'Idle-Timeout' and the 'Acct-Session-Time' argument

2008-02-23 Thread GNULinuxSlackware
Hello, I use : -Ubuntu-server 7.10 -Freeradius 1.1.3 -Chillispot 1.0 -mysql 14.12 I have fixed an 'Idle-Timeout' argument into the radgroupreply MySQL table. This works fine with the users in the group but the problem is that Idle-Timeout doesn't report the logged out to Acct-Session-Time. So, in

Re: RE: 2.0.2 RPM build on redhat 5

2008-02-23 Thread ostrich . tsao
Hi Emilio, Thank you for your reply. I change the spec file according to your advice. But I got same error as before This afternoon I tried to build the rpm on CentOS 5, but failed with different error. What can I do with freeradius new version on RH5? Thanks, Allen -- This message

Re: 2.0.2 RPM build on redhat 5

2008-02-23 Thread Alan DeKok
[EMAIL PROTECTED] wrote: What can I do with freeradius new version on RH5? Follow the normal instructions of configure/make/make install? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: 'Idle-Timeout' and the 'Acct-Session-Time' argument

2008-02-23 Thread Alan DeKok
GNULinuxSlackware wrote: I have fixed an 'Idle-Timeout' argument into the radgroupreply MySQL table. This works fine with the users in the group but the problem is that Idle-Timeout doesn't report the logged out to Acct-Session-Time. I have no idea what that means. So, in the radacct

Unable to connect to data source

2008-02-23 Thread johnson elangbam
hi, I am trying to connect Ms SQL with free radius, I've configure all the related packages like freeTDS and unixodbc , and both of the package work well when I test using tsql and isql. But when I try to link with free radius, the following errors shows.Please tell what might be the proble

Proxy RADIUS from MSCHAPv1 to MSCHAPv2

2008-02-23 Thread Franco Pieressa
Hi! I have a NAS that ONLY support MSCHAPv1 (requiring the Microsoft RADIUS extended attribute MS-CHAP-MPPE-Keys), that need to authenticate with a RADIUS server that ONLY support MSCHAPv2. Can I proxy RADIUS packets through FreeRADIUS and convert MSCHAPv1 -- MSCHAPv2? To be more specific,

Re: Proxy RADIUS from MSCHAPv1 to MSCHAPv2

2008-02-23 Thread Alan DeKok
Franco Pieressa wrote: Hi! I have a NAS that ONLY support MSCHAPv1 (requiring the Microsoft RADIUS extended attribute MS-CHAP-MPPE-Keys), that need to authenticate with a RADIUS server that ONLY support MSCHAPv2. This doesn't appear to have anything to do with FreeRADIUS. Can I proxy

RE: Proxy RADIUS from MSCHAPv1 to MSCHAPv2

2008-02-23 Thread Franco Pieressa
I can't upgrade the NAS nor the RADIUS server :-( What I need to know, is if it's theorically possible to translate the MSCHAPv1 authentication to a MSCHAPv2 authentication? Can the keys and the challenge be converted? Thanks! Regards Date: Sat, 23 Feb 2008 14:40:02 +0100 From: [EMAIL

Re: Proxy RADIUS from MSCHAPv1 to MSCHAPv2

2008-02-23 Thread Alan DeKok
Franco Pieressa wrote: I can't upgrade the NAS nor the RADIUS server :-( I would suggest trying *really* hard. It's a lot easier to upgrade than to do the impossible. What I need to know, is if it's theorically possible to translate the MSCHAPv1 authentication to a MSCHAPv2 authentication?

Re: 'Idle-Timeout' and the 'Acct-Session-Time' argument

2008-02-23 Thread GNULinuxSlackware
2008/2/23, Alan DeKok [EMAIL PROTECTED]: GNULinuxSlackware wrote: I have fixed an 'Idle-Timeout' argument into the radgroupreply MySQL table. This works fine with the users in the group but the problem is that Idle-Timeout doesn't report the logged out to Acct-Session-Time. I have

Re: 'Idle-Timeout' and the 'Acct-Session-Time' argument

2008-02-23 Thread Ivan Kalik
This is nothing to do with Freeradius. Chillispot enforces Idle-Timeout. If it thinks the users is active it will not disconnect the session. There is nothing radius server can do about it. This is a Chillispot problem. Ivan Kalik Kalik Informatika ISP Dana 23/2/2008, GNULinuxSlackware [EMAIL

Re: 'Idle-Timeout' and the 'Acct-Session-Time' argument

2008-02-23 Thread Alan DeKok
GNULinuxSlackware wrote: There is a radius database with a lot of tables : -radgroupreply I can insert into the 'Idle-Timeout' argument. Do you know what that does? -radacct I can read the 'Acct-Session-Time' argument which give me the session time for each user who is logged out.

Re: 'Idle-Timeout' and the 'Acct-Session-Time' argument

2008-02-23 Thread Liran Tal
Hey Pierre, Chillispot will disconnect the user but the problem you're facing is that it isn't actually idle (can happen because of many reasons that you didn't take in consideration). So instead of idle-timeout use the session-timeout attribute and give it a try. Regards, Liran Tal. On Sat,