Number of requests for Free radius
Anoop
anoop_c at sifycorp.com
Thu Oct 25 08:18:00 CEST 2007
Hi
I am using free radisu 1.1.7 and eap tls authentication.I would like to
know the maximum number of users/ authentication requests that it can
handle?
Regards
Anoop
-----Original Message-----
From: freeradius-users-bounces at lists.freeradius.org
[mailto:freeradius-users-bounces at lists.freeradius.org]On Behalf Of
freeradius-users-request at lists.freeradius.org
Sent: Thursday, October 25, 2007 11:02 AM
To: freeradius-users at lists.freeradius.org
Subject: Freeradius-Users Digest, Vol 30, Issue 91
Send Freeradius-Users mailing list submissions to
freeradius-users at lists.freeradius.org
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.freeradius.org/mailman/listinfo/freeradius-users
or, via email, send a message with subject or body 'help' to
freeradius-users-request at lists.freeradius.org
You can reach the person managing the list at
freeradius-users-owner at lists.freeradius.org
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Freeradius-Users digest..."
Today's Topics:
1. Access-Reject in a php script (manIP)
2. FR-2.0.0-pre2 - virtual server configuration problem - how to
use client and listen (Tomasz Zieleniewski)
3. Re: Access-Reject in a php script (Alan DeKok)
4. FR-2.0.0-pre2 - doubled sql accounting (Tomasz Zieleniewski)
5. Re: FR-2.0.0-pre2 - virtual server configuration problem -
how to use client and listen (Alan DeKok)
6. Re: Access-Reject in a php script (A.L.M.Buxey at lboro.ac.uk)
7. Re: AW: AW: Newbie Question o.O (Sebastian Wild)
8. Re: AW: AW: Newbie Question o.O (Andy Billington)
9. Fw: FreeRadius Server: Installation problem (j v)
----------------------------------------------------------------------
Message: 1
Date: Wed, 24 Oct 2007 17:34:09 +0200
From: manIP <manvoip at gmail.com>
Subject: Access-Reject in a php script
To: freeradius-users at lists.freeradius.org
Message-ID:
<f90cb76b0710240834t4b984356s3ce45d2ec2677692 at mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
Hi all!
I am using a script for the authentication and it is working well. I can
send a list of attributes without any problem.
Now I want to send an "Access-Reject" if the authentication fails but I do
not know how...I would be very grateful if someone could tell me how to do
so.
herein is a test script:
#!/usr/bin/php
<?php
$argv = $_SERVER['argv'];
if ( $argv[1] == "toto")
echo "Session-Timeout:=100";
else
echo "Access-Reject"; //NOT WORKING!!!!!!
?>
Thanks a lot for your assistance
Khalid :)
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://lists.freeradius.org/pipermail/freeradius-users/attachments/2007102
4/ce894a23/attachment-0001.html>
------------------------------
Message: 2
Date: Wed, 24 Oct 2007 16:37:54 +0200
From: "Tomasz Zieleniewski" <tzieleniewski at gmail.com>
Subject: FR-2.0.0-pre2 - virtual server configuration problem - how to
use client and listen
To: "FreeRadius users mailing list"
<freeradius-users at lists.freeradius.org>
Message-ID:
<5fd52d7a0710240737i71185363yb22087a295aeb56e at mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
Hi,
I have some doubts about the rules of applying client and listen blocks in
comparison to virtual server setting.
Is it this way that both client and listen blocks can appear in the main
radiusd.conf file so that they will behave
like default global setting for all defined virtual servers??
If yes then any of this section put inside the virtual server block
overrides the global settings?
Do I have to specify the virtual_server item in the client or listen block?
What if I don't in neither of them, will it point to some default "null"
server? For instance this one which doesn't have a name specified:
server {
....
}
Waiting for your feedback
Thanks in advance
Tomasz
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://lists.freeradius.org/pipermail/freeradius-users/attachments/2007102
4/5eb2cadd/attachment-0001.html>
------------------------------
Message: 3
Date: Wed, 24 Oct 2007 17:48:25 +0200
From: Alan DeKok <aland at deployingradius.com>
Subject: Re: Access-Reject in a php script
To: FreeRadius users mailing list
<freeradius-users at lists.freeradius.org>
Message-ID: <471F6949.90505 at deployingradius.com>
Content-Type: text/plain; charset=ISO-8859-1
manIP wrote:
> I am using a script for the authentication and it is working well. I can
> send a list of attributes without any problem.
