Re: [RADIATOR] RAdmin Authentication (Access to RAdmin Website)

2015-11-04 Thread Michael Bellears
[mailto:radiator-boun...@open.com.au] On Behalf Of Michael Bellears Sent: Thursday, 5 November 2015 7:43 AM To: radiator@open.com.au Subject: [RADIATOR] RAdmin Authentication (Access to RAdmin Website) Hi Guys, Upgraded from 1.10 -> 1.15, and I (currently) can access 1.15 via the "anonymous&qu

[RADIATOR] RAdmin Authentication (Access to RAdmin Website)

2015-11-04 Thread Michael Bellears
Hi Guys, Upgraded from 1.10 -> 1.15, and I (currently) can access 1.15 via the "anonymous" user (i.e. no login is required(Or asked for) to access the Radmin pages) - In the manual, it states to enable RAdmin Auth (Which is what we want), you set "Authenticate Admin Users" option on the "Edit

Re: [RADIATOR] Authlog FILE - file location

2015-11-03 Thread Michael Bellears
Ah - Legendary! - Thank you Hugh. -Original Message- From: Hugh Irvine [mailto:h...@open.com.au] Sent: Wednesday, 4 November 2015 4:47 PM To: Michael Bellears Cc: radiator@open.com.au Subject: Re: [RADIATOR] Authlog FILE - file location Hello Michael - Yes - set the LogDir parameter

[RADIATOR] Authlog FILE - file location

2015-11-03 Thread Michael Bellears
Hi, Hopefully a quick question, Ive had a read of the manual, but cant seem to find if it is possible to set a path for each logfile? i.e. Identifier myauthlogger3 Filename authlog_dsl_cust_a Will log to file authlog_dsl_cust_a in the dir that radiator was started from - Is th

Re: [RADIATOR] Migrating a Radiator+Radmin server

2015-11-03 Thread Michael Bellears
) -Original Message- From: Heikki Vatiainen [mailto:h...@open.com.au] Sent: Wednesday, 4 November 2015 7:55 AM To: Michael Bellears; radiator@open.com.au Subject: Re: [RADIATOR] Migrating a Radiator+Radmin server On 11/03/2015 11:13 PM, Michael Bellears wrote: > Thanks - absolutely

Re: [RADIATOR] Migrating a Radiator+Radmin server

2015-11-03 Thread Michael Bellears
en Sent: Tuesday, 3 November 2015 9:31 PM To: radiator@open.com.au Subject: Re: [RADIATOR] Migrating a Radiator+Radmin server On 3.11.2015 11.13, Michael Bellears wrote: > Ah - Just found one difference - NASTYPE appears to have been changed > to NASENGINE in RADCLIENTLIST? Hmm, are you

Re: [RADIATOR] Migrating a Radiator+Radmin server

2015-11-03 Thread Michael Bellears
n 'field list' From: radiator-boun...@open.com.au [mailto:radiator-boun...@open.com.au] On Behalf Of Michael Bellears Sent: Tuesday, 3 November 2015 7:06 PM To: 'radiator@open.com.au' Subject: [RADIATOR] Migrating a Radiator+Radmin server Hi Everyone, Migrating an old s

[RADIATOR] Migrating a Radiator+Radmin server

2015-11-03 Thread Michael Bellears
Hi Everyone, Migrating an old server -> New, and are having some issues with Radmin - Dump of the original mysql dbase, then import on the new server(After radiator and radmin install), Radmin works to an extent, but in some sections throws the following error: A serious error has occurred: Co

Re: [RADIATOR] All RADIUS servers failed to respond

2015-02-11 Thread Michael
I think maybe you have the wrong mailing list? This mailing list is for Radiator. On 11/02/15 02:38 PM, Cover, Christopher R. CTR wrote: So sorry to display my ignorance, but I am having difficulty diagnosing why we cannot authenticate with RADIUS. I wonder if these clues might ring a bell wi

Re: [RADIATOR] AuthBy Syslog port

2015-02-05 Thread Michael
Correct me if i'm wrong, but is it the non-radiator Syslog perl module that doesn't have an option to specify the port? On 05/02/15 12:59 PM, l...@airstreamcomm.net wrote: > We are experimenting with docker containers and running radiator in the most > minimal footprint possible, which means we

Re: [RADIATOR] COA log

2015-02-04 Thread Michael
I personally log COA/POD requests using a very custom method. This may not be desirable for others. I do this by after processing the COA/POD normally, pass it to an AuthBy config that essentially changes it to an Accounting-Request packet, populates a few extra values, then passes it to my

Re: [RADIATOR] Account log to MySQL

2015-02-03 Thread Michael
If you have a lot of different devices, and lots of auth activity, I would suggest setting up your authlog sql table to have a unique index for user/type/reason, and an sql query that inserts, but if the same error already exists, just increment a count column and the timestamp. This way, if a

