How to reject some users completely?

2005-01-07 Thread Oliver Zimmermann
Hi there, I hope, someone can point to the right direction. Some DSL-Modems with factory-default accounts like guest/guest pollute my accounting-logs (nearly 50 % of all login attempts): ... Fri Jan 7 09:32:13 2005 : Auth: Login incorrect: [guest/guest] ... Fri Jan 7 09:32:14 2005 : Auth: Login

Cisco Attributes

2005-01-07 Thread BNS
Dear Mr. Alan, How do I mention the Cisco Attributes in Mysql database? Tell me one example like Telnet with privilege level 7. (How do I mention the same in mysql using Cisco av pairs?) Pls help me Regards BNS -- No virus found in this outgoing message. Checked by

Re: Multiple NAS Vendors, one user-id?

2005-01-07 Thread Dustin Doris
On Thu, 6 Jan 2005, Dustin Doris wrote: Why don't you make some default entries up front and allow fall-through? For example. DEFAULT Huntgroup-Name == x Reply-Attribute = X Fall-Through = yes DEFAULT Huntgroup-Name == y Reply-Attribute = y Fall-Through =

same attribute, multiple entries

2005-01-07 Thread [EMAIL PROTECTED]
hello, how do I access the second, third, etc. value for a duplicate attribute in sql.conf ? I have read doc/variables.txt and I did not figure out. Can it be done ? I have tried the following constructs: %{Attribute}{2} %{Attribute{2}} %{Attribute}[2] %{Attribute[2]} in sql.conf and none

Need Help on Dialup_admin

2005-01-07 Thread maruna
Hi all, Can someone guide me on how to activate user-statistics link in the dialup_admin interface. Moreover, I will be glad if anyone can help me on how I can automate the users' suspension / Expiration based on the users first login-time. Thank you. Goksie Quoting Dustin Doris [EMAIL PROTECTED]:

Re: same attribute, multiple entries

2005-01-07 Thread Alan DeKok
[EMAIL PROTECTED] [EMAIL PROTECTED] wrote: how do I access the second, third, etc. value for a duplicate attribute in sql.conf ? I have read doc/variables.txt and I did not figure out. Can it be done ? In the current CVS snapshot. Not in 1.0.1 Alan DeKok. - List

Logging Login Attempts only?

2005-01-07 Thread Brock Noland
Lets say I wanted to log login attempts only. How would I do this? Also my servers proxy to a central server run by someone else. So I just want to log the requests my servers are proxying. Any ideas? Brock - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: How to reject some users completely?

2005-01-07 Thread Oliver Zimmermann
Dustin Doris wrote: On Fri, 7 Jan 2005, Oliver Zimmermann wrote: Hi there, I hope, someone can point to the right direction. Some DSL-Modems with factory-default accounts like guest/guest pollute my accounting-logs (nearly 50 % of all login attempts): ... Fri Jan 7 09:32:13 2005 : Auth: Login

Re: How to reject some users completely?

2005-01-07 Thread Alan DeKok
Oliver Zimmermann [EMAIL PROTECTED] wrote: What I am thinking of is, whether the auth-Packet can be dropped before it is radius-logged? Not really. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: [radius] Re: WISPr Attributes and freeradius

2005-01-07 Thread Nick Marino
- Original Message - From: Alan DeKok [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Thursday, January 06, 2005 10:58 AM Subject: [radius] Re: WISPr Attributes and freeradius Nick Marino [EMAIL PROTECTED] wrote: When using the WISPr-Session-Terminate-Time in the

Re: Logging Login Attempts only?

2005-01-07 Thread Thor Spruyt
Brock Noland wrote: Lets say I wanted to log login attempts only. How would I do this? add your logging module instance to the post-auth section in radiusd.conf Also my servers proxy to a central server run by someone else. So I just want to log the requests my servers are proxying. Any ideas? for

Freeradius/Poptop/Mysql-Problem -- failed authentication

2005-01-07 Thread Harald Mueller
Hi all! I'm having heavy problem to get my poptop-server authenticate with freeradius. I can't locate the error ... so, here I am! freeradius: pptpd1:~ # /usr/sbin/radiusd -v radiusd: FreeRADIUS Version 1.0.0, for host , built on Oct 5 2004 at 00:13:22 (SuSe 9.2 precompiled-rpm-package) ppp:

Re: same attribute, multiple entries

2005-01-07 Thread [EMAIL PROTECTED]
very nice, thanks I wonder if it is possible to add a configuration parameter for the separating value for %{Attribute-Name[*]} thanks again, razvan radu Alan DeKok wrote: [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: how do I access the second, third, etc. value for a duplicate attribute in

RE: freeradius 1.0 and unix style auth.

2005-01-07 Thread Brian Ertel
The default configuration of the server *IS* to authenticate against /etc/passwd. What about the clients.conf and radiusd.conf? You have to specify the IP secret of the NAS in clients.conf. What are the practical implications of your statement regarding the difference between

Re: freeradius 1.0 and unix style auth.

2005-01-07 Thread Thor Spruyt
Brian Ertel wrote: users:Also at default with the exception of an added = DEFAULT Auth-Type == System Fall-Through = 1 DEFAULT Auth-Type := System -- Regards, Thor Spruyt E: [EMAIL PROTECTED] W: www.thor-spruyt.com M: +32 (0)475 67 22 65 Bestel nu uw

RE: freeradius 1.0 and unix style auth.

