- Freeradius-Users - lists.freeradius.org

Re: Pre-release of 2.1.7
by Thor Spruyt 09 Sep '09

09 Sep '09

Hi, I changed Client-IP-Address in my configuration to Packet-Src-IP-Address in the understanding that Client-IP-Address is deprecated, not sure if this is really the case however. Module: Instantiating acct_unique acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, Packet-Src-IP-Address, NAS-Port" } However, the attribute doesn't seem to contain any value like Client-IP-Address does: [acct_unique] WARNING: Attribute Packet-Src-IP-Address was not found in request, unique ID MAY be inconsistent [acct_unique] Hashing 'NAS-Port = 0,,NAS-IP-Address = 195.130.158.153,Acct-Session-Id = "tqgOMan",User-Name = "thor"' [acct_unique] Acct-Unique-Session-ID = "e359ded1c6e022ca". Regards, Thor.

1 0

Howto Authenticate Undefined Users
by Matthias Cramer 09 Sep '09

09 Sep '09

Hi I have all user in a mysql database. This part works well. Now I like to be able to assign all users which are not defined in the database some special attributes for their session (goal is to bring them onto a captive portal). I have played with the DEFAULT entries, but they get assigned to all users as it looks like. Can someone point me in the right direction please ? Regards Matthias -- Matthias Cramer / mc322-ripe Senior Network & Security Engineer iWay AG Phone +41 43 500 1111 Josefstrasse 225 Fax +41 44 271 3535 CH-8005 Zürich http://www.iway.ch/ GnuPG 1024D/2D208250 = DBC6 65B6 7083 1029 781E 3959 B62F DF1C 2D20 8250

3 3

Pre-release of 2.1.7
by Wegener, Norbert 09 Sep '09

09 Sep '09

The current ldap module gives a warning: [ldap] performing user authorization for user1 [ldap] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [ldap] expand: (uid=%{Stripped-User-Name:-%{User-Name}}) ->(uid=user1) Shouldn't it be: filter = "(uid=%{%{Stripped-User-Name}:-%{User-Name}})" Norbert Wegener

2 1

attr_rewrite help
by ramesh p 09 Sep '09

09 Sep '09

Hi, i'm trying to replace username = '' with some username = "Usernamenull" in my test radius server. am using code as below: attr_rewrite attr_rewrite_username { attribute = User-Name searchin = packet *searchfor = "''"* replacewith = "Usernamenull" new_attribute = no ignore_case = no max_matches = 1 append = no } placed attr_rewrite_username in defualt server file under preprocess section. The above code is not working. Does any one help how to match for null usernames and rewrite with some other names. Thanks.

2 1

Re: Pre-release of 2.1.7
by Thor Spruyt 09 Sep '09

09 Sep '09

>----- Oorspronkelijk bericht ----- >Van : Arran Cudbard-Bell [mailto:A.Cudbard-Bell@sussex.ac.uk] >Verzonden : woensdag , september 9, 2009 01:31 PM > >*clarifies* I'm sad whenever I see someone using Windows.*, why can't they use an OS that doesn't suck. > >- -Arran > Maybe they *can*, but they don't want to for reasons beyond your comprehension.

2 1

Re: Pre-release of 2.1.7
by Thor Spruyt 09 Sep '09

09 Sep '09

Hi, Found a small glitch with rlm_attr_filter... When I don't have a Fall-Through configured, it behaves correctly, meaning it doesn't continue. When I have "Fall-Through = Yes" configured, it behaves correctly, meaning it continues. But when I have "Fall-Through = No" configured, it still continues... Or maybe it's just the comments that are misleading? # When a packet is sent to a home server, these attributes # and values are tested. Only the first match is used unless # the "Fall-Through" variable is set to "Yes". In that case # the rules defined in the DEFAULT case are processed as well. Regards, Thor.

2 1

Re: Pre-release of 2.1.7
by Thor Spruyt 09 Sep '09

09 Sep '09

Hi, Compiles and runs smoothly on Centos 4.6 32-bit... Using postgresql backends and exec module for both auth and acct packets home_server "status_check = none" ok, need this ;-) I've been away from FR evolution for a while... I must say I'm really surprised what's possible now with 2.1.7 compared to 1.1.7 (still running in production), nice job! Regards, Thor.