Re: [RADIATOR] Two "@" in User-Name: first Realm is used

2014-09-16 Thread Michael
Maybe you could just check the username directly? Or maybe you just want to reject any username with 2 @ symbols first, and therefore should result in the realm check working how you want it to? Identifier AuthBy_REJECT DefaultResult REJECT Reject

Re: [RADIATOR] Preventing Computer/Machine Authentication in AuthBy NTLM

2014-07-08 Thread Michael Rodrigues
g Windows 7 clients and Server 2008R2. Thanks, Michael -- Michael Rodrigues Technical Support Services Manager Gevirtz Graduate School of Education Education Building 4203 (805) 893-8031 h...@education.ucsb.edu ___ radiator mailing list radiator@open.

Re: [RADIATOR] Wireless client verification of Radiator's SSL cert EAP/PEAP

2014-06-27 Thread Michael Rodrigues
some details about the cert to the user that they can verify manually (name, fingerprint, expiry date). Thanks, Michael -- Michael Rodrigues Technical Support Services Manager Gevirtz Graduate School of Education Education Building 4203 (805) 893-8031 h...@education.ucsb.edu

[RADIATOR] Wireless client verification of Radiator's SSL cert EAP/PEAP

2014-06-18 Thread Michael Rodrigues
s using PEAP and EAP? I'd like to be as secure as possible without resorting to client-side certificates. Thanks, Michael -- Michael Rodrigues Technical Support Services Manager Gevirtz Graduate School of Education Education Building 4203 (805) 893-8031 h...@education.ucsb.edu ___

Re: [RADIATOR] Radiator / Radmin - bulk add users

2014-06-15 Thread Michael Bellears
Excellent - Thanks Hugh. -Original Message- From: Hugh Irvine [mailto:h...@open.com.au] Sent: Thursday, 12 June 2014 4:05 PM To: Michael Bellears Cc: radiator@open.com.au Subject: Re: [RADIATOR] Radiator / Radmin - bulk add users Hello Michael - See buildsql in the main Radiator

Re: [RADIATOR] Preventing Computer/Machine Authentication in AuthBy NTLM

2014-06-13 Thread Michael Rodrigues
hoping it was something simple like a missing newline. It works with the comma, so I have the added advantage of being able to add arbitrary Reply attributes, as compared to the RewriteUsername to lowercase method. Thanks for your help on this; the list is always helpful, and I could spend all day

[RADIATOR] Limits on EAPTLS_PrivateKeyPassword

2014-06-12 Thread Michael Hulko
the private key. Any assistance would be grateful Michael Hulko Network Analyst Western University Canada Network Operations Centre Information Technology Services 1393 Western Road, SSB 3300CC London, Ontario N6G 1G9 tel: 519-661-2111 x81390 e-mail: mihu...@uwo.ca

[RADIATOR] Radiator / Radmin - bulk add users

2014-06-11 Thread Michael Bellears
Hi, We have a need to add ~150users to Radmin - Doing this via the (Radmin) web interface would be tedious/error-prone - Is anyone aware of a script to bulk add users? Cheers. ___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailm

Re: [RADIATOR] Preventing Computer/Machine Authentication in AuthBy NTLM

2014-06-09 Thread Michael Rodrigues
cation requests Identifier NON_EAP_HANDLER Identifier NON_EAP_REJECT AddToReplyReply-Message = Use an EAP method. RequestHook sub { &main::log($main::LOG_DEBUG, "Non-EAP authentication requested, rejecting request..."); return $main::REJECT;}

Re: [RADIATOR] Preventing Computer/Machine Authentication in AuthBy NTLM

2014-05-13 Thread Michael Rodrigues
On 5/6/14, 1:15 PM, Heikki Vatiainen wrote: > On 05/06/2014 10:22 PM, Michael Rodrigues wrote: > >> I did end up putting the blacklist in the outer handler because all of >> my attempts to grab the inner_identity within the Inner Handler for PEAP >> would give me a blank

Re: [RADIATOR] Preventing Computer/Machine Authentication in AuthBy NTLM

2014-05-06 Thread Michael Rodrigues
r_identity}; ${$rep}->changeUserName($rep_username); &main::log($main::LOG_DEBUG, "Hook changed User-Name to $rep_username for Access-Accept"); } } ----- Thanks, Michael On 4/

Re: [RADIATOR] Preventing Computer/Machine Authentication in AuthBy NTLM

2014-04-21 Thread Michael Rodrigues
ba 50 16 82 c7 f0 aa 47 92 22 b9 01 02 4f 08 01 01 00 06 19 20 50 12 bd c9 eb a2 b2 cd 56 77 df 9a 3b 5a e1 d9 e7 0b Code: Access-Challenge Identifier: 42 Authentic: *oU<155>"<186>P<22><130><199><240><170>G<146>"<185> Attributes:

