Re: ippool-dhcp and Oracle

2013-06-09 Thread Alan DeKok
Бен Томпсон wrote: I am still testing ippool-dhcp and after updating to the latest git HEAD I have come across a new issue. For some reason I am seeing the error Unknown attribute regarding the variable %{pool-key}. That's because the Pool-Key attribute doesn't exist. The example

Re: ippool-dhcp and Oracle

2013-06-09 Thread Бен Томпсон
Many thanks. 2013/6/9 Alan DeKok al...@deployingradius.com Бен Томпсон wrote: I am still testing ippool-dhcp and after updating to the latest git HEAD I have come across a new issue. For some reason I am seeing the error Unknown attribute regarding the variable %{pool-key}. That's

Re: ippool-dhcp and Oracle

2013-06-09 Thread Бен Томпсон
Hello everyone After fixing my mistake with the $ versus % symbols I tried ippool-dhcp again. My select statement worked and allocated an IP from the pool, but it seems that all the other sql statements (update and commit) generated the error (0) ERROR: dhcp_sqlippool : database query error

Re: ippool-dhcp and Oracle

2013-03-31 Thread Бен Томпсон
Many thanks. I will give it a try. I am still working on this but, I have some further issues which I need to resolve. Firstly the ippool table for the oracle ippool schema contains various columns which are defined as NOT NULL: CREATE TABLE radippool ( id INT PRIMARY KEY

Re: ippool-dhcp and Oracle

2013-03-31 Thread Alan DeKok
Бен Томпсон wrote: Firstly the ippool table for the oracle ippool schema contains various columns which are defined as NOT NULL: That is probably too strong a requirement. CREATE TABLE radippool ( id INT PRIMARY KEY, pool_name VARCHAR(30) NOT NULL, framedipaddress

Re: ippool-dhcp and Oracle

2013-03-25 Thread Arran Cudbard-Bell
I am not sure what is happening here so I will have to do some reading. Fixed. Git pull. -Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: ippool-dhcp and Oracle

2013-03-25 Thread Arran Cudbard-Bell
On 25 Mar 2013, at 02:57, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: I am not sure what is happening here so I will have to do some reading. Fixed. Git pull. Or would have been if git push hadn't hung... Sorry GitHub has been really flakey lately. -Arran - List

Re: ippool-dhcp and Oracle

2013-03-25 Thread Бен Томпсон
2013/3/25 Arran Cudbard-Bell a.cudba...@freeradius.org: On 25 Mar 2013, at 02:57, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: I am not sure what is happening here so I will have to do some reading. Fixed. Git pull. Or would have been if git push hadn't hung... Sorry GitHub has

Re: ippool-dhcp and Oracle

2013-03-24 Thread Бен Томпсон
2013/3/23 Бен Томпсон b.thomp...@latera.ru: 2013/3/23 Arran Cudbard-Bell a.cudba...@freeradius.org: On 23 Mar 2013, at 12:22, Бен Томпсон b.thomp...@latera.ru wrote: Hello Everyone Could anyone advise me what would be required to us dhcp-ippool with Oracle? I had a quick look through

Re: ippool-dhcp and Oracle

2013-03-24 Thread Alan DeKok
Бен Томпсон wrote: I began work on testing with Oracle but I have come across a couple of issues. Firstly one of my SQL statements is throwing up an error, and secondly the server is sending a unicast reply when I need a broadcast. I should be able to fix the dodgy SQL but I wondered if

Re: ippool-dhcp and Oracle

2013-03-24 Thread Бен Томпсон
2013/3/24 Alan DeKok al...@deployingradius.com: Бен Томпсон wrote: I began work on testing with Oracle but I have come across a couple of issues. Firstly one of my SQL statements is throwing up an error, and secondly the server is sending a unicast reply when I need a broadcast. I should be

Re: ippool-dhcp and Oracle

2013-03-24 Thread Alan DeKok
Бен Томпсон wrote: The SQL statement START TRANSACTION looks to be hard coded into rlm_sqlippool.c but I don't know enough about Oracle etiher to say why it is flagged as an error. It's a configuration item. You can change it by editing the queries, and adding: allocate-begin = ...

