e logs are "Duplicate
Requests" from the NASs sometimes and sometimes Radiator will die, but
INETD restarts it as soon as it receives a request.
Any suggestions would be more than helpful.
Thanks all,
-Ronan
Ronan Eckelberry
[EMAIL PROTECTED]
Network/Systems Engineer
Webco Solution
FailureFormat %l:%U:%P:FAIL:%1:%{Calling-Station-Id}
Any input would be appreciated. Thanks for all the help guys.
:)
-Ronan
-Original Message-
From: Hugh Irvine [mailto:[EMAIL PROTECTED]]
Sent: Thursday, 24 January, 2002 22:51
To: Ronan Eckelberry; [EMAIL PROTECTED]
S
x27;,
'%{Timestamp}', '%{Framed-IP-Address}', '%{NAS-Port-Type}',
'%{Service-Type}', '%{Calling
-Station-Id}', '%{Called-Station-Id}')
ClearNasQuery delete from RADONLINE where NASIDENTIFIER='%N'
CountNasSessionsQuery select ACCTS
I use a SIMLOGIN field in MySQL in conjunction with the Session
Database in Radiator to handle this. I only allow 1 login at a time per
username unless the customer is paying for more than one computer to
connect at a time. If someone calls and can't log in, the Radiator logs
will show t
Title: Message
Tony,
I am using the RewriteUsername inside my realm statement to
do this.
RewriteUsername s/^([^@]+).*/$1/
...
...
It seems to be working for me. You may want to try
that.
-Ronan
-Original Message-From: [EMAIL PROTECTED]
[mailto:[EMAIL
Tony,
Unless you have a Address Pool assigned to the RAS, then the
customer will not be given an address and they will either be
disconnected by the RAS, or if they are not disconnected, they will not
be given an IP.
-Ronan
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL P
lly I
am trying to use it so that our users can see their total time for the
month, but like I said, it is displaying everything in the accounting
table. Is there a way that I can change this. If this was answered in
the list earlier and I didn't see it, I apologize.
Thanks,
-Ronan
Ron
ying every accounting record. I submitted to the list what I did
to fix this though. :)
Thanx for the quick reply anyways. :)
-Ronan
-Original Message-
From: Hugh Irvine [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, 13 February, 2002 18:53
To: Ronan Eckelberry
Cc: [EMAIL PROTECTED]
S
Terry,
Check out Section 6.47 in the Radiator manual. It is on AuthLog. That
should be what you are looking for.
-Ronan
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On
Behalf Of [EMAIL PROTECTED]
Sent: Friday, 15 February, 2002 12:26
To: [EMAIL PROTECTED]
Sub
y, 15 February, 2002 14:30
To: Ronan Eckelberry; [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: RE: (RADIATOR) Logging failed authentication attempts
As a bonus, here's what we do:
#
Identifier AUTH_LOGGER
Filename%D/Authentica
Shaun,
The syntax look right. It is case sensative though...make sure
you have everything in the same case that is is in your database. It
might help for you to reply to the list with a Trace of the Radiator
log.
-Ronan
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL
David,
Please respond with a copy of your config (No Secrets) and a Trace 4
debug from the Radiator log. I had the same type of problem when I
first switched. There was something wrong in my config, but I don't
remember what it was.
-Ronan
-Original Message-
From: [EMAIL PROTECTED
This might have something to do with your config on the AS5300.
What IOS are you running? I had similar problems until I flashed to a
new IOS.
-Ronan
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On
Behalf Of Fabio Nitti (TEI)
Sent: Wednesday, 20 February
They should be in your Radiator directory. Not in the goodies
directory. That is where mine were from source. Never extracted from
RPM though.
-Ronan
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On
Behalf Of Tunde Itayemi
Sent: Wednesday, 20 February, 2002
What kind of NAS are you using? It may be quicker to have the
NAS assign the IP from a pool.
-Ronan
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On
Behalf Of Dirk Laan
Sent: Thursday, 21 February, 2002 15:49
To: Radiator Mailing
Subject: (RADIATOR) DHCP
Are you putting spaces after the username in the database?
