Dear All ,
I am upgrading from 1.1.7 To 2.1.10
I am using Exec-Program-Wait to run a script
In the old ver, I can find the out put of my script in reply-detail log ,
But in the new ver. I Only find the attribute
Exec-Program-Wait = /usr/bin/php /var/www/html/check.php testuser 1
but i need all
Dear All ,
I am upgrading from 1.1.7 To 2.1.10
I am using Exec-Program-Wait to run a script
In the old ver, I can find the out put of my script in reply-detail log ,
But in the new ver. I Only find the attribute
Exec-Program-Wait = /usr/bin/php /var/www/html/check.php testuser 1
but i need all
Hi,
am migrating from an ancient radius install to FreeRADIUS Version 2.1.8
The system uses a custom authentication binary which we access from the users
file via,
DEFAULT NAS-IP-Address == 192.168.1.100, Auth-Type := Accept,
Simultaneous-Use := 1
Exec-Program-Wait = /usr/local
: Craig Campbell
To: FreeRadius users mailing list
Sent: Friday, November 12, 2010 6:24 AM
Subject: Output from Exec-Program-Wait in users file
Hi,
am migrating from an ancient radius install to FreeRADIUS Version 2.1.8
The system uses a custom authentication binary which we
Hello,
Just upgraded to freeradius2 2.1.7 on CentOS 5.5. And
Exec-Program-Wait no longer works now for accounting packets. Rewrote
to exec module.
But for performance reasons we were not executing external program
for all the packets before. We used more specific user entries in
users
,
Session-Timeout = 5400,
Framed-IP-Address = 255.255.255.254,
Framed-Compression = Van-Jacobson-TCP-IP,
Exec-Program-Wait = /etc/freeradius/somescript,
Fall-Through = Yes
but I want that the output of it to append to the AV pair reply that
goes
back
enid wrote:
to make it more precise, I'm trying to execute a script that checks the
users accounting (hours and minutes generated from radiusreport tool). And
when the users passes his limit he is then blocked access.
The exec module can do that.
The exec module allows only this syntax:
= 5400,
Framed-IP-Address = 255.255.255.254,
Framed-Compression = Van-Jacobson-TCP-IP,
Exec-Program-Wait = /etc/freeradius/somescript,
Fall-Through = Yes
but I want that the output of it to append to the AV pair reply that goes
back to the client. So I have the problem
enid wrote:
DEFAULT Simultaneous-Use := 1
Idle-Timeout = 600,
Session-Timeout = 5400,
Framed-IP-Address = 255.255.255.254,
Framed-Compression = Van-Jacobson-TCP-IP,
Exec-Program-Wait = /etc/freeradius/somescript,
Fall-Through = Yes
but I
I'm having trouble getting FreeRADIUS to run programs called by
Exec-Program-Wait in the newest version of FreeRADIUS (version 2.1.3).
I'm using a custom C script that used to work with all versions of
FreeRADIUS prior to version 2.
I have an entry like this in the users file which
I'm having trouble getting FreeRADIUS to run programs called by
Exec-Program-Wait in the newest version of FreeRADIUS (version 2.1.3).
I'm using a custom C script that used to work with all versions of
FreeRADIUS prior to version 2.
Read comments in exec module configuration file (raddb/modules
Replying to myself... I missed uncommenting exec from the post-auth
section of default site. Everything is working now. Sorry for the
wasting your valuable mailbox space.
Jeremiah
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hello,
we're about to migrate from Freeradius 0.9 to 2.1. During this we're
noticed, that the Atribute Exec-Progam-Wait and Exec-Program are
deprecated.
We used this feature to start a script (which generates special Cisco
AV-Pairs).
Our Freeradius backend is a mysql database.
Now my Problem is
Michael Schramm wrote:
we're about to migrate from Freeradius 0.9 to 2.1. During this we're
noticed, that the Atribute Exec-Progam-Wait and Exec-Program are
deprecated.
We used this feature to start a script (which generates special Cisco
AV-Pairs).
They still work in 2.x.
