Devices in more than one huntgroup

2011-08-19 Thread Jan . Weiss
Hi, I have a little problem with devices in multiple huntgroups. By now i kno that this is not possible (rtfm helped ;-) What i wanted to do is the following: Two Teams, but with diffenrent rights. Users: DEFAULT Auth-Type := LDAP, Huntgroup-Name == nexus, LDAP-Group ==

Re: Devices in more than one huntgroup

2011-08-19 Thread Frank Ranner
On 19/08/2011, at 4:59 PM, jan.we...@t-systems.com wrote: Hi, I have a little problem with devices in multiple huntgroups. By now i kno that this is not possible (rtfm helped ;-) What i wanted to do is the following: Two Teams, but with diffenrent rights. Users:

Radius Testing Tool

2011-08-19 Thread Ben Brown
Morning all, A few months ago I was changing part of our RADIUS platform. I wanted to thoroughly test the change I was making in our test environment, so I captured a few thousand RADIUS packets from one of our live servers using tcpdump, then used tcpreplay to fire them at the test radius server

Devices in more than one huntgroup

2011-08-19 Thread Jan . Weiss
DEFAULT.Huntgroup-Name == nexus,LDAP-Group == nexus_RO ... DEFAULT.Huntgroup-Name == nexus,LDAP-Group == nexus_RW ... Add your users to groups to suit. While devices can only be in one group, users can be in many. Thanks for the answer! But there are several problems for me: - i have

Re: Radius Testing Tool

2011-08-19 Thread Alan DeKok
Ben Brown wrote: I quickly found this to be very tedious and time consuming, so I started looking for a program that would read in the pcap file I'd made with tcpdump, fire the packets at the test server and compare the packet it got back with the response packets in the capture. After some

Re: Radius Testing Tool

2011-08-19 Thread Ben Brown
On Fri, Aug 19, 2011 at 01:35:32PM +0100, Alan DeKok wrote: OK... my main surprise is that you've re-written a RADIUS encoder/decoder, and a dictioanry file parser. All of that code already exists... I did initially look at using the radiusclient-ng library, but I found the dictionary

A little issue with disconnecting users

2011-08-19 Thread Mobin Yazarlou
Hi, I am trying to disconnect users with the instructions given at http://wiki.freeradius.org/Disconnect-Messages. I made a packet.txt file with the following content: Acct-Session-Id=4E4EB0DE083800 User-Name=amin X-Ascend-Session-Svr-Key= NAS-IP-Address=127.0.0.1 Then run the following

Re: A little issue with disconnecting users

2011-08-19 Thread Arran Cudbard-Bell
Could you give a working Packet of Disconnect example cause it will not work if I eliminate X-Ascend-Session-Svr-Key or set a NULL value for it. You don't need X-Ascend-Session-Srv-Key and i've removed it from the example on the wiki... See here

Re: Radius Testing Tool

2011-08-19 Thread Alan DeKok
Ben Brown wrote: I did initially look at using the radiusclient-ng library, but I found the dictionary parsing to be a bit too fragile. It would bomb out with very little provocation. Yes, it needs work. The radsniff program distributed with FreeRADIUS reads PCAP files. It uses the