Re: [RADIATOR] Preventing Computer/Machine Authentication in AuthBy NTLM

2014-04-18 Thread Michael Rodrigues
On 4/9/2014 8:01 AM, Heikki Vatiainen wrote: > On 04/08/2014 11:36 PM, Michael Rodrigues wrote: > >> When untarring the patches tarball patches-4.12.1-20140407.tar.gz in the >> Radiator directory and testing the build, test "1d" fails to pass. Am I >> applying

Re: [RADIATOR] Preventing Computer/Machine Authentication in AuthBy NTLM

2014-04-08 Thread Michael Rodrigues
FILE sections that check that the user is not on the blacklist. As configured, it will check their anonymous ID against the blacklist, which does me no good. Thanks, Michael On 4/7/2014 7:24 AM, Heikki Vatiainen wrote: > On 04/02/2014 09:49 PM, Heikki Vatiainen wrote: > >> Po

Re: [RADIATOR] Preventing Computer/Machine Authentication in AuthBy NTLM

2014-04-01 Thread Michael Rodrigues
eyFile /etc/radiator/certs/cert-srv.pem EAPTLS_PrivateKeyFile /etc/radiator/certs/radiatordev.key #EAPTLS_PrivateKeyPassword whatever AutoMPPEKeys PostAuthHook file:"goodies/eap_acct_username.pl" #This logs to /var/log/radius/logf

[RADIATOR] Preventing Computer/Machine Authentication in AuthBy NTLM

2014-03-26 Thread Michael Rodrigues
pem EAPTLS_CertificateFile /etc/radiator/certs/cert-srv.pem EAPTLS_CertificateType PEM EAPTLS_PrivateKeyFile /etc/radiator/certs/cert-srv.pem EAPTLS_PrivateKeyPassword whatever AutoMPPEKeys #PostProcessingHook file:"/etc/radiator/eap_acct_username.p

Re: [RADIATOR] Proxy server variable

2014-03-21 Thread Michael Hulko
to per client. Your example below references the "Final" host. I am not sure that my explanation makes sense, I appreciate your suggestion... Thanks M On 2014-03-21, at 4:07 PM, Heikki Vatiainen wrote: > On 03/20/2014 05:23 PM, Michael Hulko wrote: >> I would like to lo

[RADIATOR] Proxy server variable

2014-03-20 Thread Michael Hulko
when a external server times out as seen in the output of the log: No reply after 20 seconds and 3 retransmissions to 129.100.160.144:1645 for casecomp.gu...@ivey.ca (69) any assistance would be appreciated. Michael Hulko Network Analyst Western University Canada Network Operations Centre

Re: [RADIATOR] Delayed Stop Record and Active Sessions

2014-02-23 Thread Michael
Hi Rohan, I think you pretty much should be deleting sessions using the session id included in the delete criteria, for accuracy. But, NOT using the session id in your count query. The 'state limit' function i think you are referring to is tough to do. I assume you mean user session limits

Re: [RADIATOR] Log messages

2014-02-07 Thread Michael Hulko
014 07:13 PM, Michael Hulko wrote: >> We're seeing the following, not quite so frequently in our logs. Not >> every server is reporting this. Can anyone confirm that this is simply >> a client trying to authenticate with an unsupported EAP type? > > The EAP type is

[RADIATOR] Log messages

2014-02-06 Thread Michael Hulko
line 3, line 2747056. Thanks Michael Hulko Network Analyst Western University Canada Network Operations Centre Information Technology Services 1393 Western Road, SSB 3300CC London, Ontario N6G 1G9 tel: 519-661-2111 x81390 e-mail: mihu...@uwo.ca <mai

Re: [RADIATOR] DefaultSimultaneousUse while using AuthRADIUS

2014-01-07 Thread Michael
in::LOG_DEBUG, "hook.Reply: DONE"); } On 23/12/13 04:28 PM, Heikki Vatiainen wrote: > On 12/23/2013 07:27 PM, Michael wrote: > >> for a proof of concept, i can set an error message this way: >> >> first by changing the AuthRADIUS.pm source: > It appears you h

Re: [RADIATOR] DefaultSimultaneousUse while using AuthRADIUS

2013-12-23 Thread Michael
Accounting-Response')); and then, i can set the error message in the ReplyHook with: $p->change_attr('Reply-Message', 'DefaultSimultaneousUse error'); Mike On 23/12/13 11:54 AM, Michael wrote: > On 23/12/13 04:23 AM, Heikki Vatiainen wrote: >> On 12/20/2013 10:5