5 6

Re: freeradius mysql threads configuration questions
by ramesh p 09 Sep '09

09 Sep '09

Thanks Alan. We are migrating the things one by one.Observing good results. -- Rams. ramesh p wrote: > I'm using freeradius2.1.6 with buffered-sql module. > Please advice on threading configuration from Radius to MySQL to > determine optimal configuration; Radius is configurred to use five > threads, but we observe only one process on the database server at any > one time. Because you're using the wrong database back-end. If you used InnoDB, this wouldn't be a problem. Follow the instructions on this list. If you intend to run a system with a million users, it's a good idea to listen to the advice of people who have experience building such systems. Alan DeKok.

1 0

Webinar with FreeRADIUS and MySQL
by Alan DeKok 09 Sep '09

09 Sep '09

The EMEA version of the Webinar will be held on October 20. http://www.mysql.com/news-and-events/web-seminars/display-432.html The webinar will be given via Webex. You will need an account on mysql.com in order to register and see webex details. The full announcement is below. Alan DeKok. +++++++++++++++++++++++++++++++++++++++++++++++++++++++ FreeRADIUS & MySQL Cluster: Scalable and Highly Available AAA Services Tuesday, October 20, 2009 As network use grows and services become more dynamic, so existing Authentication, Authorization and Accounting (AAA) environments can struggle to keep pace with demand Tune into this webinar where you can hear from the Alan DeKok, one of the founders of the FreeRADIUS project and CEO of Network RADIUS, discuss the concepts and implementation of RADIUS services using the FreeRADIUS server and the MySQL Cluster database to deliver highly available and scalable AAA services In this session, you will learn about: - potential AAA limitations as network environments grow - advantages of deploying FreeRADIUS with MySQL Cluster - Performance, sizing and deployment of an AAA environment using FreeRADIUS with MySQL Cluster - customer case studies - how to get started WHO: * Alan DeKok, Founder of FreeRADIUS and CEO of Network RADIUS * Matthew Keep, MySQL Cluster Product Management WHAT: FreeRADIUS & MySQL Cluster: Scalable and Highly Available AAA Services WHEN: Wednesday, September 30, 2009: 09:30 Pacific time (America) 06:30 Hawaii time 10:30 Mountain time (America) 11:30 Central time (America) 12:30 Eastern time (America) 16:30 UTC 17:30 Western European time 18:30 Central European time 19:30 Eastern European time The presentation will be approximately 45 minutes long followed by Q&A. WHERE: Simply access the web seminar from the comfort of your own office. WHY: To learn more about how you can use FreeRADIUS and MySQL Cluster 7.0 to deliver highly available and scalable AAA Services

1 0

freeradius mysql threads configuration questions
by ramesh p 09 Sep '09

09 Sep '09

Hi All, I'm using freeradius2.1.6 with buffered-sql module. Please advice on threading configuration from Radius to MySQL to determine optimal configuration; Radius is configurred to use five threads, but we observe only one process on the database server at any one time. Does Radius can perform its data input more efficiently by doing bulk updates against the MySQL server? what configuration changes required. sql.conf: # number of sql connections to make to server num_sql_socks = 5 # number of seconds to dely retrying on a failed database # connection (per_socket) connect_failure_retry_delay = 60 # lifetime of an SQL socket. If you are having network issues # such as TCP sessions expiring, you may need to set the socket # lifetime. If set to non-zero, any open connections will be # closed "lifetime" seconds after they were first opened. lifetime = 0 # Maximum number of queries used by an SQL socket. If you are # having issues with SQL sockets lasting "too long", you can # limit the number of queries performed over one socket. After # "max_qeuries", the socket will be closed. Use 0 for "no limit". max_queries = 0 # Set to 'yes' to read radius clients from the database ('nas' table) # Clients will ONLY be read on server startup. For performance # and security reasons, finding clients via SQL queries CANNOT # be done "live" while the server is running. # #readclients = yes We are doing only accounting through radius server. Thanks, Rams.

2 1