RE: Allowing user from one realm but not another

2010-02-14 Thread Jeff A
Because I was never sure how to keep em off the other realm. They should all be stuck on realm I put em on -Original Message- From: freeradius-users-bounces+jeffa=globalco@lists.freeradius.org [mailto:freeradius-users-bounces+jeffa=globalco@lists.freeradius.org] On Behalf Of Alan

Re: Allowing user from one realm but not another

2010-02-14 Thread Fajar A. Nugraha
On Sun, Feb 14, 2010 at 6:18 PM, Jeff A je...@globalco.net wrote: Because I was never sure how to keep em off the other realm. They should all be stuck on realm I put em on I assume you want it for all users, instead of just one user? It'd be a lot easier if you don't strip the realm. Any

RE: Allowing user from one realm but not another

2010-02-14 Thread Jeff A
I strip the realm off cause backend billing that creates the users file is rodopi, and All users from that have no realm just the username -Original Message- From: freeradius-users-bounces+jeffa=globalco@lists.freeradius.org

Re: Allowing user from one realm but not another

2010-02-14 Thread Fajar A. Nugraha
On Sun, Feb 14, 2010 at 8:23 PM, Jeff A je...@globalco.net wrote: I strip the realm off cause backend billing that creates the users file is rodopi, and So how would you know which user is supposed to be in which realm if the backend doesn't supply that? If it were me, I'd modify the billing

RE: Allowing user from one realm but not another

2010-02-14 Thread Jeff A
Your idea is best. I think I will modify, but for a work around till I get a chance to get everything turned around. I will use Alan's example.. My question is this Can his example contain more than one realm to reject between the quotes? bob Realm != foo.net, Auth-Type := Reject Jeff

Re: Allowing user from one realm but not another

2010-02-14 Thread Chris
On Feb 14, 2010, at 6:11 AM, Jeff A wrote: Your idea is best. I think I will modify, but for a work around till I get a chance to get everything turned around. I will use Alan's example.. My question is this Can his example contain more than one realm to reject between the quotes? bob

Multiple Incoming realms with Separate Databases

2010-02-14 Thread Brett Johanson
I was just wondering if anyone could explain how the sites-available and sites-enabled directory's work in freeradius, I Have been looking for some time but cant find much information. Cheers - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Multiple Incoming realms with Separate Databases

2010-02-14 Thread Alan DeKok
Brett Johanson wrote: I was just wondering if anyone could explain how the sites-available and sites-enabled directory's work in freeradius, I Have been looking for some time but cant find much information. raddb/sites-available/README The available ones are... available, but not used.

RE: Allowing user from one realm but not another

2010-02-14 Thread Jeff A
Having problems getting access reject to work, seems like no matter what I try it lets this test user on in every realm I am using cistron compat to accommodate my userfile inputted by rodopi dialuptest Password = secret Framed-Protocol = PPP, Service-Type = Framed-User,

Re: How to make an open auth realm?

2010-02-14 Thread Marcin S.
Hello! I have one question is it possible to add some information on the end of the line in radius.log like user not in db when I let in users without account in my database? POzdrawiam Marcin S. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Problems with freeradius accounting proxy

2010-02-14 Thread Phil Pierotti
Hi All, I've got Freeradius (2.1.7, Ubuntu Hardy) setup to answer some requests itself, and others get proxied away. All accounting requests get proxied away. My Cisco LNS is sending periodic accounting requests , every ten minutes. We have enough concurrent sessions online that there's a

Re: Problems with freeradius accounting proxy

2010-02-14 Thread Phil Pierotti
I've upgraded to 2.1.8 , and still the same. Oddly enough, it says the *ACCT* port is zombie (which it isn't , we're still seeing responses frequently). *and* the un-zombie recovery does an AUTH, so there is no case where the ACCT port will UN zombify. Phil P On Mon, Feb 15, 2010 at 1:42 PM,

Re: Problems with freeradius accounting proxy

2010-02-14 Thread Alan DeKok
Phil Pierotti wrote: TCPDUMP shows the accounting requests are still being received on the freeradius box, but the outbound/proxied messages have just stopped. Any suggestions as to what might be wrong/where to look? The logs from the server? I don't understand why you're looking at

Re: Checking password and doing something else during authenticate...

2010-02-14 Thread Johan Meiring
Alan DeKok wrote: Johan Meiring wrote: To sum up my understanding of how freeradius works. authorise = select auth type OK... a database would be better, but fine. I assume sql module in authorise. I basically want freeradius to do the PAP/CHAP stuff and AFTER that I want to do

dynamic reply attribute, based on nas type

2010-02-14 Thread YvesDM
Hi, Situation: All users can login to different nas types. Problem: I need a different value for simult.-use check depending on the nas a user logs on to. Is there a way to do this? (using FR1.1.7 for now) tnx. Yves - List info/subscribe/unsubscribe? See