Re: is the book published?

2010-09-25 Thread Spacelee
no one knows when will the book be published? On Sat, Sep 25, 2010 at 3:26 PM, Spacelee wrote: > http://deployingradius.com/ described on this site. > > > On Sat, Sep 25, 2010 at 3:22 PM, Spacelee wrote: > >> is the book for freeradius published? >> >> -- >> *Space Lee* >> >> > > > -- > *Space

Re: unlang post-auth group-name

2010-09-25 Thread Cameron Wood
Thank you Alan B & Alan D for your comments, and I'll make sure to include the full, complete debug output log in future. I don't think the logic of my example has changed since my earlier post, but I admittedly have tried encasing it in %{...} and adding a list to it as well to try and get it to

Re: unlang post-auth group-name

2010-09-25 Thread Alan DeKok
Alan Buxey wrote: > Hi, >> That wasn't my intention, I thought pasting the entire >> sites-available/default and debug output might be frowned upon. > > pasting the config file is not necessary. if you read the docs and the mailing > list history, you will see that posting the full, complete > de

Re: unlang post-auth group-name

2010-09-25 Thread Alan Buxey
Hi, > That wasn't my intention, I thought pasting the entire > sites-available/default and debug output might be frowned upon. pasting the config file is not necessary. if you read the docs and the mailing list history, you will see that posting the full, complete debug output log from 'radiusd -

Re: DHCP server does not process requests

2010-09-25 Thread Alexander Shikoff
On Sat, Sep 25, 2010 at 04:46:33PM +0200, Alan DeKok wrote: > Alexander Shikoff wrote: > > In my network there is Cisco ISG acting as DHCP relay. It relays requests > > from customers to DHCP server of freeradius: > ... > > But radiusd does not process them: I see no any debug output when > > runni

Re: DHCP server does not process requests

2010-09-25 Thread Alan DeKok
Alexander Shikoff wrote: > In my network there is Cisco ISG acting as DHCP relay. It relays requests > from customers to DHCP server of freeradius: ... > But radiusd does not process them: I see no any debug output when > running 'radiusd -X'. OK. It's a bug in 2.1.9, I think. The fix is in 2.

Re: radius client / send NAS IP ?

2010-09-25 Thread Alan DeKok
Michael Arndt wrote: > at least the radclient of the installed version does not allow to add those > attributes according to manpage Really? What part of the man page says that? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: unlang post-auth group-name

2010-09-25 Thread Alan DeKok
Cameron Wood wrote: > If any of the questions I have asked were too brief or not detailed > enough then surely you could have asked me to provide more detail? I did. You *repeatedly* gave minimal information in response to a question. It's like asking you where you live. You respond "Earth"

Re: Re: radius client / send NAS IP ?

2010-09-25 Thread Michael Arndt
Alan, thx for answering at least the radclient of the installed version does not allow to add those attributes according to manpage if i read your hint right i should download an actual version and compile to get an radclient with enhanced abilities :-) TIA Micha - ursprüngliche Nachrich

Re: unlang post-auth group-name

2010-09-25 Thread Cameron Wood
I don't understand how you could have arrived at this position. All I have been doing is seeking some help with my problem; politely asking questions and providing what I thought was relevant information when asked. If any of the questions I have asked were too brief or not detailed enough then su

DHCP server does not process requests

2010-09-25 Thread Alexander Shikoff
Hello, In my network there is Cisco ISG acting as DHCP relay. It relays requests from customers to DHCP server of freeradius: Sep 25 12:51:05.045: DHCPD: input i/f override GigabitEthernet0/1.33 for client Sep 25 12:51:05.045: DHCPD: Reload workspace interface GigabitEthernet0/1.33 tableid 0. Se

Re: radius client / send NAS IP ?

2010-09-25 Thread Alan DeKok
Michael Arndt wrote: > is there a radtest client where i can send those attribute / value pairs > intentionally ? $ man radclient Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: unlang post-auth group-name

2010-09-25 Thread Alan DeKok
Cameron Wood wrote: > The debug output says almost nothing for that statement... You've repeatedly tried to make it impossible for anyone to help you. I have no idea why, but I definitely get the message. Good luck solving the problem. Alan DeKok. - List info/subscribe/unsubscribe? See ht

radius client / send NAS IP ?

2010-09-25 Thread Michael Arndt
Hello *, at the time beeing i have to use an old radius version for different reasons. freeradius-client-1.1.5-36 freeradius-devel-1.1.6-47 freeradius-1.1.6-47 freeradius-client-devel-1.1.5-36 freeradius-client-libs-1.1.5-36 for real logins at WLAN Hot Spot the DEFAULT NAS-IP-Address == "192.1

rlm_exec: Wait=yes but no output defined

2010-09-25 Thread Michael Arndt
Hello *, radiusd -X in different places announces rlm_exec: Wait=yes but no output defined. Did you mean output=none? Will freeradius fall back internally to output=none without inserting this attribut / value in the config ? Or should i mandatory add output=none ? TIA Micha - List info/subsc

Re: unlang post-auth group-name

2010-09-25 Thread Cameron Wood
The debug output says almost nothing for that statement... ++? if (Group-Name == "net_su") > ? Evaluating (Group-Name == "net_su") -> FALSE > ++? if (Group-Name == "net_su") -> FALSE > Cam. -- On Sat, Sep 25, 2010 at 19:06, Alan DeKok wrote: > Cameron Wood wrote: > > I first tried using

Re: unlang post-auth group-name

2010-09-25 Thread Alan DeKok
Cameron Wood wrote: > I first tried using Group-Name as that works in the Users file... > > if (Group-Name == "net_su") { And the debug mode says... ? If you're interested in never solving the problem, you're off to a good start. Alan DeKok. - List info/subscribe/unsubscribe? See http://w

Re: unlang post-auth group-name

2010-09-25 Thread Cameron Wood
I first tried using Group-Name as that works in the Users file... if (Group-Name == "net_su") { update control { Tmp-String-0 := "net_su" } } Then after searching the mailing list I came across Ldap-Group and gave that a try as well... if (Ldap-Group == "net_su") { update co

Re: unlang post-auth group-name

2010-09-25 Thread Alan DeKok
Cameron Wood wrote: > How can I compare this data? I've tried comparing for it in the > Authorize section using an IF statement, but that didn't work. *What* did you try? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: unlang post-auth group-name

2010-09-25 Thread Cameron Wood
Thanks for the reply Alan. Thanks for the reply Alan. That won't work. The user may be a member of many groups, so > "obtaining" the group name is not possible. > That makes perfect sense. You can *compare* to see if the user is a member of a group. > How can I compare this data? I've tried c

Re: is the book published?

2010-09-25 Thread Spacelee
http://deployingradius.com/ described on this site. On Sat, Sep 25, 2010 at 3:22 PM, Spacelee wrote: > is the book for freeradius published? > > -- > *Space Lee* > > -- *Space Lee* - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

is the book published?

2010-09-25 Thread Spacelee
is the book for freeradius published? -- *Space Lee* - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Additional Restrictions for users

2010-09-25 Thread Alan DeKok
William Burnett wrote: > What is the best way to go about this? I was trying to use unlang to > query my database but can't seem to get the syntax right. The "sql" module queries databases. ... > if ( %{group_membership_query} == "ssh") { This won't do what you want. Instead

Re: unlang post-auth group-name

2010-09-25 Thread Alan DeKok
Cameron Wood wrote: > I'm trying to obtain the Group-Name for the requested user and use it > with unlang in the Post-Auth section of my sites-available/default config. That won't work. The user may be a member of many groups, so "obtaining" the group name is not possible. You can *compare* t