(RADIATOR) ClientListSQL problem: fetchrow failed
Hi I've just upgraded to 2.18.2 and all works fine with my old 2.13 configuration file. Now I would like to test the ClientListSQL feature and when the server start it says: DBD::Oracle::st fetchrow failed: ORA-65285: Message 65285 not found; product=RDBMS; facility=ORA (DBD ERROR: OCIStmtFetch) at /usr/local/lib/perl5/site_perl/5.6.1/Radius/ClientListSQL.pm line 101, line 33. and in the log: Tue Jun 12 14:14:43 2001: DEBUG: Adding Clients from SQL database Tue Jun 12 14:14:43 2001: DEBUG: Query is: select CLIENT, SECRET, NULL, DUPINTERVAL, DEFAULTREALM from nettuno.DBT_RADIUSCLIENT Tue Jun 12 14:14:43 2001: INFO: Server started: Radiator 2.18.2 on presto.nextra.it But the server doesn't run correctly. I've looked for the error ORA-65285 but I haven't found anything. Does anyone have ever seen something like that? Here the configuration lines I'm testing: DBSourcedbi:Oracle:nextra DBUsername user DBAuth passwd GetClientQuery select CLIENT, SECRET, NULL, DUPINTERVAL, \ DEFAULTREALM \ from nettuno.DBT_RADIUSCLIENT regards Edoardo -- [EMAIL PROTECTED] phone: +39 051 6139242 fax: +39 051 6114455 === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) ClientListSQL problem: fetchrow failed
Hi Hugh > Do you have other clauses (AuthBy SQL) that connect successfully to the > database? Yes, we succesfully use querying the same oracle instance. > Have you correctly configured the nettuno.DBT_RADIUSCLIENT table? Do you mean if I can use it? yes, I have a script running in the same box that dump nettuno.DBT_RADIUSCLIENT to a file. > And have you correctly entered the Client definitions into the table? > Could you send me an example table dump of a Client definition? SQL> descr nettuno.DBT_RADIUSCLIENT Name Null? Type --- CLIENT NOT NULL VARCHAR2(255) NAS_IDENTIFIER VARCHAR2(255) SECRET VARCHAR2(255) DUPINTERVAL VARCHAR2(255) DEFAULTREALM VARCHAR2(255) SQL> select * from nettuno.DBT_RADIUSCLIENT; 130.186.34.6 it01a21 [removed] 2 nettuno.it thank you Edoardo > On Tuesday 12 June 2001 22:48, Edoardo Martelli wrote: > >>Hi >> >>I've just upgraded to 2.18.2 and all works fine with my old 2.13 >>configuration file. >>Now I would like to test the ClientListSQL feature and when the server >>start it says: >> >>DBD::Oracle::st fetchrow failed: ORA-65285: Message 65285 not found; >>product=RDBMS; facility=ORA (DBD ERROR: OCIStmtFetch) at >>/usr/local/lib/perl5/site_perl/5.6.1/Radius/ClientListSQL.pm line 101, >> line 33. >> >>and in the log: >> >>Tue Jun 12 14:14:43 2001: DEBUG: Adding Clients from SQL database >>Tue Jun 12 14:14:43 2001: DEBUG: Query is: select CLIENT, SECRET, >>NULL, DUPINTERVAL, DEFAULTREALM from nettuno.DBT_RADIUSCLIENT >>Tue Jun 12 14:14:43 2001: INFO: Server started: Radiator 2.18.2 on >>presto.nextra.it >> >>But the server doesn't run correctly. >> >>I've looked for the error ORA-65285 but I haven't found anything. >> >>Does anyone have ever seen something like that? >> >>Here the configuration lines I'm testing: >> >> >> DBSourcedbi:Oracle:nextra >> DBUsername user >> DBAuth passwd >> GetClientQuery select CLIENT, SECRET, NULL, DUPINTERVAL, \ >> DEFAULTREALM \ >> from nettuno.DBT_RADIUSCLIENT >> >> >>regards >>Edoardo >> > -- [EMAIL PROTECTED] phone: +39 051 6139242 fax: +39 051 6114455 === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Cisco VPN 3005 - Radiator communication
