Re: Newbie documentation/instruction request

2002-01-17 Thread Nicolas Blanc
Hi, I think that before configuring Radius, you should first read what it means (Miquel and Milan gived you some stuff for thet) but after you should consider what is your needs and what are your knowledges. Freeradius is higly flexible so that you can manage thousand of custommer via SQL or 10

Which radius server for usage reporting?

2002-01-17 Thread Dr. Muhammad Masroor Ali
Hello All, I will rephrase my previous query. So far my Internet search is concerned ICradius lets "users to check their usage history". But icradius had its last release in June, 2001. Any suggestion on this? Any page for a comprehensive comparison of radius servers? Thanks a lot for your re

Re: mysql/op ...

2002-01-17 Thread Do-Risika RAFIEFERANTSIARONJY
[EMAIL PROTECTED] wrote: > > Do-Risika RAFIEFERANTSIARONJY <[EMAIL PROTECTED]> wrote: > > It's really what I need, but what should happen if some of these > > attributes are not provided by the nas ? (because some of our nas > > provides Ascend-Data-Rate, but the others no ...) > > Then their

What to do to show usage statistics?

2002-01-17 Thread Dr. Muhammad Masroor Ali
Hello All, I will rephrase my previous query. So far my Internet search is concerned ICradius lets "users to check their usage history". But icradius had its last release in June, 2001. Any suggestion on this issue? Any page for a comprehensive comparison of radius servers? Thanks a lot for your

Re: compiling rlm_sql_mysql

2002-01-17 Thread Nicolas Blanc
Hi, As I had the sam compiling problem a few days ago, WIth the help of this list I resolved it by forcing the 'libdir' param in radiusd.conf Nicolas - Original Message - From: "Joe Maimon" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, January 13, 2002 10:16 PM Subject: Re

Pb With MySQL Auth

2002-01-17 Thread Nicolas Blanc
Hi, Of course I've read "processing_users_file" , "module_interface" and README files and I've also seen http://www.frontios.com/freeradius.html ... but I still have some problems with SQL. FR0.4 with MySQL Authenticates Well only if the user exists in radcheck, it seems not to consider the DEFA

Re: ascend-data-filter not in abinary format

2002-01-17 Thread Prudesh Singh
Thanks for your suggestions. Turns out I had it working properly, the isp with the proxy was screwing things up for me. PSingh _ Chat with friends online, try MSN Messenger: http://messenger.msn.com - List info/subscribe/unsubsc

Re: ms-chap and ms-chapv2

2002-01-17 Thread Frank Cusack
On Thu, Jan 17, 2002 at 06:09:54PM -0800, Lance Uyehara wrote: > OK. 3 patches have been posted. 1 committed as-is; the others by fixing the actual problem rather than the symptom. thanks /fc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: patch for src/main/auth.c

2002-01-17 Thread Frank Cusack
whoops, committed, thanks. /fc On Thu, Jan 17, 2002 at 06:06:20PM -0800, Lance Uyehara wrote: > Missing { > > -Lance > > --- src/main/auth.orig Thu Jan 17 14:43:39 2002 > +++ src/main/auth.c Thu Jan 17 14:43:53 2002 > @@ -260,7 +260,7 @@ > else > password_pair = pai

patch for src/modules/rlm_eap/mem.c

2002-01-17 Thread Lance Uyehara
Fixes a param mismatch in the way eap_packet_alloc is called. -Lance --- src/modules/rlm_eap/mem.origThu Jan 17 14:40:03 2002 +++ src/modules/rlm_eap/mem.c Thu Jan 17 14:40:18 2002 @@ -27,7 +27,7 @@ /* * Allocate a new EAP_PACKET */ -EAP_PACKET *eap_packet_alloc() +EAP_PACKE

Re: ms-chap and ms-chapv2

2002-01-17 Thread Lance Uyehara
> "Lance Uyehara" <[EMAIL PROTECTED]> wrote: > > I got the 20020117 snapshot and had to make some changes (4, in 3 files) to > > compile it. Is anyone interested in some patches? All are quick and dirty to > > get compiled (on freebsd 4.3-release), but I

patch for src/modules/rlm_eap/eap.h

2002-01-17 Thread Lance Uyehara
Two fixes: 1. Fix a problem finding u_int_32_t 2. Fix a prototype mismatch with the way eap_packet_alloc() is called. -Lance --- src/modules/rlm_eap/eap.origThu Jan 17 14:37:29 2002 +++ src/modules/rlm_eap/eap.h Thu Jan 17 14:39:35 2002 @@ -2,6 +2,7 @@ #define _EAP_H #if HAVE_NETI

patch for src/main/auth.c

2002-01-17 Thread Lance Uyehara
Missing { -Lance --- src/main/auth.orig Thu Jan 17 14:43:39 2002 +++ src/main/auth.c Thu Jan 17 14:43:53 2002 @@ -260,7 +260,7 @@ else password_pair = pairfind(request->config_items, PW_PASSWORD); - if (auth_type < 0) + if (auth_type < 0) {

