Hi, I try to use daloradius ad frontend. In proxy.conf file there is two realm: realm motp_1 { type = radius authhost = 10.1.1.52 accthost = 10.1.1.52 secret = test } realm motp_2 { type = radius authhost = 10.43.1.52 accthost = 10.43.1.52 secret = test } But Dont know how to group those realm to load balancing I can do it by using "home_server" in another freeradius Any idea? <br> <img src="http://www.yasar.com.tr/banner/yhbanner.jpg"> </img> <br><br> Bu elektronik postada bulunan tum fikir ve gorusler ve ekindeki dosyalar sadece adres sahip/sahiplerine ait olup, Yasar Toplulugu Sirketleri bu mesajin icerigi ile ilgili olarak hic bir hukuksal sorumlulugu kabul etmez. Eger gonderilmesi dusunulen kisi veya kurulus degilseniz, lutfen gonderen kisiyi derhal haberdar ediniz ve mesaji sisteminizden siliniz.The information contained in this e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed and Yasar Group Companies do not accept legal responsibility for the contents. If you are not the intended recipient, please immediately notify the sender and delete it from your system.

It explains wht should be in new configuration. I need to see old style configuration. But cant reach anywhere. On 01/08/2015 06:30 PM, Alan DeKok wrote:

On Jan 8, 2015, at 10:18 AM, Tevfik Ceydeliler <tevfik.ceydeliler@astron.yasar.com.tr> wrote:

...

But Dont know how to group those realm to load balancing I can do it by using "home_server" in another freeradius Any idea? Read raddb/proxy.conf. This is documented.

Alan DeKok.

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- <br> <img src="http://www.yasar.com.tr/banner/yhbanner.jpg"> </img> <br><br> Bu elektronik postada bulunan tum fikir ve gorusler ve ekindeki dosyalar sadece adres sahip/sahiplerine ait olup, Yasar Toplulugu Sirketleri bu mesajin icerigi ile ilgili olarak hic bir hukuksal sorumlulugu kabul etmez. Eger gonderilmesi dusunulen kisi veya kurulus degilseniz, lutfen gonderen kisiyi derhal haberdar ediniz ve mesaji sisteminizden siliniz.The information contained in this e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed and Yasar Group Companies do not accept legal responsibility for the contents. If you are not the intended recipient, please immediately notify the sender and delete it from your system.

Thx. Nice to see it. But cant understand this: I have 4 realms grouped 2 and 2 Each group (has 2 realm) workd as failover. If i dont misunderstand, "ldflag" is used for this. But problem occurs here, How freeradius grouped two realms? by using @company.com side? But I can use IP address. And my user use "username" not username@company.com I mean: realm motp_1 { type = radius authhost = 10.1.1.52 accthost = 10.1.1.52 secret = test ldflag = fail_over nostrip } realm motp_2 { type = radius authhost = 10.43.1.52 accthost = 10.43.1.52 secret = test ldflag = fail_over nostrip } and user is: tevfikceydeliler Proxy-To-Realm := motp, Pool-Name := turkcell Framed-Protocol := PPP what should Iwrite down as in Proxy-To-Realm := ? On 01/09/2015 10:58 AM, Arran Cudbard-Bell wrote:

...

On 9 Jan 2015, at 15:42, Tevfik Ceydeliler <tevfik.ceydeliler@astron.yasar.com.tr> wrote:

It explains wht should be in new configuration. I need to see old style configuration. But cant reach anywhere. https://github.com/FreeRADIUS/freeradius-server/tree/master/raddb

Change 'Branch' to see state of the configuration files for v1, v2, v3.

-Arran

Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- <br> <img src="http://www.yasar.com.tr/banner/yhbanner.jpg"> </img> <br><br> Bu elektronik postada bulunan tum fikir ve gorusler ve ekindeki dosyalar sadece adres sahip/sahiplerine ait olup, Yasar Toplulugu Sirketleri bu mesajin icerigi ile ilgili olarak hic bir hukuksal sorumlulugu kabul etmez. Eger gonderilmesi dusunulen kisi veya kurulus degilseniz, lutfen gonderen kisiyi derhal haberdar ediniz ve mesaji sisteminizden siliniz.The information contained in this e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed and Yasar Group Companies do not accept legal responsibility for the contents. If you are not the intended recipient, please immediately notify the sender and delete it from your system.

Understand. Is there any solution for this? Because daloradius dont use home_server. On 01/09/2015 12:57 PM, Stefan Paetow wrote:

On 9 Jan 2015, at 09:44, Tevfik Ceydeliler <tevfik.ceydeliler@astron.yasar.com.tr> wrote:

...

I have 4 realms grouped 2 and 2 Each group (has 2 realm) workd as failover. You don't use realms to fail over. Look at proxy.conf, Alan DeKok has already pointed to it. I quote from it (from line 514 onwards):

# This section defines a pool of home servers that is used # for fail-over and load-balancing. In earlier versions of # FreeRADIUS, fail-over and load-balancing were defined per-realm. # As a result, if a server had 5 home servers, each of which served # the same 10 realms, you would need 50 "realm" entries.

