- Freeradius-Users - lists.freeradius.org

Quick mysql query help
by Jeremy ohara 24 May '06

24 May '06

hi there guys. i just need some help with mysql query. how can i include c:\dafds\ddsfsd into a feild. example +----+-------------+-----------------------+----+----------------------+ | id | UserName | password | DO | datalocation | +----+-------------+-----------------------+----+----------------------+ | 35 | guestuser35 | Password | := | c:\dsfds\ddd | +----+-------------+-----------------------+----+----------------------+ this is my insert query "Insert into mail (username,password,do,datalocation) Values ('$login','$passwd','$do','$datalocation';") Thanks ---------------------------------------------------------------------------- This email has been scanned for Virus by MDaemon AntiVirus part of MDaemon. Updated daily to keep up-to-date with all new and old viruses. ----------------------------------------------------------------------------

1 0

help to proxy by username prefix
by Vasco Santos 24 May '06

24 May '06

Hi people, I need to put a cistron-1.6.4 with mysql patch to proxy by username prefix. I Put this in config files: hint file: DEFAULT Prefix = "aaa/", Strip-User-Name = "No" Realm = "realmdomain.com" realms file: realmdomain.com XXX.XX.XX.XX:1645 hints nostrip trusted this modifications dont work. questions: they are some patchs or modifications to put this working? I see that if I make a update to a recent version, this option is suported correct? but the recent versions not have suport to mysql or any patch to work it mysql. :( Help me with one solution please. Tanks for or time.

1 0

VSA encoding
by Geoffroy Arnoud 24 May '06

24 May '06

Hi all, I have a question regarding Vendor-specific attribute encoding: What type of "smart" encoding are supported by radclient (and thus FreeRADIUS). I mean, I know I can use TLV encoded VSA - as described in the RFC, for example: WISPr-Redirection-URL=http://www.google.fr or Cisco-Account-Info=QT600 For VSA encoded only with Vendor-ID and String, I can use the syntax: Vendor-Specific=0x00000009FC140256305a31393939406f72616e67652e6672 (Cisco-Account-Info VSA I believe) I saw a strange dictionary amongst FreeRADIUS dictionaries: for USR robotics dictionay.usr It is talking about a NMC encoding, and the follinwg is added after the vendor id declaration: "format=4,0" As anyone explanation about this type of encoding? >From my side, I have a vendor (having a vendor-id) that uses the following encoding: RADIUS Attribute Id (1 byte) = 26 RADIUS Attribute Length (1 byte) = total length of attribute value + 2 Vendor ID (4 bytes) A Project Type attribute (1 byte) And as much attributes as possible (up to 248 bytes), using TLV where T is 1 byte and L is 1 byte. The following scheme shows the attribute encoding. 0 1 2 3 4 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type (26) | Length | Vendor-Id | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Vendor-Id (cont) | Project type | N°Attribute 0 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |AttributeLength| Value Attribute 0 . . . . . . . . . . . . . . . . . . . . . . . . . . . . +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ . . . . | N°Attribute n |AttributeLength|. . . +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Value Attribute n . . . . . . . . . . . . . . +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Is FreeRADIUS able to support such encoding method? Or maybe with only one TLV attribute per RADIUS attribute (26 + L + VendorID + ProjectType + TLV)? For the moment, we use the Vendor-Specific=0x00.... method, but as the attributes are standardized with this vendor, we would like to use it, in a smarter way. Sorry if I have been a litte long. Thankyou in advance. Geof.

3 3

Expirey dates
by Jeremy ohara 24 May '06

24 May '06

Hi there I'm using Free radius 1.0.5 with mysql. i was wondering is there a way to setup where by if a user accounts expireds on 25/07/2006. when the user tries to get on on the 26th the user wont be let on cos the account has expired? Jeremy ---------------------------------------------------------------------------- This email has been scanned for Virus by MDaemon AntiVirus part of MDaemon. Updated daily to keep up-to-date with all new and old viruses. ----------------------------------------------------------------------------

2 1

Need information about proxying
by Vishwanath Srikant Pattanshetti 24 May '06

24 May '06

Hello I am trying to using Freeradius1.1.0 I want to use it as a proxy to an external RADIUS server. In such a setup, if my external server is not up, and if I proxy a request to it, then I get back a access-reject, from my proxy radius server. Also If the username/password mismatch on external server then also I get a access-reject. Is there a way I can differentiate between these two? I mean is there a way I tell if the external RADIUS server is down OR Authentication at external RADIUS server has failed? Please please help in this regard. -Vishwa.

