Re: Force Auth-Type

2008-01-26 Thread Alan DeKok
Markus Moeller wrote: if (%{ldap: stuff... } == bar) { ... I didn't know that is possible. Where is this documented ? I thought I read all FAQ and documentations. It's not really well documented, because it's not well tested. If it works, great. If not... The other questions I have is

Re: rlm_perl and RLM_MODULE_REJECT

2008-01-26 Thread Jean-Michel Caricand
Le vendredi 25 janvier 2008 17:01, Alan DeKok a écrit : Jean-Michel Caricand wrote: Well. I made a lot of tests without success. I'm not yet able to REJECT a request in a post_proxy function, but that works fine in a authorize function. Does someone have ideas ? In 2.0, it

Upgrade error for LDAP in Freeradius2.0

2008-01-26 Thread Gopinath Reddy N
Hi, We have upgraded our freeradius1.6 to 2.0 We are using active directory for LDAP server. We have not changed any data in AD. But when we upgrade and try to connect using valid user id..user is getting rejected. Please let me know if there any issues I need to take before ugprading to 2.0

duplicate ip address ippool problem

2008-01-26 Thread as3ad jamous
freeradius assign duplicate ip address , i using ippool module and file, for example user1 get the IP1 and some times (not always ) user2 get the same IP1 so LNS see duplicate ip address and drop the new user (no high load at radius but some times on database may be some load ),i dont know

Re: Upgrade error for LDAP in Freeradius2.0

2008-01-26 Thread Markus Moeller
I came across the same problem and my debugging shows the following: 1) ldap_groupcmp calls radius_xlat to replace Ldap_UserDn with the value. 2) radius_xlat calls decode_attribute 3) decode_attribute calls xlat_packet with instance 1 and returns 0 (=nothing found) if ((c =

RE: Upgrade error for LDAP in Freeradius2.0

2008-01-26 Thread as3ad jamous
thanks note : i am not use ldap , only database (postgres) for auth and accountingis that affect? To: [EMAIL PROTECTED]: [EMAIL PROTECTED]: Re: Upgrade error for LDAP in Freeradius2.0Date: Sat, 26 Jan 2008 16:51:10 + I came across the same problem and my debugging shows the

Re: Force Auth-Type

2008-01-26 Thread Markus Moeller
OK I think I understand it now better. And I can do everything with unlang and ldap and no files module as I didn't find a way to use control AV pairs in the users file. I do now in sites-enabled/default the following: authorize { auth_log ldap if (control:User-Location

Question about unlang functionality

2008-01-26 Thread Markus Moeller
I have a internal check Attribute My-Test defined as string. I have the following in authorize update reply { Reply-Message = Hi } switch control:My-Test { case 500 { update control {

Re: rlm_perl and RLM_MODULE_REJECT

2008-01-26 Thread Alan DeKok
Jean-Michel Caricand wrote: ... I use freeradius-1.1.3 (Debian Etch package). I applied this patch to radiusd.c to solve my problem. That works. My question : my patch seems good or not ? It looks fine. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Upgrade error for LDAP in Freeradius2.0

2008-01-26 Thread Alan DeKok
Gopinath Reddy N wrote: We have not changed any data in AD. But when we upgrade and try to connect using valid user id..user is getting rejected. ... (|((objectClass=group)(member=%{Ldap-UserDn})) The rreferences to %{LDAP-UserDn} should now be %{control:LDAP-UserDn}. This should be

Re: Question about unlang functionality

2008-01-26 Thread Alan DeKok
Markus Moeller wrote: I have a internal check Attribute My-Test defined as string. I have the following in authorize .. switch control:My-Test { The switch statement should use double quotes: %{control:My-Test} case { ... Which will always be taken, because the