAIL PROTECTED]> To: tty <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Friday, April 21, 2000 12:09 AM Subject: Re: (RADIATOR) Re: Using UNIX password to authenticate > > Hello 'Tunde - > > On Thu, 20 Apr 2000, tty wrote: > > Ho do we make Radiator to authenticate in /etc/passwd in UNIX and also > > utilize differnt attributes for each user. The example given in the manual > > allows for a default attribute for all users. > > > > You would keep a DEFAULT entry for the normal case and then add the additional > users as individual entries with their specific attributes. > > # users file > # > # the configuration file must contain an AuthBy UNIX with Identifier Check-UNIX > # > # first specify a DEFAULT set of attributes for those users not specifically > # listed in this file > > DEFAULT Auth-Type = Check-UNIX > ... > > # then add those users who have special attributes > > user1 Auth-Type = Check-UNIX > ... > > user2 Auth-Type = Check-UNIX > ... > > ... > > hth > > Hugh > > -- > Radiator: the most portable, flexible and configurable RADIUS server > anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, > Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc. > Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X. > > === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Re: Using UNIX password to authenticate
Hugh: Can you please send me a sample config file and user setting? 'Tunde - Original Message - From: Hugh Irvine <[EMAIL PROTECTED]> To: tty <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Friday, April 21, 2000 12:09 AM Subject: Re: (RADIATOR) Re: Using UNIX password to authenticate > > Hello 'Tunde - > > On Thu, 20 Apr 2000, tty wrote: > > Ho do we make Radiator to authenticate in /etc/passwd in UNIX and also > > utilize differnt attributes for each user. The example given in the manual > > allows for a default attribute for all users. > > > > You would keep a DEFAULT entry for the normal case and then add the additional > users as individual entries with their specific attributes. > > # users file > # > # the configuration file must contain an AuthBy UNIX with Identifier Check-UNIX > # > # first specify a DEFAULT set of attributes for those users not specifically > # listed in this file > > DEFAULT Auth-Type = Check-UNIX > ... > > # then add those users who have special attributes > > user1 Auth-Type = Check-UNIX > ... > > user2 Auth-Type = Check-UNIX > ... > > ... > > hth > > Hugh > > -- > Radiator: the most portable, flexible and configurable RADIUS server > anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, > Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc. > Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X. > > === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Logfile
Does Radiator keep different logfile for diferent dates? 'Tunde === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Using Rodopi
I am trying to use Rodopi. However I can not see any place in the configuration where I will indocate the IP address of the server running Rodopi. The radiator is configured on a Linux while Rodopi is set up on an NT. 'Tunde === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Simultaneous-Use
We set our DefaultSimulataneous-Use to 1 and set Simultaneous-Use to multiple for individuals granted multiple connections. The system however is rejecting multiple connection for the customers with Simultaneous-Use setting > 1. What can I do? Tunde === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Radiator Accounting
I need help on Radiator accounting. The logfile is showing a message "WARNING: Bad authenticator in request from ". Nothing is being registered in the "detail" file even though calls get authenticated successfully. What is the solution? 'Tunde === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) IdleTime Out
What is the value of the integer assigned to IdleTime out attribute. Is it in seconds or minutes? 'Tunde === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Problem with Simultaneous-Use attribute
We are having problems with the Simultaneous-Use attribute of Radiator. The system is returning an error "WARNING: No such attribute Simultaneous-Use" Please help 'Tunde Ogedengbe === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
