Re: User authentication using Mysql table - radacct

2006-12-21 Thread Alan DeKok
N S wrote: > Hi All, > I was running radius both the daemon and the debug mode as the root user. > And this is the log from radius.log Is it while running the server as user "radiusd"? ... > Thu Dec 21 20:09:00 2006 : Error: rlm_sql_mysql: Mysql error 'Can't > connect to local MySQL server thro

Re: dialup admin coding - help required

2006-12-21 Thread Owen DeLong
I don't have an environment to test this, and, I'm no PHP expert, but, I've got some similar stuff working, and, I suspect that the changes below might work for you... You can't include PHP variables in HTML text outside of the tags and expect them to be interpolated. Generally, it's just e

dialup admin coding - help required

2006-12-21 Thread Cory Robson
Ok I have tried and tried to get this to work how I want but obviously need more sleep, not being a code genius and trying to learn this mix and mash is confusing enough. Anyway this is my code for my failed login page, my sql query does parse all information into the array ok but I just cannot se

Re: User authentication using Mysql table - radacct

2006-12-21 Thread N S
Hi All, I was running radius both the daemon and the debug mode as the root user. And this is the log from radius.log Thu Dec 21 20:06:00 2006 : Error: rlm_sql (sql): Failed to connect DB handle #0 Thu Dec 21 20:06:00 2006 : Info: Ready to process requests. Thu Dec 21 20:06:16 2006 : Info: rlm_

Re: Questions from a totally ignorant n00b

2006-12-21 Thread Alan DeKok
Gene Mosley wrote: > > What I am looking for is to allow a user ("bob") to authenticate > from any system he uses UNLESS that system is blocked from authenticating. Perhaps you could try reading the FAQ entry I pointed to earlier. It tells you how to do exactly that. > It seems that AI

Re: no DB handles ,How to solve this ?

2006-12-21 Thread Pshem Kowalczyk
On 12/21/06, 梁增辉 <[EMAIL PROTECTED]> wrote: hi all hi, I've seen many of these messages in the radius.log (I am using freeradius 1.1.1 mysql version :5.1.11) There are no DB handles to use! skipped 0, tried to connect 0 There are no DB handle

Re: Questions from a totally ignorant n00b

2006-12-21 Thread Gene Mosley
Alan, Thank you very much for the information. What I am looking for is to allow a user ("bob") to authenticate from any system he uses UNLESS that system is blocked from authenticating. I mean "bob" could authenticate from "server1" but not from "server2" - restricting it (somehow)

Re: Questions from a totally ignorant n00b

2006-12-21 Thread Alan DeKok
Gene Mosley wrote: > Alan, > Could you perhaps give me a hint about how one would go about > allowing any user from any system (_unless_ that system is listed for > the specific purpose of not allowing anyone to authenticate from it) to > authenticate? You've phrased the problem in a very co

Re: Questions from a totally ignorant n00b

2006-12-21 Thread Gene Mosley
Alan, Could you perhaps give me a hint about how one would go about allowing any user from any system (_unless_ that system is listed for the specific purpose of not allowing anyone to authenticate from it) to authenticate? - Original Message From: Alan DeKok <[EMAIL PROTECTED

Re: Questions from a totally ignorant n00b

2006-12-21 Thread Gene Mosley
I thought that the user system only talked to the firewall/nas and that it talked to the RADIUS server? I mean, I thought that using IPTables on the RADIUS server would not work because only the firewalls ever communicated with it directly - am I worng about this? - Original Message

Re: Questions from a totally ignorant n00b

2006-12-21 Thread Alan DeKok
Gene Mosley wrote: > Users are authenticating from systems that they should not be > authenticating from - we need to block authentication on a per system > (IP address) basis, not a per user basis. You can do this in FreeRADIUS. Put users into different groups, and block the group from accessi

Re: Questions from a totally ignorant n00b

2006-12-21 Thread Jan Mulders
Freeradius can do this, I believe (please correct me if I'm wrong, List). However, you might want to consider firewalling those certain addresses on your radius server so authentication/accounting packets never reach your existing radius server daemon. Look into iptables, it should be fairly easy

Re: Multiple ISPs and big user database

2006-12-21 Thread Felipe Neuwald
Hi Dennis, ok, thank you. I'll make tests and send you the result. Regards, Felipe Neuwald. Dennis Skinner escreveu: Felipe Neuwald wrote: ISP1: NAS 1: 10.1.1.1 NAS 2: 10.1.1.2 NAS 3: 10.1.1.3 ISP2: NAS 1: 10.2.2.1 NAS 2: 10.2.2.2 NAS 3: 10.2.2.3 Try this: huntgrou

