Peter Nixon <listuser@peternixon.net> said:
On Thu 28 Jun 2007, Hugh Messenger wrote:
Peter Nixon <listuser@peternixon.net> said:
On Thu 28 Jun 2007, Alan DeKok wrote:
Hugh Messenger wrote:
With my current configuration, if sqlippool cannot assign an IP, the authentication still succeeds.
The module returns NOOP. It could arguable return "fail".
Just a nitpick, but for pool depletion it returns 'notfound'.
Can you suggest a better return code?
Not at all. I was just responding to Alan's comment above that "the module returns NOOP". My bad, trying to respond to two people in one email.
I am assuming you have already read: http://wiki.freeradius.org/Rlm_sqlippool
If not please do so :-)
I had read it (several times) but as is often the case I misunderstood some of it. I now realize the failover example does do what I'd expect (not failing over on a notfound).
Speaking of which. What would be the simplest way of having an email alert if a 'notfound' happens? This is all for PPPOE wireless clients, which are carefully provisioned. So we should never end up running out of dynamic pool space, and I need to know about it if we do.
logwatch/swatch/splunk etc ;-)
I'm a splunker, as it happens. Which was indeed what I figured I'd use if there was no built in mechanism. [inserted from your followup mail]
Of course you COULD write an external mail script and run it as a radiusd "exec" module. (or something with rlm_perl/rlm_python)
I've been looking for a simple test case to try out rlm_perl, I might give that a go.
Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
As usual, thanks for your help. -- hugh
I have an issue My software issues the Ascend-Data-Filter as such to the users file Ascend-Data-Filter = "ip in forward tcp est", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in drop tcp dstport = 25", Ascend-Data-Filter = "ip in forward", I have noticed to get the Ascend-Data-Filter to read th other filters to the next line it needs the += or its stops on the 1st one. IE I have to do this with freeradius to read each line Ascend-Data-Filter += "ip in forward tcp est", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in drop tcp dstport = 25", Ascend-Data-Filter += "ip in forward", Which is out of context with other radius servers I am dealing with Is it possible to get freeradius to read each line and keep the syntax as the = instead of += If I could do as such as the format as my other servers would help me trmendously. I actually though the standard was = instead of +=
Are those filters different for every user? If they are the same (or there are just a few conbinations) make DEFAULT entry with them and don't put them in every users configuration. Ivan Kalik Kalik Informatika ISP Dana 29/6/2007, "Jeff" <jeffa@jahelpdesk.com> piše:
I have an issue
My software issues the Ascend-Data-Filter as such to the users file
Ascend-Data-Filter = "ip in forward tcp est", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in drop tcp dstport = 25", Ascend-Data-Filter = "ip in forward",
I have noticed to get the Ascend-Data-Filter to read th other filters to the next line it needs the += or its stops on the 1st one.
IE I have to do this with freeradius to read each line
Ascend-Data-Filter += "ip in forward tcp est", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in drop tcp dstport = 25", Ascend-Data-Filter += "ip in forward",
Which is out of context with other radius servers I am dealing with
Is it possible to get freeradius to read each line and keep the syntax as the = instead of +=
If I could do as such as the format as my other servers would help me trmendously.
I actually though the standard was = instead of +=
suppose we could, but it does grow. Be nice if one could have the file include another file for defaults and call that file from the users file _____ From: tnt@kalik.co.yu To: FreeRadius users mailing list [mailto:freeradius-users@lists.freeradius.org] Sent: Fri, 29 Jun 2007 17:36:57 -0400 Subject: Re: Ascend-Data-Filter Issues Are those filters different for every user? If they are the same (or there are just a few conbinations) make DEFAULT entry with them and don't put them in every users configuration. Ivan Kalik Kalik Informatika ISP Dana 29/6/2007, "Jeff" <jeffa@jahelpdesk.com> piše:
I have an issue
My software issues the Ascend-Data-Filter as such to the users file
Ascend-Data-Filter = "ip in forward tcp est", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in drop tcp dstport = 25", Ascend-Data-Filter = "ip in forward",
I have noticed to get the Ascend-Data-Filter to read th other filters to the next line it needs the += or its stops on the 1st one.
IE I have to do this with freeradius to read each line
Ascend-Data-Filter += "ip in forward tcp est", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in drop tcp dstport = 25", Ascend-Data-Filter += "ip in forward",
Which is out of context with other radius servers I am dealing with
Is it possible to get freeradius to read each line and keep the syntax as the = instead of +=
If I could do as such as the format as my other servers would help me trmendously.
