Re: [RADIATOR] Question about TACACS group assignment based on AD groups

2016-10-12 Thread Hartmaier Alexander
Hi Daniel, we generate the Client config blocks using ClientListSQL from our NMS database. The identifier is the hostname and we use the OSC-Group-Identifier set to the support group name for further distinguishment in the handlers. We also add other metadata like OSC-Customer-Identifier for logg

Re: [RADIATOR] Question about TACACS group assignment based on AD groups

2016-09-07 Thread Hugh Irvine
Hello Daniel - You can use Identifiers in your Client clauses to indicate what sort of device they are, then use those identifiers in your Handlers. Something like this: …… Identifier Firewall ….. Identifier Firewall ….. Identifier Switch

[RADIATOR] Question about TACACS group assignment based on AD groups

2016-09-07 Thread daniel.herrmann
Hi all, I want to use Radiator both for RADIUS and for TACACS for Cisco devices, including command level authorization. Based on some posts on this list I got both the active directory and the TACACS server module up and running, but struggle with the configuration of both. If I understand cor

Re: [RADIATOR] Question about regex matching realm in handlers

2016-02-11 Thread David Rose
Heikki, Now that you assembled the pieces for me, it makes perfect sense. I figured I had to be missing something. Thank you! David On 2/11/2016 5:17 AM, Heikki Vatiainen wrote: > On 10.2.2016 23.31, David Rose wrote: > >> However, if I comment out the two "[TTLS|PEAP]_INNER_GENERIC" handlers >

Re: [RADIATOR] Question about regex matching realm in handlers

2016-02-11 Thread Heikki Vatiainen
On 10.2.2016 23.31, David Rose wrote: > However, if I comment out the two "[TTLS|PEAP]_INNER_GENERIC" handlers > and associated statements (i.e. no other changes to client config or > anywhere else) and restart Radiator, "tu...@iit.edu" no longer matches > the regex and the inner request is then c

[RADIATOR] Question about regex matching realm in handlers

2016-02-10 Thread David Rose
Not sure if this is normal behavior or not as I am a bit new to Radiator, however it seems odd to me. Maybe someone can explain it or point out what I might be doing wrong? Configuring a Radiator server (tried with both 4.15 & 4.16) to provide authentication for wireless, and most things have gone

Re: [RADIATOR] Question about AuthByPolicy anything else and AuthBy SQL

2012-06-27 Thread Ricardo Martinez
iator-boun...@open.com.au] En nombre de Heikki Vatiainen Enviado el: miércoles, 27 de junio de 2012 17:35 Para: radiator@open.com.au Asunto: Re: [RADIATOR] Question about AuthByPolicy anything else and AuthBy SQL On 06/27/2012 11:23 PM, Ricardo Martinez wrote: > I’m using Radiator 3.1.13 Versio

Re: [RADIATOR] Question about AuthByPolicy anything else and AuthBy SQL

2012-06-27 Thread Heikki Vatiainen
On 06/27/2012 11:23 PM, Ricardo Martinez wrote: > I’m using Radiator 3.1.13 Version 3.x is quite old, so you could consider upgrading in case they are more problems. > I have this configuration file : I think the main problem is this: DBusername user The option is slightly inc

[RADIATOR] Question about AuthByPolicy anything else and AuthBy SQL

2012-06-27 Thread Ricardo Martinez
Hello. I’m using Radiator 3.1.13 I have this configuration file : AuthByPolicy anything else DBSourcedbi:Oracle:DEV DBusername user DBAuth

Re: [RADIATOR] question about machine based authentication

2011-12-09 Thread Joy Veronneau
Ok, that's what I was looking for! putting DEFAULT in the file yields the desired behavior. Thanks! Joy On 12/8/11 5:47 PM, "Heikki Vatiainen" wrote: >On 12/09/2011 12:31 AM, Joy Veronneau wrote: >> Hmm, but EAPTLS_NoCheckId also doesn't check that the cert name matches >> the computer name. S

Re: [RADIATOR] question about machine based authentication

2011-12-08 Thread Heikki Vatiainen
On 12/09/2011 12:31 AM, Joy Veronneau wrote: > Hmm, but EAPTLS_NoCheckId also doesn't check that the cert name matches > the computer name. Seems like I would want the cert name checked? > Is there a way I can still check the cert name? In this case you could try not enabling EAPTLS_NoCheckId and

Re: [RADIATOR] question about machine based authentication

2011-12-08 Thread Joy Veronneau
Hmm, but EAPTLS_NoCheckId also doesn't check that the cert name matches the computer name. Seems like I would want the cert name checked? Is there a way I can still check the cert name? Sorry to have so many questionsŠ Thanks, Joy On 12/8/11 5:26 PM, "Heikki Vatiainen" wrote: >On 12/09/2011 12