...

i dont misunderstand, "ldflag" is used for this. Not anymore.

...

How freeradius grouped two realms? by using @company.com side? But I can use IP address. and user is: tevfikceydeliler Proxy-To-Realm := motp, Pool-Name := turkcell Framed-Protocol := PPP So, in version 3, you define this:

home_server motp_1 { type = auth+acct ipaddr = 10.1.1.52 secret = test }

home_server motp_2 { type = auth+acct ipaddr = 10.43.1.52 secret = test }

Then you define a home_server_pool for failover:

home_server_pool motp_failover { type = fail-over home_server = motp_1 home_server = motp_2 }

Then you define the realm:

realm company.com { pool = motp_failover nostrip }

realm motp { pool = motp_failover nostrip }

This 'should' work (based on the little bit of information you've given us).

Stefan Paetow Moonshot Industry & Research Liaison Coordinator

t: +44 (0)1235 822 125 gpg: 0x3FCE5142 xmpp: stefanp@jabber.dev.ja.net skype: stefan.paetow.janet Lumen House, Library Avenue, Harwell Oxford, Didcot, OX11 0SG

jisc.ac.uk

Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Collections and Janet Ltd. is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under Company No. number 2881024, VAT No. GB 197 0632 86. The registered office is: Lumen House, Library Avenue, Harwell, Didcot, Oxfordshire, OX11 0SG. T 01235 822200.

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- <br> <img src="http://www.yasar.com.tr/banner/yhbanner.jpg"> </img> <br><br> Bu elektronik postada bulunan tum fikir ve gorusler ve ekindeki dosyalar sadece adres sahip/sahiplerine ait olup, Yasar Toplulugu Sirketleri bu mesajin icerigi ile ilgili olarak hic bir hukuksal sorumlulugu kabul etmez. Eger gonderilmesi dusunulen kisi veya kurulus degilseniz, lutfen gonderen kisiyi derhal haberdar ediniz ve mesaji sisteminizden siliniz.The information contained in this e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed and Yasar Group Companies do not accept legal responsibility for the contents. If you are not the intended recipient, please immediately notify the sender and delete it from your system.

On 9 Jan 2015, at 18:26, Stefan Paetow <Stefan.Paetow@jisc.ac.uk> wrote:

On 9 Jan 2015, at 11:17, Tevfik Ceydeliler <tevfik.ceydeliler@astron.yasar.com.tr> wrote:

...

Understand. Is there any solution for this? Because daloradius dont use home_server.

Do it manually? Tell Daloradius to support the FR 3.x features?

It's not even 3.0.x, home servers and pools were the same in v2.0.x. Unfortunately the guy who wrote Daloradius seems to have largely given up developing it, and just uses it as a tool to market himself. If you look at the 2014 wrap up slides, you'll see there's a chart showing LoC which has largely remained the same since 2011. It's a bit of a joke really, there's even a slide with the commit log with the seven most recent commits occurring over the past 2 years. That's not pro-active maintenance, that's barely keeping the project alive. For contrast, over the past two years, FreeRADIUS has received ~2370 commits. -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

On 9 Jan 2015, at 19:55, Tevfik Ceydeliler <tevfik.ceydeliler@astron.yasar.com.tr> wrote:

I prefer to use Freeradius, but there is so many user to control. So I need frontend. Thst why i wanna use daloradius.

So write the patches to support the not so new realm/pool/homeserver structure, and convince Liran Tal to merge them.

If there are more frontend GIO for Freeradius ,Can u offer me?

Google's your friend there... Unless you're willing to pay for the development of one, in which case the offer would be 70K euros, about 6 months effort, and the end result being released under a GPLv2 license. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

