Re: DHCP relay IP and gateway IP, possible bad logic?

2013-03-04 Thread Igor Smitran
On 03/01/2013 04:12 PM, Alan DeKok wrote: Can you supply the debug output? When set that freeradius sends IP, NETMASK, DNS... *WITHOUT DEFAULT GATEWAY*: *This packet is sent to RELAY_IP* *$RAD_REPLY{'DHCP-Gateway-IP-Address'} NOT SENT*

Re: [Help] - How To configure Radius timeout / count retries

2013-03-04 Thread Danny Kurniawan
Noted, thanks in advance. -Danny On Fri, Mar 1, 2013 at 11:04 PM, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: Or are you talking about failing over between upstream proxy servers? Does this mean a setup of Radius load balancing? I mean a few Radius server that used by the same

Re: Problem Using GoDaddy Wildcard Certificate

2013-03-04 Thread Reimer Karlsen-Masur, DFN-CERT
Hi Thomas, Thomas Simmons wrote on 03.03.2013 03:28: The certification path for my cert is: My Cert GoDaddy Secure Certification Authority Go Daddy Class 2 Certification Authority I added my certificate to the beginning of the chain file provided by GoDaddy (used cat to ensure no errors)

Using return-output from external script as reply-message

2013-03-04 Thread Stefan Kuegler
Hello. I want to use an external script (multiotp) for authentication in FreeRADIUS. I created a new module called multiotp that starts the external script... exec multiotp { wait = yes input_pairs = request output_pairs = reply program =

Re: Using return-output from external script as reply-message

2013-03-04 Thread Alan DeKok
Stefan Kuegler wrote: exec multiotp { wait = yes input_pairs = request output_pairs = reply That says the script output is a series of Attribute = Value lines. ...and activated this module in the authentication-section of the default-configuration (and also in the

Re: DHCP relay IP and gateway IP, possible bad logic?

2013-03-04 Thread Alan DeKok
Igor Smitran wrote: On 03/01/2013 04:12 PM, Alan DeKok wrote: Can you supply the debug output? When set that freeradius sends IP, NETMASK, DNS... *WITHOUT DEFAULT GATEWAY*: The point of asking for debug output is to see what the server is doing. I'm not sure what the rest of your message

Re: DHCP relay IP and gateway IP, possible bad logic?

2013-03-04 Thread Igor Smitran
On 03/04/2013 04:54 PM, Alan DeKok wrote: The point of asking for debug output is to see what the server is doing. I'm not sure what the rest of your message means. The server defaults to copying the giaddr from the request to the reply. This is so that the reply can use the giaddr as

Re: DHCP relay IP and gateway IP, possible bad logic?

2013-03-04 Thread Alan DeKok
Igor Smitran wrote: As you can see CMTS will relay all requests from CM's and CPE's over primary interface address (private_ip/255.255.192.0) radius will get all requests from that IP. all offers need to go back to that same ip, no matter what giaddr is sent to client. Ah, OK. As always:

[no subject]

2013-03-04 Thread Shreya Shah
Hi, How can I replicate accounting packets to multiple servers when I have only one realm ? I have setup replicate and replicate-to realm in accounting section and also home_server and pool in proxy.conf but replication only works for the first home server. It wouldn't replicate accounting to the

Replicate accounting packets to multiple servers

2013-03-04 Thread Shreya Shah
Hi, How can I replicate accounting packets to multiple servers when I have only one realm ? I have setup replicate and replicate-to realm in accounting section and also home_server and pool in proxy.conf but replication only works for the first home server. It wouldn't replicate accounting to the

Re: Replicate accounting packets to multiple servers

2013-03-04 Thread Alan DeKok
Shreya Shah wrote: How can I replicate accounting packets to multiple servers when I have only one realm ? Read raddb/modules/replicate I have setup replicate and replicate-to realm in accounting section and also home_server and pool in proxy.conf but replication only works for the first

Re: DHCP relay IP and gateway IP, possible bad logic?

2013-03-04 Thread Phil Mayers
On 03/04/2013 07:05 PM, Igor Smitran wrote: As you can see CMTS will relay all requests from CM's and CPE's over primary interface address (private_ip/255.255.192.0) radius will get all requests from that IP. all offers need to go back to that same ip, no matter what giaddr is sent to client.

UnLang SQL query vs Perl SQL query

2013-03-04 Thread Mehdi Ravanbakhsh
Dear All I can use Unlang script and/or Perl module Script to do some select - update or insert in database BUT i need to know witch one is faster Perl module or UnLang ??? This is important because i have to many stress on database query . I use PostgreSQL by p5-DBI and p5-DBD-Pg .

design question

2013-03-04 Thread Matt Zagrabelny
Greetings, I am configuring a general purpose RADIUS server that any number of clients can connect to for authn - it uses a PostgreSQL DB as the backend datastore. I would also like to setup a secondary RADIUS server listening on a different port (ie. 1814) and use the same Pg DB as a backend,

Re: DHCP relay IP and gateway IP, possible bad logic?

