Re: (RADIATOR) Packet of Death (Disconnect)

2003-10-20 Thread Hugh Irvine
Hello Rabbie - What you are describing is the Radius Disconnect-Request. It is a seperate request type, not an attribute. You can generate a Disconnect-Request using radpwtst. bash-2.05a$ perl radpwtst -h usage: radpwtst [-h] [-time] [-iterations n] [-trace [level]] [-s server]

Re: (RADIATOR) Handler SIP Proxy

2003-10-17 Thread Hugh Irvine
Hello Frank, Hello Jesus - Frank is quite correct (thanks as always). If you have multiple Client clauses you might consider using a PreClientHook instead. And I usually keep my hook code in seperate files - see the examples in goodies/hooks.txt. regards Hugh On Saturday, Oct 18, 2003, at

Re: (RADIATOR) Log only valid Login accounting

2003-10-17 Thread Hugh Irvine
Hello Chanaka - You will only ever receive accounting requests from valid logons. If an access request is rejected, no session will start and hence no accounting requests will be sent. regards Hugh On Friday, Oct 17, 2003, at 21:05 Australia/Melbourne, Chanaka Mendis wrote: Hi ALL I need

Re: (RADIATOR) Correct system hour in log files

2003-10-17 Thread Hugh Irvine
Hello Sergio - Radiator uses the time from your system, so it sounds like the time zone is not correctly set. regards Hugh On Friday, Oct 17, 2003, at 20:10 Australia/Melbourne, Sergio Gómez ((E-mail)) wrote: Hi to all,       I have a little problem with my log files... I have been checking

Re: (RADIATOR) Weird Ascend filter behaviour

2003-10-17 Thread Hugh Irvine
Hello Craig - Yes a debug would be useful. You should also do some experiments with a very simple filter to start with and work up from there. You will find a number of examples in the users file in the Radiator 3.7.1 distribution. regards Hugh On Friday, Oct 17, 2003, at 11:15

Re: (RADIATOR) Calling and Called-Station-Id accounting?

2003-10-16 Thread Hugh Irvine
when you receive the access request, then retrieve them when you get the accounting requests. The example hook does the same thing for the username. regards Hugh Thanks! - Terry On Oct 16, 2003, at 12:09 AM, Hugh Irvine wrote: Hello Terry - It is not you - it is the access point

Re: (RADIATOR) AuthBy accept all authentication

2003-10-16 Thread Hugh Irvine
Hello Steve - The usual way to do this is with an AuthBy GROUP: AuthByPolicy ContinueAlways AuthBy SQL . # disable authentication AuthSelect # deal with accounting AccountingTable ACCOUNTING

Re: (RADIATOR) User Login Problem Radiator

2003-10-16 Thread Hugh Irvine
Hello Chanaka - I suspect your problem is due to a mismatch in the shared secrets, or the SQL table definitions. When you send a request from radpwtst the source IP address will be the address of the host on which it is run. You will need a Client clause on the target Radiator host to match

Re: (RADIATOR) Missing dictionary attribute

2003-10-16 Thread Hugh Irvine
Hello Steve - You should check with your vendor to find out what the correct definition should be (and let us know when you find out). In the meantime you can add something like this to your dictionary (and restart radiusd): VENDORATTR 5 Acc-Bogus-9999 string

Re: (RADIATOR) AuthBy SQL problem

2003-10-15 Thread Hugh Irvine
Hello Adam - All you really need to do is use a RewriteUsername and a CaseInsensitivePasswords with a single AuthBy SQL. regards Hugh On Thursday, Oct 16, 2003, at 00:27 Australia/Melbourne, Adam Pogorzelski wrote: Hello, I have such a problem. I have users in mysql database, and few so

Re: (RADIATOR) Calling and Called-Station-Id accounting?

2003-10-15 Thread Hugh Irvine
Hello Terry - There are some useful tricks that you can employ in this situation. # define Client clause Client Secret . AddToRequest %{Class} . /Client # define AuthBy clause AuthBy ... Identifier MyAuthBy . AddToReply Class =

Re: (RADIATOR) weird Oracle behaviour

2003-10-14 Thread Hugh Irvine
Hello Andy - I wonder if this is something to do with the DBI/DBD-Oracle versions and/or installation? You might want to try turning on some debug in DBI/DBD-Oracle and also try executing the queries by hand to see if there are any problems. regards Hugh On Monday, Oct 13, 2003, at 22:00

Re: (RADIATOR) Radiator hangs with EAP (PEAP)

2003-10-14 Thread Hugh Irvine
Hello Mark - There appear to be two problems here. The first is your configuration file which should only contain Handlers (otherwise the Realm DEFAULT will catch everything). Handler TunnelledByPEAP=1 AuthBy FILE Filename %D/users EAPType PEAP,MSCHAP-V2

