What would need to be done in dhcp setup in order to have radusergroup/radcheck/radreply/radacct-alike behavior? I am trying to make it work with cable equipment (CM,MTA,CPE) but i am not sure how to start. CM and MTA would have static IP addresses (sql prefered because of additional replies: boot-file,dns,gateway etc.) and CPE's would have dynamic IP address assigned. I am willing to do some serious tests and get back with results because if everything works ok i would switch to freeradius from standard ISC dhcpd. Thank you
On 15/02/13 10:52, Igor Smitran wrote:
What would need to be done in dhcp setup in order to have radusergroup/radcheck/radreply/radacct-alike behavior?
As far as I can tell: 1. Figure our the SQL queries that return the "check/reply" and group items you want for the values in the DHCP packet 2. Configure those queries on an instance of the SQL module 3. Use the config: dhcp ... { ... # do radcheck/radreply sql.authorize ... # do radacct-like behaviour sql.accounting } The latter is necessary because "dhcp" blocks are post-auth blocks internally, so you need to specify that you want "authorize" not post-auth behaviour.
I am trying to make it work with cable equipment (CM,MTA,CPE) but i am not sure how to start. CM and MTA would have static IP addresses (sql prefered because of additional replies: boot-file,dns,gateway etc.) and CPE's would have dynamic IP address assigned.
Dynamic IP assignment might require the sqlippool module; the server comes with examples for this.
Igor Smitran wrote:
What would need to be done in dhcp setup in order to have radusergroup/radcheck/radreply/radacct-alike behavior?
Phil's response is good.
I am trying to make it work with cable equipment (CM,MTA,CPE) but i am not sure how to start. CM and MTA would have static IP addresses (sql prefered because of additional replies: boot-file,dns,gateway etc.) and CPE's would have dynamic IP address assigned.
This gets into policies (if/then/else), which are complicated. My suggestion is to split the problem into pieces. The first piece is to identify which "group" a device belongs to. This can be done by looking at information in the packet. Or, it can be done by putting the MAC addresses into a table, and mapping MAC -> group-name. SQL can be used here, with a custom schema. The "unlang" code can be used to grab the group-name based on the MAC: update control { my-group-Name = "%{sql: SELECT ...}" } You'll have to define My-group-name in raddb/dictionary. See the comments there for examples. This step lets you simplify the problem. Instead of applying policies to 10's of 1000's of devices, you can now apply it to 3-4 groups. The next step is to apply the per-group policy. Key off of the group name, and apply group-specific policies.
I am willing to do some serious tests and get back with results because if everything works ok i would switch to freeradius from standard ISC dhcpd.
That's the goal. Thanks for the help. The DHCP code *should* work. But having more documentation, examples, and real-world tests will help a lot. Alan DeKok.
I am working on this as well. I have a spare CMTS, cable modems, and linux box next to me, with the intention of replacing ISC dhcp with freeradius (as freeradius already does the auth on the cablemodems). I've managed to get parts of it working, and will be spending some more time on it to finish it up. If interested, let's try to consolidate and document the efforts. Duane -----Original Message----- From: freeradius-users-bounces+duanecox=gmail.com@lists.freeradius.org [mailto:freeradius-users-bounces+duanecox=gmail.com@lists.freeradius.org] On Behalf Of Igor Smitran Sent: Friday, February 15, 2013 4:52 AM To: FreeRadius users mailing list Subject: DHCP howto What would need to be done in dhcp setup in order to have radusergroup/radcheck/radreply/radacct-alike behavior? I am trying to make it work with cable equipment (CM,MTA,CPE) but i am not sure how to start. CM and MTA would have static IP addresses (sql prefered because of additional replies: boot-file,dns,gateway etc.) and CPE's would have dynamic IP address assigned. I am willing to do some serious tests and get back with results because if everything works ok i would switch to freeradius from standard ISC dhcpd. Thank you - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Duane Cox wrote:
I've managed to get parts of it working, and will be spending some more time on it to finish it up. If interested, let's try to consolidate and document the efforts.
Any configuration changes / additions can make it into the next release. Send them over, and I'll add them in. The Wiki could also be updated to add DHCP howto's Alan DeKok.
During debug session (radiusd -X) beside other things i can see this: DHCP-Parameter-Request-List = DHCP-Subnet-Mask DHCP-Parameter-Request-List = DHCP-Router-Address DHCP-Parameter-Request-List = DHCP-NTP-Servers DHCP-Parameter-Request-List = DHCP-Domain-Name-Server DHCP-Parameter-Request-List = DHCP-Log-Server DHCP-Parameter-Request-List = DHCP-Domain-Name DHCP-Parameter-Request-List = DHCP-Renewal-Time DHCP-Parameter-Request-List = DHCP-Rebinding-Time DHCP-Parameter-Request-List = DHCP-NETBIOS-Name-Servers DHCP-Parameter-Request-List = DHCP-TFTP-Server-Name But, when i call exec script (phh for example) this array only contains last key: DHCP-Parameter-Request-List = DHCP-TFTP-Server-Name It is logical that those values will be overwritten but... Is there a way to work around this problem?
Igor Smitran wrote: ...
But, when i call exec script (phh for example) this array only contains last key:
DHCP-Parameter-Request-List = DHCP-TFTP-Server-Name
It is logical that those values will be overwritten but...
Is there a way to work around this problem?
Use +=, not = Alan DeKok.
On 02/19/2013 03:41 PM, Alan DeKok wrote:
Use +=, not =
Alan DeKok.
Request from client is this: DHCP-Parameter-Request-List = DHCP-Subnet-Mask DHCP-Parameter-Request-List = DHCP-Router-Address DHCP-Parameter-Request-List = DHCP-NTP-Servers Freeradius puts everything into ENV. Because of the same key only last value is used, other ones are overwritten. So, ENV in this example will have only this: DHCP-Parameter-Request-List = DHCP-NTP-Servers PHP script will be able to read that client asked only for DHCP-NTP-Servers value. This is PHP error or Freeradius error? Or am i missing something? Igor
Igor Smitran wrote:
Freeradius puts everything into ENV.
