Re: NAS list update without restarting radius server.

2008-04-12 Thread Ivan Kalik
Yes, you can specify a network, not just single IP address. Ivan Kalik Kalik Informatika ISP Dana 12/4/2008, "Tuc at T-B-O-H.NET" <[EMAIL PROTECTED]> piše: >Hi Ivan, > > Thanks for the reply. I think its starting to sink in. :) >I have to test out how we'll do a bit of it, but I think I g

RE: SPAM(6.5) Re: NAS list update without restarting radius server.

2008-04-12 Thread Johan Nyman
Hello, - Anyone can point me in the right direction if I am getting this error, from the client: "CTRL-EVENT-EAP-FAILURE EAP authentication failed" - And on the freeradius console I have this: Called-Station-Id = "00-20-a6-64-c3-b1:MVG-Personal" Calling-Station-Id = "00-0f-cb

Re: NAS list update without restarting radius server.

2008-04-12 Thread Tuc at T-B-O-H.NET
Hi Ivan, Thanks for the reply. I think its starting to sink in. :) I have to test out how we'll do a bit of it, but I think I get the jist of it. I don't see how any of the netmask, require_message_authenticator or virtual_server fit into it... But since I wasn't using it anyway, I won't p

Re: NAS list update without restarting radius server.

2008-04-12 Thread Ivan Kalik
nasname on your AP goes into NAS-Identifier filed in access request. It's not the same as nasname in nas table which takes NAS IP or FQDN. You can put it in shortname filed. "Secret per NAS" = "Secret per NAS IP address". Ivan Kalik Kalik Informatika ISP Dana 11/4/2008, "Tuc at T-B-O-H.NET" <[EMA

Re: NAS list update without restarting radius server.

2008-04-11 Thread Alan DeKok
Tuc at T-B-O-H.NET wrote: > If I choose DNS name, and I don't fully qualify it, > does it follow the standard BIND rules of using the "domain" > setting, or going down the "search" path? It follows the normal process to look up domain names. Alan DeKok. - List info/subscribe/unsubscrib

Re: NAS list update without restarting radius server.

2008-04-11 Thread Tuc at T-B-O-H.NET
Hi, If I choose DNS name, and I don't fully qualify it, does it follow the standard BIND rules of using the "domain" setting, or going down the "search" path? Reason I'm trying to avoid the IP or the FQDN is that I was hoping to use the nasname along with the secret in the UAM pr

Re: NAS list update without restarting radius server.

2008-04-11 Thread Ivan Kalik
IP address (or DNS name) goes into nasname field. Ivan Kalik Kalik Informatika ISP Dana 11/4/2008, "Tuc at T-B-O-H.NET" <[EMAIL PROTECTED]> piše: >Hi, > > I had actually kept this email in my queue to implement >someday. Today is someday. But I have a question. > > The config file c

Re: NAS list update without restarting radius server.

2008-04-11 Thread Tuc at T-B-O-H.NET
Hi, I had actually kept this email in my queue to implement someday. Today is someday. But I have a question. The config file contains IP addresses, which the nas.sql doesn't. How do I sync up the format of the clients.conf with the nas.sql? client nas_shortname { ipaddr

Re: NAS list update without restarting radius server.

2008-01-23 Thread Alan DeKok
Arran Cudbard-Bell wrote: >> If the list update takes longer than 1/10 of a second, something is >> very wrong. > > Ours often takes ~20 seconds for 600 NAS. Ouch. 600 SQL qeuries really take that long? i.e. if the SELECT for NASes from SQL takes less than 20s on the command-line, then so

Re: NAS list update without restarting radius server.

2008-01-23 Thread liran tal
Hey Alan, On Jan 23, 2008 9:47 AM, Alan DeKok <[EMAIL PROTECTED]> wrote: > liran tal wrote: > > Maybe freeradius can read the nas list from sql at startup to some > > linked list and this list will be updated every given interval with a > query > > to the database. > > It's more complicated than

RE: NAS list update without restarting radius server.

2008-01-23 Thread Pawel Cieplinski
restarded on NAS list change. What do you think ? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] g] On Behalf Of Marinko Tarlac Sent: 23 January 2008 10:05 To: FreeRadius users mailing list Subject: Re: NAS list update without

Re: NAS list update without restarting radius server.

2008-01-23 Thread Arran Cudbard-Bell
Alan DeKok wrote: Pawel Cieplinski wrote: I wont be adding NASes, but users will do, so i am thinking 0-10 a day. Linking to a dynamic list using interal its not a good solution, becouse i will need to wait for list update after adding NAS. If the list update takes longer than 1/10 of a se

Re: NAS list update without restarting radius server.

2008-01-23 Thread A . L . M . Buxey
Hi, > well the previous info regarding this only being read at startup was > specific to data in SQL, so I suppose a kill -HUP should work. > But I haven't tested it :P, maybe someone else on the list can tell us, > otherwise give it a go by manually updating the clients.conf and > try a kill -

Re: NAS list update without restarting radius server.