Re: (RADIATOR) weird Oracle behaviour

2003-10-14 Thread Hugh Irvine
Hello Andy - As mentioned previously I would check the versions of DBI/DBD and perhaps upgrade/downgrade to a version that works correctly with your version of Oracle. regards Hugh On Tuesday, Oct 14, 2003, at 21:48 Australia/Melbourne, Andy De Petter wrote: Andy De Petter wrote: Hey

Re: (RADIATOR) IP assigment

2003-10-14 Thread Hugh Irvine
Hello Fernando - There was a bug with wireless reply attributes in earlier versions of Radiator. You should upgrade to Radiator 3.7.1 (plus patches). If you still have a problem please send me a copy of your configuration file (no secrets) together with a trace 4 debug showing what is

Re: (RADIATOR) Radiator and LDAP2 - multiple realm

2003-10-14 Thread Hugh Irvine
Hello Steve - I think I will need a bit more detail regarding your requirements, as I am not sure I understand. Could you also please send me a trace 4 debug from Radiator showing what is happening. regards Hugh On Wednesday, Oct 15, 2003, at 05:55 Australia/Melbourne, Steve Caporossi

Re: (RADIATOR) AuthBy EXTERNAL Can't pass received attribute to external program via STDIN

2003-10-13 Thread Hugh Irvine
using evaluation version ? MAN -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hugh Irvine Sent: Monday, October 13, 2003 10:46 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: (RADIATOR) AuthBy EXTERNAL Can't pass received attribute to external

Re: (RADIATOR) AddToReply

2003-10-10 Thread Hugh Irvine
Hello Andrea - If you want to add the attributes shown below for everyone that does not have them set in their reply attributes (ie. only have the ones that are different in the user records) you should do something like this: AuthBy SQL .

Re: (RADIATOR) Log Directory unavailable

2003-10-10 Thread Hugh Irvine
Hello Kevin - You should really only use local disks for log files. For remote logging you should use Log SYSLOG or Log SQL. Most operators tend to use SQL databases for user definitions, accounting and logging. regards Hugh On Saturday, Oct 11, 2003, at 04:05 Australia/Melbourne, Kevin

Re: (RADIATOR) cisco-avpair accounting

2003-10-09 Thread Hugh Irvine
Hello Jesus - If you are receiving multiple attributes with the same name (ie: cisco-avpair = .) then yes you will need to use a Hook to parse them into seperate differently named attributes. Then you can use the AcctColumnDef's in your AuthBy SQL clause. regards Hugh On Friday, Oct 10,

Re: (RADIATOR) Accounting Local and forwarding using rewriteusername problems

2003-10-09 Thread Hugh Irvine
Hello Sergio - You will need to use an AuthBy GROUP with the RewriteUsername inside: Handler Request-Type=Accounting-Request,Realm=test AuthByPolicy ContinueAlways AuthBy authBySQL_InsertCallAcct AcctLogFileName %L/radiusd_acct-%Y%m%d.log AuthBy GROUP

Re: (RADIATOR) CHAP-Password / User-Password

2003-10-09 Thread Hugh Irvine
- From: Hugh Irvine [EMAIL PROTECTED] To: Matteo Jurman [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Thursday, October 09, 2003 12:55 AM Subject: Re: (RADIATOR) CHAP-Password / User-Password If CHAP works and PAP doesn't, I would suspect the shared secret between the client device and Radiator

Re: (RADIATOR) AuthBy EXTERNAL Can't pass received attribute to external program via STDIN

2003-10-09 Thread Hugh Irvine
Hello Man - You are correct, Radiator will stop while the program specified by the AuthBy EXTERNAL command executes. If the program never exits, then Radiator will wait forever. You should add some print ... statements to the code in the external program to see what it is doing. BTW - you

Re: (RADIATOR) format input

2003-10-08 Thread Hugh Irvine
Hello Budi - I am not certain of the exact SQL syntax for your database, but you should use something like this: AcctColumnDef ctime, substring_index(%{cisco-h323-connect-time}, '=', -1), literal See the examples in section 3.28.16 in the Radiator 3.7.1 reference manual

Re: (RADIATOR) Bootable CD and Radiator

2003-10-08 Thread Hugh Irvine
hacker-free. Herman -Original Message- From: Hugh Irvine [mailto:[EMAIL PROTECTED] Sent: woensdag 8 oktober 2003 0:21 To: Herman verschooten Cc: [EMAIL PROTECTED] Subject: Re: (RADIATOR) Bootable CD and Radiator Hello Herman - I can see no reason why this wouldn't work, assuming you have Perl

(RADIATOR) Re: MD5 ERRORS

2003-10-08 Thread Hugh Irvine
Hello Karen - This is because you have the gdbm library installed on your test machine but not on the production machine. regards Hugh On Thursday, Oct 9, 2003, at 01:14 Australia/Melbourne, [EMAIL PROTECTED] wrote: THIS WORKED PERFECTLY ON MY TEST AIX 5.1 BOX BUT FAIL ON THE PROD BOX

