...

I've seen many of these messages in the radius.log ...

Wed Jun 15 15:10:23 2005 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0

What does it mean ? How to solve this ?

Hi,

increase the number of connections to the mysql db in your sql.conf !

# number of sql connections to make to server num_sql_socks = 15

Regards,

Edvin Seferovic

Hi Edvin, Thanx ... that seems to be fine. I increased the number of scokets to 10 ( not 15 as suggested, I'll be checking ... ), but I had no more of those messages by now ... Thanx. Regards, Lucas -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.7.3/15 - Release Date: 14/06/2005

"Lucas Aimaretto" <lucas@cyneric.com> wrote:

I only 9 seconds, 21 messages of this kind. And .. .do the "unresponsive child" have something to do ... ???

Yes. Your database is slow, and is not responding to FreeRADIUS in time. Alan DeKok.

"Lucas Aimaretto" <lucas@cyneric.com> wrote:

Ok, but ... my sql server is a Pentium IV with 512MB of RAM. How can it be possible ?!

<shrug> Go figure it out. I don't run your SQL server, so I don't know.

I increased the number to socks to 15 ... but it seems it is not the solution ... any hint on how to avoid this ??

Increasing the number of sockets when the sockets are all blocked won't make any difference. Alan DeKok.

On Thu, 16 Jun 2005, Lucas Aimaretto wrote:

...

...

Ok, but ... my sql server is a Pentium IV with 512MB of RAM. How can it be possible ?!

<shrug> Go figure it out. I don't run your SQL server, so I don't know.

I know you are not running my SQL server. I was just asking because some may have some idea of what to "touch" to improve the SQL server. I'm not SQL server guru but there may be some on the list...

Thanx

Are the attributes you are doing searches with indexed?

Hello, I have a clean install of FreeRadius 1.1.7 with MySQL support. I have a database on a separate machine that is used for almost nothing (no traffic). I would think sockets are not an issue. I set the radius database up based on the instructions on this page: http://wiki.freeradius.org/SQL_HOWTO mysql -uroot -p CREATE DATABASE radius; GRANT ALL ON radius.* TO radius@localhost IDENTIFIED BY "radpass"; exit I then used the freeRadius supplied sqipt "mysql.sql" to create the schema for the database. Next I created a test user as instructed and configured freeRadius to access the remote SQL server database. When I try an authentication test, I receive the "no DB handles" error. As for the indexing suggestion, would I need to look at that on a brand new database with only one user in it? Go easy on me, as I've had to learn all of this from scratch in the last couple days. :-) Thank you. -Doc. -- View this message in context: http://www.nabble.com/no-DB-handles-tf77404.html#a13409021 Sent from the FreeRadius - User mailing list archive at Nabble.com.

Alan DeKok wrote:

What does the full debug log say?

Sadly, I've joined this mailing list to ask this question, and ultimately show what an armature I am. I just found out that mysql is only listening to localhost. That's all it's ever been used for. D'oh! (I did not know that was a default setting) Trying to change that now. Hopefully it will all work after that. Thanks, -Doc

http://wiki.freeradius.org/SQL_HOWTO Tell him to read the bit named "Populating SQL". Ivan Kalik Kalik Informatika ISP Dana 25/10/2007, "Doc. Caliban" <doc.caliban@gmail.com> piše:

The db admin here is telling me that there as to be some standardized way of adding users to the database. I don't know anything about SQL. He is talking about the "ID" field or something like that.

What is the standard way of doing this? We have an existing db of all of the user names and passwords, plus a lot of other stuff, that we can pull the user info from to populate the radius database, but he needs to know exactly how it has to be added.

Googling in the mean time...

-Doc

Hi all, I am very familiar with Cisco Secure ACS for AAA of Cisco devices. I am considering using FreeRadius at another customer site instead of Cisco Secure ACS. Will I still be able to control command execution (authorization) etc via FreeRadius? Or would I be restricted to authentication only? What do people recommend I use as a web front end for FreeRadius when managing AAA on a Cisco network via FreeRadius? I've seen daloradius but that is geared to wireless hotspots. I've taken a quick look at phpRADmin and also ASN but I'm not sure which one is more mature and would like to know other peoples thoughts. Or is dailupadmin itself good enough? Any advice given is very much appreciated. Mike Hawkins --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- The information contained in this email is confidential and may also contain privileged information. Sender does not waive confidentiality or legal privilege. If you are not the intended recipient please notify the sender immediately; you should not retain this message or disclose its content to anyone. Internet communications are not secure or error free and the sender does not accept any liability for the content of the email. Although emails are routinely screened for viruses, the sender does not accept responsibility for any damage caused. Replies to this email may be monitored. --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________

