Hello, <br> I want to know if it would be possible to debug freeradius while running to a log file, <br><br>thanks.<br><br><br><div class="gmail_quote">2009/8/18 <span dir="ltr"><<a href="mailto:freeradius-users-request@lists.freeradius.org">freeradius-users-request@lists.freeradius.org</a>></span><br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Send Freeradius-Users mailing list submissions to<br>
<a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="http://lists.freeradius.org/mailman/listinfo/freeradius-users" target="_blank">http://lists.freeradius.org/mailman/listinfo/freeradius-users</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:freeradius-users-request@lists.freeradius.org">freeradius-users-request@lists.freeradius.org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:freeradius-users-owner@lists.freeradius.org">freeradius-users-owner@lists.freeradius.org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of Freeradius-Users digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: Huntgroups and SQL not being enforced (mikoi)<br>
2. Session-Timeout for unlimited? (Rakotomandimby Mihamina)<br>
3. Re: Session-Timeout for unlimited? (Stefan Winter)<br>
4. NAS IPs (Irina)<br>
5. Re: FreeRADIUS Server Version 2.1.6 has been released<br>
(Alexandr Kovalenko)<br>
6. accounting through detail module help (ramesh p)<br>
7. Re: accounting through detail module help (Alan Buxey)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Tue, 18 Aug 2009 06:12:18 -0700 (PDT)<br>
From: mikoi <<a href="mailto:mika.koivisto@logica.com">mika.koivisto@logica.com</a>><br>
Subject: Re: Huntgroups and SQL not being enforced<br>
To: <a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a><br>
Message-ID: <<a href="mailto:25024576.post@talk.nabble.com">25024576.post@talk.nabble.com</a>><br>
Content-Type: text/plain; charset=UTF-8<br>
<br>
<br>
Hi.<br>
For info, i followed the information in the below link for my Huntgroups,<br>
but without Auth-Type since it is not recommended.<br>
<br>
<a href="http://wiki.freeradius.org/SQL_Huntgroup_HOWTO" target="_blank">http://wiki.freeradius.org/SQL_Huntgroup_HOWTO</a><br>
<br>
I still can?t get huntgroups to be enforced properly.<br>
<br>
If i add Huntgroup-Name == VPN-Service to the radcheck table, it works for<br>
my local users (the ones with a Cleartext-Password in Freeradius), but not<br>
for my proxied users.<br>
<br>
Any hints?<br>
<br>
/M<br>
--<br>
View this message in context: <a href="http://www.nabble.com/Huntgroups-and-SQL-not-being-enforced-tp25019815p25024576.html" target="_blank">http://www.nabble.com/Huntgroups-and-SQL-not-being-enforced-tp25019815p25024576.html</a><br>
Sent from the FreeRadius - User mailing list archive at Nabble.com.<br>
<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Tue, 18 Aug 2009 16:36:20 +0300<br>
From: Rakotomandimby Mihamina <<a href="mailto:mihamina@gulfsat.mg">mihamina@gulfsat.mg</a>><br>
Subject: Session-Timeout for unlimited?<br>
To: FreeRadius users mailing list<br>
<<a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a>><br>
Message-ID: <<a href="mailto:4A8AAE54.3040803@gulfsat.mg">4A8AAE54.3040803@gulfsat.mg</a>><br>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed<br>
<br>
Hi,<br>
(Using freeRadius v2)<br>
We have prepaid users, where the freeradius server should answer with some<br>
non null integer Session-Timeout.<br>
<br>
We have also postpaid users, where the session should be unlimited.<br>
<br>
What is the Session-Timeout value corresponding to "unlimited"?<br>
