Re: Freeradius-Users Digest, Vol 46, Issue 105 SOLVED - Why is groupname fieldblank in radacct - Freeradius-Users

3 Mar 2009

      Thanks Kalik,

We changed the default sql to allow it to actually insert the grouname.

2009/2/26 <freeradius-users-request@lists.freeradius.org>
...
Send Freeradius-Users mailing list submissions to
       freeradius-users@lists.freeradius.org
To subscribe or unsubscribe via the World Wide Web, visit
       http://lists.freeradius.org/mailman/listinfo/freeradius-users
or, via email, send a message with subject or body 'help' to
       freeradius-users-request@lists.freeradius.org
You can reach the person managing the list at
       freeradius-users-owner@lists.freeradius.org
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Freeradius-Users digest..."
Today's Topics:
1. Re: SQLCounter configuration (Alan DeKok)
  2. Re: SQLCounter configuration (Alexander Solodukhin)
  3. Re: EAP-PEAP GTC auth_type (tnt@kalik.net)
  4. Re: Freeradius-Users Digest, Vol 46,      Issue 102 Why is
     groupname fieldblank in radacct (tnt@kalik.net)
----------------------------------------------------------------------
Message: 1
Date: Thu, 26 Feb 2009 11:03:22 +0100
From: Alan DeKok <aland@deployingradius.com>
Subject: Re: SQLCounter configuration
To: FreeRadius users mailing list
       <freeradius-users@lists.freeradius.org>
Message-ID: <49A668EA.40702@deployingradius.com>
Content-Type: text/plain; charset=ISO-8859-1
alt_ wrote:
...
Can you show some examples please? I try to do like this:
noresetBytecounter
if (reject) {
        update reply {
            Reply-Message := "Traffic limit exceeded."
        }
    }
but if noresetBytecounter return reject freeradius immediatly return
reject
to user and do not process 'if' clause
You need to put this in the "post-auth" section, "Reject" subsection.
 See the example configuration files.
Alan DeKok.
------------------------------
Message: 2
Date: Thu, 26 Feb 2009 12:12:50 +0200
From: "Alexander Solodukhin" <alt@softwarium.net>
Subject: Re: SQLCounter configuration
To: "FreeRadius users mailing list"
       <freeradius-users@lists.freeradius.org>
Message-ID: <op.upyenokwqsf5os@demon.cris.net>
Content-Type: text/plain; format=flowed; delsp=yes; charset=koi8-r
On Thu, 26 Feb 2009 12:03:22 +0200, Alan DeKok <aland@deployingradius.com>
wrote:
...
alt_ wrote:
...
Can you show some examples please? I try to do like this:
noresetBytecounter
if (reject) {
        update reply {
            Reply-Message := "Traffic limit exceeded."
        }
    }
but if noresetBytecounter return reject freeradius immediatly return
reject
to user and do not process 'if' clause
You need to put this in the "post-auth" section, "Reject" subsection.
 See the example configuration files.
/etc/freeradius/sites-enabled/default[412]: "SQL Counter" modules aren't
allowed in 'post-auth' sections -- they have no such method.
--
ISP CrIS, Softwarium
------------------------------
Message: 3
Date: Thu, 26 Feb 2009 11:14:37 +0100
From: <tnt@kalik.net>
Subject: Re: EAP-PEAP GTC auth_type
To: "FreeRadius users mailing list"
       <freeradius-users@lists.freeradius.org>
Message-ID: <FwAfhIxV.1235643277.5432590.tnt@kalik.net>
Content-Type: text/plain; charset=ISO-8859-2
...
Great! It works perfectly.
Other than enabling ldap in authorize and authenticate in
inner-tunnel, I also had to change eap.conf's gtc section to auth_type
= LDAP.
This works, but it brings up another problem. Setting auth_type to
PAP, Local, or commented out on gtc section does not work for LDAP. On
the other hand, If I set auth_type = LDAP, PEAP-GTC with system user
(which works if I set auth_type = PAP on gtc section) does not work.
Is there a way I can authenticate with BOTH system user and LDAP using
PEAP-GTC?
the main radiusd.conf can have multiple authorize methods available,
right? Why does gct have to explicitly set auth_type?
Leave gtc as pap. Change set_auth_type to no in ldap module
configuration. Module will then just collect the password and pass it to
pap module for authentication. It will not do "bind as user" ldap
authentication.
Ivan Kalik
Kalik Informatika ISP
------------------------------
Message: 4
Date: Thu, 26 Feb 2009 11:34:28 +0100
From: <tnt@kalik.net>
Subject: Re: Freeradius-Users Digest, Vol 46,   Issue 102 Why is
       groupname fieldblank in radacct
To: "FreeRadius users mailing list"
       <freeradius-users@lists.freeradius.org>
Message-ID: <I1ceiOfk.1235644468.0624740.tnt@kalik.net>
Content-Type: text/plain; charset=ISO-8859-2
...
I have MySQL 5.0.67 and PostgreSQL 8.3.6 and freeRADIUS 2.17 installed on
GNU/Linux Fedora 10 distribution. I have identical radius databases on
both
MySQL and PostgreSQL. When I use the PostgreSQL, the groupname field in
the
radacct table gets filled in but when I change the database to MySQL, the
groupname filled is blank. I checked the queries in mysql/diaup.conf and
postgresql/dialup.conf and found out that they are the same. Why is it
working with PostgreSQL and not working with MySQL? The groupnames are
defined in radusergroup table.
Default queries that come with the source don't write to groupname
field. MySQL or PostgreSQL. You can place Class in radgroupreply and
give it the value of the group name. Then put %{Class} into groupname
field in accounting queries.
Ivan Kalik
Kalik Informatika ISP
------------------------------
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
End of Freeradius-Users Digest, Vol 46, Issue 105
*************************************************

Re: Freeradius-Users Digest, Vol 46, Issue 105 SOLVED - Why is groupname fieldblank in radacct

ngwarai zed

tags

participants (1)