Discarding new rquests and CPU eats 99.9%

2006-11-09 Thread Cihan DEMİR
Hi all,   We’re using 0.9.3 version on RedHat. I start radius in normal mode then it start to eat 99.9% of CPU and produce error messages : . Thu Nov  9 14:52:16 2006 : Error: Discarding new request from client turkcell:4166 - ID: 14 due to live request 26387 Thu Nov  9 14:52:16 20

Re[2]: limiting sessions

2006-11-09 Thread Andrew Long
> On Thursday 09 November 2006 11:34, Andrew Long wrote: >> also ran >> >> SELECT >> `usergroup`.`UserName`, >> `usergroup`.`creationdate`, >> `usergroup`.`GroupName` >> from usergroup >> where username = '4aroma70370'; >> >> and that also comes up null... >> >> Does it make sense that radius is n

Re: howto get/send the fullname of an user

2006-11-09 Thread Alan DeKok
Ariel VIVES <[EMAIL PROTECTED]> wrote: > Does the NIS documentation say I can't do that with RADIUS ? > > No. Now you're being ridiculous. The NIS documentation doesn't say you can't use NIS to make wine, either. That doesn't mean it *does* make wine. If the NIS documentation doesn't tel

Re: FreeRadius, OpenLDAP, Samba, etc.

2006-11-09 Thread Eric Faden
Anyone, instructions? -Eric Eric Faden wrote: And how exactly would I do all of that? I know how to set the AuthType to nt-pap, but am not sure exactly what to do with the other two. -Eric Alan DeKok wrote: Eric Faden <[EMAIL PROTECTED]> wrote: Alright. I unset all of the Auth-Types in

Re: Server logs say users authenticate, but they don't (Now with more details!)

2006-11-09 Thread Ernie Dunbar
Here's the output from `freeradius -X` for one attempted user login: rad_recv: Access-Request packet from host AS5300:1645, id=32, length=88 NAS-IP-Address = AS5300 NAS-Port = 47 NAS-Port-Type = Async User-Name = "Pheilmann" Called-Station-Id = "6811527"

Re: howto get/send the fullname of an user

2006-11-09 Thread James Wakefield
Ariel VIVES wrote: Alan DeKok wrote: Ariel VIVES <[EMAIL PROTECTED]> wrote: Yes, and my accounts are under NIS. But i want to authenticate my users using freeradius. and it works... so it isn't possible to get additional informations with freeradius by using a shell script or with adding speci

Re: limiting sessions

2006-11-09 Thread Kevin Bonner
* Try to respond just to the list and not me personally. I don't enjoy wading through duplicate messages. Thanks! On Thursday 09 November 2006 11:34, Andrew Long wrote: > also ran > > SELECT > `usergroup`.`UserName`, > `usergroup`.`creationdate`, > `usergroup`.`GroupName` > from usergroup > whe

Re: Multiple LDAP (Not failover) lookup...

2006-11-09 Thread Eric Martell
Thanks Alan. I figured it out. It should be ldap2 { notfound = reject } as ldap2 is returning notfound status. Thanks so much again. --- Alan DeKok <[EMAIL PROTECTED]> wrote: > Eric Martell <[EMAIL PROTECTED]> wrote: > > Thanks so much Neal. You got it 95% right. The > problem > > is Fre

RE: Queries apear in Dialup_admin page

2006-11-09 Thread CASTANHEIRA, Nuno Osvaldo
Thank you very much .. it resolve the problem. De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Em nome de Hernan AntoliniEnviada: quinta-feira, 9 de Novembro de 2006 17:31Para: FreeRadius users mailing listAssunto: Re: Queries apear in Dialup_admin page Nuno, check you admin.conf