I actually though the standard was = instead of +=
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
No need. You can create groups with rlm_password, make DEFAULT entry for each group and add appropriate filters to users in those groups. Ivan Kalik Kalik Informatika ISP Dana 29/6/2007, "Jeff" <jeffa@jahelpdesk.com> piše:
suppose we could, but it does grow. Be nice if one could have the file include another file for defaults and call that file from the users file _____
From: tnt@kalik.co.yu To: FreeRadius users mailing list [mailto:freeradius-users@lists.freeradius.org] Sent: Fri, 29 Jun 2007 17:36:57 -0400 Subject: Re: Ascend-Data-Filter Issues
Are those filters different for every user? If they are the same (or there are just a few conbinations) make DEFAULT entry with them and don't put them in every users configuration.
Ivan Kalik Kalik Informatika ISP
Dana 29/6/2007, "Jeff" <jeffa@jahelpdesk.com> piĹĄe:
I have an issue
My software issues the Ascend-Data-Filter as such to the users file
Ascend-Data-Filter = "ip in forward tcp est", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in drop tcp dstport = 25", Ascend-Data-Filter = "ip in forward",
I have noticed to get the Ascend-Data-Filter to read th other filters to the next line it needs the += or its stops on the 1st one.
IE I have to do this with freeradius to read each line
Ascend-Data-Filter += "ip in forward tcp est", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in drop tcp dstport = 25", Ascend-Data-Filter += "ip in forward",
Which is out of context with other radius servers I am dealing with
Is it possible to get freeradius to read each line and keep the syntax as the = instead of +=
If I could do as such as the format as my other servers would help me trmendously.
I actually though the standard was = instead of +=
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I have never used that, where is the documentation on setting the up, ie using filters, etc _____ From: tnt@kalik.co.yu To: FreeRadius users mailing list [mailto:freeradius-users@lists.freeradius.org] Sent: Fri, 29 Jun 2007 19:29:10 -0400 Subject: Re: Ascend-Data-Filter Issues No need. You can create groups with rlm_password, make DEFAULT entry for each group and add appropriate filters to users in those groups. Ivan Kalik Kalik Informatika ISP Dana 29/6/2007, "Jeff" <jeffa@jahelpdesk.com> piše:
suppose we could, but it does grow. Be nice if one could have the file include another file for defaults and call that file from the users file _____
From: tnt@kalik.co.yu To: FreeRadius users mailing list [mailto:freeradius-users@lists.freeradius.org] Sent: Fri, 29 Jun 2007 17:36:57 -0400 Subject: Re: Ascend-Data-Filter Issues
Are those filters different for every user? If they are the same (or there are just a few conbinations) make DEFAULT entry with them and don't put them in every users configuration.
Ivan Kalik Kalik Informatika ISP
Dana 29/6/2007, "Jeff" <jeffa@jahelpdesk.com> piĹĄe:
I have an issue
My software issues the Ascend-Data-Filter as such to the users file
Ascend-Data-Filter = "ip in forward tcp est", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in drop tcp dstport = 25", Ascend-Data-Filter = "ip in forward",
I have noticed to get the Ascend-Data-Filter to read th other filters to the next line it needs the += or its stops on the 1st one.
IE I have to do this with freeradius to read each line
Ascend-Data-Filter += "ip in forward tcp est", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in drop tcp dstport = 25", Ascend-Data-Filter += "ip in forward",
Which is out of context with other radius servers I am dealing with
Is it possible to get freeradius to read each line and keep the syntax as the = instead of +=
If I could do as such as the format as my other servers would help me trmendously.
I actually though the standard was = instead of +=
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Never mind I found it, let my fingers do the walking _____ From: Jeff [mailto:jeffa@jahelpdesk.com] To: FreeRadius users mailing list [mailto:freeradius-users@lists.freeradius.org] Sent: Fri, 29 Jun 2007 20:37:25 -0400 Subject: Re: Ascend-Data-Filter Issues I have never used that, where is the documentation on setting the up, ie using filters, etc _____ From: tnt@kalik.co.yu To: FreeRadius users mailing list [mailto:freeradius-users@lists.freeradius.org] Sent: Fri, 29 Jun 2007 19:29:10 -0400 Subject: Re: Ascend-Data-Filter Issues No need. You can create groups with rlm_password, make DEFAULT entry for each group and add appropriate filters to users in those groups. Ivan Kalik Kalik Informatika ISP Dana 29/6/2007, "Jeff" <jeffa@jahelpdesk.com> piše:
suppose we could, but it does grow. Be nice if one could have the file include another file for defaults and call that file from the users file _____
From: tnt@kalik.co.yu To: FreeRadius users mailing list [mailto:freeradius-users@lists.freeradius.org] Sent: Fri, 29 Jun 2007 17:36:57 -0400 Subject: Re: Ascend-Data-Filter Issues
Are those filters different for every user? If they are the same (or there are just a few conbinations) make DEFAULT entry with them and don't put them in every users configuration.