-Ronan
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On
Behalf Of Shaun Eck
Sent: Thursday, 21 February, 2002 16:56
To: [EMAIL PROTECTED]
Subject: (RADIATOR) Radiator configuration File and Password
Hi
t executing the statement. Is
there any specific place that I should put it in the config?
-Ronan
Ronan Eckelberry
[EMAIL PROTECTED]
Network/Systems Engineer
Webco Solutions, Inc
(352)746-2500
www.webcosolutions.com
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAI
I don't know about all of you, but my Radiator uses SNMP and it
querys the NAS to see if a user is still on.if they are not, it
removes them from RADONLINE and lets them connect. It doesn't detect
the NAS restarting, but it does query it with SNMP and sees that the
user is no longer o
If you don't use the "dialer in-band" directive in the config
(Which makes the dialer a DDR interface), you do not need to set an idle
timeout, and it does not default to 2 mins. It will only default to 2
mins if you specify "dialer in-band" and do not set a "dialer
idle-timeout".
-Ronan
Most likely those ports are opened to communicate with the other
RADIUS and/or SQL servers that you are proxying to. Do a netstat to see
what addresses that they are connected to. You will probably see that
it is the other servers. RADIUS RECEIVES Authentication and Accounting
requests
And you only see these ports open when you are running Radiator.
If you kill radiusd, the ports are no longer open?
-Ronan
-Original Message-
From: Jim Liebgott [mailto:[EMAIL PROTECTED]]
Sent: Thursday, 07 March, 2002 14:30
To: Ronan Eckelberry
Cc: [EMAIL PROTECTED]
Subject
u log.
That's weird. You may have something in your config that is
opening those ports.
-Ronan
-Original Message-
From: Jim Liebgott [mailto:[EMAIL PROTECTED]]
Sent: Thursday, 07 March, 2002 15:03
To: Ronan Eckelberry
Cc: [EMAIL PROTECTED]
Subject: Re: (RADIATOR) unk
PROTECTED]
Cc: Ronan Eckelberry; [EMAIL PROTECTED]
Subject: RE: (RADIATOR) unknown ports
Just one thought:
I haven't been reading this thread in all its detail, but this might be
of some value. Some time back, I believe when we transitioned from USR
to Cisco NASes, we started getting log entries
Alan,
Try adding these to your config on the Cisco PIX.
radius-server vsa send accounting
radius-server vsa send authentication
-Ronan
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On
Behalf Of Alan Attard
Sent: Friday, 22 March, 2002 08:42
To: Mike McC
You would use the PORTLIMIT Reply Attribute for that. For
example an ISDN would have a PORTLIMIT of 2 and both channels would be
assigned the same IP address.
-Ronan
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On
Behalf Of Leon Oosterwijk
Sent: Thursda
It would probably be easier to see your config (no secrets), but
I am willing to bet that in one of your clauses there is no
secret. Are you defining them all separate or are you using the
"IdenticalClients"? Check line 37 in your config and see if it has a
secret in the client clause.
02 16:12
To: Ronan Eckelberry
Cc: [EMAIL PROTECTED]
Subject: RE: (RADIATOR) CFG files diffs
Here is the .cfg file. The documentation seems to indicate that the
secret is not need because it is in the mysql database.
There is not much to the logfile but it is at the end of the cfg.
Foreground
L
Stephen,
Try changing your AuthSelect. I do basically what you are
saying by adding "AND ACTIVE='Y'". In your case it would be something
like "AND status='1'"
Here is my AuthSelect:
AuthSelect select PASSWORD,PORTLIMIT,STATICIP,SIMLOGIN from SUBSCRIBERS
where USERNAME='%n' AND ACTIVE=
No Such User" for my FAIL reason because
of the way my AuthByPolicy is setup, but you may get different
results...
Hope this help a little.
-Ronan
-Original Message-
From: Stephen Malenshek [mailto:[EMAIL PROTECTED]]
Sent: Monday, 08 April, 2002 13:04
To: 'Ronan Eckelbe
Can't be sure without the config, but do you have it in there as
Framed-IP-Address=193.1.1.1 or as you say, Framed IP Address =
193.1.1.1? If not, check your log to see if it is erroring out. Try it
the way it is in the dictionary file.
-Ronan
-Original Message-
From: [EMAIL P
I am using Radiator with an AS5300. It may help if I could see
your configs (no secrets) and a Trace 4 debug from Radiator.
