Re: dynamic check item, based on nas type

2010-02-15 Thread YvesDM
On Mon, Feb 15, 2010 at 8:47 AM, YvesDM ydm...@gmail.com wrote: Hi, Situation: All users can login to different nas types. Problem: I need a different value for simult.-use check depending on the nas a user logs on to. Is there a way to do this? (using FR1.1.7 for now) tnx. Yves Edited

Re: Allowing user from one realm but not another

2010-02-15 Thread Alan DeKok
Jeff A wrote: I am using cistron compat to accommodate my userfile inputted by rodopi I'd really suggest using the FreeRADIUS features. Ask rodopi to fix their product. I have tried adding the ! and : symbol in the above line (makes no difference) Uh... I tried random things and they

Re: Ancient Freeradius Problem

2010-02-15 Thread Stefan Winter
Hi, I didn't yet running any program excepted radtest user localhost 1812 testing123 as root. And it reported rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=172, length=20. Do you have any clue ? That's the client side. Your server is configured to run a program with

Counters reset period

2010-02-15 Thread liran tal
Hey, I've defined a quarterly reset period counter (reset=3m), and when logging-in the %b and %e (beginning of counter and ending of counter periods) I am getting values for beginning which are equal to the 1st of December and ending which is equal to the beginning of March. Meaning, the quarter

RE: Allowing user from one realm but not another

2010-02-15 Thread Jeff A
Ok, I figured I goofed something up. Been looking at this so long, I am making big mistakes. -Original Message- From: freeradius-users-bounces+jeffa=globalco@lists.freeradius.org [mailto:freeradius-users-bounces+jeffa=globalco@lists.freeradius.org] On Behalf Of Alan DeKok Sent:

Re: Counters reset period

2010-02-15 Thread liran tal
It seems that the counting period is X months until the current month. So if reset=3m is specified and it's now February it will count 3 months earlier (thus, december, january and february). I'm wondering if anybody has some insight regarding yearly recurring quarterly periods

RE: Allowing user from one realm but not another

2010-02-15 Thread Jeff A
Ok good news I got it to work..New day less tired and man what an idiot I was. I have a question though. Freeradius can look at more than one user file, what is the syntax to allow this to read another, and where do I place the entry for it I am wanting to do this so I can convert to complete

Re: Counters reset period

2010-02-15 Thread Alan DeKok
liran tal wrote: It seems that the counting period is X months until the current month. So if reset=3m is specified and it's now February it will count 3 months earlier (thus, december, january and february). I'm wondering if anybody has some insight regarding yearly recurring quarterly

Re: Allowing user from one realm but not another

2010-02-15 Thread Alan DeKok
Jeff A wrote: Freeradius can look at more than one user file, what is the syntax to allow this to read another, and where do I place the entry for it $ man users And also see the documentation at the top of the users file. Look for include. Alan DeKok. - List

Re: Counters reset period

2010-02-15 Thread liran tal
On Mon, Feb 15, 2010 at 5:21 PM, Alan DeKok al...@deployingradius.comwrote: liran tal wrote: It seems that the counting period is X months until the current month. So if reset=3m is specified and it's now February it will count 3 months earlier (thus, december, january and february).

Re: Counters reset period

2010-02-15 Thread Alan DeKok
liran tal wrote: Use a cron job SQL statements. Alan, could you explain? The counters are stored in a DB. You can reset them any time you want by just editing the DB. Since the '3m' reset period didn't work as I expected I patched the rlm_sqlcounter.c to reset counters on a

How to convert User-Name to lower case

2010-02-15 Thread Bob Brandt
I currently have a working system which authenticates users using a LDAP (eDirectory) backend. The authentication process is speedy quick! (between 0-11 ms) However, I also have a need to return attributes based on group membership.  This part of the process is very slow (upwards of 6500ms) The

Re: How to convert User-Name to lower case

2010-02-15 Thread Chris
On Feb 15, 2010, at 12:26 PM, Bob Brandt wrote: I have spent the day searching the internet for a solution, but Nothing. I refuse to believe I am the first human being ever to run into this problem... Please tell me someone has an idea. Thanks Bob

Re: Problems with freeradius accounting proxy

2010-02-15 Thread Phil Pierotti
Hi Alan, The main reason my initial checking was with tcpdump was to identify what the packets were doing. ACCT request IN from LNS - check ACCT request OUT to downstream RADIUS - no So the problem is not due to the downstream RADIUS failing to respond at all. (ie genuinely/obviously dead)

Re: Problems with freeradius accounting proxy

2010-02-15 Thread Alan DeKok
Phil Pierotti wrote: The main reason my initial checking was with tcpdump was to identify what the packets were doing. As opposed to looking at the debug logs from the server? You can look at the high level packet in / packet out view. Or, you can look at the detailed log messages from

Re: Problems with freeradius accounting proxy

2010-02-15 Thread Fajar A. Nugraha
On Tue, Feb 16, 2010 at 4:00 AM, Phil Pierotti phil.piero...@gmail.com wrote: Tue Feb 16 07:45:32 2010 : Proxy: Marking home server {{radius-ip}}  port 1813 as zombie (it looks like it is dead). I assume that radius is out of your control? Also, status check (via request) succeeds, naturally, 

Re: Problems with freeradius accounting proxy

2010-02-15 Thread Phil Pierotti
Hi Alan, Sorry, I didn't mean to imply I wasn't interested in looking further, my primary concern was to find out if it was something as simple and obvious as the downstream proxy not responding. Thanks for your feedback, I'll look at the debug logs and see what they tell me, given the fairly

Re: Problems with freeradius accounting proxy

2010-02-15 Thread Phil Pierotti
Hi Fajar, Yes and no, it's a third-party product integrated into our billing system, so it's 100% mystery magic. Debugging is strictly ask someone to fix it because its broken. Re: your comments about database lookups, this is exactly the situation. Thanks, Phil P On Tue, Feb 16, 2010 at 8:56

Re: Problems with freeradius accounting proxy

2010-02-15 Thread Phil Pierotti
So I've run freeradius with -X -xx Other than logging the details of the packets sent and received, the debug logs do not have much more than marking as zombie, seems to be dead. No complaints, no explanation, no details, just jumps straight into looks like its dead. This is the point at

Re: Problems with freeradius accounting proxy

2010-02-15 Thread Alan DeKok
Phil Pierotti wrote: So I've run freeradius with -X -xx Other than logging the details of the packets sent and received, the debug logs do not have much more than marking as zombie, seems to be dead. They have rather a lot more than that. No complaints, no explanation, no details, just

Re: Freeradius PEAP/MSCHAPv2 against Apple OpenDirectory

2010-02-15 Thread Alan DeKok
Moritz Dereschkewitz wrote: Wow, that sounds great. I haven't read about the use_open_directory option yet. Do I have to configure the mschap-module to connect to the OD, since Freeradius is not running on the Apple server? E.g. specify the server adress? Or does it find the server

Re: Problems with freeradius accounting proxy

2010-02-15 Thread Fajar A. Nugraha
On Tue, Feb 16, 2010 at 6:09 AM, Phil Pierotti phil.piero...@gmail.com wrote: Tue Feb 16 09:40:25 2010 : Proxy: Marking home server 192.168.147.2 port 1813 as zombie (it looks like it is dead). There should be other things before that Sending Accounting-Request of id 228 to 192.168.147.2