Ivan Kalik Kalik Informatika ISP
Dana 29/6/2007, "Jeff" <jeffa@jahelpdesk.com> piĹĄe:
I have an issue
My software issues the Ascend-Data-Filter as such to the users file
Ascend-Data-Filter = "ip in forward tcp est", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter = "ip in drop tcp dstport = 25", Ascend-Data-Filter = "ip in forward",
I have noticed to get the Ascend-Data-Filter to read th other filters to the next line it needs the += or its stops on the 1st one.
IE I have to do this with freeradius to read each line
Ascend-Data-Filter += "ip in forward tcp est", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in forward dstip a.a.a.a/32", Ascend-Data-Filter += "ip in drop tcp dstport = 25", Ascend-Data-Filter += "ip in forward",
Which is out of context with other radius servers I am dealing with
Is it possible to get freeradius to read each line and keep the syntax as the = instead of +=
If I could do as such as the format as my other servers would help me trmendously.
I actually though the standard was = instead of +=
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Jeff wrote:
My software issues the Ascend-Data-Filter as such to the users file
As you've noted before. The answer won't change.
I have noticed to get the Ascend-Data-Filter to read th other filters to the next line it needs the += or its stops on the 1st one.
The documentation describes this behavior, and explains it.
Which is out of context with other radius servers I am dealing with
Different products. Different behaviors. If this is a problem, please call Ford, and ask them why their cars don't look the same as GM's cars.
Is it possible to get freeradius to read each line and keep the syntax as the = instead of +=
Sure. Patch the source code. That's why source is included.
If I could do as such as the format as my other servers would help me trmendously.
I actually though the standard was = instead of +=
There is no standard for the "users" file. None. FreeRADIUS (and Cistron before it) have been doing it this way for nearly 10 years now. Any software that can't produce "users" file entries for FreeRADIUS is broken. The manufacturers have chosen to not support the most popular and widely used RADIUS server on the planet. Alan DeKok.
Actually the best answer for me if I were alittle stronger in mysql to create the import query would be a script that I could run to convert the users and import them into the radius database when our billing software adds removes locks accounts, then dealing with the filters, etc. That way billing program creates file, query imports to sql, radius operates through the sql end and not users file I have seen the one in the source, users2mysql just not sure its actually the correct format to import usersfor what i need. I was thinking del all imported items when a new users file is ready for import then repopulate with the import query the new. Then auths, etc would be handled through the sql end where the control is alot easier and appears more effective And I could be running things as freeradius is designed to run. Thus my stuff adapts to the workiing model, instead of me trying to change a working model to mine. _____ From: Alan DeKok [mailto:aland@deployingradius.com] To: FreeRadius users mailing list [mailto:freeradius-users@lists.freeradius.org] Sent: Sat, 30 Jun 2007 01:26:22 -0400 Subject: Re: Ascend-Data-Filter Issues Jeff wrote:
My software issues the Ascend-Data-Filter as such to the users file
As you've noted before. The answer won't change.
I have noticed to get the Ascend-Data-Filter to read th other filters to the next line it needs the += or its stops on the 1st one.
The documentation describes this behavior, and explains it.
Which is out of context with other radius servers I am dealing with
Different products. Different behaviors. If this is a problem, please call Ford, and ask them why their cars don't look the same as GM's cars.
Is it possible to get freeradius to read each line and keep the syntax as the = instead of +=
Sure. Patch the source code. That's why source is included.
If I could do as such as the format as my other servers would help me trmendously.
I actually though the standard was = instead of +=
There is no standard for the "users" file. None. FreeRADIUS (and Cistron before it) have been doing it this way for nearly 10 years now. Any software that can't produce "users" file entries for FreeRADIUS is broken. The manufacturers have chosen to not support the most popular and widely used RADIUS server on the planet. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Alan DeKok -
Hugh Messenger -
Jeff -
tnt＠kalik.co.yu