Now my Problem
Alan DeKok a écrit :
Fabiano wrote:
Can you point me to a document or website where the following mechanism
is described well ?
ie MSCHAPv2 Radius Client - Freeradius does the MSCHAPv2 challenge ? -
auth is delegated to external script receiving attributes like username
and password in
Fabiano wrote:
A database? You should know what the *correct* password is, otherwise
you don't be able to authenticate the user.
You mean, for example making the OTP script (doing exactly the contrary
of what it actually does) write the password every 10 seconds to a
database for every
Alan DeKok a écrit :
Fabiano wrote:
A database? You should know what the *correct* password is, otherwise
you don't be able to authenticate the user.
You mean, for example making the OTP script (doing exactly the contrary
of what it actually does) write the password every 10
Fabiano wrote:
Can you point me to a document or website where the following mechanism
is described well ?
ie MSCHAPv2 Radius Client - Freeradius does the MSCHAPv2 challenge ? -
auth is delegated to external script receiving attributes like username
and password in clear - external script
lead on how to do this while using
MSCHAPv2...
$ man unlang
Then, run the script in the post-auth section.
And I am not sure how to do this with Exec-Program-Wait.
Is this possible without rewriting the module in C ?
Is there any way to have the cleartext password sent to the external
to do this while using
MSCHAPv2...
And I am not sure how to do this with Exec-Program-Wait.
Is this possible without rewriting the module in C ?
Is there any way to have the cleartext password sent to the external
script ?
Thanks a lot
Fab
-
List info/subscribe/unsubscribe? See http
.
The problem is that I cannot find any lead on how to do this while using
MSCHAPv2...
And I am not sure how to do this with Exec-Program-Wait.
Hi Fabiano!
I'm using mobile otp, but I use pam and not the shell script. (In fact,
the shell script has some security issues which I found out a few days
find any lead on how to do this while using
MSCHAPv2...
$ man unlang
Then, run the script in the post-auth section.
And I am not sure how to do this with Exec-Program-Wait.
Is this possible without rewriting the module in C ?
Is there any way to have the cleartext password sent
Regards:
Sorry my english!
I'm using Exec-Program-Wait for session control and printing a
Session-Timeout = 0 parameter, but don' work. In cistron radius, I received
logs in radius.log:
Tue Sep 4 17:26:57 2007 : Debug: Exec-Program output Session-Timeout:=100
Tue Sep 4 17:26:57
Emmanuel Willems wrote:
Thank you for your feedback and sorry for the confusion.
The program is being executed and returning the correct result, but I
still can't authenticate.
So... read the debug log, and fix all of the WARNINGs, errors, etc.
Alan DeKok.
-
List
Emmanuel Willems wrote:
Here is a relevant part of the debug log:
...
Tue Apr 15 14:36:27 2008 : Auth: Login OK: [000d2885af3e/000d2885af3e]
(from client wlan-sen port 737 cli 000d.2885.af3e)
Tue Apr 15 14:36:27 2008 : Debug: +- entering group post-auth
Tue Apr 15 14:36:27 2008 : Debug:
Thank you for your feedback and sorry for the confusion.
The program is being executed and returning the correct result, but I
still can't authenticate.
I'm using EAP-TTLS-PAP to connect to a Cisco Aironet AP1200.
Using the same sql db in freeradius 1.1.3 it works, but not with
freeradius
I added exec in post-auth in sites-enabled/default and
sites-enabled/inner-tunnel and it's still no go.
Did i miss something?
Thankx,
Emmanuel
Alan DeKok wrote:
Emmanuel Willems wrote:
All works well in version 1.1.3 but the script does not get called in
version 2.0.3
List 'exec' in
Emmanuel Willems wrote:
I added exec in post-auth in sites-enabled/default and
sites-enabled/inner-tunnel and it's still no go.
Did i miss something?
Debug log?
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
I'm carrying out tests with 2 versions for freeradius 1.1.3 and 2.0.3 .
I'm trying to use Exec-Program-Wait to run a script to do some extra
checking.