<br>
Thank you.<br>
<br>
--<br>
Architecte Informatique chez Blueline/Gulfsat:<br>
Administration Systeme, Recherche & Developpement<br>
+261 34 29 155 34<br>
<br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Tue, 18 Aug 2009 15:46:38 +0200<br>
From: Stefan Winter <<a href="mailto:stefan.winter@restena.lu">stefan.winter@restena.lu</a>><br>
Subject: Re: Session-Timeout for unlimited?<br>
To: FreeRadius users mailing list<br>
<<a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a>><br>
Message-ID: <<a href="mailto:4A8AB0BE.8060000@restena.lu">4A8AB0BE.8060000@restena.lu</a>><br>
Content-Type: text/plain; charset=ISO-8859-1<br>
<br>
Hi,<br>
<br>
> We have prepaid users, where the freeradius server should answer with<br>
> some<br>
> non null integer Session-Timeout.<br>
><br>
> We have also postpaid users, where the session should be unlimited.<br>
><br>
> What is the Session-Timeout value corresponding to "unlimited"?<br>
<br>
If you don't send Session-Timeout at all, the session will not be timing<br>
out.<br>
<br>
Greetings,<br>
<br>
Stefan Winter<br>
<br>
--<br>
Stefan WINTER<br>
Ingenieur de Recherche<br>
Fondation RESTENA - R?seau T?l?informatique de l'Education Nationale et de la Recherche<br>
6, rue Richard Coudenhove-Kalergi<br>
L-1359 Luxembourg<br>
<br>
Tel: +352 424409 1<br>
Fax: +352 422473<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 4<br>
Date: Mon, 17 Aug 2009 10:54:15 -0400<br>
From: "Irina" <<a href="mailto:irina@nas.net">irina@nas.net</a>><br>
Subject: NAS IPs<br>
To: <<a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a>><br>
Message-ID: <3261AA0525664575BEADE48FB132EEA5@netaccess1.local><br>
Content-Type: text/plain; charset="iso-8859-1"<br>
<br>
Hello,<br>
<br>
<br>
<br>
I need to allow a block of 8 IP addresses in 'nasname' column in NAS table. Can I use<br>
<br>
<br>
<br>
xx.xx.xx.112/29<br>
<br>
<br>
<br>
Thank you for your help in advance<br>
<br>
<br>
<br>
Kindest Regards,<br>
<br>
Irina<br>
<br>
===========================<br>
<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://lists.freeradius.org/pipermail/freeradius-users/attachments/20090817/1575fabf/attachment.html" target="_blank">https://lists.freeradius.org/pipermail/freeradius-users/attachments/20090817/1575fabf/attachment.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 5<br>
Date: Tue, 18 Aug 2009 17:08:21 +0300<br>
From: Alexandr Kovalenko <<a href="mailto:alexandr.kovalenko@gmail.com">alexandr.kovalenko@gmail.com</a>><br>
Subject: Re: FreeRADIUS Server Version 2.1.6 has been released<br>
To: FreeRadius users mailing list<br>
<<a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a>><br>
Message-ID:<br>
<<a href="mailto:1d2641260908180708x56724f6dr432786188595b48f@mail.gmail.com">1d2641260908180708x56724f6dr432786188595b48f@mail.gmail.com</a>><br>
Content-Type: text/plain; charset=ISO-8859-1<br>
<br>
On Mon, May 18, 2009 at 2:59 PM, Alan DeKok<<a href="mailto:aland@deployingradius.com">aland@deployingradius.com</a>> wrote:<br>
> ?The following is the change log. ?Thanks to everyone for testing the<br>
> pre releases.<br>
><br>
><br>
> FreeRADIUS 2.1.6 Mon May 18 10:00:00 CEST 2009; ?, urgency=medium<br>
> ? ? ? ?Feature improvements<br>
> ? ? ? ?Bug fixes<br>
> ? ? ? ?* Make rlm_perl keep tags for tagged attributes in more<br>
> ? ? ? ? ?situations<br>
<br>
Does not work for situation:<br>
<br>
--------<br>
$ radiusd -v | head -1<br>
radiusd: FreeRADIUS Version 2.1.6, for host i386-portbld-freebsd7.2,<br>
built on Aug 18 2009 at 12:31:54<br>