Re: ippool-dhcp and Oracle

2013-03-24 Thread Бен Томпсон
2013/3/25 Alan DeKok al...@deployingradius.com: Бен Томпсон wrote: The SQL statement START TRANSACTION looks to be hard coded into rlm_sqlippool.c but I don't know enough about Oracle etiher to say why it is flagged as an error. It's a configuration item. You can change it by editing the

ippool-dhcp and Oracle

2013-03-23 Thread Бен Томпсон
Hello Everyone Could anyone advise me what would be required to us dhcp-ippool with Oracle? I had a quick look through the files in git and it seems to me that the only thing missing is queries.conf? If that is all that is required I am happy to do the work of porting the sql queries from

Re: ippool-dhcp and Oracle

2013-03-23 Thread Arran Cudbard-Bell
On 23 Mar 2013, at 12:22, Бен Томпсон b.thomp...@latera.ru wrote: Hello Everyone Could anyone advise me what would be required to us dhcp-ippool with Oracle? I had a quick look through the files in git and it seems to me that the only thing missing is queries.conf? If that is all

Re: ippool-dhcp and Oracle

2013-03-23 Thread Бен Томпсон
2013/3/23 Arran Cudbard-Bell a.cudba...@freeradius.org: On 23 Mar 2013, at 12:22, Бен Томпсон b.thomp...@latera.ru wrote: Hello Everyone Could anyone advise me what would be required to us dhcp-ippool with Oracle? I had a quick look through the files in git and it seems to me that the only

IPv6 sql ippool

2012-07-06 Thread Josip Almasi
Hi all, ippool can't handle IPv6 addresses, but sql ippool should be able to, right? At least in postgres, inet data type accepts both v4 and v6 addresses. Anyone using it? Any handy tools to fill the database/generate pool addresses? Any other hints? Regards... - List info/subscribe

Re: FreeRADIUS SQl Ippool problem -

2012-07-01 Thread Taz Manian
Will do guys , thanks again for the assistance and advice with this. -Original Message- From: John Dennis Sent: Friday, June 29, 2012 8:24 PM To: FreeRadius users mailing list Cc: dj...@iol.ie ; Alan DeKok Subject: Re: FreeRADIUS SQl Ippool problem - On 06/29/2012 02:54 PM, Alan DeKok

RE: FreeRADIUS SQl Ippool problem -

2012-06-29 Thread Taz Manian
:=1500 2 EZ_POOL_NAME Service-Type :=Framed-User 3 EZ_POOL_NAME Framed-Protocol :=PPP If theres anything im missing it would help Thanks Date: Thu, 28 Jun 2012 20:38:52 +0700 Subject: Re: FreeRADIUS SQl Ippool problem - From: l...@fajar.net To: dj...@iol.ie; freeradius

Re: FreeRADIUS SQl Ippool problem -

2012-06-29 Thread Alan DeKok
Taz Manian wrote: Can you guys confirm that this is the correct format for the SQl side of things please ? Im still having problems and just want to confirm that this is correct. It's not. mysql select * from radcheck; ++++++ |

RE: FreeRADIUS SQl Ippool problem -

2012-06-29 Thread Taz Manian
-0400 From: al...@deployingradius.com To: dj...@iol.ie; freeradius-users@lists.freeradius.org Subject: Re: FreeRADIUS SQl Ippool problem - Taz Manian wrote: Can you guys confirm that this is the correct format for the SQl side of things please ? Im still having problems and just want

Re: FreeRADIUS SQl Ippool problem -

2012-06-29 Thread Fajar A. Nugraha
On Fri, Jun 29, 2012 at 8:46 PM, Taz Manian djta...@hotmail.com wrote: But the username isnt the problem, that authenticates properly and if i put in You should fix that. There might be a compatibility code that allows it to work today, but the next versions might not have it. I get no info

RE: FreeRADIUS SQl Ippool problem -

2012-06-29 Thread Taz Manian
in 4.9 seconds.Date: Fri, 29 Jun 2012 20:57:50 +0700 Subject: Re: FreeRADIUS SQl Ippool problem - From: l...@fajar.net To: dj...@iol.ie; freeradius-users@lists.freeradius.org On Fri, Jun 29, 2012 at 8:46 PM, Taz Manian djta...@hotmail.com wrote: But the username isnt the problem

Re: FreeRADIUS SQl Ippool problem -

2012-06-29 Thread Fajar A. Nugraha
On Fri, Jun 29, 2012 at 9:19 PM, Taz Manian djta...@hotmail.com wrote: [sql]   expand: SELECT id, groupname, attribute,   Value, op   FROM radgroupcheck   WHERE groupname = '%{Sql-Group}'   ORDER BY id - SELECT id, groupname, attribute,   Value, op   