-Ronan
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On
Behalf Of Anthony D Cennami
Sent: Thursday, 18 April, 2002 10:58
To: [EMAI
o the
Stop records showing the amount of errors (CRC, etc) that the user
received? We are trying to track down certain PRIs that may be having
trouble. It sucks living in an area where the phone lines have not been
upgraded and have been in the ground for 20+ years. :)
Thanks for the help!
-Ro
Title: Message
Jack,
Take a look at the mailing list archives and look for "AcctSQLStatement"
You should find quite a few in there matching what you are looking for.
That is the statement that is mostly used to "update" the MySQL row when the
user logs off.If you cannot see what
o add my
entire LDAP users into another user table and set Max_Time limits on
them.
I appreciate your
input.
Thanks
Jack
-Original
Message-From: Ronan
Eckelberry [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 30, 2002 6:33
PMTo: 'Jaskaran Singh';
[EMAIL PROTECTED]S
x27;%N'
CountQuery select NASIDENTIFIER, NASPORT, ACCTSESSIONID from RADONLINE
where USERNAME='%u'
DBSource dbi:mysql:radius:xxx.xxx.xxx
DBUsername xxxxx
DBAuth x
DeleteQuery delete from RADONLINE where NASIDENTIFIER='%N' and
NASPORT=0%{NAS-Port}
Description
ay to form the Reject message to a custom message. I already have
RejectHasReason for this. The only way that I have thought I could do
this is with a PostAuthHook.
Any suggestions?
-Ronan
Ronan Eckelberry
[EMAIL PROTECTED]
Sr. Network/Systems Engineer
WEBco Solutions, Inc
(35
I would try ContinueUntilReject. :)
-Ronan
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On
Behalf Of Jaafar Bin Sarim
Sent: Thursday, 18 July, 2002 20:53
To: [EMAIL PROTECTED]
Subject: (RADIATOR) Problem: AuthByPolicy
Hello Hugh
I'm unable to establis
Whoever is on the list that is using this service, could you
please do something about it so people do not get this message everytime
they post to the list?
Thanks,
-Ronan
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, 18 July, 2002 21:27
Title: Message
I
receive the same error. I'm not sure if it is from duplicate ACCOUNTING
packets, or maybe some of my NASs are not using the Session-Timeout. I
would like to know if there is any other reason for this as
well.
-Ronan
-Original Message-From: [EMAIL PROTECTED
Ronan
-Original Message-From: Shaun [mailto:[EMAIL PROTECTED]]
Sent: Friday, 02 August, 2002 19:19To: Ronan Eckelberry;
[EMAIL PROTECTED]Subject: Re: (RADIATOR) negative balancetime
hello again
You're rite about the duplicate accounting packets.
I've checked our detail file
That's rightI knew it was a config change, but I couldn't remember
what it was. Missed it when looking through all the old backup configs...
-Ronan
- Original Message -
From: "Fabio Nitti (TEI)" <[EMAIL PROTECTED]>
To: "Ronan Eckelberry&quo
#x27;
AddToReply Service-Type="Framed-User", \
Framed-Protocol="PPP", \
Framed-IP-Netmask = 255.255.255.255
- Original Message -
From: "Hugh Irvine" <[EMAIL PROTECTED]>
To: "Ronan Eckelberry" <[EMAI
Cool. thanx for the info Hugh. One other question thoughwould I
still get the same result if I changed the AuthByPolicy to
ContinueUntilAccept?
-Ronan
- Original Message -
From: "Hugh Irvine" <[EMAIL PROTECTED]>
To: "Ronan Eckelberry, Network/Systems Adm
Try naming the realm
DEFAULT. It looks at anything after the @ to determine the realm
name. So, if a customer logs in as [EMAIL PROTECTED], it is going to look for a realm
called . By default, if Radiator finds no matches, it
will try to use .
-Ronan
- Original Message
Hugh,
Thanx for the quick replyonce again you guys are great.
Is there a way to only send this reply on an Access-Reject? Of course I
don't want this coming back on every reply. :)
-Ronan
- Original Message -
From: "Hugh Irvine" <[EMAIL PROTECTED]>
45 matches
Mail list logo
