Re: sql expansion with query string stored in attribute?

2011-10-18 Thread Fajar A. Nugraha
On Wed, Oct 19, 2011 at 1:45 PM, Alan DeKok wrote: > Fajar A. Nugraha wrote: >> Is it possible to use sql expansion with query stored in a radius >> attribute (e.g. Tmp-String-0)? > >  Not currently. I was afraid of that :) > >> For example, I have something like this to store my local >> config

Re: DHCP with multiple interfaces

2011-10-18 Thread Alan DeKok
Francois Gaudreault wrote: > Another quick question, if we want to use perl in the "dhcp > DHCP-Discover" section, which sub should I redefine in the perl script? post-auth - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: sql expansion with query string stored in attribute?

2011-10-18 Thread Alan DeKok
Fajar A. Nugraha wrote: > Is it possible to use sql expansion with query stored in a radius > attribute (e.g. Tmp-String-0)? Not currently. > For example, I have something like this to store my local > configuration variables: > > local-config { > sql-now="select concat('Current time = ',now()

sql expansion with query string stored in attribute?

2011-10-18 Thread Fajar A. Nugraha
Hi, Is it possible to use sql expansion with query stored in a radius attribute (e.g. Tmp-String-0)? Currently it mime-encodes the characters equal (=) and single quote (') to "=3D" and "=27", so it's not usable. For example, I have something like this to store my local configuration variables:

Re: FreeRADIUS sends proxy packets out the proper interface, but with the wrong source IP (simple udpfromto problem?)

2011-10-18 Thread Alan DeKok
Adam Bultman wrote: > Problem: The detail reader, when sending the accounting packets, sends > them out the *correct* interface, but with the *wrong* source IP > address. (It will send out eth2, but have the source IP of eth0.) You're running Linux, right? And both interfaces are on the same ne

FreeRADIUS sends proxy packets out the proper interface, but with the wrong source IP (simple udpfromto problem?)

2011-10-18 Thread Adam Bultman
Quick summary: I have RADIUS servers that are performing authentication and accounting for various NAS devices. I recently set up a new accounting proxy, to put a copy of my accounting files on remote hosts via a private network. I've created an additional detail writer, and created a reader. W

Re: DHCP with multiple interfaces

2011-10-18 Thread Francois Gaudreault
HI Alan, On 11-10-18 3:37 PM, Alan DeKok wrote: You configure different virtual servers. See raddb/sites-available/README Right. That one was obvious. Sorry about that :S It was not clear that the listen statement was also supporting the virtual-server flag. Maybe I am tired... PS. By

Re: DHCP with multiple interfaces

2011-10-18 Thread Alan DeKok
Francois Gaudreault wrote: > I configured (basic) DHCP on two different interfaces : ... > I need to establish a different (basic for now) lease policy by > interface (ie. different network range). How can I know from which > interface the request came? You configure different virtual servers.

Re: rlm_perl not working

2011-10-18 Thread Alan Buxey
Hi, > > Of course ! But to simplify documentation, I've put all in one file > > radiusd.conf except sql requests / config > > That's a terrible idea. I was going to say the same thing. the old old server used to use a single file for config...that was actually a nasty thing. it now calls se

DHCP with multiple interfaces

2011-10-18 Thread Francois Gaudreault
Hi, I configured (basic) DHCP on two different interfaces : listen { ipaddr = * port = 67 type = dhcp interface = eth0 broadcast = yes } listen { ipaddr = * port = 67 type = dhcp interface = eth1.102 broadcast = yes } I need

Re: rlm_perl not working

2011-10-18 Thread Alan DeKok
Vincent, Fabien wrote: > Of course ! But to simplify documentation, I've put all in one file > radiusd.conf except sql requests / config That's a terrible idea. You can't get the server to work the way you want, but you're willing to completely change it's configuration? That makes no sen

Re: Del dynamic client working?

2011-10-18 Thread Alan DeKok
tohaikmeng wrote: > In order to delete a dynamically defined client, the client IP file needs to > reside in dynamic-clients folder upon startup of the radius daemon. I > wondering if we are able to delete the dynamic defined client without > restart of the radius daemon? > > ERROR: Client 192.16

RE: rlm_perl not working

2011-10-18 Thread Vincent, Fabien
Of course ! But to simplify documentation, I've put all in one file radiusd.conf except sql requests / config Another question with Perl / Accounting : I want to made accounting on my F5 LTM / GTM. But the F5 uses something "special", because all Audit logs are forwarded to the Radius using sys

Re: rlm_perl not working

2011-10-18 Thread Alan Buxey
Hi, >Sorry, fixed, a mistake in my radiusd.conf … (lost in brackets ;) my concern would be that you dont need to touch radiusd.conf at all to use the rlm_perl module - hope you werent following some old document - you just need to edit the modules/perl file and then put 'perl' into the require

RE: Configuring FreeRADIUS to use ntlm_auth for MS-CHAP

2011-10-18 Thread Martin Ubank
I took Alan Buxey's advice and installed FreeRADIUS 2.1.10 and Samba 3.5.6-86. After solving other problems along the way, I got to the final test of FR with AD and ntlm_auth using 'eapol_test'. This gave the Certificate_Compatibility warning. I then went back through the process of creating pro

RE: rlm_perl not working

2011-10-18 Thread Vincent, Fabien
Sorry, fixed, a mistake in my radiusd.conf … (lost in brackets ;) De : freeradius-users-bounces+fabien.vincent=coreye...@lists.freeradius.org [mailto:freeradius-users-bounces+fabien.vincent=coreye.fr@lists.freeradius.o rg] De la part de Vincent, Fabien Envoyé : mardi 18 octobre 2011 15:53

rlm_perl not working

2011-10-18 Thread Vincent, Fabien
Hi all, As you reply yesterday to my question, I have another one which is very embarrassing : I have the following packages installed on CentOS box : freeradius2.x86_64 freeradius2-mysql.x86_64 freeradius2-ldap.x86_64 freeradius2-perl.x86_64 freeradius2-utils.x86_64 I want to m

Del dynamic client working?

2011-10-18 Thread tohaikmeng
Hello guys, In order to delete a dynamically defined client, the client IP file needs to reside in dynamic-clients folder upon startup of the radius daemon. I wondering if we are able to delete the dynamic defined client without restart of the radius daemon? ERROR: Client 192.168.169.89 was not