Re: Multiple incoming requests from unknown clients

2012-08-13 Thread Alan DeKok
Diego Matute wrote: > What is the best practice for handling incoming requests which require > different policies (i.e. secret keys) whereby the client IP is unknown? If the client IP is unknown, then the client is unknown, and you don't have a secret key. And keys aren't policies. Please be

Multiple incoming requests from unknown clients

2012-08-13 Thread Diego Matute
Looked at the docs and am still unclear here. What is the best practice for handling incoming requests which require different policies (i.e. secret keys) whereby the client IP is unknown? Was thinking there may be a to setup virtual servers which listen on different server IPs somehow? Few thou

Re: Per-realm post-proxy

2012-08-13 Thread alan buxey
Hi, > Is it possible to have a per-realm post-proxy section? We need to > add a couple of attributes to our Access-Accepts which vary in > content depending on which realm we've proxied. Otherwise, is there > an easy way to distinguish realm in the global post-proxy section? well, there are a co

Re: Per-realm post-proxy

2012-08-13 Thread Phil Mayers
On 13/08/12 17:16, Shaun Lowry wrote: Is it possible to have a per-realm post-proxy section? We need to add a couple of attributes to our Access-Accepts which vary in content depending on which realm we've proxied. Otherwise, is there an easy way to distinguish realm in the global post-proxy se

Re: Problem with accounting insert into Oracle

2012-08-13 Thread John Dennis
On 08/13/2012 11:41 AM, Aurélien Lafranchise wrote: I have installed a new linux and it is a fresh install. I copied /etc/raddb from one box to another that's all ! What about your /etc/raddb/certs? Did you copy that too? If so you may have problems if the server cert does not match the new ma

Per-realm post-proxy

2012-08-13 Thread Shaun Lowry
Is it possible to have a per-realm post-proxy section? We need to add a couple of attributes to our Access-Accepts which vary in content depending on which realm we've proxied. Otherwise, is there an easy way to distinguish realm in the global post-proxy section? Shaun. - List info/subs

Re: Problem with accounting insert into Oracle

2012-08-13 Thread Aurélien Lafranchise
I have installed a new linux and it is a fresh install. I copied /etc/raddb from one box to another that's all ! The other difference is that I switch from Fedora 14 to CentOS 6.3. AL Le 13 août 2012 à 17:28, John Dennis a écrit : > On 08/13/2012 11:10 AM, Aurélien Lafranchise wrote: >> It is

Re: Problem with accounting insert into Oracle

2012-08-13 Thread John Dennis
On 08/13/2012 11:10 AM, Aurélien Lafranchise wrote: It is strange: it was working well on Freeradius 2.1.10-1 and not on my fresh install 2.1.12-3. Any idea ? Do you have any .rpmnew or .rpmsave files under /etc/raddb? If so the server will try to load them. -- John Dennis Looking to carve

Re: Problem with accounting insert into Oracle

2012-08-13 Thread Aurélien Lafranchise
Ok, it is what I thought. It is strange: it was working well on Freeradius 2.1.10-1 and not on my fresh install 2.1.12-3. Any idea ? AL Aurélien Lafranchise wrote: > Could you be more precise on where to increase the 2K limit ? All over the place in rlm_sql.c and sql.c. Alan DeKok. Le 13

Re: rlm_sql Error

2012-08-13 Thread Antonio Modesto
2012/8/13 Alan DeKok > Antonio Modesto wrote: > > My tables is using MyISAM engine, as this server is running freeradius > > 1.X, it's quite old. The problem is that I've dumped my database to > > another server to do some tests, and tried to alter the engine to see > > how long it would take, af

Re: rlm_sql Error

2012-08-13 Thread Alan DeKok
Antonio Modesto wrote: > My tables is using MyISAM engine, as this server is running freeradius > 1.X, it's quite old. The problem is that I've dumped my database to > another server to do some tests, and tried to alter the engine to see > how long it would take, after some hours running I've simpl

Re: rlm_sql Error

2012-08-13 Thread Antonio Modesto
2012/8/13 alan buxey > Hi, > > > Here in the ISP which I work we have a Freeradius 1.X in > production, and > > a 2.X that we're testing to replace the old one. On both Radius we > get > > the following error sometimes, What can be causing this? The SQL > > Database is in the

Re: rlm_sql Error

2012-08-13 Thread alan buxey
Hi, > Here in the ISP which I work we have a Freeradius 1.X in production, and > a 2.X that we're testing to replace the old one. On both Radius we get > the following error sometimes, What can be causing this? The SQL > Database is in the same server of freeradius 1.X, but the

Re: rlm_sql Error

2012-08-13 Thread Chris Knipe
sql.conf: # number of sql connections to make to server num_sql_socks = 5 You prob need to up this. On Mon, Aug 13, 2012 at 3:00 PM, Antonio Modesto wrote: > > Hi, > > > Here in the ISP which I work we have a Freeradius 1.X in production, and a > 2.X that we're testing to replac

Re: rlm_sql Error

2012-08-13 Thread Marinko Tarlać
> would it make any difference? It won't help in case you have x trillion records in radacct table and this table is MyISAM, used for simult. login detection, etc... On 13.8.2012 15:00, Antonio Modesto wrote: Hi, Here in the ISP which I work we have a Freeradius 1.X in production, and a 2

rlm_sql Error

2012-08-13 Thread Antonio Modesto
Hi, Here in the ISP which I work we have a Freeradius 1.X in production, and a 2.X that we're testing to replace the old one. On both Radius we get the following error sometimes, What can be causing this? The SQL Database is in the same server of freeradius 1.X, but the load is low, we have about

Re: Problem with accounting insert into Oracle

2012-08-13 Thread Alan DeKok
Aurélien Lafranchise wrote: > Could you be more precise on where to increase the 2K limit ? All over the place in rlm_sql.c and sql.c. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Problem with accounting insert into Oracle

2012-08-13 Thread Aurélien Lafranchise
Hi Alan, Thanks for the answer. I need all these data so it is not a clean problem. But I will disable sqltrace when everything will be ok. Could you be more precise on where to increase the 2K limit ? Cheers, AL Aurélien Lafranchise wrote: > I have the same error for every request in dialup.

Re: Problem with accounting insert into Oracle

2012-08-13 Thread Aurélien Lafranchise
It seems that Freeradius is getting stuck when inserting hex chain. Does that remind something to someone ? AL Le 13 août 2012 à 13:42, Aurélien Lafranchise a écrit : > Hi, > > I have the same error for every request in dialup.conf (STOP, START, UPDATE). > > The database connection is working

Re: Problem with accounting insert into Oracle

2012-08-13 Thread Alan DeKok
Aurélien Lafranchise wrote: > I have the same error for every request in dialup.conf (STOP, START, UPDATE). > > The database connection is working well but I have: > [sql] Couldn't insert SQL accounting STOP record - ORA-01756: quoted string > not properly terminated > > with sqltrace on you ca

Problem with accounting insert into Oracle

2012-08-13 Thread Aurélien Lafranchise
Hi, I have the same error for every request in dialup.conf (STOP, START, UPDATE). The database connection is working well but I have: [sql] Couldn't insert SQL accounting STOP record - ORA-01756: quoted string not properly terminated with sqltrace on you can see the mistake at the end. The req

FTP site is now on a new machine

2012-08-13 Thread Alan DeKok
It's a quad core system with a bit better connectivity. Let me know if there are any issues. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html