2013-03-04 Thread Alan DeKok
Phil Mayers wrote: Second, reply to giaddr is mandated in the DHCP spec; are you *sure* you have other DHCP servers which reply to source ip? Which servers? The issue is that giaddr serves two purposes. In the request, it indicates that the server MUST send the reply to that IP. In the

Re: UnLang SQL query vs Perl SQL query

2013-03-04 Thread Arran Cudbard-Bell
On 4 Mar 2013, at 15:56, Mehdi Ravanbakhsh baba...@gmail.com wrote: Dear All I can use Unlang script and/or Perl module Script to do some select - update or insert in database BUT i need to know witch one is faster Perl module or UnLang ??? This is important because i have to

Re: design question

2013-03-04 Thread Olivier Beytrison
On 04.03.2013 21:56, Matt Zagrabelny wrote: Greetings, I am configuring a general purpose RADIUS server that any number of clients can connect to for authn - it uses a PostgreSQL DB as the backend datastore. I would also like to setup a secondary RADIUS server listening on a different port (ie.

Re: design question

2013-03-04 Thread Olivier Beytrison
On 04.03.2013 22:17, Olivier Beytrison wrote: On 04.03.2013 21:56, Matt Zagrabelny wrote: Greetings, I am configuring a general purpose RADIUS server that any number of clients can connect to for authn - it uses a PostgreSQL DB as the backend datastore. I would also like to setup a secondary

Re: UnLang SQL query vs Perl SQL query

2013-03-04 Thread Mehdi Ravanbakhsh
I need to transfer one radacc Table record to another table (backup radacc) , Transfer means insert in new table and Dell from first one and this is happen every time each user get [ Acct-Status-Type == 'Stop ] . i use perl script to do some calculate and return 3 replay attribute and

Re: design question

2013-03-04 Thread Matt Zagrabelny
On Mon, Mar 4, 2013 at 3:27 PM, Olivier Beytrison oliv...@heliosnet.org wrote: On 04.03.2013 22:17, Olivier Beytrison wrote: On 04.03.2013 21:56, Matt Zagrabelny wrote: Greetings, I am configuring a general purpose RADIUS server that any number of clients can connect to for authn - it uses

Re: DHCP relay IP and gateway IP, possible bad logic?

2013-03-04 Thread Phil Mayers
On 03/04/2013 08:59 PM, Alan DeKok wrote: Phil Mayers wrote: Second, reply to giaddr is mandated in the DHCP spec; are you *sure* you have other DHCP servers which reply to source ip? Which servers? The issue is that giaddr serves two purposes. In the request, it indicates that the server

Re: UnLang SQL query vs Perl SQL query

2013-03-04 Thread Arran Cudbard-Bell
On 4 Mar 2013, at 16:36, Mehdi Ravanbakhsh baba...@gmail.com wrote: I need to transfer one radacc Table record to another table (backup radacc) , Transfer means insert in new table and Dell from first one and this is happen every time each user get [ Acct-Status-Type == 'Stop ] .

Re: design question

2013-03-04 Thread Arran Cudbard-Bell
On 4 Mar 2013, at 15:56, Matt Zagrabelny mzagr...@d.umn.edu wrote: Greetings, I am configuring a general purpose RADIUS server that any number of clients can connect to for authn - it uses a PostgreSQL DB as the backend datastore. I would also like to setup a secondary RADIUS server

Re: UnLang SQL query vs Perl SQL query

2013-03-04 Thread Mehdi Ravanbakhsh
Many thanks for your replay. How i can call stored procedure in unlang ? On Tue, Mar 5, 2013 at 1:50 AM, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: On 4 Mar 2013, at 16:36, Mehdi Ravanbakhsh baba...@gmail.com wrote: I need to transfer one radacc Table record to another

Re: DHCP relay IP and gateway IP, possible bad logic?

2013-03-04 Thread Alan DeKok
Phil Mayers wrote: Perhaps I've misunderstood, but this doesn't reflect the DHCP behaviour I've seen on normal clients. It's possible. As far as I know, it goes (starting from INIT, as opposed to INIT-REBOOT which effectively starts from step 4): 1. Client sends DISCOVER to broadcast

Re: Simultaneous Use strategy

2013-03-04 Thread Alan DeKok
Mehdi Ravanbakhsh wrote: /So i need to change /*Simultaneous Use check strategy and if user with same Calling Station ID - NAS ip address - NAS port - Called station ID try to connect i need to accept it .* Then write that policy in unlang. It's not hard. *Is there any way to change

redundancy questionj

2013-03-04 Thread Jeremy Schubert
Hello all, I'm new to FreeRADIUS and I'm planning to use Ver 2.2.0 on Ubuntu 12.04 server. Have 1 central office and 6 remote locations. 1. Is it standard to put one server in each of the remote locations which each remote back to the central office server? Fail-over is a term used in the

[Help] How to eliminate client certificate popup

2013-03-04 Thread Danny Kurniawan
Hello, We are using 802.1x wireless connection from Meraki and using PEAP-MSCHAPv2 for authentication with our LDAP. Everything works fine, it just we want to eliminate this pop-up at the 1st time people connect to it : The credentials provided by the server could not be validated. We recommend

Re: [Help] How to eliminate client certificate popup

2013-03-04 Thread Danny Kurniawan
Hi, I mean eliminate it without a need to configure WLAN profile on each Windows 7 we have or using Intel Pro software etc.. I would like to know if anyone ever know how we can eliminate this from let say tweak the cert or some radius config. Thanks Danny On Tue, Mar 5, 2013 at 9:58 AM, Danny

Re: [Help] How to eliminate client certificate popup

2013-03-04 Thread bino
Hi, I mean eliminate it without a need to configure WLAN profile on each Windows 7 we have or using Intel Pro software etc.. I would like to know if anyone ever know how we can eliminate this from let say tweak the cert or some radius config. I don\'t think it\'s about radius