Proxy Realm Error or Realm dead ??

2006-10-29 Thread Rio Yang
Hi all,Found a problem on freeradius when I review the log file (detail-MMDD).The following is my proxy settings.default (proxy to 1.1.1.1)abc.com (proxy to 2.2.2.2)But I found some error entries in detail log.The username is [EMAIL PROTECTED] and it's realm must be "abc.com"But in detail log

Re: How does freeradius calculate the number of required threads?

2006-10-29 Thread Pshem Kowalczyk
Another update I've measured the time required by a single function under light load (5-7req/sec) - on average it takes ~ 0.01 to 0.015 to process authorize, pre-acct and less then half of that for pre/post proxy. Under heavier load the boxes still spiral out of control (but only after some time)

FreeRadius User config file

2006-10-29 Thread Uma Palvannan
      Hi All,   I am currently configuring power distribution units(PDU) in our organisation, authentication from freeradius-1.0.1-3.RHEL4.3   1. I have configured the dictionary file accordingly.   client 131.xxx.xx.xxx {     secret  =abcdeffghijk     shortname  

Re: Static IP Address allocation database - Active Directory?

2006-10-29 Thread duckeo
On 10/30/06, duckeo <[EMAIL PROTECTED]> wrote: > > On 10/27/06, Jonathan De Graeve <[EMAIL PROTECTED]> wrote: > > > > Has anyone experimented with using Active Directory as a database for > > > > Static IP Addressing? > > > Yes, just assign a static ip in the AD dial-in properties for that user

Re: Static IP Address allocation database - Active Directory?

2006-10-29 Thread duckeo
> On 10/27/06, Jonathan De Graeve <[EMAIL PROTECTED]> wrote: > > > Has anyone experimented with using Active Directory as a database for > > > Static IP Addressing? > > Yes, just assign a static ip in the AD dial-in properties for that user and adapt the ldap.attrmap accordingly, this works perfe

Re: Static IP Address allocation database - Active Directory?

2006-10-29 Thread duckeo
On 10/30/06, duckeo <[EMAIL PROTECTED]> wrote: On 10/27/06, Jonathan De Graeve <[EMAIL PROTECTED]> wrote: > > Has anyone experimented with using Active Directory as a database for > > Static IP Addressing? > Yes, just assign a static ip in the AD dial-in properties for that user and adapt the ld

Re: Static IP Address allocation database - Active Directory?

2006-10-29 Thread duckeo
On 10/27/06, Jonathan De Graeve <[EMAIL PROTECTED]> wrote: > Has anyone experimented with using Active Directory as a database for > Static IP Addressing? Yes, just assign a static ip in the AD dial-in properties for that user and adapt the ldap.attrmap accordingly, this works perfectly. There i

Re: how to check multiple value of same attribute

2006-10-29 Thread Alan DeKok
"open source" <[EMAIL PROTECTED]> wrote: > The radius is checking only against the first check item, it's not checking > the second one. You can put two entries into Login-Time, by separaring them with commas. Alan DeKok. -- http://deployingradius.com - The web site of the book http

Re: How does freeradius calculate the number of required threads?

2006-10-29 Thread Alan DeKok
"Pshem Kowalczyk" <[EMAIL PROTECTED]> wrote: > I have one more question, though, - assuming that almost every single > packet request requires some perl intervention - what should be the > ratio of freeradius threads to rlm_perl threads (at least which number > should be higher, or should they be e

Re: Question about rlm modules

2006-10-29 Thread Alan DeKok
"Ali Majdzadeh" <[EMAIL PROTECTED]> wrote: > (As suggested by the template itself) > > * *reply = pairmake ("User-Name", "root", T_OP_EQ); > pairadd (&request->reply->vps, reply); > request->reply->code = PW_USER_NAME; No, that last line is wrong. Completely and totally wrong. No template or

Question about rlm modules

2006-10-29 Thread Ali Majdzadeh
Hi allIs it possible to send Vendor Specific Attributes through an rlm module?I use the following method to send standard attributes through an rlm module:(As suggested by the template itself) reply = pairmake ("User-Name", "root", T_OP_EQ);pairadd (&request->reply->vps, reply);request->reply->code