Re: FreeRADIUS SQl Ippool problem -

2012-06-29 Thread Alan DeKok
Taz Manian wrote: but one silly mistake caused me to try so many different things that i got myself mixed up with it all. THAT is really the problem. Trying many different things is always a disaster. Follow the instructions *exactly*. Step by step. Trying many things means you don't

Re: FreeRADIUS SQl Ippool problem -

2012-06-29 Thread John Dennis
On 06/29/2012 02:54 PM, Alan DeKok wrote: Taz Manian wrote: but one silly mistake caused me to try so many different things that i got myself mixed up with it all. THAT is really the problem. Trying many different things is always a disaster. Follow the instructions *exactly*. Step by

FreeRADIUS SQl Ippool problem -

2012-06-28 Thread Taz Manian
Hi Guys, Im having a problem with Ippools with freeradius2 and i cant seem to get any username to get an address from the pool.90% of the usernames will have static IP's but i want a few to be in a pool but i really am stumped - i tried putting username@realm Framed-Pool := EZPOOL into

Re: FreeRADIUS SQl Ippool problem -

2012-06-28 Thread Fajar A. Nugraha
On Thu, Jun 28, 2012 at 7:03 PM, Taz Manian djta...@hotmail.com wrote: Hi Guys, Im having a problem with Ippools with freeradius2 and i cant seem to get any username to get an address from the pool. 90% of the usernames will have static IP's but i want a few to be in a pool but i really

Re: FreeRADIUS SQl Ippool problem -

2012-06-28 Thread Fajar A. Nugraha
On Thu, Jun 28, 2012 at 7:08 PM, Fajar A. Nugraha l...@fajar.net wrote: On Thu, Jun 28, 2012 at 7:03 PM, Taz Manian djta...@hotmail.com wrote: so i know is readying that - i then have a pool set up in radippool Also, IMHO you should just use rlm_sqlipool. It's easier to setup and debug.

Re: FreeRADIUS SQl Ippool problem -

2012-06-28 Thread Michell
Hello, to some time ago informed me that the ippool not work properly with mysql. As it is now? I'm not sure what the problems were occurring, but informed me that it worked better and smoothly only in postgres. They try to succeed in this scenario freeradius / mysql? Thanks for listening

Re: FreeRADIUS SQl Ippool problem -

2012-06-28 Thread Alan DeKok
Michell wrote: to some time ago informed me that the ippool not work properly with mysql. As it is now? someone somewhere said something. That's not helpful. Read the documentation and examples distributed with FreeRADIUS. They give you the CORRECT answers. In this case, raddb/sql

Re: FreeRADIUS SQl Ippool problem -

2012-06-28 Thread Fajar A. Nugraha
On Thu, Jun 28, 2012 at 7:26 PM, Michell bill.c...@gmail.com wrote: Hello, to some time ago informed me that the ippool not work properly with mysql. It works just fine As it is now? I'm not sure what the problems were occurring, but informed me that it worked better and smoothly only

RE: FreeRADIUS SQl Ippool problem -

2012-06-28 Thread Taz Manian
://wiki.freeradius.org/Users http://wiki.freeradius.org/Ippool%20and%20radius%20clients I checked each one of them and not one said anything about radcheck or radreply. I checked on Google and found some pages that said TO USE Framed-Pool , and i could see that when i ran radiusd -XI just tried using Pool

Re: FreeRADIUS SQl Ippool problem -

2012-06-28 Thread Alan DeKok
Taz Manian wrote: I checked each one of them and not one said anything about radcheck or radreply. Because they give examples for the users file. They don't give examples for SQL, LDAP, external programs, Perl, Python, etc. The users file example has the Pool-Name on the first line. The

Re: FreeRADIUS SQl Ippool problem -

2012-06-28 Thread Fajar A. Nugraha
://wiki.freeradius.org/Rlm_sqlippool Did you notice I specifically mentioned that page? http://wiki.freeradius.org/Rlm_ippool http://wiki.freeradius.org/Users http://wiki.freeradius.org/Ippool%20and%20radius%20clients I checked each one of them and not one said anything about radcheck or radreply. Did

