one username and 2 NAS
Hi , I have freeradius configured with Mysql. I would like to have a user "pippo" can ssh login to 2 server linux wich uses pam_radius in /etc/pam.d/sshd (i.e. 2 NAS , same username). Freeradius must make the control if NAS-IP Address is ok for this user in the radcheck table.. I use the "==" operator end my radcheck table is: mysql> SELECT id, UserName, Attribute, Value, op from radcheck WHERE Username = 'pippo' order by id; +----+----------+----------------+---------------+----+ | id | UserName | Attribute | Value | op | +----+----------+----------------+---------------+----+ | 39 | pippo | NAS-IP-Address | 10.0.0.52 <http://10.0.0.52> | == | | 40 | pippo | NAS-IP-Address | 10.0.0.49 <http://10.0.0.49> | == | | 41 | pippo | Expiration | 1203325200 | == | | 42 | pippo | Crypt-Password | v7fawImvQUoXM | == | +----+----------+----------------+---------------+----+ It doesn't work...... Some ideas ??? Thank you Enrico
You have asked this once already. It has been answered. Ivan Kalik Kalik Informatika ISP Dana 18/2/2008, "Enrico Fanti" <efanti.list@gmail.com> piše:
Hi ,
I have freeradius configured with Mysql.
I would like to have a user "pippo" can ssh login to 2 server linux wich uses pam_radius in /etc/pam.d/sshd (i.e. 2 NAS , same username).
Freeradius must make the control if NAS-IP Address is ok for this user in the radcheck table..
I use the "==" operator end my radcheck table is:
mysql> SELECT id, UserName, Attribute, Value, op from radcheck WHERE Username = 'pippo' order by id; +----+----------+----------------+---------------+----+ | id | UserName | Attribute | Value | op | +----+----------+----------------+---------------+----+ | 39 | pippo | NAS-IP-Address | 10.0.0.52 <http://10.0.0.52> | == | | 40 | pippo | NAS-IP-Address | 10.0.0.49 <http://10.0.0.49> | == | | 41 | pippo | Expiration | 1203325200 | == | | 42 | pippo | Crypt-Password | v7fawImvQUoXM | == | +----+----------+----------------+---------------+----+
It doesn't work......
Some ideas ???
Thank you
Enrico
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Sorry. I mistake with my thunderbird button. I would like to know whatt'is the huntgroups concept in radius database. I have this db schema: mysql> show tables; +------------------+ | Tables_in_radius | +------------------+ | nas | | radacct | | radcheck | | radgroupcheck | | radgroupreply | | radippool | | radpostauth | | radreply | | usergroup | +------------------+ Thank you Enrico Ivan Kalik wrote:
You have asked this once already. It has been answered.
Ivan Kalik Kalik Informatika ISP
Dana 18/2/2008, "Enrico Fanti" <efanti.list@gmail.com> piše:
Hi ,
I have freeradius configured with Mysql.
I would like to have a user "pippo" can ssh login to 2 server linux wich uses pam_radius in /etc/pam.d/sshd (i.e. 2 NAS , same username).
Freeradius must make the control if NAS-IP Address is ok for this user in the radcheck table..
I use the "==" operator end my radcheck table is:
mysql> SELECT id, UserName, Attribute, Value, op from radcheck WHERE Username = 'pippo' order by id; +----+----------+----------------+---------------+----+ | id | UserName | Attribute | Value | op | +----+----------+----------------+---------------+----+ | 39 | pippo | NAS-IP-Address | 10.0.0.52 <http://10.0.0.52> | == | | 40 | pippo | NAS-IP-Address | 10.0.0.49 <http://10.0.0.49> | == | | 41 | pippo | Expiration | 1203325200 | == | | 42 | pippo | Crypt-Password | v7fawImvQUoXM | == | +----+----------+----------------+---------------+----+
It doesn't work......
Some ideas ???
Thank you
Enrico
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
It's a file in raddb directory, not a part of the database schema. Ivan Kalik Kalik Informatika ISP Dana 18/2/2008, "Enrico Fanti" <efanti.list@gmail.com> piše:
Sorry.
I mistake with my thunderbird button.
I would like to know whatt'is the huntgroups concept in radius database. I have this db schema:
mysql> show tables; +------------------+ | Tables_in_radius | +------------------+ | nas | | radacct | | radcheck | | radgroupcheck | | radgroupreply | | radippool | | radpostauth | | radreply | | usergroup | +------------------+
Thank you
Enrico
Ivan Kalik wrote:
You have asked this once already. It has been answered.
Ivan Kalik Kalik Informatika ISP
Dana 18/2/2008, "Enrico Fanti" <efanti.list@gmail.com> piše:
Hi ,
I have freeradius configured with Mysql.
I would like to have a user "pippo" can ssh login to 2 server linux wich uses pam_radius in /etc/pam.d/sshd (i.e. 2 NAS , same username).
Freeradius must make the control if NAS-IP Address is ok for this user in the radcheck table..
