March 2013 - Freeradius-Users - lists.freeradius.org

2 separate directory service
by Jeremy Schubert 05 Mar '13

05 Mar '13

Can I use 1 radius server to connect to 2 different ldap services? For example, one box to connect to a student simian and a teacher domain? Or do I need a separate server for each domain? ------- Jeremy Schubert www.schubertville.com www.schubertschool.com

2 1

Computer authentication
by Jeremy Schubert 05 Mar '13

05 Mar '13

Is using a device's MAC address the only way to authenticate a specific machine? ------- Jeremy Schubert www.schubertville.com www.schubertschool.com

3 3

Multiple clients with different set of auth. criteria
by Mukesh Negi 05 Mar '13

05 Mar '13

Hello, Does FreeRadius supports multiple clients with different set of authentication criterias. For example, for a client 'A', sending auth-request packet, only ldap should be used, but for the client 'B', sending auth-request packet, first ldap and then db should be used. If this feature is already their in FreeRadius please guide me how can I do this. Regards Mukesh Negi

2 1

(no subject)
by Mehdi Ravanbakhsh 05 Mar '13

05 Mar '13

in schema.sql for PostgreSQL we do not have any primary key for raduser group table. Is that normal or we have some problem ?

1 0

UnLang SQL query vs Perl SQL query
by Mehdi Ravanbakhsh 05 Mar '13

05 Mar '13

Dear All I can use Unlang script and/or Perl module Script to do some select - update or insert in database BUT i need to know witch one is faster Perl module or UnLang ....??? This is important because i have to many stress on database query . I use PostgreSQL by p5-DBI and p5-DBD-Pg . Thanks and Best regards.

3 5

redundancy questionj
by Jeremy Schubert 05 Mar '13

05 Mar '13

Hello all, I'm new to FreeRADIUS and I'm planning to use Ver 2.2.0 on Ubuntu 12.04 server. Have 1 central office and 6 remote locations. 1. Is it standard to put one server in each of the remote locations which each remote back to the central office server? Fail-over is a term used in the wiki, is that the same as redundancy? 2. How stable is FreeRadius...should I consider a primary and secondary server in each remote location? Or is that over kill? Thanks, Jeremy

2 1

DHCP relay IP and gateway IP, possible bad logic?
by Igor Smitran 05 Mar '13

05 Mar '13

In case when freeradius is talking to a DHCP relay it should *always* send answears to a initiating relay IP. But, it doesn't. Cisco CMTS is using 10.10.10.1 as his giaddr for all requests made by CM's, MTA's and CPE's. All replies should go to 10.10.10.1. But, currently, if CPE gets public IP 200.200.200.2 with gateway 200.200.200.1, freeradius tries to send reply to 200.200.200.1 instead of 10.10.10.1. This is my opinion, maybe i am wrong...

3 10

Simultaneous Use strategy
by Mehdi Ravanbakhsh 04 Mar '13

04 Mar '13

Dear All I need to do some change in Simultaneous use check strategy . In fact when a user is disconnecting by physical reasons and the session is not get stop ( in heavy load of user i should set NAS type to other ) and the user can not connect again because of Simultaneous Use limitation. So i put some script in crontab to check radacc table and find any session that not get update (*intermediate) then stop that session .* * * * * *in this case because of **Delay period in **checking** dead session , user can not connect until cron script detect dead session .* * * *So i need to change **Simultaneous Use check strategy and if user with same Calling Station ID - NAS ip address - NAS port - Called station ID try to connect i need to accept it .* * * * * *i just find some query in sql.conf about **Simultaneous Use.* * * *Is there any way to change Simultaneous Use configuration?* * * *Best regards.* * *

2 1

Replicate accounting packets to multiple servers
by Shreya Shah 04 Mar '13

04 Mar '13

Hi, How can I replicate accounting packets to multiple servers when I have only one realm ? I have setup replicate and replicate-to realm in accounting section and also home_server and pool in proxy.conf but replication only works for the first home server. It wouldn't replicate accounting to the other server. This is how my proxy.conf config for replication looks. home_server remote_server { ipaddr = x.x.x.x port = 1813 type = acct secret = testing123 } home_server col_server { ipaddr = x.x.x.x port = 1813 type = acct secret = testing } home_server_pool remote_pool { type = fail-over home_server = remote_server } home_server_pool col_pool { type = fail-over home_server = col_server } DEFAULT { Replicate-To-Realm := remote } realm remote { acct_pool = remote_pool acct_pool = col_pool } I just see the replication accounting packets being sent only to remote_server and not to col_server. Thanks, Shreya.

2 1

(no subject)
by Shreya Shah 04 Mar '13

04 Mar '13

Hi, How can I replicate accounting packets to multiple servers when I have only one realm ? I have setup replicate and replicate-to realm in accounting section and also home_server and pool in proxy.conf but replication only works for the first home server. It wouldn't replicate accounting to the other server. This is how my proxy.conf config for replication looks. home_server remote_server { ipaddr = x.x.x.x port = 1813 type = acct secret = testing123 } home_server col_server { ipaddr = x.x.x.x port = 1813 type = acct secret = testing } home_server_pool remote_pool { type = fail-over home_server = remote_server } home_server_pool col_pool { type = fail-over home_server = col_server } DEFAULT { Replicate-To-Realm := remote } realm remote { acct_pool = remote_pool acct_pool = col_pool } I just see the replication accounting packets being sent only to remote_server and not to col_server. Thanks, Shreya.

1 0