Hi, Accroding to http://wiki.freeradius.org/guide/SQL-HOWTO, I try to use assign IP address from (IP-Pool = turkcell) my client after my realm (motp) accept user. I configure my database (Mysql) show below. But A get Accept-Reject always. What is the mistake, have u hint? mysql> select *from radcheck ; +----+------------+--------------------+----+-------+ | id | username | attribute | op | value | +----+------------+--------------------+----+-------+ | 9 | freeradius | Cleartext-Password | = | test | +----+------------+--------------------+----+-------+ mysql> select *from radgroupcheck; Empty set (0.00 sec) mysql> select *from radgroupreply ; +----+---------------+----------------+----+----------+ | id | groupname | attribute | op | value | +----+---------------+----------------+----+----------+ | 1 | turkcell-motp | Proxy-To-Realm | := | motp | | 2 | turkcell-motp | Pool-Name | := | turkcell | +----+---------------+----------------+----+----------+ 2 rows in set (0.00 sec) mysql> select * from radippool; +----+-----------+-----------------+--------------+-----------------+------------------+---------------------+------------------+----------+ | id | pool_name | framedipaddress | nasipaddress | calledstationid | callingstationid | expiry_time | username | pool_key | +----+-----------+-----------------+--------------+-----------------+------------------+---------------------+------------------+----------+ | 1 | turkcell | 10.1.1.181 | | | | 2015-01-12 17:39:27 | tevfikceydeliler | | | 2 | turkcell | 10.1.1.182 | | | | NULL | | 0 | | 3 | turkcell | 10.1.1.183 | | | | NULL | | 0 | | 4 | turkcell | 10.1.1.184 | | | | NULL | | 0 | | 5 | vodafone | 10.1.1.191 | | | | NULL | | 0 | | 6 | vodafone | 10.1.1.192 | | | | NULL | | | | 7 | vodafone | 10.1.1.193 | | | | NULL | | | | 8 | vodafone | 10.1.1.194 | | | | NULL | | | +----+-----------+-----------------+--------------+-----------------+------------------+---------------------+------------------+----------+ mysql> select * from radusergroup; +------------+---------------+----------+ | username | groupname | priority | +------------+---------------+----------+ | freeradius | turkcell-motp | 0 | +------------+---------------+----------+ And here is output of "freeradius -XXX" command: ... ... Tue Jan 13 13:06:10 2015 : Info: Ready to process requests. rad_recv: Access-Request packet from host 10.65.8.117 port 51506, id=19, length=50 User-Name = "freeradius" User-Password = "123456" Tue Jan 13 13:06:18 2015 : Info: # Executing section authorize from file /etc/freeradius/sites-enabled/default Tue Jan 13 13:06:18 2015 : Info: +- entering group authorize {...} Tue Jan 13 13:06:18 2015 : Info: [suffix] No '@' in User-Name = "freeradius", looking up realm NULL Tue Jan 13 13:06:18 2015 : Info: [suffix] No such realm "NULL" Tue Jan 13 13:06:18 2015 : Info: ++[suffix] returns noop Tue Jan 13 13:06:18 2015 : Info: ++[files] returns noop Tue Jan 13 13:06:18 2015 : Info: [sql] expand: %{Stripped-User-Name} -> Tue Jan 13 13:06:18 2015 : Info: [sql] sql_set_user escaped user --> '' Tue Jan 13 13:06:18 2015 : Debug: rlm_sql (sql): Reserving sql socket id: 148 Tue Jan 13 13:06:18 2015 : Info: [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = '' ORDER BY id Tue Jan 13 13:06:18 2015 : Info: [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = '' ORDER BY priority Tue Jan 13 13:06:18 2015 : Debug: rlm_sql (sql): Released sql socket id: 148 Tue Jan 13 13:06:18 2015 : Info: [sql] User not found Tue Jan 13 13:06:18 2015 : Info: ++[sql] returns notfound Tue Jan 13 13:06:18 2015 : Info: ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user Tue Jan 13 13:06:18 2015 : Info: Failed to authenticate the user. Tue Jan 13 13:06:18 2015 : Info: Using Post-Auth-Type Reject Tue Jan 13 13:06:18 2015 : Info: # Executing group from file /etc/freeradius/sites-enabled/default Tue Jan 13 13:06:18 2015 : Info: +- entering group REJECT {...} Tue Jan 13 13:06:18 2015 : Info: [attr_filter.access_reject] expand: %{User-Name} -> freeradius Tue Jan 13 13:06:18 2015 : Debug: attr_filter: Matched entry DEFAULT at line 11 Tue Jan 13 13:06:18 2015 : Info: ++[attr_filter.access_reject] returns updated Tue Jan 13 13:06:18 2015 : Info: Delaying reject of request 0 for 1 seconds Tue Jan 13 13:06:18 2015 : Debug: Going to the next request Tue Jan 13 13:06:18 2015 : Debug: Waking up in 0.9 seconds. Tue Jan 13 13:06:19 2015 : Info: Sending delayed reject for request 0 Sending Access-Reject of id 19 to 10.65.8.117 port 51506 Tue Jan 13 13:06:19 2015 : Debug: Waking up in 4.9 seconds. Tue Jan 13 13:06:24 2015 : Info: Cleaning up request 0 ID 19 with timestamp +8 Tue Jan 13 13:06:24 2015 : Info: Ready to process requests. Regards. <br> <img src="http://www.yasar.com.tr/banner/yhbanner.jpg"> </img> <br><br> Bu elektronik postada bulunan tum fikir ve gorusler ve ekindeki dosyalar sadece adres sahip/sahiplerine ait olup, Yasar Toplulugu Sirketleri bu mesajin icerigi ile ilgili olarak hic bir hukuksal sorumlulugu kabul etmez. Eger gonderilmesi dusunulen kisi veya kurulus degilseniz, lutfen gonderen kisiyi derhal haberdar ediniz ve mesaji sisteminizden siliniz.The information contained in this e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed and Yasar Group Companies do not accept legal responsibility for the contents. If you are not the intended recipient, please immediately notify the sender and delete it from your system.