Re: Dynamic-Clients

2012-03-28 Thread Fajar A. Nugraha
On Wed, Mar 28, 2012 at 12:06 PM, dulan achint...@gmail.com wrote: first i would like to thanks both of you to reply for this issue. now i changed Dynamic-Clients file as follows # if ( %{sql: SELECT nasname FROM nas WHERE nasname = '10.10.10.161'}) { update control {                

Re: Dynamic-Clients

2012-03-28 Thread dulan
these are the testing scenarios which i used to check that issue. :) -- View this message in context: http://freeradius.1045715.n5.nabble.com/Dynamic-Clients-tp5597709p5599713.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See

Re: Dynamic-Clients

2012-03-28 Thread Alan DeKok
dulan wrote: these are the testing scenarios which i used to check that issue. :) So you're not reading the debug output, and you're not reading the replies on this list. Why, exactly are you asking questions? Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Proxy + copy accounting to passive home server

2012-03-28 Thread Alan DeKok
mimir wrote: But, I want to send same packet to both servers when proxying. See the replicate module in 2.1.12. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Proxy + copy accounting to passive home server

2012-03-28 Thread mimir
Hi Alan, Thanks for reply. How can I find a sample configuration for this? I see that this is new module and it is discussed in internet not much. Besides this, I can only add configuration to proxy server. I can not manage home_servers. Is it possible to apply my scenario via replicate module

Re: Dynamic-Clients

2012-03-28 Thread Alan Buxey
Hi, now i changed Dynamic-Clients file as follows if ( %{sql: SELECT nasname FROM nas WHERE nasname = '10.10.10.161'}) { update control { freeradius-Client-IP-Address = 10.10.10.161 freeradius-Client-Secret = testing123

Re: Proxy + copy accounting to passive home server

2012-03-28 Thread Alan DeKok
mimir wrote: Thanks for reply. How can I find a sample configuration for this? Look in the raddb/modules directory? Where else are configurations stored? I see that this is new module and it is discussed in internet not much. Besides this, I can only add configuration to proxy server.

Re: Proxy + copy accounting to passive home server

2012-03-28 Thread Fajar A. Nugraha
On Wed, Mar 28, 2012 at 3:13 PM, Alan DeKok al...@deployingradius.com wrote: mimir wrote: Thanks for reply. How can I find a sample configuration for this?  Look in the raddb/modules directory? ... and in case you don't find it there, changes are you're running a fairly old version of FR.

Re: Dynamic-Clients

2012-03-28 Thread dulan
mr. Fajar i checked this issue using different scenarios. when i hard-coded freeradius-Client-IP-Address, freeradius-Client-Shortname, freeradius-Client-Secret, freeradius-Client-NAS-Type values it is working. in my experience i think the problem is sql queries are not work in dynamic-clients

external program in freeradius

2012-03-28 Thread Dagia Dorjsuren
Hello,     How to run Perl external program in freeradius? especially, first.pl program must be run when client login, second.pl program must be run after client disconnected.   so, how to do it? anyone any idea please? Thanks - List info/subscribe/unsubscribe? See

Re: Dynamic-Clients

2012-03-28 Thread Alan Buxey
Hi, i checked this issue using different scenarios. when i hard-coded freeradius-Client-IP-Address, freeradius-Client-Shortname, freeradius-Client-Secret, freeradius-Client-NAS-Type values it is working. in my experience i think the problem is sql queries are not work in

Re: external program in freeradius

2012-03-28 Thread Alan Buxey
Hi,     How to run Perl external program in freeradius? especially, first.pl program must be run when client login, second.pl program must be run after client disconnected.   so, how to do it? anyone any idea please? read the perl module docs and then do the following create 2

Re: load balancing and if statements

2012-03-28 Thread Phil Mayers
On 27/03/12 23:38, Brian De Wolf wrote: On Mon, 26 Mar 2012 11:46:22 -0700 Scott McLane Gardnersgar...@uark.edu wrote: If I can't use if statements in a load balance block, can anyone suggest another way to go about accomplishing what I want to do here? After reading this thread and

FreeRarius with multiple LDAP

2012-03-28 Thread Sebastijan Šilec
I'm upgrading FreeRadius form version 1.x to 2.x and transfered the configs. I have a problem with definig authrize and authenticate sections. I've defined 2 ldap modules (ldap and ldap1) connecting to same LDAP servers but to different OU's The old configs have this in users setup:

RE: FreeRarius with multiple LDAP

2012-03-28 Thread Brian Julin
Sebastijan Šilec wrote Sent: Wednesday, March 28, 2012 10:06 AM DEFAULT Realm == mydomain.com, Freeradius-Proxied-To == 127.0.0.1, Auth-Type := PAP User-Name = `%{User-Name}`, Fall-Through = yes DEFAULT Realm == mydomain.com, Freeradius-Proxied-To == 127.0.0.1, Autz-Type :=

Re: FreeRarius with multiple LDAP

2012-03-28 Thread Phil Mayers
On 28/03/12 15:05, Sebastijan Šilec wrote: I'm upgrading FreeRadius form version 1.x to 2.x and transfered the configs. I have a problem with definig authrize and authenticate sections. I've defined 2 ldap modules (ldap and ldap1) connecting to same LDAP servers but to different OU's The old

Re: Freeradius crash during EAP-TTLS authentication

2012-03-28 Thread Alan DeKok
Thomas Fagart wrote: Here's the debug output this happens specialy when we add a virtual server as a fallback server. OK... it looks like the proxy_reply doesn't exist. I'll push a patch. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: User Authenticated even when username not given in USERS file (EAP-TLS)

2012-03-28 Thread Alan DeKok
Prateek Kumar wrote: I am using EAP-TLS for authentication, USERs are getting authenticated even when I have not defined the user in USERS file. That's how EAP-TLS works. You issued a client certificate. Possession of the client certificate means that the user is authenticated. 1. Is this

Re: User Authenticated even when username not given in USERS file (EAP-TLS)

2012-03-28 Thread Prateek Kumar
Thanks Alan On Wed, Mar 28, 2012 at 9:25 PM, Alan DeKok al...@deployingradius.comwrote: Prateek Kumar wrote: I am using EAP-TLS for authentication, USERs are getting authenticated even when I have not defined the user in USERS file. That's how EAP-TLS works. You issued a client

User Authenticated even when username not given in USERS file (EAP-TLS)

2012-03-28 Thread Prateek Kumar
Hi , I am using EAP-TLS for authentication, USERs are getting authenticated even when I have not defined the user in USERS file. I have not changed any default configuration. Certificates are made by the makefile provided. Windows client is having both root client certificates installed.

Re: FreeRarius with multiple LDAP

2012-03-28 Thread Sebastijan Šilec
On 28.3.2012 16:15, Brian Julin wrote: Sebastijan Šilec wrote Sent: Wednesday, March 28, 2012 10:06 AM DEFAULT Realm == mydomain.com, Freeradius-Proxied-To == 127.0.0.1, Auth-Type := PAP User-Name = `%{User-Name}`, Fall-Through = yes DEFAULT Realm == mydomain.com,