Re: Queries apear in Dialup_admin page

2006-11-09 Thread Richard Cotrina
Take a look at your conf/admin.conf file in the dialup_admin directory, and disable sql or ldap debug ( depends on what you are using ): ldap_debug: false sql_debug: false regards On Thu, 9 Nov 2006, CASTANHEIRA, Nuno Osvaldo wrote: > Hi, i have a strange problem in my freeradius with dialup_a

Re: howto get/send the fullname of an user

2006-11-09 Thread Phil Mayers
Ariel VIVES wrote: You're trying to use radius for something it's not really intended for. You'd be better off querying that information from a real directory service, like LDAP, or NIS, if you want it quicker and nastier. Yes, and my accounts are under NIS. But i want to authenticate my us

Re: Queries apear in Dialup_admin page

2006-11-09 Thread Hernan Antolini
Nuno, check you admin.conf under dialup_admin install dir; i guess you have an "sql_debug : true" entry. regards Hernan Antolini [EMAIL PROTECTED] wrote on 11/09/2006 02:09:06 PM: > Hi, i have a strange problem in my freeradius with dialup_admin interface. > When i choose the fields, statistics

Queries apear in Dialup_admin page

2006-11-09 Thread CASTANHEIRA, Nuno Osvaldo
Hi, i have a strange problem in my freeradius with dialup_admin interface. When i choose the fields, statistics, user statistics, online users, radius clients .etc, the queries apear in Dialup_Admin page... very strange. Can anyone tell me what i´m i doing wrong. Sorry for m

Re[2]: limiting sessions

2006-11-09 Thread Andrew Long
> On Thursday 09 November 2006 11:00, Andrew Long wrote: >> Here is the output from radiusd -X regarding the answer to an >> auth-request from one of the properties where I changed >> session-timeout to 1800. It does not look to me like the >> session-timeout attribute is being sent... any suggesti

Re: limiting sessions

2006-11-09 Thread Kevin Bonner
On Thursday 09 November 2006 11:00, Andrew Long wrote: > Here is the output from radiusd -X regarding the answer to an > auth-request from one of the properties where I changed > session-timeout to 1800. It does not look to me like the > session-timeout attribute is being sent... any suggestions?

Re[7]: limiting sessions

2006-11-09 Thread Andrew Long
>> Andrew Long <[EMAIL PROTECTED]> wrote: >>> I tried Session-Timeout but it doesn't seem to do the job. >> So... is it being sent back to the NAS? If it is, then the NAS is >> ignoring it. Go ask your NAS manufacturer for a refund, or for a >> firmware upgrade that implements RADIUS. >> Al

Re: howto get/send the fullname of an user

2006-11-09 Thread Ariel VIVES
Alan DeKok wrote: > Ariel VIVES <[EMAIL PROTECTED]> wrote: >> Yes, and my accounts are under NIS. >> But i want to authenticate my users using freeradius. >> and it works... >> >> so it isn't possible to get additional informations with freeradius by >> using a shell script or with adding specific

Re: howto get/send the fullname of an user

2006-11-09 Thread Alan DeKok
Ariel VIVES <[EMAIL PROTECTED]> wrote: > Yes, and my accounts are under NIS. > But i want to authenticate my users using freeradius. > and it works... > > so it isn't possible to get additional informations with freeradius by > using a shell script or with adding specific attribute ? Does the N

Re: Re[5]: limiting sessions

2006-11-09 Thread Alan DeKok
Andrew Long <[EMAIL PROTECTED]> wrote: > How would you suggest I verify the session-timeout is actually being > sent/received? tcpdump / wireshark? Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe

RE: Assign IP based on CallingStationID.