Ippool giving gateway addresses

2011-10-17 Thread Alejandro Gandara
Hi List, I have two doubts which I couldn't resolv properly. I'll be so pleased if someone could give me a hand. 1º There is any way to configure ippool to give a gateway for each configured pool? 2º How I could check the bind addresses in db.* files? 3º Radiuis-Framed-Routing is used

Re: Ippool giving gateway addresses

2011-10-17 Thread Alejandro Gandara
ippool to give a gateway for each configured pool? Short version: no. Long answer: AFAIK rlm_ipool and rlm_sqlippool only hand-out IP addresses in Framed-IP-Address attribute. However, if you use rlm_sqlippool, it should be easy enough to have an additional custom sql table (or additional

Re: Ippool giving gateway addresses

2011-10-17 Thread Fajar A. Nugraha
by keys, where could I find the map (or relation)  of keys with users?. I need know which Users is conneceted which each IP. I don't think you can with ippool. Try sqlippool instead, which has username column. 3º Radiuis-Framed-Routing is used to configure a gateway for each profile? See

Re: Ippool giving gateway addresses

2011-10-17 Thread Alejandro Gandara
. When I use this tool I got users identified by keys, where could I find the map (or relation) of keys with users?. I need know which Users is conneceted which each IP. I don't think you can with ippool. Try sqlippool instead, which has username column. Ok I will try. 3º Radiuis

Re: Include directive for separate ippool configs not working

2011-07-04 Thread Tom De Vylder
On 01 Jul 2011, at 19:44, Alan DeKok wrote: Tom De Vylder wrote: I'd like to integrate freeradius into a config management framework. In order for this to work with multiple ippool instances I've decided to create a ippool.d/ directory containing several config files. Those files

Re: Include directive for separate ippool configs not working

2011-07-04 Thread Tom De Vylder
On 04 Jul 2011, at 10:19, Fajar A. Nugraha wrote: On Mon, Jul 4, 2011 at 3:02 PM, Tom De Vylder t...@penumbra.be wrote: On 01 Jul 2011, at 19:44, Alan DeKok wrote: pool1.conf: ippool main_pool { range-start = 192.168.10.1 range-stop = 192.168.10.254

Re: Include directive for separate ippool configs not working

2011-07-04 Thread Fajar A. Nugraha
/freeradius/ippool.d/ippool-config1.conf including configuration file /etc/freeradius/ippool.d/ippool-config2.conf That's not in your first mail (instead it was foobar.conf) However none of the configuration settings show up. When I grep for session-db on the logs with radius running in debug mode

Re: Include directive for separate ippool configs not working

2011-07-04 Thread Alan DeKok
configuration file /etc/freeradius/ippool.d/ippool-config1.conf including configuration file /etc/freeradius/ippool.d/ippool-config2.conf However none of the configuration settings show up. What, exactly do you mean by that? That statement is semantically equivalent to it doesn't work. I'll

Re: Include directive for separate ippool configs not working

2011-07-04 Thread Fajar A. Nugraha
On Mon, Jul 4, 2011 at 3:02 PM, Tom De Vylder t...@penumbra.be wrote: On 01 Jul 2011, at 19:44, Alan DeKok wrote: pool1.conf: ippool main_pool {            range-start = 192.168.10.1            range-stop = 192.168.10.254            [ ... ]    } pool2.conf    ippool secondary_pool

Include directive for separate ippool configs not working

2011-07-01 Thread Tom De Vylder
Hi all, I'd like to integrate freeradius into a config management framework. In order for this to work with multiple ippool instances I've decided to create a ippool.d/ directory containing several config files. Loading the config files itself is not a problem, however placement of the include

Re: Include directive for separate ippool configs not working

2011-07-01 Thread Alan DeKok
Tom De Vylder wrote: I'd like to integrate freeradius into a config management framework. In order for this to work with multiple ippool instances I've decided to create a ippool.d/ directory containing several config files. Those files are... ? That information might help. Loading

Re: Call IPPool / SQLIPPool manually

2011-01-02 Thread Phil Mayers
On 01/01/2011 08:56 PM, Marten Pape wrote: But back to Topic: Is it possible to call a module manually in another section? I'd like to Yes, IIRC: accounting { ippool.post-auth } This might fail for other reasons (for example, the accounting request might not contain required fields).

Re: Call IPPool / SQLIPPool manually

2011-01-01 Thread Marten Pape
Alan DeKok schrieb: Marten Pape wrote: Ji Bryan, hi all, Does anyone know such a dhcp server (couldn't figure out such a feature in ISC dhcp server) or a script that transfers this? So I wouldn't have to script this on my own. The ISC DHCP server doesn't have this feature.