3 2

Proxy Error
by mad 24 May '06

24 May '06

Hello ! I have change the version of freeradius, before I had the 1.0.4 version and now the last CVS. I have a problem with the proxy configuration ... so I have change some things for have a "result". Like, before in the users file I rejected the request with an other realm, and at the end of the file I reject ... For example, for netA before I had DEFAULT Realm != "NetB", Realm != "NULL", Auth-type := Reject [...] DEFAULT Auth-Type := Reject And now I must comment this line for A proxy request at B. When A proxy request at B, and B try to response at B ... A "Received Unknown packet code 11from client 147.173.3.249 port 1812: Cannot validate signature Dropping packet without response." You know this error ? Thanks for your help Regards, Configuration For A ## In proxy.conf ## realm netB { type = radius authhost = IPRadiusB:1812 accthost = IPRadiusB:1813 secret = secretAB nostrip } ## In clients.conf ## client IPRadiusB { secret = secretAB shortname = cric nastype = other } /\/\/\ For B /\/\/\ ## In proxy.conf ## realm netA { type = radius authhost = IPRadiusA:1812 accthost = IPRadiusA:1813 secret = secretAB nostrip } ## In clients.conf ## client IPRadiusA { secret = secretAB shortname = cric nastype = other } ## And in the radiusd.conf ## proxy_requests = yes $INCLUDE ${confdir}/proxy.conf

2 4

RE: Expirey dates
by Chris Liles 24 May '06

24 May '06

Sure, Here is an example: mysql> select * from radcheck where UserName = 'guestuser35'; +----+-------------+-----------------------+----+----------------------+ | id | UserName | Attribute | op | Value | +----+-------------+-----------------------+----+----------------------+ | 35 | guestuser35 | Password | := | test | | 36 | guestuser35 | MS-CHAP-Use-NTLM-Auth | := | No | | 37 | guestuser35 | Expiration | := | 24 May 2006 23:00:00 | +----+-------------+-----------------------+----+----------------------+ 3 rows in set (0.00 sec) -- Chris Liles -----Original Message----- From: freeradius-users-bounces+chris.liles=air2web.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+chris.liles=air2web.com@lists.freeradius.org] On Behalf Of Jeremy ohara Sent: Wednesday, May 24, 2006 11:56 AM To: FreeRadius users mailing list Subject: Expirey dates Importance: High Hi there I'm using Free radius 1.0.5 with mysql. i was wondering is there a way to setup where by if a user accounts expireds on 25/07/2006. when the user tries to get on on the 26th the user wont be let on cos the account has expired? Jeremy ---------------------------------------------------------------------------- This email has been scanned for Virus by MDaemon AntiVirus part of MDaemon. Updated daily to keep up-to-date with all new and old viruses. ----------------------------------------------------------------------------

1 0

RE: Freeradius + Wireless + AD
by Chris Liles 24 May '06

24 May '06

Get samba on the AD first, then install freeradius. Tons of docs about getting samba working with AD are on the net, after you get that working, come back and ask your freeradius questions. The default freeradius config only needs a couple of changes to accomplish what you want to get done. -- Chris Liles -----Original Message----- From: freeradius-users-bounces+chris.liles=air2web.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+chris.liles=air2web.com@lists.freeradius.org] On Behalf Of Kartthik Raghunathan Sent: Wednesday, May 24, 2006 11:21 AM To: freeradius-users(a)lists.freeradius.org Subject: Freeradius + Wireless + AD I would like to know whether the freeradius can run on rhel v3 smooth. Also am planning to integrate my wireless AP (ie.linksys) with freeradius and for authentication going to use my active directory. So can someone please let me know what are the packages should i install for smooth compilation, really having hard time with this ! Thanks, Kartthik -- _______________________________________________ Search for businesses by name, location, or phone number. -Lycos Yellow Pages http://r.lycos.com/r/yp_emailfooter/http://yellowpages.lycos.com/default.as… - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Freeradius + Wireless + AD
by Kartthik Raghunathan 24 May '06

24 May '06

I would like to know whether the freeradius can run on rhel v3 smooth. Also am planning to integrate my wireless AP (ie.linksys) with freeradius and for authentication going to use my active directory. So can someone please let me know what are the packages should i install for smooth compilation, really having hard time with this ! Thanks, Kartthik -- _______________________________________________ Search for businesses by name, location, or phone number. -Lycos Yellow Pages http://r.lycos.com/r/yp_emailfooter/http://yellowpages.lycos.com/default.as…

1 0

please help me...........................................!!!!!!!!!!!!!!!!!!!!!!!!!!!11
by raviprakash sunkara 24 May '06

24 May '06

Hi Everybody.. Good morning. please help me i? Did anyone tell where " SIP training " held in India or any other place .... please excuse me for asking this , Bye -- Thanks and Regards with cheers Sunkara Ravi Prakash (Voip Developer) Hyperion Technology www.hyperion-tech.com <b>

1 0