Re: Telnet Usage

2003-01-27 Thread p.beard
grep -i echo dictionary* and then try to figure out what the attributes do. Alan DeKok. Hi, After looking through the dictionaries I tried to use USR-Character-Echo = Echo-Off. This gave an error. I then noticed that VALUE USR-Charater-Echo was commented out, and there was no

Re: Action to perform when EAP/TLS has finished successfully

2003-01-27 Thread Artur Hecker
hi Andreas where does this help me ? If I understood you correctly here, the only improvemnt would apply to the athentication attempt, which would later on fail for sql-query reasons. Since the reject-action would be determined very early in the process, we'd avoid the 3-4

Re: RADIUS technical training

2003-01-27 Thread Simon White
26-Jan-03 at 11:47, Hamad AL-Hajri ([EMAIL PROTECTED]) wrote : Hi All, I am working at an ISP that uses livingston RADIUS and we intend to move to freeradius. I am looking for technical training on RADIUS so can anyone provide that kind of training or guide me to an institute that does

Realm selection

2003-01-27 Thread Josh Howlett
I note that in the documentation it states that the DEFAULT realm matches all realms. Is it possible to match all realms that are *not* defined? (ie. similar to DEFAULT but not does match on realms that *are defined). thanks, josh.

Dropping packets

2003-01-27 Thread Costas Christonis
Hi to all , i have the following problem with the Freeradius server: i noticed that the last days in radius.log i have this error: Error: Dropping conflicting packet from client :1645 - ID: 7 due to unfinished request 37 Any idea? Åõ÷áñéóôþ Costas A. Christonis Networking

RE: Action to perform when EAP/TLS has finished successfully

2003-01-27 Thread Andreas Trilling
Hi Artur, -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Artur Hecker Sent: Monday, January 27, 2003 12:28 PM To: [EMAIL PROTECTED] Subject: Re: Action to perform when EAP/TLS has finished successfully hi Andreas where

RE: pam_radius_auth v 1.3.15 and Solaris 8

2003-01-27 Thread TRUCKS, JESSE (SBCSI)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 We do have it working now, but it is not doing much in the way of debug output. Without a debug option, it places the same data in the messages file. Does anyone have an idea on that one? Did I miss a compile option? Thanks. -Original

Re: Realm selection

2003-01-27 Thread Chris Brotsos
At 05:37 AM 1/27/2003, you wrote: I note that in the documentation it states that the DEFAULT realm matches all realms. Is it possible to match all realms that are *not* defined? (ie. similar to DEFAULT but not does match on realms that *are defined). That is what happens. A realm that is

RE: Telnet Usage

2003-01-27 Thread p.beard
grep -i echo dictionary* and then try to figure out what the attributes do. Alan DeKok. Hi, After looking through the dictionaries I tried to use USR-Character-Echo = =3D Echo-Off. This gave an error. I then noticed that VALUE = USR-Charater-Echo was commented out, and there was

accounting performance

2003-01-27 Thread Giuliano Zorzi
Hi, I'm stress-testing my freeradius test server using radclient and the performance-testing doc. Is there a way to test the whole authentication/accounting-start/accounting-stop process ? thanks giuliano - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Missing nas-strvalue in add_nas_attr, bad EAP request ID

2003-01-27 Thread Dave Mason
Hi - any thoughts on this? I'm curious if there's a bug here or if everything is as intended. Regards, Dave Dave Mason wrote: Hi, I'm working on a new EAP type, and using the supplied radclient for testing. I didnt add a NAS-IP-Address attribute to the Access Request (and radclient doesnt

PAM AUTH Accounting IAS

2003-01-27 Thread Doug Lauterbach
I have PAM Auth setup to authenticate against a W2K IAS server for ProFTPD users under RedHat 7.1. The authentication is working but accounting seems to be timing out. Both PAM and IAS are using port 1813 for accounting. Any ideas. Thanks Doug Lauterbach

Re: accounting performance

2003-01-27 Thread Simon White
27-Jan-03 at 16:23, Giuliano Zorzi ([EMAIL PROTECTED]) wrote : Hi, I'm stress-testing my freeradius test server using radclient and the performance-testing doc. Is there a way to test the whole authentication/accounting-start/accounting-stop process ? radclient can send auth and acct

[newbie]

2003-01-27 Thread Frederic SOSSON
Hello, I'am a newbie using FreeRADIUS, and I would like to know the best way to store accounting data. Regards. Frederic - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: [newbie]