<br>
$ perl -V<br>
Summary of my perl5 (revision 5 version 8 subversion 9) configuration:<br>
Platform:<br>
osname=freebsd, osvers=7.2-release-p2, archname=i386-freebsd-64int<br>
uname='freebsd mile.office.tsu 7.2-release-p2 freebsd<br>
7.2-release-p2 #0: fri jun 26 10:01:50 eest 2009<br>
root@mile.office.tsu:usrobjusrsrcsysmile i386 '<br>
config_args='-sde -Dprefix=/usr/local<br>
-Darchlib=/usr/local/lib/perl5/5.8.9/mach<br>
-Dprivlib=/usr/local/lib/perl5/5.8.9<br>
-Dman3dir=/usr/local/lib/perl5/5.8.9/perl/man/man3<br>
-Dman1dir=/usr/local/man/man1<br>
-Dsitearch=/usr/local/lib/perl5/site_perl/5.8.9/mach<br>
-Dsitelib=/usr/local/lib/perl5/site_perl/5.8.9<br>
-Dscriptdir=/usr/local/bin<br>
-Dsiteman3dir=/usr/local/lib/perl5/5.8.9/man/man3<br>
-Dsiteman1dir=/usr/local/man/man1 -Ui_malloc -Ui_iconv<br>
-Uinstallusrbinperl -Dcc=cc -Duseshrplib -Dinc_version_list=none<br>
-Dccflags=-DAPPLLIB_EXP="/usr/local/lib/perl5/5.8.9/BSDPAN"<br>
-Doptimize=-O2 -fno-strict-aliasing -pipe -march=pentium4 -Ud_dosuid<br>
-Ui_gdbm -Dusethreads=n -Dusemymalloc=y -Duse64bitint'<br>
hint=recommended, useposix=true, d_sigaction=define<br>
usethreads=undef use5005threads=undef useithreads=undef<br>
usemultiplicity=undef<br>
useperlio=define d_sfio=undef uselargefiles=define usesocks=undef<br>
use64bitint=define use64bitall=undef uselongdouble=undef<br>
usemymalloc=y, bincompat5005=undef<br>
Compiler:<br>
cc='cc', ccflags<br>
='-DAPPLLIB_EXP="/usr/local/lib/perl5/5.8.9/BSDPAN" -DHAS_FPSETMASK<br>
-DHAS_FLOATINGPOINT_H -fno-strict-aliasing -pipe<br>
-I/usr/local/include',<br>
optimize='-O2 -fno-strict-aliasing -pipe -march=pentium4',<br>
cppflags='-DAPPLLIB_EXP="/usr/local/lib/perl5/5.8.9/BSDPAN"<br>
-DHAS_FPSETMASK -DHAS_FLOATINGPOINT_H -fno-strict-aliasing -pipe<br>
-I/usr/local/include'<br>
ccversion='', gccversion='4.2.1 20070719 [FreeBSD]', gccosandvers=''<br>
intsize=4, longsize=4, ptrsize=4, doublesize=8, byteorder=12345678<br>
d_longlong=define, longlongsize=8, d_longdbl=define, longdblsize=12<br>
ivtype='long long', ivsize=8, nvtype='double', nvsize=8,<br>
Off_t='off_t', lseeksize=8<br>
alignbytes=4, prototype=define<br>
Linker and Libraries:<br>
ld='cc', ldflags =' -Wl,-E -L/usr/local/lib'<br>
libpth=/usr/lib /usr/local/lib<br>
libs=-lgdbm -lm -lcrypt -lutil<br>
perllibs=-lm -lcrypt -lutil<br>
libc=, so=so, useshrplib=true, libperl=libperl.so<br>
gnulibc_version=''<br>
Dynamic Linking:<br>
dlsrc=dl_dlopen.xs, dlext=so, d_dlsymun=undef, ccdlflags='<br>
-Wl,-R/usr/local/lib/perl5/5.8.9/mach/CORE'<br>
cccdlflags='-DPIC -fPIC', lddlflags='-shared -L/usr/local/lib'<br>
<br>
<br>
Characteristics of this binary (from libperl):<br>
Compile-time options: MYMALLOC PERL_MALLOC_WRAP USE_64_BIT_INT<br>
USE_FAST_STDIO USE_LARGE_FILES USE_PERLIO<br>
Locally applied patches:<br>
defined-or<br>
Built under freebsd<br>
Compiled at Aug 18 2009 14:56:36<br>
@INC:<br>
/usr/local/lib/perl5/5.8.9/BSDPAN<br>
/usr/local/lib/perl5/site_perl/5.8.9/mach<br>
/usr/local/lib/perl5/site_perl/5.8.9<br>
/usr/local/lib/perl5/5.8.9/mach<br>
/usr/local/lib/perl5/5.8.9<br>
.<br>
--------<br>
<br>
Following code is used in sub authorize {} in perl module I'm trying to use<br>
--------<br>
if (($RAD_REQUEST{'User-Name'} eq 'admin') and<br>
($RAD_REQUEST{'User-Password'} eq 'test')) {<br>
$RAD_REPLY{'ERX-Service-Activate:1'} = "telesys";<br>
$RAD_REPLY{'ERX-Service-Statistics:1'} = "time-volume";<br>
$RAD_REPLY{'ERX-Qos-Parameters'}[0] = "internet_tr_value 2097152";<br>
$RAD_REPLY{'ERX-Qos-Parameters'}[1] = "internet_tr_value_in 2097152";<br>
