Im working with dialup provider that is acting as the nas and they are authenticating off my radius server. Authentication works fine. They have this fastnet program that is supposed to make the internet faster. Attached is what they told me to do. I have added it to the dynamic group in mysql and the user is part of that group. But nothing. If you run your own radius server: For those of you that run your own radius server, you must configure your radius server to authenticate the enduser. The authentication will be passed to you, via the same radius servers that authentication currently comes from for pass through radius. The customer must login to the software using their dial-up username and password. You will need to pass back to us the following attribute. (You will need to add this to your dictionary file): VENDORATTR 7000 Slipstream-Auth 1 string Set this equal to 'true' for those that have web acceleration and 'false' for those that do not. By default right now it accepts all users, so be sure to test it with setting one user equal to false and trying to login, it should deny them. Example of how this can be done (using Radiator): Add to your dictionary file at /usr/local/etc/raddb/dictionary: VENDORATTR 7000 Slipstream-Auth 1 string Next, In Radiator you will want to configure like we have listed below. The default entry should be listed after all the webcompress users but before all normal users. Example of how this can be done (Most Radius's): Open up your current dictionary file. Search for the word : cisco- avpair . This is attribute # 1 of vendor 9. You need to create a similar entry, but it should be attribute # 1 of vendor 7000. Follow the example of how the other entry is in your dictionary file. If you cannot find this attribute, it could be under a sub dictionary file. Perhaps something called dictionary.cisco . You may have some INCLUDE lines at the top of your dictionary file that call include dictionary.cisco. If so, you will want to add an INCLUDE line for something like dictionary.slipstream and then follow the example on how dictionary.cisco is setup to make your own dictionary.slipstream file and add that one attribute in it. To Accept a user (this will accept dial-up and accept slipstream): test@realm Auth-Type := Local, User-Password == "trial" Slipstream-Auth = "true" To Deny a user from Slipstream. Do not pass back the Slipstream-Auth = "true". We deny all customers that do not hae a Slipstream-Auth = "true" attribute. Dustin Schuemann . Network Engineer . . . . . . . . . . . . . . . . . . . . . . . . . . AMS/The Support Dept 400 Ann St NW Suite 102 Grand Rapids, MI 49504 p. 616.235.0725 ext. 7007 e. schuemann@supportdept.com
Add to your dictionary file at /usr/local/etc/raddb/dictionary:
Same file in Freeradius.
VENDORATTR 7000 Slipstream-Auth 1 string
You will find this in there: #ATTRIBUTE My-Local-String 3000 string #ATTRIBUTE My-Local-IPAddr 3001 ipaddr #ATTRIBUTE My-Local-Integer 3002 integer Change the first one to: ATTRIBUTE Slipstream-Auth 3000 string Restart the server for this to take effect. Use the attribute as instructed (but correct the first line as per instructions in users file if you are using a recent freeradius version). Attribute should appear in the Access-Accept packet if all goes well. Ivan Kalik Kalik Informatika ISP
I don't have anything like this in my dictionary. This is free radius 1 On Feb 28, 2008, at 5:51 PM, Ivan Kalik wrote:
Add to your dictionary file at /usr/local/etc/raddb/dictionary:
Same file in Freeradius.
VENDORATTR 7000 Slipstream-Auth 1 string
You will find this in there:
#ATTRIBUTE My-Local-String 3000 string #ATTRIBUTE My-Local-IPAddr 3001 ipaddr #ATTRIBUTE My-Local-Integer 3002 integer
Change the first one to:
ATTRIBUTE Slipstream-Auth 3000 string
Restart the server for this to take effect. Use the attribute as instructed (but correct the first line as per instructions in users file if you are using a recent freeradius version). Attribute should appear in the Access-Accept packet if all goes well.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dustin Schuemann . Network Engineer . . . . . . . . . . . . . . . . . . . . . . . . . . AMS/The Support Dept 400 Ann St NW Suite 102 Grand Rapids, MI 49504 p. 616.235.0725 ext. 7007 e. schuemann@supportdept.com
So is this. 1.1.7 file /usr/local/etc/raddb/dictionary. Ivan Kalik Kalik Informatika ISP Dana 28/2/2008, "Dustin Schuemann" <schuemann@supportdept.com> piše:
I don't have anything like this in my dictionary. This is free radius 1 On Feb 28, 2008, at 5:51 PM, Ivan Kalik wrote:
Add to your dictionary file at /usr/local/etc/raddb/dictionary:
Same file in Freeradius.
