Thanks, that's ok now. I removed the block as you said and now it shows the queries. I had added those block earlier because I've seen this configuration from another post as a working sqlippool configuration... Now, if netmask does not exist, nor range-start - range-stop, how can I specify that in radippool? Please remember that I'm using Oracle and it does not have "inet" like postgres, so I've created the tables like this: CREATE TABLE radippool ( id INT PRIMARY KEY, pool_name VARCHAR(30) NOT NULL, framedipaddress VARCHAR(30) NOT NULL, nasipaddress VARCHAR(30) NOT NULL, nas_port INT NOT NULL, calling_station_id VARCHAR(30) NOT NULL, expiry_time timestamp(0) NOT NULL, username VARCHAR(100) ); CREATE INDEX radippool_poolname_ipaadr ON radippool (pool_name, framedipaddress); CREATE INDEX radippool_poolname_expire ON radippool (pool_name, expiry_time); CREATE INDEX radippool_nasipaddr_port ON radippool (nas_ip_address, nas_port); CREATE INDEX radippool_nasipaddr_calling ON radippool (nas_ip_address, calling_station_id); CREATE SEQUENCE radippool_seq START WITH 1 INCREMENT BY 1; CREATE OR REPLACE TRIGGER radippool_serialnumber BEFORE INSERT OR UPDATE OF id ON radippool FOR EACH ROW BEGIN if ( :new.id = 0 or :new.id is null ) then SELECT radippool_seq.nextval into :new.id from dual; end if; END; / How can I use this, please? Sorry for bothering about everything, but everytime I have a question, I first search through the entire freeradius maillist, man pages, docs as well as thoroughly in google. The problem is that usually I don't find much information about those things, so I come back here to ask. Thanks a lot! On 9/20/06, Tuyan Ozipek <tuyan@suntel.com.tr> wrote:
On Wed, 2006-09-20 at 14:14 -0300, Guilherme Franco wrote:
Hello,
Unfortunately, even with freeradius-snapshot-20060920.tar.gz and using the ./configure --with-modules="rlm_sqlippool" option, the module did not install.
I needed again, to compile it manuallyThe following is in my radiusd.conf:
$INCLUDE ${confdir}/sqlippool.conf
get rid of this block, since there is no need for range,netmask,cache-size,override,timeout... in sqlipoool.. --------------------------------------------------- sqlippool foo {
range-start = 192.168.1.1 range-stop = 192.168.3.254
netmask = 255.255.255.0 cache-size = 800 override = no maximum-timeout = 0 } ----------------------------------------------------
you are missing the first pools trace in the messages and all youre seeing is the misconfiguration on the second sqlippool instance.. just keep the $INCLUDE directive, and remove the rest.. there is already an ippool configured in the sqlippool.conf file..
Cheers
Tuyan
freeradius-snapshot-20060920/src/modules/rlm_sqlippool/
And then, the same problem persists:
Module: Loaded SQL IP Pool sqlippool: sql-instance-name = "sql" sqlippool: lease-duration = 86400 sqlippool: pool-name = "" sqlippool: allocate-begin = "BEGIN" sqlippool: allocate-clear = "" sqlippool: allocate-find = "" sqlippool: allocate-update = "" sqlippool: allocate-commit = "COMMIT" sqlippool: allocate-rollback = "ROLLBACK" sqlippool: start-begin = "BEGIN" sqlippool: start-update = "" sqlippool: start-commit = "COMMIT" sqlippool: start-rollback = "ROLLBACK" sqlippool: alive-begin = "BEGIN" sqlippool: alive-update = "" sqlippool: alive-commit = "COMMIT" sqlippool: alive-rollback = "ROLLBACK" sqlippool: stop-begin = "BEGIN" sqlippool: stop-clear = "" sqlippool: stop-commit = "COMMIT" sqlippool: stop-rollback = "ROLLBACK" sqlippool: on-begin = "BEGIN" sqlippool: on-clear = "" sqlippool: on-commit = "COMMIT" sqlippool: on-rollback = "ROLLBACK" sqlippool: off-begin = "BEGIN" sqlippool: off-clear = "" sqlippool: off-commit = "COMMIT" sqlippool: off-rollback = "ROLLBACK" rlm_sqlippool: the 'allocate-clear' statement must be set.
The following is in my radiusd.conf:
$INCLUDE ${confdir}/sqlippool.conf
sqlippool foo {
range-start = 192.168.1.1 range-stop = 192.168.3.254
netmask = 255.255.255.0 cache-size = 800 override = no maximum-timeout = 0 }
------------------------
I didn't modified my sqlippool.conf, so it's the same as sqlipool.conf,v 1.3 2006/09/13 12:49:37 pnixon Exp $
What can it be?
Also, what values should I populate in radippool table?
PS. Some things left: IN configure.in (rlm_sql_oracle) checking for oci.h... configure: WARNING: PETER XXXXXXXXXXXXXXXX1.
