Re: Dynamic-Clients

2012-03-27 Thread Fajar A. Nugraha
On Wed, Mar 28, 2012 at 12:06 PM, dulan wrote: > first i would like to thanks both of you to reply for this issue. > > now i changed Dynamic-Clients file as follows > # if ( "%{sql: SELECT nasname FROM nas WHERE nasname = '10.10.10.161'}") { > update control { >                freeradius-Client-I

Re: load balancing and if statements

2012-03-27 Thread Brian De Wolf
On Mon, 26 Mar 2012 11:46:22 -0700 Scott McLane Gardner wrote: > If I can't use if statements in a load balance block, can anyone > suggest another way to go about accomplishing what I want to do here? After reading this thread and realizing it affects my implementation (though with mysql), I st

Re: load balancing and if statements

2012-03-27 Thread Alan Buxey
Hi, > So, is the documentation at > http://wiki.freeradius.org/Load-balancing#Interaction+with+%22if%22+and+%22 > else%22 incorrect, or is it only correct for the very latest version? its correct you want to load balance the requests to the LDAP servers, yes? so whats the load balancing of t

Proxy + copy accounting to passive home server

2012-03-27 Thread mimir
Hello, I am trying to deploy proxy configuration to my radius server. I added home_server_pool with two home_servers. I can successfully send accounting packets (with load-balance) to other two radius servers. I also can use attribute filtering for proxy via acct_users as below. acct_users: DEF

Proxy + copy accounting to passive home server

2012-03-27 Thread MIMIROGLU, ERDEM (ERDEM)
Hello, I am trying to deploy proxy configuration to my radius server. I added home_server_pool with two home_servers. I can successfully send accounting packets (with load-balance) to other two radius servers. I also can use attribute filtering for proxy via acct_users as below. acct_use

Proxy + copy accounting to passive home server

2012-03-27 Thread mimir
Hello, I am trying to deploy proxy configuration to my radius server. I added home_server_pool with two home_servers. I can successfully send accounting packets (with load-balance) to other two radius servers. I also can use attribute filtering for proxy via acct_users as below. acct_users: DEF

Re: newbiie

2012-03-27 Thread Phil Mayers
On 27/03/12 16:17, Khapare Joshi wrote: And in /var/log/radius/radius.log -- i get nothing Tue Mar 27 13:29:13 2012 : Info: Loaded virtual server Tue Mar 27 13:29:13 2012 : Info: Ready to process requests. Tue Mar 27 14:23:53 2012 : Info: Exiting normally. Tue Mar 27 14:23:53 2012 : Info: Load

Re: load balancing and if statements

2012-03-27 Thread Alan DeKok
Scott McLane Gardner wrote: > So, is the documentation at > http://wiki.freeradius.org/Load-balancing#Interaction+with+%22if%22+and+%22 > else%22 incorrect, or is it only correct for the very latest version? It's correct. You're missing the point. That documentation is for calling MODULES.

Re: newbiie

2012-03-27 Thread Alan DeKok
Khapare Joshi wrote: > hi Alan, > > I now fixed that dictonary issue. I followed the guide lines from here > http://wiki.freeradius.org/PopTop to see if pptp and radius works. I am > getting this error : How about asking the PPTP people how their software works? > Mar 27 15:11:58 test45 pppd[2

Re: newbiie

2012-03-27 Thread Alan Buxey
Hi, >Tue Mar 27 14:23:53 2012 : Info: Ready to process requests. >Tue Mar 27 14:58:03 2012 : Info: Exiting normally. >Tue Mar 27 15:03:26 2012 : Info: Loaded virtual server inner-tunnel >Tue Mar 27 15:03:26 2012 : Info: Loaded virtual server >Tue Mar 27 15:03:26 2012 : Info: R

Re: load balancing and if statements

2012-03-27 Thread Alan Buxey
Hi, > Does this mean that what I want to do is not possible? my advice was so you werent doing all that LDAP-Group , NAS-IP-Address stuff in unlang... regarding the load-balance, you should be okay just keeping that bit similar to how you had it ...heck, you might even try redundant-load-balanc