Re: [RADIATOR] question about machine based authentication

2011-12-08 Thread Heikki Vatiainen
On 12/09/2011 12:15 AM, Joy Veronneau wrote: > But if I do that, I will still have to have the names of the machines in > the tls_anon file, wouldn't I? Good point, I overlooked that part. Please see ref.pdf section "5.20.46 EAPTLS_NoCheckId". You can turn off the name check. Thanks! Heikki > T

Re: [RADIATOR] question about machine based authentication

2011-12-08 Thread Joy Veronneau
But if I do that, I will still have to have the names of the machines in the tls_anon file, wouldn't I? Thanks, Joy On 12/8/11 5:07 PM, "Heikki Vatiainen" wrote: >On 12/07/2011 11:42 PM, Joy Veronneau wrote: > >Hello Joy, > >> I am still working on my machine based authentication config. >> >

Re: [RADIATOR] question about machine based authentication

2011-12-08 Thread Heikki Vatiainen
On 12/07/2011 11:42 PM, Joy Veronneau wrote: Hello Joy, > I am still working on my machine based authentication config. > > Config1 (below) works fine but requires that the names of the machines be > listed in the file tls_anon. Try with something like this: AuthByPolicy ContinueWhileAccept

Re: [RADIATOR] question about machine based authentication

2011-12-07 Thread Joy Veronneau
Hi, I am still working on my machine based authentication config. Config1 (below) works fine but requires that the names of the machines be listed in the file tls_anon. I need to modify this config so that I do not need to maintain a list of host names on the radiator server and so that I can ex

Re: [RADIATOR] question about machine based authentication

2011-11-19 Thread Heikki Vatiainen
On 11/19/2011 12:18 AM, Joy Veronneau wrote: > I think I need some more help with my config. It is working ok for my > machine cert based authentication, but only if I put the name of the > machine in a file on the radius server. Here is my config snippet: You could experiment using . Instead of

Re: [RADIATOR] question about machine based authentication

2011-11-18 Thread Joy Veronneau
Hi, I think I need some more help with my config. It is working ok for my machine cert based authentication, but only if I put the name of the machine in a file on the radius server. Here is my config snippet: Identifier TLS Filename %D/tls_anon EAPType TLS EAPTLS_CAFile /app/radius/keys/ADRoot

Re: [RADIATOR] question about machine based authentication

2011-11-15 Thread Heikki Vatiainen
On 11/15/2011 07:43 PM, Joy Veronneau wrote: > I've made some progress on this. The windows 7 machine is now contacting > the radius server, but its username starts with "host/" and radiator > doesn't seem to like that. Should the machine be sending some sort of > different username? I don't think

Re: [RADIATOR] question about machine based authentication

2011-11-15 Thread Joy Veronneau
Hi, I've made some progress on this. The windows 7 machine is now contacting the radius server, but its username starts with "host/" and radiator doesn't seem to like that. Should the machine be sending some sort of different username? I don't think I can get the request to the correct handler

Re: [RADIATOR] question about machine based authentication

2011-11-10 Thread Heikki Vatiainen
On 11/09/2011 09:46 PM, Joy Veronneau wrote: > Is it possible for the radiator server to do machine-based > authentication (via certificate) to an Active Directory domain? You may want to check if the really mean certificates, since machine based authentication can work with PEAP/EAP-MSCHAP-V2 t

[RADIATOR] question about machine based authentication

2011-11-09 Thread Joy Veronneau
Hi, Is it possible for the radiator server to do machine-based authentication (via certificate) to an Active Directory domain? I have MSCHAPv2 working to our AD domain with username/password, but now someone is asking about machine-based authentication. They are currently doing this with an MS r

Re: [RADIATOR] Question on FarmSize, SocketQueueLength, and net.core.rmem_max on Linux

2011-08-24 Thread Heikki Vatiainen
On 08/23/2011 05:52 PM, Frank Danielson wrote: > We are currently running Radiator 4.7 under Redhat 5.5 and I am > trying to make sure I understand the effect that the FarmSize > setting has on the amount of memory allocated for the SocketQueue. > > If Radiator is configured with some FarmSize do

[RADIATOR] Question on FarmSize, SocketQueueLength, and net.core.rmem_max on Linux

2011-08-23 Thread Frank Danielson
We are currently running Radiator 4.7 under Redhat 5.5 and I am trying to make sure I understand the effect that the FarmSize setting has on the amount of memory allocated for the SocketQueue. If Radiator is configured with some FarmSize does each worker have its own SocketQueue with the effect

Re: [RADIATOR] Question about IP Pool.