Peter, Yes, I was comparing TACACS+ to RADIUS - my mistake. Any recommendations on the most appropriate web front end for FreeRadius when managing a Cisco network that is pointing at a FreeRadius AAA server? Mike Hawkins Office: 212-208-3888 Mobile: 917-887-3614 -----Original Message----- From: Peter Nixon [mailto:listuser@peternixon.net] Sent: Monday, October 29, 2007 9:58 AM To: freeradius-users@lists.freeradius.org Cc: Hawkins, Michael Subject: Re: web based admin On Mon 29 Oct 2007, Hawkins, Michael wrote:

Hi all,

I am very familiar with Cisco Secure ACS for AAA of Cisco devices. I am considering using FreeRadius at another customer site instead of Cisco Secure ACS.

Will I still be able to control command execution (authorization) etc via FreeRadius? Or would I be restricted to authentication only?

By using the word "still" it implies that SecureACS can do this also, but as far as I know, unless something has changed recently, cisco equipment only supports this feature with TACACS+ and not RADIUS.. Comparing a SecureACS TACACS+ server with FreeRADIUS is comparing apples and oranges... FreeRADIUS is generally MUCH more powerfull than SecureACS in its RADIUS functionality.. FreeRADIUS, doe not however support TACACS+ at present.. -- Peter Nixon http://peternixon.net/ --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- The information contained in this email is confidential and may also contain privileged information. Sender does not waive confidentiality or legal privilege. If you are not the intended recipient please notify the sender immediately; you should not retain this message or disclose its content to anyone. Internet communications are not secure or error free and the sender does not accept any liability for the content of the email. Although emails are routinely screened for viruses, the sender does not accept responsibility for any damage caused. Replies to this email may be monitored. --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________

Peter, Thanks for your responses. As is common with newbies, the answers usually spawn another 4 questions (at least). Why would I pick ldap over mysql? Is it because ldap is geared around user entities as well as an organizational hierarchy? Does phpLDAPadmin already know about the requirements of FreeRadius structures or does FreeRadius already know how to plug into phpLDAPadmin? Sorry if these questions appear clueless, and even more apologies if they are in the FreeRadius FAQ's. Mike Hawkins Office: 212-208-3888 Mobile: 917-887-3614 -----Original Message----- From: freeradius-users-bounces@lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Peter Nixon Sent: Monday, October 29, 2007 2:19 PM To: FreeRadius users mailing list Subject: Re: web based admin On Mon 29 Oct 2007, Hawkins, Michael wrote:

Peter,

Yes, I was comparing TACACS+ to RADIUS - my mistake.

Any recommendations on the most appropriate web front end for FreeRadius when managing a Cisco network that is pointing at a FreeRadius AAA server?

It kind of depends on your backend to be honest. If you use an LDAP backend phpLDAPadmin is pretty good.. -- Peter Nixon http://peternixon.net/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- The information contained in this email is confidential and may also contain privileged information. Sender does not waive confidentiality or legal privilege. If you are not the intended recipient please notify the sender immediately; you should not retain this message or disclose its content to anyone. Internet communications are not secure or error free and the sender does not accept any liability for the content of the email. Although emails are routinely screened for viruses, the sender does not accept responsibility for any damage caused. Replies to this email may be monitored. --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________

Dear i need also this kind of setup i want to replace AAA ACS with freeradius but i dont know how accouning work in this case and authorization of cisco LEVEL base can u provide me doucment of URL for this setup "Hawkins, Michael" <MHawkins@tullettprebon.com> wrote: Hi all, I am very familiar with Cisco Secure ACS for AAA of Cisco devices. I am considering using FreeRadius at another customer site instead of Cisco Secure ACS. Will I still be able to control command execution (authorization) etc via FreeRadius? Or would I be restricted to authentication only? What do people recommend I use as a web front end for FreeRadius when managing AAA on a Cisco network via FreeRadius? I've seen daloradius but that is geared to wireless hotspots. I've taken a quick look at phpRADmin and also ASN but I'm not sure which one is more mature and would like to know other peoples thoughts. Or is dailupadmin itself good enough? Any advice given is very much appreciated. Mike Hawkins --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- The information contained in this email is confidential and may also contain privileged information. Sender does not waive confidentiality or legal privilege. If you are not the intended recipient please notify the sender immediately; you should not retain this message or disclose its content to anyone. Internet communications are not secure or error free and the sender does not accept any liability for the content of the email. Although emails are routinely screened for viruses, the sender does not accept responsibility for any damage caused. Replies to this email may be monitored. --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html $ cat ~/satish/url.txt http://www.linuxbug.org _____________________________________________________________________________________________________ --------------------------------- Unlimited freedom, unlimited storage. Get it now