On 2013-06-13, at 2:37 PM, Cholleti, Hanumantha
hanumantha.choll...@viasat.com wrote:
Similar to the above wimax configuration for authorize section, do we need to
enable any setting for accounting to fix the Calling-Station-Id attribute
that will populate the radacct correctly as string?
-bounces+hanumantha.cholleti=viasat@lists.freeradius.org]
On Behalf Of Alan DeKok
Sent: Thursday, June 13, 2013 12:30 PM
To: FreeRadius users mailing list
Subject: Re: Calling-Station-Id Not Getting Updated in radacct table
On 2013-06-13, at 2:37 PM, Cholleti, Hanumantha
hanumantha.choll
with all the dictonary and are correct.
M
Date: Thu, 12 Jul 2012 19:27:56 +0100
From: a.l.m.bu...@lboro.ac.uk
To: freeradius-users@lists.freeradius.org
Subject: Re: Calling station ID
Hi,
The radius server can only process on what the NAS sends it. Look at
the NAS and configure
://freeradius.1045715.n5.nabble.com/A-couple-of-questions-PoPToP-FreeRadius-IAS-td2757339.html#a2757343
and verified with all the dictonary and are correct.
M
Date: Thu, 12 Jul 2012 19:27:56 +0100
From: a.l.m.bu...@lboro.ac.uk
To: freeradius-users@lists.freeradius.org
Subject: Re: Calling
On Thu, Jul 12, 2012 at 12:29 PM, madal 30 mada...@hotmail.com wrote:
Calling-Station-Id = .031
How do I or where do i adjust this parameter sothat full IP address is
logged in calling-station-ID ? I looked at detail file in modules/detail
but could not find the parameter
The
Thanks Chris,
Date: Thu, 12 Jul 2012 12:38:17 +0200
Subject: Re: Calling station ID
From: sav...@savage.za.org
To: freeradius-users@lists.freeradius.org
On Thu, Jul 12, 2012 at 12:29 PM, madal 30 mada...@hotmail.com wrote:
Calling-Station-Id = .031
How do I or where do i
On 12.07.2012 12:57, madal 30 wrote:
From: sav...@savage.za.org
To: freeradius-users@lists.freeradius.org
On Thu, Jul 12, 2012 at 12:29 PM, madal 30 mada...@hotmail.com wrote:
Calling-Station-Id = .031
How do I or where do i adjust this parameter sothat full IP address is
logged in
I setup vpn server(pptp) with freeradius to handle ippool and stuff. I tried to
figure out where in my vpn server I have to alter is bugging me. perhas in
radiusclient.conf ?
In Freeradius? Nowhere.
You have to alter the configuration of the device you are logging in to.
192.168.1.1 in
Hi,
The radius server can only process on what the NAS sends it. Look at
the NAS and configure the NAS to send the correct/full
Calling-Station-Id.
Where I can Configure this (in which file ?)
no file ont he RADIUS server - as per the original info, this is something
you
Hi Guys,
I'd like to recall this because now I also met this problem.
I also need add Calling-Station-Id to accounting request
But I can't find how the account part in pam radius source code.
Can anyone help to figure it out and tell me which codes I need added in?
hope hearing from you asap.
lth0721 wrote:
I'd like to recall this because now I also met this problem.
I also need add Calling-Station-Id to accounting request
But I can't find how the account part in pam radius source code.
Can anyone help to figure it out and tell me which codes I need added in?
That's a question
You need to check the Calling-Station-Id format sent by the NAS. Start
radius in debug more and send a auth request, the debug will show whether
your NAS sends Calling-Station-Id or not .
If it sends the Calling-Station-Id you can clearly see the format of the
same.
Best Regads
Suman Dash
On
On Sun, Mar 13, 2011 at 04:37:06AM -0700, ziko wrote:
I tried both format together like this:
user1 Calling-Station-Id == 00-00-00-00-00
user1 Calling-Station-Id == 00:00:00:00:00
but no success.
You could do a rewrite:
if (Calling-Station-Id =~
thank you guys. I will try. Thank you!
From: Brian Candler b.cand...@pobox.com
To: FreeRadius users mailing list freeradius-users@lists.freeradius.org
Sent: Mon, March 14, 2011 11:42:09 AM
Subject: Re: Calling-Station-Id problem
On Sun, Mar 13, 2011 at 04:37
ziko wrote:
Hello. I am using freeradius2 on my CentOS5.
