Re: How to specify python modules used by rlm_python?

2011-10-04 Thread Alan Buxey
Hi, >I'm trying to use rlm_python to intergrate with my own authentication >backend, but there's so little document about rlm_python. I even cannot >find how to specify the path to the python module. radiusd.py living in PYTHONPATH - EXPORT PYTHONPATH=$location alan - List info/sub

Re: Using DB instead of radutmp for simultaneous-use tracking

2011-10-04 Thread Det Det
Hi, Thanks a lot! Got it working! I'd like to extend the simul-check to group simul value. That is a group has simul limit, then if limit is reached a user belonging to that group should be denied login. Any idea how to implement this? Thanks! Det From: Faj

Re: Using DB instead of radutmp for simultaneous-use tracking

2011-10-04 Thread Fajar A. Nugraha
On Tue, Oct 4, 2011 at 4:47 PM, Det Det wrote: > Hi, > Thanks a lot! Got it working! I'd like to extend the simul-check to group > simul value. That is a group has simul limit, then if limit is reached a > user belonging to that group should be denied login. Any idea how to > implement this? That

SQL IP Pool Not Accepting Redundant SQL

2011-10-04 Thread Det Det
Hi, How to make sqlippool accept redundant SQL as below? sqlippool {  sql-instance-name = "redundant_sql"  ippool_table = "radippool" ... } radiusd.conf ...     redundant redundant_sql {         sql1         sql2     } ... if I use  sql-instance-name = "sql1" or sql-instance-name =

Re: SQL IP Pool Not Accepting Redundant SQL

2011-10-04 Thread Arran Cudbard-Bell
On 4 Oct 2011, at 12:08, Det Det wrote: > Hi, > > How to make sqlippool accept redundant SQL as below? > > sqlippool { > sql-instance-name = "redundant_sql" > ippool_table = "radippool" > ... > } > > radiusd.conf > ... > redundant redundant_sql { > sql1 > sql2 >

Re: SQL IP Pool Not Accepting Redundant SQL

2011-10-04 Thread Arran Cudbard-Bell
> > You can't, 'redundant_sql' is not an sql-instance. You need to create two > instances of sqlippool, then wrap them in a redundant block... If you're using FR >= 2.1.11 or 3.* Overload the sqlippool module policy.conf policy { sqlippool { redundant {

Parsing the multiple attributes with same name

2011-10-04 Thread denizaydin
Hi, Cisco ISG uses same attribute with different value's for multiple purposes. The value format defines the usages!. Like ; Cisco-Account-Info attribute with value beginning with V represent accouting cookie and value beginning with S defines session identifier. For parsing the Cisco-Accoun

Re: Parsing the multiple attributes with same name

2011-10-04 Thread Arran Cudbard-Bell
> > For parsing the Cisco-Account-Info, I have wrote some unlang expression but > I don't know it's the best way for freeradius performance. This makes a loop > for every Cisco-Account-Info attribute. Is there any other ways that you can > suggest? > Yes, using the foreach construct in version 3

Multiple NAS freeradius

2011-10-04 Thread Alejandro Gandara
Hi list, Im using freeradius 2.1.10 with ldap and I have a doubt. Im testing radius with two NAS , first one an openvpn service and the other one is a switch Procurve. My question is the following: Can I configure the openvpn nas to read some attribute from the ldap ( as framedipaddress) and

Re: Multiple NAS freeradius

2011-10-04 Thread Arran Cudbard-Bell
On 4 Oct 2011, at 13:32, Alejandro Gandara wrote: > Hi list, > > Im using freeradius 2.1.10 with ldap and I have a doubt. > > Im testing radius with two NAS , first one an openvpn service and the other > one is a switch Procurve. > > My question is the following: > > Can I configure th

Re: Multiple NAS freeradius

2011-10-04 Thread Alejandro Gandara
Thanks very much for the fastest and efectivest answer. 2011/10/4 Arran Cudbard-Bell > > On 4 Oct 2011, at 13:32, Alejandro Gandara wrote: > > Hi list, > > Im using freeradius 2.1.10 with ldap and I have a doubt. > > Im testing radius with two NAS , first one an openvpn service and the > other

Re: Version 2.1.12 has been released

2011-10-04 Thread Jakob Hirsch
Alan DeKok, 2011-09-30 16:33: > * Added support for PCRE from Phil Mayers Sorry for not stepping up before, but it seems to me that this only went into the master, not in the 2.1.x branch. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

rlm_sql_mysql UTF-8 encoding

2011-10-04 Thread Krzyzagorski Tomek KOMA NORD
I am trying to setup FR with Mysql as backend. FR is 2.1.10 The username that is sent to the FR contains the UTF-8 encoded characters. From debugging: # the rad_recv: Access-Request packet from host 127.0.0.1 # port 59305, id=76, length=62 #User-Name = "głup.wór" #User-Passw

Re: Version 2.1.12 has been released

2011-10-04 Thread Alan DeKok
Jakob Hirsch wrote: > Alan DeKok, 2011-09-30 16:33: > >> * Added support for PCRE from Phil Mayers > > Sorry for not stepping up before, but it seems to me that this only went > into the master, not in the 2.1.x branch. Oh well. Maybe the next rev. Alan DeKok. - List info/subscribe/unsubs

Re: rlm_sql_mysql UTF-8 encoding

2011-10-04 Thread Arran Cudbard-Bell
> > however as it gets to the rlm_sql_mysql module it shows > # [sql] expand: %{User-Name} -> g.?up.wór > # [sql] sql_set_user escaped user --> 'g.?up.wór' > > It does seem that the UserName string is iterated byte by byte and not UTF-8 > aware way. > > hence it shows: > > # [sql] expand:

Re: MySQL and FreeRADIUS environment

2011-10-04 Thread tonimanel
Hi again, I have a doubt, what happen if in my company we want to have two servers, both with freeradius service and mysql service and this two servers could be actives with mysql data replicated? We would like to have two servers as actives with the ability to be both functional. I think that is

Re: MySQL and FreeRADIUS environment

2011-10-04 Thread Alan DeKok
tonimanel wrote: > Is possible to make the data replica with TCP protocol with FreeRADIUS? Do > you prefer FreeRADIUS replica or mysql replica? What is the best solution to > make the replica? The best solution is to use RADIUS replication. FreeRADIUS knows how to do conflict resolution in the

Re: Version 2.1.12 has been released

2011-10-04 Thread John Dennis
FYI: I have built 2.1.12 RPM packages for Fedora 14, Fedora 15 & Fedora 16. They have been pushed into the updates-testing channel (not updates). They will move into stable in two weeks or if they achieve the necessary "karma" before then. You can add a "karma vote" by visiting the updates pag

FreeRadius with Eduroam - Accounting

2011-10-04 Thread Mike Diggins
I'm running FreeRadius 2.1.3 on RedHat Enterprise Linux configured as an Eduroam Radius proxy server. My Cisco Wireless Lan Controllers are constantly failing over the Accounting Servers, due to lack of response from the Home Servers, or so says the log. However, I believe the issue is that s

Re: FreeRadius with Eduroam - Accounting

2011-10-04 Thread Arran Cudbard-Bell
On 5 Oct 2011, at 02:20, Mike Diggins wrote: > > I'm running FreeRadius 2.1.3 on RedHat Enterprise Linux configured as an > Eduroam Radius proxy server. My Cisco Wireless Lan Controllers are constantly > failing over the Accounting Servers, due to lack of response from the Home > Servers, or