Re: problem with mysql accounting

2006-12-21 Thread Dennis Skinner
basile wrote: > accounting_start_query = "INSERT into radaact SET\ > `User-Name` = '%{User-Name}',\ > `Calling-Station-Id` = '%{Calling-Station-Id}',\ > `Called-Station-Id` = '%{Called-Station-Id}',\ > `NAS-IP-Address` = '%{NAS-IP-Addr

Questions from a totally ignorant n00b

2006-12-21 Thread Gene Mosley
I am currently running RADIUS under AIX (the AIX version of RADIUS) and having a problem. It appears that the AIX RADIUS cannot be configured to work around this problem. I was wondering if switching to FreeRADIUS would help? The problem is this: Users are authenticating from systems that th

Re: Multiple ISPs and big user database

2006-12-21 Thread Dennis Skinner
Felipe Neuwald wrote: > ISP1: > NAS 1: 10.1.1.1 > NAS 2: 10.1.1.2 > NAS 3: 10.1.1.3 > > ISP2: > NAS 1: 10.2.2.1 > NAS 2: 10.2.2.2 > NAS 3: 10.2.2.3 Try this: huntgroups file: ISP1Client-IP-Address == 10.1.1.1 SQL-Group == ISP1 ISP1Client-IP-Address == 10.1.1.2

Re: problem with mysql accounting

2006-12-21 Thread Kevin Bonner
On Thursday 21 December 2006 06:45, basile wrote: > but start and stop not > > rlm_sql (sql): sql_set_user escaped user --> '' > radius_xlat: 'INSERT into radaact SET ' > rlm_sql (sql): Reserving sql socket id: 4 > rlm_sql_mysql: MYSQL check_error: 1064 received When you run in debug mode, d

Multiple ISPs and big user database

2006-12-21 Thread Felipe Neuwald
Hi Folks, My MySQL database is working ok, thank you all of you guys. More one problem: I have two ISPs here, each one with 3 NAS IP addresses: ISP1: NAS 1: 10.1.1.1 NAS 2: 10.1.1.2 NAS 3: 10.1.1.3 ISP2: NAS 1: 10.2.2.1 NAS 2: 10.2.2.2 NAS 3: 10.2.2.3 And my radcheck table is like this: id:

RE: how to log Disconnects/Stop (Acct-Status-Type)

2006-12-21 Thread Adrian
Hello Peter, I'm not very familiar with CVS. Can I grab the module from some ftp site? I tried ftp.freeradius.org however I can't find it anywhere there. :( Do I have to re-compile freeradius with this module or can I add it to the radius.conf file and I will be ready to go? Many Thanks Adri

Re: Huntgroups, Users and Proxy

2006-12-21 Thread Walt Reynolds
Just checking back to see if anyone can let me know if I am on the right track. Thanks. Original Message Subject: Re: Huntgroups, Users and Proxy Date: Wed, 13 Dec 2006 15:17:44 -0500 From: Walt Reynolds <[EMAIL PROTECTED]> To: freeradius-users@lists.freeradius.org Date: We

problem with mysql accounting

2006-12-21 Thread basile
hi i try to account with mysql here are the mysql start stop and update definition accounting_start_query = "INSERT into radaact SET\ `User-Name` = '%{User-Name}',\ `Calling-Station-Id` = '%{Calling-Station-Id}',\ `Called-Station-Id` = '%{Called-Stat

sql and password

2006-12-21 Thread [EMAIL PROTECTED]
Hi, i'd like to athenticate user in ldap and put them in groups using sql. so i don't want to check their password in the radcheck table. my issue is that i don't see how not to check the password using the web GUI dialup admin ? thanks for your help regards jey > Message du 21/12/06 à 0

huntgroups, sql and dialup admin

2006-12-21 Thread [EMAIL PROTECTED]
hi, i configured freeradius using configuration files( user, huntgroups, clients, ...). it works great. now i 'd like to be able to manage my radius server with the web GUI dailup admin. my issue is that i don't see how i can put a nas ip in a huntgroup with this GUI. Can i have my nasip list /

no DB handles ,How to solve this ?

2006-12-21 Thread 梁增辉
hi all I've seen many of these messages in the radius.log (I am using freeradius 1.1.1 mysql version :5.1.11) There are no DB handles to use! skipped 0, tried to connect 0 There are no DB handles to use! skipped 0, tried to connect 0

Re: Dialup admin Display users online (suggestion)

2006-12-21 Thread Kostas Kalevras
Cory Robson wrote: I am slowly getting around this interface and notice many things that could be improved upon but I'm lacking in the coding department. For example the user_finger.php page, this does a nice job once you have manually entered all of the pops into the separate naslist file but