RE: (RADIATOR) Session Timeout Until xx:xx

1999-12-08 Thread Ferhat DILMAN
Title: RE: (RADIATOR) Session Timeout Until xx:xx





Hi,


For double checking:
Here is my users file and the cfg file. And Session-Timeout works this way very well. I will try the same functionality live with SQL database today.

fred User-Password = x,
 Time = Al0800-1800
 User-Service = Framed-User,
 Framed-Protocol = PPP,
 Framed-Netmask = 255.255.255.0,
 Framed-Routing = None,
 Framed-MTU = 1500,
 Framed-Compression = Van-Jacobson-TCP-IP


# radius.cfg
Foreground
LogStdout
LogDir /var/radius
DbDir /usr/local/etc
LogFile %L/logfile
DictionaryFile %D/dictionary.ascend
Trace 4
Client DEFAULT
 Secret xxx
 DupInterval 300
 IgnoreAcctSignature
/Client
Realm DEFAULT
 AuthBy FILE
 Filename %D/users
 AddToReply Session-Timeout = until 1800
 /AuthBy
 # Log accounting to the detail file in LogDir
 AcctLogFileName %L/detail
/Realm





 -Original Message-
 From: Hugh Irvine [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, December 08, 1999 12:56 AM
 To: Ferhat DILMAN; Mike McCauley; [EMAIL PROTECTED]; Ferhat DILMAN;
 [EMAIL PROTECTED]
 Cc: tom minchin
 Subject: RE: (RADIATOR) Session Timeout Until xx:xx
 
 
 
 Hello Ferhat -
 
 On Tue, 07 Dec 1999, Ferhat DILMAN wrote:
  %_Thanks for it. It is now working.
  
  By the way, in the documentation, it says Session-Timeout = 
 until 1800.
  
  It did not work with quotes. It worked without 
  
 
 Curious - it works with  here. Could you send us more 
 details, including your
 configuration file (w/o secrets) so we can see what is happening?
 
 thanks
 
 Hugh
 
 --
 Radiator: the most portable, flexible and configurable RADIUS server
 anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
 Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
 NT, Rhapsody





RE: (RADIATOR) Session Timeout Until xx:xx

1999-12-07 Thread Ferhat DILMAN
Title: RE: (RADIATOR) Session Timeout Until xx:xx





Thanks for it. It is now working.


By the way, in the documentation, it says Session-Timeout = until 1800.


It did not work with quotes. It worked without 


Thanks, cool functionality :)


Ferhat


 -Original Message-
 From: Mike McCauley [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, December 07, 1999 7:49 PM
 To: [EMAIL PROTECTED]; Ferhat DILMAN; [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]; tom minchin
 Subject: Re: (RADIATOR) Session Timeout Until xx:xx
 
 
 Hello Ferhat,
 
 On Dec 7, 11:41am, Hugh Irvine wrote:
  Subject: RE: (RADIATOR) Session Timeout Until xx:xx
 
  Hello Ferhat -
 
  On Tue, 07 Dec 1999, Ferhat DILMAN wrote:
   %_Hi,
  
   I have tested Session-Timeout=until 1800 parameter and 
 does not work.
  
 
  Thanks for pointing this out - as it happens, a user reply item of
 
   Session-Timeout=until 1800
 
  does in fact work. However, due to an oversight, it doesn't 
 work in an
  AddToReply. Our apologies for this and Mike will post a fix shortly.
 
 Hugh is right. The special handling of Session-Timeout for until was
 not being done if it was in a DefaultReply and AddToReply.
 
 I have uploaded a fixed version of AuthGeneric.pm
 
 Thanks for reporting this.
 Cheers.
 
 -- 
 Mike McCauley [EMAIL PROTECTED]
 Open System Consultants Pty. Ltd Unix, Perl, 
 Motif, C++, WWW
 24 Bateman St Hampton, VIC 3188 Australia http://www.open.com.au
 Phone +61 3 9598-0985 Fax +61 3 9598-0955
 
 Radiator: the most portable, flexible and configurable RADIUS server 
 anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
 Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, 
 NT, Rhapsody





Re: (RADIATOR) Session Timeout Until xx:xx

1999-12-06 Thread tom minchin

On Mon, Dec 06, 1999 at 04:04:57PM +0200, Ferhat DILMAN wrote:
 Hi,
 
 I have tested Session-Timeout="until 1800" parameter and does not work.
 
 The config is: Ascend TNT, Radiator 2.14.1 with new AuthGeneric.pm module on
 Debian Linux and here is the user file and the config file and the logfile.
 
 I have radiator main server and i have created a proxy. Main server sends
 the requests to this server. By the way, main server is still in 2.13
 version. Does it matter?
 

Yeah, the Ascends like Ascend-Maximum-Time, so use that instead. Unfortunately
unless the code is cleverer than it looks to me (not unlikely) you'll have
to butcher the code slightly so that it uses the Ascend attribute rather
than the standard RADIUS one. Should be a simple search and replace.

