Dear all, i want to use freeradius as a proxy server for more than domain, but i need to do some query from the DB before doing proxy. i have a DB that contain the username and the telephone number and the domain for that user. i want to do a query to check if for that data, if matched to do proxy if not to cancel the proxy. please advice...
Hi, Just a little one, would be useful to be able to disable the individual user lookup, and go straight to the group lookup... would save an SQL query ... (SQL queries being quite expensive). Thanks, Arran
Arran Cudbard-Bell wrote:
Just a little one, would be useful to be able to disable the individual user lookup, and go straight to the group lookup... would save an SQL query ... (SQL queries being quite expensive).
Have you tried setting the query to an empty string? Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Alan DeKok wrote:
Arran Cudbard-Bell wrote:
Just a little one, would be useful to be able to disable the individual user lookup, and go straight to the group lookup... would save an SQL query ... (SQL queries being quite expensive).
Have you tried setting the query to an empty string?
Yes, breaks it... rlm_sql (sql): sql_set_user escaped user --> 'ac221' rlm_sql (sql): Reserving sql socket id: 19 radius_xlat: '' rlm_sql (sql): Error generating query; rejecting user rlm_sql (sql): Released sql socket id: 19 Though yes, Logic dictates that the default action is to skip the check not bail out .. *sigh*
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dear, or is there any way to do authentication before doing proxy Ashraf Al-Basti wrote:
Dear all, i want to use freeradius as a proxy server for more than domain, but i need to do some query from the DB before doing proxy. i have a DB that contain the username and the telephone number and the domain for that user. i want to do a query to check if for that data, if matched to do proxy if not to cancel the proxy. please advice... - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Make user entry: thatuser Calling-Station-Id==number, Proxy-To-Realm:="domain" Put attributes in radcheck if you are using SQL. Ivan Kalik Kalik Informatika ISP Dana 17/5/2007, "Ashraf Al-Basti" <Ashraf.Albasti@jt.net.jo> piše:
Dear, or is there any way to do authentication before doing proxy
Ashraf Al-Basti wrote:
Dear all, i want to use freeradius as a proxy server for more than domain, but i need to do some query from the DB before doing proxy. i have a DB that contain the username and the telephone number and the domain for that user. i want to do a query to check if for that data, if matched to do proxy if not to cancel the proxy. please advice... - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi, do you mean that i have to do the following: in the radcheck i have to put username calling-station-id=number and in the radreply, username proxy-to-realm:=domain could you please send me the whole process for the request. tnt@kalik.co.yu wrote:
Make user entry:
thatuser Calling-Station-Id==number, Proxy-To-Realm:="domain"
Put attributes in radcheck if you are using SQL.
Ivan Kalik Kalik Informatika ISP
Dana 17/5/2007, "Ashraf Al-Basti" <Ashraf.Albasti@jt.net.jo> piše:
Dear, or is there any way to do authentication before doing proxy
Ashraf Al-Basti wrote:
Dear all, i want to use freeradius as a proxy server for more than domain, but i need to do some query from the DB before doing proxy. i have a DB that contain the username and the telephone number and the domain for that user. i want to do a query to check if for that data, if matched to do proxy if not to cancel the proxy. please advice... - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
FreeRADIUS cannot bind in pre1 and CVS HEAD Last CVS that worked was 100504. Have you done anything major that would break this ? Tried it on two boxes, so know it's nothing local. /usr/local/freeradius-2.0pre1/etc/raddb/radiusd.conf[195]: Error binding to port for 0.0.0.0 port 1812 Won't bind with wildcard ip or static ip. -- Arran Cudbard-Bell (A.Cudbard-Bell@sussex.ac.uk) Authentication, Authorisation and Accounting Officer Infrastructure Services | ENG1 E1-1-08 University Of Sussex, Brighton EXT:01273 873900 | INT: 3900
Arran Cudbard-Bell wrote:
FreeRADIUS cannot bind in pre1 and CVS HEAD
Last CVS that worked was 100504.
Have you done anything major that would break this ?
I don't recall changing anything drastic.
Tried it on two boxes, so know it's nothing local.
/usr/local/freeradius-2.0pre1/etc/raddb/radiusd.conf[195]: Error binding to port for 0.0.0.0 port 1812
Won't bind with wildcard ip or static ip.
Hmm... I'll look at it in a few days. I'm away from a test system right now. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (4)
-
Alan DeKok -
Arran Cudbard-Bell -
Ashraf Al-Basti -
tnt＠kalik.co.yu