2011-08-21 Thread Heikki Vatiainen
On 08/20/2011 09:07 PM, Faisal Imtiaz wrote: Hello Faisal, > I am currently using Raditor configured with mysql for authenticating > DSL Subscribers. So far we have been allocating fixed IP addresses & > framed routes as needed for the subscribers. > > We have bunch of subscribers who need to

[RADIATOR] Question about IP Pool.

2011-08-20 Thread Faisal Imtiaz
Hello, I am currently using Raditor configured with mysql for authenticating DSL Subscribers. So far we have been allocating fixed IP addresses & framed routes as needed for the subscribers. We have bunch of subscribers who need to be on dynamic IP's. There is a RADPOOL table, that I can add

Re: [RADIATOR] Cisco WLAN Controller and radiator...question

2010-10-06 Thread Hugh Irvine
Hello - Radiator will work fine in this environment - many of our customers use the same Cisco controllers. You will find a great many example configuration files in the "goodies" directory of the Radiator distribution. Note that the most recent release is Radiator 4.7 (plus patches). Your b

[RADIATOR] Cisco WLAN Controller and radiator...question

2010-10-06 Thread Cihan Subasi (Garanti Teknoloji)
Hello, We would like to use our existing Radiator Server for our new project, which involves using Cisco WLAN Controllers. In summary, we will set up a guest wireless network, where users will use web-authentication. The username/password information will be passed to Radiator from WLAN Contro

Re: (RADIATOR) Question in

2003-10-02 Thread Hugh Irvine
g Fei Sent: Thursday, October 02, 2003 1:58 PM To: 'Mike McCauley'; 'Hugh Irvine' Cc: [EMAIL PROTECTED] Subject: RE: (RADIATOR) Question in Hi Do i need to pass any parameter to testcommand.pl ? MAN -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] O

RE: (RADIATOR) Question in

2003-10-02 Thread Man Meng Fei
, 2003 1:58 PM To: 'Mike McCauley'; 'Hugh Irvine' Cc: [EMAIL PROTECTED] Subject: RE: (RADIATOR) Question in Hi Do i need to pass any parameter to testcommand.pl ? MAN -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike McCauley Sen

RE: (RADIATOR) Question in

2003-10-01 Thread Man Meng Fei
Hi Do i need to pass any parameter to testcommand.pl ? MAN -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike McCauley Sent: Thursday, October 02, 2003 12:36 PM To: Hugh Irvine; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: (RADIATOR) Question

Re: (RADIATOR) Question in

2003-10-01 Thread Mike McCauley
Hi Hugh, If you look at godies/external.cfg, you will see he needs something like this: Command c:/perl/bin/perl ./goodies/testcommand.pl DOS does not know how to interpret #!/usr/bin/perl so it cant run C:\Perl\bin\testcommand.pl without some cluues. Cheers. On Thu, 2 Oct 20

RE: (RADIATOR) Question in

2003-10-01 Thread Man Meng Fei
sending Access-Request... No reply sending Accounting-Request Start... No reply sending Accounting-Request Stop... No reply C:\> -Original Message----- From: Hugh Irvine [mailto:[EMAIL PROTECTED] Sent: Thursday, October 02, 2003 10:24 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re:

Re: (RADIATOR) Question in

2003-10-01 Thread Hugh Irvine
Hello Man Meng Fei - I suspect that Radiator is not able to run the external command. What happens when you run the following in a MS-DOS window: C:\Perl\bin\testcommand.pl There is probably something wrong with either the path or the contents of the file. regards Hugh On Thursday, Oct 2,

(RADIATOR) Question in

2003-10-01 Thread Man Meng Fei
Hi Currently i am using a sample configuration (external.cfg) and perl script (testcommand.pl) which can be retrieved from goodies directory to understand the implementation of . But after i executed it, i can't get the expected test result. I got No Reply at Radius client. I hope someone can help

Re: (RADIATOR) Question on PreHandlerHook

2003-08-31 Thread Hugh Irvine
Hello Oscar - You should use "changeUserName()". ${$_[0]}->changeUserName("new-test-value"); See the code in Radius/Radius.pm->changeUserName(). This is because Radiator does some caching of the username internally. regards Hugh On Monday, Sep 1, 2003, at 04:45 Australia/Melbourne, Oscar Ga