Re: Call IPPool / SQLIPPool manually

2011-01-01 Thread Marten Pape
Alan DeKok schrieb: Marten Pape wrote: Ji Bryan, hi all, Does anyone know such a dhcp server (couldn't figure out such a feature in ISC dhcp server) or a script that transfers this? So I wouldn't have to script this on my own. The ISC DHCP server doesn't have this feature.

Re: Call IPPool / SQLIPPool manually

2010-12-29 Thread Marten Pape
program needs to know, which IP should be assigned to the Client. Therefore I need to set up an IP-Pool management - which IP is in use, which one not? The modules ippool and espacially sqlippool are very nice to use and configure. Is it possible to execute them manually? I'd like to retrieve

Re: Call IPPool / SQLIPPool manually

2010-12-29 Thread Alan DeKok
Marten Pape wrote: Ji Bryan, hi all, Does anyone know such a dhcp server (couldn't figure out such a feature in ISC dhcp server) or a script that transfers this? So I wouldn't have to script this on my own. The ISC DHCP server doesn't have this feature. FreeRADIUS, however, can work as a

Re: Call IPPool / SQLIPPool manually

2010-12-27 Thread Bryan Rank
in the accounting-section of the default-server. This external program needs to know, which IP should be assigned to the Client. Therefore I need to set up an IP-Pool management - which IP is in use, which one not? The modules ippool and espacially sqlippool are very nice to use and configure

Call IPPool / SQLIPPool manually

2010-12-25 Thread Marten Pape
that is called in the accounting-section of the default-server. This external program needs to know, which IP should be assigned to the Client. Therefore I need to set up an IP-Pool management - which IP is in use, which one not? The modules ippool and espacially sqlippool are very nice to use

ippool and disconnection

2010-10-28 Thread Michele Petrazzo - Unipex
Hi list, I have an installation with freeradius 2.1.9, postgresql like db and pppoe server more than one mikrotik routerboards. Like now I'm making some test and, a part that all seem to work well (users can connected to the chain pppoe-server mikrotik - freeradius - db), I see a strange thing

Re: ippool and disconnection

2010-10-28 Thread Nick Warr
We use the same sort of setup, have a look through your radius.log at the same time that the unclosed accounting session went bad, you'll probably find that you have a lot of duplicate discarded records. We're looking into some solutions ourselves, as mikrotik will often take requests from

ippool and cache-size

2010-09-13 Thread Konstantin Chekushin
Hi all. I have a question about rlm_ippool and cache-size option. Info from description: cache-size: The gdbm cache size for the db files. Should be equal to the number of ip's available in the ip pool. Also, note the cache size matches the number of IP's in your pool. More is OK but

Re: ippool and cache-size

2010-09-13 Thread Alan DeKok
Konstantin Chekushin wrote: My pool size is 32k. And I'm using this pool only for fallback issue. So, I'll need it rarely in the future. For 32K IP's, I'd suggest using a database. If cache-size = 32768, then radiusd process takes all memory. Mon Sep 13 12:33:46 2010 : Error: Couldn't

Re: ippool and cache-size

2010-09-13 Thread Konstantin Chekushin
Thanks for advice, but I am using database for main solution (I've writen my module for this issue, which uses rlm_sql functions for sql logic). And I wont to use file-based for redundancy only. So, the main question - what will happens, if query-cache will be less, then ip-range? I have

Re: ippool and cache-size

2010-09-13 Thread Alan DeKok
Konstantin Chekushin wrote: Thanks for advice, but I am using database for main solution (I've writen my module for this issue, which uses rlm_sql functions for sql logic). And I wont to use file-based for redundancy only. So, the main question - what will happens, if query-cache will be less,

Re: sql + ippool + redundancy

2010-02-04 Thread Konstantin Chekushin
I just started to learn source code of rlm_sqlippool.c to make changes for my issue. (I want to make sensitive return code from sqlippool_command and check it in sqlippool_postauth and if something goes wrong, then at once try to allocate next sql connection from the pool until I'll get an error