It's working great.
But now I have one problem. I need to use wireless and pppoe together in
my network.
Users must login both in wireless and pppoe. wireless using MAC format
00-00-00-00-00 and pppoe 00:00:00:00:00
How can i indicate
Moayad Mohammad wrote:
I am using freeradius with wichorus ASN-GW (WiMAX), I have problem with
Calling-Station-Id value
The ASN-GW sent Calling-Station-Id in binary format like
this \000\031\001\000K
Horrible WiMAX specs...
What’s the problem? And how can
Omer Faruk Sen wrote:
How can I make Calling-Station-Id and Called-Station-Id to be see in
accounting if one of them is empty in detail log file. What I mean if
one of the field (Calling-Station-Id or Called-Station-Id ) doesn't
supplied by NAS I want it to be seen like :
Hi,
First of all thank you for your reply Alan. Is this feature also valid
for 1.1.8 for some certain reasons I have to use 1.1.8
Regards.
On Thu, Jun 17, 2010 at 9:06 AM, Alan DeKok al...@deployingradius.com wrote:
Omer Faruk Sen wrote:
How can I make Calling-Station-Id and
Omer Faruk Sen wrote:
First of all thank you for your reply Alan. Is this feature also valid
for 1.1.8 for some certain reasons I have to use 1.1.8
Upgrade.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Osmany osm...@oc.quimefa.cu writes:
On Thu, 2010-01-07 at 09:06 -0500, Osmany wrote:
On Thu, 2010-01-07 at 08:42 -0500, Michel Bulgado wrote:
Bjørn Mork wrote:
Michel Bulgado mic...@casa.co.cu writes:
Try this way, remember the operator.
Hi,
I had the checkval line commented out. I just uncommented it and that's
it.
I also went further but commenting all of the modules that I did not
need in the authorize section as well as in the preacct section. so
things like the suffix, mschap, chap, etc I commented out so that
Michel Bulgado mic...@casa.co.cu writes:
Try this way, remember the operator.
|312|t...@internet.quimefa.cu|Calling-Station-Id | += | 72061490
|298|t...@internet.quimefa.cu|MD5-Password | := | password
|313|t...@internet.quimefa.cu|Calling-Station-Id | += | 72061490
Please read the
On Thu, 2010-01-07 at 11:32 +0100, Bjørn Mork wrote:
Michel Bulgado mic...@casa.co.cu writes:
Try this way, remember the operator.
|312|t...@internet.quimefa.cu|Calling-Station-Id | += | 72061490
|298|t...@internet.quimefa.cu|MD5-Password | := | password
Bjørn Mork wrote:
Michel Bulgado mic...@casa.co.cu writes:
Try this way, remember the operator.
|312|t...@internet.quimefa.cu|Calling-Station-Id | += | 72061490
|298|t...@internet.quimefa.cu|MD5-Password | := | password
|313|t...@internet.quimefa.cu|Calling-Station-Id | += | 72061490
Osmany osm...@oc.quimefa.cu writes:
This time I used:
|298|t...@internet.quimefa.cu|MD5-Password | := | password
|313|t...@internet.quimefa.cu|Calling-Station-Id | =~ | 6480342|55
and it still accepts the user from regardless of the phone number it's using.
this is what comes up
This time I used:
|298|t...@internet.quimefa.cu|MD5-Password | := | password
|313|t...@internet.quimefa.cu|Calling-Station-Id | =~ | 6480342|55
and it still accepts the user from regardless of the phone number it's
using. this is what comes up
in the debug.
[..]
On Thu, 2010-01-07 at 08:42 -0500, Michel Bulgado wrote:
Bjørn Mork wrote:
Michel Bulgado mic...@casa.co.cu writes:
Try this way, remember the operator.
|312|t...@internet.quimefa.cu|Calling-Station-Id | += | 72061490
|298|t...@internet.quimefa.cu|MD5-Password | := |
Ben Wiechman wiechman.li...@gmail.com writes:
Try removing the radreply entry with auth-type := accept. Won't that
allow the user in regardless of the check items?
It should not be in the radreply table in any case so that should
certainly be removed.