> Now I want to send an "Access-Reject" if the authentication fails but I
> do not know how...I would be very grateful if someone could tell me how
> to do so.
> herein is a test script:
>
> #!/usr/bin/php
> <?php
> $argv = $_SERVER['argv'];
> if ( $argv[1] == "toto")
> echo " Session-Timeout:=100";
> else
> echo " Access-Reject"; //NOT WORKING!!!!!!
It's not documented as doing that.
Have the script return an error, and no output.
Alan DeKok.
------------------------------
Message: 4
Date: Wed, 24 Oct 2007 18:19:01 +0200
From: "Tomasz Zieleniewski" <tzieleniewski at gmail.com>
Subject: FR-2.0.0-pre2 - doubled sql accounting
To: "FreeRadius users mailing list"
<freeradius-users at lists.freeradius.org>
Message-ID:
<5fd52d7a0710240919s1ef8cfd7gf70a1133b1f7468b at mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
Hi,
I have the home_server configuration which points to my localhost.
So the scenario is the following that when I receive the Accounting-Request
with the user name of the form user at domain I check the realm for particular
domain
and strip the user name and proxy it again to my home_server localhost -
partcular realm have the pool which points to the localhost home_server
Problem is that there each accounting request is accounted twice.
First time when request gets to freeradius and second after it enters again
after proxing it through home_server pool.
What can I do about it. How can I disable such behavior??
I know that I can do it by setting particular as local without specifying
the acctpool - but i still would like to use the pool.
Can I somehow disable the first or the second accounting, what is the right
way to do it??
Thank you for any help
Regards
Tomasz
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://lists.freeradius.org/pipermail/freeradius-users/attachments/2007102
4/bba56638/attachment-0001.html>
------------------------------
Message: 5
Date: Wed, 24 Oct 2007 17:47:14 +0200
From: Alan DeKok <aland at deployingradius.com>
Subject: Re: FR-2.0.0-pre2 - virtual server configuration problem -
how to use client and listen
To: FreeRadius users mailing list
<freeradius-users at lists.freeradius.org>
Message-ID: <471F6902.1020305 at deployingradius.com>
Content-Type: text/plain; charset=ISO-8859-1
Tomasz Zieleniewski wrote:
> I have some doubts about the rules of applying client and listen blocks
> in comparison to virtual server setting.
raddb/sites-available/README contains the documentation for that.
> Is it this way that both client and listen blocks can appear in the main
> radiusd.conf file so that they will behave
> like default global setting for all defined virtual servers??
Yes.
> If yes then any of this section put inside the virtual server block
> overrides the global settings?
Yes.
> Do I have to specify the virtual_server item in the client or listen
block?
If the client/listen block is in a virtual server, no.
> What if I don't in neither of them, will it point to some default "null"
> server?
Yes.
Alan DeKok.
------------------------------
Message: 6
Date: Wed, 24 Oct 2007 18:24:13 +0100
From: A.L.M.Buxey at lboro.ac.uk
Subject: Re: Access-Reject in a php script
To: FreeRadius users mailing list
<freeradius-users at lists.freeradius.org>
Message-ID: <20071024172413.GC24103 at lboro.ac.uk>
Content-Type: text/plain; charset=us-ascii
Hi,
> echo "Session-Timeout:=100";
> else
> echo "Access-Reject"; //NOT WORKING!!!!!!
hmmm, normally/properly you dont send such attributes
back - thats a server job. you should simply exit with
the return code that equals reject.
alan
------------------------------
Message: 7
Date: Wed, 24 Oct 2007 16:39:05 +0200
From: Sebastian Wild <sw at cronon.org>
Subject: Re: AW: AW: Newbie Question o.O
To: FreeRadius users mailing list
<freeradius-users at lists.freeradius.org>
Message-ID: <1193236745.6768.29.camel at zoidberg>
Content-Type: text/plain; charset=utf-8
Bernd please correct your system date. You keep sending mails dated in
the future!
Sebastian
Am Mittwoch, den 31.10.2007, 14:20 +0100 schrieb Bernd:
> I'm sorry...I never worked with RADIUS, please consider that. I don't mind
> reading documentations :) - but I don't know where I can find the NAS
> documentation
>
> -----Urspr?ngliche Nachricht-----
> Von: freeradius-users-bounces at lists.freeradius.org
> [mailto:freeradius-users-bounces at lists.freeradius.org] Im Auftrag von Alan
> DeKok
> Gesendet: Mittwoch, 24. Oktober 2007 12:38
> An: FreeRadius users mailing list
> Betreff: Re: AW: Newbie Question o.O
>
> Bernd wrote:
> > > Do the AP's send RADIUS requests to authenticate the MAC when they
see
> > a new machine? If not, you can't do it.