Re: (RADIATOR) Cisco-Policy-Up/Down attributes

2003-10-08 Thread Hugh Irvine
Hello Nicolai - Thanks for sending these definitions. You can add these to your current dictionary (and restart radiusd): VENDORATTR 9 cisco-Policy-Up 37 string VENDORATTR 9 cisco-Policy-Down 38 string Note the spelling with small

Re: (RADIATOR) CHAP-Password / User-Password

2003-10-08 Thread Hugh Irvine
Hello Matteo - If CHAP works and PAP doesn't, I would suspect the shared secret between the client device and Radiator. regards Hugh On Wednesday, Oct 8, 2003, at 23:29 Australia/Melbourne, Matteo Jurman wrote: Hi to all! I'm having some trouble. My server is running on win2k+mysql box, and

(RADIATOR) Re: How to handle CHAP/MSCHAP requests in AuthBy EXTERNAL

2003-10-07 Thread Hugh Irvine
Hello Payam - You should read the Radius RFC's (included in the doc directory of the distriubtion) and you should also read the source code in the Radius directory. regards Hugh On Tuesday, Oct 7, 2003, at 22:38 Australia/Melbourne, Payam Shabanian wrote: How Can I handle CHAP/MSCHAP

Re: (RADIATOR) Bootable CD and Radiator

2003-10-07 Thread Hugh Irvine
Hello Herman - I can see no reason why this wouldn't work, assuming you have Perl and so on available on the CD. You will also need to have the Radiator configuration file somewhere and you will also need to come up with a solution for logging if you need it. regards Hugh On Tuesday, Oct 7,

Re: (RADIATOR) Auth via Oracle function

2003-10-06 Thread Hugh Irvine
Hello Ivo - The simplest thing to do is install and use the AuthPLSQL.pm module from the goodies directory. Then you can use an AuthBy PLSQL clause to call an Oracle stored procedure. See the example configuration file in goodies/plsql.cfg. regards Hugh On Tuesday, Oct 7, 2003, at 02:23

Re: (RADIATOR) Help with Ascend Max and RADIUS performance

2003-10-06 Thread Hugh Irvine
Hello Robert - From memory the MAX's have two sets of radius configuration - one for authentication and one for accounting. You will need to adjust the accounting radius configuration to suit. Does anyone on the list have the exact configuration information? regards Hugh On Monday, Oct 6,

Re: (RADIATOR) 802.1x Authentication Unsuccessful - Could not find a handler for...

2003-10-04 Thread Hugh Irvine
Hello Terry - You will need to have two Handlers in your configuration file: Foreground LogStdout LogDir /usr/local/var/log/radius.log LogFile %L/logfile DbDir /usr/local/etc Trace 4 AuthPort 1812 AcctPort 1813 Client DEFAULT NoIgnoreDuplicates

Re: (RADIATOR) 802.1x Authentication Unsuccessful - Could not find a handler for...

2003-10-04 Thread Hugh Irvine
what's going on here... :-) Thanks for the help! - Terry On Oct 4, 2003, at 12:39 AM, Hugh Irvine wrote: Hello Terry - You will need to have two Handlers in your configuration file: Foreground LogStdout LogDir /usr/local/var/log/radius.log LogFile %L/logfile DbDir

Re: (RADIATOR) Need to log reject-reason.

2003-10-03 Thread Hugh Irvine
Hello Sergio - As far as I can see in the code, %1 should be the reject reason, so your query looks correct. Can you send me a copy of your configuration file (no secrets) and a trace 4 debug showing what is happening and what gets logged in the RADAUTHLOG table? regards Hugh On Saturday,

Re: (RADIATOR) Perssitent ldap connections in AuthLDAP2

2003-10-03 Thread Hugh Irvine
persistent connections but both ldap servers and firewalls may drop connections after some time... If Radiator tries to reconnect immediately or can maintain a ldap connection pool it's not a problem... Rgds, -GSH - Original Message - From: Hugh Irvine [EMAIL PROTECTED] To: Joao Pedro Goncalves

Re: (RADIATOR) PostAuthHook (Sockets creation)

2003-10-03 Thread Hugh Irvine
Hello Benny - You could write a StartupHook to set up the socket and then simply use it in your PostAuthHook. See the example hooks in goodies/hooks.txt. regards Hugh On Friday, Oct 3, 2003, at 18:08 Australia/Melbourne, Benny Chee wrote: hi, i m writing a sub-routine in PostAuthHook

Re: (RADIATOR) MySQL server has gone away

2003-10-02 Thread Hugh Irvine
Hello Bobby - It looks like the MySQL server does not like certain requests. You should try to run the same requests by hand to see what happens and you should check the MySQL log files to see what is happening with the database. regards Hugh On Thursday, Oct 2, 2003, at 16:36

