Re: sqlcounter instance not found in modules section

2012-10-02 Thread Fajar A. Nugraha
On Wed, Oct 3, 2012 at 12:04 PM, Russell Stockhammer wrote: > Ok, but there is also a; > > - > > $INCLUDE sql/mysql/counter.conf > > Good catch :) FR is pretty flexible in its configuration. Suffice to say that most (all?) module configuration (including sql and eap) in 3.x is m

Re: sqlcounter instance not found in modules section

2012-10-02 Thread Russell Stockhammer
On Tue, 2 Oct 2012, Fajar A. Nugraha wrote: On Tue, Oct 2, 2012 at 6:47 PM, Alan DeKok wrote: Russell Stockhammer wrote: I'm trying to create a new sqlcounter instance that counts octets. I think what I've done is correct but I get the following error when I start FreeRadius... ...

Re: sqlcounter instance not found in modules section

2012-10-02 Thread Russell Stockhammer
On Tue, 2 Oct 2012, Alan DeKok wrote: Russell Stockhammer wrote: I'm trying to create a new sqlcounter instance that counts octets. I think what I've done is correct but I get the following error when I start FreeRadius... ... sql/mysql/counter.conf Why? The default sqlcount

Re: simple accounting proxy setup.

2012-10-02 Thread Matthew Newton
On Tue, Oct 02, 2012 at 12:27:48PM -0500, Bill Schoolfield wrote: > To be clear, remove the line below??? > > virtual_server = copy-acct-to-home-server Yes - read the documentation in proxy.conf that explains what this line does. You don't want to relay the packet back to yourself. > Does the "

Re: simple accounting proxy setup.

2012-10-02 Thread Bill Schoolfield
I removed this line. Started up the server and I can see that the packets are being sent to the other server. However. I get... > Detail listener /var/log/radius/radacct/relay-detail state running signalled > 0 waiting 1.094676 sec > Waking up in 0.9 seconds. > rad_recv: Accounting-Request packet

Re: simple accounting proxy setup.

2012-10-02 Thread Bill Schoolfield
To be clear, remove the line below??? virtual_server = copy-acct-to-home-server Does the "update control { Proxy-To-Realm := 'home_realm' } section handle this association for us? Bill On 10/2/2012 12:19 PM, Matthew Newton wrote: > On Tue, Oct 02, 2012 at 11:37:31AM -0500, Bill Schoolfield wro

Re: simple accounting proxy setup.

2012-10-02 Thread Matthew Newton
On Tue, Oct 02, 2012 at 11:37:31AM -0500, Bill Schoolfield wrote: > Here is what I added in proxy.conf: ... > home_server_pool poolit { > home_server = myhomeserver > virtual_server = copy-acct-to-home-server Remove the above line. Apart from that, looks OK to me. Matthew -- M

Re: simple accounting proxy setup.

2012-10-02 Thread Bill Schoolfield
Matthew, Thanks for the detailed followup. I made all your suggested changes, but I'm a little uncertain about the changes to the proxy.conf file. Here is what I added in proxy.conf: home_server myhomeserver { type = acct ipaddr = xxx.xxx.xxx.xxx port = 1813 secre

Re: Customization of authorize_reply_query

2012-10-02 Thread Arran Cudbard-Bell
On 2 Oct 2012, at 09:31, Alan DeKok wrote: > Václav Pernica wrote: >> One more question. I set the number of sql connections to make to server to >> 5 (default value). I noticed that if all connections are currently in use, >> the authentication fails: >> >> Tue Oct 2 16:07:10 2012 : Error:

Re: Customization of authorize_reply_query

2012-10-02 Thread Alan DeKok
Václav Pernica wrote: > One more question. I set the number of sql connections to make to server to 5 > (default value). I noticed that if all connections are currently in use, the > authentication fails: > > Tue Oct 2 16:07:10 2012 : Error: rlm_sql (sql): There are no DB handles to > use! ski

Re: Re: Customization of authorize_reply_query

2012-10-02 Thread Václav Pernica
Phil Mayers: > > Just set a null query e.g. > > select null where 1=0 > Thanks a lot! This was the hint I need.. I used: select null from table where 1=0 because it required FROM. One more question. I set the number of sql connections to make to server to 5 (default value). I noticed that i

RE: exec module not seeming to run something

2012-10-02 Thread Franks Andy (RLZ) IT Systems Engineer
Thanks Alan, Good call about the path thing. I also forgot about the ssh prompt to accept a new ssh key, which obviously can't be seen, so copied the known_hosts file from another user to the freerad/.ssh folder and altered the permissions. Works fine now Thanks very much Andy -Original Me

Re: bugs.freeradius.org unavailable?