2003-01-27 Thread Tim D. McCracken
That all depends on what you are going to do with it. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Frederic SOSSON Sent: Monday, January 27, 2003 10:42 AM To: [EMAIL PROTECTED] Subject: [newbie] Hello, I'am a newbie using FreeRADIUS,

Re: [newbie]

2003-01-27 Thread Simon White
27-Jan-03 at 17:41, Frederic SOSSON ([EMAIL PROTECTED]) wrote : Hello, I'am a newbie using FreeRADIUS, and I would like to know the best way to store accounting data. Depends what you're familiar with. The classic way is to do it with the detail file, which is just a plain text file. Tools

Re: [newbie]

2003-01-27 Thread Genoud Richard
mabe with mySQL. Frederic SOSSON a écrit: Hello, I'am a newbie using FreeRADIUS, and I would like to know the best way to store accounting data. Regards. Frederic - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See

AAA

2003-01-27 Thread Hamida Mehdi
Hi, I’m wondering if I can get FreeRadius to run a script after a successful user authentication. I want to do some manipulation to my iptables when the user logs in. H E L P Mehdi HAMIDA [EMAIL PROTECTED] ICQ#:166626588 http://www.wireless-lyon.org Tu es né tout seul, tu meurs tout seul,

Re: AAA

2003-01-27 Thread Simon White
27-Jan-03 at 17:50, Hamida Mehdi ([EMAIL PROTECTED]) wrote : Hi, I’m wondering if I can get FreeRadius to run a script after a successful user authentication. I want to do some manipulation to my iptables when the user logs in. Exec-Program string program to execute after

Re: DSL Accouting?

2003-01-27 Thread Peter Nixon
Hi Dave What exactly is it that you want to do? Make Extent work better, or switch to freeradius. It sounds like freeradius is doing exactly what it is configured to do by default, and that is to UPDATE and exisiting session record when it recieves a ALIVE packet, NOT add a new record. I

Re: [newbie]

2003-01-27 Thread Frederic SOSSON
Ho yhea fast and effective ;) I will store all in a MySQL DB Thanks to everyone Frederic - Original Message - From: Genoud Richard [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 27, 2003 5:46 PM Subject: Re: [newbie] mabe with mySQL. Frederic SOSSON a écrit:

FreeRadius some info required

2003-01-27 Thread rakesh jha
Title: FreeRadius some info required Hello, I have two questions: 1. Does freeradius server makes a log file for users authenticated or rejected? The radius.log file just tells about the radius processes only and it is ready for serving the requests. 2. How can I know as how many users have

Re: FreeRadius some info required

2003-01-27 Thread Simon White
27-Jan-03 at 20:22, rakesh jha ([EMAIL PROTECTED]) wrote : Hello, I have two questions: 1. Does freeradius server makes a log file for users authenticated or rejected? The radius.log file just tells about the radius processes only and it is ready for serving the requests. The accounting data

fr cvs and PostgreSQL

2003-01-27 Thread Guillermo Schimmel
Hi, I would like to exchange some experiences with somebody using freeradius with PostgreSQL. That's because I'm having problems (I lose some records) and don't know what to do. So I want to compare my setup which someone else's. Thanks Guillermo - List info/subscribe/unsubscribe? See

Re: DSL Accouting?

2003-01-27 Thread Kostas Kalevras
On Mon, 27 Jan 2003, Peter Nixon wrote: Hi Dave What exactly is it that you want to do? Make Extent work better, or switch to freeradius. It sounds like freeradius is doing exactly what it is configured to do by default, and that is to UPDATE and exisiting session record when it recieves a

Re: Telnet Usage

2003-01-27 Thread Alan DeKok
[EMAIL PROTECTED] wrote: After looking through the dictionaries I tried to use USR-Character-Echo = Echo-Off. This gave an error. I then noticed that VALUE USR-Charater-Echo was commented out, and there was no ATTRIBUTE entry for this value. What am I doing wrong? If you don't have a USR

Fw: [newbie]

2003-01-27 Thread Frederic SOSSON
Hi (again) I'd like to get a howto implement freeradius server (HTML, PDF, ...) Thanks to help newbies ;) Fred - Original Message - From: Frederic SOSSON [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 27, 2003 5:59 PM Subject: Re: [newbie] Ho yhea fast and effective

