Dialup Admin accounting issues.

2004-09-20 Thread Shannon Sariman
Hi All, I'm using FreeRadius-0.9.3 with MySQL and Dialup Admin configured on a Linux Red Hat 9.0 machine. How can I adjust the "Subscription Analysis" tables so that the daily limit hours reflect different User Group settings. For example, I have two groups, one called Dynamic and the other called

RE : Fail over mysql backend

2004-09-20 Thread EROS
I've tried to let the sql {} but it said rlm_sql_sql is not a valid sql driver or something like that. -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Alan DeKok Envoyé : lundi 20 septembre 2004 21:11 À : [EMAIL PROTECTED] Objet : Re: RE : Fail over mys

Radius Guide

2004-09-20 Thread von dan
Hello,   First time freeradius user. Any link to get radius start up and running.   Dan Do you Yahoo!?vote.yahoo.com - Register online to vote today!

Re: wrong 'statistic' in dialupadmin interface

2004-09-20 Thread Flo4000
The SQL-String is OK! I get the result from sum(acctoctets). This seems good. But a user can not download 4344.00 MBs in 7,44 Minutes using a 56k Modem! This was my question! regards Florian - Original Message - From: "Kostas Kalevras" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent:

Re: debian packages for woody and sarge

2004-09-20 Thread Paul Hampson
On Mon, Sep 20, 2004 at 05:30:10AM -0700, Aime wrote: > Thanks for the suggestion. > Now i progressed a little bit compiling freeradius on > Woody. > > The problem I am having now is about mysql . > What library must be in place . libmysqlclient-dev I think... The one below looks right,.. What's

RE: Multiple Accounting Stop packet and rlm_sql (on Mysql)

2004-09-20 Thread Ugur GUNCER
I have a same problem but i fixed You can fix this problem with addingAcctSessionId = '%{AcctSessionId} and AcctUniqueId='%{ AcctUniqueId} to WHERE segment at your sql query Iyi Calismalar Saygilarimla Ugur GUNCER Sistem Yoneticisi Telebizz Tel. ve Int. Hizm. Office = +90 212 347

Re: Rewrite and variables

2004-09-20 Thread Zdenek Svarc
I am sorry. I was slow on the uptake :-) On Mon, 20 Sep 2004 13:21:47 -0400, Alan DeKok <[EMAIL PROTECTED]> wrote: > Zdenek Svarc <[EMAIL PROTECTED]> wrote: > > Yes, I understand that I can't use attr_rewrite function for it. > > That's not what I said. > > > Do you know any other way how to a

Authenticating but no access

2004-09-20 Thread Saunders, Shawn
I have Freeradius 1.0 port on FreeBSD 4.10. I'm using it to authenticate our VPN connections from a PIX 525. The radius server is located inside of our internal network, and it is authenticating (per the logs) fine, but when the VPN tunnel using Cisco VPN 4.60 is connected, the remote client cann

Re: wrong 'statistic' in dialupadmin interface

2004-09-20 Thread Kostas Kalevras
On Mon, 20 Sep 2004 [EMAIL PROTECTED] wrote: > > Hallo! > > The statistic page works but does not show correct values: > > This user was two times connected with 56k-Modem for 7,44 minutes . > He was just logged in without any transfers of data. > In this time he had 4344.00 MBs (???) download. >

Re: RE : Fail over mysql backend

2004-09-20 Thread Alan DeKok
"EROS" <[EMAIL PROTECTED]> wrote: > If you need redondant your sql1 and sql2 .conf must be : ... > You should remove the sql { } > > Tis is what i've must done to make this working I *really* don't recommend doing that. If it works, it's an accident, and the server is NOT intended to work that

RE : Fail over mysql backend

2004-09-20 Thread EROS
A standard sql.conf is : Sql { ... ... ... } If you need redondant your sql1 and sql2 .conf must be : ... ... ... You should remove the sql { } Tis is what i've must done to make this working -Message d'origine- De : [EMAIL PROTE

Linksys WAP54G and FreeRADIUS

2004-09-20 Thread Ben Compton
Hey folks, Quick question for you. Has anyone been able to get FreeRADIUS and the Linksys WAP54G working together? I've found tutorials on using the WAP54G with the RADIUS server in Win2k and Win 2003 but I'd much rather have a more secure (read non-Microsoft =) solution. I'm running FreeRADIUS

wrong 'statistic' in dialupadmin interface

2004-09-20 Thread flo4000
Hallo! The statistic page works but does not show correct values: This user was two times connected with 56k-Modem for 7,44 minutes . He was just logged in without any transfers of data. In this time he had 4344.00 MBs (???) download. This must be wrong!!! Any idea? 2004-09-16 2 100% 00:0

Re: Support of MS-CHAP

2004-09-20 Thread Alan DeKok
"Gil Shai" <[EMAIL PROTECTED]> wrote: > Is there any chance that FreeRADIUS will support it in the near future? Sure, supply a patch. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Rewrite and variables

2004-09-20 Thread Alan DeKok
Zdenek Svarc <[EMAIL PROTECTED]> wrote: > Yes, I understand that I can't use attr_rewrite function for it. That's not what I said. > Do you know any other way how to add NAS-Identifier or > Called-Station-Id suffix to User-Name before authorize occur? What I said was: > > If it's not in th

Re: Rewrite and variables

2004-09-20 Thread Zdenek Svarc
Yes, I understand that I can´t use attr_rewrite function for it. Do you know any other way how to add NAS-Identifier or Called-Station-Id suffix to User-Name before authorize occur? As I said we have users stored as "[EMAIL PROTECTED]" format. Zdenek Svarc On Mon, 20 Sep 2004 12:07:26 -0400, Ala

Multiple Accounting Stop packet and rlm_sql (on Mysql)

2004-09-20 Thread emy emy
Hi, i'm using freeradius with rlm_sql module, and all work correctly except when Our NAS send multiple accountig stop packets to radius reguarding the same session. This couse problem because AcctStopTime was updated every time a stop packet arrives, and i must save only AcctStopTime sended the

RE: Support of MS-CHAP

2004-09-20 Thread Gil Shai
Hi Thanks for the reply. I've read about the security related problems of changing a password over MS-CHAP and MS-CHAP v2 and saw that there are servers which are not supporting the "change password" packet. However, some access servers (Cisco) and RADIUS servers(IAS) do support it. Is there an

Re: Rewrite and variables

2004-09-20 Thread Alan DeKok
Zdenek Svarc <[EMAIL PROTECTED]> wrote: > "searchin = packet" know only %{User-Name} and %{CHAP-Password} > attributes. That's why I can't use attr_rewrite to add NAS-identifier > or Called-Station-Id sufix to User-Name. > > Do you know any way how to do it? If it's not in the RADIUS packet, yo

Re: Rewrite and variables

2004-09-20 Thread Zdenek Svarc
I looked at debug again: rad_recv: Access-Request packet from host 62.*.*.5:1641, id=20, length=45 User-Name = "test" CHAP-Password = 0x6bdd1b91c37533a5** Processing the authorize section of radiusd.conf "searchin = packet" know only %{User-Name} and %{CHAP-Password} att

negative value under acctsessiontime

2004-09-20 Thread Edgars
Hello list! sometimes i'm having problems with the subj. in the 'radacct' table,but it's for a little while,then it's again OK with timing. Any known issues about this? Edgars - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Fail over mysql backend

2004-09-20 Thread Alan DeKok
"Cris Boisvert" <[EMAIL PROTECTED]> wrote: > In the radiusd.conf > In the authorize section I have > redundant{ > sql > sql2 > } Ok... > Mon Sep 20 08:37:16 2004 : Error: radiusd.conf[14] Failed linking to > rlm_sql2 structure in radiusd.conf: /usr/lib/rl

Re: Support of MS-CHAP

2004-09-20 Thread Alan DeKok
"Gil Shai" <[EMAIL PROTECTED]> wrote: > I've noticed that freeradius 1.0 supports MS-CHAP but when I looked at > the code, I didn't find any trace of an option to periodically change > the password using MS-CHAP. FreeRADIUS doesn't implement RADIUS "change password" packets, either. > Does anyo