Re: [RADIATOR] DefaultSimultaneousUse while using AuthRADIUS

2013-12-23 Thread Michael
On 23/12/13 04:23 AM, Heikki Vatiainen wrote: > On 12/20/2013 10:59 PM, Michael wrote: >> This ReplyHook definitely did the trick, except for not showing a proper >> error message. it just shows 'Proxied' as the error. Is there a way to >> change the error messag

Re: [RADIATOR] DefaultSimultaneousUse while using AuthRADIUS

2013-12-20 Thread Michael
s could be passed to another AuthBy when rejected, configured to reject with a fixed message, and set the redirected flag in the hook? On 19/12/13 03:28 PM, Heikki Vatiainen wrote: > On 12/18/2013 11:43 PM, Michael wrote: >> I've gotten closer using an AuthBy GROUP around AuthBy

Re: [RADIATOR] DefaultSimultaneousUse while using AuthRADIUS

2013-12-18 Thread Michael
13 02:47 PM, Michael wrote: > DefaultSimultaneousUse doesn't appear to work when using AuthRADIUS. I > thought it would proxy the request, and if accepted, check the session > db for the DefaultSimultaneousUse option. Is t

[RADIATOR] DefaultSimultaneousUse while using AuthRADIUS

2013-12-18 Thread Michael
DefaultSimultaneousUse doesn't appear to work when using AuthRADIUS. I thought it would proxy the request, and if accepted, check the session db for the DefaultSimultaneousUse option. Is this suppose to work? ___ radiator mailing list radiator@open

Re: [RADIATOR] Suggestion for Error Message in AuthByLSA / MSCHAPv2

2013-12-11 Thread Michael
doesn't the only error shown, come from the last AuthBy processed? I wanted to see errors for each authby but i had to modify the source code. On 11/12/13 11:46 AM, Johnson, Neil M wrote: > > Heikki, > > You are correct, I'm using multiple AuthBy clauses with AuthByPolicy > ContinueUntilAcceptOr

Re: [RADIATOR] Remote RADIUS servers (proxying)

2013-11-29 Thread Michael
useful name for this Session Database Identifier SDB1 On 29/11/13 06:03 PM, Michael wrote: it doesn't completely disable it. it only disables it for the handler that you put it in. On 29/11/13 05:32 PM, rohan.henry @cwjamaica.com wrote: Michael, I would prefer not to completely disab

Re: [RADIATOR] Remote RADIUS servers (proxying)

2013-11-29 Thread Michael
it doesn't completely disable it. it only disables it for the handler that you put it in. On 29/11/13 05:32 PM, rohan.henry @cwjamaica.com wrote: Michael, I would prefer not to completely disable it since other Handlers are using it. I only want it disabled for a particular Ha

Re: [RADIATOR] Remote RADIUS servers (proxying)

2013-11-29 Thread Michael
doesn't a handler process it by default? I think you have to disable it. I do it like this: Identifier NULL then in your handler, specify : SessionDatabase NULL Note: NULL is not a command or configuration, but an Identifier. On 29/11/13 04:50 PM, rohan.henry @cwjamaica.com wrot

Re: [RADIATOR] Variables

2013-11-26 Thread Michael
red in the users profile. ...Then, the hook pulls them back out later. On 26/11/13 03:38 PM, Michael wrote: sample of the perl Hook? Well, if you're going to just need 1 value, and you are ok with using the Class attribute directly, then you don't need a hook. You would ju

[RADIATOR] AuthBy XML HTTP POST?

2013-11-26 Thread Michael Newton
We have an opportunity to provide authentication for a hotel client based on guest name and room number. The property management system they are using (iTesso) has an HTTP/XML-based server that would need to be authenticated against, queried for matching name/room number, and then have a charge pos

Re: [RADIATOR] Variables

2013-11-26 Thread Michael
es: [zone=$zone,uid=$uid,auth-un=$authed_un,old_zone=$old_zone,un_only=$un_only]"); } } # end sub } On 26/11/13 02:59 PM, rohan.henry @cwjamaica.com wrote: Thanks Michael. Would you be able to share a sample? On Tue, Nov 26, 2013 at 2:39 PM, Michael <mailto:ri...@vianet.ca&g

Re: [RADIATOR] Variables

2013-11-26 Thread Michael
to save other values, you have to place it in the Class attribute in the Reply packet going back to your device. The Class should get saved in the device, and will be there when the Stop packet comes in. I personally save a few values in the Class as coma separated values. When it comes back

Re: [RADIATOR] Radius domain only auth, with password='cisco'

2013-11-06 Thread Michael
i'm looking to stop it. not set it up. i'm not sure what had enabled/configured it to start happening. I guess this is probably the wrong place to ask. On 06/11/13 04:56 PM, Hugh Irvine wrote: > Hello Michael - > > This sounds like Cisco VPDN tunnelling. > > This exa

