(RADIATOR) ClientListSQL problem: fetchrow failed

2001-06-12 Thread Edoardo Martelli

Hi

I've just upgraded to 2.18.2 and all works fine with my old 2.13 
configuration file.
Now I would like to test the ClientListSQL feature and when the server 
start it says:

DBD::Oracle::st fetchrow failed: ORA-65285: Message 65285 not found; 
product=RDBMS; facility=ORA (DBD ERROR: OCIStmtFetch) at 
/usr/local/lib/perl5/site_perl/5.6.1/Radius/ClientListSQL.pm line 101, 
 line 33.

and in the log:

Tue Jun 12 14:14:43 2001: DEBUG: Adding Clients from SQL database
Tue Jun 12 14:14:43 2001: DEBUG: Query is: select CLIENT, SECRET, 
NULL, DUPINTERVAL, DEFAULTREALM from nettuno.DBT_RADIUSCLIENT
Tue Jun 12 14:14:43 2001: INFO: Server started: Radiator 2.18.2 on 
presto.nextra.it

But the server doesn't run correctly.

I've looked for the error ORA-65285 but I haven't found anything.

Does anyone have ever seen something like that?

Here the configuration lines I'm testing:


 DBSourcedbi:Oracle:nextra
 DBUsername  user
 DBAuth  passwd
 GetClientQuery select CLIENT, SECRET, NULL, DUPINTERVAL, \
DEFAULTREALM \
 from nettuno.DBT_RADIUSCLIENT


regards
Edoardo

-- 
[EMAIL PROTECTED]
phone: +39 051 6139242
fax:   +39 051 6114455

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) ClientListSQL problem: fetchrow failed

2001-06-13 Thread Edoardo Martelli

Hi Hugh

> Do you have other clauses (AuthBy SQL) that connect successfully to the 
> database? 


Yes, we succesfully use   querying 
the same oracle instance.

> Have you correctly configured the nettuno.DBT_RADIUSCLIENT table? 


Do you mean if I can use it? yes, I have a script running in the same 
box that dump nettuno.DBT_RADIUSCLIENT to a file.


> And have you correctly entered the Client definitions into the table?

> Could you send me an example table dump of a Client definition?


SQL> descr nettuno.DBT_RADIUSCLIENT
Name Null? Type
---  
CLIENT NOT NULL VARCHAR2(255)
NAS_IDENTIFIER VARCHAR2(255)
SECRET VARCHAR2(255)
DUPINTERVAL VARCHAR2(255)
DEFAULTREALM VARCHAR2(255)

SQL> select * from nettuno.DBT_RADIUSCLIENT;
130.186.34.6
it01a21
[removed]
2
nettuno.it

thank you
Edoardo



> On Tuesday 12 June 2001 22:48, Edoardo Martelli wrote:
> 
>>Hi
>>
>>I've just upgraded to 2.18.2 and all works fine with my old 2.13
>>configuration file.
>>Now I would like to test the ClientListSQL feature and when the server
>>start it says:
>>
>>DBD::Oracle::st fetchrow failed: ORA-65285: Message 65285 not found;
>>product=RDBMS; facility=ORA (DBD ERROR: OCIStmtFetch) at
>>/usr/local/lib/perl5/site_perl/5.6.1/Radius/ClientListSQL.pm line 101,
>> line 33.
>>
>>and in the log:
>>
>>Tue Jun 12 14:14:43 2001: DEBUG: Adding Clients from SQL database
>>Tue Jun 12 14:14:43 2001: DEBUG: Query is: select CLIENT, SECRET,
>>NULL, DUPINTERVAL, DEFAULTREALM from nettuno.DBT_RADIUSCLIENT
>>Tue Jun 12 14:14:43 2001: INFO: Server started: Radiator 2.18.2 on
>>presto.nextra.it
>>
>>But the server doesn't run correctly.
>>
>>I've looked for the error ORA-65285 but I haven't found anything.
>>
>>Does anyone have ever seen something like that?
>>
>>Here the configuration lines I'm testing:
>>
>>
>> DBSourcedbi:Oracle:nextra
>> DBUsername  user
>> DBAuth  passwd
>> GetClientQuery select CLIENT, SECRET, NULL, DUPINTERVAL, \
>>  DEFAULTREALM \
>> from nettuno.DBT_RADIUSCLIENT
>>
>>
>>regards
>>Edoardo
>>
> 



