Can translation of RADIUS packet attributes (e.g., NAS-Port-Type) be configured?

I am running FreeRADIUS 2.1.7. I am attempting to write accounting data to Postgres database. In the database the NAS port type from the request is stored as the integer value that defines the port type in RFC2865 (e.g., 19 - 'Wireless - IEEE 802.11'). The database table is fixed and cannot be

Re: Can translation of RADIUS packet attributes (e.g., NAS-Port-Type) be configured?

Guess I should have persevered for another 10 minutes. I have found a solution to my problem, which is to change my accounting_*_query from: [...] '%{NAS-Port-Type}', [...] to: [...] '%{sql:SELECT shortname FROM ${nas_table} WHERE nasname = %{NAS-Port-Type}}', \ [...] However, I'm still

Re: Can translation of RADIUS packet attributes (e.g., NAS-Port-Type) be configured?

On Wed, Aug 17, 2011 at 4:13 PM, Jack Patmos jack.pat...@googlemail.com wrote: Guess I should have persevered for another 10 minutes. I have found a solution to my problem, which is to change my accounting_*_query from: [...] '%{NAS-Port-Type}', [...] to: [...] '%{sql:SELECT shortname

Re: Can translation of RADIUS packet attributes (e.g., NAS-Port-Type) be configured?

It's not really the same thing, since you're using whatever is on nas_table instead of the original integer value. Also, %{sql: doesn't really work with redundant sql modules instances. Understood, I will avoid doing that. Git log shows this ... It'd probably do what you want. If you

force logout user on nas at accounting

Hello, I want to know how I can tell the nas to logout a user on Accounting packet. What i have to return at my module to let the nas disable the user? I have a request like this: Service-Type=Call-Check NAS-Identifier=rad100 NAS-Port=1 NAS-Port-Id=Controlled NAS-Port-Type=Wireless-802.11

Re: force logout user on nas at accounting

Thats not how the RADIUS protocol works. Accounting packets cannot be used to terminate a session, they're used exclusively for accounting. Refer to your NAS's manual to see if it supports CoA (Change of Authorisation) or DM (Disconnect Message). If it doesn't your best bet is using SNMP via

Re: NAS-IP-Address or NAS-Identifier in Access-Request?

Eric Geier wrote: I found %{Packet-Src-IP-Address} but when I include this in the postauth_query, it doesn't work...the fields are blank in the DB when I view it. And what does debug log say? If Packet-Src-IP-Address doesn't work, odds are you're running 1.x. Upgrade. Alan DeKok. -

How to tell freeradius of the encryption used in DB

Hi, I am testing freeradius. I use dialup admin and mysql to add users, which is configured to store passwords in md5. The attribute is User-Password. Used radtest for testing, but seems radtest is only able to recognize cleartext password. How to tell freeradius that passwords are in md5?

Re: How to tell freeradius of the encryption used in DB

On Wed, Aug 17, 2011 at 8:50 PM, det.explo...@yahoo.com det.explo...@yahoo.com wrote: Hi, I am testing freeradius. I use dialup admin and mysql to add users, which is configured to store passwords in md5. The attribute is User-Password. Use MD5-Password attribute instead Used radtest for

Re: How to tell freeradius of the encryption used in DB

Fajar thanks for the reply. I checked the freeradius attribute list, there is no md5-password. Should i need to add it? If yes how to add that attribute? http://freeradius.org/rfc/attributes.html I didn't touch freeradius config on the auth protocols. I suppose, by default freeradius is set to

Re: How to tell freeradius of the encryption used in DB

On Wed, Aug 17, 2011 at 10:00 PM, det.explo...@yahoo.com det.explo...@yahoo.com wrote: Fajar thanks for the reply. I checked the freeradius attribute list, there is no md5-password. Should i need to add it? If yes how to add that attribute? http://freeradius.org/rfc/attributes.html

Re: How to tell freeradius of the encryption used in DB

Thanks fajar! It worked with MD5-Password. Is there a way to use User-Password attribute in MySQL and tell freeradius somewhere what encryption algo it is using? coz dialup admin by default will use User-Password when inserting this attribute in DB. Thanks!