(RADIATOR) Question on PreHandlerHook

2003-08-31 Thread Oscar Garzón
  Hello, I`m trying to use a PreHandlerHook to modify an Auth Request before it is processed by Handlers. However it doesn't seem to be working and I wonder whether it's on me the mistake.   In radius.cfg I Put:   Secret xxxPreHandlerH

Re: (RADIATOR) Question about spliting the NAS-IP-ADDRESS for SQL use

2003-08-22 Thread Hugh Irvine
Hello Troy - I suggest you write a PreClientHook that will add the pseudo-attributes shown below to the incoming request packet. There is an example that does something quite similar for Cisco pseudo-attributes in the file "goodies/hooks.txt". regards Hugh On Friday, Aug 22, 2003, at 06:49 A

(RADIATOR) Question about spliting the NAS-IP-ADDRESS for SQL use

2003-08-21 Thread Troy Holder
We have a DB table with all of our network equipment in it and plan to use that to determine what Authby to use for different types of equipment ( got to love how Cisco wants different reply values to allow a user into enable mode). I plan to have a Handler call an AuthBy SQL to do a query for the

Re: (RADIATOR) Question about AuthBy ADSI

2003-07-30 Thread Hugh Irvine
Hello Steve - Your configuration file is incorrect. You cannot have Realms inside Handlers. If you are using Handlers, you must use only Handlers and they cannot be placed inside other Handlers. You cannot have clauses inside clauses either. regards Hugh On Thursday, Jul 31, 2003, at 02:

Re: (RADIATOR) Question about AuthBy ADSI

2003-07-30 Thread Steve Caporossi
Hugh, Layers 8 & 9 prevent me from running Radiator on anything but a Linux box, I have no bias. :-) I am not very familiar with AD. My understanding is that policies can be managed for users, machines, etc. In our environment, we are mapping drives and limiting machines/user rights to resour

Re: (RADIATOR) Question about configuration file

2003-07-25 Thread Mike McCauley
Hello Geoffrey, On Fri, 25 Jul 2003 09:42 am, Hugh Irvine wrote: > Hello Geoffrey - > > On Thursday, Jul 24, 2003, at 19:40 Australia/Melbourne, DUFOUR > > Geoffrey wrote: > > Hello, > > > > > > > > As far as I understand, radiusd reads the configuration file only once > > (when it starts). Cor

Re: (RADIATOR) Question about configuration file

2003-07-24 Thread Andrew Stevenson
On Thu, 24 Jul 2003, DUFOUR Geoffrey wrote: > As far as I understand, radiusd reads the configuration file only once > (when it starts). Correct ? AFAIK > Is there a way to force radiusd to read the file every x min. or every > time the file is updated (new realm, RADIUS client, ...) without > r

Re: (RADIATOR) Question about configuration file

2003-07-24 Thread Hugh Irvine
Hello Geoffrey - On Thursday, Jul 24, 2003, at 19:40 Australia/Melbourne, DUFOUR Geoffrey wrote: Hello, ? As far as I understand, radiusd reads the configuration file only once (when it starts). Correct ? Correct - but see below. ? Is there a way to force radiusd to read the file every x m

(RADIATOR) Question about configuration file

2003-07-24 Thread DUFOUR Geoffrey
Hello,   As far as I understand, radiusd reads the configuration file only once (when it starts). Correct ?   Is there a way to force radiusd to read the file every x min. or every time the file is updated (new realm, RADIUS client, …) without restarting it ?   I would also like to k

Re: (RADIATOR) Question about AuthBy ADSI

2003-07-23 Thread Hugh Irvine
Hello Steve - You can use the AuthBy RADIUS clause to forward radius requests to a remote radius server. The exact configuration will depend on what else you are already doing in your configuration file. I am not sure I understand what you mean by "domain policies" - can you give me a bit more

Re: (RADIATOR) Question about AuthBy ADSI

2003-07-23 Thread Steve Caporossi
Running radiator on a W2K server does not appear to be an option for us...I need to forward any domain logins ie, domain\username to a Windows radius server, but only if they try to login to the domain. Has anyone done this and be willing to share their methodology? Can the domain policies be

Re: (RADIATOR) Question about AuthBy ADSI

2003-07-22 Thread Hugh Irvine
Hello Steve - Correct. AuthBy ADSI and the new AuthBy LSA clauses are only supported on recent Windows releases. You can either try the AuthBy NT clause, or you can run an instance of Radiator on the Windows host and proxy requests to it. You will find details on AuthBy NT in section 6.27 of t

(RADIATOR) Question about AuthBy ADSI

2003-07-22 Thread Steve Caporossi
I am running radiator 3.6 (fully patched) on RH7.3 and need to tie into AD for domain login and username/password checking. In the reference manual section 6.40 it has the statement, It is only available on Windows 2000 platforms. It is implemented in AuthADSI.pm" I am a little confused...