$RAD_REPLY{'ERX-Service-Activate:2'} = "deny";<br>
$RAD_REPLY{'ERX-Qos-Profile-Name'} = "SP_Tele_Internet";<br>
$RAD_REPLY{'Framed-IP-Address'} = '10.0.112.2';<br>
$RAD_REPLY{'Framed-IP-Netmask'}= "255.255.255.255";<br>
$RAD_REPLY{'ERX-Primary-DNS'} = "1.2.3.4";<br>
$RAD_REPLY{'ERX-Secondary-DNS'} = "1.2.3.5";<br>
return RLM_MODULE_OK;<br>
};<br>
--------<br>
<br>
This gives following results:<br>
<br>
# radtest admin test 10.3.1.252 12 huawei<br>
Sending Access-Request of id 70 to 10.3.1.252 port 1812<br>
User-Name = "admin"<br>
User-Password = "test"<br>
NAS-IP-Address = 10.1.2.13<br>
NAS-Port = 12<br>
rad_recv: Access-Accept packet from host 10.3.1.252 port 1812, id=70, length=188<br>
ERX-Qos-Parameters = "internet_tr_value 2097152"<br>
ERX-Qos-Parameters = "internet_tr_value_in 2097152"<br>
ERX-Service-Activate:0 = "deny"<br>
ERX-Service-Activate:0 = "telesys"<br>
ERX-Qos-Profile-Name = "SP_Tele_Internet"<br>
ERX-Service-Statistics:1 = time-volume<br>
ERX-Primary-Dns = 1.2.3.4<br>
ERX-Secondary-Dns = 1.2.3.5<br>
Framed-IP-Address = 10.0.112.2<br>
Framed-IP-Netmask = 255.255.255.255<br>
<br>
<br>
--------<br>
Output from radiusd -X:<br>
<br>
rad_recv: Access-Request packet from host 10.3.1.252 port 52845,<br>
id=70, length=57<br>
User-Name = "admin"<br>
User-Password = "test"<br>
NAS-IP-Address = 10.1.2.13<br>
NAS-Port = 12<br>
server radoss {<br>
+- entering group authorize {...}<br>
++[preprocess] returns ok<br>
++[control] returns ok<br>
rlm_perl: $VAR1 = {};<br>
rlm_perl: defined<br>
rlm_perl: Added pair User-Name = admin<br>
rlm_perl: Added pair User-Password = test<br>
rlm_perl: Added pair NAS-Port = 12<br>
rlm_perl: Added pair NAS-IP-Address = 10.1.2.13<br>
rlm_perl: Added pair ERX-Qos-Profile-Name = SP_Tele_Internet<br>
rlm_perl: Added pair ERX-Service-Activate:2 = deny<br>
rlm_perl: Added pair ERX-Qos-Parameters = internet_tr_value 2097152<br>
rlm_perl: Added pair ERX-Qos-Parameters = internet_tr_value_in 2097152<br>
rlm_perl: Added pair ERX-Service-Statistics:1 = time-volume<br>
rlm_perl: Added pair ERX-Secondary-DNS = 1.2.3.5<br>
rlm_perl: Added pair Framed-IP-Address = 10.0.112.2<br>
rlm_perl: Added pair Framed-IP-Netmask = 255.255.255.255<br>
rlm_perl: Added pair ERX-Service-Activate:1 = telesys<br>
rlm_perl: Added pair ERX-Primary-DNS = 1.2.3.4<br>
rlm_perl: Added pair Auth-Type = Perl<br>
++[perl] returns ok<br>
Found Auth-Type = Perl<br>
+- entering group Perl {...}<br>
rlm_perl: Added pair User-Name = admin<br>
rlm_perl: Added pair User-Password = test<br>
rlm_perl: Added pair NAS-IP-Address = 10.1.2.13<br>
rlm_perl: Added pair NAS-Port = 12<br>
rlm_perl: Added pair ERX-Qos-Parameters = internet_tr_value 2097152<br>
rlm_perl: Added pair ERX-Qos-Parameters = internet_tr_value_in 2097152<br>
rlm_perl: Added pair ERX-Service-Activate = deny<br>
rlm_perl: Added pair ERX-Service-Activate = telesys<br>
rlm_perl: Added pair ERX-Qos-Profile-Name = SP_Tele_Internet<br>
rlm_perl: Added pair ERX-Service-Statistics:1 = time-volume<br>
rlm_perl: Added pair ERX-Primary-Dns = 1.2.3.4<br>
rlm_perl: Added pair ERX-Secondary-Dns = 1.2.3.5<br>
rlm_perl: Added pair Framed-IP-Address = 10.0.112.2<br>
rlm_perl: Added pair Framed-IP-Netmask = 255.255.255.255<br>
rlm_perl: Added pair Auth-Type = Perl<br>
++[perl] returns ok<br>
+- entering group post-auth {...}<br>
++[exec] returns noop<br>
} # server radoss<br>
Sending Access-Accept of id 70 to 10.3.1.252 port 52845<br>
ERX-Qos-Parameters += "internet_tr_value 2097152"<br>
ERX-Qos-Parameters += "internet_tr_value_in 2097152"<br>