We are using vpn3005 with external authentication and radiator (2.18.2 which includes altiga attributes). this is the group profile: mygroup Password="x" Class="OU=mygroup;", Altiga-IPSec-Authentication-G="RADIUS", Altiga-Tunneling-Protocols-G/U="IPSec" this is a user profile: edoardo Password="y" Class="mygroup" bye edoardo Forbes Mike wrote: > I have tested a VPN 3005 to radiator. I only have done it for users for > IP Sec so far, not the group it is still internal. > > For users, I added auth server under config->user managament->groups-> > highlight the group and modify auth server. Then under group modify, > click the IP Sec tab, click Authentication Radius. This worked for > me. I have yet to put the group onto radius yet. > > Mike Forbes > > On Fri, 7 Sep 2001, Miomir Mihailovic wrote: > > >> Have anybody experience in communication between VPN 3005 and >>Radiator???. >> How can Radiator authenticate group/password and user/password for >>Cisco VPN 3005 when I say to VPN Concentrator that I will have external >>authentication-Radius??? >> Thanks >> >>=== >>Archive at http://www.open.com.au/archives/radiator/ >>Announcements on [EMAIL PROTECTED] >>To unsubscribe, email '[EMAIL PROTECTED]' with >>'unsubscribe radiator' in the body of the message. >> >> > > > === > Archive at http://www.open.com.au/archives/radiator/ > Announcements on [EMAIL PROTECTED] > To unsubscribe, email '[EMAIL PROTECTED]' with > 'unsubscribe radiator' in the body of the message. > > > > -- [EMAIL PROTECTED] phone: +39 051 6139242 fax: +39 051 6114455 === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) altiga radius profile
hi all does anybody know the radius attributes that an altiga/cisco vpn3005 needs to receive to authenticate groups and users? thank you Edoardo -- [EMAIL PROTECTED] phone: +39 051 6139242 fax: +39 051 6114455 === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) altiga radius profile
thank you Matthew but I don't know which attributes the vpn3000 needs to authenticate a group and which ones to authenticate a user. maybe you are in the right place: could you find some examples? I've already searched on cco but I didn't find anything useful. regards Edoardo Matthew Nichols wrote: > > Hello Edoardo, > > Have you seen this URL? > > http://www.cisco.com/warp/public/471/VSAs_rev22.html > > I think this is what you are looking for > > Thanks > > Matt > > At 05:34 PM 28/12/2000 +0100, Edoardo Martelli wrote: > > > hi all > > does anybody know the radius attributes that an altiga/cisco vpn3005 > > needs to receive to authenticate groups and users? > > > > thank you > > Edoardo > > -- > > [EMAIL PROTECTED] > > phone: +39 051 6139242 > > fax: +39 051 6114455 > > > > === > > Archive at http://www.starport.net/~radiator/ > > Announcements on [EMAIL PROTECTED] > > To unsubscribe, email '[EMAIL PROTECTED]' with > > 'unsubscribe radiator' in the body of the message. > > -- > Matthew Nichols || Level 10 > Customer Support Engineer|| Building B > Asia Pacific TAC||| ||| 821-843 Pacific Hwy > Ph:+61 2 8448 7038 .:|:..:|:. Chatswood > Fx:+61 2 8448 7971 cisco SystemsNSW, 2067 > Email:[EMAIL PROTECTED] Australia > > Have you used Cisco TAC Web Site Lately? > TAC CaseOpen: http://www.cisco.com/tac/caseopen/ > TAC Newsletter: http://www.cisco.com/tac/newsletter/ > TAC Tools: http://www.cisco.com/tac/tools/ > TAC Documents: http://www.cisco.com/tac/documents/ > TAC Product Page: http://www.cisco.com/tac/products/ > TAC Technologies: http://www.cisco.com/tac/technologies/ > TAC Solutions: http://www.cisco.com/tac/solutions/ > TAC Top Issues: http://www.cisco.com/kobayashi/support/top_issues/ -- [EMAIL PROTECTED] phone: +39 051 6139242 fax: +39 051 6114455 === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) altiga radius profile
