- Freeradius-Users - lists.freeradius.org

account activate datetime
by SkyDiablo 19 Sep '12

19 Sep '12

hiho, i search a solution to set a "activate datetime" for a account? in the end, i want a possebility to set a timespan where the account is active? from -> datetime to -> dateime any tips for me ? greez & thx, sky...

3 6

Re: Using username@example.com and plain username
by Kriston 19 Sep '12

19 Sep '12

On Tue, September 18, 2012 17:34, Arran Cudbard-Bell wrote: > > On 18 Sep 2012, at 22:22, "Kriston" <me(a)kriston.net> wrote: > >> I have users who log in as "username(a)example.com" and just as "username". >> How do I append @example.com only to those users who don't have >> @example.com >> already? I have a fairly generic FreeRADIUS 2.1.10 installation that >> connects to a MySQL server. >> >> I've tried a number of different things in dialup.conf but none have >> worked. >> >> Example 1: >> sql_user_name = >> "{%{Stripped-User-Name}:-%{User-Name}}@{%{Realm}:-example.com}" >> >> This results in a string in the SQL queries for User-Name that looks like >> "=7B:-username=7D@=7B:-example.com=7D". > > Look at all those lonely lonely left hand curly braces, don't you think they > might appreciate another character to snuggle up to? What do you think that > character might be? While this comment is clever, would you provide a corrected example? >> Example 2: >> I have also tried regular expressions like this: >> if ( %{User-Name} !~ /.example\.com/i) { >> sql_user_name = "%{User-Name}(a)example.com" >> } >> But this one results in a blank string for in the SQL queries that use >> sql_user_name. >> >> I'm open to any and all comments. > > Read man unlang, stop inventing syntax. Why not post the correct syntax and show us? This mailing list could be so much more useful if people could provide actual answers instead of invectives. Reading the archives makes me feel embarrassed for the rest of the FreeRADIUS project. Kriston

4 3

RE: unlang time / date comparison
by Franks Andy (RLZ) IT Systems Engineer 19 Sep '12

19 Sep '12

Thanks Arran, I'll give it a try. I did find something to do with %1 / %I (can't remember which) and dividing by "epoch" so may be able to use that too? If in doubt give it a go eh? Thanks Andy -----Original Message----- From: freeradius-users-bounces+andy.franks=sath.nhs.uk(a)lists.freeradius.org [mailto:freeradius-users-bounces+andy.franks=sath.nhs.uk@lists.freeradiu s.org] On Behalf Of Arran Cudbard-Bell Sent: 18 September 2012 23:05 To: FreeRadius users mailing list Subject: Re: unlang time / date comparison On 18 Sep 2012, at 22:38, "Franks Andy $RLZ$ IT Systems Engineer" <Andy.Franks(a)sath.nhs.uk> wrote: > Hi, > > Hopefully a simple question. I've looked around for a while but can't find the answer to this. > > I'd like to be able to take a date/time from a sql database, use unlang (not a module) to compare it to the current time and make a decision based on the fact that it's, for example, less or more than 3600 seconds/60 minutes/1 hour etc ago. Use one of the SQL functions (UNIX_TIMESTAMP()) to pull the date field value out as an integer and do a straight comparison with "%{l}". Or if you write a SQL timestamp string into a date type attribute, it might be smart enough to parse it for you, and then you can do "%{integer:Timestamp-Attr}" and compare with "%{l}". Not 100% sure the code is there to do that though... -Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

Using username@example.com and plain username
by Kriston 19 Sep '12

19 Sep '12

I have users who log in as "username(a)example.com" and just as "username". How do I append @example.com only to those users who don't have @example.com already? I have a fairly generic FreeRADIUS 2.1.10 installation that connects to a MySQL server. I've tried a number of different things in dialup.conf but none have worked. Example 1: sql_user_name = "{%{Stripped-User-Name}:-%{User-Name}}@{%{Realm}:-example.com}" This results in a string in the SQL queries for User-Name that looks like "=7B:-username=7D@=7B:-example.com=7D". Example 2: I have also tried regular expressions like this: if ( %{User-Name} !~ /.example\.com/i) { sql_user_name = "%{User-Name}(a)example.com" } But this one results in a blank string for in the SQL queries that use sql_user_name. I'm open to any and all comments. Thank you.

3 2

Setting final response attributes for EAP
by Brian Candler 19 Sep '12

19 Sep '12

When a user logs into a wireless AP, I would to include some per-user response attributes, in particular Acct-Interim-Interval = 600 However freeradius -X shows that this isn't happening, and it appears to be because of the following stanza in the default config: # The example below uses module failover to avoid querying all # of the following modules if the EAP module returns "ok". # Therefore, your LDAP and/or SQL servers will not be queried # for the many packets that go back and forth to set up TTLS # or PEAP. The load on those servers will therefore be reduced. # eap { ok = return } What's the recommended solution here? Is it possible to distinguish between the final EAP accept and the earlier Access-Challenge, so that just the final response does a database lookup for the required user response attributes? Thanks, Brian.