-- 
[EMAIL PROTECTED]
phone: +39 051 6139242
fax:   +39 051 6114455

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Cisco VPN 3005 - Radiator communication

2001-09-17 Thread Edoardo Martelli

We are using vpn3005 with external authentication and radiator (2.18.2 which 
includes altiga attributes).

this is the group profile:
mygroup Password="x"
 Class="OU=mygroup;",
 Altiga-IPSec-Authentication-G="RADIUS",
 Altiga-Tunneling-Protocols-G/U="IPSec"

this is a user profile:
edoardo Password="y"
 Class="mygroup"



bye
edoardo

Forbes Mike wrote:
> I have tested a VPN 3005 to radiator.  I only have done it for users for
> IP Sec so far, not the group it is still internal.
> 
> For users, I added auth server under config->user managament->groups->
> highlight the group and modify auth server.  Then under group modify,
> click  the IP Sec tab, click Authentication Radius.  This worked for
> me.  I have yet to put the group onto radius yet.
> 
> Mike Forbes
> 
> On Fri, 7 Sep 2001, Miomir Mihailovic wrote:
> 
> 
>>  Have anybody experience in communication between VPN 3005 and
>>Radiator???.
>>  How can Radiator authenticate group/password and user/password for
>>Cisco VPN 3005 when I say to VPN Concentrator that I will have external
>>authentication-Radius???
>>  Thanks
>>
>>===
>>Archive at http://www.open.com.au/archives/radiator/
>>Announcements on [EMAIL PROTECTED]
>>To unsubscribe, email '[EMAIL PROTECTED]' with
>>'unsubscribe radiator' in the body of the message.
>>
>>
> 
> 
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
> 
> 
> 
> 


-- 
[EMAIL PROTECTED]
phone: +39 051 6139242
fax:   +39 051 6114455

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) altiga radius profile

2000-12-28 Thread Edoardo Martelli

hi all
does anybody know the radius attributes that an altiga/cisco vpn3005
needs to receive to authenticate groups and users?

thank you
Edoardo
-- 
[EMAIL PROTECTED]  
phone: +39 051 6139242 
fax:   +39 051 6114455

===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) altiga radius profile

2000-12-29 Thread Edoardo Martelli

thank you Matthew 

but I don't know which attributes the vpn3000 needs to authenticate a
group and which ones to authenticate a user.
maybe you are in the right place: could you find some examples? I've
already searched on cco but I didn't find anything useful. 

regards
Edoardo

Matthew Nichols wrote:
> 
> Hello Edoardo,
> 
> Have you seen this URL?
> 
> http://www.cisco.com/warp/public/471/VSAs_rev22.html
> 
> I think this is what you are looking for
> 
> Thanks
> 
> Matt
> 
> At 05:34 PM 28/12/2000 +0100, Edoardo Martelli wrote:
> 
> > hi all
> > does anybody know the radius attributes that an altiga/cisco vpn3005
> > needs to receive to authenticate groups and users?
> >
> > thank you
> > Edoardo
> > --
> > [EMAIL PROTECTED]
> > phone: +39 051 6139242
> > fax:   +39 051 6114455
> >
> > ===
> > Archive at http://www.starport.net/~radiator/
> > Announcements on [EMAIL PROTECTED]
> > To unsubscribe, email '[EMAIL PROTECTED]' with
> > 'unsubscribe radiator' in the body of the message.
> 
> --
> Matthew Nichols  ||   Level 10
> Customer Support Engineer||   Building B
> Asia Pacific TAC|||  |||  821-843 Pacific Hwy
> Ph:+61 2 8448 7038   .:|:..:|:.   Chatswood
> Fx:+61 2 8448 7971 cisco   SystemsNSW, 2067
> Email:[EMAIL PROTECTED]  Australia
> 
> Have you used Cisco TAC Web Site Lately?
> TAC CaseOpen:   http://www.cisco.com/tac/caseopen/
> TAC Newsletter: http://www.cisco.com/tac/newsletter/
> TAC Tools:  http://www.cisco.com/tac/tools/
> TAC Documents:  http://www.cisco.com/tac/documents/
> TAC Product Page:   http://www.cisco.com/tac/products/
> TAC Technologies:   http://www.cisco.com/tac/technologies/
> TAC Solutions:  http://www.cisco.com/tac/solutions/
> TAC Top Issues: http://www.cisco.com/kobayashi/support/top_issues/

