Re: Access requests logging to SQL: How to save comments for rejected requests?

2012-04-28 Thread George Koulyabin
No, I used reference to %{Module-Failure-Message}. I changed reference from %{Module-Failure-Message} to %{control:Module-Failure-Message} and message 'User not found' droped to database. It works. But when I sent request with wrong password, message 'Bad password' did not drop to database

Access requests logging to SQL: How to save comments for rejected requests?

2012-04-27 Thread George Koulyabin
Hi. I am using FreeRADIUS 2.1.12. I tried to save results of process access requests to SQL database using postauth_query. I used 'Module-Failure-Message' attribute as a comment for rejected requests. The message 'rlm_pap: CLEAR TEXT password check failed' drops to database when password is

Re: Access requests logging to SQL: How to save comments for rejected requests?

2012-04-27 Thread George Koulyabin
: George Koulyabin wrote: I tried to save results of process access requests to SQL database using postauth_query. I used 'Module-Failure-Message' attribute as a comment for rejected requests. The message 'rlm_pap: CLEAR TEXT password check failed' drops to database when password is wrong

Re: Access requests logging to SQL: How to save comments for rejected requests?

2012-04-27 Thread George Koulyabin
at 02:00:42PM +0200, Alan DeKok wrote: George Koulyabin wrote: Records drop to database when access is rejected. But I want to see reason of rejection. As in radius.log. Edit the SQL queries to include Module-Failure-Message. Alan DeKok. - List info/subscribe/unsubscribe? See http

Re: Access requests logging to SQL: How to save comments for rejected requests?

2012-04-27 Thread George Koulyabin
I tried to implement Your advice. 1) Changes in configuration: authorize { ... sql_auth if ( notfound ) { update control { Module-Failure-Message := 'User not found'

Re: SQL Huntgroup only work with user check, not group check

2009-09-04 Thread George Koulyabin
On Thu, Sep 03, 2009 at 07:36:31AM -0300, Carlos Eduardo Tavares Terra wrote: On Thu, Sep 3, 2009 at 6:30 AM, George Koulyabinju...@vinf.ru wrote: I wrote the rules for huntgroup here because the rules in groupcheck didn't work. If I take this out, just keeping the groupcheck, 'jack' will

Re: SQL Huntgroup only work with user check, not group check

2009-09-03 Thread George Koulyabin
On Tue, Sep 01, 2009 at 09:49:20PM -0300, Carlos Eduardo Tavares Terra wrote: ++---+--+---+ | id | groupname | nasipaddress | nasportid | ++---+--+---+ | 5 | wireless | 192.168.2.5 | NULL | | 4 | adsl | 192.168.2.6

Re: rlm_sqlcounter: Some strangenesses.

2009-08-27 Thread George Koulyabin
} Cisco-Pre-Output-Octets := 0 Cisco-Pre-Output-Octets -= 0 # unusable attribute is removed from reply-list } } ... } I need your opinions. On Wed, Aug 26, 2009 at 11:08:44AM +0400, George Koulyabin wrote: Hi. I am

rlm_sqlcounter: Some strangenesses.

2009-08-26 Thread George Koulyabin
Hi. I am running FR v2.1.6. I am needing to generate some quota for users. This quota must be replied via attribute Cisco-Control-Info. I tryed to do this by different ways. I was interested by rlm_sqlcounter, as simple and powerful method of calculating of counters. I built test counter:

Re: virtual servers = 2 different user files

2009-08-25 Thread George Koulyabin
Hello On Tue, Aug 25, 2009 at 08:29:49AM +0200, kisteorg google wrote: Hello list, I would like to use one freeradius for 2 different NAS-groups. Therefore I need two different users files, one for each instance. I tried to make the module configuration per virtual server, which seems not

How to use large SQL-query for %{sql:} clause?

2009-08-25 Thread George Koulyabin
Hello. I am using FR v2.1.6. I am needing to generate values of reply attributes via SQL. I am using `%{sql:SQL-query}` clause. I am inserting attribute/value pairs into radreply table, where value - `%{sql:}`-clause. But I had got complex and large queries. I don't want to increase size of

Re: How to use large SQL-query for %{sql:} clause?

2009-08-25 Thread George Koulyabin
On Tue, Aug 25, 2009 at 09:42:24AM +0100, Ivan Kalik wrote: I am needing to generate values of reply attributes via SQL. I am using `%{sql:SQL-query}` clause. I am inserting attribute/value pairs into radreply table, where value - `%{sql:}`-clause. But I had got complex and large

Re: files: How to choose SQL entry for users?

2009-08-24 Thread George Koulyabin
Hi. I tried to use sql_auth-SQL-Group like ldap example (DEFAULT sql_auth-SQL-Group == Group1), but FR-server failed with error 'users[1]: Parse error (check) for entry DEFAULT: Invalid octet string Group1 for attribute name sql_auth-SQL-Group'. This error says that attribute is not defined

Re: files: How to choose SQL entry for users?

2009-08-24 Thread George Koulyabin
On Mon, Aug 24, 2009 at 01:45:11PM +0200, Alan DeKok wrote: George Koulyabin wrote: I had got success when 'sql_auth' was defined as last entry into instantiate { }. But I think that this solution is unsecure and wrong. Why is that? For example, I added new sql-module

Re: files: How to choose SQL entry for users?

2009-08-24 Thread George Koulyabin
Hi. On Mon, Aug 24, 2009 at 02:59:27PM +0200, Alan DeKok wrote: George Koulyabin wrote: On Mon, Aug 24, 2009 at 01:45:11PM +0200, Alan DeKok wrote: George Koulyabin wrote: I had got success when 'sql_auth' was defined as last entry into instantiate { }. But I think that this solution