For running external scripts.
Because of the same key only last value is used, other ones are overwritten. So, ENV in this example will have only this:
Yes. So don't run a script. Use the policies in the server. Or the Perl module. Or the Python module. Or the Ruby module.
DHCP-Parameter-Request-List = DHCP-NTP-Servers
PHP script will be able to read that client asked only for DHCP-NTP-Servers value. This is PHP error or Freeradius error? Or am i missing something?
There are limitations when running an external script. That's why the server has plugin modules. Alan DeKok.
1. In sqlippool.conf is stated: ################################################################ # # WARNING: MySQL has certain limitations that means it can # hand out the same IP address to 2 different users. # # We suggest using an SQL DB with proper transaction # support, such as PostgreSQL, or using MySQL # with InnoDB. # ################################################################ Does this mean that only thing needed is to create innodb tables? Module will use transactions automaticaly? 2. Is freeradius ready to work as dhcp server for IPv6? Would it be enough to insert some new words into dictionary and change configuration appropriately? Igor
Igor Smitran wrote:
Does this mean that only thing needed is to create innodb tables? Module will use transactions automaticaly?
Yes.
2. Is freeradius ready to work as dhcp server for IPv6? Would it be enough to insert some new words into dictionary and change configuration appropriately?
It doesn't do DHCPv6. It's possible, but a lot of work. Alan DeKok.
On 02/21/2013 07:56 PM, Alan DeKok wrote:
2. Is freeradius ready to work as dhcp server for IPv6? Would it be enough to insert some new words into dictionary and change configuration appropriately? It doesn't do DHCPv6. It's possible, but a lot of work. Any plans to implement ipv6 support any time soon?
Hi, I have strange problem host can't receive IP becouse he get Acct-Status-Type = Stop Acct-Update-Reason = AAA_LOAD_ACCT_SESSION_DOWN after one second before: Acct-Status-Type = Start Acct-Update-Reason = AAA_LOAD_ACCT_SESSION_UP short log: Sending Access-Accept of id 126 to 91.231.70.5 port 1812 Service-Type = Outbound-User Framed-IP-Address == 91.231.71.17 Acct-Interim-Interval == 300 Service-Type == Outbound-User Connect-Info == "1" Port-Limit == 1 DHCP_Max_Leases == 1 Context-Name == "CLIPS" HTTP-Redirect-Profile-Name == "" Forward-Policy == "in:CLIPS-DEFAULT" QOS-Rate-Outbound == "20480" QOS-Rate-Inbound == "2048" Finished request 5. Going to the next request Waking up in 4.9 seconds. rad_recv: Accounting-Request packet from host 91.231.70.5 port 1812, id=223, length=385 User-Name = "00:17:08:2e:76:d2" Acct-Status-Type = Start Acct-Session-Id = "0100FFFF7800029F-515D7656" Service-Type = Outbound-User Acct-Update-Reason = AAA_LOAD_ACCT_SESSION_UP NAS-Identifier = "ALFASYSTEM" NAS-Port = 33619968 NAS-Real-Port = 553649127 NAS-Port-Type = Virtual NAS-Port-Id = "2/1 vlan-id 999 clips 131743" Medium-Type = DSL Mac-Addr = "00-17-08-2e-76-d2" Platform-Type = SE-100 OS-Version = "6.5.1.5" Acct-Authentic = RADIUS Port-Limit = 1 DHCP-Max-Leases = 1 Framed-IP-Address = 91.231.71.17 Source-Validation = Enabled DHCP-Option = "\014\014\004alfa" Acct-Interim-Interval = 600 Forward-Policy = "in:CLIPS-DEFAULT" QOS-Rate-Outbound = "20480:0:0" QOS-Rate-Inbound = "2048:0:0" Qos-Policing-Profile-Name = "customer-out" Qos-Metering-Profile-Name = "customer-in" Event-Timestamp = "Apr 4 2013 14:47:18 CEST" << start rad_recv: Accounting-Request packet from host 91.231.70.5 port 1812, id=224, length=603 User-Name = "00:17:08:2e:76:d2" Acct-Status-Type = Stop Acct-Session-Id = "0100FFFF7800029F-515D7656" Service-Type = Outbound-User Acct-Update-Reason = AAA_LOAD_ACCT_SESSION_DOWN NAS-Identifier = "ALFASYSTEM" NAS-Port = 33619968 NAS-Real-Port = 553649127 NAS-Port-Type = Virtual NAS-Port-Id = "2/1 vlan-id 999 clips 131743" Medium-Type = DSL Mac-Addr = "00-17-08-2e-76-d2" Platform-Type = SE-100 OS-Version = "6.5.1.5" Acct-Authentic = RADIUS Port-Limit = 1 DHCP-Max-Leases = 1 Framed-IP-Address = 91.231.71.17 Source-Validation = Enabled DHCP-Option = "\014\014\004alfa" Acct-Session-Time = 1 Acct-Input-Packets = 0 Acct-Output-Packets = 0 Acct-Input-Octets = 0 Acct-Output-Octets = 0 Acct-Input-Gigawords = 0 Acct-Output-Gigawords = 0 Acct-Input-Packets-64 = 0x0000000000000000 Acct-Output-Packets-64 = 0x0000000000000000 Acct-Input-Octets-64 = 0x0000000000000000 Acct-Output-Octets-64 = 0x0000000000000000 Acct-Mcast-In-Packets = 0 Acct-Mcast-Out-Packets = 0 Acct-Mcast-In-Octets = 0 Acct-Mcast-Out-Octets = 0 Acct-Mcast-In-Packets-64 = 0x0000000000000000 Acct-Mcast-Out-Packets-64 = 0x0000000000000000 Acct-Mcast-In-Octets-64 = 0x0000000000000000 Acct-Mcast-Out-Octets-64 = 0x0000000000000000 Acct-Interim-Interval = 600 Forward-Policy = "in:CLIPS-DEFAULT" QOS-Rate-Outbound = "20480:0:0" QOS-Rate-Inbound = "2048:0:0" Qos-Policing-Profile-Name = "customer-out" Qos-Metering-Profile-Name = "customer-in" Event-Timestamp = "Apr 4 2013 14:47:19 CEST" << stop after 1 second! full log: http://pastebin.com/HTYxdg1B Everything was working great until I change something but I don't remember what was it :) -- Pozdrawiam, Łukasz Kopiszka tel. 694-212-718 www.alfa-system.pl
On 04/04/13 14:17, Łukasz Kopiszka wrote:
Everything was working great until I change something but I don't remember what was it :)
That's unfortunate. I suggest you look into using version control for your configs. Anyway, the NAS is the one doing the disconnect - you should debug this on the NAS.