in-Authentication-G/U PAP 1 VALUE Altiga-L2TP-Min-Authentication-G/U CHAP2 VALUE Altiga-L2TP-Min-Authentication-G/U EAP-MD5 4 VALUE Altiga-L2TP-Min-Authentication-G/U EAP-GTC 8 VALUE Altiga-L2TP-Min-Authentication-G/U EAP-TLS 16 VALUE Altiga-L2TP-Min-Authentication-G/U MSCHAPv132 VALUE Altiga-L2TP-Min-Authentication-G/U MSCHAPv264 VALUE Altiga-L2TP-Min-Authentication-G/U Default 102 VALUE Altiga-PPTP-Encryption-G 40bit 2 VALUE Altiga-PPTP-Encryption-G 40-Encryption-Req 3 VALUE Altiga-PPTP-Encryption-G 128 4 VALUE Altiga-PPTP-Encryption-G 128-Encryption-Req 5 VALUE Altiga-PPTP-Encryption-G 40-or-128 6 VALUE Altiga-PPTP-Encryption-G 40-or-128-Encry-Req 7 VALUE Altiga-PPTP-Encryption-G 40-Stateless-Req10 VALUE Altiga-PPTP-Encryption-G 40-Enc/Stateless-Req11 VALUE Altiga-PPTP-Encryption-G 128-Stateless-Req 12 VALUE Altiga-PPTP-Encryption-G 128-Enc/Stateless-Req 13 VALUE Altiga-PPTP-Encryption-G 40/128-Stateless-Req14 VALUE Altiga-PPTP-Encryption-G 40/128-Enc/Statls-Req 15 VALUE Altiga-L2TP-Encryption-G 40bit 2 VALUE Altiga-L2TP-Encryption-G 40-Encryption-Req 3 VALUE Altiga-L2TP-Encryption-G 128 4 VALUE Altiga-L2TP-Encryption-G 128-Encryption-Req 5 VALUE Altiga-L2TP-Encryption-G 40-or-128 6 VALUE Altiga-L2TP-Encryption-G 40-or-128-Encry-Req 7 VALUE Altiga-L2TP-Encryption-G 40-Stateless-Req10 VALUE Altiga-L2TP-Encryption-G 40-Enc/Stateless-Req11 VALUE Altiga-L2TP-Encryption-G 128-Stateless-Req 12 VALUE Altiga-L2TP-Encryption-G 128-Enc/Stateless-Req 13 VALUE Altiga-L2TP-Encryption-G 40/128-Stateless-Req14 VALUE Altiga-L2TP-Encryption-G 40/128-Enc/Statls-Req 15 VALUE Altiga-IPSec-L2L-Keepalives-G ON 1 VALUE Altiga-IPSec-L2L-Keepalives-G OFF 0 VALUE Altiga-IPSec-Tunnel-Type-G LAN-to-LAN 1 VALUE Altiga-IPSec-Tunnel-Type-G Remote-Access 2 VALUE Altiga-IPSec-Mode-Config-G ON 1 VALUE Altiga-IPSec-Mode-Config-G OFF 0 VALUE Altiga-IPSec-User-Group-Lock-G ON 1 VALUE Altiga-IPSec-User-Group-Lock-G OFF 0 you can now ship the dictionary.altiga file ;-) thank you Edoardo Hugh Irvine wrote: > > Hello Edoardo - > > On Saturday 30 December 2000 01:33, Edoardo Martelli wrote: > > thank you Matthew > > > > but I don't know which attributes the vpn3000 needs to authenticate a > > group and which ones to authenticate a user. > > maybe you are in the right place: could you find some examples? I've > > already searched on cco but I didn't find anything useful. > > > > Just out of interest, what do mean by a "group"? The Radius protocol only > handles usernames, passwords and assorted connection attributes, there is no > concept of a "group". > > Maybe you could explain what you are trying to do? > > thanks > > Hugh > > -- > Radiator: the most portable, flexible and configurable RADIUS server > anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. > - > Nets: internetwork inventory and management - graphical, extensible, > flexible with hardware, software, platform and database independence. -- [EMAIL PROTECTED] phone: +39 051 6139242 fax: +39 051 6114455 === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.