2008-01-23 Thread Alan DeKok
Andy Smith wrote: > well the previous info regarding this only being read at startup was > specific to data in SQL, so I suppose a kill -HUP should work. Clients are not reloaded on HUP. Only modules, and even then, only some modules. Look at the log file after a HUP to see which modules we

Re: NAS list update without restarting radius server.

2008-01-23 Thread Andy Smith
-HUP, cheers Andy. - Original Message - From: "Pawel Cieplinski" <[EMAIL PROTECTED]> To: "'A.smith'" <[EMAIL PROTECTED]> Sent: Wednesday, January 23, 2008 2:02 PM Subject: RE: NAS list update without restarting radius server. Hey Pawel

Re: NAS list update without restarting radius server.

2008-01-23 Thread liran tal
Exactly my point Alan :) Regards, Liran Tal. On Jan 23, 2008 2:04 PM, Alan DeKok <[EMAIL PROTECTED]> wrote: > Pawel Cieplinski wrote: > > I wont be adding NASes, but users will do, so i am thinking 0-10 a day. > > > > Linking to a dynamic list using interal its not a good solution, becouse >

Re: NAS list update without restarting radius server.

2008-01-23 Thread Alan DeKok
Pawel Cieplinski wrote: > I wont be adding NASes, but users will do, so i am thinking 0-10 a day. > > Linking to a dynamic list using interal its not a good solution, becouse i > will need to wait for list update after adding NAS. If the list update takes longer than 1/10 of a second, somethin

RE: NAS list update without restarting radius server.

2008-01-23 Thread Pawel Cieplinski
liran tal Sent: 23 January 2008 12:07 To: FreeRadius users mailing list Subject: Re: NAS list update without restarting radius server. I think that having 2 servers running in master/slave and constantly exchanging the roles between them i

Re: NAS list update without restarting radius server.

2008-01-23 Thread A.smith
Hey Pawel, why not have a script read the contents of the NAS table and update the freeradius clients.conf text file with the data, then configure freeradius to use the clients.conf file rather than MySQL for the secrets data? You could have it run every minute or so??? cheers Andy. __

Re: NAS list update without restarting radius server.

2008-01-23 Thread liran tal
st becouse primary is not restarded on NAS list > change. > > What do you think ? > > > > >From: > [EMAIL PROTECTED] > [mailto: > [EMAIL PROTECTED] > g] On Behalf Of Marinko Tarlac > Sent: 23 January 2008 1

Re: NAS list update without restarting radius server.

2008-01-23 Thread Marinko Tarlac
Well how many times per day do you add nases? On Jan 23, 2008 10:20 AM, liran tal <[EMAIL PROTECTED]> wrote: > > Hey Alan, > > On Jan 23, 2008 9:47 AM, Alan DeKok <[EMAIL PROTECTED]> wrote: > > > liran tal wrote: > > > Maybe freeradius can read the nas list from sql at startup to some > > > linke

Re: NAS list update without restarting radius server.

2008-01-23 Thread Alan DeKok
liran tal wrote: > Maybe freeradius can read the nas list from sql at startup to some > linked list and this list will be updated every given interval with a query > to the database. It's more complicated than that. The NASes need to be deleted, too. And this has to be done without affecting no

Re: NAS list update without restarting radius server.

2008-01-22 Thread liran tal
dius ? > > > > Regards > > Pawel Cieplinski > > > > -Original Message- > > From: freeradius-users-bounces+pawel= > [EMAIL PROTECTED] > > [mailto: > [EMAIL PROTECTED] > > g] On Behalf Of Walter Krivanek, VividVisions > > Sent: 2

Re: NAS list update without restarting radius server.

2008-01-22 Thread Alan DeKok
Pawel Cieplinski wrote: > Everything works fine so far, but after adding a new NAS to DB, radius > server need restart to read this data, I am trying to manipulate nas > list without restarting freeradius, but due to lack od documentation > could you help me with that please. As always, patches

Re: NAS list update without restarting radius server.

2008-01-22 Thread Walter Krivanek, VividVisions
Hi, in sql.conf it says: Set readclients to 'yes' to read radius clients from the database ('nas' table) Clients will ONLY be read on server startup. For performance and security reasons, finding clients via SQL queries CANNOT be done "live" while the server is running. Best, Walter Am 22

Re: NAS list update without restarting radius server.

2008-01-22 Thread Marinko Tarlac
Krivanek, VividVisions Sent: 22 January 2008 18:46 To: FreeRadius users mailing list Subject: Re: NAS list update without restarting radius server. Hi, in sql.conf it says: Set readclients to 'yes' to read radius clients from the database ('nas' table) Clients will ON

RE: NAS list update without restarting radius server.

2008-01-22 Thread Pawel Cieplinski
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] g] On Behalf Of Walter Krivanek, VividVisions Sent: 22 January 2008 18:46 To: FreeRadius users mailing list Subject: Re: NAS list update without restarting radius server. Hi, in sql.conf it says: Set readclients to 'yes' to read radius client

NAS list update without restarting radius server.

2008-01-22 Thread Pawel Cieplinski
Hi there Everything works fine so far, but after adding a new NAS to DB, radius server need restart to read this data, I am trying to manipulate nas list without restarting freeradius, but due to lack od documentation could you help me with that please. Pawel Cieplinski - List info/subscri