MAC-Authentication from Mysql

2010-11-22 Thread David Seira
Hi list. I'm trying to implement MAC-Authentication directly from a Mysql database. I follow the wiki page http://wiki.freeradius.org/Mac-Auth for authenticate macs from a file. I want to authenticate macs reading the authorized macs from a mysql database. I understand that in the radcheck table

Re: MAC-Authentication from Mysql

2010-11-22 Thread Alan DeKok
David Seira wrote: I don't know where put the sql instruction for read macs from database. Read raddb/sites-available/default. Look for sql. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

How to avoid to be disconnected as Lost-Carrier?

2010-11-22 Thread Robin
Hi, I have 200 users in a small area network (PPPoE, LAN network). I use Mikrotik RouterOS as PPPoE server use Freeradius as Radius server. I find that some “Lost-Carrier” issue due to lost connection (around 8%-10% users). I judged that cable had been interfered intermittently. But I

Re: How to avoid to be disconnected as Lost-Carrier?

2010-11-22 Thread Gary Gatten
If I understand correctly, unless the users are idle when the carrier is dropped, they'll know regardless of how you try to mask it. No carrier = no connection, no wire. If the loss is very brief and modem reconnect quickly, maybe you can mask it, but, you must do so on your ppp server.

Re: How to avoid to be disconnected as Lost-Carrier?

2010-11-22 Thread Gary Gatten
PS: and you'll likely have to tune some parms on your modems as well. From: freeradius-users-bounces+ggatten=waddell@lists.freeradius.org freeradius-users-bounces+ggatten=waddell@lists.freeradius.org To: 'freeradius-users@lists.freeradius.org'

Re: MAC-Authentication from Mysql

2010-11-22 Thread David Seira
Hi Alan. Thanks for your time. In the authorize section I have the next instructions for authorize users in a mac file: if((Service-Type == 'Call-Check') || (User-Name =~ /^%{Calling-Station-Id}$/i)){ update control { Auth-Type = 'CSID' } } I don't know how to call the sql module for read the

Re: MAC-Authentication from Mysql

2010-11-22 Thread Arran Cudbard-Bell
I don't know how to call the sql module for read the list users from mysql. If I put in that section the sql instruction I don't know how compare the sql results with the Calling-Station-Id that the NAS return in the request. Another thing is that I don't know why the authorization is

Checkval weird issue with LDAP backend and PAM authentication

2010-11-22 Thread marco
Hi, I'm facing this issue in configuring radius: I'm developing a GPLv3 script that will easily setup a whole linux server with lots of usefull services (NTP,DHCP,DNS with DDNS update to DHCP, MIT-Kerberos, OpenLDAP (Kerberized), FreeRadius, MySQL, Apache, ProFTP, SQUID, Samba (kerberized),

[no subject]

2010-11-22 Thread Zoet Omar Zepeda
How to register a user in freeradius? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[no subject]

2010-11-22 Thread Zoet Omar Zepeda
i am new to this I really need the help of how to configure freeradius in ubuntu?- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Radreply Attributs full lists

2010-11-22 Thread morocon
thanks a lot :) -- View this message in context: http://freeradius.1045715.n5.nabble.com/Radreply-Attributs-full-lists-tp3261819p3276334.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: MAC-Authentication from Mysql

2010-11-22 Thread EasyHorpak.com
On 22/11/2553 22:41, David Seira wrote: Hi Alan. Thanks for your time. In the authorize section I have the next instructions for authorize users in a mac file: if((Service-Type == 'Call-Check') || (User-Name =~ /^%{Calling-Station-Id}$/i)){ update control {

Re: Checkval weird issue with LDAP backend and PAM authentication

2010-11-22 Thread Alan DeKok
marco wrote: the idea is to use checkval module to catch the NAS-Identifier parameter that the proftpd module set as ftp. Why? The checkval module has limited functionality. See man unlang for a much better way to do attribute comparisons. All of the debug output you provided was