Arran, Thanks for your help as always. You have helped me to fix about 5 of my major issues. The support from you is very helpful. Thanks! Tom ------------------ Original ------------------ From: "freeradius-users"<freeradius-users-request@lists.freeradius.org>; Date: Wed, Sep 14, 2011 09:27 AM To: "freeradius-users"<freeradius-users@lists.freeradius.org>; Subject: Freeradius-Users Digest, Vol 77, Issue 53 Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. Re: Quick enable/disable user account. (Arran Cudbard-Bell) 2. Re: Quick enable/disable user account. (Marinko Tarlac) 3. Re:Grant Access ( 2394263740 ) ---------------------------------------------------------------------- Message: 1 Date: Tue, 13 Sep 2011 22:32:06 +0200 From: Arran Cudbard-Bell <a.cudbardb@freeradius.org> Subject: Re: Quick enable/disable user account. To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <99359D5B-34B0-4277-BCE7-379EF2FC48F4@freeradius.org> Content-Type: text/plain; charset=us-ascii
So what are the most proper ways to mark a user in an sql database as either active or inactive, enabled or disabled?
It's implementation specific! FreeRADIUS gives you the tools to defined the policies, but its up to the individual administrators to decide what they should be. Like Skinning Cats and Perl, there are many ways to achieve the same result. -Arran Arran Cudbard-Bell a.cudbardb@freeradius.org RADIUS - Waging war on ignorance and apathy one Access-Challenge at a time. ------------------------------ Message: 2 Date: Tue, 13 Sep 2011 23:01:03 +0200 From: Marinko Tarlac <mangia81@gmail.com> Subject: Re: Quick enable/disable user account. To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <4E6FC48F.7060201@gmail.com> Content-Type: text/plain; charset=UTF-8; format=flowed Imagine that you have 5 000 disabled accounts and that you constantly rejecting them over and over again... Better option is to create specific group (for example disabled_accounts with specific IP Pool) and assign users to this group when you want to block them. Then you can redirect them to specific web page with "welcome" message :) On 9/13/2011 5:59 PM, Tim Sylvester wrote:
Set Auth-Type := Reject in radcheck.
http://deployingradius.com/documents/configuration/auth_type.html
Tim
*From:*freeradius-users-bounces+tim.sylvester=networkradius.com@lists.freeradius.org [mailto:freeradius-users-bounces+tim.sylvester=networkradius.com@lists.freeradius.org] *On Behalf Of *2394263740 *Sent:* Tuesday, September 13, 2011 8:33 AM *To:* freeradius-users *Subject:* Quick enable/disable user account.
Hello, I'm using free radius server 2.1.11 on Linux Enterprise Server 6.1. OS: Linux Enterprise Server 6.1 Radius: free radius server 2.1.11 Database: Mysql
Sometime, I need disable a user account in mysql database. And then enable it later on after some check complete.
Can you please advise how to toggle such status?
There're may be multiple solutions, please advise them all, so I can choose a one most fit the needs.
Thanks!
Tom
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
------------------------------ Message: 3 Date: Wed, 14 Sep 2011 09:27:00 +0800 From: " 2394263740 " <2394263740@qq.com> Subject: Re:Grant Access To: " freeradius-users " <freeradius-users@lists.freeradius.org> Message-ID: <tencent_7839F3D17E696E8063A56BF4@qq.com> Content-Type: text/plain; charset="iso-8859-1" Arran, I'm using PEAP. Do you have any suggestion to grant access? Thanks! ------------------ Original ------------------ From: "freeradius-users"<freeradius-users-request@lists.freeradius.org>; Date: Tue, Sep 13, 2011 11:59 PM To: "freeradius-users"<freeradius-users@lists.freeradius.org>; Subject: Freeradius-Users Digest, Vol 77, Issue 50 Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. Grant Access ( 2394263740 ) 2. Re: Grant Access (Arran Cudbard-Bell) 3. Quick enable/disable user account. ( 2394263740 ) 4. Re: Quick enable/disable user account. (Alan DeKok) 5. Re: Quick enable/disable user account. (Arran Cudbard-Bell) 6. RE: Quick enable/disable user account. (Tim Sylvester) ---------------------------------------------------------------------- Message: 1 Date: Tue, 13 Sep 2011 23:07:31 +0800 From: " 2394263740 " <2394263740@qq.com> Subject: Grant Access To: " freeradius-users " <freeradius-users@lists.freeradius.org> Message-ID: <tencent_1ABBB04B470455063AD97831@qq.com> Content-Type: text/plain; charset="iso-8859-1" Hello, I'm using free radius server 2.1.11 on Linux Enterprise Server 6.1. OS: Linux Enterprise Server 6.1 Radius: free radius server 2.1.11 Database: Mysql When the system goes wrong, I would like temporary grant all access request. Which means during the service is down, any username/password will be grant access. Can you please advise the solution? Thanks! Tom -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/20110913/89760c49/attachment.html> ------------------------------ Message: 2 Date: Tue, 13 Sep 2011 17:16:02 +0200 From: Arran Cudbard-Bell <a.cudbardb@freeradius.org> Subject: Re: Grant Access To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <9285C1EC-7439-4652-8AEC-22FBAD42A485@freeradius.org> Content-Type: text/plain; charset="iso-8859-1" On 13 Sep 2011, at 17:07, 2394263740 wrote:
Hello, I'm using free radius server 2.1.11 on Linux Enterprise Server 6.1. OS: Linux Enterprise Server 6.1 Radius: free radius server 2.1.11 Database: Mysql
When the system goes wrong, I would like temporary grant all access request.