ERX-Service-Activate:0 += "deny"<br>
ERX-Service-Activate:0 += "telesys"<br>
ERX-Qos-Profile-Name = "SP_Tele_Internet"<br>
ERX-Service-Statistics:1 = time-volume<br>
ERX-Primary-Dns = 1.2.3.4<br>
ERX-Secondary-Dns = 1.2.3.5<br>
Framed-IP-Address = 10.0.112.2<br>
Framed-IP-Netmask = 255.255.255.255<br>
Finished request 0.<br>
Going to the next request<br>
Waking up in 4.9 seconds.<br>
Cleaning up request 0 ID 70 with timestamp +4<br>
Ready to process requests.<br>
<br>
--<br>
Alexandr Kovalenko<br>
<a href="http://uafug.org.ua/" target="_blank">http://uafug.org.ua/</a><br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 6<br>
Date: Tue, 18 Aug 2009 19:41:24 +0530<br>
From: ramesh p <<a href="mailto:rock786143@gmail.com">rock786143@gmail.com</a>><br>
Subject: accounting through detail module help<br>
To: FreeRadius users mailing list<br>
<<a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a>><br>
Message-ID:<br>
<<a href="mailto:6b6aa6710908180711v61b4c365ve48acd3d440033c4@mail.gmail.com">6b6aa6710908180711v61b4c365ve48acd3d440033c4@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="iso-8859-1"<br>
<br>
Hi,<br>
<br>
At present our radius servers getting traffic of more than 3 million users.<br>
We have only two radius servers and one mysql server active. The server<br>
crashing whenever more traffic comes. Due to mysql overload and slow I'm<br>
planning to use detail module for accounting and then take these details and<br>
parse then put in database using program/script. Does this helps? Is there<br>
any script already available in freeradius?<br>
Does palcing one more radius server and using mysql clustering helps?<br>
<br>
Please suggest.<br>
<br>
Thanks,<br>
Rams.<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://lists.freeradius.org/pipermail/freeradius-users/attachments/20090818/bccf1a41/attachment.html" target="_blank">https://lists.freeradius.org/pipermail/freeradius-users/attachments/20090818/bccf1a41/attachment.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 7<br>
Date: Tue, 18 Aug 2009 15:33:09 +0100<br>
From: Alan Buxey <<a href="mailto:A.L.M.Buxey@lboro.ac.uk">A.L.M.Buxey@lboro.ac.uk</a>><br>
Subject: Re: accounting through detail module help<br>
To: FreeRadius users mailing list<br>
<<a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a>><br>
Message-ID: <<a href="mailto:20090818143309.GA32113@lboro.ac.uk">20090818143309.GA32113@lboro.ac.uk</a>><br>
Content-Type: text/plain; charset=us-ascii<br>
<br>
Hi,<br>
<br>
> At present our radius servers getting traffic of more than 3 million users.<br>
> We have only two radius servers and one mysql server active. The server<br>
> crashing whenever more traffic comes. Due to mysql overload and slow I'm<br>
> planning to use detail module for accounting and then take these details and<br>
> parse then put in database using program/script. Does this helps? Is there<br>
> any script already available in freeradius?<br>
> Does palcing one more radius server and using mysql clustering helps?<br>
<br>
use the detail module and let FR deal with handling the detail module.<br>
<br>
you can speed up the MySQL using eg batter indexing and better storage engine<br>
<br>
alan<br>
<br>
<br>
<br>
------------------------------<br>
<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
<br>
<br>
End of Freeradius-Users Digest, Vol 52, Issue 81<br>
************************************************<br>
</blockquote></div><br><br clear="all"><br>-- <br>--<br><br>Silvero Martin<br>