Hi All, Have been trying to authenticate my ADSL users using Mac Address Auth, however i have failed even after going through the documentation. I want to authenticate with the highlighted, anyone done this and can help? Thanx This is how the accounting file looks; User-Name = "user2000@ut3" Acct-Status-Type = Interim-Update Acct-Session-Id = "0202FFFF6800C44B-515D1107" Service-Type = Framed-User Framed-Protocol = PPP Acct-Update-Reason = AAA_LOAD_ACCT_PERIODIC NAS-Identifier = "UT-BRAS-EDGE" NAS-IP-Address = x.x.x.x NAS-Port = 855648779 NAS-Real-Port = 855638316 NAS-Port-Type = Virtual NAS-Port-Id = "3/3 vlan-id 300 pppoe 10763" Medium-Type = DSL Mac-Addr = "b4-82-fe-ed-2c-7c" Platform-Type = 3 OS-Version = "6.2.1.9" Acct-Authentic = RADIUS Ip-Address-Pool-Name = "pool_256" Port-Limit = 1 Client-DNS-Pri = x.x.x.x Client-DNS-Sec = x.x.x.x Framed-IP-Address = 10.40.141.152 Acct-Session-Time = 27601 Acct-Input-Packets = 2756 Acct-Output-Packets = 2973 Acct-Input-Octets = 94115 Acct-Output-Octets = 106491 Acct-Input-Gigawords = 0 Acct-Output-Gigawords = 0 Acct-Input-Packets-64 = 0x0000000000000ac4 Acct-Output-Packets-64 = 0x0000000000000b9d Acct-Input-Octets-64 = 0x0000000000016fa3 Acct-Output-Octets-64 = 0x0000000000019ffb Acct-Mcast-In-Packets = 0 Acct-Mcast-Out-Packets = 221 Acct-Mcast-In-Octets = 0 Acct-Mcast-Out-Octets = 12818 Acct-Mcast-In-Packets-64 = 0x0000000000000000 Acct-Mcast-Out-Packets-64 = 0x00000000000000dd Acct-Mcast-In-Octets-64 = 0x0000000000000000 Acct-Mcast-Out-Octets-64 = 0x0000000000003212 Qos-Policy-Metering = "broadband_256_metering" Qos-Policy-Policing = "broadband_256_policing" NAT-Policy-Name = "NAT_POLICY1" Event-Timestamp = "Apr 4 2013 16:15:05 EAT" Acct-Unique-Session-Id = "4f2a5dc771fd3034" Timestamp = 1365082454 Request-Authenticator = Verified Eric M ________________________________
Mulindwa wrote:
Hi All,
Have been trying to authenticate my ADSL users using Mac Address Auth, however i have failed even after going through the documentation.
I want to authenticate with the highlighted, anyone done this and can help?
It's been done.
This is how the accounting file looks;
If you're trying to debug authentication, it helps to look at *authentication* traffic, and not *accounting* data. And run the server in debugging mode as suggested in the FAQ, "man" page, web pages, and daily on this list. Honestly, there is NO excuse for refusing to do this. Alan DeKok.
Thanks Alan, Let me do so. Eric M ________________________________ From: Alan DeKok <aland@deployingradius.com> To: Mulindwa <meric_l@yahoo.com>; FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Thursday, April 4, 2013 4:47 PM Subject: Re: MAC Address Auth Mulindwa wrote:
Hi All,
Have been trying to authenticate my ADSL users using Mac Address Auth, however i have failed even after going through the documentation.
I want to authenticate with the highlighted, anyone done this and can help?
It's been done.
This is how the accounting file looks;
If you're trying to debug authentication, it helps to look at *authentication* traffic, and not *accounting* data. And run the server in debugging mode as suggested in the FAQ, "man" page, web pages, and daily on this list. Honestly, there is NO excuse for refusing to do this. Alan DeKok.
Great, i have run the debug and i did get the attribute required. If i want to full fill the two conditions i.e username/passwd and Mac Address = Attr-2352-145 How would i need to twick my radiusd.conf file to achieve this? User-Name = "user2000@ut3" CHAP-Password = "cccddd'" CHAP-Challenge = "mmmm" Service-Type = Framed-User Framed-Protocol = PPP NAS-Identifier = "UT-BRAS-EDGE" NAS-IP-Address = x.x.x.x NAS-Port = 855649483 NAS_Real_Port = 855638816 NAS-Port-Type = Virtual Attr-87 = "3/3 vlan-id 800 pppoe 11467" Medium_Type = 11 Attr-2352-145 = "5c-7d-5e-3f-d0-f7" ==== MAC Address Attr-2352-98 = "3" Attr-2352-112 = "6.2.1.9" Acct-Session-Id = "0202FFFF68008FC9-515D8419" Eric M ________________________________ From: Mulindwa <meric_l@yahoo.com> To: Alan DeKok <aland@deployingradius.com>; FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Thursday, April 4, 2013 4:58 PM Subject: Re: MAC Address Auth Thanks Alan, Let me do so. Eric M ________________________________ From: Alan DeKok <aland@deployingradius.com> To: Mulindwa <meric_l@yahoo.com>; FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Thursday, April 4, 2013 4:47 PM Subject: Re: MAC Address Auth Mulindwa wrote:
Hi All,
Have been trying to authenticate my ADSL users using Mac Address Auth, however i have failed even after going through the documentation.