2005-01-07 Thread Brian Ertel
Brian Ertel wrote: users:Also at default with the exception of an added = DEFAULT Auth-Type == System Fall-Through = 1 DEFAULT Auth-Type := System Thanks Thor, unfortunatly I still got Auth: rlm_unix: [radius]: invalid password :( - List

Re: same attribute, multiple entries

2005-01-07 Thread Alan DeKok
[EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I wonder if it is possible to add a configuration parameter for the separating value for %{Attribute-Name[*]} Sure. As always,. patches are welcome. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius 1.0 and unix style auth.

2005-01-07 Thread Alan DeKok
Brian Ertel [EMAIL PROTECTED] wrote: I have a user radius with a password radius in group radius but I am still getting the reply: Auth: rlm_unix: [radius]: invalid password Run the server in debugging mode. This is suggested in the README, FAQ, INSTALL, etc. Alan DeKok. - List

Re: [radius] Re: WISPr Attributes and freeradius

2005-01-07 Thread Alan DeKok
Nick Marino [EMAIL PROTECTED] wrote: Here is the definition for the attribute, do you have anymore info on it and FR. As I said, I don't know anything about the attribute. FreeRADIUS has no code to interpret that attribute. Alan DeKok. - List info/subscribe/unsubscribe? See

Accounting proxying

2005-01-07 Thread Nicolas Baradakis
Now we have both radrelay and radsqlrelay, there is more than one way to proxy accounting requests. I'd like to discuss this topic on the list, and see in a concret case which one is more suitable. Let's take the following case: all the accounting go in a single database. (this base may be

Re: Freeradius/Poptop/Mysql-Problem -- failed authentication

2005-01-07 Thread Alan DeKok
Harald Mueller [EMAIL PROTECTED] wrote: auth: type Local I think you set Auth-Type := Local somewhere. Why? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Freeradius and Fully qualified DNS name in clients. conf

2005-01-07 Thread Aime
All, I has a NAS with FQDN = nas.dynds.org corresponding to IP 213.12.12.23 When I specify in clients.conf the following client nas.dynds.org { secret=testing123 { Freeradius says :received request from UNKNOWN client 213.12.12.23. But 213.12.12.23 corresponds well to nas.dynds.org . Is

Re: Freeradius and Fully qualified DNS name in clients. conf

2005-01-07 Thread Thor Spruyt
Aime wrote: I has a NAS with FQDN = nas.dynds.org corresponding to IP 213.12.12.23 [EMAIL PROTECTED] thor]$ host nas.dynds.org Host nas.dynds.org not found: 3(NXDOMAIN) [EMAIL PROTECTED] thor]$ host nas.dyndns.org nas.dyndns.org has address 83.79.97.149 When I specify in clients.conf the following

Re: [radius] Re: WISPr Attributes and freeradius

2005-01-07 Thread Thor Spruyt
Alan DeKok wrote: Nick Marino [EMAIL PROTECTED] wrote: Here is the definition for the attribute, do you have anymore info on it and FR. As I said, I don't know anything about the attribute. FreeRADIUS has no code to interpret that attribute. Alan DeKok. Nick, It's a recommendation, not an RFC!

Re: Multiple NAS Vendors, one user-id?

2005-01-07 Thread James Feger
On Fri, 7 Jan 2005, Dustin Doris wrote: Maybe you can do groups. For example, setup an unlimited group and a read_only group. Then put the users into the appropriate group. Have your users file say something like. DEFAULT Huntgroup-Name == Juniper, Group == unlimited

Re: [radius] Re: WISPr Attributes and freeradius

2005-01-07 Thread Nick Marino
- Original Message - From: Thor Spruyt [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Friday, January 07, 2005 2:16 PM Subject: Re: [radius] Re: WISPr Attributes and freeradius Alan DeKok wrote: Nick Marino [EMAIL PROTECTED] wrote: Here is the definition for the

Re: Freeradius/Poptop/Mysql-Problem -- failed authentication

2005-01-07 Thread Harald Mueller
Hi Alan! Thanks for your answer!!! --- Alan DeKok [EMAIL PROTECTED] schrieb: I think you set Auth-Type := Local somewhere. Mh ...I don't think so ... pptpd1:/etc/raddb # grep Local users #steve Auth-Type := Local, User-Password == testing #John Doe Auth-Type := Local,

authenticate all requests

2005-01-07 Thread Robert Ulbrich
Hi all, I am sure I saw somebody ask this recently, but I cannot find it. How can I setup radius to accept all requests from a particular NAS, based on the NAS ip address? AtDhVaAnNkCsE, Robert Ulbrich Dynamic Information Systems 1700 George Bush East Ste. 200 College Station, TX 77840 (979)

limiting Access rights for Remote user by Proxying Radius Server

2005-01-07 Thread Cool Man
Hi , My question is how can we send a certain attribute to NAS based on some information or reply from Remote Radius server. My set up looks like (NAS)--(Local Radius)---(Remote Radius) Now if I proxy an authentication request to Remote radius server it looks verfies the user and by looking