2006-11-09 Thread John Longland
Title: RE: Assign IP based on CallingStationID. The idea is to do IP-assignment based on the Calling-Station-ID and disregarding the username,password that is passed to radius. JOhn -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]. org]On Behalf Of Collen Blije

RE: Re[5]: limiting sessions

2006-11-09 Thread Seferovic Edvin
radiusd -X in the debug mode you can see attributes that are being send back to you NAS. If you want to see what comes to NAS - please consult the documentation of your NAS ! Regards, E:S -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] g] On Behalf Of Andrew Long Se

Re[5]: limiting sessions

2006-11-09 Thread Andrew Long
> Andrew Long <[EMAIL PROTECTED]> wrote: >> I tried Session-Timeout but it doesn't seem to do the job. > So... is it being sent back to the NAS? If it is, then the NAS is > ignoring it. Go ask your NAS manufacturer for a refund, or for a > firmware upgrade that implements RADIUS. > Alan D

Re: Assign IP based on CallingStationID.

2006-11-09 Thread Collen Blijenberg
Hmm i tried this, but it ain't working.. ?! i have: id - 1 username - blah attribute- Calling-Stattion-Id op- == value - [mac adress] still get username ask ?! no connection. dunno, what's the idea behinf this query ? mac = username ? no

Re: howto get/send the fullname of an user

2006-11-09 Thread Ariel VIVES
James Wakefield wrote: > Ariel VIVES wrote: >> James Wakefield wrote: >>> Ariel VIVES wrote: Hello the list, I'm starting with freeradius. Authentication works fine ! But the informations I get is only the username (le login name in /etc/passwd). Ho

Re: howto get/send the fullname of an user

2006-11-09 Thread James Wakefield
Ariel VIVES wrote: James Wakefield wrote: Ariel VIVES wrote: Hello the list, I'm starting with freeradius. Authentication works fine ! But the informations I get is only the username (le login name in /etc/passwd). How do I get the Fullname ? Or others informations (like mail, home director

Re: Assign IP based on CallingStationID.

2006-11-09 Thread banga
Thx Peter, I will try to install 1.1.3 to check sqlippool functions. Peter Nixonn wrote: > > Hi Banga > > We have a large system in production that does almost exactly what you > state. > It can all be done with a few modifications of the sql queries. (Infact we > have a rather complex post

RE: Assign IP based on CallingStationID.

2006-11-09 Thread banga
John , I see the way now. Thx, for help. I’m going to install test radius in nearest future. I’ll try to check this query there. John Longland wrote: > > > > Here is the query that I put into sql.conf > Maybe use it and build on it for your > specific example ?? > > authorize_check_query

Re: howto get/send the fullname of an user

2006-11-09 Thread Ariel VIVES
James Wakefield wrote: > Ariel VIVES wrote: >> Hello the list, >> >> >> I'm starting with freeradius. >> Authentication works fine ! >> >> But the informations I get is only the username (le login name in >> /etc/passwd). >> >> How do I get the Fullname ? Or others informations (like mail, home >>

Re: howto get/send the fullname of an user

2006-11-09 Thread James Wakefield
Ariel VIVES wrote: Hello the list, I'm starting with freeradius. Authentication works fine ! But the informations I get is only the username (le login name in /etc/passwd). How do I get the Fullname ? Or others informations (like mail, home directory, ...) Is it possible ? is it a configurati

RE: Assign IP based on CallingStationID.

2006-11-09 Thread John Longland
Title: RE: Assign IP based on CallingStationID. Here is the query that I put into sql.conf Maybe use it and build on it for your specific example ?? authorize_check_query = "select id,UserName,Attribute,Value,op FROM ${authcheck_table} WHERE UserName in (select UserName from ${authcheck_

Re: Assign IP based on CallingStationID.

2006-11-09 Thread Peter Nixon
Hi Banga We have a large system in production that does almost exactly what you state. It can all be done with a few modifications of the sql queries. (Infact we have a rather complex postgresql stored procedure, but one simpler query is possible depending on what you need). If you wish to ass

RE: Assign IP based on CallingStationID.

2006-11-09 Thread banga
I use dafault table-layout. How I understand you just change username authentication to callingstationid authentication inside sql.conf. Thx, it’s really good idea. I think that I could do the same by myself, but it will take a time. Therefore any examples will be very useful. Can you post it he