Re: sql + ippool + redundancy

2010-02-04 Thread Alan DeKok
Konstantin Chekushin wrote: I just started to learn source code of rlm_sqlippool.c to make changes for my issue. (I want to make sensitive return code from sqlippool_command and check it in sqlippool_postauth and if something goes wrong, then at once try to allocate next sql connection from

sql + ippool + redundancy

2010-02-03 Thread Konstantin Chekushin
Hi! I have a question about failover configuration. I have freeradius + sqlippool module for ip-assigning. I have 2 databases for redundancy (described in sql1 and sql2). my file from enabled-server: server allauth { #160;#160;#160;#160;#160;#160;#160; listen {

Freeradius 2.1.7 with IPPool + MySQL + Solaris 10 on sparc v490

2009-12-11 Thread Hermes Ramon Velazquez Allende
Hello, I need you're help I can't compile the freeradius 2.1.7 on Solaris SunV490, I have the next messages when I try to compile the source of freeradius.2.1.7: I have the next configure opcion: bash-3.00# crle Configuration file [version 4]: /var/ld/ld.config Default Library Path (ELF):

Re: Static ippool based on NAS source

2009-12-07 Thread Fajar A. Nugraha
On Mon, Dec 7, 2009 at 2:03 PM, Alan DeKok al...@deployingradius.com wrote: rena...@flash.net.br wrote: I was afraid of using sqlippool because the DB of this server is MySQL and there is a warning about that in FreeRadius:  #  WARNING: MySQL has certain limitations that means it can  #      

Re: Static ippool based on NAS source

2009-12-07 Thread Alan DeKok
Fajar A. Nugraha wrote: So to be clear: the issue would not exist with engines that support transaction? Including ndb (MySQL cluster) and falcon? Yes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Static ippool based on NAS source

2009-12-06 Thread renator
NAS again and other if it connects from the other NAS, the nearest possible of an static IP served by the Radius server via IPPOOL. We have a limitation because the gprs operator's demands the same login/password for all the mobiles. Today we use, based in what I read in this list

Re: Static ippool based on NAS source

2009-12-06 Thread tnt
So, trying to be clear, what we need is: IF mobile CONNECTS via NAS1 - Gets IP from pool1 IF mobile CONNECTS via NAS1 again - Gets THE same IP from pool1 IF mobile CONNECTS via NAS2 - Gets IP from pool2 IF mobile CONNECTS via NAS2 again - Gets THE same IP from pool2

Re: Static ippool based on NAS source

2009-12-06 Thread renator
I was afraid of using sqlippool because the DB of this server is MySQL and there is a warning about that in FreeRadius: # WARNING: MySQL has certain limitations that means it can # hand out the same IP address to 2 different users. Because of this I would like to try via config file

Re: Static ippool based on NAS source

2009-12-06 Thread Alan DeKok
rena...@flash.net.br wrote: I was afraid of using sqlippool because the DB of this server is MySQL and there is a warning about that in FreeRadius: # WARNING: MySQL has certain limitations that means it can # hand out the same IP address to 2 different users. Because of this

Re: LDAP and IPPool

2009-11-09 Thread tnt
I am trying to authenticate users via Freeradius 2.1.7 against LDAP. I would like to use a checkItem to determine ippool assignment to give users an IP address from defined pools. The LDAP portion is working correctly but I receive the message Could not find Pool-Name attribute in my debug

Re: ippool or sqlippool support for EAP/TLS or TTLS on Wimax

2009-09-04 Thread Jay Xiong
particular concern regarding ip pool assignment using sqlipppol? Thanks, Jay On Fri, Sep 4, 2009 at 1:51 AM, Alan DeKok al...@deployingradius.comwrote: Victor Tangendjaja wrote: I read from a post back in 2007 that freeRADIUS ippool or sqlippool does not support assigning IP via EAP/TLS. I

ippool or sqlippool support for EAP/TLS or TTLS on Wimax

2009-09-03 Thread Victor Tangendjaja
Hi, I read from a post back in 2007 that freeRADIUS ippool or sqlippool does not support assigning IP via EAP/TLS. I was wondering if this is still the case? Alan mentioned that there would be options that might be part of 2.0 release. Is there any solution for this with the current release

Re: ippool or sqlippool support for EAP/TLS or TTLS on Wimax

2009-09-03 Thread Alan DeKok
Victor Tangendjaja wrote: I read from a post back in 2007 that freeRADIUS ippool or sqlippool does not support assigning IP via EAP/TLS. I was wondering if this is still the case? Yes. Because when 802.1X is used, IP address assignment is done via DHCP. Alan mentioned that there would