Both setups use the same MySQL database
All works well in version 1.1.3 but the script does not get called in
version 2.0.3
The SQL
Emmanuel Willems wrote:
All works well in version 1.1.3 but the script does not get called in
version 2.0.3
List 'exec' in the post-auth section.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Felipe Ceglia - PY1NB wrote:
I am trying to setup a prepaid style system on my freeradius. All I
want is to check user name against a perl script that will let user get
in or not.
You should use rlm_perl rather than Exec-Program-Wait
I put this on users file, but the script is not being
Exec-Program-Wait = /etc/raddb/scripts/hotspot_shop_tere.pl %U,
DEFAULT Called-Station-Id == hotspot_shop_tere, Acct-Status-Type == Stop
Exec-Program-Wait = /etc/raddb/scripts/hotspot_shop_tere.pl %U
%{AcctSessionTime},
Thanks in advance,
Felipe
radiusd -X says:
Starting - reading
Michael Alexeev wrote:
I found it on the following site:
http://ftp.wayne.edu/pub/gnu/Manuals/radius-0.95/html_node/radius_182.html
Which is the manual for the GNU radius server. There was never a 0.95
release of FreeRADIUS.
Alan DeKok.
-
List info/subscribe/unsubscribe? See
contains the following entry:
DEFAULT Auth-Type = System,
Simultaneous-Use = 1
Exec-Program-Wait = /usr/local/sbin/telauth \
%C{User-Name} \
%C{Calling-Station-Id}
Then, upon successful matching
On Mon 25 Jun 2007, Michael Alexeev wrote:
What led you to believe %C{User-Name} would be the user name? The
documentation says it's %{User-Name}. Where did the extra 'C' come
from?
I found it on the following site:
Hi all,
I am having trouble with macro substitution in Exec-Program-Wait
attribute. For some reason %C{User-Name} is expanded to
localhost{User-Name} string instead of real user name. Here is an
excerpt from the users config file:
jsullivan User-Password == mypass
Exec-Program
Michael Alexeev wrote:
Hi all,
I am having trouble with macro substitution in Exec-Program-Wait
attribute. For some reason %C{User-Name} is expanded to
localhost{User-Name} string instead of real user name.
Because %C is documented as being the client name.
What led you to believe %C
Felipe Ceglia - PY1NB wrote:
When I run it thru users file, it is called, and works.
You put it in the reply list in the users file, and the check
table in the SQL database.
Put it in the reply tble in the SQL database.
Alan DeKok.
-
List info/subscribe/unsubscribe? See
Peter Urban wrote:
i want to pass the username and password to an external program.
i already tried the following code but i didnt work:
DEFAULT Auth-Type ?= External
Exec-Program-Wait = /etc/raddb/mytestprogram %u %w,
Fall-Through = Yes
I found the %u placeholder in the doc
I want to use two ippools. That's no problem of course. But which IP pool
to assign I can decide only in Exec-Program-Wait script. Now I have the
following lines in users file:
DEFAULT Auth-Type := Accept
Exec-Program-Wait = /etc/raddb/authclient
authclient script checks text file
Mindaugas wrote:
I want to use two ippools. That's no problem of course. But which IP pool
to assign I can decide only in Exec-Program-Wait script. Now I have the
following lines in users file:
DEFAULT Auth-Type := Accept
Exec-Program-Wait = /etc/raddb/authclient
authclient script
I want to use two ippools. That's no problem of course. But which IP
pool
to assign I can decide only in Exec-Program-Wait script. Now I have the
following lines in users file:
DEFAULT Auth-Type := Accept
Exec-Program-Wait = /etc/raddb/authclient
authclient script checks text file
Hello,
I want to use two ippools. That's no problem of course. But which IP pool
to assign I can decide only in Exec-Program-Wait script. Now I have the
following lines in users file:
DEFAULT Auth-Type := Accept
Exec-Program-Wait = /etc/raddb/authclient
authclient script checks text
Hi
All,
I am trying to set
values for more than one attributes in the exec-program-wait for accounting
startpackets.