I want to authenticate with the highlighted, anyone done this and can help?
It's been done.
This is how the accounting file looks;
If you're trying to debug authentication, it helps to look at *authentication* traffic, and not *accounting* data. And run the server in debugging mode as suggested in the FAQ, "man" page, web pages, and daily on this list. Honestly, there is NO excuse for refusing to do this. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hello, add the correct check item to your user database. In the case below (User-Name = user2000@ut3) you should have the check item Attr-2352-145 == "5c-7d-5e-3f-d0-f7" for this speicifc user in your user database. Then you repeat this for every user/mac-address pair you want. Best regards, Matthias Am Donnerstag 04 April 2013, 07:25:55 schrieb Mulindwa:
Great, i have run the debug and i did get the attribute required. If i want to full fill the two conditions i.e username/passwd and Mac Address = Attr-2352-145
How would i need to twick my radiusd.conf file to achieve this?
User-Name = "user2000@ut3" CHAP-Password = "cccddd'" CHAP-Challenge = "mmmm" Service-Type = Framed-User Framed-Protocol = PPP NAS-Identifier = "UT-BRAS-EDGE" NAS-IP-Address = x.x.x.x NAS-Port = 855649483 NAS_Real_Port = 855638816 NAS-Port-Type = Virtual Attr-87 = "3/3 vlan-id 800 pppoe 11467" Medium_Type = 11 Attr-2352-145 = "5c-7d-5e-3f-d0-f7" ==== MAC Address Attr-2352-98 = "3" Attr-2352-112 = "6.2.1.9" Acct-Session-Id = "0202FFFF68008FC9-515D8419"
Eric M
________________________________ From: Mulindwa <meric_l@yahoo.com> To: Alan DeKok <aland@deployingradius.com>; FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Thursday, April 4, 2013 4:58 PM Subject: Re: MAC Address Auth
Thanks Alan,
Let me do so.
Eric M
________________________________ From: Alan DeKok <aland@deployingradius.com> To: Mulindwa <meric_l@yahoo.com>; FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Thursday, April 4, 2013 4:47 PM Subject: Re: MAC Address Auth
Mulindwa wrote:
Hi All,
Have been trying to authenticate my ADSL users using Mac Address Auth, however i have failed even after going through the documentation.
I want to authenticate with the highlighted, anyone done this and can help?
It's been done.
This is how the accounting file looks;
If you're trying to debug authentication, it helps to look at *authentication* traffic, and not *accounting* data.
And run the server in debugging mode as suggested in the FAQ, "man" page, web pages, and daily on this list.
Honestly, there is NO excuse for refusing to do this.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Matthias Nagel Willy-Andreas-Allee 1, Zimmer 506 76131 Karlsruhe Telefon: +49-721-8695-1506 Mobil: +49-151-15998774 e-Mail: matthias.h.nagel@gmail.com ICQ: 499797758 Skype: nagmat84
Thanks Mattias, I get an error saying; Unknown attribute "Attr-2352-145" This is how i have it setup user20001@ut3 Password = "006060", Simultaneous-Use = 1 Attr-2352-145 = "5c-7d-5e-3f-d0-f7", Service-Type = Framed-User, Qos_Policy_Policing = broadband_128_policing, Qos_Policy_Metering = broadband_128_metering, Framed-Protocol = PPP, Ip_Address_Pool_Name = pool_128, Framed-Address = 255.255.255.254, Framed-Netmask = 255.255.255.255, Fall-Through = 0 Eric M ________________________________ From: Matthias Nagel <matthias.h.nagel@gmail.com> To: freeradius-users@lists.freeradius.org Sent: Thursday, April 4, 2013 5:41 PM Subject: Re: MAC Address Auth Hello, add the correct check item to your user database. In the case below (User-Name = user2000@ut3) you should have the check item Attr-2352-145 == "5c-7d-5e-3f-d0-f7" for this speicifc user in your user database. Then you repeat this for every user/mac-address pair you want. Best regards, Matthias Am Donnerstag 04 April 2013, 07:25:55 schrieb Mulindwa:
Great, i have run the debug and i did get the attribute required. If i want to full fill the two conditions i.e username/passwd and Mac Address = Attr-2352-145
How would i need to twick my radiusd.conf file to achieve this?
User-Name = "user2000@ut3" CHAP-Password = "cccddd'" CHAP-Challenge = "mmmm" Service-Type = Framed-User Framed-Protocol = PPP NAS-Identifier = "UT-BRAS-EDGE" NAS-IP-Address = x.x.x.x NAS-Port = 855649483 NAS_Real_Port = 855638816 NAS-Port-Type = Virtual Attr-87 = "3/3 vlan-id 800 pppoe 11467" Medium_Type = 11 Attr-2352-145 = "5c-7d-5e-3f-d0-f7" ==== MAC Address Attr-2352-98 = "3" Attr-2352-112 = "6.2.1.9" Acct-Session-Id = "0202FFFF68008FC9-515D8419"
Eric M
________________________________ From: Mulindwa <meric_l@yahoo.com> To: Alan DeKok <aland@deployingradius.com>; FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Thursday, April 4, 2013 4:58 PM Subject: Re: MAC Address Auth
Thanks Alan,
Let me do so.
Eric M
________________________________ From: Alan DeKok <aland@deployingradius.com> To: Mulindwa <meric_l@yahoo.com>; FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Thursday, April 4, 2013 4:47 PM Subject: Re: MAC Address Auth Mulindwa wrote:
Hi All,
Have been trying to authenticate my ADSL users using Mac Address Auth, however i have failed even after going through the documentation.
I want to authenticate with the highlighted, anyone done this and can help?
It's been done.
This is how the accounting file looks;
If you're trying to debug authentication, it helps to look at *authentication* traffic, and not *accounting* data.