Adding Attributes while proxying

2003-01-27 Thread Shohab Baig
Hi All I have Fr 0.8.1 running on redhat 7.3. I tried to get answer by searching mailing list but could not get the right answer. I am using my radius server for proxying and local authentication. While proxying, is it possible to add on any rad reply attribute, for instance

Re: Fw: [newbie]

2003-01-27 Thread Simon White
27-Jan-03 at 20:03, Frederic SOSSON ([EMAIL PROTECTED]) wrote : Hi (again) I'd like to get a howto implement freeradius server (HTML, PDF, ...) Thanks to help newbies ;) I don't know that there is one, but the docs are pretty complete. It's not too hard to get started, and there are a

Re: Adding Attributes while proxying

2003-01-27 Thread Simon White
27-Jan-03 at 13:24, Shohab Baig ([EMAIL PROTECTED]) wrote : I have Fr 0.8.1 running on redhat 7.3. I tried to get answer by searching mailing list but could not get the right answer. I am using my radius server for proxying and local authentication. While proxying, is it possible to add

Re: Most Popular method for managing users in FreeRadius

2003-01-27 Thread Tim Jung
I saw this posting and wanted to ask a few questions. Has anyone setup FreeRADIUS so it authenticates users and stores the accounting logs in MSSQL for use by Rodopi? I am interested in knowing if anyone has setup FreeRADIUS and Rodopi together so that pre-paid cards and dialup account time limits

filters being dropped while proxied

2003-01-27 Thread Shohab Baig
Hi I have fr 8.0 running on redhat 7.3. FR is working as proxy for some realms. At remote end, customers have setup ascend-data-filter to implement and when I use radtest to check from the proxy server, I see all four lines as Ascend-Data-Filter = ip in forward tcp est Ascend-Data-Filter = ip

Re: filters being dropped while proxied

2003-01-27 Thread Alan DeKok
Shohab Baig [EMAIL PROTECTED] wrote: I have fr 8.0 running on redhat 7.3. FR is working as proxy for some realms. At remote end, customers have setup ascend-data-filter to implement and when I use radtest to check from the proxy server, I see all four lines as Ascend-Data-Filter = ip in

Re: filters being dropped while proxied

2003-01-27 Thread Shohab Baig
Thanks for replying I did and it tells me about sun/freebsd compatibility commands. ?? sorry I did not get your point. I did look into attr file and but could not find a clue why its doing for some cleints whish are on diff OS like windows,Sun etc. Please if you can give me a bit more

Re: Most Popular method for managing users in FreeRadius

2003-01-27 Thread Simon White
27-Jan-03 at 14:37, Tim Jung ([EMAIL PROTECTED]) wrote : I saw this posting and wanted to ask a few questions. Has anyone setup FreeRADIUS so it authenticates users and stores the accounting logs in MSSQL for use by Rodopi? I am interested in knowing if anyone has setup FreeRADIUS and Rodopi

Re: filters being dropped while proxied

2003-01-27 Thread Alan DeKok
Shohab Baig [EMAIL PROTECTED] wrote: Thanks for replying I did and it tells me about sun/freebsd compatibility commands. ?? sigh Please learn how to use 'man' on your system. On Sun, do: $ man -s 5 users The short answer is that in section 5 of the 'man' pages, FreeRADIUS installs

Re: filters being dropped while proxied

2003-01-27 Thread Shohab Baig
I do know about doing man and did as you told you. But I dont know why are we going to users file as I am not authenticating with users file. I am just proxying auth requests to several remote servers. For example, I have two relams test1.com and test2.com both remote servers are configured with

Re: Most Popular method for managing users in FreeRadius

2003-01-27 Thread Tim Jung
Well the issue is that yes you do need everything stored in Rodopi so that total time for the given period is correct. For example say you limit an account to 300 hours per month, and they use 295 hours, then call up for 2 hours hang up, then 2 minutes later call back. The system should know that

Re: filters being dropped while proxied

2003-01-27 Thread Shohab Baig
Alan if you can please provide some guidance on it.. Thanks Shohab - Original Message - From: Shohab Baig [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 27, 2003 4:15 PM Subject: Re: filters being dropped while proxied I do know about doing man and did as you told you.

