Re: radius accounting

2004-09-04 Thread Simon Bryden
Maybe the RFCs would be a good place to start? Start with 2865 and 2866 --- On Saturday 04 September 2004 04:13, jassim El-mansori wrote: > hello > > I'm using NTRadping as test utility and it works like > a charm > I'm wondering guys about why radius sends the > accounting > * Accounting-respons

Re: exec module

2004-09-03 Thread Simon Bryden
Ok, this is not tested but hopefully should help you get started: In your radiusd.conf you need to define an exec module: modules { ... exec allow9to5 { wait = yes program = "/usr/bin/php -f /somedir/allow9-5.php" input_pairs = request

Re: kill user connection

2004-09-02 Thread Simon Bryden
27;t it > so? Maybe someone know how to send, for example, session-timeout=1s to user > during his login? it will be fanastic good, you know:) > > Edgars > > Simon Bryden wrote: > >There is a "RADIUS" disconnect mechanism which is not standardised as far > > as

Re: please assist in time limit

2004-09-02 Thread Simon Bryden
You could use rlm_exec to call a script which would check the time and return appropriately. If outside the window it can return 1 which will cause the user to be rejected. If within the window you can return zero, and also set an appropriate session limit to disconnect the user at the end of th

Re: kill user connection

2004-09-02 Thread Simon Bryden
There is a "RADIUS" disconnect mechanism which is not standardised as far as I know and not too widely supported. In most cases you need to use SNMP or other techniques to disconnect sessions. The most standardised way of disconnecting sessions is to use Session-Timeout attribute to tell the NAS

Re: CHAP password in Exec-Program

2004-08-21 Thread Simon Bryden
> ++--+---+ > > | 1 | jlb | dial | > | 2 | jlb | adsl | > > ++--+---+ The sql code only supports one group per user. You can't be in two groups. In your case the group lookup will return the first entry returned by the sql query and y

Re: SQL STOP with no START

2004-08-18 Thread Simon Bryden
s, Simon. --- > On Wed, 2004-08-18 at 21:46, Simon Bryden wrote: > > Does anyone know why the default sql.conf file with freeradius 1.0 > > doesn't write the value of Client-IP-Address to the database in the case > > whwere a STOP is received with no START (i.e. usin

Re: Freeradius v1.0 under Fedore Core2

2004-08-18 Thread Simon Bryden
> Last time i installed was on a RedHat v7.2 installaton, and the file > installed them selves nicely in /usr/local/etc/raddb, but when I try the > same thing on Fedore Core2, that dir is empty. > Most dists put the config files in /usr/etc The easiest way to find them is to look for the executabl

SQL STOP with no START

2004-08-18 Thread Simon Bryden
Does anyone know why the default sql.conf file with freeradius 1.0 doesn't write the value of Client-IP-Address to the database in the case whwere a STOP is received with no START (i.e. using accounting_stop_query_alt)? I am about to change this behaviour, since I need the to know the Client-IP

Re: "how to authenticate IE from freeradius"

2004-08-18 Thread Simon Bryden
The problem is not pointing IE to freeradius, the problem is controlling the access. You need to find a solution to this first, then point *that* to freeradius. Simon. --- On Wednesday 18 August 2004 14:36, jassim El-mansori wrote: > hello > i'm looking for a way to point the IE on WIN2000 to >

Re: freeradius and counters.

2004-08-16 Thread Simon Bryden
The normal way to do this is to return an Acct-Session-Time to the NAS. Check the IOS documentation to see if this is supported and how to configure it. Otherwise you can't use freeradius to tell the NAS to send it a stop packet. Regards, Simon. --- On Monday 16 August 2004 08:13, Shannon Sarim

Re: realm module not searching second order

2004-08-11 Thread Simon Bryden
In release 1.0 you have an extra option "ignore_null" which will tell freeradius not to match against the NULL domain if a realm match fails. Otherwise if you don't need the NULL domain you can remove it. Regards, Simon. --- On Thursday 12 August 2004 06:32, Rohaizam Abu Bakar wrote: > Hi , > >

Re: Mystery of mysql.sock location in FreeRADIUS

2004-07-26 Thread Simon Bryden
You can set the environment variable MYSQL_UNIX_PORT as follows: export MYSQL_UNIX_PORT=/usr/mysql/mysql.sock I'm not sure why the freeradius mysql client doesn't check my.cnf, but I had the same issue and solved as above. Regards, Simon. --- On Monday 26 July 2004 19:54, Masoud Safi wrote: >

Re: radrelay question

2004-07-22 Thread Simon Bryden
it back in the target server using attr_rewrite. However my source server is running an old freeradius (0.8.x) which doesn't seem to support %{Client-IP-Address} type substitutions in the hints file. Thanks anyway for the info, Simon. --- On Thursday 22 July 2004 17:49, Alan DeKok wrote: &g

radrelay question

2004-07-21 Thread Simon Bryden
Hi, I have a live freeradius server and I'm trialing a new system which is running a second instance of freeradius on the same host. I am using radrelay to send a copy of all accounting messages to the new server for testing. The problem is that I need the resulting Client-IP-Address attribute

Authentication detail logging

2004-07-21 Thread Simon Bryden
Is there any easy way to log a detail log of attributes received in access_request messages, similar to acct logs? Thanks, Simon. --- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Stop authorization processing after successful realm match

2004-07-14 Thread Simon Bryden
Thanks Kostas, that's exactly what I needed. Regards, Simon. --- On Wednesday 14 July 2004 13:51, Kostas Kalevras wrote: > On Wed, 14 Jul 2004, Simon Bryden wrote: > > Hi, > > > > Is there any way to cause the rlm_realm module to return a 'handled' > >

Stop authorization processing after successful realm match

2004-07-14 Thread Simon Bryden
Hi, Is there any way to cause the rlm_realm module to return a 'handled' response when it matches a realm? I have a RADIUS server (Freeradius 1.0.0-pre3) for which a substantial nuber of requests need to be proxied. For non-proxied users, I use mysql. I use something like: authorize { .. pref