Re: don't wait rlm_sql response

2013-04-02 Thread Fajar A. Nugraha
On Tue, Apr 2, 2013 at 9:13 AM, Mitsuhiro Nakamura nakam...@1pacific.ddo.jp wrote: Alan, Thank you. Our database has some problem and the response is slow. Since the problem itself seems to take long time to fix it, we wanted to avoid it. Are you using sql ONLY for accounting? If yes,

Re: don't wait rlm_sql response

2013-04-02 Thread Mitsuhiro Nakamura
Yes we use sql only for accounting. We will try decoupled accounting then. There are some complex problems on our DB, the team and DBA are working on it too.Thank you for the advice. Thank you all for your help :) Nakamura On Tue, Apr 2, 2013 at 9:13 AM, Mitsuhiro Nakamura [hidden email]

Re: Freeradius Expire-After How To .. ?

2013-04-02 Thread Muhammad Nuzaihan bin Kamal Luddin
Hi, Have you tried expiration module? sqlcounter expiration { count-attribute = Acct-Session-Time counter-name = Max-Allowed-Session check-name = Expiration sqlmod-inst = sql key = User-Name reset = never

Don't log user pass to database

2013-04-02 Thread Dmitry Korzhevin
Hi, Guys, please tell - how prevent freeradius to log pass to radpostauth mysql (MariaDB) table? I have modified /etc/freeradius/modules section to: Post-Auth = INSERT INTO ${postauth_table} \ (username, reply, authdate) VALUES\ ('%{User-Name}',

Re: Don't log user pass to database

2013-04-02 Thread Phil Mayers
On 04/02/2013 11:09 AM, Dmitry Korzhevin wrote: Hi, Guys, please tell - how prevent freeradius to log pass to radpostauth mysql (MariaDB) table? I have modified /etc/freeradius/modules section to: Post-Auth = INSERT INTO ${postauth_table} \ (username, reply, authdate)

Re: Freeradius Expire-After How To .. ?

2013-04-02 Thread Russell Mike
Thanks Muhammed, Expiration module (Attribute) works for me already, if i want to expie a account on the calendar date. it does the job just fine. i need to expire the account after 90 days but count must start after first login. Your help is appreciated / Thanks On Tue, Apr 2, 2013 at 9:58 AM,

Re: Don't log user pass to database

2013-04-02 Thread A . L . M . Buxey
Hi, Guys, please tell - how prevent freeradius to log pass to radpostauth mysql (MariaDB) table? I have modified /etc/freeradius/modules section to: Post-Auth = INSERT INTO ${postauth_table} \ (username, reply, authdate) VALUES\ ('%{User-Name}',

Real server certificate for PEAP

2013-04-02 Thread Rudolf Henze
Hi, Iam using freeradius 2.1.10 with a self-signed certificate with PEAP and mschapv2 and LDAP-authentification. Ive copied my CA-Certificate to all clients to be sure that Iam using really the right network and not a fake SSID. But this is a little inconvenient. Is it possible to use a real

Re: Real server certificate for PEAP

2013-04-02 Thread Alan Buxey
A self-signed is real. It's just that you are the CA...which actually gives you greater security and keeps your authentication under your own destiny control. If you believe that having a RADIUS server signed by a CA that is in the OS of your clients is the way you want to go, then simply go

Re: Real server certificate for PEAP

2013-04-02 Thread Phil Mayers
On 02/04/2013 15:22, Rudolf Henze wrote: Hi, Iam using freeradius 2.1.10 with a self-signed certificate with PEAP and mschapv2 and LDAP-authentification. Ive copied my CA-Certificate to all clients to be sure that Iam using really the right network and not a fake SSID. But this is a little

disconnect packet

2013-04-02 Thread Mehdi Ravanbakhsh
Hi All we can use Update control in unlang? so if that possible in witch file or tables parameter of coa such as port and ip address is set? i read orginate COA but it not be clear that how i can use coa for disconnect user in unlang . can explane step of work to use update coa in unlang..

Re: disconnect packet

2013-04-02 Thread Alan DeKok
Mehdi Ravanbakhsh wrote: can explane step of work to use update coa in unlang.. please. Read raddb/sites-available/originate-coa Most of your questions you ask are answered in the documentation. If you don't care enough to read the documentation, we won't care enough to answer your

originate-coa virtual server for each NAS

2013-04-02 Thread Mehdi Ravanbakhsh
Hi All do we need separated originate-coa in site enable for each NAS ? Do we need to define coa_server = coa in client.conf for each client? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: CoA proxy error

2013-04-02 Thread Alan DeKok
Mehdi Ravanbakhsh wrote: Hi All : i have get this error in log after setup COA-originate in site-enable : WARNING: No previous template for proxy socket. Source IP address may be chosen by the OS Don't edit the configuration files and break the server. If you do edit them, ensure

Re: CoA proxy error

2013-04-02 Thread Mehdi Ravanbakhsh
i fond that : in radius.conf : proxy_requests = yes it is work now for update disconnect but for update coa it is not work , i do not know if i use it correctly : *default config :* preacct { update coa { User-Name = %{User-Name} Acct-Session-Id = %{Acct-Session-Id}

Re: Real server certificate for PEAP

2013-04-02 Thread Muhammad Nuzaihan Kamal Luddin
Hi, You will need to purchase a Unified Communications certificate from a CA. To generate the CSR, here is the guide: http://langui.sh/2009/02/27/creating-a-subjectaltname-sanucc-csr/ Regards, Muhammad Nuzaihan Bin Kamal Luddin On Tue, 2013-04-02 at 16:22 +0100, Phil Mayers wrote: On