Re: (RADIATOR) question --> solved I think =)

2003-07-22 Thread Chris Garzon
- Original Message - From: "Hugh Irvine" <[EMAIL PROTECTED]> To: "Chris Garzon" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Tuesday, July 22, 2003 7:59 AM Subject: Re: (RADIATOR) question > You should test your SQL statements by han

Re: (RADIATOR) question

2003-07-21 Thread Hugh Irvine
Hello Chris - You should test your SQL statements by hand with your database tools first before putting them in the configuration file. regards Hugh On Monday, Jul 21, 2003, at 20:10 Australia/Melbourne, Chris Garzon wrote: Hi, I've set up my AcctSQLStatement to look like this: AcctSQLStat

Re: (RADIATOR) question

2003-07-21 Thread Chris Garzon
Hi, I've set up my AcctSQLStatement to look like this: AcctSQLStatement update RADUSERS set TIMELEFT=TIMELEFT-0%{Acct-Session-Time}, OCTETSINLEFT=OCTETSINLEFT-0%{Ac \ ct-Input-Octets}, OCTETSOUTLEFT=OCTETSOUTLEFT-0%{Acct-Output-Octets} where USERNAME='%n' AcctSQLStatement update RADUSERS set VAL

Re: (RADIATOR) question

2003-07-18 Thread Chris
> AcctSQLStatement update RADUSERS set VALIDFROM=now where VALIDFROM IS NULL and Oh, ok thanks I get it, now how can my Radmin database set VALIDFROM initially to NULL, I tried to test it using radmin editUser.pl web script and it gave out this error: Not updated because: Invalid date/time format

Re: (RADIATOR) question

2003-07-18 Thread Mike McCauley
Hello Chris, On Fri, 18 Jul 2003 09:56 pm, Chris wrote: > > You could use an AcctSQLStatement that sets thir expiry date if it is > > currently NULL. The the first successful session start will set their > > expiry > > > date to, say the current date + 30 days (or whatever your policy is). > > tha

Re: (RADIATOR) question

2003-07-18 Thread Chris
> You could use an AcctSQLStatement that sets thir expiry date if it is > currently NULL. The the first successful session start will set their expiry > date to, say the current date + 30 days (or whatever your policy is). thanks mike should I be safe then if I add this to my AcctSQLStatement to

Re: (RADIATOR) question

2003-07-18 Thread queksteven
lt;[EMAIL PROTECTED]>, <[EMAIL PROTECTED]> cc: (bcc: QUEK Steven/Prod Dev Dir/STSunPage/ST Group) Subj

Re: (RADIATOR) question

2003-07-18 Thread Mike McCauley
Hello Chris, On Fri, 18 Jul 2003 12:05 pm, Chris wrote: > Hello list, > > I'm using radmin + radiator, Right now I want to do these to my system, > please point me out to some examples or possible solutions: > > 1. How do I make first time users to base their starting usage from the > moment they

(RADIATOR) question

2003-07-17 Thread Chris
This Email is protected by RAV AntiVirus Security Software for SuSE Linux eMail Server

Re: (RADIATOR) Question about configuration

2003-07-16 Thread Hugh Irvine
Hello William - Thanks for your mail. As far as I can see from what you show below, Radiator is running correctly. When you start the "radiusd" process, it prints out the messages as shown and then it waits until it receives a radius request from a client device. It looks like "radiusd" is

(RADIATOR) Question about configuration

2003-07-16 Thread William Palencia
Hi. I'm installing radiator by first time, and can't get it start. I don't know was wrong. Here is the configuration file. // Foreground LogStdout AuthPort1645 AcctPort1646 LogDir c:/Program Files/

Re: (RADIATOR) Question about AutyBy LSA module?

2003-06-18 Thread Mike McCauley
Hello John, On Thu, 19 Jun 2003 01:27 am, John McFadden wrote: > Saw the annoucement on the AuthBy LSA module and I wanted to make sure I > understood it's implications. > > Does this module allow us to authenticate MSCHAP passwords against an > ActiveDirectory of NT domain controller? Yes. > >

(RADIATOR) Question about AutyBy LSA module?