[RADIATOR] Radius domain only auth, with password='cisco'

2013-11-06 Thread Michael
Has anyone ever seen a situation where, for every authentication attempt to a radiator system from a cisco device, there is an authentication attempt right before it that appears to be: - a domain (the username with the 'username@' part stripped off). - plain text password is always 'cisco'. -

Re: [RADIATOR] Perl expressions

2013-10-23 Thread Michael Hulko
rote: > On 10/21/2013 06:44 PM, Michael Hulko wrote: >> Sorry for the noob type question...but is it possible to evaluate a perl >> expression WITHOUT wrapping the perl code in a Hook? > > Hello Michael, > > I do not there is support for evaluate. > >> such

[RADIATOR] Perl expressions

2013-10-21 Thread Michael Hulko
int(rand(9)); Thanks Michael Hulko Network Analyst Western University Canada Network Operations Centre Information Technology Services 1393 Western Road, SSB 3300CC London, Ontario N6G 1G9 tel: 519-661-2111 x81390 e-mail: mihu...@uwo.ca <mailto:m

Re: [RADIATOR] Radiator LoadBalancing Optimization

2013-09-13 Thread Michael Hulko
Thanks for the response too bad though. Unfortunately, we can only have one radius server instance per NAS (and a backup), but this particular NAS supports the radius proxy clients which are the problem. M On 2013-09-13, at 6:39 AM, Sami Keski-Kasari wrote: > Hello Mich

[RADIATOR] Radiator LoadBalancing Optimization

2013-09-12 Thread Michael Hulko
last server is the slower of the 3 hosts available which I believe is the bottleneck. Thanks Michael Hulko Network Analyst Western University Canada Network Operations Centre Information Technology Services 1393 Western Road, SSB 3300CC London, Ontario N6G 1G9 tel: 519-661-2111 x81390 e-mail

[RADIATOR] Easy 802.1X

2013-08-13 Thread Michael Newton
or has any pointers it would be appreciated. I thought this would be a snap but it is proving to be more difficult than it needs to be! Thanks. -- Michael Newton Manager, Information Systems Point of Presence Technologies *You manage your business. We’ll manage your network.* 114 Parliament Stree

Re: [RADIATOR] proxying POD reply packets

2013-07-16 Thread Michael
On 16/07/13 04:24 PM, Heikki Vatiainen wrote: > On 07/13/2013 08:20 PM, Michael wrote: > >> So, my complicated config determines what device the request needs to >> go to and sends, and then it converts the POD and COA packets to >> accounting packets using scripting, the

Re: [RADIATOR] proxying POD reply packets

2013-07-13 Thread Michael
r now though, adding the NAKed requests to the list in the code i described does make sure the reply packets coming back from the nas's are proxied to the radpwtst client. There's probably a better way of accomplishing this for sure. I'll look into this further Thanks. Michae

Re: [RADIATOR] proxying POD reply packets

2013-07-12 Thread Michael
also, Change-Filter-Request-NAKed would also need to be in that list. On 09/07/13 07:00 AM, Heikki Vatiainen wrote: > On 07/05/2013 09:17 PM, Michael wrote: > >> In AuthRADIUS.pm, routine sub handleReply, should >> "Disconnect-Request-NAKed" also be listed in the code

Re: [RADIATOR] proxying POD reply packets

2013-07-05 Thread Michael
7; || $p->code eq 'Disconnect-Request-ACKed' || $p->code eq 'Disconnect-Request-NAKed' || $p->code eq 'Change-Filter-Request-ACKed') { $op->{RadiusResult} = $main::ACCEPT; On 05/07/13 10:02 AM,

[RADIATOR] proxying POD reply packets

2013-07-05 Thread Michael
Does anyone know of any issues with receiving reply packets from a packet-of-disconnect request which is proxied through radiator? For my POD requests, i inject them into radiator using radpwtst and have them configured to proxy to the proper device. The POD does work. When a session is mat

Re: [RADIATOR] AccountingTable Database Very big

2013-07-01 Thread Michael
are you saying postgresql is really that much better with regards to performance, and worth switching to? On 01/07/13 03:29 AM, a.l.m.bu...@lboro.ac.uk wrote: > Hi, > >> I use mysql database and my AccountingTable has more than 40 million records >> per month. Does anyone here have any policy p

Re: [RADIATOR] AccountingTable Database Very big

2013-06-30 Thread Michael
i use mysql. no i don't have anything that reads the data with a browser. sorry. On 30/06/13 11:33 PM, sergio wrote: > I use mysql database, elterei from MyISAM to InnoDB but I wonder if another > database would not help. > > Very good idea to use your tables YEAR-MES. What database do you use?