I use the "==" operator end my radcheck table is:
mysql> SELECT id, UserName, Attribute, Value, op from radcheck WHERE Username = 'pippo' order by id; +----+----------+----------------+---------------+----+ | id | UserName | Attribute | Value | op | +----+----------+----------------+---------------+----+ | 39 | pippo | NAS-IP-Address | 10.0.0.52 <http://10.0.0.52> | == | | 40 | pippo | NAS-IP-Address | 10.0.0.49 <http://10.0.0.49> | == | | 41 | pippo | Expiration | 1203325200 | == | | 42 | pippo | Crypt-Password | v7fawImvQUoXM | == | +----+----------+----------------+---------------+----+
It doesn't work......
Some ideas ???
Thank you
Enrico
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/usershtml
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Ok, Thank you. But for yiu, it's possible to use mysql for my target ? If yes, do you have any ideas? I would like to have a system (PHP-Mysql) to configure my server radius without use text files. Thank you Enrico Ivan Kalik wrote:
It's a file in raddb directory, not a part of the database schema.
Ivan Kalik Kalik Informatika ISP
Dana 18/2/2008, "Enrico Fanti" <efanti.list@gmail.com> piše:
Sorry.
I mistake with my thunderbird button.
I would like to know whatt'is the huntgroups concept in radius database. I have this db schema:
mysql> show tables; +------------------+ | Tables_in_radius | +------------------+ | nas | | radacct | | radcheck | | radgroupcheck | | radgroupreply | | radippool | | radpostauth | | radreply | | usergroup | +------------------+
Thank you
Enrico
Ivan Kalik wrote:
You have asked this once already. It has been answered.
Ivan Kalik Kalik Informatika ISP
Dana 18/2/2008, "Enrico Fanti" <efanti.list@gmail.com> piše:
Hi ,
I have freeradius configured with Mysql.
I would like to have a user "pippo" can ssh login to 2 server linux wich uses pam_radius in /etc/pam.d/sshd (i.e. 2 NAS , same username).
Freeradius must make the control if NAS-IP Address is ok for this user in the radcheck table..
I use the "==" operator end my radcheck table is:
mysql> SELECT id, UserName, Attribute, Value, op from radcheck WHERE Username = 'pippo' order by id; +----+----------+----------------+---------------+----+ | id | UserName | Attribute | Value | op | +----+----------+----------------+---------------+----+ | 39 | pippo | NAS-IP-Address | 10.0.0.52 <http://10.0.0.52> | == | | 40 | pippo | NAS-IP-Address | 10.0.0.49 <http://10.0.0.49> | == | | 41 | pippo | Expiration | 1203325200 | == | | 42 | pippo | Crypt-Password | v7fawImvQUoXM | == | +----+----------+----------------+---------------+----+
It doesn't work......
Some ideas ???
Thank you
Enrico
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/usershtml
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Not easy. For instance you can add NAS-IP-Address field to usergroup table and alter the group membership query. But making it work for other users might be difficult. So you can make multiple SQL instances ... It might be more trouble than it's worth. In most cases it makes more sense to use provided functionality than to go hacking the configuration files. Ivan Kalik Kalik informatika ISP Dana 19/2/2008, "Enrico Fanti" <efanti.list@gmail.com> piše:
Ok, Thank you.
But for yiu, it's possible to use mysql for my target ?
If yes, do you have any ideas?
I would like to have a system (PHP-Mysql) to configure my server radius without use text files.
Thank you
Enrico
Ivan Kalik wrote:
It's a file in raddb directory, not a part of the database schema.
Ivan Kalik Kalik Informatika ISP
Dana 18/2/2008, "Enrico Fanti" <efanti.list@gmail.com> piše:
Sorry.
I mistake with my thunderbird button.
I would like to know whatt'is the huntgroups concept in radius database. I have this db schema:
mysql> show tables; +------------------+ | Tables_in_radius | +------------------+ | nas | | radacct | | radcheck | | radgroupcheck | | radgroupreply | | radippool | | radpostauth | | radreply | | usergroup | +------------------+
Thank you
Enrico
Ivan Kalik wrote:
You have asked this once already. It has been answered.
Ivan Kalik Kalik Informatika ISP
Dana 18/2/2008, "Enrico Fanti" <efanti.list@gmail.com> piše:
Hi ,
I have freeradius configured with Mysql.
I would like to have a user "pippo" can ssh login to 2 server linux wich uses pam_radius in /etc/pam.d/sshd (i.e. 2 NAS , same username).
Freeradius must make the control if NAS-IP Address is ok for this user in the radcheck table..
I use the "==" operator end my radcheck table is:
mysql> SELECT id, UserName, Attribute, Value, op from radcheck WHERE Username = 'pippo' order by id; +----+----------+----------------+---------------+----+ | id | UserName | Attribute | Value | op | +----+----------+----------------+---------------+----+ | 39 | pippo | NAS-IP-Address | 10.0.0.52 <http://10.0.0.52> | == | | 40 | pippo | NAS-IP-Address | 10.0.0.49 <http://10.0.0.49> | == | | 41 | pippo | Expiration | 1203325200 | == | | 42 | pippo | Crypt-Password | v7fawImvQUoXM | == | +----+----------+----------------+---------------+----+
It doesn't work......
Some ideas ???
Thank you
Enrico
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/usershtml
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/usershtml
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Enrico Fanti -
Ivan Kalik