- Freeradius-Users - lists.freeradius.org

users file case sensitive
by Gregg Douglas 19 Sep '12

19 Sep '12

> > > > Hi, > > > > Background: > > > > FreeRadius Version: 2.1.1-7.10.1 > > Users are stored in LDAP, I am using the users file to assign static > > IP Addresses to certain users. > > > > > > It seems that the users file is case sensitive, I found a few articles > > on the net regarding this, but none really supplied a definitive answer. > > > > Is there a way to prevent the users file from being case sensitive ? If > > not, what is the recommended method to elegantly avoid this problem. > > >>files myfiles { > >> key = "%{lower:%{User-Name}}" > >> ... > >>} > > >>...or something similar. > >>>Sorry, where do I implement this ?

5 20

Re: error of segmentation during the implementation of eap2
by Arran Cudbard-Bell 19 Sep '12

19 Sep '12

Use your first config to test whether the patch worked (it should generate an error and exit). You now appear to be getting a different segfault Please provide a backtrace for this segfault. -Arran

1 0

account activate datetime
by SkyDiablo 19 Sep '12

19 Sep '12

hiho, i search a solution to set a "activate datetime" for a account? in the end, i want a possebility to set a timespan where the account is active? from -> datetime to -> dateime any tips for me ? greez & thx, sky...

3 6

Re: Using username@example.com and plain username
by Kriston 19 Sep '12

19 Sep '12

On Tue, September 18, 2012 17:34, Arran Cudbard-Bell wrote: > > On 18 Sep 2012, at 22:22, "Kriston" <me(a)kriston.net> wrote: > >> I have users who log in as "username(a)example.com" and just as "username". >> How do I append @example.com only to those users who don't have >> @example.com >> already? I have a fairly generic FreeRADIUS 2.1.10 installation that >> connects to a MySQL server. >> >> I've tried a number of different things in dialup.conf but none have >> worked. >> >> Example 1: >> sql_user_name = >> "{%{Stripped-User-Name}:-%{User-Name}}@{%{Realm}:-example.com}" >> >> This results in a string in the SQL queries for User-Name that looks like >> "=7B:-username=7D@=7B:-example.com=7D". > > Look at all those lonely lonely left hand curly braces, don't you think they > might appreciate another character to snuggle up to? What do you think that > character might be? While this comment is clever, would you provide a corrected example? >> Example 2: >> I have also tried regular expressions like this: >> if ( %{User-Name} !~ /.example\.com/i) { >> sql_user_name = "%{User-Name}(a)example.com" >> } >> But this one results in a blank string for in the SQL queries that use >> sql_user_name. >> >> I'm open to any and all comments. > > Read man unlang, stop inventing syntax. Why not post the correct syntax and show us? This mailing list could be so much more useful if people could provide actual answers instead of invectives. Reading the archives makes me feel embarrassed for the rest of the FreeRADIUS project. Kriston

4 3

RE: unlang time / date comparison
by Franks Andy (RLZ) IT Systems Engineer 19 Sep '12

19 Sep '12

Thanks Arran, I'll give it a try. I did find something to do with %1 / %I (can't remember which) and dividing by "epoch" so may be able to use that too? If in doubt give it a go eh? Thanks Andy -----Original Message----- From: freeradius-users-bounces+andy.franks=sath.nhs.uk(a)lists.freeradius.org [mailto:freeradius-users-bounces+andy.franks=sath.nhs.uk@lists.freeradiu s.org] On Behalf Of Arran Cudbard-Bell Sent: 18 September 2012 23:05 To: FreeRadius users mailing list Subject: Re: unlang time / date comparison On 18 Sep 2012, at 22:38, "Franks Andy \(RLZ\) IT Systems Engineer" <Andy.Franks(a)sath.nhs.uk> wrote: > Hi, > > Hopefully a simple question. I've looked around for a while but can't find the answer to this. > > I'd like to be able to take a date/time from a sql database, use unlang (not a module) to compare it to the current time and make a decision based on the fact that it's, for example, less or more than 3600 seconds/60 minutes/1 hour etc ago. Use one of the SQL functions (UNIX_TIMESTAMP()) to pull the date field value out as an integer and do a straight comparison with "%{l}". Or if you write a SQL timestamp string into a date type attribute, it might be smart enough to parse it for you, and then you can do "%{integer:Timestamp-Attr}" and compare with "%{l}". Not 100% sure the code is there to do that though... -Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

Using username@example.com and plain username
by Kriston 19 Sep '12

19 Sep '12

I have users who log in as "username(a)example.com" and just as "username". How do I append @example.com only to those users who don't have @example.com already? I have a fairly generic FreeRADIUS 2.1.10 installation that connects to a MySQL server. I've tried a number of different things in dialup.conf but none have worked. Example 1: sql_user_name = "{%{Stripped-User-Name}:-%{User-Name}}@{%{Realm}:-example.com}" This results in a string in the SQL queries for User-Name that looks like "=7B:-username=7D@=7B:-example.com=7D". Example 2: I have also tried regular expressions like this: if ( %{User-Name} !~ /.example\.com/i) { sql_user_name = "%{User-Name}(a)example.com" } But this one results in a blank string for in the SQL queries that use sql_user_name. I'm open to any and all comments. Thank you.