Re: [RADIATOR] AccountingTable Database Very big

2013-06-29 Thread Michael
I use monthly tables. that really helped. Then use the year-month attributes in your insert statements. And of course anything that reads this data will have to be altered to support year-month tables. Also an external process that runs monthly to make sure that the tables get created ahead o

Re: [RADIATOR] Radiator & Debian Wheezy = memory problem?

2013-06-19 Thread Michael
realize how hard it would be for someone to help via email on such a matter. thanks anyways though. Michael On 19/06/13 02:19 PM, Christian Kratzer wrote: > Hi, > > On Wed, 19 Jun 2013, Michael wrote: > >> >> 4 radius servers. identical config. the last in the list is

Re: [RADIATOR] Radiator & Debian Wheezy = memory problem?

2013-06-19 Thread Michael
    11:30   0:00 /usr/bin/perl radiusd === On 19/06/13 11:10 AM, Michael wrote: I have this problem too.  Radiator slowly consumes more and more memory as the weeks go by.  Restarting it brings it

Re: [RADIATOR] Radiator & Debian Wheezy = memory problem?

2013-06-19 Thread Michael
I have this problem too.  Radiator slowly consumes more and more memory as the weeks go by.  Restarting it brings it back down.  I have asked this question to, but also got the same answers you did.  Not a radiator problem. On 19/06/13 05:04 AM, Kurt Bauer wrote

Re: [RADIATOR] Loadbalancing requests from Proxy

2013-05-17 Thread Michael Hulko
sent and returned. > > On 5/17/2013 7:12 AM, Michael Hulko wrote: >> One note after implementing EAPBALANCE. I am getting this in the logs with >> a specific user at the moment. >> >> May 17 07:52:09 riptide-2.vm.its.uwo.pri /usr/bin/radiusd[23274]: >> ProxyAlg

Re: [RADIATOR] Additonal Aruba (14823) dictionary attributes

2013-05-17 Thread Michael Hulko
Sorry... cut off the last line... should be: VENDORATTR 14823 Aruba-AirGroup-Shared-Role26 string MH On 2013-05-17, at 9:04 AM, Michael Hulko wrote: > FYI... > > in case you have not already included these in the latest dictionary file, I > have found ne

[RADIATOR] Additonal Aruba (14823) dictionary attributes

2013-05-17 Thread Michael Hulko
t the dictionary file. Just a thought. Thanks Michael Hulko Network Analyst Western University Canada Network Operations Centre Information Technology Services 1393 Western Road, SSB 3300CC London, Ontario N6G 1G9 tel: 519-661-2111 x81390 e-mail: mihu...@uwo.ca <mailto:mihu..

Re: [RADIATOR] Loadbalancing requests from Proxy

2013-05-17 Thread Michael Hulko
another server? Any input would be helpful. My thought is to lower the values for Retries etc. MH On 2013-05-10, at 11:41 AM, Michael Hulko wrote: > Thanks for the suggestion.. this seems to alleviate the timeouts that I had > noticed previously. (Log file was sent separately). &

Re: [RADIATOR] Loadbalancing requests from Proxy

2013-05-10 Thread Michael Hulko
Thanks for the suggestion.. this seems to alleviate the timeouts that I had noticed previously. (Log file was sent separately). MH On 2013-05-10, at 5:26 AM, Heikki Vatiainen wrote: > On 05/09/2013 11:09 PM, Michael Hulko wrote: >> We have been requested to try and loadbalance re

[RADIATOR] Loadbalancing requests from Proxy

2013-05-09 Thread Michael Hulko
# biz-core1 BogoMips 2 # biz-core2 BogoMips 2 # biz-support BogoMips 1 Thanks for any assistance. Michael Hulko Network Analyst Western University Canada Network Operations Centre

Re: [RADIATOR] Handler type Stop/Alive distinguished processing

2013-04-04 Thread Michael
d field for future development Identifier tamesql DBSourcedbi:ODBC:IRONMAN DBUsername XXX DBAuth X # Accept processing of other accounting requests of the genre Alive interim updates Identifier thomas

Re: [RADIATOR] Handler type Stop/Alive distinguished processing

2013-03-27 Thread Michael
o it is more specific than "Re: Contents of radiator digest..." Today's Topics: 1. Re: Handler type Stop/Alive distinguished processing (Michael Newton) -- Message: 1 Date: Wed, 27 Mar 2013 09:41:40 -0700 From: Michael N

Re: [RADIATOR] Bandwidth switch COA advice

2013-03-27 Thread Michael
o the device. I work on devices that have many ips and the POD service seems to only sit on some, possible just one of the nas's ips. On 27/03/13 03:13 PM, Thomas Kurian wrote: Hello Michael, Many thanks for your email. I am just handling the radiator side of our company project . IS

