- Freeradius-Users - lists.freeradius.org

rlm_exec does not change already existing attributes
by Dmitry Lyubimkov 24 Apr '06

24 Apr '06

In the rlm_exec module for change of attributes according to result of script it is used if (output_pairs) pairmove(output_pairs, &answer); in function static int exec_dispatch(void *instance, REQUEST *request) But function pairmove in valuepair.c does only the following /* * Move attributes from one list to the other * if not already present. */ void pairmove(VALUE_PAIR **to, VALUE_PAIR **from) I.e. if such attribute does not exist that it will be added, and if already exists, will take place nothing. As result using an external script we can only add new attributes, but we can not change existing attributes! How to change User-Name in Radius request? Is it possible to change existing attributes in the simple way without change of the module rlm_exec code? Dmitry

2 1

Redundant ldap server with freeradius 1.0.5
by sumi thra 24 Apr '06

24 Apr '06

Hey All, I want to configure freeradius server to use redundant ldap servers. My configuration is: authorize { preprocess #etc_passwd #etc_group chap mschap suffix_oblic prefix_oblic suffix_at prefix_at suffix_percent prefix_percent files redundant{ ldap_primary ldap_secondary } eap } authenticate { Auth-Type PAP { pap } Auth-Type CHAP { chap } Auth-Type MS-CHAP { mschap } Auth-Type LDAP { redundant { ldap_primary ldap_secondary } } #unix eap } ldap ldap_primary { .... .. } ldap ldap_secondary { .. .. } The free radius server is keep on sending the request to secondary server, even though the primary server is reachable. Could you plz guide me where am i missing the configuration ? Any other attribute needs to be defined inside redundant module ? Awaiting for your earliest reply. Thanks, Sumi

1 0

automated response
by Olaf Becker 24 Apr '06

24 Apr '06

I am not in the office and have no access to my e-mails. I will be back from holidays till the 29nd of April 2006. Thank you for your understanding that your e-mail will be answered after my return to the office. This e-mail will not be forwarded. Best regards Olaf Becker

1 0

Redundant ldap server with freeradius 1.0.5
by sumi thra 24 Apr '06

24 Apr '06

- Hey All, I want to configure two ldap server's for fail over conditions. My configuration in the radiusd.conf is... ldap { redundant { ldap_primary ldap_secondary } } .... ldap_primary { .. .. } ldap_secondary { .. .. } .. When the server gets any access-request packet, it tries to connect to the secondary server. Even though the primary server is reachable, the secondary server is contacted first. How can i make the radius server to contact primary ldap server first & then the next ldap server ?? Am i missing any configuration?? Could please help me in this regard. Thanks in advance. Sumithra.

2 3

RE: Bugzilla account creation broken?
by Jonathan De Graeve 23 Apr '06

23 Apr '06

Its now been 12hours ago that I requests a password for the bugzilla. I still didn't receive any email. Is there something wrong with it? J. > -----Oorspronkelijk bericht----- > Van: freeradius-users- > bounces+jonathan.de.graeve=imelda.be(a)lists.freeradius.org > [mailto:freeradius-users- > bounces+jonathan.de.graeve=imelda.be(a)lists.freeradius.org] Namens Nicolas > Baradakis > Verzonden: zaterdag 22 april 2006 18:09 > Aan: FreeRadius users mailing list > Onderwerp: Re: Changes to dialupadmin > > Jonathan De Graeve wrote: > > > I want to publish my enhancements to dialupadmin to the freeradius > > devels. > > > > How can I do this? > > Please post your patches to the bugzilla. > http://bugs.freeradius.org/ > > -- > Nicolas Baradakis > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

1 0

RE: How to patch dialupadmin
by Jonathan De Graeve 23 Apr '06

23 Apr '06

>Van: Mordor Networks [mailto:mordor.networks@gmail.com] >Verzonden: zondag 23 april 2006 5:39 >Aan: Jonathan De Graeve >Onderwerp: Hello > >can you tell me please how to use your patch with dialup admin? i mean how to patchh it? >thanks > Put the patch into the location where freeradius-dialupadmin is installed (or in the source dir of freeradius-1.0.5/) and go into that directory. Do patch -p0 < dialup_admin-1.0.5.diff Only tested it against 1.0.5 so I don't know what happens on >1.0.5 -- Jonathan De Graeve

1 0

RE: Changes to dialupadmin
by Jonathan De Graeve 22 Apr '06

22 Apr '06

Latest version attached, hope you can add it to the bugzilla Thx J. > -----Oorspronkelijk bericht----- > Van: freeradius-users- > bounces+jonathan.de.graeve=imelda.be(a)lists.freeradius.org > [mailto:freeradius-users- > bounces+jonathan.de.graeve=imelda.be(a)lists.freeradius.org] Namens Nicolas > Baradakis > Verzonden: zaterdag 22 april 2006 18:09 > Aan: FreeRadius users mailing list > Onderwerp: Re: Changes to dialupadmin > > Jonathan De Graeve wrote: > > > I want to publish my enhancements to dialupadmin to the freeradius > > devels. > > > > How can I do this? > > Please post your patches to the bugzilla. > http://bugs.freeradius.org/ > > -- > Nicolas Baradakis > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

1 0

Changes to dialupadmin
by Jonathan De Graeve 22 Apr '06

22 Apr '06

I want to publish my enhancements to dialupadmin to the freeradius devels. How can I do this? J.

2 1

Patch adding Monthly volume statistics
by Jonathan De Graeve 22 Apr '06

22 Apr '06

This patch adds monthly volume statistics to the user_accounting.php3 page. Patch agains freeradius-1.0.5

1 0

How it is better to start a script in FreeRadius to change User-Name and realm at proxing?
by Dmitry Lyubimkov 22 Apr '06

22 Apr '06

FreeRadius is used for proxing (user@realm) to others RADIUS servers. Also we change the some attributes at proxing. Некоторое время назад была задача при получении accounting менять аттрибут User-Name в зависимости от аттрибутов User-Name, Calling-Station-ID, Called-Station-ID, ... Some time there was a task to change User-Name attribute at reception of accounting message (depending on User-Name,Calling-Station-ID, Called-Station-ID, ...) We have written a script on python, and have added to preproxy_users file DEFAULT User-Name := `%{exec:/usr/bin/python -u /path/to/script.py %{Packet-Type} %{Acct-Status-Type} %u %i %{Called-Station-Id}}` And write files in pre-proxy section of radius.conf file Now before sending proxied messages our script runs and changes User-Name It certainly is not so convenient because script runs always but it is necessary for us only at accounting, but we considered it in a script. Now the task became wider - before proxing it is necessary to replace not only name of the subscriber (User-Name) but also it's realm. The script we can alter easily. But the matter is that the used mechanism of its start does not approach. At the moment of start from pre-proxy FreeRadius were already determined with proxing - on what RADIUS server it will send this message And in User-Name attribute FreeRadius waits the name without realm. Help me please where and how it is better to put script to have an opportunity to change User-Name attribute before FreeRadius will make decision about proxing? Tnx Dmirty

1 0