Re: (RADIATOR) AuthLog not logging password

2003-10-02 Thread Hugh Irvine
Hello Herman - I will need to see a trace 4 debug to be sure, but I suspect you are using CHAP (or MS-CHAP) passwords which cannot be decrypted. regards Hugh On Thursday, Oct 2, 2003, at 20:32 Australia/Melbourne, Herman verschooten wrote: Hi, I am trying to log the password in an AuthLog

Re: (RADIATOR) CachePasswords not available in AuthBy ROUNDROBIN

2003-10-02 Thread Hugh Irvine
Hello Robert - On your first point, the behaviour of CachePasswords was extended some time ago to support the mode of operation that you are describing - hence the change in the manual. For your second point, it is usually easier to set up your Handlers with specific matches for everything

Re: (RADIATOR) Perssitent ldap connections in AuthLDAP2

2003-10-02 Thread Hugh Irvine
Hello Joao Pedro - The normal AuthBy LDAP2 should not keep a persistent connection (unless HoldServerConnection is enabled in the configuration file). This is because some LDAP servers do not like persistent connections. regards Hugh On Friday, Oct 3, 2003, at 04:57 Australia/Melbourne, Joao

Re: (RADIATOR) DHCP configuration questions

2003-10-02 Thread Hugh Irvine
Hello Wyman - I have already replied to this mail at least once. Perhaps you have some mail filtering that is dropping mail from me (using my home office server)? I am sending this mail through a different mail server, so please let me know if you receive it. There is an example configuration

Re: (RADIATOR) Rpm version 3.7 displays 3.6 on startup?

2003-10-02 Thread Hugh Irvine
Hello John - Can you send us a copy of the message that is displayed? BTW - latest version is Radiator 3.7.1. regards Hugh On Thursday, Oct 2, 2003, at 23:29 Australia/Melbourne, John McFadden wrote: I assume this is just a problem with the message or is the download pointing to an old

Re: (RADIATOR) Question in AuthBy EXTERNAL

2003-10-02 Thread Hugh Irvine
: Thursday, October 02, 2003 1:58 PM To: 'Mike McCauley'; 'Hugh Irvine' Cc: [EMAIL PROTECTED] Subject: RE: (RADIATOR) Question in AuthBy EXTERNAL Hi Do i need to pass any parameter to testcommand.pl ? MAN -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike

Re: (RADIATOR) NAS-Port and NAS-Port-Type

2003-10-02 Thread Hugh Irvine
Hello Andrea - Many thanks for a very informative post. Your solution sounds excellent (that is why we let you change Radiator's default behaviour). :-) I will suggest to Mike that we include your mail as a FAQ item (with your permission of course). regards Hugh On Friday, Oct 3, 2003, at

Re: (RADIATOR) New CVX dictionary?

2003-10-01 Thread Hugh Irvine
Hello Craig - Thanks for the information. Can you check with your vendor what is the official definition of this attribute? regards Hugh On Thursday, Oct 2, 2003, at 05:56 Australia/Melbourne, Craig Gittens wrote: Hey guys, We moved from L2TP to plain old CVX and I started getting this in

Re: (RADIATOR) Question in AuthBy EXTERNAL

2003-10-01 Thread Hugh Irvine
Hello Man Meng Fei - I suspect that Radiator is not able to run the external command. What happens when you run the following in a MS-DOS window: C:\Perl\bin\testcommand.pl There is probably something wrong with either the path or the contents of the file. regards Hugh On Thursday, Oct 2,

Re: (RADIATOR) Using Radiator as dchp server for 802.1x users.

2003-10-01 Thread Hugh Irvine
Hello John - I think you will only be able to do this in the inner authentication, with different Handlers for the inner and outer requests. The general method for doing this is to add a pseudo-attribute to the incoming request when you do the authentication, then use that in the address

Re: (RADIATOR) NULL usernames in Radius Packets

2003-09-30 Thread Hugh Irvine
Hello Mahesh - Unless you are using a RewriteUsername, Radiator does not do anything with the username. I suspect that the NAS is sending an empty username, but without seeing a copy of your configuration file (no secrets) and a trace 4 debug from Radiator showing what is happening it is not

Re: (RADIATOR) Testing Radius traffic

2003-09-29 Thread Hugh Irvine
Hello Claudio - Please look at my example again: sub { my $p = ${$_[0]}; # original request packet my $rp = ${$_[1]}; # reply packet to NAS my $handled = $_[2]; # flag to indicate ACCEPT, REJECT or IGNORE # Only deal with authentication requests my $code = $p-code();

Re: (RADIATOR) radiators duplicate detection (ClientIP+Identifier+?SourcePort?)