But I don't think it makes any
On Thu, 2010-01-07 at 09:06 -0500, Osmany wrote:
On Thu, 2010-01-07 at 08:42 -0500, Michel Bulgado wrote:
Bjørn Mork wrote:
Michel Bulgado mic...@casa.co.cu writes:
Try this way, remember the operator.
|312|t...@internet.quimefa.cu|Calling-Station-Id | += | 72061490
On Tue, 05 Jan 2010 20:05:07 -0500, mic...@casa.co.cu wrote:
Osmany osm...@oc.quimefa.cu escribió:
Hi,
I have Freeradius configured using a mysql backend. I want users to be
able to connect only if their Calling-Station-Id is the same as the
attribute I specify in the radcheck table in
osm...@oc.quimefa.cu wrote:
On Tue, 05 Jan 2010 20:05:07 -0500, mic...@casa.co.cu wrote:
Osmany osm...@oc.quimefa.cu escribió:
Hi,
I have Freeradius configured using a mysql backend. I want users to be
able to connect only if their Calling-Station-Id is the same as the
attribute I
I tried with the above configuration by putting the number 7 in front of
the phone number and indeed the user test can only connect with that phone
number. I guess that the NAS forwards the phone number including area code.
Since that is working, now I want to add another phone
Osmany osm...@oc.quimefa.cu writes:
If you would like this test user connect from another phone number,
simply add another entry in the same table, just as you did before.
Add another entry with the Calling-Station-Id attribute? Let's see if I
understand. After I add the other entry in
On Wed, 2010-01-06 at 17:05 +0100, Bjørn Mork wrote:
Osmany osm...@oc.quimefa.cu writes:
If you would like this test user connect from another phone number,
simply add another entry in the same table, just as you did before.
Add another entry with the Calling-Station-Id attribute?
Osmany wrote:
I tried with the above configuration by putting the number 7 in front of
the phone number and indeed the user test can only connect with that phone
number. I guess that the NAS forwards the phone number including area code.
Since that is working, now I want to add
Osmany osm...@oc.quimefa.cu escribió:
Hi,
I have Freeradius configured using a mysql backend. I want users to be
able to connect only if their Calling-Station-Id is the same as the
attribute I specify in the radcheck table in mysql. For example:
EasyHorpak.com i...@easyhorpak.com wrote:
[-- text/html, encoding quoted-printable, charset: TIS-620, 66 lines --]
[-- text/plain, encoding 7bit, charset: us-ascii, 2 lines --]
Please learn to how to use an email client
*sigh*
--
Alexander Clouter
.sigmonster says: Don't hit a man
osm...@oc.quimefa.cu wrote:
?
Greetings,
I have freeradius 2.x working with MySQL database with
daloradius as a php web interface for management. I am having
trouble?specifying a calling station id for each user that I have in
the radcheck table. I can create users through daloradius
Uwe Knop wrote:
my system is Fredora Core 9. freeradius installed over yum.
we have a problem with Calling-Station-Id in raddb/users
with freeradius-2.0.5 this function properly (ISDN Phone Numbers)
... Calling-Station-Id =~ \(3311234\)|\(331345\)|\(3316789\)
With freeradius-2.1.3
When I try to do MAC auth, it shows No User, though it works fine when
I
remove the Calling-Station-Id check item from MySQL. Debug shows
quotes
around MAC.I put MAC in database with and without quotes and still
errors.
No quotes.
Any ideas?
Log into your database and post here the
Try SELECT * FROM radcheck WHERE value='00-1C-B3-B1-3E-07' and see if
that line gets listed. You might have white space around it. It should
match.
Ivan Kalik
Kalik Informatika ISP
That correctly returns it:
7 eric1328 Calling-Station-Id == 00-1C-B3-B1-3E-07
I've tried many things. Do you
Try SELECT * FROM radcheck WHERE value='00-1C-B3-B1-3E-07' and see if
that line gets listed. You might have white space around it. It should
match.
Ivan Kalik
Kalik Informatika ISP
That correctly returns it:
7 eric1328 Calling-Station-Id == 00-1C-B3-B1-3E-07
I've tried many things. Do you
hege wrote:
1. The ldap don't replace(expand) the calling-station-id to the mac
address, just one time(first)
No. *Outside* of the TLS tunnel, the Calling-Station-Id exists.
*Inside*, it doesn't.
