September 2009 - Freeradius-Users - lists.freeradius.org

Pre-release of 2.1.7
by Wegener, Norbert 09 Sep '09

09 Sep '09

The current ldap module gives a warning: [ldap] performing user authorization for user1 [ldap] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [ldap] expand: (uid=%{Stripped-User-Name:-%{User-Name}}) ->(uid=user1) Shouldn't it be: filter = "(uid=%{%{Stripped-User-Name}:-%{User-Name}})" Norbert Wegener

2 1

attr_rewrite help
by ramesh p 09 Sep '09

09 Sep '09

Hi, i'm trying to replace username = '' with some username = "Usernamenull" in my test radius server. am using code as below: attr_rewrite attr_rewrite_username { attribute = User-Name searchin = packet *searchfor = "''"* replacewith = "Usernamenull" new_attribute = no ignore_case = no max_matches = 1 append = no } placed attr_rewrite_username in defualt server file under preprocess section. The above code is not working. Does any one help how to match for null usernames and rewrite with some other names. Thanks.

2 1

Re: Pre-release of 2.1.7
by Thor Spruyt 09 Sep '09

09 Sep '09

>----- Oorspronkelijk bericht ----- >Van : Arran Cudbard-Bell [mailto:A.Cudbard-Bell@sussex.ac.uk] >Verzonden : woensdag , september 9, 2009 01:31 PM > >*clarifies* I'm sad whenever I see someone using Windows.*, why can't they use an OS that doesn't suck. > >- -Arran > Maybe they *can*, but they don't want to for reasons beyond your comprehension.

2 1

Re: Pre-release of 2.1.7
by Thor Spruyt 09 Sep '09

09 Sep '09

Hi, Found a small glitch with rlm_attr_filter... When I don't have a Fall-Through configured, it behaves correctly, meaning it doesn't continue. When I have "Fall-Through = Yes" configured, it behaves correctly, meaning it continues. But when I have "Fall-Through = No" configured, it still continues... Or maybe it's just the comments that are misleading? # When a packet is sent to a home server, these attributes # and values are tested. Only the first match is used unless # the "Fall-Through" variable is set to "Yes". In that case # the rules defined in the DEFAULT case are processed as well. Regards, Thor.

2 1

Re: Pre-release of 2.1.7
by Thor Spruyt 09 Sep '09

09 Sep '09

Hi, Compiles and runs smoothly on Centos 4.6 32-bit... Using postgresql backends and exec module for both auth and acct packets home_server "status_check = none" ok, need this ;-) I've been away from FR evolution for a while... I must say I'm really surprised what's possible now with 2.1.7 compared to 1.1.7 (still running in production), nice job! Regards, Thor.

5 6

Re: freeradius mysql threads configuration questions
by ramesh p 09 Sep '09

09 Sep '09

Thanks Alan. We are migrating the things one by one.Observing good results. -- Rams. ramesh p wrote: > I'm using freeradius2.1.6 with buffered-sql module. > Please advice on threading configuration from Radius to MySQL to > determine optimal configuration; Radius is configurred to use five > threads, but we observe only one process on the database server at any > one time. Because you're using the wrong database back-end. If you used InnoDB, this wouldn't be a problem. Follow the instructions on this list. If you intend to run a system with a million users, it's a good idea to listen to the advice of people who have experience building such systems. Alan DeKok.

1 0

Webinar with FreeRADIUS and MySQL
by Alan DeKok 09 Sep '09

09 Sep '09

The EMEA version of the Webinar will be held on October 20. http://www.mysql.com/news-and-events/web-seminars/display-432.html The webinar will be given via Webex. You will need an account on mysql.com in order to register and see webex details. The full announcement is below. Alan DeKok. +++++++++++++++++++++++++++++++++++++++++++++++++++++++ FreeRADIUS & MySQL Cluster: Scalable and Highly Available AAA Services Tuesday, October 20, 2009 As network use grows and services become more dynamic, so existing Authentication, Authorization and Accounting (AAA) environments can struggle to keep pace with demand Tune into this webinar where you can hear from the Alan DeKok, one of the founders of the FreeRADIUS project and CEO of Network RADIUS, discuss the concepts and implementation of RADIUS services using the FreeRADIUS server and the MySQL Cluster database to deliver highly available and scalable AAA services In this session, you will learn about: - potential AAA limitations as network environments grow - advantages of deploying FreeRADIUS with MySQL Cluster - Performance, sizing and deployment of an AAA environment using FreeRADIUS with MySQL Cluster - customer case studies - how to get started WHO: * Alan DeKok, Founder of FreeRADIUS and CEO of Network RADIUS * Matthew Keep, MySQL Cluster Product Management WHAT: FreeRADIUS & MySQL Cluster: Scalable and Highly Available AAA Services WHEN: Wednesday, September 30, 2009: 09:30 Pacific time (America) 06:30 Hawaii time 10:30 Mountain time (America) 11:30 Central time (America) 12:30 Eastern time (America) 16:30 UTC 17:30 Western European time 18:30 Central European time 19:30 Eastern European time The presentation will be approximately 45 minutes long followed by Q&A. WHERE: Simply access the web seminar from the comfort of your own office. WHY: To learn more about how you can use FreeRADIUS and MySQL Cluster 7.0 to deliver highly available and scalable AAA Services