VENDORATTR 7000 Slipstream-Auth 1 string
You will find this in there:
#ATTRIBUTE My-Local-String 3000 string #ATTRIBUTE My-Local-IPAddr 3001 ipaddr #ATTRIBUTE My-Local-Integer 3002 integer
Change the first one to:
ATTRIBUTE Slipstream-Auth 3000 string
Restart the server for this to take effect. Use the attribute as instructed (but correct the first line as per instructions in users file if you are using a recent freeradius version). Attribute should appear in the Access-Accept packet if all goes well.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dustin Schuemann . Network Engineer .. . . . . . . . . . . . . . . . . . . . . . . . . . AMS/The Support Dept 400 Ann St NW Suite 102 Grand Rapids, MI 49504 p. 616.235.0725 ext. 7007 e. schuemann@supportdept.com
This is version 1.1.3 I don't see this anywhere in this file. #ATTRIBUTE My-Local-String 3000 string
#ATTRIBUTE My-Local-IPAddr 3001 ipaddr #ATTRIBUTE My-Local-Integer 3002 integer
On Feb 28, 2008, at 8:16 PM, Ivan Kalik wrote:
So is this. 1.1.7 file /usr/local/etc/raddb/dictionary.
Ivan Kalik Kalik Informatika ISP
Dana 28/2/2008, "Dustin Schuemann" <schuemann@supportdept.com> piše:
I don't have anything like this in my dictionary. This is free radius 1 On Feb 28, 2008, at 5:51 PM, Ivan Kalik wrote:
Add to your dictionary file at /usr/local/etc/raddb/dictionary:
Same file in Freeradius.
VENDORATTR 7000 Slipstream-Auth 1 string
You will find this in there:
#ATTRIBUTE My-Local-String 3000 string #ATTRIBUTE My-Local-IPAddr 3001 ipaddr #ATTRIBUTE My-Local-Integer 3002 integer
Change the first one to:
ATTRIBUTE Slipstream-Auth 3000 string
Restart the server for this to take effect. Use the attribute as instructed (but correct the first line as per instructions in users file if you are using a recent freeradius version). Attribute should appear in the Access-Accept packet if all goes well.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dustin Schuemann . Network Engineer .. . . . . . . . . . . . . . . . . . . . . . . . . . AMS/The Support Dept 400 Ann St NW Suite 102 Grand Rapids, MI 49504 p. 616.235.0725 ext. 7007 e. schuemann@supportdept.com
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dustin Schuemann . Network Engineer . . . . . . . . . . . . . . . . . . . . . . . . . . AMS/The Support Dept 400 Ann St NW Suite 102 Grand Rapids, MI 49504 p. 616.235.0725 ext. 7007 e. schuemann@supportdept.com
Can I just add it ? On Feb 28, 2008, at 5:51 PM, Ivan Kalik wrote:
Add to your dictionary file at /usr/local/etc/raddb/dictionary:
Same file in Freeradius.
VENDORATTR 7000 Slipstream-Auth 1 string
You will find this in there:
#ATTRIBUTE My-Local-String 3000 string #ATTRIBUTE My-Local-IPAddr 3001 ipaddr #ATTRIBUTE My-Local-Integer 3002 integer
Change the first one to:
ATTRIBUTE Slipstream-Auth 3000 string
Restart the server for this to take effect. Use the attribute as instructed (but correct the first line as per instructions in users file if you are using a recent freeradius version). Attribute should appear in the Access-Accept packet if all goes well.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dustin Schuemann . Network Engineer . . . . . . . . . . . . . . . . . . . . . . . . . . AMS/The Support Dept 400 Ann St NW Suite 102 Grand Rapids, MI 49504 p. 616.235.0725 ext. 7007 e. schuemann@supportdept.com
Most likely. Can you post the content of your dictionary file? Or download 2.0.2 and see if that attribute is in dictionary.slipstream. If it is include it with the other dictionaries. Ivan Kalik Kalik Informatika ISP Dana 29/2/2008, "Dustin Schuemann" <schuemann@supportdept.com> piše:
Can I just add it ? On Feb 28, 2008, at 5:51 PM, Ivan Kalik wrote:
Add to your dictionary file at /usr/local/etc/raddb/dictionary:
Same file in Freeradius.
VENDORATTR 7000 Slipstream-Auth 1 string
You will find this in there:
#ATTRIBUTE My-Local-String 3000 string #ATTRIBUTE My-Local-IPAddr 3001 ipaddr #ATTRIBUTE My-Local-Integer 3002 integer
Change the first one to:
ATTRIBUTE Slipstream-Auth 3000 string
Restart the server for this to take effect. Use the attribute as instructed (but correct the first line as per instructions in users file if you are using a recent freeradius version). Attribute should appear in the Access-Accept packet if all goes well.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dustin Schuemann . Network Engineer .. . . . . . . . . . . . . . . . . . . . . . . . . . AMS/The Support Dept 400 Ann St NW Suite 102 Grand Rapids, MI 49504 p. 616.235.0725 ext. 7007 e. schuemann@supportdept.com
Ok I found that. Where do I add the stuff in my mysql database to allow that attribute. On Feb 29, 2008, at 5:19 AM, Ivan Kalik wrote:
Most likely. Can you post the content of your dictionary file?