Set copy_request_to_tunnel = yes in eap.conf, peap sub-section.
This is documented.
Hi I have a problem:
1. The ldap don't replace(expand) the calling-station-id to the mac
address, just one time(first)
first time:
[ldap] expand:
((employeeType=TRUE)(cn=%{Stripped-User-Name:-%{User-Name}})(macAddress=%{Calling-Station-Id}))
-
t...@kalik.net wrote:
Hi I have a problem:
1. The ldap don't replace(expand) the calling-station-id to the mac
address, just one time(first)
first time:
[ldap] expand:
((employeeType=TRUE)(cn=%{Stripped-User-Name:-%{User-Name}})(macAddress=%{Calling-Station-Id}))
-
hege wrote:
I have to use the dictionary.cisco.vpn3000, but if I uncomment it I get
this
error msg:
Attribute number 10 supposed to be type integer, not ipaddr. I've
fixed it in the revision control system.
Alan DeKok.
-
List info/subscribe/unsubscribe? See
When I try to do MAC auth, it shows No User, though it works fine when I
remove the Calling-Station-Id check item from MySQL. Debug shows quotes
around MAC.I put MAC in database with and without quotes and still errors.
No quotes.
Any ideas?
Log into your database and post here the result of
When I try to do MAC auth, it shows No User, though it works fine when
I
remove the Calling-Station-Id check item from MySQL. Debug shows
quotes
around MAC.I put MAC in database with and without quotes and still
errors.
No quotes.
Any ideas?
Log into your database and post here
Is there a way with Perl to make the calling-station-id query to the
database not have any symbles in it and force it to be lower case . where
the mac will look at 001e0b25ecbd
t...@kalik.net wrote:
You can use perl lc function to make sure attribute is always lower
case.
List perl before
Yes. Usual way is to strip delimiters from the caller id in hints file. A
for lower case - that depends on the database. Read the documentation
for the one you are using and see what function does it use for turning
the string into lower case.
Ivan Kalik
Kalik Informatika ISP
Dana 18/12/2008,
t...@kalik.net wrote:
You can use perl lc function to make sure attribute is always lower case.
List perl before checkval.
I personally use lower() (pgsql) and do it at the SQL server end.
Cheers
Alex
--
Alexander Clouter
.sigmonster says: We are not a clone.
-
List
li...@justinawilliams.com wrote:
I am not really up with perl... Is there any way that perl can rewrite
the request and take out either the . or : or - between characters as
well as make everything lower case?
so that the calling-station-id request would be 00197da6ad06
not
You can use perl lc function to make sure attribute is always lower case.
List perl before checkval.
Ivan Kalik
Kalik Informatika ISP
Dana 16/12/2008, li...@justinawilliams.com
li...@justinawilliams.com piše:
Is there any way to make the rlm-checkval check not case sensitive
rlm_checkval:
Is there any way that you can point me in the right direction with what i
need to do. I am not able to find any documentation on what you are saying
do.
Thanks
You can use perl lc function to make sure attribute is always lower case.
List perl before checkval.
Ivan Kalik
Kalik Informatika
Is there any way that you can point me in the right direction with what i
need to do. I am not able to find any documentation on what you are saying
do.
http://wiki.freeradius.org/Rlm_perl
http://perl.about.com/od/programmingperl/qt/perllcfunction.htm
Ivan Kalik
Kalik Informatika ISP
-
List
I am not really up with perl... Is there any way that perl can rewrite
the request and take out either the . or : or - between characters as
well as make everything lower case?
so that the calling-station-id request would be 00197da6ad06
not 00:19:7d:a6:ad:06 or 00-19-7d-a6-ad-06 or
Alan,
Honestly I have read this document but I do not see what i need to do.
On Mon, Dec 15, 2008 at 1:37 AM, Alan DeKok al...@deployingradius.comwrote:
Justin A. Williams wrote:
I see that the mac address from the calling-station-id but then it will
not login with the user.
If i
Look again. Hint: have a look at you radcheck entry and the one in the
document.
Ivan Kalik
Kalik Informatika ISP
Dana 15/12/2008, Justin A. Williams jus...@justinawilliams.com
piše:
Alan,
Honestly I have read this document but I do not see what i need to do.