2012-10-02 Thread Arran Cudbard-Bell
On 2 Oct 2012, at 02:02, endo mitsuharu wrote: > Hello, > Sorry for the delay in reply. > > >> In this regurd, I would like to also refer to the existing bug report of > >> pam_radius_auth > >> related to FreeRADIUS(server) projects. > > > >Why? Is there a bug you want to add, or a bug you

Re: Customization of authorize_reply_query

2012-10-02 Thread Fajar A. Nugraha
On Tue, Oct 2, 2012 at 7:35 PM, Václav Pernica wrote: > Hello > > I use the FR just to only authenticate the user. The data are stored in > Oracle DD. Is there any option how to disable authorize_reply_query?> The > reason is that that DB contains millions of records and each query take some >

Re: Customization of authorize_reply_query

2012-10-02 Thread Alan DeKok
Václav Pernica wrote: > I use the FR just to only authenticate the user. The data are stored in > Oracle DD. Is there any option how to disable authorize_reply_query? The > reason is that that DB contains millions of records and each query take some > some time. Depending on DB load is 0.5 secon

Re: Customization of authorize_reply_query

2012-10-02 Thread Phil Mayers
On 02/10/12 13:35, Václav Pernica wrote: Hello I use the FR just to only authenticate the user. The data are stored in Oracle DD. Is there any option how to disable authorize_reply_query? The reason is that that DB contains millions of records and each query take some some time. Depending on DB

Customization of authorize_reply_query

2012-10-02 Thread Václav Pernica
Hello I use the FR just to only authenticate the user. The data are stored in Oracle DD. Is there any option how to disable authorize_reply_query? The reason is that that DB contains millions of records and each query take some some time. Depending on DB load is 0.5 seconds but during the peak

Re: sqlcounter instance not found in modules section

2012-10-02 Thread Alan DeKok
Fajar A. Nugraha wrote: > I think he might got confused because there are > raddb/sql/mysql/counter.conf and raddb/sql/postgresql/counter.conf, as > well as raddb/modules/sqlcounter_expire_on_login. OK... and the modules are in the raddb/modules directory. > Perhaps we should add a small instru

Re: sqlcounter instance not found in modules section

2012-10-02 Thread Fajar A. Nugraha
On Tue, Oct 2, 2012 at 6:47 PM, Alan DeKok wrote: > Russell Stockhammer wrote: >> I'm trying to create a new sqlcounter instance that counts octets. I think >> what I've done is correct but I get the following error when I start >> FreeRadius... >> > ... >> sql/mysql/counter.conf > >

Re: sqlcounter instance not found in modules section

2012-10-02 Thread Alan DeKok
Russell Stockhammer wrote: > I'm trying to create a new sqlcounter instance that counts octets. I think > what I've done is correct but I get the following error when I start > FreeRadius... > ... > sql/mysql/counter.conf Why? The default sqlcounter file is in raddb/modules. Put th

sqlcounter instance not found in modules section

2012-10-02 Thread Russell Stockhammer
Hey Everyone, I'm trying to create a new sqlcounter instance that counts octets. I think what I've done is correct but I get the following error when I start FreeRadius... Mon Oct 1 21:09:41 2012 : Error: /usr/local/etc/raddb/sites-enabled/default[203]: Failed to find "dailyoctetc

Re: exec module not seeming to run something

2012-10-02 Thread Alan DeKok
Franks Andy (RLZ) IT Systems Engineer wrote: > The problem is it doesn’t work. I can run the script from a shell prompt > and the backup functions fine, the variables outputting to the > testssh.out file and the ssh command running ok. Freeradius fires the > script off ok after an accounting sessio

exec module not seeming to run something

2012-10-02 Thread Franks Andy (RLZ) IT Systems Engineer
Hi all, I keep coming back with questions - hopefully I'll be able to answer someone else's soon! I am trying to run a simple command to fire off a network backup each time an admin logs off a switch via accounting. I'm only testing this as a concept for now. I have rancid installed on another s

Re: simple accounting proxy setup.

2012-10-02 Thread Matthew Newton
Hi, On Mon, Oct 01, 2012 at 07:14:05PM -0500, Bill Schoolfield wrote: > In keeping with recommended practice, I have modified very little. That's good. For this purpose, you can actually cut out quite a lot - but make sure you've got your config in version control (e.g. git) before you start so t

Re: bugs.freeradius.org unavailable?

2012-10-02 Thread Alan DeKok
endo mitsuharu wrote: > Each month, I'm responsible for informing to our organizational > user(=local user) about latest bug information and latest patches > related to freeradius-client and pam_radius_auth. That's nice, but it's also an issue only for your organization. > Last month, I was abl

Re: bugs.freeradius.org unavailable?

2012-10-02 Thread endo mitsuharu
Hello, Sorry for the delay in reply. >> In this regurd, I would like to also refer to the existing bug report of >> pam_radius_auth >> related to FreeRADIUS(server) projects. > >Why? Is there a bug you want to add, or a bug you want to update? > Each month, I'm responsible for informing to