And run the server in debugging mode as suggested in the FAQ, "man" page, web pages, and daily on this list.
Honestly, there is NO excuse for refusing to do this.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Matthias Nagel Willy-Andreas-Allee 1, Zimmer 506 76131 Karlsruhe Telefon: +49-721-8695-1506 Mobil: +49-151-15998774 e-Mail: matthias.h.nagel@gmail.com ICQ: 499797758 Skype: nagmat84 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hello Eric, two remarks. The first one replies to your question, the second is a comment on your user entry. 1) At the moment I believe that you either have a very old FreeRADIUS installation or that you broke your configuration with regard to the dictonary files. "Atttr-2352-145" is a Redback attribute (Vendor ID 2352) and means "Mac-Addr" (Atrribute ID 145). In my installation (Debian Squeeze, Freeradius 2.1.10) this attribute is already contained in the dictionary files out of the box. Hence, Freeradius should replace all occurences of "Atttr-2352-145" by the more friendly name "Mac-Addr" and one should use that in the user file, too. But if your debug output and your accounting logs show "Atttr-2352-145" instead of "Mac-Addr", then Freeradius does not seem to know this attribute, which means something is broken. 2) For a moment ignore the problem about the unknown attribute "Attr-2352-145". Anyway you must use this attribute (or "Mac-Addr") as a check item not as a reply item and the correct operator is "==" not "=". (See my last mail and http://freeradius.org/radiusd/man/users.html). So it must be on the first line. I also doubt that you want Password = "006060", but Cleartext-Password := "006060" instead. Read http://freeradius.org/radiusd/man/users.html. Matthias PS @ Alan DeKoK: I believe I found the problem, why so many people use "=" instead of the correct operator. The doc (http://freeradius.org/radiusd/man/users.html) says: "Each item in the check or reply item list is an attribute of the form name = value" (2nd paragraph). Perhaps it would be better to write: "Each item in the check or reply item list is an attribute of the form 'name op value'". This would make clear that "op" is not always "=". Am Donnerstag 04 April 2013, 23:07:02 schrieb Mulindwa:
Thanks Mattias,
I get an error saying; Unknown attribute "Attr-2352-145"
This is how i have it setup
user20001@ut3 Password = "006060", Simultaneous-Use = 1 Attr-2352-145 = "5c-7d-5e-3f-d0-f7", Service-Type = Framed-User, Qos_Policy_Policing = broadband_128_policing, Qos_Policy_Metering = broadband_128_metering, Framed-Protocol = PPP, Ip_Address_Pool_Name = pool_128, Framed-Address = 255.255.255.254, Framed-Netmask = 255.255.255.255, Fall-Through = 0
Eric M
________________________________ From: Matthias Nagel <matthias.h.nagel@gmail.com> To: freeradius-users@lists.freeradius.org Sent: Thursday, April 4, 2013 5:41 PM Subject: Re: MAC Address Auth
Hello, add the correct check item to your user database. In the case below (User-Name = user2000@ut3) you should have the check item Attr-2352-145 == "5c-7d-5e-3f-d0-f7" for this speicifc user in your user database. Then you repeat this for every user/mac-address pair you want. Best regards, Matthias
Am Donnerstag 04 April 2013, 07:25:55 schrieb Mulindwa:
Great, i have run the debug and i did get the attribute required. If i want to full fill the two conditions i.e username/passwd and Mac Address = Attr-2352-145
How would i need to twick my radiusd.conf file to achieve this?
User-Name = "user2000@ut3" CHAP-Password = "cccddd'" CHAP-Challenge = "mmmm" Service-Type = Framed-User Framed-Protocol = PPP NAS-Identifier = "UT-BRAS-EDGE" NAS-IP-Address = x.x.x.x NAS-Port = 855649483 NAS_Real_Port = 855638816 NAS-Port-Type = Virtual Attr-87 = "3/3 vlan-id 800 pppoe 11467" Medium_Type = 11 Attr-2352-145 = "5c-7d-5e-3f-d0-f7" ==== MAC Address Attr-2352-98 = "3" Attr-2352-112 = "6.2.1.9" Acct-Session-Id = "0202FFFF68008FC9-515D8419"
Eric M
________________________________ From: Mulindwa <meric_l@yahoo.com> To: Alan DeKok <aland@deployingradius.com>; FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Thursday, April 4, 2013 4:58 PM Subject: Re: MAC Address Auth
Thanks Alan,
Let me do so.
Eric M
________________________________ From: Alan DeKok <aland@deployingradius.com> To: Mulindwa <meric_l@yahoo.com>; FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Thursday, April 4, 2013 4:47 PM Subject: Re: MAC Address Auth
Mulindwa wrote:
Hi All,
Have been trying to authenticate my ADSL users using Mac Address Auth, however i have failed even after going through the documentation.
I want to authenticate with the highlighted, anyone done this and can help?
It's been done.
This is how the accounting file looks;
If you're trying to debug authentication, it helps to look at *authentication* traffic, and not *accounting* data.
And run the server in debugging mode as suggested in the FAQ, "man" page, web pages, and daily on this list.