2003-09-29 Thread Hugh Irvine
Hello Rainer - Here is the comment block from Radius/Client.pm: # In order to detect duplicate arrivals, we keep an array # of arrivals ($self-{RecentIdentifiers})indexed by # the IP address of the host that sent the request, # the UDP port number (some hosts like Lucent TNT have multiple ID

Re: (RADIATOR) User-Name@zone.tld@invalid

2003-09-28 Thread Hugh Irvine
Hello Wim - Yes - my testing indicates this is the case. regards Hugh On Monday, Sep 29, 2003, at 05:32 Australia/Melbourne, Wim Biemolt wrote: Hello, Is it correct that radiator will see zone.tld as the realm for somebody using User-Name [EMAIL PROTECTED]@invalid? -Wim -/- SURFnet ===

Re: (RADIATOR) Testing Radius traffic

2003-09-28 Thread Hugh Irvine
Hello Claudio - For the first case it isn't quite so simple, therefore it is probably easier to use a two-stage proxy approach with the first stage employing an AuthBy ROUNDROBIN clause to distribute requests evenly to a number of targets. Each target can then be configured with AuthBy

Re: (RADIATOR) Text file database -- New Database format needed

2003-09-25 Thread Hugh Irvine
Hello Robert - It sounds to me like there is a typo somewhere in the existing users file, which is causing the end of the file to be incorrect. Most Radiator users employ an SQL database for user definitions and accounting and so on. You will find example configuration files and example table

Re: (RADIATOR) Negative bytes_out number on adsl users!!

2003-09-25 Thread Hugh Irvine
Hello Nikos - This is more likely a problem with your database which is not set up to handle large numbers correctly. As you can see from the trace, Radiator reports the number correctly. Acct-Output-Octets = 3657597853 regards Hugh On Thursday, Sep 25, 2003, at 23:50

Re: (RADIATOR) Bad attribute=value pair in 3.6

2003-09-24 Thread Hugh Irvine
in the users file? Regards, William -Original Message- From: Hugh Irvine [mailto:[EMAIL PROTECTED] Sent: Saturday, September 20, 2003 5:47 AM To: William Hernandez Cc: 'Radiator' Subject: Re: (RADIATOR) Bad attribute=value pair in 3.6 Hello William - If you are running on a recent Redhat

Re: (RADIATOR) allowing logon for fixed hours

2003-09-24 Thread Hugh Irvine
don't mean to challenge, but isn't this what she wants? Ascend-Maximum-Time=28800 Thanks! Dan Vande More -Original Message- From: Hugh Irvine [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 23, 2003 4:01 PM To: Mukesh Karna Cc: [EMAIL PROTECTED] Subject: Re: (RADIATOR) allowing logon

Re: (RADIATOR) allowing logon for fixed hours

2003-09-23 Thread Hugh Irvine
Hello Mukesh - You should send a Session-Timeout = reply attribute: AddToReply Session-Timeout = nnn where nnn is the number of seconds the session should last. Note that it is the NAS that must support this attribute so you should do some testing to verify correct operation. regards

Re: (RADIATOR) selective caching of securid token

2003-09-23 Thread Hugh Irvine
Hello Kai - The only way to do do this would be with a custom AuthBy module I think. Have a look at the source code in the Radius directory and check section 17 in the Radiator 3.7 reference manual (doc/ref.html). regards Hugh On Tuesday, Sep 23, 2003, at 21:23 Australia/Melbourne, Freese,

Re: (RADIATOR) Global MySQL timeout ?

2003-09-23 Thread Hugh Irvine
Hello Ingvar - This is correct. All modules that use a specific database employ a common connection. regards Hugh On Tuesday, Sep 23, 2003, at 23:33 Australia/Melbourne, Ingvar Bjarnason wrote: Hi all, It seems to me when Radiator connects to MySQL that if one handler has trouble

Re: (RADIATOR) How to make Authby File work?

2003-09-23 Thread Hugh Irvine
Hello Joseph - You can change this behaviour by turning off Authenticate as computer ... in the Connection Properties - Authentication panel in the Windows XP Network control panel. There are various 802.1x clients you can use for authentication, see our web site:

Re: (RADIATOR) How to configure Radiator to work with Cisco PEAP (Generic token)?

2003-09-22 Thread Hugh Irvine
Authentic: 17Z219U159213150h131Mki21!(139 Attributes: Reply-Message = Request Denied Hugh Irvine wrote: I suspect the problem occured earlier in the log file and there is probably a prerequisite Perl module missing. You should check the messages in the log file from startup on. On Friday

Re: (RADIATOR) How to configure Radiator to work with Cisco PEAP (Generic token)?

2003-09-20 Thread Hugh Irvine
Hello Bostjan - I suspect the problem occured earlier in the log file and there is probably a prerequisite Perl module missing. You should check the messages in the log file from startup on. regards Hugh On Friday, Sep 19, 2003, at 17:46 Australia/Melbourne, Bostjan Lemut wrote: Hello!

