LDAP and check items in profiles

Is it possible, with FreeRADIUS 0.5 and rlm_ldap, to put add check items by using profiles? Ie., if the user has: dn: uid=testuser,ou=users,dc=xyzzy,dc=net objectclass: radiusprofile objectclass: uidObject objectclass: simpleSecurityObject uid: testuser cn: test user #1 radiusProfileDn: uid=testp

Re: Radius Died Message

Junaid Saeed Uppal wrote: > I am new to configuring radius , but i got it working , now the problem is > that when i run the radius deamon , it keeps dying and sending emails to > root with subject Radius Died , Restarting after about every 20 seconds ... > i can't figure out whats wrong ... pleas

Re: problem building rlm_ldap

Alan DeKok wrote: > Bjorn Nordbo <[EMAIL PROTECTED]> wrote: > > Now, this is progress! When I include all the neccesary libraries by > > exporting the LIBS variable set to "-lldap -llber -lsocket -lrt -lnsl > > -lresolv -lssl -lcrypto" it compiles. Note that

Re: problem building rlm_ldap

Alan DeKok wrote: > Bjorn Nordbo <[EMAIL PROTECTED]> wrote: > > struct berval *bv; > > ber_init(bv); > > You shouldn't have to do this. The declaration of ber_init in the > first example should take care of any compiler warnings. You&#

problem building rlm_ldap

I have tried to get rlm_ldap to build, but w/o success. The problem seems to be that the code in the configure-script testing if the lber- and ldap- libraries works, doesn't work on my platform (Solaris 8/SPARC/gcc). I have fixed the lber test code by replacing: #include "confdefs.h" extern char

Re: rlm_dbm comparing username to password

Andrei Koulik wrote: > BN> I'm working my way through the code, but if someone has a hint, they > BN> will save me hours of cursing. :-) > > the paircmp function used to compare. I > May be it is deprecated now ? > it interface was changed > see: > cvs diff -r 1.1 -r 1.2 rlm_dbm.c Hmm, I took a

rlm_dbm comparing username to password

I am using rlm_dbm with increasing success. :) However I recently ran into a problem; for some reason, rlm_dbm seems to compare the username of a request with the password of an entry: Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1:58048, id=192, length=108

Re: Disconnect an user

Ytsejam wrote: > Dear all, > > I have a question that may be the old one here. > > My users accounting based on "time quota", > if the quota exceed, we must disconnect the user session. > > Is there any one can give me some idea to achieve this function. Take a look at the counter module in r

Re: Re[2]: expanding attributes for "groups"

Alan DeKok wrote: > Bjorn Nordbo <[EMAIL PROTECTED]> wrote: > > As I mentioned, libtool does not seem to search /local/gnu/lib. > > Because it's not told to. > > Edit the 'Makefile' in that directory, to add to RLM_LDFLAGS the > '-L/path/to/

Re: Re[2]: expanding attributes for "groups"

Alan DeKok wrote: > Andrei Koulik <[EMAIL PROTECTED]> wrote: > > seems a bug, should be corrected by freeradius developers. > > You can bypass it by coping *.so* files from /src/modules/rlm_dbm/.libs > > to lib directory (/usr/local/lib/). > > OR, it simply wasn't built on his system. > > Re

Re: expanding attributes for "groups"

Andrei Koulik wrote: > Tuesday, March 26, 2002, 4:28:28 PM, you wrote: > BN> ducati(bn) radius 613$ ls lib/rlm_dbm.* > BN> lib/rlm_dbm.a lib/rlm_dbm.la* > BN> ducati(bn) radius 614$ > > seems a bug, should be corrected by freeradius developers. > You can bypass it by coping *.so* files from /s

Re: expanding attributes for "groups"

Andrei Koulik wrote: > BN> Aha! So you multiplexes several check-/reply-item tuples per key using > BN> an empty line as a separator. Clever. > No. All blank line are ignored they are for readability only. > Separators are: newline or ';' > > (...) > > this entity contain of three pairs:(1),(2),(3

Re: expanding attributes for "groups"

Andrei Koulik wrote: > DEFAULT Service-Type == Framed-User > Framed-IP-Address = 255.255.255.254, > Framed-MTU = 576, > Service-Type = Framed-User, > Fall-Through = Yes > > Framed-Protocol == PPP > Framed-Protocol = PPP, > Framed-Compression

Re: expanding attributes for "groups"

Andrei Koulik wrote: > BN> When RADIUS checks the users, it first attempts to expand Group-Name via. > BN> the groups file, and uses the check items (if any) returned from the ex- > BN> pansion. > > I had the same problem some time ago. It was the reason of writing the > rml_dbm module. > > The

Re: expanding attributes for "groups"

Thomas Huehn wrote: > On Friday 22 March 2002 14:34, you wrote: > > Is this possible with FreeRADIUS, or is it a better way to do this kind > > of thing? > > Yes it is possible with Free Radius. You could store the data in a mysql > database with settings per group and also per user. Each user c

expanding attributes for "groups"

Hello, We are running Cisctron, but will probably migrate to FreeRADIUS shortly. Today, we have a user database of about 1 million entries contained in a GDBM file (GDBM support hacked into Cistron). All of these users have a Group-Name attribute, for instance "isdnuser". We also have a group fi