December 2007 - Freeradius-Users - lists.freeradius.org

Re: Packets in Accounting ?
by Alan DeKok 01 Dec '07

01 Dec '07

Edvin Seferovic wrote: > I found this in an older sql.conf file of mine : <shrug> It's always possible that there were local changes... > I suppose, the packets were in the schema, but I cannot confirm that for version < 1.0 since the FTP server of freeradius doesn't respond :( Hmm... OK. > Packets are also defined in the dictionary, why not have them in the accounting DB ? There are hundreds of accounting attributes in the dictionaries. Most NASes only send 5-6 attributes in an accounting packet. The default schema covers the common attributes. Alan DeKok.

1 0

Re: Packets in Accounting ?
by Alan DeKok 01 Dec '07

01 Dec '07

Edvin Seferovic wrote: > what happened to the Acct-Input/Output-Packets in Accounting. MySQL > schema doesn’t have those fields anymore. Any special reason ? Were they ever in the schema? I don't see them in 1.1.x. Alan DeKok.

2 1

Newbie: What does this mean (Wrong NAS port ID)?
by Piero Giobbi 01 Dec '07

01 Dec '07

Hi all. Im using freeradius 1.1.7 with Proxim AP4000 and it works. But i get this in my syslog. Error: rlm_radutmp: Logout entry for NAS ap-serverummet port 9 has wrong ID What does this mean? Can i ignore it? Can't really find anything useful on the net.. client-conf: client 10.0.5.191 { secret = xxx shortname = ap-serverummet nastype = other # localhost isn't usually a NAS... } thx. p

2 1

LDAP Authentication: filter problem
by Carlos Parada 01 Dec '07

01 Dec '07

Hi all, I'm using an LDAP-based authentication. I'd have a simple (typical filter) like this filter = uid=%{User-Name} Now, in addition, I'd need to authenticate based on a Service-Info attribute. So I need something like filter = "(&(uid=%{User-Name})(radiusServiceInfo=%{Service-Info})) The problem is that when Service-Info doesn't come in the Radius packet (because is not mandatory for me), it doesn't work, and I see on LDAP the following filter="(&(uid=test1)(?=undefined))" If Service-Info not present, I would expect something like filter="(&(uid=test1)(radiusSeviceInfo=))" Worse, in fact, what I need is a filter slightly different like filter = "(&(uid=%{User-Name})(!(radiusServiceInfo=%{Service-Info}))) In that case (using the !), the query sent is the following filter="(&(uid=test1)(?=error))" I've already search about that on the freeradius mailing-lists and I didn't saw any report about this problem. Is that any kind of bug? Or am I doing something wrong? I appreciate some help. Best Regards, Carlos Parada

2 1

Query regarding Grouping devices and users for login Access
by ajay raut 01 Dec '07

01 Dec '07

Hi, I am trying one test setup in my LAB on RADIUS. As i am new to all the feature of Radius, I need one information on Radius feature urgently....So any information regarding this will be very helpful for me. The Query is... assume a scenario..there is an organisation having centralized Radius server for shell login on all the WAN devices like routers and Switches. Organisation needs a configuration previlleges to be grouped regionwise means the devices which are local to a particular location the local adminstrator can configure it but they will not have any access previlleges to other devices.. This should be done regionwise... Meaning of this we need to configure a RADIUS for grouping devices and users in a same group . Thanking u in advance for any inputs.. Thanks, Ajay Raut --------------------------------- Get easy, one-click access to your favorites. Make Yahoo! your homepage.

3 2

Re: rlm_passwd and EAP-MD5
by Alan DeKok 01 Dec '07

01 Dec '07

Kolbjørn Barmen wrote: >> HUP does not work reliably, and cannot be made to, for architectural reasons. >> However, Alan has recently added code to the CVS HEAD which will reload >> *certain* portions of the server (just "users" files I believe) safely on HUP. > > Well, that's not a big difference from my point of view, since restarting > the server is done quite quickly anyhow. I'm more surpriced that I have to > do anything, I would expcet that one can change passwords in a passwd-file > without having to restart anything - I actually took that for granted. So... you didn't read the documentation to see how it behaved. And when you were told how it behaved, your response is to complain. Go read the main README in the source. Section 5 is meant for you. i.e. you're complaining that you don't like the behavior of something you downloaded for free, AFTER you received free support on this mailing list. > But ok, I guess I can create a script that does what I thought freeradius > did already, monitor the passwd file and restart freeradius when it > notices changes. Instead of complaining, you could submit patches to FreeRADIUS to make it work better. But I would be naive to expect someone with your attitude to do that. Alan DeKok.

1 0

unsubcribe-freeradius-users@list.freeradius.org
by affia＠ipnet.net.id 01 Dec '07

01 Dec '07

--------------------------------------------------------------------------------------- Our email server deny .zip attachement and using graymilter Please rename .zip to example: .ziper Please read http://www.acme.com/software/graymilter ---------------------------------------------------------------------------------------

1 0