Re: (RADIATOR) Bad attribute=value pair in 3.6

2003-09-20 Thread Hugh Irvine
Hello William - If you are running on a recent Redhat version, see the FAQ item here (and you should also install the latest Radiator patches). http://www.open.com.au/radiator/faq.html#127 Otherwise there may be a problem earlier in your configuration file. regards Hugh On Friday, Sep 19,

(RADIATOR) Re: RADIATOR and SIP Sever from iptel.org

2003-09-20 Thread Hugh Irvine
Hello Edgar - You will find a special dictionary in the latest Radiator 3.6 (plus patches) called dictionary.sip that you should use in addition to the standard dictionary when you start radiusd: perl radiusd -dictionary dictionary, dictionary.sip -config_file ... regards Hugh On Saturday,

Re: (RADIATOR) Accelerating Authentication Process

2003-09-18 Thread Hugh Irvine
         2.5         0:00 bash Hugh Irvine [EMAIL PROTECTED] schrieb am 09.18.2003 03:13:18 AM: Hello Karl - I agree with you - the Radiator processing looks very slow. Can you tell me what type of machine you are running (hardware and   software distribution)? And can you tell me what

Re: (RADIATOR) Accelerating Authentication Process

2003-09-17 Thread Hugh Irvine
Hello Karl - I agree with you - the Radiator processing looks very slow. Can you tell me what type of machine you are running (hardware and software distribution)? And can you tell me what else is running on the machine? Perhaps you could run a top and send it to me? The reason you are

Re: (RADIATOR) config problem

2003-09-17 Thread Hugh Irvine
Hello Ivo - I suspect that the environment in which you are running Radiator does not include the environment variables you have configured. I suggest you run radiusd by hand first, in a shell that has the correct environment: perl radiusd -foreground -log_stdout -trace 4 -config_file .

Re: (RADIATOR) Configuring Radiator Radius server for Cisco AS5300

2003-09-16 Thread Hugh Irvine
Hello - Thanks for your mail. As far as I can see there is nothing wrong with your configuration and the debug trace shows an accounting start for the session that appears to be normal. I do notice that you are not sending a Framed-IP-Netmask, but the radius accounting start shows an IP

Re: (RADIATOR) Configuring Radiator Radius server for Cisco AS5300

2003-09-16 Thread Hugh Irvine
the Internet.   What next we can do?   rgds G. S. Rakhra - Original Message - From: Hugh Irvine [EMAIL PROTECTED] To: G. S. Rakhra [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Tuesday, September 16, 2003 12:42 PM Subject: Re: (RADIATOR) Configuring Radiator Radius server for Cisco AS5300 Hello

Re: (RADIATOR) Discard queries based on attribute values

2003-09-16 Thread Hugh Irvine
Hello Robert - This is really a problem with the PPPoE clients, not Radiator. This topic has been discussed on the list before and the consensus of opinion is that it is better to apply filters rather than NAK'ing. The reason for this of course is that a NAK will not stop the requests. See

Re: (RADIATOR) 802.1x and vlan assignment

2003-09-16 Thread Hugh Irvine
. Nevertheless, the Windows problem is persisting. Once you give username and password, you can not change it any more. And also the problem with a funny usrname azbycx which, I don't know where from is coming, remains as before. Regards Dordaneh -Original Message- From: Hugh Irvine [mailto

Re: (RADIATOR) AddToReply Usage

2003-09-15 Thread Hugh Irvine
of the AuthLOG? The reason is that in our Radiator (2.19), %1 should print Request Denied but does not. mahesh -Original Message- From: Hugh Irvine [mailto:[EMAIL PROTECTED] Sent: Saturday, September 13, 2003 6:43 PM To: Mahesh Neelakanta Cc: [EMAIL PROTECTED] Subject: Re: (RADIATOR

Re: (RADIATOR) 802.1x and vlan assignment

2003-09-15 Thread Hugh Irvine
, what the 802.1x authentication problem could be? Thanking you in advance -Original Message- From: Hugh Irvine [mailto:[EMAIL PROTECTED] Sent: Samstag, 13. September 2003 09:26 To: Arangeh, Dordaneh Cc: [EMAIL PROTECTED] Subject: Re: (RADIATOR) 802.1x and vlan assignment Hello - You should

Re: (RADIATOR) Authentitation problem

2003-09-14 Thread Hugh Irvine
Hello Mukesh - We will need to see a copy of your configuration file together with a trace 4 debug from Radiator showing what is happening. The most common problem with Cisco equipment is they need at least the following reply attributes: AddToReply Service-Type = Framed-User, \