Re: Using ippool and how to pass DHCP Options

2009-07-02 Thread Alan DeKok
Zemke, Kai wrote: just a question for my understanding. When using the modules rlm_ippool or rlm_sqlippool, IP Adressses from a pool get assigned to the remote device as framed-ip-address. In RADIUS... What I’m wondering about is, in case that I start using this type of address

Using ippool and how to pass DHCP Options

2009-07-01 Thread Zemke, Kai
Hi everyone, just a question for my understanding. When using the modules rlm_ippool or rlm_sqlippool, IP Adressses from a pool get assigned to the remote device as framed-ip-address. What I'm wondering about is, in case that I start using this type of address distribution, how can I pass for

Re: Using ippool and how to pass DHCP Options

2009-07-01 Thread Ivan Kalik
just a question for my understanding. When using the modules rlm_ippool or rlm_sqlippool, IP Adressses from a pool get assigned to the remote device as framed-ip-address. What I'm wondering about is, in case that I start using this type of address distribution, how can I pass for example DHCP

FreeRADIUS / ippool / Wireless

2009-03-24 Thread Tim Gustafson
Hi, I'm using FreeRADIUS 2.1.3 on FreeBSD 7.1 to authorize users on my Cisco 1200 WAPs. I was wondering if it is possible to use ippools to assign client IPs rather than having them use DHCP, and I Googled around a bit and found a message that said this can't be done. I was curious if it

Re: FreeRADIUS / ippool / Wireless

2009-03-24 Thread tnt
If it can't be done, I would love to hear any feedback people have about how to map wireless users to IP addresses. Has anyone else figured out a way to be able to record this kind of data without resorting to matching MAC addresses from the radius accounting records with data in a DHCP server

Re: using Calling-Station-Id to give ippool name to vpn server

2009-02-16 Thread tnt
there is a radius server with VPN server as its nas. radius server use ldap server in back end for authentication and authorization. we want if Calling-Station-Id of user is valid radius could give ippool number=1 in access reply to vpn server and if Calling-Station-Id of user is invalid could

using Calling-Station-Id to give ippool name to vpn server

2009-02-15 Thread Eric
Hi. there is a radius server with VPN server as its nas. radius server use ldap server in back end for authentication and authorization. we want if Calling-Station-Id of user is valid radius could give ippool number=1 in access reply to vpn server and if Calling-Station-Id of user is invalid

Re: ippool per NAS

2008-11-28 Thread thoralf . freitag
It doesn't make sense. And ist doesn't work. Hi Alan, do you have an idea ? Thanks for our support. TF From: [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Date: 28.11.08 00:11 Subject: Re: ippool per NAS Sent by: [EMAIL PROTECTED] file: users

Re: ippool per NAS

2008-11-28 Thread Alan DeKok
[EMAIL PROTECTED] wrote: It doesn't make sense. And ist doesn't work. Hi Alan, do you have an idea ? Thanks for our support. All I can say is that it works for me. What *else* is going on? You haven't posted the contents of the Access-Request packet... maybe they don't match! Alan

Re: ippool per NAS

2008-11-28 Thread thoralf . freitag
Cellular:+49 (0) 151 1631-4611 Fax:+49 (0) 30 68905-2940 Mail: [EMAIL PROTECTED] From: Alan DeKok [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Date: 28.11.08 09:43 Subject: Re: ippool per NAS Sent by: [EMAIL PROTECTED] [EMAIL PROTECTED] wrote

Re: ippool per NAS

2008-11-28 Thread Alan DeKok
[EMAIL PROTECTED] wrote: thanks for your quick response. As described, all works fine in 2.0.5. Here the Access-Request: So far as I can tell, nothing changed from 2.0.5 to 2.1.x that should affect this. Are you sure it's reading the users file you're editing? Try also moving that entry

Re: ippool per NAS

2008-11-28 Thread Alan DeKok
[EMAIL PROTECTED] wrote: The files readable for the user (and for testing purposes for all). I tried two ways. 1st) I took the working configuration from 2.0.5. 2nd) I build a new configuration with the files comming with 2.1.1 The configuration from 2.0.5 *should* pretty much work with

Re: ippool per NAS

2008-11-28 Thread thoralf . freitag
Fax:+49 (0) 30 68905-2940 Mail: [EMAIL PROTECTED] From: Alan DeKok [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Date: 28.11.08 10:30 Subject: Re: ippool per NAS Sent by: [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: thanks for your quick

