Re: SQL IP Pool maximum timeout.

2007-07-08 Thread Alan DeKok
Dave wrote: Im still having trouble with this problem, I switched the pool key to NAS port, the expiry time is 24 hours, and it seems after 24 hours, it wipes all the existing entries from the database, That would seem to fit the 24-hour expiry time you set. again re-assigning IP's

Re: Plug-in Question

2007-07-08 Thread Alan DeKok
Phil Mayers wrote: In *fact* since sql_xlat function only support SELECT, there's no way of executing an SQL modify (insert, update, delete) using %{sql:} syntax - so you *have* to retain the sql post-auth logging function. int sql_xlat(...) { if (strncasecmp(string, SELECT, 6) == 0)

Re: User not found using LDAP

2007-07-08 Thread Amr el-Saeed
Hi, i did that, remove ( Auth-Type := LDAP ) now i got that error :Auth: Invalid user: [no User-Name attribute/test] when trying to authenticate with an empty username i have this in the user file ( DEFAULT NAS-Port-Id = 0/0/3/1, Auth-Type := Accept ), and the user come with that

Re: Plug-in Question

2007-07-08 Thread Arran Cudbard-Bell
Phil Mayers wrote: Why do this? The ability to log things to sql post-auth is very usefull and I believe fairly widely used. What is the advantage of removing it? Right, so you wanting to authorize people in post-auth using then theres a conflict. You can't select whether

Block wiki spammer.

2007-07-08 Thread Arran Cudbard-Bell
Hi Peter, Can you block Ce3Wre http://wiki.freeradius.org/index.php?title=User:Ce3Wreaction=edit Spamming Run-time-Variables page. And could I have edit rights to the start page, pretty please :) Thanks, Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Block wiki spammer.

2007-07-08 Thread Alan DeKok
Arran Cudbard-Bell wrote: Can you block Ce3Wre http://wiki.freeradius.org/index.php?title=User:Ce3Wreaction=edit I've blocked a number of more users. This is getting silly. I think it's best to remove *all* users except for a few. And could I have edit rights to the start page, pretty

Re: Plug-in Question

2007-07-08 Thread Phil Mayers
On Sun, 2007-07-08 at 10:09 +0100, Arran Cudbard-Bell wrote: Phil Mayers wrote: Why do this? The ability to log things to sql post-auth is very usefull and I believe fairly widely used. What is the advantage of removing it? Right, so you wanting to authorize people in

Re: Plug-in Question

2007-07-08 Thread Phil Mayers
On Sun, 2007-07-08 at 09:54 +0200, Alan DeKok wrote: Phil Mayers wrote: In *fact* since sql_xlat function only support SELECT, there's no way of executing an SQL modify (insert, update, delete) using %{sql:} syntax - so you *have* to retain the sql post-auth logging function. int

Re: Block wiki spammer.

2007-07-08 Thread Peter Nixon
On Sun 08 Jul 2007, Arran Cudbard-Bell wrote: Hi Peter, Can you block Ce3Wre http://wiki.freeradius.org/index.php?title=User:Ce3Wreaction=edit Spamming Run-time-Variables page. And could I have edit rights to the start page, pretty please :) Sure. If you tell me your username :-) --

Re: Block wiki spammer.

2007-07-08 Thread Arran Cudbard-Bell
Peter Nixon wrote: On Sun 08 Jul 2007, Arran Cudbard-Bell wrote: Hi Peter, Can you block Ce3Wre http://wiki.freeradius.org/index.php?title=User:Ce3Wreaction=edit Spamming Run-time-Variables page. And could I have edit rights to the start page, pretty please :) Sure. If you

Re: Block wiki spammer.

2007-07-08 Thread Peter Nixon
On Sun 08 Jul 2007, Arran Cudbard-Bell wrote: Peter Nixon wrote: On Sun 08 Jul 2007, Arran Cudbard-Bell wrote: Hi Peter, Can you block Ce3Wre http://wiki.freeradius.org/index.php?title=User:Ce3Wreaction=edit Spamming Run-time-Variables page. And could I have edit rights to

Re: User not found using LDAP

2007-07-08 Thread tnt
Can we see the whole radiusd -X conversation. Ivan Kalik Kalik Informatika ISP Dana 8/7/2007, Amr el-Saeed [EMAIL PROTECTED] piše: Hi, i did that, remove ( Auth-Type := LDAP ) now i got that error :Auth: Invalid user: [no User-Name attribute/test] when trying to authenticate with an

Re: NAS Reboot

2007-07-08 Thread tnt
Looking in the RADIUS log will not help much with NAS reboots. Main reason for sudden NAS reboots is faulty/poor power supply. Hardware tends to be terminal (if it crashes it doesn't come up again that easy) while software is more likely to make it hang than crash. Ivan Kalik Kalik Informatika

Re: Block wiki spammer.

2007-07-08 Thread Arran Cudbard-Bell
Peter Nixon wrote: On Sun 08 Jul 2007, Arran Cudbard-Bell wrote: Peter Nixon wrote: On Sun 08 Jul 2007, Arran Cudbard-Bell wrote: Hi Peter, Can you block Ce3Wre http://wiki.freeradius.org/index.php?title=User:Ce3Wreaction=edit Spamming Run-time-Variables page. And

Re: SQL IP Pool maximum timeout.