3 2

Setting final response attributes for EAP
by Brian Candler 19 Sep '12

19 Sep '12

When a user logs into a wireless AP, I would to include some per-user response attributes, in particular Acct-Interim-Interval = 600 However freeradius -X shows that this isn't happening, and it appears to be because of the following stanza in the default config: # The example below uses module failover to avoid querying all # of the following modules if the EAP module returns "ok". # Therefore, your LDAP and/or SQL servers will not be queried # for the many packets that go back and forth to set up TTLS # or PEAP. The load on those servers will therefore be reduced. # eap { ok = return } What's the recommended solution here? Is it possible to distinguish between the final EAP accept and the earlier Access-Challenge, so that just the final response does a database lookup for the required user response attributes? Thanks, Brian.

3 3

Re: Using username@example.com and plain username
by Kriston 19 Sep '12

19 Sep '12

> Very well... I don't use a SQL database for users, but it occurs > to me that Arran's only slightly tongue-in-cheeck comment about > lonely curly braces might have convinced you to look at whether > all the characters in your sql_user_name string are being > properly escaped or quoted. Since 7B is the hex code for "left > curly bracket" and 7D for "right curly bracket", it seems that > those characters are being taken literally, rather than as part > of a variable construction. It looks like you're fairly close to > getting that to work... just experiment with some single quotes? > By the way, I got this idea by looking at the wiki: > http://wiki.freeradius.org/modules/Rlm_sql Steve Lovaas Thanks, Steve, I think I'm really close and I appreciate your suggestion as to why the variable substitution isn't working the way I thought it would. I have not seen whether it handles the substitution of "@example.com" properly yet, though. Thanks again, Kriston

2 1

Re: Using username@example.com and plain username
by Kriston 19 Sep '12

19 Sep '12

As expected, your correspondence has been worse than helpful. I have thoroughly read the documentation, example configuration files, and the Wiki. Why not prove to us all that any one of these resources contains the exact example that I am enquiring about. I'd love to be wrong, but I just don't see it in any of these resources. Is it a realm? Is it a variable substitution? This is what an online community is supposed to provide--help. And, Mr. DeKok, a correction is in order: you did *not* provide a working example, in spite of the fact that you claim that you did. I could look it up in your book but, oh, wait, that's right, there is no published book yet. Thanks for nothing. Kriston

3 2

RE: Using username@example.com an d plain username
by Lovaas,Steven 19 Sep '12

19 Sep '12

Very well... I don't use a SQL database for users, but it occurs to me that Arran's only slightly tongue-in-cheeck comment about lonely curly braces might have convinced you to look at whether all the characters in your sql_user_name string are being properly escaped or quoted. Since 7B is the hex code for "left curly bracket" and 7D for "right curly bracket", it seems that those characters are being taken literally, rather than as part of a variable construction. It looks like you're fairly close to getting that to work... just experiment with some single quotes? By the way, I got this idea by looking at the wiki: http://wiki.freeradius.org/modules/Rlm_sql Steve Lovaas ________________________________________ From: freeradius-users-bounces+steven.lovaas=colostate.edu(a)lists.freeradius.org [freeradius-users-bounces+steven.lovaas=colostate.edu(a)lists.freeradius.org] on behalf of Kriston [me(a)kriston.net] Sent: Tuesday, September 18, 2012 8:52 PM To: FreeRadius users mailing list Subject: Re: Using username(a)example.com and plain username As expected, your correspondence has been worse than helpful. I have thoroughly read the documentation, example configuration files, and the Wiki. Why not prove to us all that any one of these resources contains the exact example that I am enquiring about. I'd love to be wrong, but I just don't see it in any of these resources. Is it a realm? Is it a variable substitution? This is what an online community is supposed to provide--help. And, Mr. DeKok, a correction is in order: you did *not* provide a working example, in spite of the fact that you claim that you did. I could look it up in your book but, oh, wait, that's right, there is no published book yet. Thanks for nothing. Kriston - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0