Re: select() error about freeradius-0.4

2002-01-17 Thread Rubby
Hi,alan, > What platform are you running it on? WHat changes have you made to >the source? What else are you doing to the system? My platform is RedHat 7.2, I did not make changes to the source except a moudles/rlm_sql.c patch, and I did not do anything to the system. When I met this , I en

Re: ms-chap and ms-chapv2

2002-01-17 Thread aland
"Lance Uyehara" <[EMAIL PROTECTED]> wrote: > I got the 20020117 snapshot and had to make some changes (4, in 3 files) to > compile it. Is anyone interested in some patches? All are quick and dirty to > get compiled (on freebsd 4.3-release), but I can post them somewhere

Thank You Alan (was Re: ms-chap and ms-chapv2)

2002-01-17 Thread Lance Uyehara
the MS-CHAP-MPPE-KEYS attribute > > > For MS-CHAPv2 I need the MS-CHAP2-Success, MS-MPPE-Send-Key and > > > MS-MPPE-Recv-Key.=20 > > > > The code to make these attributes work is not in 0.4. You MUST > > upgrade to the latest CVS snapshot. See the web page for

Re: IP Pools

2002-01-17 Thread aland
Lee W <[EMAIL PROTECTED]> wrote: > I setup my freeradius three days ago so my question is newbee, I'm sure. I > have set it up with a IP pool starting, lets use 192.168.x.x+ . I know the > plus sets the IP as the base/first IP, but is there a way other then a mask > i.e. (Framed-IP-Netmask) to

RE: ascend-data-filter not in abinary format

2002-01-17 Thread Chris West
Download NTRADPING. Great utility for checking your radius. I used it extensively while trying to get the filters to work. It prints the binary strings great. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, January 1

IP Pools

2002-01-17 Thread Lee W
HI, I setup my freeradius three days ago so my question is newbee, I'm sure. I have set it up with a IP pool starting, lets use 192.168.x.x+ . I know the plus sets the IP as the base/first IP, but is there a way other then a mask i.e. (Framed-IP-Netmask) to set the top, or last IP in the pool?

Filter-ID

2002-01-17 Thread David Bronson
Hi Again all,   I have been working on getting the Filter-Id attribute to work.   Here is what I have. A portmaster 2e ComOS version 3.5 I am trying to get filter-id to work for me with freeradius using mysql. Authentications and realms work fine and when running radius in debug (-xxyz) I s

CHAP/LDAP authenticate

2002-01-17 Thread Smith, Steven N
freeradius 0.4, solaris 8, openldap 2.0.18 My problem is this, I can authenticate fine against LDAP, but when I enable CHAP in my testing client, I get Attribute "Password" is required for authentication. Cannot use "CHAP-Password". If I remove ldap from the authenticate section of radiusd.con

Re: ms-chap and ms-chapv2

2002-01-17 Thread Lance Uyehara
S-CHAPv2 I need the MS-CHAP2-Success, MS-MPPE-Send-Key and > > MS-MPPE-Recv-Key.=20 > > The code to make these attributes work is not in 0.4. You MUST > upgrade to the latest CVS snapshot. See the web page for details on > downloading it. I got the 20020117 snapshot and had to

Re: CHAP/LDAP authenticate

2002-01-17 Thread aland
"Smith, Steven N" <[EMAIL PROTECTED]> wrote: > My problem is this, I can authenticate fine against LDAP, but when I enable > CHAP in my testing client, I get Attribute "Password" is required for > authentication. Cannot use "CHAP-Password". See the FAQ, and the mail archives for an answer. A

Re: Remote logging

2002-01-17 Thread aland
[EMAIL PROTECTED] wrote: > Has anyone had luck getting Freeradius to send it's logs to a remote server? No. > I would like to have all of my radius servers logging to a single > source to make it easier to parse the logs. I have tried to run > 'radiusd -l syslog -g local5' and then have the

CHAP/LDAP authenticate

2002-01-17 Thread Smith, Steven N
freeradius 0.4, solaris 8, openldap 2.0.18   My problem is this, I can authenticate fine against LDAP, but when I enable CHAP in my testing client, I get Attribute "Password" is required for authentication. Cannot use "CHAP-Password".   If I remove ldap from the authenticate section of rad

ascend-data-filter not in abinary format

2002-01-17 Thread Prudesh Singh
Hello, I have freeradius 0.4 sending Ascend-Data-Filter = "" with access-accept packet. The dictionary.ascend file contains the appropriate lines: ATTRIBUTE Ascend-Data-Filter 242 abinary Ascend ATTRIBUTE Ascend-Call-Filter 243 abinary

Re: ascend-data-filter not in abinary format

2002-01-17 Thread aland
"Prudesh Singh" <[EMAIL PROTECTED]> wrote: > Problem: > In both radiusd -X debug output, and also radtest output, the values being > sent appear to be in string format, not abinary. The string printed by 'radiusd -X' is the EXACT string you used in the 'users' file. You wrote it as text, so i