1 0

freeradius mysql threads configuration questions
by ramesh p 09 Sep '09

09 Sep '09

Hi All, I'm using freeradius2.1.6 with buffered-sql module. Please advice on threading configuration from Radius to MySQL to determine optimal configuration; Radius is configurred to use five threads, but we observe only one process on the database server at any one time. Does Radius can perform its data input more efficiently by doing bulk updates against the MySQL server? what configuration changes required. sql.conf: # number of sql connections to make to server num_sql_socks = 5 # number of seconds to dely retrying on a failed database # connection (per_socket) connect_failure_retry_delay = 60 # lifetime of an SQL socket. If you are having network issues # such as TCP sessions expiring, you may need to set the socket # lifetime. If set to non-zero, any open connections will be # closed "lifetime" seconds after they were first opened. lifetime = 0 # Maximum number of queries used by an SQL socket. If you are # having issues with SQL sockets lasting "too long", you can # limit the number of queries performed over one socket. After # "max_qeuries", the socket will be closed. Use 0 for "no limit". max_queries = 0 # Set to 'yes' to read radius clients from the database ('nas' table) # Clients will ONLY be read on server startup. For performance # and security reasons, finding clients via SQL queries CANNOT # be done "live" while the server is running. # #readclients = yes We are doing only accounting through radius server. Thanks, Rams.

2 1

Webinar with FreeRADIUS and MySQL: Sept. 30
by Alan DeKok 09 Sep '09

09 Sep '09

I will be giving a Webinar with MySQL on September 30. Registration is available at: http://www.mysql.com/news-and-events/web-seminars/display-419.html The webinar will be given via Webex. You will need an account on mysql.com in order to register and see webex details. The full announcement is below. Alan DeKok. +++++++++++++++++++++++++++++++++++++++++++++++++++++++ FreeRADIUS & MySQL Cluster: Scalable and Highly Available AAA Services Wednesday, September 30, 2009 As network use grows and services become more dynamic, so existing Authentication, Authorization and Accounting (AAA) environments can struggle to keep pace with demand Tune into this webinar where you can hear from the Alan DeKok, one of the founders of the FreeRADIUS project and CEO of Network RADIUS, discuss the concepts and implementation of RADIUS services using the FreeRADIUS server and the MySQL Cluster database to deliver highly available and scalable AAA services In this session, you will learn about: - potential AAA limitations as network environments grow - advantages of deploying FreeRADIUS with MySQL Cluster - Performance, sizing and deployment of an AAA environment using FreeRADIUS with MySQL Cluster - customer case studies - how to get started WHO: * Alan DeKok, Founder of FreeRADIUS and CEO of Network RADIUS * Matthew Keep, MySQL Cluster Product Management WHAT: FreeRADIUS & MySQL Cluster: Scalable and Highly Available AAA Services WHEN: Wednesday, September 30, 2009: 09:30 Pacific time (America) 06:30 Hawaii time 10:30 Mountain time (America) 11:30 Central time (America) 12:30 Eastern time (America) 16:30 UTC 17:30 Western European time 18:30 Central European time 19:30 Eastern European time The presentation will be approximately 45 minutes long followed by Q&A. WHERE: Simply access the web seminar from the comfort of your own office. WHY: To learn more about how you can use FreeRADIUS and MySQL Cluster 7.0 to deliver highly available and scalable AAA Services

1 0

Re: Deployment
by tech.subscriptions＠shepherdhill.biz 09 Sep '09

09 Sep '09

tech.subscriptions(a)shepherdhill.biz wrote: >> I have done the gdb and valgrind dumps. They are on: >> http://www.leadservers.com/gdb-radiusd.log & >> http://www.leadservers.com/valgrind-radiusd.log Alan DeKok wrote: > It looks like an issue that was fixed in 2.1.7. Thanks. I was told version 2.1.3 has a little issue with regular expressions and I am having an issue with version 2.1.6. While waiting for version 2.1.7 which version can I use? Regards, Chris.

1 0