Re: ippool per NAS

2008-11-28 Thread thoralf . freitag
It doesn't make sense. And ist doesn't work. Hi Alan, do you have an idea ? Thanks for our support. TF From: [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Date: 28.11.08 00:11 Subject: Re: ippool per NAS Sent by: [EMAIL PROTECTED] file: users

Re: ippool per NAS

2008-11-28 Thread Alan DeKok
[EMAIL PROTECTED] wrote: It doesn't make sense. And ist doesn't work. Hi Alan, do you have an idea ? Thanks for our support. All I can say is that it works for me. What *else* is going on? You haven't posted the contents of the Access-Request packet... maybe they don't match! Alan

Re: ippool per NAS

2008-11-28 Thread thoralf . freitag
Hello Alan, thanks for your quick response. As described, all works fine in 2.0.5. Here the Access-Request: rad_recv: Access-Request packet from host 172.16.30.2 port 1645, id=20, length=130 Framed-Protocol = PPP User-Name = [EMAIL PROTECTED] User-Password = 4711

Re: ippool per NAS

2008-11-28 Thread Alan DeKok
[EMAIL PROTECTED] wrote: thanks for your quick response. As described, all works fine in 2.0.5. Here the Access-Request: So far as I can tell, nothing changed from 2.0.5 to 2.1.x that should affect this. Are you sure it's reading the users file you're editing? Try also moving that entry

Re: ippool per NAS

2008-11-28 Thread Alan DeKok
[EMAIL PROTECTED] wrote: The files readable for the user (and for testing purposes for all). I tried two ways. 1st) I took the working configuration from 2.0.5. 2nd) I build a new configuration with the files comming with 2.1.1 The configuration from 2.0.5 *should* pretty much work with

Re: Is it possible to recognize clients not by their IP addresses?

2008-11-28 Thread YvesDM
On Fri, Nov 28, 2008 at 5:05 AM, Sebo PL [EMAIL PROTECTED][EMAIL PROTECTED] wrote: I'm waiting for such NAS-ID exactly and hope it might be based on the SSID of the AP. Or it may be based on Calling-Station-Id I see the MAC address of the AP in this attribute attached to each message

Re: ippool per NAS

2008-11-28 Thread thoralf . freitag
The files readable for the user (and for testing purposes for all). I tried two ways. 1st) I took the working configuration from 2.0.5. 2nd) I build a new configuration with the files comming with 2.1.1 3rd) I put all the information in teh one and only user file. This is used, because static

Re: ippool per NAS

2008-11-28 Thread Alan DeKok
[EMAIL PROTECTED] wrote: Isn't it what you suggested - to put all into the users file ? No. Simplify the problem. Take that ONE entry, and out it at the TOP of the users file. Yes, it might break other things. At this point, who cares... you need to debug the problem before you make it

RE: Is it possible to recognize clients not by their IP addresses?

2008-11-28 Thread Johan Meiring
Hi, With dynamic clients there is a (coming soon...) way to do it. Alan is going to make the NAS-Identifier available in a future release to the dynamic clients section. When this has been done, you should be able to authenticate a nas using the identifier/password. Cheers, Johan Meiring

Re: ippool per NAS

2008-11-28 Thread thoralf . freitag
Hi Alan, I don' understand you. Yor first email was: All I can say is that it works for me. What *else* is going on? You haven't posted the contents of the Access-Request packet... maybe they don't match! I sent Packet to the list. Than you asked: So far as I can tell, nothing changed

Re: Can FreeRadius server as AAA for MMSC and EVDO as well?