Below is the code i
am trying in the exec-program-wait
putenv("Calling-Station-ID=10")
putenv("Called-Station-ID=50")
Putenv("Acct-Session-ID=&qu
Shankar Ganesh C [EMAIL PROTECTED] wrote:
Below is the code i am trying in the exec-program-wait
putenv(Calling-Station-ID=10)
That is not the documented way to send attributes back to the server.
See scripts/exec-program-wait
I am trying to set the accounting response packets
PROTECTED] [EMAIL PROTECTED] wrote:
Hello,
I have recently migrated to freeradius (latest stable on debian
sarge - 1.0.2-4) and faced with the following problem:
I use Exec-Program-Wait attribute as a reply item in users file.
It returns 3 attributes: NAS-Identifier, Framed-IP-Address and
Framed
Hello,
I have recently migrated to freeradius (latest stable on debian
sarge - 1.0.2-4) and faced with the following problem:
I use Exec-Program-Wait attribute as a reply item in users file.
It returns 3 attributes: NAS-Identifier, Framed-IP-Address and
Framed-Route. These attributes
Dusty Doris wrote:
Hello,
I have recently migrated to freeradius (latest stable on debian
sarge - 1.0.2-4) and faced with the following problem:
I use Exec-Program-Wait attribute as a reply item in users file.
It returns 3 attributes: NAS-Identifier, Framed-IP-Address and
Framed-Route
Hello,
I have recently migrated to freeradius (latest stable on debian
sarge - 1.0.2-4) and faced with the following problem:
I use Exec-Program-Wait attribute as a reply item in users file.
It returns 3 attributes: NAS-Identifier, Framed-IP-Address and
Framed-Route. These attributes are printed
SantaYeh [EMAIL PROTECTED] wrote:
I just want to know how can we stop the users checking if mysql return OK.
doc/configurable_failover
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I'm using Exec-Program-Wait for authentication requests. The called
program returns some attributes.
Is there a way to cache the results of the called program, so that if
I get 5 requests in X number of seconds, the program is only called
once?
Thanks for any advice,
Norman Elton
Norman Elton [EMAIL PROTECTED] wrote:
Is there a way to cache the results of the called program, so that if
I get 5 requests in X number of seconds, the program is only called
once?
Not really. I'd suggest writing a C module which does that.
Alan DeKok.
-
List
I transitioned from Cistron radius some time ago. There the only
option was Exec-Program-Wait. I had developed one that suited our
needs. It transitioned quite well to freeradius. However, there are
notes in various places that Exec-Program-Wait will somtime go away.
The indicated
Doug Hardie [EMAIL PROTECTED] wrote:
Recently I took a more detailed look at rlm_example and decided to
give that approach a try. Its actually quite easy to convert an Exec-
Program-Wait into a rlm_. Some of the steps are not obvious and
the really difficult part is figuring out
Americatel Centroamerica [EMAIL PROTECTED] wrote:
Hi, i have two servers with diferent versions of
freeradius, one with 0.9 and another with 1.0.1.
I have an Exec-Program-Wait perl script configured to
add some attributes to the reply, all is working
flawlessly on the 0.9, but the same script
--- Alan DeKok [EMAIL PROTECTED] wrote:
Put commas after the attribute values, like in the
users file.
Alan DeKok.
That did the trick, thanks Alan
Yahoo! Sports
Rekindle the Rivalries. Sign up for Fantasy
Hi, i have two servers with diferent versions of
freeradius, one with 0.9 and another with 1.0.1.
I have an Exec-Program-Wait perl script configured to
add some attributes to the reply, all is working
flawlessly on the 0.9, but the same script doesnt work
on the 1.0 server, the output items
Hi,
I'm using Exec-Program-Wait for user validation.
