Re: Freeradius proxy code questions and proposed patch

O/H Alan DeKok έγραψε: > Kostas Zorbadelos wrote: > >> I have read in the list about the major clean up version 2.0 of the >> server will be. While reading the code of versions 1.x I could see >> that there is great room for improvement. I will take a look in the >> 2.0 sources and I look forwar

Re: Freeradius proxy code questions and proposed patch

Kostas Zorbadelos wrote: > Precicely. But when we work in 'synchronous' mode we want the NAS to > be in charge of the retransmision policy not our proxy server. If the > home server does not reply for any reason, we want the client (NAS) to > notice it and retransmit. Eventually, the client will ma

Re: Default Authentication

Alan DeKok wrote: > If you want only groups A and B to log in, do: > > DEFAULT Group == A, Auth-Type = System > ... > > DEFAULT Group == B, Auth-Type = System > ... > > DEFAULT Auth-Type := Reject Thanks. Here's what I done. DEFAULT Group == router-ro, Auth-Type = System

Re: Assign Vlan based on Inner Identity

Matt Ashfield wrote: > Hi All > I doubt my original post was doable, , it probably doesn't make sense to ask > FR to be able to force Inner=Outer identity. > > In that case, would it be possible to perform authorization based on the > Inner identity instead of the Outer identity? Sure. See the "c

expiration doesn't work in freebsd + mysql

Hello : I'm getting a weard error using expiration with mysql backend in FreeBSD. The same configuration works fine in linux (centos) but not in FreeBSD 6.1 In Linux, all works fine (freeradius 1.1.6 + mysql 5.0), I've tried both "==" and ":=" operators and everything goes well. In FreeBSD 6.1 (

Assign Vlan based on Inner Identity (was: Force Inner=Outer identity)

Hi All I doubt my original post was doable, , it probably doesn't make sense to ask FR to be able to force Inner=Outer identity. In that case, would it be possible to perform authorization based on the Inner identity instead of the Outer identity? Matt [EMAIL PROTECTED] -Original Message-

return code of "session" section ignored?

Hi Alan, probably another bug report: in my radiusd.conf: ... session { reject } ... and when authenticating some user: 2007-05-03 12:57:50.210429500 modcall[authenticate]: module "perl" returns ok for request 4 2007-05-03 12:57:50.210432500 modcall: group PERL returns ok for request 4 2

additional SQL-query, after authorize_check_query fail

Hi, I use a SQL-database for authorization request from a cisco-ssg (a service gateway). This works fine But now I'm trying to perform an additional sql-query, when the calling-station-id isn't found in the sql-table. Also, my table looks like this: mysql> select * from ssg_check; ++---

Re: multiple users with different service flows

Cristian Novac wrote: > Hello, > I've provided you my users file attached in this mail; Please run the server in debugging mode, as suggested in the FAQ, README, INSTALL, etc. It will tell you which "users" file entries are being matched. Do NOT use "Auth-Type := Local". I have no idea why

RE: Freeradius-Users Digest, Vol 25, Issue 9

Hi All, Please suggest a free Diameter Server for me as M is developing a Translation Agent b/w Radius and Diameter and I need to sent the RADIUS Packets (decoded in the form of Diameter Packets ) to Diameter Server. khursheedAhmedQAU INTEGRATORS(S-05) 

Re: multiple users with different service flows

Hello, I've provided you my users file attached in this mail; If I use this users file, the users call and platf8 are authenticated but the corresponding radius ACCES-ACCEPT message contains the Service-Flow-Descriptor and QoS-Descriptor values from the DEFAULT entry. If I use the users.wrong f