On Mon, Dec 15, 2008 at
PS. You don't need checkval in inner-tunnel or you should copy request
attributes into the tunnel as well (see eap.conf, peap section).
Ivan Kalik
Kalik Informatika ISP
Dana 15/12/2008, Justin A. Williams jus...@justinawilliams.com
piše:
Alan,
Honestly I have read this document but I do not
Justin A. Williams wrote:
I see that the mac address from the calling-station-id but then it will
not login with the user.
If i delete the row 26 with calling-station-id it will permit that user
to login.
Read doc/rlm_sql. This is explained.
Alan DeKok.
-
List
Fix obvious errors:
- first line in eap.conf says not to use Auth-Type EAP
- instructions in users file (FAQ etc.) suggest a different password
attribute.
Ivan Kalik
Kalik Informatika ISP
Dana 3/3/2008, Rob [EMAIL PROTECTED] piše:
While I am using Calling-Station-Id freeradius does not
Rob wrote:
While I am using Calling-Station-Id freeradius does not authenicate
user. Without calling-station-id (user Rob) works Ok. Can anybody
point me where is the problem?
Checkval exists in radiusd.conf.
Checkval isn't needed. I have no idea why you would use it here.
Freeradius
Hi,
Is there a way to tell pam_radius_auth to send a value in
Calling-Station-Id?
Source code edits.
I might do that, but...
Is there a way at all to send variables to PAM at all, to be used for
setting Calling-Station-Id within pam_radius_auth?
Source code edits.
... that
Stefan Winter wrote:
Source code edits.
... that would be *PAM* source code edits? Yuck. It's not that important.
No.. The pam_radius_auth code could be updated.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Stefan Winter wrote:
Is there a way to tell pam_radius_auth to send a value in Calling-Station-Id?
Source code edits.
Is there a way at all to send variables to PAM at all, to be used for setting
Calling-Station-Id within pam_radius_auth?
Source code edits.
Alan DeKok.
-
List
Stefan Adams wrote:
Is there anyway that I can rewrite the Calling-Station-ID to the name of
the PC instead of the MAC address? This table can be found in LDAP or
even in DHCP. Is there a way to call an external program
See the exec module. It's in radiusd.conf.
And DHCP servers
On Mon, 2007-08-27 at 19:00 -0500, Stefan Adams wrote:
Is there anyway that I can rewrite the Calling-Station-ID to the name
of the PC instead of the MAC address? This table can be found in LDAP
In which case, you might be able to do it in the hints file with an
ldap: xlat
DEFAULT
-Norbert Grochal [EMAIL PROTECTED] wrote:
Is it possible to use verification of Calling-Station-Id in EAP/PEAP ?
Yes.
and I have an error:
rlm_eap_peap: EAPTLS_OK
rlm_eap_peap: Session established. Decoding tunneled attributes.
rlm_eap_peap: Received EAP-TLV response.
Christiaan Ehlers [EMAIL PROTECTED] wrote:
If this is not supported by the accounting, is there a way to get it from
the authentication section?
Source code modifications. Find the code in the authentication
section that adds Calling-Station-Id, and add the same code to the
accounting
Joel n.solanki [EMAIL PROTECTED] wrote:
I am not getting Calling-Station-Id in the request info. Can anybody
help me.
If the NAS isn't sending it, there's nothing you can do to the
RADIUS server to get that data.
Alan DeKok.
-
List info/subscribe/unsubscribe? See
kolargol [EMAIL PROTECTED] wrote:
I have problem with Calling-Station-Id set up in user file:
kolargol User-Password == xxx, Calling-Station-Id == 000ce5475611
during auth debug log shows:
Not much of anything useful.
As a hint: reading the last little bit of the debug log isn't
, October 19, 2004 9:41 PM
To: [EMAIL PROTECTED]
Subject: Re: Calling-Station-ID
Gene Rouse wrote:
OK. I finally got my NAS to talk to freeRADIUS. Since we are a totally
wireless ISP and don't want usernames and passwords (except for the email
servers) how can we configure freeRADIUS
Gene Rouse wrote:
OK. I finally got my NAS to talk to freeRADIUS. Since we are a totally
wireless ISP and don't want usernames and passwords (except for the email
servers) how can we configure freeRADIUS to authenticate on the MAC address
of the wireless client only?
Very bad idea since MAC
73 matches
Mail list logo