March 2013 - Freeradius-Users - lists.freeradius.org

use control attribute in sql.conf (sql module config file) query
by Mehdi Ravanbakhsh 31 Mar '13

31 Mar '13

Can use control attribute in sql.conf (sql module config file) query ? if yes so what about a new control attribute that define dictionary ? Best regards.

1 0

change Group-Name in unlang
by Mehdi Ravanbakhsh 30 Mar '13

30 Mar '13

I can change Pool-Name in unlang after if condition but if i use Group-Name for change the group of user it not work ....!!! in authorize { sql if (notfound) { update control { Auth-Type := "Accept" Group-Name := "Bad-User" } } In rad group check table i define " Bad-User := Pool-Name Bad-User-Pool " do i have any mistake in unlang ?

2 3

how i can check if password is not correct ?
by Mehdi Ravanbakhsh 30 Mar '13

30 Mar '13

Hi All if password in request is not correct wich module handele this and reject the client? where i can check if password is not correct ? and what the module return when password is not match ? Best regards.

2 2

How to check MODULE RETURN CODES
by Mehdi Ravanbakhsh 30 Mar '13

30 Mar '13

Hi all How can i check MODULE RETURN CODES in unlang? for example if SQL module in authorize section return notfound

2 2

multihomed server on isolated networks
by Lev Bronshtein 29 Mar '13

29 Mar '13

FreeRadius version 2.2.0 OS: RHEL 5.5 Hi Everyone, I have a requirement where a DHCP server should have a leg into a number of isolated networks. Which means that when I set DHCP-DHCP-Server-Identifier as an interface address only one network will find it. My current options include setting up routes on other networks to the respective interfaces, numbering the loopback and again doing the same, however I was hoping that there maybe a configuration option that will set the Server Identifier to be the IP address of the egress interface. Please let me know as to what is currently possible in my scenario. Regards, Lev Bronshtein

2 3

DEFAULT user configuration in users file
by Mehdi Ravanbakhsh 29 Mar '13

29 Mar '13

Hi ALL i need to accept all incoming request and pool name should be "Baduser" even if user not define in sql database .( i change the pool-name if user was define in sql databasen in later steps). I test it ........client by any user and password can connect to NAS and if user was define it work correctly and pool name change to correct one but if user not define pool-name not set to "Basuser". my users file configuration : DEFAULT Auth-Type := Accept DEFAULT Pool-Name = "Baduser" Any Idea ?

1 0

autostarting fr on osx
by Alex Sharaz 29 Mar '13

29 Mar '13

Hi, I'm running FR2.2 on my osX server at home. At the moment I'm just invoking it from the command line. Given that osx comes with FR 2.1.10 preinstalled ( supplied version disabled), what's the best way of auto starting the git built 2.2 version on os x? Replace /usr/sbin/radiusd with a symbolic link to /usr/local/sbin/radiusd or build a different launch daemon config for the new release. Rgds Alex

2 1

rlm_detail alternatives?
by Konstantin Chekushin 29 Mar '13

29 Mar '13

3 2

Trying to do proxy using realm and 2 VS
by Vincent, Fabien 28 Mar '13

28 Mar '13

Hi all, I'm currently working on a fresh FreeRadius 2.x install, in order to separate Radius auth for Administrators (Firewall, Routeurs & Switchs administration) and Customers access (VPN SSL / IPSec). My first try was to rewrite all the config into virtual servers (previously, all was written into radiusd.conf :(). So what I did : [root@server /etc/raddb]$ ll sites-enabled/ total 0 lrwxrwxrwx. 1 root root 33 Mar 19 12:01 administrator -> /etc/raddb/sites-available/administrator lrwxrwxrwx. 1 root root 43 Mar 26 18:16 customer -> /etc/raddb/sites-available/coreye_customers This is my two VS : server administrator { # Authenticate / Authorize listener listen { ipaddr = * port = 1600 type = auth } # Accounting listener listen { ipaddr = * port = 1601 type = acct } [...] server customer { # Authenticate / Authorize listener listen { ipaddr = * port = 1602 type = auth } # Accounting listener listen { ipaddr = * port = 1603 type = acct } [...] And in order to proxy, I want to forward using proxy depending realm (proxy.conf) realm ".*customer$" { virtual_server = customer } realm ".*admin$" { virtual_server = administrator } realm NULL { virtual_server = administrator } But when logging into Radius, it works for VS Administrator (login admin or user@admin), but if I try using login@customer, it's never proxy to virtual server customer. I tried different methods always shown in the mailing list, but no way, it's never working ... Proxy to realm into authorize section : if (Realm == customer) { update control { Proxy-To-Realm := customer } } Not working ... The request is always managed by administrator vs. Always played using dynamic clients example and FreeRADIUS-Client-Virtual-Server = "customer", but not working again. I suspect the problem located in my NAS MySQL table, where "server" column is forced to virtual server "administrator" Is anything I missed to do ? What's the best solution to do this kind of configuration when nas are stored in MySQL DB, and some of the nas clients could be used by different virtual servers ? What the is the best way to have a single radius IP server, and two different virtual servers with two different set of rules ? Thanks in advance for your help ! Fabien VINCENT http://www.coreye.fr<http://www.coreye.fr/>

1 0

New/updated dictionary files for Meru and Trapeze
by John Carter 28 Mar '13

28 Mar '13

Hi, Please find attached a brand-new Meru dictionary file and an updated Trapeze dictionary file (updated based on 2.2.0). Do you want diffs? Regards, John.

2 3