Re: load balancing and if statements

2012-03-27 Thread Scott McLane Gardner
So, is the documentation at http://wiki.freeradius.org/Load-balancing#Interaction+with+%22if%22+and+%22 else%22 incorrect, or is it only correct for the very latest version? -Scott - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: newbiie

2012-03-27 Thread Khapare Joshi
hi Alan, I now fixed that dictonary issue. I followed the guide lines from here http://wiki.freeradius.org/PopTop to see if pptp and radius works. I am getting this error : /var/log/message Mar 27 15:11:54 test45 pptpd[2121]: CTRL: Starting call (launching pppd, opening GRE) Mar 27 15:11:54 test45

Re: load balancing and if statements

2012-03-27 Thread Alan DeKok
Scott McLane Gardner wrote: > So, now I'm confused again. If this doesn¹t load balance, then how should > I really be going about this? It's hard. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: load balancing and if statements

2012-03-27 Thread Brian Julin
Scott McLane Gardner > >(A sensible wishlist item might be to have load-balance > sections in the > >instantiate section register the same hooks as their > submodules, then > >you'd be able to name the load-balance and use > >-Ldap-Group. But that sounds mildly hairy to > >implement.) > >

Re: load balancing and if statements

2012-03-27 Thread Scott McLane Gardner
> >I cannot answer your question about if statements, but this >much is clear: the Ldap-Group check attribute will query >the ldap module that was instantiated last. If you want >to query a specific module, you have to use -Ldap-Group. > >Similarly for ldap xlats, you have to use the module name.

Re: load balancing and if statements

2012-03-27 Thread Phil Mayers
On 27/03/12 15:07, Scott McLane Gardner wrote: I'd be surprised if using Ldap-Group in the user's file resulted in load balancing of the group membership queries to the LDAP servers. Does it? It does, actually. Or at least it appears to. The first time it used ldap2 and the second time it use

RE: load balancing and if statements

2012-03-27 Thread Brian Julin
Scott McLane Gardner > >I'd be surprised if using Ldap-Group in the user's file resulted in > >load balancing of the group membership queries to the LDAP servers. > >Does it? > > > It does, actually. Or at least it appears to. The first time > it used ldap2 and the second time it used ldap1.

Re: load balancing and if statements

2012-03-27 Thread Scott McLane Gardner
> >Brian Julin wrote: >> I'd be surprised if using Ldap-Group in the user's file >> resulted in load balancing of the group membership >> queries to the LDAP servers. Does it? > > It doesn't. > > Alan DeKok. So, now I'm confused again. If this doesn¹t load balance, then how should I really be g

Re: load balancing and if statements

2012-03-27 Thread Scott McLane Gardner
> >I'd be surprised if using Ldap-Group in the user's file >resulted in load balancing of the group membership >queries to the LDAP servers. Does it? > It does, actually. Or at least it appears to. The first time it used ldap2 and the second time it used ldap1. - List info/subscribe/unsubscribe?

Re: load balancing and if statements

2012-03-27 Thread Alan DeKok
Brian Julin wrote: > I'd be surprised if using Ldap-Group in the user's file > resulted in load balancing of the group membership > queries to the LDAP servers. Does it? It doesn't. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: load balancing and if statements

2012-03-27 Thread Brian Julin
Scott McLane Gardner wrote: > Sent: Tuesday, March 27, 2012 9:34 AM > To: FreeRadius users mailing list > Subject: Re: load balancing and if statements > > This is the answer. Also, this is much easier than what I was > trying to do. Thank you for the pointer, Alan. > > -Scott I'd be surprised

Re: load balancing and if statements

2012-03-27 Thread Scott McLane Gardner
This is the answer. Also, this is much easier than what I was trying to do. Thank you for the pointer, Alan. -Scott On 3/26/12 5:17 PM, "Alan Buxey" wrote: >hi, > >a quick glance at your question and i'd say you be better off using >simple entries in the users file - simple check items (use hu