-- 
[EMAIL PROTECTED]  
phone: +39 051 6139242 
fax:   +39 051 6114455

===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) altiga radius profile

2001-01-04 Thread Edoardo Martelli
in-Authentication-G/U PAP 1
VALUE Altiga-L2TP-Min-Authentication-G/U CHAP2
VALUE Altiga-L2TP-Min-Authentication-G/U EAP-MD5 4 
VALUE Altiga-L2TP-Min-Authentication-G/U EAP-GTC 8
VALUE Altiga-L2TP-Min-Authentication-G/U EAP-TLS 16
VALUE Altiga-L2TP-Min-Authentication-G/U MSCHAPv132
VALUE Altiga-L2TP-Min-Authentication-G/U MSCHAPv264
VALUE Altiga-L2TP-Min-Authentication-G/U Default 102
VALUE Altiga-PPTP-Encryption-G   40bit   2
VALUE Altiga-PPTP-Encryption-G   40-Encryption-Req   3
VALUE Altiga-PPTP-Encryption-G   128 4
VALUE Altiga-PPTP-Encryption-G   128-Encryption-Req  5
VALUE Altiga-PPTP-Encryption-G   40-or-128   6
VALUE Altiga-PPTP-Encryption-G   40-or-128-Encry-Req 7
VALUE Altiga-PPTP-Encryption-G   40-Stateless-Req10
VALUE Altiga-PPTP-Encryption-G   40-Enc/Stateless-Req11
VALUE Altiga-PPTP-Encryption-G   128-Stateless-Req   12
VALUE Altiga-PPTP-Encryption-G   128-Enc/Stateless-Req   13
VALUE Altiga-PPTP-Encryption-G   40/128-Stateless-Req14
VALUE Altiga-PPTP-Encryption-G   40/128-Enc/Statls-Req   15
VALUE Altiga-L2TP-Encryption-G   40bit   2
VALUE Altiga-L2TP-Encryption-G   40-Encryption-Req   3
VALUE Altiga-L2TP-Encryption-G   128 4
VALUE Altiga-L2TP-Encryption-G   128-Encryption-Req  5
VALUE Altiga-L2TP-Encryption-G   40-or-128   6
VALUE Altiga-L2TP-Encryption-G   40-or-128-Encry-Req 7
VALUE Altiga-L2TP-Encryption-G   40-Stateless-Req10
VALUE Altiga-L2TP-Encryption-G   40-Enc/Stateless-Req11
VALUE Altiga-L2TP-Encryption-G   128-Stateless-Req   12
VALUE Altiga-L2TP-Encryption-G   128-Enc/Stateless-Req   13
VALUE Altiga-L2TP-Encryption-G   40/128-Stateless-Req14
VALUE Altiga-L2TP-Encryption-G   40/128-Enc/Statls-Req   15
VALUE Altiga-IPSec-L2L-Keepalives-G  ON  1
VALUE Altiga-IPSec-L2L-Keepalives-G  OFF 0
VALUE Altiga-IPSec-Tunnel-Type-G LAN-to-LAN  1
VALUE Altiga-IPSec-Tunnel-Type-G Remote-Access   2
VALUE Altiga-IPSec-Mode-Config-G ON  1
VALUE Altiga-IPSec-Mode-Config-G OFF 0
VALUE Altiga-IPSec-User-Group-Lock-G ON  1
VALUE Altiga-IPSec-User-Group-Lock-G OFF 0

you can now ship the dictionary.altiga file ;-)

thank you
Edoardo

Hugh Irvine wrote:
> 
> Hello Edoardo -
> 
> On Saturday 30 December 2000 01:33, Edoardo Martelli wrote:
> > thank you Matthew
> >
> > but I don't know which attributes the vpn3000 needs to authenticate a
> > group and which ones to authenticate a user.
> > maybe you are in the right place: could you find some examples? I've
> > already searched on cco but I didn't find anything useful.
> >
> 
> Just out of interest, what do mean by a "group"? The Radius protocol only
> handles usernames, passwords and assorted connection attributes, there is no
> concept of a "group".
> 
> Maybe you could explain what you are trying to do?
> 
> thanks
> 
> Hugh
> 
> --
> Radiator: the most portable, flexible and configurable RADIUS server
> anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
> -
> Nets: internetwork inventory and management - graphical, extensible,
> flexible with hardware, software, platform and database independence.

-- 
[EMAIL PROTECTED]  
phone: +39 051 6139242 
fax:   +39 051 6114455

===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.