Or download 2.0.2 and see if that attribute is in dictionary.slipstream. If it is include it with the other dictionaries.
Ivan Kalik Kalik Informatika ISP
Dana 29/2/2008, "Dustin Schuemann" <schuemann@supportdept.com> piše:
Can I just add it ? On Feb 28, 2008, at 5:51 PM, Ivan Kalik wrote:
Add to your dictionary file at /usr/local/etc/raddb/dictionary:
Same file in Freeradius.
VENDORATTR 7000 Slipstream-Auth 1 string
You will find this in there:
#ATTRIBUTE My-Local-String 3000 string #ATTRIBUTE My-Local-IPAddr 3001 ipaddr #ATTRIBUTE My-Local-Integer 3002 integer
Change the first one to:
ATTRIBUTE Slipstream-Auth 3000 string
Restart the server for this to take effect. Use the attribute as instructed (but correct the first line as per instructions in users file if you are using a recent freeradius version). Attribute should appear in the Access-Accept packet if all goes well.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dustin Schuemann . Network Engineer .. . . . . . . . . . . . . . . . . . . . . . . . . . AMS/The Support Dept 400 Ann St NW Suite 102 Grand Rapids, MI 49504 p. 616.235.0725 ext. 7007 e. schuemann@supportdept.com
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dustin Schuemann . Network Engineer . . . . . . . . . . . . . . . . . . . . . . . . . . AMS/The Support Dept 400 Ann St NW Suite 102 Grand Rapids, MI 49504 p. 616.235.0725 ext. 7007 e. schuemann@supportdept.com
That should be in the reply - so radreply or radgroupreply. Ivan Kalik Kalik Informatika ISP Dana 29/2/2008, "Dustin Schuemann" <schuemann@supportdept.com> piše:
Ok I found that. Where do I add the stuff in my mysql database to allow that attribute. On Feb 29, 2008, at 5:19 AM, Ivan Kalik wrote:
Most likely. Can you post the content of your dictionary file?
Or download 2.0.2 and see if that attribute is in dictionary.slipstream. If it is include it with the other dictionaries.
Ivan Kalik Kalik Informatika ISP
Dana 29/2/2008, "Dustin Schuemann" <schuemann@supportdept.com> pi�e:
Can I just add it ? On Feb 28, 2008, at 5:51 PM, Ivan Kalik wrote:
Add to your dictionary file at /usr/local/etc/raddb/dictionary:
Same file in Freeradius.
VENDORATTR 7000 Slipstream-Auth 1 string
You will find this in there:
#ATTRIBUTE My-Local-String 3000 string #ATTRIBUTE My-Local-IPAddr 3001 ipaddr #ATTRIBUTE My-Local-Integer 3002 integer
Change the first one to:
ATTRIBUTE Slipstream-Auth 3000 string
Restart the server for this to take effect. Use the attribute as instructed (but correct the first line as per instructions in users file if you are using a recent freeradius version). Attribute should appear in the Access-Accept packet if all goes well.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dustin Schuemann . Network Engineer .. . . . . . . . . . . . . . . . . . . . . . . . . . AMS/The Support Dept 400 Ann St NW Suite 102 Grand Rapids, MI 49504 p. 616.235.0725 ext. 7007 e. schuemann@supportdept.com
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dustin Schuemann . Network Engineer .. . . . . . . . . . . . . . . . . . . . . . . . . . AMS/The Support Dept 400 Ann St NW Suite 102 Grand Rapids, MI 49504 p. 616.235.0725 ext. 7007 e. schuemann@supportdept.com
On Thu, Feb 28, 2008 at 05:08:46PM -0500, Dustin Schuemann wrote:
Im working with dialup provider that is acting as the nas and they are authenticating off my radius server. Authentication works fine. They have this fastnet program that is supposed to make the internet faster. Attached is what they told me to do. I have added it to the dynamic group in mysql and the user is part of that group. But nothing.
If you run your own radius server:
VENDORATTR 7000 Slipstream-Auth 1 string
There is a dictionary.slipstream file in FreeRADIUS 2.x. You could just use that file even if you are on FreeRADIUS 1.x. Just make sure to add the appropriated $INCLUDE to the primary dictionary file. -- Scott Lambert KC5MLE Unix SysAdmin lambert@lambertfam.org
participants (3)
-
Dustin Schuemann -
Ivan Kalik -
Scott Lambert