Fail over mysql backend

2004-09-20 Thread Cris Boisvert
I 'm trying to setup Freeradius with 2 sql servers for a failover. In the radiusd.conf In the authorize section I have redundant{ sql sql2 } Then I start it I get Mon Sep 20 08:37:16 2004 : Info: rlm_sql (sql): Attempting to connect to [EMAIL PROTECTED]:

AW: dialup_admin empty statistics

2004-09-20 Thread Tobias Amon
Hi, I tried using the scripts, but my tables are still empty. How do i get the values for Upload-Download and logout-time. I think my access point does not send a request when a user logs out. How does the radiusserver know this? -Ursprüngliche Nachricht- Von: [EMAIL PRO

ip pool for each realm

2004-09-20 Thread Bad Moh
Hi,   How can I configure freeradius to allocate ip address from different pools based on the users realm ?   realm1 -> 10.1.0.0/16 realm2 -> 10.2.0.0/16 etc ...   Is it possible ?   Thank you in advance. Créez gratuitement votre Yahoo! Mail avec 100 Mo de stockage ! Créez votre Yahoo! Mail Le n

EAP-TLS and ldap segmentation fault

2004-09-20 Thread Torsten Ulrich
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 hallo, i use freeradius-snapshot-20040914 eap-tls and ldap alone works during the use of ldap and eap tls it comes with starts from radiusd -X to segmentation fault - Starting - reading configuration files ... reread_config: reading radius

Re: debian packages for woody and sarge

2004-09-20 Thread Aime
Thanks for the suggestion. Now i progressed a little bit compiling freeradius on Woody. The problem I am having now is about mysql . What library must be in place . This is what i have : pebble:~# dpkg -l | grep mysql ii libdbd-mysql-p 1.2216-2 mySQL database interface for Perl ii libmy

Support of MS-CHAP

2004-09-20 Thread Gil Shai
Title: Support of MS-CHAP Hi I've noticed that freeradius 1.0 supports MS-CHAP but when I looked at the code, I didn't find any trace of an option to periodically change the password using MS-CHAP. What I'm referring to, to be more specific, is what is written in RFC 2433 about the error co

RE: LDAP SSL won't bind??

2004-09-20 Thread Kostas Kalevras
On Fri, 17 Sep 2004, Hou, Ming wrote: > I am wondering that I had a statement "checking for SSL_new in -lssl ... no" > when I ran "configure", will it cause Radiusd fails to connect to my secure > LDAP server? > > Thanks, > ming Well, ldd lib/rlm_ldap.so If there's no ssl libraries linked to rlm_

Re: Problem accepting & in usernames

2004-09-20 Thread Kostas Kalevras
On Fri, 17 Sep 2004, Dan Spray wrote: > Hello, > > > > I just recently changed radius servers from Cistron to Freeradius. I love > it. However, I have about a dozen or so users with "&" in their username. > Everyone is able to login just fine except these users. I searched through > the archive

Re: radgroupreply field explanations?

2004-09-20 Thread Kostas Kalevras
On Fri, 17 Sep 2004, Scott A. H. Phillips wrote: > Hi all, > > I'm upgraded to FreeRADIUS from an old version of ICRADIUS but having > trouble migrating my old tables. To start with, the radgroupreply table of > FreeRADIUS has two fields, op CHAR(2) and prio INT(10) not present in my > older ICRA

Re: Adding realm to accounting data.

2004-09-20 Thread Kostas Kalevras
On Fri, 17 Sep 2004, David wrote: > Hi, > > I am running FR 1.0.0 on RedHat9. I have 2 radius servers > set up primarily for proxying but we do have some locally managed > realms. I have 2 special cases where I need to add realm > information to our accounting data. I had been trying this > wit

AW: mod_auth_radius with OTP

2004-09-20 Thread Stephan Pfeiffer
no, the settings on the webserver are right (AddRadiusCookieValid 5), also i am shure that my browser settings correct, because i disable the automatic cookie handling. every time the browser ask me what do with a cookie. any other ideas? -Ursprüngliche Nachricht- Von: Alan DeKok [ma