On some cases, I want to send back the Session-Timeout
According to what I've seen, on the script I execute on
Exec-Program-Wait, I can send back this value like this:
print Session-Timeout=$timeout\n;
exit 0; # Grant Access
Now
Alex Moreno [EMAIL PROTECTED] wrote:
Is Exec-Program-Wait a variable in a configuration file? Which one
if it is?
doc/README
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hello,
i´m freeradius newbie so excuse me if the question is an stupid one. I
need to execute a python program of myself after a freeradius login.
I´ve read on the faq that this can be done with Exec-Program-Wait but
i don´t know how to use it. Is Exec-Program-Wait a variable in a
configuration
request in
received, exec-program-wait or rlm_exec, im using exec-program-wait,
sould i use rlm_exec instead, the script check some item like credit
amount and returns 0 or 1 if success or fail , thanks
I like rlm_exec because it gives you more control over _where_ the
execution happens
checks when an access request in
received, exec-program-wait or rlm_exec, im using
exec-program-wait, sould i use rlm_exec instead, the script check
some item like credit amount and returns 0 or 1 if success or fail
, thanks
I do this with Post-Auth-Type.
How do you filter by groupname?
I
[EMAIL PROTECTED] wrote:
On Tue, May 03, 2005 at 10:23:05AM -0600, [EMAIL PROTECTED]
wrote:
Hi, what do you consider the best solution wheen you need to run an
external program to make aditional checks when an access request in
received, exec-program-wait or rlm_exec, im using exec-program
[EMAIL PROTECTED] wrote:
you can point me on
some docuemtation on the options of rlm_exec, i cant found anything on the
web. The exec echo example is very basic,
The rest of radiusd.conf contains more documentation about rlm_exec.
Alan Dekok.
-
List info/subscribe/unsubscribe? See
On Tue, May 03, 2005 at 10:23:05AM -0600, [EMAIL PROTECTED] wrote:
Hi, what do you consider the best solution wheen you need to run an external
program to make aditional checks when an access request in received,
exec-program-wait or rlm_exec, im using exec-program-wait, sould i use
rlm_exec
Hi, what do you consider the best solution wheen you need to run an external
program to make aditional checks when an access request in received,
exec-program-wait or rlm_exec, im using exec-program-wait, sould i use
rlm_exec instead, the script check some item like credit amount and returns
0
Hi, i just upgraded my AAA server from redhat 7.3 / freeradius 0.9-pre to
Gentoo / Freeradius 1.0.1.
I have a perl script that adds some cisco vsa attributes to the reply item
via Exec-Program-Wait, using simple print statements to STDOUT , with the
new versions, freeradius dont add these items
Hi, i just upgraded my AAA server from redhat 7.3 / freeradius 0.9-pre to
Gentoo / Freeradius 1.0.1.
have a perl script that adds some cisco vsa attributes to the reply item
via Exec-Program-Wait, using simple print statements to STDOUT , with the
new versions,
freeradius dont add these items
Emman S. Loloy [EMAIL PROTECTED] wrote:
Is it possible for the output of Exec-Program-Wait become check item?
No. See rlm_exec for that functionality.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi Guys,
Is it possible for the output of Exec-Program-Wait become check item? let say
user files
==
DEFAULT Realm == foo, Login-Time := Any0900-1200
Exec-Program-Wait := `/tmp/testscript`,
Fall-Through = Yes
HI,
I am using mySQL db to accounting and authuntication.
I want to run one perl script when the Accounting will
be STOP. to calculate time and rate.
But i don't where i should put Exec-Program-Wait to
run my script.
Already i had run one script to return
h323-credit-time value from
I'm getting what seems to be an unexplained radius.log entry due to
interaction between rejected access due to bad password and rejected
access due to Exec-Program-Wait returning a non-zero value. Do I
misunderstand the documentation, or is this a bug? Can anyone suggest
a work-around, short
Exec-Program output:
jimmy++_++_++1107411580++/usr/local/radius/var/log/radius/radacct++localhost
Reply-Message =
Exec-Program-Wait:
plaintext:
jimmy++_++_++1107411580++/usr/local/radius/var/log/radius/radacct++localhost
Reply-Message
Quoting Dustin Doris [EMAIL PROTECTED]:
On Sun, 16 Jan 2005, Emman S. Loloy wrote:
Hi,
i have a problem using Exec-Program-Wait Attribute.. any comments or
suggestion how to fix this problem. here's my configuration.