Re: Login-Time Parser

2002-01-17 Thread aland
"Bartschies, Thomas" <[EMAIL PROTECTED]> wrote: > seems that this Parser has some Problems. I'm using Full-Day > abbreviations like 'wk','tu' and so on. Some work, some not. That's bad... > Seems that every time more than 6 Days are involved, the routine just > fails. If I understand the READM

Re: ms-chap and ms-chapv2

2002-01-17 Thread aland
"Lance Uyehara" <[EMAIL PROTECTED]> wrote: > The problem I have is I am expeecting some other attributes from the > radius server, but they don't appear in the packet. > > For MS-CHAP I need the MS-CHAP-MPPE-KEYS attribute > For MS-CHAPv2 I need the MS-CHAP2-Success, MS-MPPE-Send-Key and > MS-MPP

ms-chap and ms-chapv2

2002-01-17 Thread Lance Uyehara
I have setup freeradius 0.4 to use auth-type=ms-chap, and the authentication works such that I receive the access-accept response from the radius server. Yay.   The problem I have is I am expeecting some other attributes from the radius server, but they don't appear in the packet.   For MS-C

Re: Auth-Type := Reject

2002-01-17 Thread Chris Parker
At 08:49 PM 1/17/2002 +0200, Igor Chen wrote: >Hi! i use free radius 0.3 and postgresql, and i want to set Auth-Type := >Reject for some users in radreply table. As i know, i must add column >'op' to check/reply tables and modify sql.conf. Is it nessesary >upgrade to freeradius 0.4? Yes. Or the

Auth-Type := Reject

2002-01-17 Thread Igor Chen
Hi! i use free radius 0.3 and postgresql, and i want to set Auth-Type := Reject for some users in radreply table. As i know, i must add column 'op' to check/reply tables and modify sql.conf. Is it nessesary upgrade to freeradius 0.4? -- cron-ripe - List info/subscribe/unsubscribe? See http://

Re: attr_rewrite functions (was: Tacking a realm onto a username?)

2002-01-17 Thread aland
Michael Hare <[EMAIL PROTECTED]> wrote: > Do I need to do anything special besides defining a rewrite function in > radiusd.conf to get this to work? Yes... you've got to tell it WHEN to do the rewrite. That is, add the module to the 'authorize' section, probably. Alan DeKok. - List in

Re: mysql/op ...

2002-01-17 Thread aland
Do-Risika RAFIEFERANTSIARONJY <[EMAIL PROTECTED]> wrote: > It's really what I need, but what should happen if some of these > attributes are not provided by the nas ? (because some of our nas > provides Ascend-Data-Rate, but the others no ...) Then their values will be zero. Alan DeKok. -

Re: select() error about freeradius-0.4

2002-01-17 Thread aland
Rubby <[EMAIL PROTECTED]> wrote: > I update freeradius 0.3 to 0.4, but when I start radiusd, it failed. > Here is the radius.log below: > > Wed Jan 16 12:05:51 2002 : Info: Ready to process requests. > Wed Jan 16 12:05:51 2002 : Error: Unexpected error in select(): Bad file descriptor That's b

Re: Framed-Route

2002-01-17 Thread David Bronson
Thanks, I am just now looking at Filter-ID :-) DB - Original Message - From: "Mike Cathey" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, January 17, 2002 10:55 AM Subject: Re: Framed-Route > Filter-List redirect for that user (you will have to use a fall-through > if you

Re: Framed-Route

2002-01-17 Thread Mike Cathey
Filter-List redirect for that user (you will have to use a fall-through if you use DEFAULT for everyone else)... David Bronson wrote: > Hello All, > > I would like to have all dialup customers proxied through our squid box at > 10.0.10.1. I have set a static ip for one user to test but I am h

attr_rewrite functions (was: Tacking a realm onto a username?)

2002-01-17 Thread Michael Hare
Alan- Thanks for the info. I agree that the functionality given the by attr_rewrite function should do the job. My inital explanation was confusing. Do I need to do anything special besides defining a rewrite function in radiusd.conf to get this to work? I didn't see anything in the FAQ, in

Framed-Route

2002-01-17 Thread David Bronson
Hello All, I would like to have all dialup customers proxied through our squid box at 10.0.10.1. I have set a static ip for one user to test but I am having with the syntax for framed routing (I think). Not all users are to be filtered, so - I am not able to send all traffic to the proxy. Anyone

Re: mysql/op ...

2002-01-17 Thread Do-Risika RAFIEFERANTSIARONJY
Aleksandr Kuzminsky wrote: > > On Wed, 16 Jan 2002, Do-Risika RAFIEFERANTSIARONJY wrote: > > > * can I add some attributes (already in the dictionary such as DataRate > > or XMitRate) into the radacct table ? I think of modifying the table and > > the accounting queries in the radiusd.conf but I

Question about database table fields

2002-01-17 Thread Kirill Tyan
Hi, Can anybody help me? I've a freeradius-0.4 and Oracle8. I've nas table among others tables. SQL> describe nas; Name Null?Type - IDNOT NULL NUMBER(38) NASNAME