[EMAIL PROTECTED]

===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Session Timeout Until xx:xx

1999-12-06 Thread Mike McCauley

Hi Tom,

On Dec 7,  9:19am, tom minchin wrote:
 Subject: Re: (RADIATOR) Session Timeout Until xx:xx
 On Mon, Dec 06, 1999 at 04:04:57PM +0200, Ferhat DILMAN wrote:
.

 Yeah, the Ascends like Ascend-Maximum-Time, so use that instead.
Unfortunately
 unless the code is cleverer than it looks to me (not unlikely) you'll have
 to butcher the code slightly so that it uses the Ascend attribute rather
 than the standard RADIUS one. Should be a simple search and replace.

Does that mean that Ascend does not honour Session-Timeout?

Cheers.

-- 
Mike McCauley   [EMAIL PROTECTED]
Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985   Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, 
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Session Timeout Until xx:xx

1999-12-06 Thread Tom Gwilt

Using the same basic setup (Ascend TNT, Radiator 2.14.1, new
AuthGeneric.pm. Difference is that I run it on BSDI 4.0.1) it works.

Here is what I did (suggestions thanks to Hugh)

First I set up special files for timed users, disconnect non pay users,
vacation users, etc.

Here is my radius.cfg:

AuthBy UNIX
Identifier System
Filename /etc/master.passwd
Match ^([^:]*):([^:]*)
/AuthBy
 
# This clause handles all users from all realms by looking them up
# in the users file at /usr/local/etc/raddb/users
 
Realm DEFAULT
AuthByPolicy ContinueWhileAccept
 
AuthBy FILE
AcceptIfMissing
Filename %D/dnp-users
/AuthBy
 
AuthBy FILE
AcceptIfMissing
Filename %D/vacation-users
/AuthBy
 
AuthBy FILE
AcceptIfMissing
Filename %D/time-users
/AuthBy
 
AuthBy FILE
Filename %D/users
/AuthBy
 
AcctLogFileName %L/detail
/Realm

Now in my /usr/local/etc/raddb directory I have the following files:

users
dnp-users
vacation-users
timed-users

The timed-users file looks like this:

# File for timed users
# Format for data entry:
# username password Time = "A10800-1700", Auth-Type = System
#   Service-Type = Framed-User,
#   Framed-Protocol = PPP
#
timetest Password = "timetest", Time = "Al1139-1145", Auth-Type = System
Session-Timeout = until 1145,
Service-Type = Framed-User,
Framed-Protocol = PPP 

(the timetest user was a test...it worked)

HTH,

T.
  ===
  Archive at http://www.thesite.com.au/~radiator/
  To unsubscribe, email '[EMAIL PROTECTED]' with

===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



RE: (RADIATOR) Session Timeout Until xx:xx

1999-12-06 Thread Hugh Irvine


Hello Ferhat -

On Tue, 07 Dec 1999, Ferhat DILMAN wrote:
 %_Hi,
 
 I have tested Session-Timeout="until 1800" parameter and does not work.
 

Thanks for pointing this out - as it happens, a user reply item of 

Session-Timeout="until 1800" 

does in fact work. However, due to an oversight, it doesn't work in an
AddToReply. Our apologies for this and Mike will post a fix shortly.

 The config is: Ascend TNT, Radiator 2.14.1 with new AuthGeneric.pm module on
 Debian Linux and here is the user file and the config file and the logfile.
 
 I have radiator main server and i have created a proxy. Main server sends
 the requests to this server. By the way, main server is still in 2.13
 version. Does it matter?
 
 Anybody tested this new parameter?
 
 P.S. I have added the Ascend attribute into the dictionary:
 ATTRIBUTE   Session-Timeout 27  integer
 

You mention in your other email that Ascend uses 

ATTRIBUTE   Ascend-Maximum-Time 194 integer

does this mean that Ascends do not honour the standard Session-Timeout?

You might also check what version on Ascend software you are running and
whether other versions behave differently?

thanks

Hugh

--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
NT, Rhapsody

===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Session Timeout Until xx:xx

1999-12-06 Thread Mike McCauley

Hello Ferhat,

On Dec 7, 11:41am, Hugh Irvine wrote:
 Subject: RE: (RADIATOR) Session Timeout Until xx:xx

 Hello Ferhat -

 On Tue, 07 Dec 1999, Ferhat DILMAN wrote:
  %_Hi,
 
  I have tested Session-Timeout="until 1800" parameter and does not work.
 

 Thanks for pointing this out - as it happens, a user reply item of

   Session-Timeout="until 1800"

 does in fact work. However, due to an oversight, it doesn't work in an
 AddToReply. Our apologies for this and Mike will post a fix shortly.

Hugh is right. The special handling of Session-Timeout for "until" was
not being done if it was in a DefaultReply and AddToReply.

I have uploaded a fixed version of AuthGeneric.pm

Thanks for reporting this.
Cheers.

-- 
Mike McCauley   [EMAIL PROTECTED]
Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985   Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, 
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.