/tmp/checkras
#!/bin/sh
if [ $1
Quoting Dustin Doris [EMAIL PROTECTED]:
On Sun, 16 Jan 2005, Emman S. Loloy wrote:
Hi,
i have a problem using Exec-Program-Wait Attribute.. any comments or
suggestion how to fix this problem. here's my configuration.
/tmp/checkras
#!/bin/sh
if [ $1 == 192.168.0.1
Hi
I am using a MySQL DB to store the list of NAS's - if I add one to the
nas table, is there a way to get Freeradius to read it without having
to restart radiusd?
Thanks in advance
Neil
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Craig
Sent: Monday, January 17, 2005 3:57 PM
To: freeradius-users@lists.freeradius.org
Subject: Re: Exec-Program-Wait Problem
Hi
I am using a MySQL DB to store the list of NAS's - if I add one to the
nas table, is there a way to get Freeradius to read it without having
to restart radiusd?
Thanks
On Sun, 16 Jan 2005, Emman S. Loloy wrote:
Hi,
i have a problem using Exec-Program-Wait Attribute.. any comments or
suggestion how to fix this problem. here's my configuration.
/tmp/checkras
#!/bin/sh
if [ $1 == 192.168.0.1 ] ; then
exit -1 ; #fail
elif [ $1 == 192.168.0.2
Hi,
i have a problem using Exec-Program-Wait Attribute.. any comments or
suggestion how to fix this problem. here's my configuration.
/tmp/checkras
#!/bin/shif [ $1 == "192.168.0.1" ] ; thenexit -1 ; #failelif [
$1 == "192.168.0.2" ]; thenexit -1 ; #failfiexit 0 ; #pa
On Tue, Oct 26, 2004 at 05:17:57PM +0300, Kostas Zorbadelos wrote:
On Tue, Oct 26, 2004 at 10:20:48AM -0400, Alan DeKok wrote:
Kostas Zorbadelos [EMAIL PROTECTED] wrote:
First of all I have a question for Exec-Program-Wait. I need to run an
external C program that expects in its
Hello to everyone.
First of all I have a question for Exec-Program-Wait. I need to run an
external C program that expects in its environment a proper
LD_LIBRARY_PATH to run. I followed the obvious solution of using a
wrapper bash shell script, that sets the environment and calls the C
program via
Kostas Zorbadelos [EMAIL PROTECTED] wrote:
First of all I have a question for Exec-Program-Wait. I need to run an
external C program that expects in its environment a proper
LD_LIBRARY_PATH to run. I followed the obvious solution of using a
wrapper bash shell script, that sets the environment
On Tue, Oct 26, 2004 at 10:20:48AM -0400, Alan DeKok wrote:
Kostas Zorbadelos [EMAIL PROTECTED] wrote:
First of all I have a question for Exec-Program-Wait. I need to run an
external C program that expects in its environment a proper
LD_LIBRARY_PATH to run. I followed the obvious solution
Kostas Zorbadelos [EMAIL PROTECTED] wrote:
Actually the conversation in that thread ended by mentioning the ideas
rlm_exec should follow. I didn't see any patch that implemented
them. If there is such a patch please direct me to it and I
will test it.
Nope, I haven't seen a patch, sorry.
(Bump)
- Nathan Miller
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Nate M
Sent: Tuesday, October 12, 2004 12:34 PM
To: [EMAIL PROTECTED]
Subject: Exec-Program-Wait Unresponsive Child Errors
Good morning. I've got some weirdness with freeradius
Hello,
can someone tell me what is the difference between these attributes?
Does the first one call for a script before authentication, the second
one after?
Thanks!