2003-06-18 Thread John McFadden
Saw the annoucement on the AuthBy LSA module and I wanted to make sure I understood it's implications. Does this module allow us to authenticate MSCHAP passwords against an ActiveDirectory of NT domain controller? This has been a big issue up to now and one reason why we've been ignoring PEAP

Re: (RADIATOR) question about Radiator and Orinoco AP-2500

2003-03-19 Thread Hugh Irvine
Hello Primoz - You should probably use a packet sniffer (snoop, tcpdump, ethereal...)to check on exactly what radius reply attributes are being sent back by Cisco ACS and then configure Radiator to send the same ones. In general you will need at least the following: Filename /radiato

(RADIATOR) question about Radiator and Orinoco AP-2500

2003-03-19 Thread Primoz Jeroncic
Hi there I was trying to find something about this in mailing list archive but I didn't have to much luck so I hope you won't mind to much if this question was answered already. I have Orinoco (Proxim) AP-2500 which I configured for getting authorization about allowed users from external Radius.

Re: Fwd: (RADIATOR) Odyssey client and Radiator - Question

2003-03-04 Thread Steve Caporossi
it...not acceptable to us. Thanks, Steve Mike McCauley wrote: Hello Steve, Begin forwarded message: From: Steve Caporossi <[EMAIL PROTECTED]> Date: Tue Mar 4, 2003 00:38:57 Australia/Melbourne To: [EMAIL PROTECTED] Subject: (RADIATOR) Odyssey client and Radiator - Question We are evalua

Re: Fwd: (RADIATOR) Odyssey client and Radiator - Question

2003-03-03 Thread Mike McCauley
Hello Steve, > Begin forwarded message: > > From: Steve Caporossi <[EMAIL PROTECTED]> > > Date: Tue Mar 4, 2003 00:38:57 Australia/Melbourne > > To: [EMAIL PROTECTED] > > Subject: (RADIATOR) Odyssey client and Radiator - Question > > > > We are eva

(RADIATOR) Odyssey client and Radiator - Question

2003-03-03 Thread Steve Caporossi
We are evaluating the Odyssey client for authenticating our wireless users via TTLS. I noticed that unless a user sets their username under the TTLS settings tab, "anonymous" is recorded in the logs. Is anyone else using this client and, have you come up with a workaround for this behavior?

Re: (RADIATOR) Question on Make Test error [Radiator 3.5 on Solaris 2.8]

2003-02-24 Thread Hugh Irvine
Hello Kiaran - Could you please send me the name of the registered company that has purchased this copy of Radiator? Please reply to me directly and include the username that you use to access the web site. thanks and regards Hugh On Tuesday, Feb 25, 2003, at 14:05 Australia/Melbourne, [EMAI

(RADIATOR) Question on Make Test error [Radiator 3.5 on Solaris 2.8]

2003-02-24 Thread KiaranZobel
Hello, I run into several "not ok" when doing the "Make Test" for Radiator 3.5 on Solaris 2.8 not ok 5a not ok 5d not ok 5f Can you tell me what could be the cause? am I missing a particular file? Thanks in advance, Kiaran # /usr/local/ActivePerl-5.6/bin/perl Makefile.PL Checking if your kit i

Re: (RADIATOR) question on AuthSQLStatement

2002-12-30 Thread Hugh Irvine
Hello Seung Park - There is no mechanism currently to access the results of an AuthSQLStatement later during packet processing. This is why I suggested a PostAuthHook to post-process the results of the AuthSelect/AuthColumnDef in my other mail. Of course, you can also run SQL statements direc

(RADIATOR) question on AuthSQLStatement

2002-12-30 Thread Seung Park
I understand that the AuthSQLStatement allows arbitrary sql statements to be run at sundry points in the request process. Is there any way to access the results of those AuthSQLStatements? For example, if my AuthSQLStatement executes: select data1, data2, data3 from table_XX where data1 = "ABC

Re: (RADIATOR) Question

2002-11-12 Thread Hugh Irvine
Hello Chris - Keep in mind that there are two different things going on in this scenario. The first is authentication which checks the username and password (and does whatever checks are required), and the second is accounting which is used to manage the session database. You should get the i

(RADIATOR) Question

2002-11-12 Thread Chris Kay
Questions is... I wish to pull some information for a db while auth and then set that Information in the session db Would I set this then pull it and enter it, or can I make it global or something? Any help is grateful - Chris Kay (Syst

Re: Fwd: (RADIATOR) Question on FailurePolicy within SQLRADIUS

2002-11-06 Thread Mike McCauley
ustralia/Melbourne > > To: "Radiator" <[EMAIL PROTECTED]> > > Subject: (RADIATOR) Question on FailurePolicy within SQLRADIUS > > > > Hey Guys, > > > > Quick question (well, it might not be ;)), I have a feeling I might > > have > > asked something