Re: filters being dropped while proxied

2003-01-27 Thread Chris Parker
At 04:40 PM 1/27/2003 -0600, Shohab Baig wrote: Alan if you can please provide some guidance on it.. In the goal of killing this endless thread, look at documentation surrounding the use of 'Operators'. When you have read about 'Operators', the following will make sense: = != == != := != +=

Re: filters being dropped while proxied

2003-01-27 Thread Shohab Baig
thats correct and I know theseops but the line I wrote for filters , those are on remote servers which are not Free radius. so that why they are using = Shohab - Original Message - From: Chris Parker [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 27, 2003 4:52 PM

Re: DSL Accouting?

2003-01-27 Thread Dave Seddon
Thanks for your responce. If your DSL box produces RADIUS accounting packets, then I don't see why this would be necessary. Most ISP billing packages are designed to bill stardard dialup, where there is a start and a stop. DSL ppp sessions stay up for ages, so a seesion might go for more

Re: DSL Accouting?

2003-01-27 Thread Dave Seddon
Greetings, OK. I have a Cisco Terminating PPPoX and it also sends accounting updates. I found I had to modify the update sql statements for them to do anything. Normal sql accounting is one record per call. I havent checked the detail files. What modifications did you make? Could you

Re: DSL Accouting?

2003-01-27 Thread Dave Seddon
Greetings, What exactly is it that you want to do? Make Extent work better, or switch to freeradius. I want to make it easy for small dailup based ISPs to bill DSL customers. Most small ISPs use billing systems based on stop starts, so it would be good for DSL wholesalers to be able to

Re: DSL Accouting?

2003-01-27 Thread Dave Seddon
How did you cope with counter roll? If you keep doing UPDATE and thecounter rolls, at 32bits, then you'll get an update of a low number and miss out on one metic s#it load of data. The boss wouldn't be very happy. Sorry, I just checked and it seems that the counter roll is at 31 bits

sequencial order of checks

2003-01-27 Thread Robert Canary
I am trying to set up the freeradius mysql. However, I really don't know which tables to populate or even why. I made a dry run with a portslave test port just to see what the radius server might be getting. I see freeradius querys radcheck for the username, then it querys radgroupcheck, and

waiting reply about sql_postgresql.c

2003-01-27 Thread Malakhov Alexander
hello, developers! what you think about http://www.mail-archive.com/freeradius-users@lists.cistron.nl/msg12535.html

Attribute operators

2003-01-27 Thread Robert Canary
Okay, I read it somewherebut I can't find it now.. I am trying to find the list of operator (or evaluators) := += == = and what they mean. I read it somewhere in the Orielly radius book, but can't find it now. Can someone point me in the right direction ?? -- robert - List

Re: Attribute operators

2003-01-27 Thread David Baer
On Tuesday 28 January 2003 14:01, Robert Canary wrote: for radiusd.conf: = sets the value of an attribute := sets the value of an attribute and overwrites any previous value == compares a state with a set value according to the oreilly-book (page 89) can't find += d. - List

[Sort.Of.Off.Topic]portslave and freeradius

2003-01-27 Thread Robert Canary
Anyone able to tell me what attirbutes should/could be return to portslave upon a reply to authenticate, I am looking for attributes for setting up the connections. The portslave list is _dead_. Mr. Coker has answered much, but I feel I am going to ware him out :-) -- robert - List

Re: Attribute operators

2003-01-27 Thread Robert Canary
Found it!! :-) Thanks David. += probally dosen't exist...I was just throwing out some examples of what I was looking for.Although it dose look familiar... David Baer wrote: On Tuesday 28 January 2003 14:01, Robert Canary wrote: for radiusd.conf: = sets the value of an attribute := sets

RE: Attribute operators

2003-01-27 Thread Jonathan Hassell
Page 89, third paragraph -Original Message- From: Robert Canary [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 28, 2003 12:01 AM To: freeradius Subject: Attribute operators Okay, I read it somewherebut I can't find it now.. I am trying to find the list of operator (or

Re: [Sort.Of.Off.Topic]portslave and freeradius

2003-01-27 Thread Robert Canary
I found it. It was listed under radiusclient and not portslave... Thanks anyway :-) Robert Canary wrote: Anyone able to tell me what attirbutes should/could be return to portslave upon a reply to authenticate, I am looking for attributes for setting up the connections. The portslave

Re: fr cvs and PostgreSQL

2003-01-27 Thread Pavel S. Shirshov
Hello Guillermo, Monday, January 27, 2003, 10:30:03 PM, you wrote: GS Hi, I would like to exchange some experiences with somebody using GS freeradius with PostgreSQL. GS That's because I'm having problems (I lose some records) and don't know GS what to do. So I want to compare my setup which