Re: Dynamic-Clients

2012-03-27 Thread Alan Buxey
Hi, > http://freeradius.1045715.n5.nabble.com/file/n5597709/debug.txt debug.txt ...the answer is written right there in the debug log: Cannot add client 10.10.10.161: Required attribute "freeradius-Client-Secret" is missing have you populated your nas table with the secret ? alan - List inf

Re: Dynamic-Clients

2012-03-27 Thread Fajar A. Nugraha
On Tue, Mar 27, 2012 at 7:40 PM, dulan wrote: > hi, > > i configured a radius server using freeradius 2.1.8. I recommend upgrade to 2.1.12 if possible. > then i change some sql > queries as my requirements.it works properly. > then i need to add clients dynamically without clients.conf. i use >

Dynamic-Clients

2012-03-27 Thread dulan
hi, i configured a radius server using freeradius 2.1.8. then i change some sql queries as my requirements.it works properly. then i need to add clients dynamically without clients.conf. i use /raddb/sites-available/dynamic-clients configured dynamic-clients as follows.but it is not working. plea

Re: FW: Radacct table not working properly

2012-03-27 Thread Alan DeKok
Javier Ruiz Escalante wrote: > Look, I should have accounting information about the client (for example all > the attributes I need for disconnection) in the radacct table, right? So... rather than following instructions, you asked another question. > Which > ones? The one I past belowatleast,

RE: FW: Radacct table not working properly

2012-03-27 Thread Javier Ruiz Escalante
Hello, It's solved, It was from Mikrotik, the option "Accounting" has to be marked. Thanks Alan!! -Original Message- From: freeradius-users-bounces+fruiz002=hotmail@lists.freeradius.org [mailto:freeradius-users-bounces+fruiz002=hotmail@lists.freeradius.org] On Behalf Of Alan DeKo

Re: FW: Radacct table not working properly

2012-03-27 Thread Alan DeKok
Javier Ruiz Escalante wrote: > I send radius packets, (as long as I know...) I have a hotspot from Mikrotik > and I have Radius configured, my client logs on and the information sent by > MKT goes to a file but not to radacct table. First, figure out exactly what's going on. "Information" is me

RE: FW: Radacct table not working properly

2012-03-27 Thread Javier Ruiz Escalante
Hello, I send radius packets, (as long as I know...) I have a hotspot from Mikrotik and I have Radius configured, my client logs on and the information sent by MKT goes to a file but not to radacct table. Thanks Regards -Original Message- From: freeradius-users-bounces+fruiz002=hotmail..

Re: update reply problem

2012-03-27 Thread Ana Gallardo Gómez
ntering if (fail) {...} Tue Mar 27 09:36:22 2012 : Info: +++[reply] returns fail Tue Mar 27 09:36:22 2012 : Info: [reply_log] expand: /var/log/freeradius/radacct/%Y/%m/%d/%{Client-IP-Address}-reply-detail-%Y%m%d -> /var/log/freeradius/radacct/2012/03/27/10.253.40.43-reply-detail-20120327 Tu

Re: FW: Radacct table not working properly

2012-03-27 Thread Alan DeKok
Javier Ruiz Escalante wrote: > My server has installed Chillispot and Freeradius, everything is working > properly and now I want to use Freeradius without Chillispot. As soon as I > uninstall chillispot the radacct table stop working. Can anyody tell me why? If you don't send it RADIUS packets,

RE: FW: Radacct table not working properly

2012-03-27 Thread Javier Ruiz Escalante
Hello, My server has installed Chillispot and Freeradius, everything is working properly and now I want to use Freeradius without Chillispot. As soon as I uninstall chillispot the radacct table stop working. Can anyody tell me why? Thanks Regards - List info/subscribe/unsubscribe? See http://