IN oracle-dialup.conf # Optional Query - pnixon #accounting_stop_query =3D
Another issue: with oracle instant_client_10_2, rlm_sql_oracle would not find it's libs, even when the required paths are configured. The only way that I managed to install it was copying the whole oracle folder to the freeradius server. I know that simply a matter of changing the 10.1.0.3 version and something to the new one in configure.in of rlm_sql_oracle, but I was in a rush:
# Look for Oracle10g "Instant Client" installed from RPM if test "x$ORACLE_INCLUDE" = "x"; then old_CFLAGS="$CFLAGS"
AC_MSG_WARN([PETER XXXXXXXXXXXXXXXX1.]) FR_LOCATE_DIR(oracle_include_dir,oci.h) for try in /usr/include/oracle/10.1.0.3/
THANK YOU!
On 9/20/06, Peter Nixon <listuser@peternixon.net> wrote:
On Wed 20 Sep 2006 05:49, Guilherme Franco wrote:
I need to thank you again and congratulate you guys for such a great support.
You're welcome. Thanks for helping us make FreeRADIUS better :-)
Question: Even with freeradius-snapshot-20060920.tar.gz I will need to use ./configure --with-modules="rlm_sqlippool"?
Yes. This is because the module is sill considered experimental and is therefore not enabled by default.
If all works well, I assume that in radcheck table, the users need to have "Pool-Name := test_pool" right?
Yes. You need to tell FreeRADIUS which pool (if any) to use for that user. With sqlippool there is effectively no limit on the number of pools you may have configured (Only limit is disk space on your SQL server and IP space on your network)
Cheers
--
Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Tuyan Ozipek <tuyan@suntel.com.tr>
On Wed 20 Sep 2006 23:32, Guilherme Franco wrote:
Thanks, that's ok now.
I removed the block as you said and now it shows the queries. I had added those block earlier because I've seen this configuration from another post as a working sqlippool configuration...
OK. Well, if you had just used the existing config files instead of adding your own broken config it would have worked all along :-)
Now, if netmask does not exist, nor range-start - range-stop, how can I specify that in radippool?
You do not! As "doc/rlm_sqlippool" states: The initialization of the radippool table is left to the user instead of being handled inside the module. This allows pool management to be done from any sql capable programming language and pools can be created, resized, deleted at run time without radiusd needing to be restarted. The only required fields are, pool_name and ip_address. A pool consists of one or more rows in the table with the same pool_name and a different ip_address. The is no restriction on which ip addresses/ranges may be in the same pool, and addresses do not need to be concurrent. The fact that you are asking this means that you did NOT read the docs :-)
Please remember that I'm using Oracle and it does not have "inet" like postgres, so I've created the tables like this:
You are going to have to work out the oracle specifics yourself but the structure you have looks ok to me. The INET type is not necessary, although it IS more efficient. Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
Thanks, I used that broken config because it was stated in freeradius user list as "Sucsessfully installed rlm_sqlippool" from Alfred H. Dahl in Tue, 8 Feb 2005 20:58:34 +0100. I did read the docs. I only didn't know how could I specify 192.168.1.1/28, if I do not have inet, but that's ok. Thanks everybody, I'm going to test all until it works now! Case closed, thanks. On 9/20/06, Peter Nixon <listuser@peternixon.net> wrote:
On Wed 20 Sep 2006 23:32, Guilherme Franco wrote:
Thanks, that's ok now.
I removed the block as you said and now it shows the queries. I had added those block earlier because I've seen this configuration from another post as a working sqlippool configuration...
OK. Well, if you had just used the existing config files instead of adding your own broken config it would have worked all along :-)
Now, if netmask does not exist, nor range-start - range-stop, how can I specify that in radippool?
You do not! As "doc/rlm_sqlippool" states:
The initialization of the radippool table is left to the user instead of being handled inside the module. This allows pool management to be done from any sql capable programming language and pools can be created, resized, deleted at run time without radiusd needing to be restarted.
The only required fields are, pool_name and ip_address. A pool consists of one or more rows in the table with the same pool_name and a different ip_address. The is no restriction on which ip addresses/ranges may be in the same pool, and addresses do not need to be concurrent.
The fact that you are asking this means that you did NOT read the docs :-)
Please remember that I'm using Oracle and it does not have "inet" like postgres, so I've created the tables like this:
You are going to have to work out the oracle specifics yourself but the structure you have looks ok to me. The INET type is not necessary, although it IS more efficient.
Cheers
--
Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Thu 21 Sep 2006 03:03, Guilherme Franco wrote:
Thanks,
I used that broken config because it was stated in freeradius user list as "Sucsessfully installed rlm_sqlippool" from Alfred H. Dahl in Tue, 8 Feb 2005 20:58:34 +0100.
At that time rlm_sqlippool did not exist as part of FreeRADIUS. You were reading a post about one of two possible external patches for FreeRADIUS.
I did read the docs.
I only didn't know how could I specify 192.168.1.1/28, if I do not have inet, but that's ok.
That is not in MY docs.....
Thanks everybody, I'm going to test all until it works now!
No Problem.
Case closed, thanks.
Great -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
participants (2)
-
Guilherme Franco -
Peter Nixon