Re: (RADIATOR) Buffer Overflow in Radius

2001-07-10 Thread sj
e compiler enhancements such as StackGuard and make your stack non-executable (this won't prevent _all_ the buffer overruns but will help a lot). If you're running Linux 2.2.x you can try Solar Designer's openwall kernel patch SJ. Vajon mit eszik egy ilyen macska ? Csak nem az uj k

Re: (RADIATOR) Help with Encryption

2001-01-19 Thread SJ
Hello Doug ! If you have used CHAP before the cleartext->md5 conversion, you should move to PAP. Janos SUTO GTS-Datanet On Thu, 18 Jan 2001, Doug Currey wrote: > I have converted my Radius system from AuthbyFile to AuthbySQL. > > Have it up and running correctly but I am using clear text pas

Re: (RADIATOR) MD5 crypt()..

2001-01-03 Thread SJ
Hello Chris You may confuse MD5 with DES. DES uses a salt unlike MD5. A little hack in the code will help you. Hugh or others may give you hints where to modify if needed. Janos SUTO GTS-Datanet On Wed, 3 Jan 2001, Chris Keladis wrote: > Hi folks, > > I'm a little unclear about encrypted pass

Re: (RADIATOR) active session & mrtg

2001-01-03 Thread SJ
Hello >>...how many users are logged in If you need the number of users logged in to an access server find that oid and have MRTG poll it. You can add up the users of several NASs too. Janos SUTO GTS-Datanet On Wed, 3 Jan 2001, Robin Gruyters wrote: > No, I mean how many users are logged in >

Re: (RADIATOR) No such attribute

2000-12-12 Thread SJ
zon_dnis is not a standard attribute. If you want an own attribute, add it to the dictionary file. Janos SUTO On Tue, 12 Dec 2000, Lisa Goulet wrote: > Hi all, > > I have a PreHandlerHook which is being executed correctly. However I see a > "Warning: No such attribute.." in the logfile: > >

Re: (RADIATOR) RE: Radpwtst in cgi-bin

2000-12-12 Thread SJ
>>I am writing an authentication cgi. This cgi will authenticate people... >>for example http://faa.foo.com/cgi-bin/auth.cgi?user=fred&password=fred It's a very bad practise to put authentication info to the URL. It gets logged by the webserver itself and possibly by proxies. You should use a f

RE: (RADIATOR) What is this? A bug, a DOS attack?

2000-12-01 Thread SJ
Hello Luis We also tried it, using the trash string you mentioned bellow, but after few seconds we got back the logon prompt. Note that we don't use LDAP. If I were you I should try the following: RewriteUsername tr/a-zA-Z0-9_\.\@//dc It filters out anything except letters, numbers, underscore,

(RADIATOR) changing an attribute

2000-11-08 Thread SJ
Hello I would like to change an attribute to an arbitrary value. E.g: h323-voice-quality = 0 but I would like radiator to change its value, ie. I would like to see 'h323-voice-quality = 2' in the log file. I can get that attribute's value: my $h = ${$_[0]}->get_attr('h323-voice-quality'); I tho

Re: (RADIATOR) MD5 and SHA encrypted passwords.

2000-10-24 Thread SJ
Hello MD5 and SHA1 are hash algorithms. Unlike crypt, they need no salt at all. Hence the encoded result is always the same if your input data has not changed. I don't know what fred's password /try fred/. Anyway MD5 and SHA1 can give you the hash in a binary or in a hex. form. The encoded passw

Re: (RADIATOR) MD5 password encryption.

2000-10-20 Thread SJ
On Fri, 20 Oct 2000, Carles Xavier Munyoz [iso-8859-1] Baldó wrote: > Hi, > I'm going to use the MD5 password encryption mecanism for the user > password stored in the Radiator users data base. > I have two cuestions: > (1) May I use the format: > Password = $1$dfaraefaerqwfdsqwef > or must I

Re: (RADIATOR) how can i automatically disconnects user

2000-10-04 Thread SJ
Hello Joy You can set and send Session-Timeout reply attribute to the NAS, which indicates the max. available time to the connected user. If it expires, the NAS will automatically disconnect the user. And/Or you can write a short script - probably with expect - which logs in the NAS and terminat

Re: (RADIATOR) Radius dies when username field in the request containsabnormal characters

2000-09-27 Thread SJ
Hello Asif, When you rewrite the username, try: RewriteUsername tr/a-z0-9\@\.//dc This allows only lowercase letters /a..z/, digits /0-9/, @ and . SUTO Janos GTS-Datanet On Wed, 27 Sep 2000, Asif Rumani wrote: > Hello, > > I am using Radiator Version 2.16.3, MySQL version 3.22.32 bo

Re: (RADIATOR) Apache PAM module

2000-09-25 Thread SJ
Hello ! Does anybody know where can I find the Apache PAM modul, which I can use Radius requests to authenticate with ? SUTO Janos GTS-Datanet === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiat

Re: (RADIATOR) [HELP] Steps to use radacct for individual use?

2000-09-20 Thread SJ
Dear Frederic, Try the following: Create a password protected directory in your cgi-bin dir. Ie. create a .htaccess and a . htpasswd file. If you don't know how to do this, consult your apache manual. Then put the radacct script to that protected dir. When a user tries to access his/her own sta

Re: (RADIATOR) username case insensitive?

2000-07-05 Thread sj
Hello Christian ! You probably use MySQL. Though (s)he cannot be logged in in more instances you allowed him/her. >From the MySQL main features: "All data are saved in ISO-8859-1 Latin1 format. All comparisons for normal string columns are case insensitive." One solution could be if you lowerca

Re: (RADIATOR) Time =

2000-06-23 Thread sj
Hello ! I think your "Time = " statement is correct but a comma (,) is missing in the previous line. SUTO Janos GTS-Datanet Tel: +36-1-4524458 On Fri, 23 Jun 2000, Dean Brandt wrote: > > Hi Guys > > In my /etc/raddb/users file I have this: > > timer User-Password = "xx

(RADIATOR) Re: request types in a hook

2000-06-16 Thread sj
? Thank you. SJ. === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.

(RADIATOR) Request types in hooks

2000-06-16 Thread sj
Hello All ! How can I get the request type and the reply type inside a hook ? I.e. whether it is an Access-Request or an Accounting-Start Request ... and it is successful or rejected etc. SJ. === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe

(RADIATOR) Hooks

2000-06-15 Thread sj
nish; $dbh->disconnect(); } When I tried to run the script from the command line, it decremented the MINUTES column by 1. When I used the radpwtst utility, it decremented by 3, I think the script has run 3 times. Can someone tell me what's wrong ? SJ. === Archive at http://www.starport.n

(RADIATOR) prepaid customers

2000-06-15 Thread sj
rows: USERNAME,PASSWORD,ENCRYPTEDPASSWORD,CHECKATTR,REPLYATTR Or should I have a new column called MINUTES ? Can someone give me some giudelines how to achieve this ? Examples are welcome. SJ. === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe,