April 2006 - Freeradius-Users - lists.freeradius.org

automated response
by Olaf Becker 24 Apr '06

24 Apr '06

I am not in the office and have no access to my e-mails. I will be back from holidays till the 29nd of April 2006. Thank you for your understanding that your e-mail will be answered after my return to the office. This e-mail will not be forwarded. Best regards Olaf Becker

1 0

Redundant ldap server with freeradius 1.0.5
by sumi thra 24 Apr '06

24 Apr '06

- Hey All, I want to configure two ldap server's for fail over conditions. My configuration in the radiusd.conf is... ldap { redundant { ldap_primary ldap_secondary } } .... ldap_primary { .. .. } ldap_secondary { .. .. } .. When the server gets any access-request packet, it tries to connect to the secondary server. Even though the primary server is reachable, the secondary server is contacted first. How can i make the radius server to contact primary ldap server first & then the next ldap server ?? Am i missing any configuration?? Could please help me in this regard. Thanks in advance. Sumithra.

2 3

RE: Bugzilla account creation broken?
by Jonathan De Graeve 23 Apr '06

23 Apr '06

Its now been 12hours ago that I requests a password for the bugzilla. I still didn't receive any email. Is there something wrong with it? J. > -----Oorspronkelijk bericht----- > Van: freeradius-users- > bounces+jonathan.de.graeve=imelda.be(a)lists.freeradius.org > [mailto:freeradius-users- > bounces+jonathan.de.graeve=imelda.be(a)lists.freeradius.org] Namens Nicolas > Baradakis > Verzonden: zaterdag 22 april 2006 18:09 > Aan: FreeRadius users mailing list > Onderwerp: Re: Changes to dialupadmin > > Jonathan De Graeve wrote: > > > I want to publish my enhancements to dialupadmin to the freeradius > > devels. > > > > How can I do this? > > Please post your patches to the bugzilla. > http://bugs.freeradius.org/ > > -- > Nicolas Baradakis > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

1 0

RE: How to patch dialupadmin
by Jonathan De Graeve 23 Apr '06

23 Apr '06

>Van: Mordor Networks [mailto:mordor.networks@gmail.com] >Verzonden: zondag 23 april 2006 5:39 >Aan: Jonathan De Graeve >Onderwerp: Hello > >can you tell me please how to use your patch with dialup admin? i mean how to patchh it? >thanks > Put the patch into the location where freeradius-dialupadmin is installed (or in the source dir of freeradius-1.0.5/) and go into that directory. Do patch -p0 < dialup_admin-1.0.5.diff Only tested it against 1.0.5 so I don't know what happens on >1.0.5 -- Jonathan De Graeve

1 0

RE: Changes to dialupadmin
by Jonathan De Graeve 22 Apr '06

22 Apr '06

Latest version attached, hope you can add it to the bugzilla Thx J. > -----Oorspronkelijk bericht----- > Van: freeradius-users- > bounces+jonathan.de.graeve=imelda.be(a)lists.freeradius.org > [mailto:freeradius-users- > bounces+jonathan.de.graeve=imelda.be(a)lists.freeradius.org] Namens Nicolas > Baradakis > Verzonden: zaterdag 22 april 2006 18:09 > Aan: FreeRadius users mailing list > Onderwerp: Re: Changes to dialupadmin > > Jonathan De Graeve wrote: > > > I want to publish my enhancements to dialupadmin to the freeradius > > devels. > > > > How can I do this? > > Please post your patches to the bugzilla. > http://bugs.freeradius.org/ > > -- > Nicolas Baradakis > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

1 0

Changes to dialupadmin
by Jonathan De Graeve 22 Apr '06

22 Apr '06

I want to publish my enhancements to dialupadmin to the freeradius devels. How can I do this? J.

2 1

Patch adding Monthly volume statistics
by Jonathan De Graeve 22 Apr '06

22 Apr '06

This patch adds monthly volume statistics to the user_accounting.php3 page. Patch agains freeradius-1.0.5

1 0

How it is better to start a script in FreeRadius to change User-Name and realm at proxing?
by Dmitry Lyubimkov 22 Apr '06

22 Apr '06

FreeRadius is used for proxing (user@realm) to others RADIUS servers. Also we change the some attributes at proxing. Некоторое время назад была задача при получении accounting менять аттрибут User-Name в зависимости от аттрибутов User-Name, Calling-Station-ID, Called-Station-ID, ... Some time there was a task to change User-Name attribute at reception of accounting message (depending on User-Name,Calling-Station-ID, Called-Station-ID, ...) We have written a script on python, and have added to preproxy_users file DEFAULT User-Name := `%{exec:/usr/bin/python -u /path/to/script.py %{Packet-Type} %{Acct-Status-Type} %u %i %{Called-Station-Id}}` And write files in pre-proxy section of radius.conf file Now before sending proxied messages our script runs and changes User-Name It certainly is not so convenient because script runs always but it is necessary for us only at accounting, but we considered it in a script. Now the task became wider - before proxing it is necessary to replace not only name of the subscriber (User-Name) but also it's realm. The script we can alter easily. But the matter is that the used mechanism of its start does not approach. At the moment of start from pre-proxy FreeRadius were already determined with proxing - on what RADIUS server it will send this message And in User-Name attribute FreeRadius waits the name without realm. Help me please where and how it is better to put script to have an opportunity to change User-Name attribute before FreeRadius will make decision about proxing? Tnx Dmirty

1 0

ascend-data-filters missing from access-accept
by Christopher Carver 21 Apr '06

21 Apr '06

Hi, I'm having some trouble getting all the Ascend-Data-Filter attributes I set in the users file returned in an access-accept packet. Its strange because some of the filters get returned, but others do not. Its creating a real problem for me. Here is the stanza where I match and attach the attributes. Note that there is no other area in my users file where Ascend-Data-Filters are being used. DEFAULT Huntgroup-Name == xxxyyyzzz Ascend-Data-Filter += "ip out drop udp dstport = 135", Ascend-Data-Filter += "ip out drop udp dstport = 136", Ascend-Data-Filter += "ip out drop udp dstport = 137", Ascend-Data-Filter += "ip out drop udp dstport = 138", Ascend-Data-Filter += "ip out drop udp dstport = 139", Ascend-Data-Filter += "ip out drop udp dstport = 445", Ascend-Data-Filter += "ip out drop udp dstport = 587", Ascend-Data-Filter += "ip out drop udp dstport = 1433", Ascend-Data-Filter += "ip out drop udp dstport = 1434", Ascend-Data-Filter += "ip out drop udp dstport = 4444", Ascend-Data-Filter += "ip out drop tcp dstport = 135", Ascend-Data-Filter += "ip out drop tcp dstport = 136", Ascend-Data-Filter += "ip out drop tcp dstport = 137", Ascend-Data-Filter += "ip out drop tcp dstport = 138", Ascend-Data-Filter += "ip out drop tcp dstport = 139", Ascend-Data-Filter += "ip out drop tcp dstport = 445", Ascend-Data-Filter += "ip out drop tcp dstport = 587", Ascend-Data-Filter += "ip out drop tcp dstport = 1433", Ascend-Data-Filter += "ip out drop tcp dstport = 1434", Ascend-Data-Filter += "ip out drop tcp dstport = 4444", Ascend-Data-Filter += "ip out forward 0", Ascend-Data-Filter += "ip in forward 0 dstip xxx.xxx.xxx.xxx/32", Ascend-Data-Filter += "ip in forward 0 dstip xxx.xxx.xxx.xxx/32", Ascend-Data-Filter += "ip in forward 0 dstip xxx.xxx.xxx.xxx/32", Ascend-Data-Filter += "ip in forward 0 dstip xxx.xxx.xxx.xxx/30", Ascend-Data-Filter += "ip in forward 0 dstip xxx.xxx.xxx.xxx/30", Ascend-Data-Filter += "ip in drop tcp dstport = 25", Ascend-Data-Filter += "ip in drop tcp dstport = 587", Ascend-Data-Filter += "ip in forward 0", Fall-Through = no Here is the output using radclient on an auth packet that matches that huntgroup: su-2.05b# radclient -f auth localhost:6969 auth nas41v29 Received response ID 72, code 2, length = 1004 Ascend-Data-Filter = "ip output drop udp dstport = 135" Ascend-Data-Filter = "ip output drop udp dstport = 136" Ascend-Data-Filter = "ip output drop udp dstport = 137" Ascend-Data-Filter = "ip output drop udp dstport = 138" Ascend-Data-Filter = "ip output drop udp dstport = 139" Ascend-Data-Filter = "ip output drop udp dstport = 445" Ascend-Data-Filter = "ip output drop udp dstport = 587" Ascend-Data-Filter = "ip output drop udp dstport = 1433" Ascend-Data-Filter = "ip output drop udp dstport = 1434" Ascend-Data-Filter = "ip output drop udp dstport = 4444" Ascend-Data-Filter = "ip output drop tcp dstport = 135" Ascend-Data-Filter = "ip output drop tcp dstport = 136" Ascend-Data-Filter = "ip output drop tcp dstport = 137" Ascend-Data-Filter = "ip output drop tcp dstport = 138" Ascend-Data-Filter = "ip output drop tcp dstport = 139" Ascend-Data-Filter = "ip output drop tcp dstport = 445" Ascend-Data-Filter = "ip output drop tcp dstport = 587" Ascend-Data-Filter = "ip output drop tcp dstport = 1433" Ascend-Data-Filter = "ip output drop tcp dstport = 1434" Ascend-Data-Filter = "ip output drop tcp dstport = 4444" Ascend-Data-Filter = "ip output forward 0" Ascend-Data-Filter = "ip input drop tcp dstport = 25" Ascend-Data-Filter = "ip input drop tcp dstport = 587" Ascend-Data-Filter = "ip input forward 0" Idle-Timeout = 1800 Framed-Protocol = PPP Service-Type = Framed-User Framed-IP-Netmask = 255.255.255.255 There's no other place Ascend-Data-Filter is used in the users file, so, there's no chance of that messing it up. This is confusing because it seems to add some but not others. Basically it causes email not to work for the users because the drop rule for port 25 traffic gets added but the allow rule to our mail server does not. Any ideas? Thanks! Chris Carver

2 3

help
by Abey Thomas 21 Apr '06

21 Apr '06

-- Regards, Abey Babu Thomas

2 1