3 3

Re: Using username@example.com and plain username
by Kriston 19 Sep '12

19 Sep '12

> Very well... I don't use a SQL database for users, but it occurs > to me that Arran's only slightly tongue-in-cheeck comment about > lonely curly braces might have convinced you to look at whether > all the characters in your sql_user_name string are being > properly escaped or quoted. Since 7B is the hex code for "left > curly bracket" and 7D for "right curly bracket", it seems that > those characters are being taken literally, rather than as part > of a variable construction. It looks like you're fairly close to > getting that to work... just experiment with some single quotes? > By the way, I got this idea by looking at the wiki: > http://wiki.freeradius.org/modules/Rlm_sql Steve Lovaas Thanks, Steve, I think I'm really close and I appreciate your suggestion as to why the variable substitution isn't working the way I thought it would. I have not seen whether it handles the substitution of "@example.com" properly yet, though. Thanks again, Kriston

2 1

Re: Using username@example.com and plain username
by Kriston 19 Sep '12

19 Sep '12

As expected, your correspondence has been worse than helpful. I have thoroughly read the documentation, example configuration files, and the Wiki. Why not prove to us all that any one of these resources contains the exact example that I am enquiring about. I'd love to be wrong, but I just don't see it in any of these resources. Is it a realm? Is it a variable substitution? This is what an online community is supposed to provide--help. And, Mr. DeKok, a correction is in order: you did *not* provide a working example, in spite of the fact that you claim that you did. I could look it up in your book but, oh, wait, that's right, there is no published book yet. Thanks for nothing. Kriston

3 2

RE: Using username@example.com an d plain username
by Lovaas,Steven 19 Sep '12

19 Sep '12

Very well... I don't use a SQL database for users, but it occurs to me that Arran's only slightly tongue-in-cheeck comment about lonely curly braces might have convinced you to look at whether all the characters in your sql_user_name string are being properly escaped or quoted. Since 7B is the hex code for "left curly bracket" and 7D for "right curly bracket", it seems that those characters are being taken literally, rather than as part of a variable construction. It looks like you're fairly close to getting that to work... just experiment with some single quotes? By the way, I got this idea by looking at the wiki: http://wiki.freeradius.org/modules/Rlm_sql Steve Lovaas ________________________________________ From: freeradius-users-bounces+steven.lovaas=colostate.edu(a)lists.freeradius.org [freeradius-users-bounces+steven.lovaas=colostate.edu(a)lists.freeradius.org] on behalf of Kriston [me(a)kriston.net] Sent: Tuesday, September 18, 2012 8:52 PM To: FreeRadius users mailing list Subject: Re: Using username(a)example.com and plain username As expected, your correspondence has been worse than helpful. I have thoroughly read the documentation, example configuration files, and the Wiki. Why not prove to us all that any one of these resources contains the exact example that I am enquiring about. I'd love to be wrong, but I just don't see it in any of these resources. Is it a realm? Is it a variable substitution? This is what an online community is supposed to provide--help. And, Mr. DeKok, a correction is in order: you did *not* provide a working example, in spite of the fact that you claim that you did. I could look it up in your book but, oh, wait, that's right, there is no published book yet. Thanks for nothing. Kriston - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

error of segmentation during the implementation of eap2
by arnauld ndefo 18 Sep '12

18 Sep '12

Hi everyone, i want to implement the freeradius with eap-psk. In many forum it is recommend to read the experimental.conf for configure the module eap2. After reading the experimental.conf, i have created the file eap2.conf which is attached to my email. Also, in the radius.conf, i have put in module section $INCLUDE eap2.conf. In the default file, i have put in the authenticate section eap2 { ok = return}; replace in that file, all the eap by eap2. When i launch the radius with export LD_PRELOAD=/home/dibus/hostap-06/eap_example/libeap.so && radiusd -X ; i have the output which is in file sortie_freerad_ubuntu. At the end, you will see and error of segmentation when it starts to load the module files Someone can help me to find the issue please??? It is very urgent for me. Thank you for your help.

4 17

unlang time / date comparison
by Franks Andy (RLZ) IT Systems Engineer 18 Sep '12

18 Sep '12

Hi, Hopefully a simple question. I've looked around for a while but can't find the answer to this. I'd like to be able to take a date/time from a sql database, use unlang (not a module) to compare it to the current time and make a decision based on the fact that it's, for example, less or more than 3600 seconds/60 minutes/1 hour etc ago. I can't really work out the comparison of dates, or simple mathematical functions for that matter. Perhaps I'm missing something obvious - apologies if so, I've not been using FR for that long. Thanks as always. Andy

3 3