Honestly, there is NO excuse for refusing to do this.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Matthias Nagel Willy-Andreas-Allee 1, Zimmer 506 76131 Karlsruhe
Telefon: +49-721-8695-1506 Mobil: +49-151-15998774 e-Mail: matthias.h.nagel@gmail.com ICQ: 499797758 Skype: nagmat84
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Matthias Nagel Willy-Andreas-Allee 1, Zimmer 506 76131 Karlsruhe Telefon: +49-721-8695-1506 Mobil: +49-151-15998774 e-Mail: matthias.h.nagel@gmail.com ICQ: 499797758 Skype: nagmat84
Hi good pple, have been reading on how to enforce the attribute of Mac-Addr and i have not seen it anywhere. Has anyone done it before, please help throw some light on how i can achieve this. I want user eric@ut3 with this Mac Address to log in , and if the MAC address is different he will not be granted access. eric@ut3 Cleartext-Password := "eric", Simultaneous-Use := 1 Mac-Addr = 02-1B-9E-D3-0B-F0, Service-Type = Framed-User, Qos-Policy-Policing = broadband_128_policing, Qos-Policy-Metering = broadband_128_metering, Framed-Protocol = PPP, Ip_Address_Pool_Name = pool_128, Framed-Address = 255.255.255.254, Framed-Netmask = 255.255.255.255, Fall-Through = 0 Eric M ________________________________ From: Mulindwa <meric_l@yahoo.com> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Friday, April 5, 2013 9:07 AM Subject: Re: MAC Address Auth Thanks Mattias, I get an error saying; Unknown attribute "Attr-2352-145" This is how i have it setup user20001@ut3 Password = "006060", Simultaneous-Use = 1 Attr-2352-145 = "5c-7d-5e-3f-d0-f7", Service-Type = Framed-User, Qos_Policy_Policing = broadband_128_policing, Qos_Policy_Metering = broadband_128_metering, Framed-Protocol = PPP, Ip_Address_Pool_Name = pool_128, Framed-Address = 255.255.255.254, Framed-Netmask = 255.255.255.255, Fall-Through = 0 Eric M ________________________________ From: Matthias Nagel <matthias.h.nagel@gmail.com> To: freeradius-users@lists.freeradius.org Sent: Thursday, April 4, 2013 5:41 PM Subject: Re: MAC Address Auth Hello, add the correct check item to your user database. In the case below (User-Name = user2000@ut3) you should have the check item Attr-2352-145 == "5c-7d-5e-3f-d0-f7" for this speicifc user in your user database. Then you repeat this for every user/mac-address pair you want. Best regards, Matthias Am Donnerstag 04 April 2013, 07:25:55 schrieb Mulindwa:
Great, i have run the debug and i did get the attribute required. If i want to full fill the two conditions i.e username/passwd and Mac Address = Attr-2352-145
How would i need to twick my radiusd.conf file to achieve this?
User-Name = "user2000@ut3" CHAP-Password = "cccddd'" CHAP-Challenge = "mmmm" Service-Type = Framed-User Framed-Protocol = PPP NAS-Identifier = "UT-BRAS-EDGE" NAS-IP-Address = x.x.x.x NAS-Port = 855649483 NAS_Real_Port = 855638816 NAS-Port-Type = Virtual Attr-87 = "3/3 vlan-id 800 pppoe 11467" Medium_Type = 11 Attr-2352-145 = "5c-7d-5e-3f-d0-f7" ==== MAC Address Attr-2352-98 = "3" Attr-2352-112 = "6.2.1.9" Acct-Session-Id = "0202FFFF68008FC9-515D8419"
Eric M
________________________________ From: Mulindwa <meric_l@yahoo.com> To: Alan DeKok <aland@deployingradius.com>; FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Thursday, April 4, 2013 4:58 PM Subject: Re: MAC Address Auth
Thanks Alan,
Let me do so.
Eric M
________________________________ From: Alan DeKok <aland@deployingradius.com> To: Mulindwa <meric_l@yahoo.com>; FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Thursday, April 4, 2013 4:47 PM Subject: Re: MAC Address Auth Mulindwa wrote:
Hi All,
Have been trying to authenticate my ADSL users using Mac Address Auth, however i have failed even after going through the documentation.
I want to authenticate with the highlighted, anyone done this and can help?
It's been done.
This is how the accounting file looks;
If you're trying to debug authentication, it helps to look at *authentication* traffic, and not *accounting* data.
And run the server in debugging mode as suggested in the FAQ, "man" page, web pages, and daily on this list.
Honestly, there is NO excuse for refusing to do this.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Matthias Nagel Willy-Andreas-Allee 1, Zimmer 506 76131 Karlsruhe Telefon: +49-721-8695-1506 Mobil: +49-151-15998774 e-Mail: matthias.h.nagel@gmail.com ICQ: 499797758 Skype: nagmat84 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Add eric@ut3 Calling-Station-Id == 02:1B:9E:D3:0B:F0 inside radcheck table or inside users file eric@ut3 Cleartext-Password := "eric", Simultaneous-Use := 1 Calling-Station-Id == 02:1B:9E:D3:0B:F0 Service-Type = Framed-User, Qos-Policy-Policing = broadband_128_policing, Qos-Policy-Metering = broadband_128_metering, Framed-Protocol = PPP, Ip_Address_Pool_Name = pool_128, Framed-Address = 255.255.255.254, Framed-Netmask = 255.255.255.255, Fall-Through = 0 NOtice the double "=" sign.... On 8.4.2013 13:18, Mulindwa wrote:
Hi good pple, have been reading on how to enforce the attribute of Mac-Addr and i have not seen it anywhere.
Has anyone done it before, please help throw some light on how i can achieve this.
I want user eric@ut3 with this Mac Address to log in , and if the MAC address is different he will not be granted access.