2007-07-08 Thread Dave
Alan DeKok wrote: Dave wrote: Im still having trouble with this problem, I switched the pool key to NAS port, the expiry time is 24 hours, and it seems after 24 hours, it wipes all the existing entries from the database, That would seem to fit the 24-hour expiry time you set.

openikev2 interface

2007-07-08 Thread Punith Raj
Hi All Is it possible to have an interface between openikev2 and freeradius ?.We need to do this for our project called *Unlicensed Mobile Access* (*UMA*) where AAA server i.e freeradius receives packets from its clients in a secure tunnel implemented with openikev2.Has any one tried

Re: SQL IP Pool maximum timeout.

2007-07-08 Thread Peter Nixon
On Sun 08 Jul 2007, Dave wrote: Alan DeKok wrote: Dave wrote: Im still having trouble with this problem, I switched the pool key to NAS port, the expiry time is 24 hours, and it seems after 24 hours, it wipes all the existing entries from the database, That would seem to fit the

Re: openikev2 interface

2007-07-08 Thread Peter Nixon
On Sun 08 Jul 2007, Punith Raj wrote: Hi All Is it possible to have an interface between openikev2 and freeradius ? Yes. You should start with http://wiki.freeradius.org/Radiusclient It should be relatively easy to implement We need to do this for our project called *Unlicensed

Re: openikev2 interface

2007-07-08 Thread Punith Raj
Oh ! does it mean that I have to use radius client libraries and develop an interface? Well the project is not opensource but at the same time it not for commercial purpose either. We are on to it to gain some knowledge in the domain. If we succeed to bring up the setup i ll propose to my

Re: openikev2 interface

2007-07-08 Thread Alan DeKok
Punith Raj wrote: Is it possible to have an interface between openikev2 and freeradius ?. To do... what? We need to do this for our project called *Unlicensed Mobile Access * (*UMA*) where AAA server i.e freeradius receives packets from its clients in a secure tunnel

Re: Plug-in Question

2007-07-08 Thread Alan DeKok
Phil Mayers wrote: ... That would work, wouldn't it? Sure. Presumably you'd have to use some kind of dummy assign: update control { Tmp-String-0 = %{sql:insert into ...} No, if (!x) is the way to do. ...not exactly intuitive. Don't know if you'd want to allow a bare expansion

Freeradius 2.0 - vmps feature, inaccuracies on FreeNAC

2007-07-08 Thread Sean.Boran
Hi, I just came across your blog post commenting on the release of the 2.0 version of freeradius. I was kind of surprised by the upcoming support of VMPS. While trying to know more, I also found a post commenting on OpenVMPS

Re: SQL IP Pool maximum timeout.

2007-07-08 Thread Peter Nixon
On Sun 08 Jul 2007, Hugh Messenger wrote: Alan DeKok [EMAIL PROTECTED] Dave wrote: Im still having trouble with this problem, I switched the pool key to NAS port, the expiry time is 24 hours, and it seems after 24 hours, it wipes all the existing entries from the database, That

Re: Freeradius 2.0 - vmps feature, inaccuracies on FreeNAC

2007-07-08 Thread Alan DeKok
[EMAIL PROTECTED] wrote: I just came across your blog post commenting on the release of the 2.0 version of freeradius. I was kind of surprised by the upcoming support of VMPS. shrug It was pretty easy to do, and some people said it would be useful. While trying to know more, I also found

Re: SQL IP Pool maximum timeout.

2007-07-08 Thread Dave
Its posted a few posts back in this thread, that version is still the one Im using. Dave - can you copy and paste your sqlippool.conf, so we can see what your actual queries look like? -- hugh List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: SQL IP Pool maximum timeout.

2007-07-08 Thread Dave
Yes accounting is working well from the NAS Are you receiving accounting packets from your NAS? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius 2.0 - vmps feature, inaccuracies on FreeNAC

2007-07-08 Thread Alan DeKok
Alan DeKok wrote: ... I *regularly* here about ... me answering email at midnight, after being up at 6am, and going on 500m +/- elevation hikes all day. I'm tired, and I can't spell properly. I remain, as always, resolute in my plans for world domination. :) Alan DeKok. - List

Re: FR + AD host/ machine/ workstation authentication

2007-07-08 Thread Jacob Jarick
If it's not clear, you don't understand how the configuration files work. Well yes Alan, thats why I was asking for help on the subject If I was 100% on the subject I wouldnt request conformation or information would I ? Ah, yes. There's nothing quite like asking for help and insulting the

Re: FR + AD host/ machine/ workstation authentication

2007-07-08 Thread Jacob Jarick
Phil A.L Thanks alot for this new information I have to rebuild my network again (big shift around at work) and test again. On 7/7/07, Phil Mayers [EMAIL PROTECTED] wrote: As per my previous emails, you can see the rlm_mschap is doing the expansion correctly without Novells hack: modcall:

Login /logout script hooks

2007-07-08 Thread Steven J Lamb
I have been looking for a good example of a way to execute scripts when there is a login or logout. I haven't yet found a good example and unfortunately all of my attempts have failed to do anything. Any help or suggestions as to where I can find a good example of running a shell script when

Re: Freeradius Auth via LDAP against Active Directory Server 2003

2007-07-08 Thread Jacob Jarick
Ryan, I am now actually in the process of implementing your method. auth via ntlm retrevie attributes via ldap (group, dialup_access, etc) Can you suggest some reading or point me in the right direction. ATM I have ntlm and ldap configured and ntlm (hoping it might just work :P and for