Re: (RADIATOR) Radiator couldn't bind to ldap

2003-09-13 Thread Hugh Irvine
Hello Mai - There are some known problems with Redhat 8 and 9. See this FAQ item: http://www.open.com.au/radiator/faq.html#127 regards Hugh On Saturday, Sep 13, 2003, at 02:33 Australia/Melbourne, Mai Bui wrote: Support, I'm having problem with Radiator binding to LDAP when running

Re: (RADIATOR) 802.1x and vlan assignment

2003-09-13 Thread Hugh Irvine
Hello - You should check your Radiator dictionary to make sure the attributes you are using are defined (they are in the standard Radiator 3.6 dictionary). The trace debug doesn't show the reply attributes at all, so I suspect there is a problem with the database response. regards Hugh On

Re: (RADIATOR) Passing Accouting events to external programs

2003-09-13 Thread Hugh Irvine
Hello Payam - You can either use the AuthBy EXTERNAL clause or you can write a hook. See section 6.26 in the Radiator 3.6 reference manual (there are also some example hooks in the file goodies/hooks.txt). regards Hugh On Saturday, Sep 13, 2003, at 23:53 Australia/Melbourne, Payam Shabanian

Re: (RADIATOR) CLI auth using LDAP

2003-09-13 Thread Hugh Irvine
Hello Deen - We will need to see a trace 4 debug from Radiator showing what is happening. regards Hugh On Sunday, Sep 14, 2003, at 11:04 Australia/Melbourne, deen wrote:   Hi List,   What I am trying to do is, authenticate a user CLI appearing in the RADIUS Auth records, against his

Re: (RADIATOR) AddToReply Usage

2003-09-13 Thread Hugh Irvine
Hello Mahesh - You can use the RejectHasReason in your Realm or Handler clause. See section 6.16.23 in the Radiator 3.6 reference manual (doc/ref.html). regards Hugh On Sunday, Sep 14, 2003, at 00:27 Australia/Melbourne, Mahesh Neelakanta wrote: Hello from Sunny South Florida, USA, I

Re: (RADIATOR) problem with MPPE

2003-09-12 Thread Hugh Irvine
Hello Payam - I will need to see a copy of your configuration file (no secrets) together with a trace 4 debug from Radiator showing the problem and what is happening. regards Hugh On Friday, Sep 12, 2003, at 17:22 Australia/Melbourne, Payam Shabanian wrote: I have problem in establishing

Re: (RADIATOR) How to reject users in a file

2003-09-12 Thread Hugh Irvine
Hello Mike - Yes this is quite simple to acheive. Handler Realm=MODEMS RewriteUsername s/^([EMAIL PROTECTED]).*/$1/ AuthBy GROUP AuthByPolicy ContinueUntilReject AuthBy FILE Filename %D/reject.users

Re: (RADIATOR) formatted TIME_STAMP in AcctSQLStatement

2003-09-11 Thread Hugh Irvine
Hello Jaws - You can only use formatted-date or integer-date (preferably) in an AcctColumnDef. See section 6.28.14 in the Radiator 3.6 reference manual (doc/ref.html). regards Hugh On Friday, Sep 12, 2003, at 09:23 Australia/Melbourne, tracker wrote: Is it possible to use a formatted

Re: (RADIATOR) How does SQL Fallover work?

2003-09-11 Thread Hugh Irvine
Hello William - Database failure means no response to an SQL query (for whatever reason). regards Hugh On Friday, Sep 12, 2003, at 01:52 Australia/Melbourne, William Hernandez wrote: Hello everyone, The Radiator 3.3.1 manual states in Section 6.28 AuthBy SQL AuthBy SQL is tolerant of

Re: (RADIATOR) Limiting logfile to certain size

2003-09-11 Thread Hugh Irvine
Hello Karl - You should use an external cron job or whatever to archive or delete your log files. regards Hugh On Friday, Sep 12, 2003, at 00:50 Australia/Melbourne, [EMAIL PROTECTED] wrote: Hi. Is it possible to limit the sizes of the logfiles, or can I handle this problem only with

Re: (RADIATOR) problems with global vars

2003-09-11 Thread Hugh Irvine
Hello Stefan - The port numbers and secret are only evaluated at run time as you have discovered. A better method for dealing with multiple, changing radius proxies is to use the AuthBy SQLRADIUS clause which stores the target details in an SQL database. See section 6.45 in the Radiator 3.6

Re: (RADIATOR) PAM+Radiator.