Re: ippool per NAS

2008-11-28 Thread Alan DeKok
[EMAIL PROTECTED] wrote: Isn't it what you suggested - to put all into the users file ? No. Simplify the problem. Take that ONE entry, and out it at the TOP of the users file. Yes, it might break other things. At this point, who cares... you need to debug the problem before you make it

Re: ippool per NAS

2008-11-28 Thread thoralf . freitag
) are not used . For me it seems, the sql module do anything other than in 2.0.x ? From: Alan DeKok [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Date: 28.11.08 11:42 Subject: Re: ippool per NAS Sent by: [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: The files

ippool per NAS

2008-11-27 Thread thoralf . freitag
Since I changed to Freeradius 2.1.1 the ippols are not selected successfull. In 2.0.x my config is file: users # default ippools per NAS $INCLUDE users.ippools file: users.ippools # Addresspool for ll-us DEFAULT NAS-IP-Address == 172.16.30.2, Pool-Name := ll-us_pool Fall-Through =

Re: ippool per NAS

2008-11-27 Thread tnt
file: users # default ippools per NAS $INCLUDE users.ippools It looks like include doesn't work in users (? any more). file: users.ippools # Addresspool for ll-us DEFAULT NAS-IP-Address == 172.16.30.2, Pool-Name := ll-us_pool Fall-Through = Yes Just copy the content of users.ippools

Re: ippool management and cluster

2008-09-26 Thread Alan DeKok
Alexandre Chapellon wrote: The servers will have to communicate with each other before handing out IP addresses. Is it a featured in freeradius? No. That code would need to be written. I thought about it but not managing a huge number of ippool (for different type of users

Re: ippool management and cluster

2008-09-26 Thread Alan DeKok
Michael Schwartzkopff wrote: Think about using DRBD. It's very often more efficient to implement application-aware replication. i.e. replication that knows about the data it's contents. Using DRDB may be much higher overhead than simply proxying RADIUS packets. Alan DeKok. - List

Re: ippool management and cluster

2008-09-26 Thread Alexandre Chapellon
of ippool (for different type of users, differents huntgroups, and differents radius servers) would be a great advantage of freeradius among other radius server (I am comapring it with juniper SBR at the moment). I'm not sure *any* RADIUS server has this functionality. It's usually

Re: ippool management and cluster

2008-09-26 Thread tnt
Why enabling replication? Isn't it possible to have one centralized database for all radius server? Ahem, even a single radius server is so much faster than the database. That arrangement is doomed. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See

Re: ippool management and cluster

2008-09-26 Thread Alexandre Chapellon
[EMAIL PROTECTED] a écrit : Why enabling replication? Isn't it possible to have one centralized database for all radius server? Ahem, even a single radius server is so much faster than the database. That arrangement is doomed. Well, actually here is how i wanted to set things up:

Re: ippool management and cluster

2008-09-26 Thread Alan DeKok
Alexandre Chapellon wrote: I'm not sure *any* RADIUS server has this functionality. It's usually done as part of the database replication, etc. Why enabling replication? Isn't it possible to have one centralized database for all radius server? You really don't want that. RADIUS

Re: ippool management and cluster

2008-09-26 Thread Alan DeKok
Alexandre Chapellon wrote: Each radius have a local mysql database to locally store accounting data. If nothing will be querying those databases, I suggest *not* using SQL. It's just not needed. Each local database is replicated to a central database which couls be used too as a redundancy

Re: ippool management and cluster

2008-09-26 Thread Alexandre Chapellon
Alan DeKok a écrit : Alexandre Chapellon wrote: Each radius have a local mysql database to locally store accounting data. If nothing will be querying those databases, I suggest *not* using SQL. It's just not needed. Right, nothing will query the database directly on radius

Re: ippool management and cluster

2008-09-26 Thread Alan DeKok
Alexandre Chapellon wrote: Right, nothing will query the database directly on radius servers. Then don't put a database there. But i really need to have one central database that will be queried by webapps to let users know about thier quota left, time of connection etc... Then put a

Re: ippool management and cluster

2008-09-26 Thread Arran Cudbard-Bell
Again, using *one* database for *many* RADIUS servers is very likely wrong. i.e. it will be slow, fragile, and is likely to not meet your needs of high availability. Alan is saying a single MySQL instance is fragile because it's a single point of failure. Clustered SQL is bad because

  1   2   3   4   >