Which means during the service is down, any username/password will be grant access.
Can you please advise the solution?
sql if(fail){ update control { Auth-Type := 'Accept' } } This will not work for protocols like PEAP. But should work for PAP, and CHAP. -Arran Arran Cudbard-Bell a.cudbardb@freeradius.org RADIUS - Waging war on ignorance and apathy one Access-Challenge at a time. -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/20110913/b2a99bf6/attachment.html> ------------------------------ Message: 3 Date: Tue, 13 Sep 2011 23:32:43 +0800 From: " 2394263740 " <2394263740@qq.com> Subject: Quick enable/disable user account. To: " freeradius-users " <freeradius-users@lists.freeradius.org> Message-ID: <tencent_604FCE075B879FA320DD1DCF@qq.com> Content-Type: text/plain; charset="iso-8859-1" Hello, I'm using free radius server 2.1.11 on Linux Enterprise Server 6.1. OS: Linux Enterprise Server 6.1 Radius: free radius server 2.1.11 Database: Mysql Sometime, I need disable a user account in mysql database. And then enable it later on after some check complete. Can you please advise how to toggle such status? There're may be multiple solutions, please advise them all, so I can choose a one most fit the needs. Thanks! Tom -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/20110913/3f186dfc/attachment.html> ------------------------------ Message: 4 Date: Tue, 13 Sep 2011 17:39:48 +0200 From: Alan DeKok <aland@deployingradius.com> Subject: Re: Quick enable/disable user account. To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <4E6F7944.5050204@deployingradius.com> Content-Type: text/plain; charset=ISO-8859-1 2394263740 wrote:
Sometime, I need disable a user account in mysql database. And then enable it later on after some check complete.
Can you please advise how to toggle such status?
See the MySQL documentation for how to write to rows in MySQL.
There're may be multiple solutions, please advise them all, so I can choose a one most fit the needs.
Try harder. Alan DeKok. ------------------------------ Message: 5 Date: Tue, 13 Sep 2011 17:42:54 +0200 From: Arran Cudbard-Bell <a.cudbardb@freeradius.org> Subject: Re: Quick enable/disable user account. To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <AF7E673D-1735-467E-B0C8-06C49AC33E87@freeradius.org> Content-Type: text/plain; charset="iso-8859-1" No. You're treating this like paid support. Go and find out the answer for yourself, this is not a FeeRADIUS question. -Arran Arran Cudbard-Bell a.cudbardb@freeradius.org RADIUS - Waging war on ignorance and apathy one Access-Challenge at a time. -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/20110913/1d2cbd68/attachment.html> ------------------------------ Message: 6 Date: Tue, 13 Sep 2011 08:59:15 -0700 From: "Tim Sylvester" <tim.sylvester@networkradius.com> Subject: RE: Quick enable/disable user account. To: "'FreeRadius users mailing list'" <freeradius-users@lists.freeradius.org> Message-ID: <041301cc722e$1745e360$45d1aa20$@networkradius.com> Content-Type: text/plain; charset="us-ascii" Set Auth-Type := Reject in radcheck. http://deployingradius.com/documents/configuration/auth_type.html Tim From: freeradius-users-bounces+tim.sylvester=networkradius.com@lists.freeradius.or g [mailto:freeradius-users-bounces+tim.sylvester=networkradius.com@lists.freer adius.org] On Behalf Of 2394263740 Sent: Tuesday, September 13, 2011 8:33 AM To: freeradius-users Subject: Quick enable/disable user account. Hello, I'm using free radius server 2.1.11 on Linux Enterprise Server 6.1. OS: Linux Enterprise Server 6.1 Radius: free radius server 2.1.11 Database: Mysql Sometime, I need disable a user account in mysql database. And then enable it later on after some check complete. Can you please advise how to toggle such status? There're may be multiple solutions, please advise them all, so I can choose a one most fit the needs. Thanks! Tom -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/20110913/044b7e97/attachment.html> ------------------------------ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html End of Freeradius-Users Digest, Vol 77, Issue 50 ************************************************ -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/20110914/84aacfce/attachment.html> ------------------------------ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html End of Freeradius-Users Digest, Vol 77, Issue 53 ************************************************