2008-11-28 Thread Evgeniy Kozhuhovskiy
Aldo wrote: Well, the my NAS (Huawei PDSN 9660) does support RADIUS actually, the MMSC is a older Huawei MMSC (based on Sun) and documentation doesn't say nothing about RAIUS. I know HLR can handle the Phone authorization for data usage, but that will enable/disable MMSC and EVDO in bundle,

Re: Class attribute

2008-11-28 Thread Phil Mayers
As far as I know none of the rfc updating 2865 redefine the class attribute. Is there a reason for this, is it safe to make it a string value? I very much suggest leaving it alone. Editing things just to make the closer to the RFC's is not a good idea. The RFC's are well known to be wrong

Problem in using counters

2008-11-28 Thread Saeed Akhtar
Hi all, I have upgraded to Freeradius ver 2.1.1. I want to use counter (using sql) so I added counter.conf in modules, nonresetcounter, dailycounter and monthlycounter in authorize section in default. Also added an entry in radcheck Username=123, attribute = Max-Daily-Session , op = := ,Value =

Re: Problem in using counters

2008-11-28 Thread tnt
I have upgraded to Freeradius ver 2.1.1. I want to use counter (using sql) so I added counter.conf sql counters are defined in raddb/sql/mysq(or whatever database)/counter.conf, not the one in modules. You should also add the counter to the instatiate section of radiusd.conf. Ivan Kalik Kalik

Re: Problem in using counters

2008-11-28 Thread Saeed Akhtar
I was using mysql. Thanks it worked. Regards, Saeed Akhtar On Fri, Nov 28, 2008 at 7:57 PM, [EMAIL PROTECTED] wrote: I have upgraded to Freeradius ver 2.1.1. I want to use counter (using sql) so I added counter.conf sql counters are defined in raddb/sql/mysq(or whatever

802.1x dinamic vlan, using AD information

2008-11-28 Thread Hegedus Gabor
Hi all, I have a question. I use this combination: cisco 2950 sw as NAS freeRadius 2.1.1 as authenticator, Active Directory as the database, and the win xp client. It wokrs fine. I want one more thing, witch is dynamic vlan assignment. How can I implement it? My idea is enlarge the AD schema

Re: Class attribute

2008-11-28 Thread Alexandre Chapellon
Le 27.11.2008 21:41, Alan DeKok a écrit : Alexandre Chapellon wrote: I have noticed that the Class attribute as defined in rfc2865 is a string value, but looking at dictionary that comes with freeradius i saw that it's an octet value. FreeRADIUS was the first to mark some

Re: 802.1x dinamic vlan, using AD information

2008-11-28 Thread tnt
I use this combination: cisco 2950 sw as NAS freeRadius 2.1.1 as authenticator, Active Directory as the database, and the win xp client. It wokrs fine. I want one more thing, witch is dynamic vlan assignment. How can I implement it? My idea is enlarge the AD schema with vlanids and get it with

math operation

2008-11-28 Thread Alexandre Chapellon
Is it possible to do math operation upon attribute value and have a result that is greater than a 32bit number? (I would like to send this result in an ttribute, to proxy it to a home server) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

broken home server communication

2008-11-28 Thread Alexandre Chapellon
Hy, I have a weird problem I am proxying accounting to a home server which is an AIX with kind a fault tolerant setup (HACMP). In some situations (HACMP in degraded mode) , this home server responds to my proxied queries with random source IP address. So freeradius doesn't realise the quey has

Re: math operation

2008-11-28 Thread Alan DeKok
Alexandre Chapellon wrote: Is it possible to do math operation upon attribute value and have a result that is greater than a 32bit number? (I would like to send this result in an ttribute, to proxy it to a home server) The expr module has limited math capability. Or, just write it in

Re: broken home server communication

2008-11-28 Thread Alan DeKok
Alexandre Chapellon wrote: I have a weird problem I am proxying accounting to a home server which is an AIX with kind a fault tolerant setup (HACMP). In some situations (HACMP in degraded mode) , this home server responds to my proxied queries with random source IP address. That's fairly

Re: Class attribute

2008-11-28 Thread Alan DeKok
Alexandre Chapellon wrote: My problem is I need to send a string to the NASes in the Access-Accept and want them to sent it back to me as is in Accounting packets. Is there other attributes of type string that allow such a behaviour from the NASes? No. You *can* edit the dictionaries.