problem regular expressions in hints file

2009-10-29 Thread Ana Gallardo
Hello, I'm using Debian and Freeradius 2.0.4-3 I want to use the hints file to add an attribute named Intentos-Reject. I would like to use only one DEFAULT entry to match with @domain.es and with @ temp.domain.es If I use this DEFAULT entry the request don't match: #/etc/freeradius/hints

Re: custom script for access

2009-10-29 Thread Alan DeKok
d.tom.schm...@l-3com.com wrote: *I tried to post a similar message on the 26^th of October but got no responses – thought maybe I messed it up as my first posting.* Or no one was sure how to help. I then need to have freeRADIUS call a bash shell (or Perl) script that checks additional

Re: NotBefore, NotAfter or Date attributes fot temporary accounts

2009-10-29 Thread Alan DeKok
Daniele Albrizio wrote: In an old post Alan DeKok said he would patch freeradius to support temporary accounts using attributes like Date January 1 2010 13:00 Date January 12 2010 13:00 Use Current-Time. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: problem regular expressions in hints file

2009-10-29 Thread Alan DeKok
Ana Gallardo wrote: Hello, I'm using Debian and Freeradius 2.0.4-3 I want to use the hints file to add an attribute named Intentos-Reject. I would like to use only one DEFAULT entry to match with @domain.es and with @temp.domain.es Don't use hints for that. If I use this DEFAULT entry

Time connected

2009-10-29 Thread Sergio Belkin
Hi, Sorry for the stupid question, but I'd want to get how many time every user is connected, please could you provide some kind of guideliness? Using Version 2.1.1. Thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin - - List

Re: Probably simple problem

2009-10-29 Thread Paul Ryszka
Hello, Sorry for that the problem was simple I just forgot to put on the end of the line. I guess I spent too much time going over it yesterday. Anyway I am also looking at implementing MSSQL authentication back-end and I was looking at this guide

Re: problem regular expressions in hints file

2009-10-29 Thread Ana Gallardo
Hello, I'm using Debian and Freeradius 2.0.4-3 I want to use the hints file to add an attribute named Intentos-Reject. I would like to use only one DEFAULT entry to match with @domain.es and with @temp.domain.es Don't use hints for that. Sorry, but I don't understand. I need to

Re: Time connected

2009-10-29 Thread Ivan Kalik
Sergio Belkin wrote: Hi, Sorry for the stupid question, but I'd want to get how many time every user is connected, please could you provide some kind of guideliness? Using Version 2.1.1. SELECT Count(*) FROM radacct WHERE UserName='some_username' Ivan Kalik Kalik Informatika ISP - List

Re: problem regular expressions in hints file

2009-10-29 Thread Ana Gallardo
I'm really sorry, this is stupid, I thougth || was OR: # /etc/freeradius/hints DEFAULT (Suffix == @domain.es || Suffix == @temp.domain.es) Intentos-Reject = ... Ana Gallardo Gómez - List info/subscribe/unsubscribe? See

Re: problem regular expressions in hints file

2009-10-29 Thread Alan DeKok
Ana Gallardo wrote: Sorry, but I don't understand. I need to add an attribute to the request Yes. The unlang documentation explains how to do that. # /etc/freeradius/hints # The hints file. This file is used *to match* # *a request, and then add attributes to it*. This ...

Re: Probably simple problem

2009-10-29 Thread Ivan Kalik
Paul Ryszka wrote: Hello, Sorry for that the problem was simple I just forgot to put on the end of the line. I guess I spent too much time going over it yesterday. Anyway I am also looking at implementing MSSQL authentication back-end Ugh, do you *have* to use MSSQL. Can't you use

reply to NAS not correct

2009-10-29 Thread T.Robers
}/auth-detail-%Y%m%d - /var/log/radius/radacct/172.16.255.101/auth-detail-20091029 [auth_log] /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/radius/radacct/172.16.255.101/auth-detail-20091029 [auth_log] expand: %t - Thu Oct 29 10:37:21 2009 ++[auth_log

Re: Time connected

2009-10-29 Thread Sergio Belkin
2009/10/29 Ivan Kalik t...@kalik.net: Sergio Belkin wrote: Hi, Sorry for the stupid question, but I'd want to get how many time every user is connected, please could you provide some kind of guideliness? Using Version 2.1.1. SELECT Count(*) FROM radacct WHERE UserName='some_username'

Re: Probably simple problem

2009-10-29 Thread Paul Ryszka
Database is not my choice either and I had to learn quite a lot about MSSQL in last two days and didn't like a bit about it :) is there any better guide that I should be following ? I read the SQL from wiki but it does not mention MSSQL so I tried to find something else ... On Thu, 2009-10-29 at

Re: reply to NAS not correct

2009-10-29 Thread Ivan Kalik
t.rob...@heidelberg.de wrote: The correct Filter-ID Enterasys:version=1:policy=Mitarbeiter in [peap] is pushed, but the switch got invalid role. Is the Filter-ID overridden by the next Accept ? My users file contains DEFAULT Ldap-Group == WWW Framed-Filter-Id :=

Re: Time connected

2009-10-29 Thread Ivan Kalik
Sergio Belkin wrote: 2009/10/29 Ivan Kalik t...@kalik.net: Sergio Belkin wrote: Hi, Sorry for the stupid question, but I'd want to get how many time every user is connected, please could you provide some kind of guideliness? Using Version 2.1.1. SELECT Count(*) FROM radacct

Re: Probably simple problem

2009-10-29 Thread Ivan Kalik
Paul Ryszka wrote: Database is not my choice either and I had to learn quite a lot about MSSQL in last two days and didn't like a bit about it :) is there any better guide that I should be following ? I read the SQL from wiki but it does not mention MSSQL so I tried to find something else ...

RE: Time connected

2009-10-29 Thread Scott Miller
I use the following: SELECT SUM(AcctOutputOctets/1024) AS data, SUM(AcctSessionTime/60) AS minutes, DATE_FORMAT(AcctStartTime,'%M %Y') AS month, CalledStationId, UserName INTO OUTFILE /tmp/feb-09-result.txt FROM radacct GROUP BY month, CalledStationId, UserName HAVING month LIKE 'February 2009';

Filter Access-Challenge Attributes

2009-10-29 Thread Ben Wiechman
Is the following stub for filtering Access-Challenge attributes from sites-available/default for future use? # Auth-Type eap { # eap { # handled = 1 # } # if (handled (Response-Packet-Type == Access-Challenge)) { #

Re: NotBefore, NotAfter or Date attributes fot temporary accounts

2009-10-29 Thread Daniele Albrizio
Alan DeKok wrote: Daniele Albrizio wrote: In an old post Alan DeKok said he would patch freeradius to support temporary accounts using attributes like Date January 1 2010 13:00 Date January 12 2010 13:00 Use Current-Time. Good. Do you know where can I find the syntax for the

Hello. OpenBSD and Free Radius

2009-10-29 Thread C. Diego Raffaelli A.
Hi all. I'm trying to install a Radius server into Open BSD for AAA for my lan users. Basically, i would like to offer username and password for each one of them. i hope to manage its bandwidth  too. i have the instructions for DHCP server, Firewall, but radius. i only has encountered openbsd

Re: Proxy Accounting

2009-10-29 Thread Phil Pierotti
I'm also about to attempt the same thing, but this comment below didn't make sense to me. You put what in where? Any chance you can copy-n-paste a clarification for those of us who're also new to FreeRADIUS? Thanks, PhilP after debug i saw that all that was missing was in the default file