- Freeradius-Users - lists.freeradius.org

Error running free-radius
by Jordi Soriano Terol 17 May '06

17 May '06

Hi all! I´ve encountered an error message while including the file eap.conf during the running of free-radius radiusd -X. The error is .../eap.conf(290) "Unexpected end of file". I´ve tried even with the original file but the error is still there. Can someone help me? Thanks.

3 4

How to use time period
by ludovic cailleau 16 May '06

16 May '06

Good morning!! I would like to authorize connection to the users to one time period stored in Ldap base. Example: The user Steeve can be connecting between 8h and 12h. So at the time of the request for connection, freeradius will have to check if the time of connection is between this time period. If its true freeradius send accept but if it is wrong he send reject. Does freedius manage that? Because I be not found information in connection with that. Thanks Ludovic Cailleau --------------------------------- Faites de Yahoo! votre page d'accueil sur le web pour retrouver directement vos services préférés : vérifiez vos nouveaux mails, lancez vos recherches et suivez l'actualité en temps réel. Cliquez ici.

4 5

Dialup Admin
by Jeremy ohara 16 May '06

16 May '06

Wondering if anyone can help me with Dialup Admin. what the current problem is. when i look at online users. it shows the nas server but saying noone is online. and when i go to view the user who is online it says they are not online can anyone help me here. if you need more info plz tell me Jeremy ---------------------------------------------------------------------------- This email has been scanned for Virus by MDaemon AntiVirus part of MDaemon. Updated daily to keep up-to-date with all new and old viruses. ----------------------------------------------------------------------------

2 1

rlm_sqlcounter developer required
by Mark Lovatt 16 May '06

16 May '06

Hi, I'm using rlm_sqlcounter to limit the amount of time my users can stay connected to a NAS, which works very well, as you know, it SUMS the amount of time a users has been online by querying the radacct table then returns a Session-Timeout attribute. My NAS supports Max-Input_octets and Max-Output-Octets attributes, I'd like to perform an SQL SUM on AccInputOctets and AccOutputOctets during the authorize phase then return these two attributes to set the max amount of bandwidth a user can use. I've spent all day reading about rlm_sqlcounter, this functionality isn't available but has been talked about previously, what I'm really asking for, since my C knowledge is a little rusty and I'm a bit pressed for time is for one of you guys to patch this module for me, for a price of course. R Mark

2 3

Re: Mysql with freeradius Error again
by Abul Monsur Mannan 16 May '06

16 May '06

Many thanks for quick reply.I'll do and try then must inform U about the result. Thanks again. On 5/16/06, cknipe(a)savage.za.org <cknipe(a)savage.za.org> wrote: > Quoting Abul Monsur Mannan <monsurc1(a)gmail.com>: > > > how can I configure freeradius to accept request from mysql ? I'm > > using Freeradius1.1.1 on Redhat Enterprise4.Should I populate the > > tables 'redrely' as well as 'redgroup' with others? > > You need to populate all the tables except accounting with the correct > information. Spend 10 minutes on google and search for a freeradius+mysql > tutorial, there's plenty arround explaining what goes in what tables, with > examples etc. > > -- > Chris > > > >

1 0

(no subject)
by rmbc401＠hotmail.com 16 May '06

16 May '06

_________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

1 0

Check the subject and issuer in the EAP-TLS
by Michal Prochazka 16 May '06

16 May '06

Hello, as I have noticed there is no possibility to check the subject and issuer of the client certificate. My idea is to use EAP-TLS authN, but allow only some of certificates issued by concrete CA. Two options which are available in EAP-TLS config are not suitable for me. I don't want to revoke the certs and the RE cannot be also used. That's why I created small patch to the freeradius 1.1.0. I've added new option check_script in config of EAP-TLS, where can be defined path to the script or application which is executed after successuf TLS authentication. The script/application will recieve in environ variables request packet with two new value pairs: X509_SUBJECT and X509_ISSUER. The EAP-TLS module decide on the returned value of the script/app if the request will be discarded or allowed. I'm open for every remark and enhancement of this patch. I'm runnig patched freeradius in our organization and till now it works good. Patch is attached if anyone is interested. Best regards, Michal -- Michal Prochazka // michalp(a)ics.muni.cz Supercomputing Center Brno Institute of Computer Science Masaryk University Botanicka 68a, 60200 Brno, CZ CESNET z.s.p.o. Zikova 4, 16200 Praha 6, CZ

3 7

Mysql with freeradius Error again
by Abul Monsur Mannan 16 May '06

16 May '06

Hello memebers, how can I configure freeradius to accept request from mysql ? I'm using Freeradius1.1.1 on Redhat Enterprise4.Should I populate the tables 'redrely' as well as 'redgroup' with others? Alan, thank U for your reply.But U didn't show me the way to get rid of the problem..U know I'm new here. Please help me out. -Monsur

1 0

Freeradius Guru Needed to Write Config
by Drew Linsalata 16 May '06

16 May '06

This should be simple for most of you. We have a customer that needs to authenticate wireless clients (on a Proxim AP-700) via both username/password and MAC address. We have zero man-hours to devote to this, and its been quite a long time since any of us was in RADIUS mode. (-: If anyone wants to make a few bucks on this, contact me off-list and we can go over the requirements. -- Drew Linsalata The Gotham Bus Company, Inc. Dedicated Servers and Colocation Solutions Long Island, New York http://www.gothambus.com

2 3

RE: rlm_sqlippool and a few issues
by RobertB 15 May '06

15 May '06

I guess I sent my post a bit too early. I have spent some more time with the module and it seems like most of my concerns can be accomplished by playing with sql statements. >>2. # lease_duration. fix for lost acc-stop packets - >>lease-duration = 3600 Seems like rlm_ippool handles this much >>better. rlm_ippool will free an ip address either on an >>accounting-stop or if a new authentication request comes on >>an allocated nas-ip/port. >> >>Can this be done in rlm_sqlippool? Actually when a new auth request arrives sqlippool frees the ip(which was assigned on the same nas/port) first and then tries to assigne it if it's still available.. >>3. DEFAULT as an pool name. >>Is there any way to tell rlm_sqlippool to pick up an ip from any pool >>available? >>Something like rlm_ipppool's DEFAULT for the pool name? by naming ip pools like sqlippool1, sqlippool2, etc. we can do SELECT ip_address FROM radippool WHERE pool_name LIKE 'sqlippool%' instead of SELECT ip_address FROM radippool WHERE pool_name = 'sqlippool1'. Seems like it works just fine. cheers, Robertb

1 0