Re: [RADIATOR] Handler type Stop/Alive distinguished processing

2013-03-27 Thread Michael
you would have to configure only 1 Handler, and multiple AuthBy's to do more than one thing with a packet. Michael On 27/03/13 12:41 PM, Michael Newton wrote: On 27 March 2013 09:29, <mailto:radiator-requ...@open.com.au>> wrote: My requirement is to process and handl

Re: [RADIATOR] Bandwidth switch COA advice

2013-03-27 Thread Michael
d then you have the ability to log that action. The nas needs to be setup with the POD server to accept these requests. Michael On 27/03/13 05:16 AM, Thomas Kurian wrote: Hello Friends, I want to do a COA ,to switch the bandwidth profile of the users after they exceed maximum their alloca

Re: [RADIATOR] Handler type Stop/Alive distinguished processing

2013-03-27 Thread Michael Newton
On 27 March 2013 09:29, wrote: > > My requirement is to process and handle ,Alive and Stop packet separately > and the configuration must be called/processed separately ,each time the > radiator receives it based on the Acct Status type as described above. > Please help me out , i could not find

[RADIATOR] Radmin - L2TP Multihop via Radius

2013-02-03 Thread Michael Bellears
Hi Guys, Our current setup is - We have multiple DSL realms all configured on our radmin/radiator server and approx 15 vpdn-groups on our LNS that connect to the carriers LACs. We are adding a new dsl realm, connection requests for the new realm will be coming from the same LAC's, but we want

[RADIATOR] Radmin - still active?

2013-01-31 Thread Michael Bellears
Hi Guys, We have been running Radiator/RAdmin for many years - I have a question, but the RAdmin list appears to be inactive (last post in 2011?) Cheers. ___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator

[RADIATOR] format_special for GENERIC attributes.

2013-01-25 Thread Michael
Suggestion... I just noticed that when using GENERIC attribute name for AuthColumnDef in which allows for a comma separated attribute list, the result from the select query is not passed through format_special therefore I can't use global variables. --- old/Radius/AuthSQL.pm 2013-01-07

Re: [RADIATOR] New Error messages

2013-01-18 Thread Michael Hulko
to version 4.10 ?? MH On 2013-01-17, at 12:31 PM, Alexander Hartmaier wrote: > On 2013-01-17 17:31, Michael Hulko wrote: >> Lately I've been seeing these errors daily which were not there prior to the >> new year: >> >> Jan 8 20:18:36 riptide-2.vm.its.uwo.pri /usr

Re: [RADIATOR] New Error messages

2013-01-17 Thread Michael Hulko
My mistakefat fingered I guess. We are running 4.10 on Linux MH On 2013-01-17, at 12:31 PM, Alexander Hartmaier wrote: > On 2013-01-17 17:31, Michael Hulko wrote: >> Lately I've been seeing these errors daily which were not there prior to the >> new year: >> &g

[RADIATOR] New Error messages

2013-01-17 Thread Michael Hulko
te Radius/EAP_57.pm in @INC (@INC contains: . /usr/local/lib64/perl5 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5 .) at (eval 2742617) line 3, line 532256. can someone shed some lightwe are running Radiator version 10 Thanks

Re: [RADIATOR] Monitor commands

2012-12-06 Thread Michael Hulko
Thanks everyone for the input. MH :) On 2012-12-05, at 10:57 PM, Hugh Irvine wrote: > > Hi Michael - > > Sure - telnet or whatever to the Monitor port. > > regards > > Hugh > > > On 6 Dec 2012, at 12:00, Michael Hulko wrote: > >> That'

Re: [RADIATOR] Monitor commands

2012-12-05 Thread Michael Hulko
That's where I was headed with the original question. Whether the commands can be run locally against the server itself. Make the call to itself essentially.. Thoughts MH On 2012-12-05, at 5:31 PM, Hugh Irvine wrote: > > Hi Michael - > > In that case I would probably ju

Re: [RADIATOR] Monitor commands

2012-12-05 Thread Michael Hulko
ds by our developers? regards; MH :) On 2012-12-05, at 5:05 PM, Hugh Irvine wrote: > > Hello Michael - > > Why don't you just use the StatsLog clause? > > See sections 5.94 and 5.95 in the manual ("doc/ref.pdf"). > > regards > > Hugh >

Re: [RADIATOR] Monitor commands

2012-12-05 Thread Michael Hulko
rite the values into a log file for extraction would be easier. Any other suggestions would be appreciated. Thanks for your time and input MH On 2012-12-04, at 4:19 PM, Heikki Vatiainen wrote: > On 12/04/2012 09:43 PM, Michael Hulko wrote: > >> Just wondering if there is a way to e

