- Freeradius-Users - lists.freeradius.org

regex in suffix
by Tony Peña 22 Mar '13

22 Mar '13

Hi to all. I have some suffix configure, to can do load balance between some sql accountings servers. and I have this check into radiusd.conf if (User-Name =~ /^(.+)(a)institute.domain.cu/) { monthlycounter2 } else { monthlycounter1 } and I have some users configured to can access by other way in the public PAP, using part of the suffix so i want to balance too in fact.. the question is my suffix for @institute @institude.domain @institude.domain.cu can use monthlycounter2 and the rest.. with only been 'just the user part' by montlycounter1 i test this if (User-Name =~ /^(.+)(a)institute?.domain?.cu/) { monthlycounter2 } else { monthlycounter1 } and the servers running fine.. but i'm not sure if the regex is defined ok... can help me in that...? thanxs in advance. -- Antonio Peña Secure email with PGP 0x8B021001 available at http://pgp.mit.edu Fingerprint: 74E6 2974 B090 366D CE71 7BB2 6476 FA09 8B02 1001

1 1

[Help] Is that possible to change the reject message that appears at the Windows Pop Up
by Danny Kurniawan 21 Mar '13

21 Mar '13

Hi All, So i have been able to authenticate my wireless user using 802.1x + LDAP + MAC address (using CallingStationID attriubute). So now for example when user A have MAC 11:22:33 but tried to login using another device there will be a pop up window when they try to connect - just a plain error popup saying "Unable to connect". Is there any way we can customize this error from radius? or should be from the wireless AP? So below is the unlang code that i use to check whether the user have a set of MAC address in their ldap profile or not if(!control:Calling-Station-Id){ reject } Possible to have that reject command to return some code that Windows client can understand like "No MAC address" etc? Thanks in advance Danny -- Best Regards, Danny

6 8

Vote on the new FreeRADIUS logo
by Arran Cudbard-Bell 21 Mar '13

21 Mar '13

Currently in the final round of selecting a new logo, please vote on the poll here to select your favourite, you don't need to register. http://99designs.ca/logo-design/vote-5wpx8t -Arran Arran Cudbard-Bell <a.cudbardb(a)freeradius.org> FreeRADIUS Development Team Please contribute documentation: http://wiki.freeradius.org

5 4

unlang substring with nas-port-id
by Łukasz Kopiszka 21 Mar '13

21 Mar '13

Hi, I'm receiving from SE100: NAS-Port-Id = "2/2 vlan-id 1001 clips 132019" How to extract number 1001 which will be used in code: switch "extracted vlan-id" { case 1000 { ... } case 1001 { ... } case 1002 { ... } ... } -- Pozdrawiam, Łukasz Kopiszka www.alfa-system.pl

2 1

(no subject)
by Yervand Petrosyan 20 Mar '13

20 Mar '13

http://audacesidea.com.br/yuotube/68Multiply%20your%20income%20on-line09

1 0

send multiple parameter to stored procedure in database
by Mehdi Ravanbakhsh 19 Mar '13

19 Mar '13

can i send multiple Parameter to stored procedure ( function) in database by SQL xlat?

2 1

cuncurrent-session control
by Mehdi Ravanbakhsh 19 Mar '13

19 Mar '13

Hello ALL I have Some problem in using Unlang. I need to call some function in PostgreSQL database send some parameter from request attribute to it , get replay from function and then change some check attribute item (such as Pool-Name).or replay attribute Unlang : cuncurrent-session-status =”{%sql:select public.findout_cuncurrent_sessions_for_a_user(%{request:User-Name},%{request:Acct-Session-Id},%{request:NAS-IP-Address},%{request:NAS-Port})}”; if (cuncurrent-session-status=='Accept') { ok } elseif (cuncurrent-session-status=='Reject') { update control {Pool-Name='Exceeded-Concurrent-Session'} } i know that i have some mistake in script but i can not find where !!!!!

2 1

require_message_authenticator when sending
by Stefan Winter 19 Mar '13

19 Mar '13

Hi, I just noticed something unintuitive when trying to enforce the presence of Message-Authenticator on a server which has FreeRADIUS 2.2.0 as a proxying client. In proxy.conf, home_server section, there is very strong wording that require_message_authenticator is good; and the default as spelt out in the config file is =yes. My config simply omits the keyword entirely. With all those nice words about how good it is I was somewhat expecting it to default to yes in the code as well and set require = yes on the clients.conf on the receiving end. If omitted, the code sets it to NULL though, which seems to be a "no". Of course I'm fixing my config by making the yes explicit - but maybe adapting the defaults in realms.c might be a little more consistent behaviour. Greetings, Stefan Winter -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473

3 3

string up CUI for visiting eduroam users
by Alex Sharaz 19 Mar '13

19 Mar '13

Hi, i'm in the process of setting up cui for visitors hear and for york user visiting other institutions. In the case of visiting eduroam users to our site, on an internal RADIUS server I've got pre-proxy { if (Packet-Type == Access-Request) { cui_authorize # update request { # Chargeable-User-Identity:='\\000' # } } pre_proxy_log } working on the basis that we'll be proxying off the auth request to another site. I'm then assuming that in the response from the home server somewhere else on the planet there'll be a non null CUI attribute which I can get at in the post proxy clause. I also want to put the info into the chi table that i've created in my back end mysql database. I thought I'd be able to do post-proxy { # # Visiting eduroam users using our wireless. # # If we've got a CUI coming back in the Access-Accept packet, do something with it # # cui_updatedb # However, If I do a radius -X -d /etc/freeradius to check it, I get /etc/freeradius/policy.conf[185]: "SQL" modules aren't allowed in 'post-proxy' sections -- they have no such method. /etc/freeradius/policy.conf[185]: Failed to parse "cui" entry. /etc/freeradius/policy.conf[184]: Failed to parse "if" subsection. /etc/freeradius/sites-enabled/default[492]: Errors parsing post-proxy section. At which point can I get hold of the returning CUI data and put it into a database. Rgds Alex

3 3

Add LDAP groups as extra attributes
by Robin Helgelin 19 Mar '13

19 Mar '13

Hi! I want to add the LDAP-users current groups as extra attributes to the authentication reply. Is it possible? I'm having a hard time finding documentation about this. Thanks! Robin

3 13