Re: (RADIATOR) Question about "Calls" table

2002-11-06 Thread Hugh Irvine
Hello Lin - This is because the default format for integer-date is being used. If you want to change it you should specify your own DateFromat. See sections 6.28.14 and 6.3 in the Radiator 3.3.1 reference manual. regards Hugh On Wednesday, November 6, 2002, at 07:55 AM, Huaikun Lin wrote:

(RADIATOR) Question on FailurePolicy within SQLRADIUS

2002-11-05 Thread Martin Edge
Hey Guys, Quick question (well, it might not be ;)), I have a feeling I might have asked something along the same lines before.. But I'm trying to test the FailurePolicy settings within SQLRADIUS. Having a look.. Now, within the code, it's saying if HostColumnDef exists, then use getHostColumns

Re: (RADIATOR) Question about "Calls" table

2002-11-05 Thread Huaikun Lin
Hi Hugh Here is my radius configuration: Foreground LogStdout LogDir /var/log/radius DbDir /local/etc/radius PidFile /var/run/radiusd.pid SnmpgetProg /local/bin/snmpget AuthPort1645 AcctPort1646 Trace 3 ... RewriteUsername s/^([^@]+).*/$1

Re: (RADIATOR) Question about "Calls" table

2002-11-04 Thread Hugh Irvine
Hello Lin - I will need to see a copy of your Radiator configuration file (no secrets) together with a trace 4 debug showing what is happening. regards Hugh On Tuesday, November 5, 2002, at 10:21 AM, Huaikun Lin wrote: Hi I am using SQL server and radiator 3.1 radius. In SQL server,we ha

(RADIATOR) Question about "Calls" table

2002-11-04 Thread Huaikun Lin
Hi I am using SQL server and radiator 3.1 radius. In SQL server,we have a table "calls" which records the accounting data. Recently,I found the data in one of the field "CallDate" (data type:datetime) is not exactly acurate. This data type should record data like "2002-11-05 12:05:23". But the

Re: (RADIATOR) Question about AcctSQLStatement.

2002-10-23 Thread Hugh Irvine
Hello Sergio - From section 6.2 in the Radiator 3.3.1 reference manual: %% The percent character regards Hugh On Thursday, October 24, 2002, at 02:44 AM, Sergio Gonzalez wrote: *This message was transferred with a trial version of CommuniGate(tm) Pro* Hello. I'm having problems with th

(RADIATOR) Question about AcctSQLStatement.

2002-10-23 Thread Sergio Gonzalez
*This message was transferred with a trial version of CommuniGate(tm) Pro* Hello. I'm having problems with the next SQL statement for accounting AcctSQLStatement update TABLENAME set VALUE=0%{Acct-Session-Time} where ROW='%n' and DATE_FORMAT(FROM_UNIXTIME(0%{Timestamp},'%d-%m-%y') = 'mm-dd-yy'

(RADIATOR) Question about Radmin 1.6 feature

2002-09-22 Thread Chairath K
Hi All,   About Email to users features in Radmin 1.6 , can we config it to automaticcally send email to notify our customer that their own user account will be finish (e.g. timeleft has less than 1 hr , or account will be expire in 5 days) .   Regards, Chairath   P.S. Can we run Ramin1.6 wit

Re: (RADIATOR) Question...

2002-05-26 Thread Hugh Irvine
Hello Stephen - Have a look at "buildsql" in the Radiator distribution. Section 10 in the Radiator 3.1 reference manual. ("doc/ref.html") regards Hugh On Mon, 27 May 2002 10:21, Stephen Malenshek wrote: > I was wondering if anyone has a script to import password and shadow files > into a sq

(RADIATOR) Question...

2002-05-26 Thread Stephen Malenshek
I was wondering if anyone has a script to import password and shadow files into a sql database authentication format. I do not know a whole lot about writing perl scripts so I am not able to accomplish this on my own. Thanks in advance. -- Stephen Malenshek President/CEO Valuelinx Corporat

Re: (RADIATOR) question

2002-04-21 Thread Hugh Irvine
Hello Arnulfo - How are you programming the amount of time that a user is allowed to use? Most Radiator users employ an SQL database for user definitions and accounting and it is relatively easy to provide pre-paid services such as you describe in this way. This topic has been discussed many

(RADIATOR) question

2002-04-21 Thread Arnulfo Rojas Yanquen
Hugh our company offer services of Internet acces, the users hire this service by time determined, when has finished this time the Radiator must avoid that the user may connect again. This function is not doing the Radiator, and I not find the cause possible. Radiator is setup over RedHat 7,