> >
> > How do I know if they do?
> ...
>
> >> Unfortunately, you're being told to go read the NAS documentation.
>
> Alan DeKok.
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
>
> -
> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
------------------------------
Message: 8
Date: Wed, 24 Oct 2007 22:39:37 +0100
From: "Andy Billington" <billington.andy at googlemail.com>
Subject: Re: AW: AW: Newbie Question o.O
To: "FreeRadius users mailing list"
<freeradius-users at lists.freeradius.org>
Message-ID:
<fad1ce8b0710241439o12fb2b7et73ed06820840446f at mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
which explains why gmail shows all his mails as being 0 minutes ago.
Not even Google has harnessed time travel (don't tell the shareholders
tho)
On 24/10/2007, Sebastian Wild <sw at cronon.org> wrote:
> Bernd please correct your system date. You keep sending mails dated in
> the future!
>
> Sebastian
>
> Am Mittwoch, den 31.10.2007, 14:20 +0100 schrieb Bernd:
> > I'm sorry...I never worked with RADIUS, please consider that. I don't
mind
> > reading documentations :) - but I don't know where I can find the NAS
> > documentation
> >
> > -----Urspr?ngliche Nachricht-----
> > Von: freeradius-users-bounces at lists.freeradius.org
> > [mailto:freeradius-users-bounces at lists.freeradius.org] Im Auftrag von
Alan
> > DeKok
> > Gesendet: Mittwoch, 24. Oktober 2007 12:38
> > An: FreeRadius users mailing list
> > Betreff: Re: AW: Newbie Question o.O
> >
> > Bernd wrote:
> > > > Do the AP's send RADIUS requests to authenticate the MAC when they
see
> > > a new machine? If not, you can't do it.
> > >
> > > How do I know if they do?
> > ...
> >
> > >> Unfortunately, you're being told to go read the NAS documentation.
> >
> > Alan DeKok.
> > -
> > List info/subscribe/unsubscribe? See
> > http://www.freeradius.org/list/users.html
> >
> >
> > -
> > List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
>
> -
> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
------------------------------
Message: 9
Date: Thu, 25 Oct 2007 10:58:37 +0530 (IST)
From: j v <mr_developer_india at yahoo.co.in>
Subject: Fw: FreeRadius Server: Installation problem
To: FreeRadius users mailing list
<freeradius-users at lists.freeradius.org>
Message-ID: <669742.19457.qm at web7706.mail.in.yahoo.com>
Content-Type: text/plain; charset="iso-8859-1"
Please guide from where to get these tools
libtool is needed by freeradius-1.1.6-0.i586
libtool-ltdl-devel is needed by freeradius-1.1.6-0.i586
----- Forwarded Message ----
From: j v <mr_developer_india at yahoo.co.in>
To: FreeRadius users mailing list <freeradius-users at lists.freeradius.org>
Sent: Wednesday, 24 October, 2007 11:16:47 AM
Subject: FreeRadius Server: Installation problem
Hey all,
>
> I am trying to install 1.1.6. When i try to make the SUSE Linux Package
> and run the rpm build command then an error message comes which reads: >
freeRadius 1.1.5.gz file not present.
>
> Please guide.
>
>
Now you can chat without downloading messenger. Click here to know how.
-----Inline Attachment Follows-----
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
Chat on a cool, new interface. No download required. Go to
http://in.messenger.yahoo.com/webmessengerpromo.php
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://lists.freeradius.org/pipermail/freeradius-users/attachments/2007102
5/99abfa86/attachment.html>
-------------- next part --------------
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
------------------------------
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
End of Freeradius-Users Digest, Vol 30, Issue 91
************************************************
********** DISCLAIMER **********
Information contained and transmitted by this E-MAIL is proprietary to
Sify Limited and is intended for use only by the individual or entity to
which it is addressed, and may contain information that is privileged,
confidential or exempt from disclosure under applicable law. If this is a
forwarded message, the content of this E-MAIL may not have been sent with
the authority of the Company. If you are not the intended recipient, an
agent of the intended recipient or a person responsible for delivering the
information to the named recipient, you are notified that any use,
distribution, transmission, printing, copying or dissemination of this
information in any way or in any manner is strictly prohibited. If you have
received this communication in error, please delete this mail & notify us
immediately at admin at sifycorp.com
More information about the Freeradius-Users
mailing list