[RADIATOR] Monitor commands

2012-12-04 Thread Michael Hulko
Just wondering if there is a way to execute the Monitor command language local to the Radiator server? Michael Hulko Network Analyst Western University Canada Network Operations Centre Information Technology Services 1393 Western Road, SSB 3300CC London, Ontario N6G 1G9 tel: 519-661-2111

Re: [RADIATOR] A few tips on performance and high availabilty

2012-12-03 Thread Michael
This memcache sounds pretty nice. I do experience many pppoe logins where a router will constantly attempt to login which is fine at a slow rate. Some router (usually Dlink) must be defective as they sometimes attempt to login WAY TOO often. My personal record i've seen is about 12 times a

Re: [RADIATOR] SQL Timeout

2012-11-20 Thread Michael
I see this query timeout issue quite often. I have a 4 system sql replication ring though, so it just moves onto the next one and keeps humming. not sure what's causing the timeout though. On 20/11/12 04:33 PM, Heikki Vatiainen wrote: > On 11/20/2012 02:27 PM, Ricardo Martinez wrote: >> Is the

Re: [RADIATOR] SQL Timeout

2012-11-19 Thread Michael
I think you would have to query a 2nd time within 60 seconds in order to see the BackOff in the log. On 19/11/12 02:44 PM, Ricardo Martinez wrote: Hello Michael. I have modified the AuthByPolicy fro mContinueWhileIgnore for And now it jumps to the second AuthBy, but is not marking the DB

Re: [RADIATOR] SQL Timeout

2012-11-19 Thread Michael
looks like your first AuthBy SQL is answering accept. is this maybe because you don't have any 'check' options at all? Then if accept, never process the AuthBy FILE because of ContunueWhileIgnore. For example, maybe you need at least one check option: AuthColumnDef 1, Encrypted-Password, ch

Re: [RADIATOR] SessionDB::RADONLINE::Deletion Failing

2012-11-13 Thread Michael
al section 5.10.4 On 13/11/12 02:34 PM, Michael wrote: 5.10.4 DeleteQuery This SQL statement is executed whenever a user session finishes (i.e. when an Account- ing-Request Stop message is received). It is expected to remove the details of the ses- sion from the SQL database. Special

Re: [RADIATOR] SessionDB::RADONLINE::Deletion Failing

2012-11-13 Thread Michael
5.10.4 DeleteQuery This SQL statement is executed whenever a user session finishes (i.e. when an Account- ing-Request Stop message is received). It is expected to remove the details of the ses- sion from the SQL database. Special formatting characters may be used. %0 is replaced by the quoted u

Re: [RADIATOR] Radiator does not wait for RADIUS requests

2012-11-06 Thread Michael
and if the secret is wrong, i'm pretty sure it will show the connection in the debug logs. On 06/11/12 02:38 PM, alan buxey wrote: > Hi, >> I entered the correct password. > did you? All I have seen you say so far is that you used > > > perl radpwtst -user mikem -password fred -auth_port 181

Re: [RADIATOR] verifying online sessions with SNMP

2012-11-05 Thread Michael
someone may still want to add the error detection though. On 01/11/12 02:07 PM, Michael wrote: > I'm having some issues with verifying online session with the > DefaultSimultaneousUse option. I keep seeing that sessions are "gone > away". Messages in the log such as: > Thu

Re: [RADIATOR] Accounting records are not written to database

2012-11-01 Thread Michael
and authorization in the same handler is tricky. Michael On 01/11/12 05:07 PM, rohan.he...@cwjamaica.com wrote: Hugh, Config and logs attached. And the application crashed when testing Simultaneous-Use for both configurations below. In my AuthBy config: "DefaultSimultaneou

[RADIATOR] verifying online sessions with SNMP

2012-11-01 Thread Michael
and '/usr/bin/snmpget -c "" 0.0.0.0 iso.org.dod.internet.private.enterprises.9.9.150.1.1.3.1.2.26740905 2>&1' failed with an error: iso.org.dod.internet.private.enterprises.9.9.150.1.1.3.1.2.26740905: Unknown Object Identifier (org.dod.internet.private.enterprises.9.9.150.1

Re: [RADIATOR] Change of Authorization

2012-10-15 Thread Michael
hat logs this request which is not required but i wanted to log it. There's much more to it, but I don't want to get too deep here. it all pretty much revolves around building the Change-Filter-Request packet with "./radpwtst -code Change-Filter-Request" and ether send

Re: [RADIATOR] Multi-Line Handler issues with 4.10

2012-08-13 Thread Michael
yep, correct. The multi-line config support was broken in 4.10 then partially fixed with then patch-set. A couple points of interest for the fix though, that i have changed for myself. This is my own personal opinion and may not be agreed with anyone else: Ignoring commented lines in config

  1   2   3   4   >