Edgars
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Exec-Program-Wait : wait to finish authorization and then executed
Kyriaki Gali,
IT Applications Specialist
Kinetix Tele.com Support Center,
Tel Fax: +30 2310 256140
GSM: +30 6947 723737
http://www.kinetix.gr
e-mail: [EMAIL PROTECTED]
- Original Message -
From: Edgars [EMAIL PROTECTED
Edgars wrote:
can someone tell me what is the difference between these attributes?
Exec-Program executes a program without waiting for any output from the
program.
Exec-Program executes a program and waits for any output from the program.
You need this if you want the program to set attributes
Hello,
can't figure out how the attributes are sent to my PHP script,how do hey
look in this file. Can someone help on this issue?
I'm sending 2 attributes Exec-Program-Wait='/usr/local/sbin
%C{User-Name} %C{Nas-IP-Address}'
So how they are called now under my PHP file?
Thanks!
Edgars
-
List
Cheers Jerlique! it works now:)
Edgars
Jerlique Ban wrote:
Hi,
can't figure out how the attributes are sent to my PHP
script,how do hey look in this file. Can someone help on this issue?
I'm sending 2 attributes Exec-Program-Wait='/usr/local/sbin
%C{User-Name} %C{Nas-IP-Address}'
So how
On Sat, Sep 04, 2004 at 07:56:29PM +0200, Thor Spruyt wrote:
Paul Hampson wrote:
New behaviour: (Replaces behaviour identical to 0 above)
If the program returns 1 through RLM_MODULE_NUMCODES, return the
appropriate code and attributes as expected.
1RLM_MODULE_REJECT, /* immediately
. ^_^;
Hopefully this allows everyone to do what they need to do, and we can
finally deprecate Exec-Program-Wait and Exec-Program. ^_^
Patch for discussion. I decided to try this route when I couldn't
think what to use for a module call that failed but returned attributes.
This then leads the question
Paul Hampson wrote:
New behaviour: (Replaces behaviour identical to 0 above)
If the program returns 1 through RLM_MODULE_NUMCODES, return the
appropriate code and attributes as expected.
1RLM_MODULE_REJECT, /* immediately reject the request */
2RLM_MODULE_FAIL,/* module failed,
than yes, then use
the old return code interpretation (0=ok, !0=fail)
I'm hoping to avoid another configuration option. The idea is to make
it a slightly painful but important migration... The _goal_ is to get
rlm_exec to be a fully-useful replacement for Exec-Program{,-Wait} so
we can get rid
On Thu, Sep 02, 2004 at 02:52:13PM -0400, Alan DeKok wrote:
Dear Alan,
though this setup you propose will work, I agree with Thor's oppinion
on the matter. I believe that it would be a good idea to allow
rlm_exec module return reject messages with attributes in them as
Exec-Program-Wait does
Thor Spruyt [EMAIL PROTECTED] wrote:
I hope the rlm_exec module is going to be changed to enable outputting
Reject attributes! If you have to run 2 scripts each time, what's the whole
point of making the module?
The module can be updated, once patches are supplied.
Alan DeKok.
-
List
.
This scenario is accomplished easily using the Exec-Program-Wait
attribute in users file.
When I try to accomplish the same thing with rlm_exec, as Doug Hardie
and Alan suggested, I use configurable failover:
radiusd.conf:
exec callerid {
wait=yes
program=/space/radius
OK,
return access-accept with some attributes,
otherwise I want to return
access-reject with other attributes.
This scenario is accomplished easily using the
Exec-Program-Wait
attribute in users file.
When I try to accomplish the same thing with
rlm_exec, as Doug Hardie
and Alan
Kostas Zorbadelos [EMAIL PROTECTED] wrote:
Autz-Type CLID{
callerid {
fail=reject
}
}
In this case when the external script returns a non zero exit code or
fails I get an Access-Reject. However I cannot put any attributes
to enable outputting
Reject attributes! If you have to run 2 scripts each time, what's the whole
point of making the module?
As I already pointed out, the Exec-Program-Wait feature has several
advantages over rlm_exec and is widely used with success (just the one small
thing that I posted as a bug #122
1 - 100 of 122 matches
Mail list logo
