IP delivery for any MAC addresses issues

2010-01-22 Thread Sylvain De Muynck
Dear freeradius users, I am currently facing an issue on my network architecture. Before, I was using freeradius with a DHCP server running in order to attribute IPs addresses to my customers (I work for an ISP) This configuration is perfectly working however for security, maintenance and

Re: Session-timeout and expiration problem

2010-01-22 Thread Alan DeKok
Fazal Ahmed Malik wrote: I have installed Freeradius 2.0 along with mysql 5 and dialup_admin. I am having trouble with session-timeout ,expiration. On dialup_admin i have correct information for both attributes like user can login for 0 seconds and similarly for expiration like account

How to charge based on accounting correctly

2010-01-22 Thread George Chelidze
Hello, We have a system which sends radius accounting messages to our radius. Based on this accounting we charge subscribers. Interim accounting is enabled so for a normal session we get one Start, zero or more Interim-Update and one Stop packets. Every accounting packet except Start

Re: How to charge based on accounting correctly

2010-01-22 Thread Alan DeKok
George Chelidze wrote: To charge a session in chunks we calculate a difference between the recent value and the previous one. Why not just update the users credit when the session is closed? In our case we get Interim-Update records every 15 minutes, No. You *hope* to get them every 15

Re: Blank Password Problem

2010-01-22 Thread Satyam Mathura
OK i'm back to my original question. How do i get FreeRadius working with a MySQL back-end to do the following: a. Reject a user if that user is in a group which is not allowed to access devices in a specific huntgroup. b. Allow a user if that user is in the appropriate group which is allowed to

How to strip REALM but insert it from a usern...@mac onto an MySQL DB

2010-01-22 Thread Lucio Godoy
Hi All; I have been running a FreeRADIUS Server Version 2.1.6 setup to work with MySQL 5 to authenticate VPN Dial-up users with no problems at all. My next step is to try to log the users realms, which is their MAC addresses, the authentication today is CHAP with a combination of

test suite simulating NAS for development?

2010-01-22 Thread Mark McWiggins
Hi All, We're developing an application to capture log data from Radius, but we don't have a NAS to test with to generate the logs. Is there some test suite available to do this? Thanks much; if none is available we will probably develop one and I think our management will consent to share it.

Re: test suite simulating NAS for development?

2010-01-22 Thread Alan DeKok
Mark McWiggins wrote: We're developing an application to capture log data from Radius, but we don't have a NAS to test with to generate the logs. Is there some test suite available to do this? radclient comes with the server. It can generate traffic if you feed it data. There's also

Re: EAP-TLS User-Name not matching

2010-01-22 Thread Huckle Berry
On Fri, Jan 22, 2010 at 12:13 AM, Huckle Berry huck.be...@gmail.com wrote: Will report later. I installed the new certs (I checked in the details tab on windows that both the server and client have the correct xpextentions) however the client still fails to respond. Just to be sure, I hopped