eric@ut3 Cleartext-Password := "eric", Simultaneous-Use := 1 Mac-Addr = 02-1B-9E-D3-0B-F0, Service-Type = Framed-User, Qos-Policy-Policing = broadband_128_policing, Qos-Policy-Metering = broadband_128_metering, Framed-Protocol = PPP, Ip_Address_Pool_Name = pool_128, Framed-Address = 255.255.255.254, Framed-Netmask = 255.255.255.255, Fall-Through = 0 Eric M ------------------------------------------------------------------------ *From:* Mulindwa <meric_l@yahoo.com> *To:* FreeRadius users mailing list <freeradius-users@lists.freeradius.org> *Sent:* Friday, April 5, 2013 9:07 AM *Subject:* Re: MAC Address Auth
Thanks Mattias,
I get an error saying; Unknown attribute "Attr-2352-145"
This is how i have it setup
user20001@ut3 Password = "006060", Simultaneous-Use = 1 Attr-2352-145 = "5c-7d-5e-3f-d0-f7", Service-Type = Framed-User, Qos_Policy_Policing = broadband_128_policing, Qos_Policy_Metering = broadband_128_metering, Framed-Protocol = PPP, Ip_Address_Pool_Name = pool_128, Framed-Address = 255.255.255.254, Framed-Netmask = 255.255.255.255, Fall-Through = 0
Eric M ------------------------------------------------------------------------ *From:* Matthias Nagel <matthias.h.nagel@gmail.com> *To:* freeradius-users@lists.freeradius.org *Sent:* Thursday, April 4, 2013 5:41 PM *Subject:* Re: MAC Address Auth
Hello, add the correct check item to your user database. In the case below (User-Name = user2000@ut3) you should have the check item Attr-2352-145 == "5c-7d-5e-3f-d0-f7" for this speicifc user in your user database. Then you repeat this for every user/mac-address pair you want. Best regards, Matthias
Am Donnerstag 04 April 2013, 07:25:55 schrieb Mulindwa:
Great, i have run the debug and i did get the attribute required. If i want to full fill the two conditions i.e username/passwd and Mac Address = Attr-2352-145
How would i need to twick my radiusd.conf file to achieve this?
User-Name = "user2000@ut3" CHAP-Password = "cccddd'" CHAP-Challenge = "mmmm" Service-Type = Framed-User Framed-Protocol = PPP NAS-Identifier = "UT-BRAS-EDGE" NAS-IP-Address = x.x.x.x NAS-Port = 855649483 NAS_Real_Port = 855638816 NAS-Port-Type = Virtual Attr-87 = "3/3 vlan-id 800 pppoe 11467" Medium_Type = 11 Attr-2352-145 = "5c-7d-5e-3f-d0-f7" ==== MAC Address Attr-2352-98 = "3" Attr-2352-112 = "6.2.1.9" Acct-Session-Id = "0202FFFF68008FC9-515D8419"
Eric M
________________________________ From: Mulindwa <meric_l@yahoo.com <mailto:meric_l@yahoo.com>> To: Alan DeKok <aland@deployingradius.com <mailto:aland@deployingradius.com>>; FreeRadius users mailing list <freeradius-users@lists.freeradius.org <mailto:freeradius-users@lists.freeradius.org>> Sent: Thursday, April 4, 2013 4:58 PM Subject: Re: MAC Address Auth
Thanks Alan,
Let me do so.
Eric M
________________________________ From: Alan DeKok <aland@deployingradius.com <mailto:aland@deployingradius.com>> To: Mulindwa <meric_l@yahoo.com <mailto:meric_l@yahoo.com>>; FreeRadius users mailing list <freeradius-users@lists.freeradius.org <mailto:freeradius-users@lists.freeradius.org>> Sent: Thursday, April 4, 2013 4:47 PM Subject: Re: MAC Address Auth
Mulindwa wrote:
Hi All,
Have been trying to authenticate my ADSL users using Mac Address Auth, however i have failed even after going through the documentation.
I want to authenticate with the highlighted, anyone done this and can help?
It's been done.
This is how the accounting file looks;
If you're trying to debug authentication, it helps to look at *authentication* traffic, and not *accounting* data.
And run the server in debugging mode as suggested in the FAQ, "man" page, web pages, and daily on this list.
Honestly, there is NO excuse for refusing to do this.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Matthias Nagel Willy-Andreas-Allee 1, Zimmer 506 76131 Karlsruhe
Telefon: +49-721-8695-1506 Mobil: +49-151-15998774 e-Mail: matthias.h.nagel@gmail.com <mailto:matthias.h.nagel@gmail.com> ICQ: 499797758 Skype: nagmat84
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 2013-04-08 15:18, Mulindwa wrote:
Hi good pple, have been reading on how to enforce the attribute of Mac-Addr and i have not seen it anywhere.
You don't read carefully what "good pple" reply to you. Ironically, the reply to your question is attached to your question. As Matthias already pointed out: 1. Put *Mac-Addr* to your dictionary (or make sure it's already there). 2. Remove it from your reply list and put it into the check list.
------------------------------------------------------------------------ *From:* Matthias Nagel <matthias.h.nagel@gmail.com> *To:* freeradius-users@lists.freeradius.org *Sent:* Thursday, April 4, 2013 5:41 PM *Subject:* Re: MAC Address Auth
Hello, add the correct check item to your user database. In the case below (User-Name = user2000@ut3) you should have the check item Attr-2352-145 == "5c-7d-5e-3f-d0-f7" for this speicifc user in your user database. Then you repeat this for every user/mac-address pair you want. Best regards, Matthias
-- George Chelidze
On Mon, Apr 08, 2013 at 04:18:54AM -0700, Mulindwa wrote:
I want user eric@ut3 with this Mac Address to log in, and if the MAC address is different he will not be granted access.
Move the Mac-Addr attribute from the reply list to the check list, and make it a check operator (==) not assignment (=): eric@ut3 Cleartext-Password := "eric", Simultaneous-Use := 1, Mac-Addr == 02-1B-9E-D3-0B-F0 Service-Type = Framed-User, Qos-Policy-Policing = broadband_128_policing, Qos-Policy-Metering = broadband_128_metering, Framed-Protocol = PPP, Ip_Address_Pool_Name = pool_128, Framed-Address = 255.255.255.254, Framed-Netmask = 255.255.255.255, Fall-Through = 0 Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
Thanks Matthew, Sorry to askm but where is the reply list and where is the check list? Eric M ________________________________ From: Matthew Newton <mcn4@leicester.ac.uk> To: Mulindwa <meric_l@yahoo.com>; FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Monday, April 8, 2013 4:16 PM Subject: Re: MAC Address Auth On Mon, Apr 08, 2013 at 04:18:54AM -0700, Mulindwa wrote:
I want user eric@ut3 with this Mac Address to log in, and if the MAC address is different he will not be granted access.