2003-09-10 Thread Hugh Irvine
Hello Wesley - It would be useful to see a trace 4 debug from Radiator as well as the qpopper and PAM logs. regards Hugh On Wednesday, Sep 10, 2003, at 17:57 Australia/Melbourne, Wesley Hof wrote: Hi, I'm using qpopper - PAM - Radiator. When a customer pops mail, and the

Re: (RADIATOR) SessionDatabase, EAP and dynamic keys

2003-09-10 Thread Hugh Irvine
Hello Morton - Thanks for your mail - you raise some interesting points. Mike and I will be discussing your questions over the next day or so and we will try to get back to you by the end of the week. regards Hugh On Wednesday, Sep 10, 2003, at 17:23 Australia/Melbourne, Morton Jonuschat

Re: (RADIATOR) Radiator Feature request

2003-09-09 Thread Hugh Irvine
Salut Jerome - Radiator already has this support in the form of the PacketTrace parameter and the Monitor clause. Our companion product Radar uses both features to allow to connect to a running Radiator instance and do lots of interesting things. www.open.com.au/radar See the relevant

Re: (RADIATOR) Problem with Reply Attributes

2003-09-09 Thread Hugh Irvine
Hello Craig - Framed-IP-Address and Framed-Address are the same thing - both get encoded as the same attribute on the wire (see the Radiator dictionary). You will need to check with Nortel to find our what is acceptable in a radius reply packet. Note that different vendors tend to accept

Re: (RADIATOR) cant compile DBD-Oracle on solaris 9

2003-09-08 Thread Hugh Irvine
Hello - You are correct - you are combining 32 bit and 64 bit object modules. All of the object modules must be one format or the other. You must make sure that Perl, the C compiler and the Oracle libraries are all the same format (32 bit probably). regards Hugh On Tuesday, Sep 9, 2003, at

Re: (RADIATOR) Bytes from Octets

2003-09-07 Thread Hugh Irvine
Hello Marcel - OK BYTES == OCTETS :-) Hugh On Sunday, Sep 7, 2003, at 00:45 Australia/Melbourne, Marcel Brown wrote: Hello Marcel - Easy: bytes == octets Its the same thing - just different names. No, that's too simple, I want a harder answer :) Thanks! Marcel === Archive at

Re: (RADIATOR) Using substrings in AcctColumnDef

2003-09-07 Thread Hugh Irvine
Hello Nick - You could also write a PreClientHook to reduce the length of the attribute. There are some example hooks in the file goodies/hooks.txt. regards Hugh On Sunday, Sep 7, 2003, at 09:46 Australia/Melbourne, Nick M. Black wrote: Hi, Configuration is Radiator 2.19 (old I know!)

Re: (RADIATOR) Bytes from Octets

2003-09-06 Thread Hugh Irvine
Hello Marcel - Easy: bytes == octets Its the same thing - just different names. regards Hugh On Saturday, Sep 6, 2003, at 15:34 Australia/Melbourne, Marcel Brown wrote: Before I spend a lot of time tracking this down, if someone has a quick answer, I'd appreciate it. Is there a simple

Re: (RADIATOR) Radiusd stops with no warning

2003-09-05 Thread Hugh Irvine
Hello Kevin - I will need to see a copy of your configuration files (no secrets) together with the corresponding trace 5 debugs showing what is happening. From what you describe below it sounds like there may be filters getting in the way somewhere. regards Hugh On Saturday, Sep 6, 2003, at

Re: (RADIATOR) Recommendation for adding radius reply item with a default value.

2003-09-05 Thread Hugh Irvine
Hello Barry - Yes you can use an AddToReplyIfNotExist, although it is more usually put in the AuthBy clause: Realm DEFAULT . AuthBy ... . AddToReplyIfNotExist Framed-Filter = filter-id /AuthBy .. /Realm regards Hugh

Re: (RADIATOR) Redback Static IP Problem

2003-09-04 Thread Hugh Irvine
. Thanks, Al On Thu, 4 Sep 2003, Hugh Irvine wrote: Hello Al - As I can't find your name or email address in our database, I wonder whether you could tell me the name of the company that has purchased this copy of Radiator? Please reply to me directly. I understand what you are trying to do, but your

Re: (RADIATOR) AuthBy External clause problem

2003-09-03 Thread Hugh Irvine
Hello Ganbold - It is possible that you may need to use ResultInOutput in this environment. Have a look at the code in Radius/AuthEXTERNAL.pm and maybe add some print statements so you can see what is happening. And please let us know what you find. regards Hugh On Wednesday, Sep 3,

Re: (RADIATOR) Radiator Installation on other machine than SQL

2003-09-03 Thread Hugh Irvine
Hello - You will need to install the Oracle client libraries before you can build DBD-Oracle. Also note that we have had many reports of problems with Perl 5.8 and we recommend Perl 5.6.1 for now. regards Hugh On Wednesday, Sep 3, 2003, at 20:07 Australia/Melbourne, Datareactor wrote:

Re: (RADIATOR) Getting problems with new Cisoc IOS NAS

2003-09-03 Thread Hugh Irvine
Hello Craig - I seem to remember there are some aaa ... commands to send extended NAS-Port information (there may be others). I also noticed on the latest 12.2 IOS release some new commands - so you might want to check what version you are running. You should ask your Cisco engineer or check

<    1   2   3   4   5   6   7   8   9   10   >