Re: Advanced SQL Auth/Generate clients.conf from SQL?

2007-02-12 Thread Alan DeKok
Luca Corti wrote: > Please forgive my ignorance, but how is this different from what > Freeradius already does when handling SIGHUP? There are some issues with the servers handling of HUP. > Wrt cron + kill -HUP I think that it may be a bit overkill just to > reload the NAS table. Yes. A

Re: Advanced SQL Auth/Generate clients.conf from SQL?

2007-02-12 Thread Luca Corti
On Wed, 2007-02-07 at 16:56 +0100, Alan DeKok wrote: > > Maybe simply reloading the nas configuration from SQL at configurable > > time intervals would do that? > Send a patch. :) I'd love to, but at the moment I'm no real C coder. > The difficulty with doing automatic reloads is timing, and

Re: Advanced SQL Auth/Generate clients.conf from SQL?

2007-02-09 Thread Gaddis, Jeremy L.
On Fri, 9 Feb 2007, Alan DeKok wrote: >> The immediate question that comes to mind is "Does FreeRADIUS reread its >> configuration when it receives a -HUP?". > > The immediate answer is have you tried reading the documentation? To which I'd have to reply "no" (WRT this, anyways) and then ask if y

Re: Advanced SQL Auth/Generate clients.conf from SQL?

2007-02-08 Thread Alan DeKok
Gaddis, Jeremy L. wrote: > The immediate question that comes to mind is "Does FreeRADIUS reread its > configuration when it receives a -HUP?". The immediate answer is have you tried reading the documentation? Alan DeKok. -- http://deployingradius.com - The web site of the book htt

Re: Advanced SQL Auth/Generate clients.conf from SQL?

2007-02-08 Thread Gaddis, Jeremy L.
On Wed, 7 Feb 2007, Alan DeKok wrote: >> Maybe simply reloading the nas configuration from SQL at configurable >> time intervals would do that? > > Send a patch. :) > > The difficulty with doing automatic reloads is timing, and updating > the configuration while the server is running. The immedi

Re: Advanced SQL Auth/Generate clients.conf from SQL?

2007-02-07 Thread Peter Nixon
On Wed 07 Feb 2007 17:56, Alan DeKok wrote: > Luca Corti wrote: > > On Sat, 2007-02-03 at 12:12 +0100, Alan DeKok wrote: > >> It should be possible to mitigate the DoS potential somewhat, but > >> someone still has to write the code. > > > > Maybe simply reloading the nas configuration from SQL a

Re: Advanced SQL Auth/Generate clients.conf from SQL?

2007-02-07 Thread Alan DeKok
Luca Corti wrote: > On Sat, 2007-02-03 at 12:12 +0100, Alan DeKok wrote: >> It should be possible to mitigate the DoS potential somewhat, but >> someone still has to write the code. > > Maybe simply reloading the nas configuration from SQL at configurable > time intervals would do that? Send

Re: Advanced SQL Auth/Generate clients.conf from SQL?

2007-02-07 Thread Luca Corti
On Sat, 2007-02-03 at 12:12 +0100, Alan DeKok wrote: > It should be possible to mitigate the DoS potential somewhat, but > someone still has to write the code. Maybe simply reloading the nas configuration from SQL at configurable time intervals would do that? ciao Luca - List info/subscrib

Re: Advanced SQL Auth/Generate clients.conf from SQL?

2007-02-03 Thread Alan DeKok
Dan Mahoney, System Admin wrote: > My second question is, now that I've got a list of all my NASes in > SQL, has anyone written (or added to beta or something similar) code to do > *those* via SQL? Specifically we already have all our network devices > (and shared secrets) in a SQL database any

Advanced SQL Auth/Generate clients.conf from SQL?

2007-02-02 Thread Dan Mahoney, System Admin
Hey all, Two questions, related to SQL... 1: I recently became enamored by the power of SQL, and while I find no easy way through SQL to do multiple check-items easily in a logical fall-throughable order. I.e. through SQL how would one do (for an entry level tech): Jeremy nas-ip-address="the