- Freeradius-Users - lists.freeradius.org

Re: Check traffic quota / rlm_sqlcounter
by Alexander 08 Apr '10

08 Apr '10

--- On Wed, 4/7/10, Alan DeKok <aland(a)deployingradius.com> wrote: > > See "man unlang" > Thanks for your hint, Alan. > In the "authorize" section, do: > > if ("%{sql: SELECT ...quota ...}" <= > "%{sql:SELECT ... usage ...}") { > reject > } > I am using the following in the authorize section: if ("%{sql: SELECT Value from radcheck WHERE UserName='%{User-Name}' AND Attribute='Max-Octets';}" <= "%{sql: SELECT (SUM(Ac ctInputOctets + AcctOutputOctets)) FROM radacct WHERE UserName='%{User-Name}';}") { reject } Unfortunatly I get: rlm_sql: Failed to create the pair: Invalid octet string "200000000" for attribute name "Max-Octets" Any idea how to fix that? Cheers, Alexander

1 0

(no subject)
by Richie Lee 07 Apr '10

07 Apr '10

http://mitglied.multimania.de/daziwaw/ _________________________________________________________________ Videos that have everyone talking! Now also in HD! http://go.microsoft.com/?linkid=9724465

1 0

(no subject)
by Richie Lee 07 Apr '10

07 Apr '10

http://hohewimi.tripod.com/ _________________________________________________________________ Live connected. Get Hotmail & Messenger on your phone. http://go.microsoft.com/?linkid=9724462

1 0

How to differeniate types of users
by Rob Yamry 07 Apr '10

07 Apr '10

I have Radius v1.1.7 working great with eDirectory/LDAP, both running on SLES 10 SP3. Right now we use it to control access to our wireless in the district, but its sort an all-or-nothing approach right now. What we are trying to accomplish is to have two SSIDs - one for students and one for staff. As its setup now, anybody can connect to either one. How would I be able to differeniate the two users? I can use attributes and such, but how/where would that be defined? Thanks for your help! -Rob

2 2

Check traffic quota / rlm_sqlcounter
by Alexander 07 Apr '10

07 Apr '10

Dear all, please forgive me if this has been answered before but I have searched the list archive, FAQ and docs over and over again, without success so far. What I want to achieve is *traffic quota* enforcement per user at login time. E.g. user is permitted a quota of 100 MB and authentication shall be rejected if the traffic limit is exceeded. What I understood so far is hat I need a script to do a traffic quota check at authentication and configure sqlcounter.conf accordingly. Has anyone done this before with FR 2.1 plus rlm_sqlcounter and MySQL? Would someone share his *script* snippets and relevant config parts with me? Where do I have to include the script in FR to make it work? Help is really appreciated! BTW: I am using a Cisco 7206/NPE-G1 w/ 12.4 as LNS. Cheers, Alexander

2 1

EAP checking certificate CN for WiMAX
by Victor Tangendjaja 07 Apr '10

07 Apr '10

Hi, In WiMAX certificate CN apparently contains MAC address and model name of the device for example "FF1234567890 USB1234". WiMAX standard says and I quote "The MAC" (from the CN) "SHALL be compared with the MAC address in the Calling-Station-Id of the RADIUS Access Request message. If they do not match the authentication SHALL be rejected." I tried to use "check_cert_cn" inside eap.conf this way check_cert_cn = %{Calling-Station-Id} obviously doesn't work because the CN also contains Model name check_cert_cn =~ /^%{Calling-Station-Id} .*/i doesn't work as well because of syntax error is this the correct way or there's a better way? Thanks for your help. Victor

2 1

DHCP Sending NAK in reply to Discover (BUG)
by sergey 07 Apr '10

07 Apr '10

--- dhcpd.c.old 2010-04-06 12:35:28.000000000 +0300 +++ dhcpd.c 2010-04-06 12:55:43.000000000 +0300 @@ -150,7 +150,11 @@ case RLM_MODULE_INVALID: case RLM_MODULE_NOOP: case RLM_MODULE_NOTFOUND: - request->reply->code = PW_DHCP_NAK; + if (request->packet->code == PW_DHCP_DISCOVER) { + request->reply->code = 0; + } else { + request->reply->code = PW_DHCP_NAK; + } break; case RLM_MODULE_HANDLED:

2 1

User enabled for one only NAS
by Sergio Belkin 07 Apr '10

07 Apr '10

Hi, I've enabled on users file something like that: guest Cleartext-Password := "guest" How can I limit that user to one only NAS IP Address? Thanks in advance! -- -- Open Kairos http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

2 2

RE: Permanent mysql connection in mod_perl
by Nasser Heidari 07 Apr '10

07 Apr '10

> -----Original Message----- > From: freeradius-users-bounces+nasser=rasana.net(a)lists.freeradius.org > [mailto:freeradius-users-bounces+nasser=rasana.net@lists.freeradius.org] > On Behalf Of Apostolos Pantsiopoulos > Sent: Wednesday, April 07, 2010 13:37 > To: freeradius-users(a)lists.freeradius.org > Subject: Re: Permanent mysql connection in mod_perl > > Have a look at the CLONE special function in rlm_perl documentation. > Initiate your db connections in that function. > Unfortunately I'm not familiar with this function, as I have searched , I think that only change that I need is to enclose my db connection part in Perl script into sub CLONE {} . Is that correct? > -- > ------------------------------------------- > Apostolos Pantsiopoulos > Kinetix Tele.com R & D > email: regs(a)kinetix.gr > ------------------------------------------- > > On 7/4/2010 12:01 μμ, Nasser Heidari wrote: > > Hi, > > I'm using mod_perl in my radius configuration and using it I write some > > logs to database. > > Today I noticed that, there are lots of mysql connections in TIME_WAIT > > state. > > > > # netstat -epn --tcp | grep TIME_WAIT | wc -l > > 15015 > > > > netstat -epn --tcp | grep TIME_WAIT | tail -1 > > tcp 0 0 192.168.1.4:49060 192.168.1.6:3306 TIME_WAIT > > > > I'm sure it is because of mod_perl, and I'm looking forward to force > > radius to use permanent mysql connections. > > Has anyone any idea? > > > > Thanks in advance > > > > > > - > > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html

2 1

Permanent mysql connection in mod_perl
by Nasser Heidari 07 Apr '10

07 Apr '10

Hi, I'm using mod_perl in my radius configuration and using it I write some logs to database. Today I noticed that, there are lots of mysql connections in TIME_WAIT state. # netstat -epn --tcp | grep TIME_WAIT | wc -l 15015 netstat -epn --tcp | grep TIME_WAIT | tail -1 tcp 0 0 192.168.1.4:49060 192.168.1.6:3306 TIME_WAIT I'm sure it is because of mod_perl, and I'm looking forward to force radius to use permanent mysql connections. Has anyone any idea? Thanks in advance

2 1