(RADIATOR) question

2002-04-21 Thread Arnulfo Rojas Yanquen
Hugh our company offer services of Internet acces, the users hire this service by time determined, when has finished this time the Radiator must avoid that the user may connect again. This function is not doing the Radiator, and I not find the cause possible. Radiator is setup over RedHat 7,

Re: (RADIATOR) Question Time

2002-04-21 Thread Hugh Irvine
Hello Mick - You would use an AuthLog SQL for authentication logging. See section 6.50 in the Radiator 3.0 reference manual. For your proxy question I will need to see a copy of your configuration file (no secrets) together with a trace 4 debug from Radiator showing what is happening. regard

(RADIATOR) Question Time

2002-04-21 Thread Michael Saunders
I would like to log. When users type in the wrong password. So I can explain to them how to type there own name correctly. I have found in the documentation how to do this with a log file. Is there anyway to do this into the database instead. As we have to many operators for a log file. Also when

Re: (RADIATOR) question

2002-04-21 Thread Hugh Irvine
Hello Arnulfo - I am not exactly sure what you mean, as Radiator does not normally expire user accounts. Can you give me a bit more information about what you want to have happen? regards Hugh On Sat, 20 Apr 2002 13:52, Arnulfo Rojas Yanquen wrote: > Hello, > > I work an ISP and I have a

(RADIATOR) question

2002-04-21 Thread Arnulfo Rojas Yanquen
  Hello,   I work an ISP and  I have a problem with Radiator.   The problem is that the Radiator is not expired the account of the users.   Radiator is sertup over RedHat 7, and use for authetication passwd-shadow and the version is Radiator 2.18.1   THANKS     Atentamente,   ===

Re: (RADIATOR) Question

2002-03-26 Thread Hugh Irvine
Hello Stephen - To assign static addresses, you would normally specify the address in the reply attributes for the user in whatever user database you have. In a flat file it would look like this: # define users # check attributes on the first line (no trailing comma) # reply attributes on sec

(RADIATOR) Question

2002-03-26 Thread Stephen Malenshek
I am trying to implement a new installation of Radiator 3.0 on Red Hat 7.2 with a Postgres backend on a separate machine. I have searched through the archives and have a list in regards to static ip address assignment from radius and I have yet to find anything regarding this. Also, I have taken

Re: (RADIATOR) Question

2002-02-01 Thread Hugh Irvine
Hello Steve - We offer on-site training and consulting services on a contract basis. I have copied Joanne on this mail and she will send you the details. You can set up a users file with a DEFAULT entry like this: # define DEFAULT to accept everything DEFAULT Auth-Type = Accept regards Hu

RE: (RADIATOR) Question

2002-02-01 Thread Paul
t examples, you'll will need to tailor them to your specific needs. Hope this helps. Paul ___ Paul O'Shea Level9 Networks ___ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Steve Rainbow Sent: Frid

(RADIATOR) Question

2002-02-01 Thread Steve Rainbow
1. Are there any training courses for Radiator in the UK. 2. All calls that come into my NAS are automatically forwarded to the radius for authentication. Normally, I set up the username/pasword in a User file but also now need to authenticate without a username/password. If I set up a User file

Re: (RADIATOR) Question about Radius and SQL

2002-01-25 Thread Hugh Irvine
Hello Martin - > Fri Jan 25 17:42:13 2002 32431: ERR: Could not connect to any SQL database. > Requ est is ignored. Backing off for 10 seconds > Fri Jan 25 17:42:28 2002 911157: ERR: Execute failed for > 'Sp_fetchUserPassword ' clouston'': SQL Timeout > Fri Jan 25 17:42:32 2002 481065: ERR: Exec

(RADIATOR) Question about Radius and SQL

2002-01-24 Thread Martin Edge
Hey Guys,   Having a few issues, as we are unable to easily find out where the cause of the slowdown's we get when a "avalanche" scenario occurs.   (where the amount of requests coming in, is faster than the processing power to complete them..)   Is this necessarily an SQL timeout, or coul

Re: (RADIATOR) Question about DBM Auth...

2002-01-17 Thread Hugh Irvine
Hello Fernando - There are no limits on the number of AuthBy clauses you can use (unless there is some underlying operating system limit on the number of files a single process can have open). Perhaps you can send me a copy of the complete configuration file (no secrets) together with a trac

(RADIATOR) Question about DBM Auth...

2002-01-17 Thread Fernando Caranton Cruz
Hi,   I use the DBM Auth, but i wanna know if this type of authentication have any type of limit. I explain this   This is the actual Realm in the radius.cfg         MaxSessions 1    AcctLogFileName /usr/local/etc/radacct/%N/detail    RejectHasReason   

  1   2   >