Move the Mac-Addr attribute from the reply list to the check list, and make it a check operator (==) not assignment (=): eric@ut3 Cleartext-Password := "eric", Simultaneous-Use := 1, Mac-Addr == 02-1B-9E-D3-0B-F0 Service-Type = Framed-User, Qos-Policy-Policing = broadband_128_policing, Qos-Policy-Metering = broadband_128_metering, Framed-Protocol = PPP, Ip_Address_Pool_Name = pool_128, Framed-Address = 255.255.255.254, Framed-Netmask = 255.255.255.255, Fall-Through = 0 Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
Do you plan to read anything or you think we're here in a chat room, waiting for your questions (the same questions every day...) ? On 8.4.2013 15:32, Mulindwa wrote:
Thanks Matthew,
Sorry to askm but where is the reply list and where is the check list?
Eric M ------------------------------------------------------------------------ *From:* Matthew Newton <mcn4@leicester.ac.uk> *To:* Mulindwa <meric_l@yahoo.com>; FreeRadius users mailing list <freeradius-users@lists.freeradius.org> *Sent:* Monday, April 8, 2013 4:16 PM *Subject:* Re: MAC Address Auth
On Mon, Apr 08, 2013 at 04:18:54AM -0700, Mulindwa wrote:
I want user eric@ut3 with this Mac Address to log in, and if the MAC address is different he will not be granted access.
Move the Mac-Addr attribute from the reply list to the check list, and make it a check operator (==) not assignment (=):
eric@ut3 Cleartext-Password := "eric", Simultaneous-Use := 1, Mac-Addr == 02-1B-9E-D3-0B-F0 Service-Type = Framed-User, Qos-Policy-Policing = broadband_128_policing, Qos-Policy-Metering = broadband_128_metering, Framed-Protocol = PPP, Ip_Address_Pool_Name = pool_128, Framed-Address = 255.255.255.254, Framed-Netmask = 255.255.255.255, Fall-Through = 0
Matthew
-- Matthew Newton, Ph.D. <mcn4@le.ac.uk <mailto:mcn4@le.ac.uk>>
Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom
For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk <mailto:ithelp@le.ac.uk>>
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I have read and read, and i have not seen where thr reply list or check list is Eric M ________________________________ From: Marinko Tarlać <mangia81@gmail.com> To: freeradius-users@lists.freeradius.org Sent: Monday, April 8, 2013 5:02 PM Subject: Re: MAC Address Auth Do you plan to read anything or you think we're here in a chat room, waiting for your questions (the same questions every day...) ? On 8.4.2013 15:32, Mulindwa wrote: Thanks Matthew,
Sorry to askm but where is the reply list and where is the check
list?
Eric M
________________________________ From: Matthew Newton <mcn4@leicester.ac.uk> To: Mulindwa <meric_l@yahoo.com>; FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Monday, April 8, 2013 4:16 PM Subject: Re: MAC Address Auth
On Mon, Apr 08, 2013 at 04:18:54AM -0700, Mulindwa wrote:
I want user eric@ut3 with this Mac Address to log in,
and if
the MAC address is different he will not be granted access.
Move the Mac-Addr attribute from the reply list to the check list, and make it a check operator (==) not assignment (=):
eric@ut3 Cleartext-Password := "eric", Simultaneous-Use := 1, Mac-Addr == 02-1B-9E-D3-0B-F0 Service-Type = Framed-User, Qos-Policy-Policing = broadband_128_policing, Qos-Policy-Metering = broadband_128_metering, Framed-Protocol = PPP, Ip_Address_Pool_Name = pool_128, Framed-Address = 255.255.255.254, Framed-Netmask = 255.255.255.255, Fall-Through = 0
Matthew
-- Matthew Newton, Ph.D. <mcn4@le.ac.uk>
Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom
For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Mulindwa wrote:
I have read and read, and i have not seen where thr reply list or check list is
$ man unlang Read doc/rlm_sql I have no idea which files you're reading. But it's clear you're *not* reading the documentation that comes with the server. Don't google for random pages on the net. Read the documentation. Read the Wiki. 99% of questions are answered there. Alan DeKok.
Great, thanx Alan Eric M ________________________________ From: Alan DeKok <aland@deployingradius.com> To: Mulindwa <meric_l@yahoo.com>; FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Monday, April 8, 2013 5:21 PM Subject: Re: MAC Address Auth Mulindwa wrote:
I have read and read, and i have not seen where thr reply list or check list is
$ man unlang Read doc/rlm_sql I have no idea which files you're reading. But it's clear you're *not* reading the documentation that comes with the server. Don't google for random pages on the net. Read the documentation. Read the Wiki. 99% of questions are answered there. Alan DeKok.
Hi, Am happy to say that i managed to have this work, tested and double tested and it works fine, However now the challenge i have to ensure that all my users at a domain say @ut3 are resquested to fullfil all the parameters on this 1st line, How do i ensure this one? eric@ut3 Cleartext-Password := "eric", Simultaneous-Use := 1, Mac-Addr == "00-24-d2-28-4f-39" Service-Type = Framed-User, Qos-Policy-Policing = broadband_128_policing, Qos-Policy-Metering = broadband_128_metering, Framed-Protocol = PPP, Ip_Address_Pool_Name = pool_128, Framed-Address = 255.255.255.254, Framed-Netmask = 255.255.255.255, Fall-Through = 0 Eric M ________________________________ From: Alan DeKok <aland@deployingradius.com> To: Mulindwa <meric_l@yahoo.com>; FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Monday, April 8, 2013 5:21 PM Subject: Re: MAC Address Auth Mulindwa wrote:
I have read and read, and i have not seen where thr reply list or check list is
$ man unlang Read doc/rlm_sql I have no idea which files you're reading. But it's clear you're *not* reading the documentation that comes with the server. Don't google for random pages on the net. Read the documentation. Read the Wiki. 99% of questions are answered there. Alan DeKok.
participants (10)
-
Alan DeKok -
Duane Cox -
George Chelidze -
Igor Smitran -
Marinko Tarlać -
Matthew Newton -
Matthias Nagel -
Mulindwa -
Phil Mayers -
Łukasz Kopiszka