Re: safe_characters in freeradius 2.0.3
Why the %{Event-Timestamp} is =22Mar 27 2008 20:59:09 MSK=22. And what is the =22?? Whence it undertakes?
I am using Freeradius 1.1.3 on Centos 5. I have been trying to figure out how to add the IP address of each authenticated user to the popip database maintained by poprelayd. It is easy to add an ip address to the popip database with the command: /usr/sbin/poprelayd -a <ip> How do I incorporate that as post processing step, module etc in freeradius? Any ideas or suggestions? Thank you -- Bill bbrunton@icu.net http://www.brunton.net http://www.video-records.com http://www.icu.net KA0SEP NNN0HQA/OK ATP CFII BE200 BE300 BE300F BE1900 BE2000 BE2000S CE500 SIC CE525 HS125 LR45 LRJET The Internet... The place to be!
Do you need freeradius at all? This is normally done with pop before smtp. You contact the pop server, it logs the IP and then you can send. Ivan Kalik Kalik Informatika ISP Dana 27/3/2008, "Bill Brunton" <bbrunton@icu.net> piše:
I am using Freeradius 1.1.3 on Centos 5.
I have been trying to figure out how to add the IP address of each authenticated user to the popip database maintained by poprelayd. It is easy to add an ip address to the popip database with the command:
/usr/sbin/poprelayd -a <ip>
How do I incorporate that as post processing step, module etc in freeradius?
Any ideas or suggestions?
Thank you
-- Bill bbrunton@icu.net http://www.brunton.net http://www.video-records.com http://www.icu.net KA0SEP NNN0HQA/OK ATP CFII BE200 BE300 BE300F BE1900 BE2000 BE2000S CE500 SIC CE525 HS125 LR45 LRJET
The Internet... The place to be!
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Well - it seems that many customers have trouble with Outlook and Outlook Express.. If they have an email in the outbox, say they compose offline and connect to send it, it tries to send it before checking email... In other words no POP before SMTP. If Outlook does not send successfully - then it does not check for new email either. So I get a lot of "I can't send or receive email" complaints. I have SMTP AUTH set up too but you know how users are - when it does not work they go in and try to fix it before asking for help and SMTP AUTH is found to be disabled or has the wrong info set up. So - if I could have freeradius add the IP to the popip database when they log in, it would make everyone much happier, especially me. I think it should be an easy thing to do... On Fri, 28 Mar 2008, Ivan Kalik wrote:
Date: Fri, 28 Mar 2008 01:08:12 +0100 From: Ivan Kalik <tnt@kalik.net> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Freeradius and poprelayd - any ideas please
Do you need freeradius at all? This is normally done with pop before smtp. You contact the pop server, it logs the IP and then you can send.
Ivan Kalik Kalik Informatika ISP
Dana 27/3/2008, "Bill Brunton" <bbrunton@icu.net> pi?e:
I am using Freeradius 1.1.3 on Centos 5.
I have been trying to figure out how to add the IP address of each authenticated user to the popip database maintained by poprelayd. It is easy to add an ip address to the popip database with the command:
/usr/sbin/poprelayd -a <ip>
How do I incorporate that as post processing step, module etc in freeradius?
Any ideas or suggestions?
Thank you
-- Bill bbrunton@icu.net http://www.brunton.net http://www.video-records.com http://www.icu.net KA0SEP NNN0HQA/OK ATP CFII BE200 BE300 BE300F BE1900 BE2000 BE2000S CE500 SIC CE525 HS125 LR45 LRJET
The Internet... The place to be!
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Bill bbrunton@icu.net http://www.brunton.net http://www.video-records.com http://www.icu.net KA0SEP NNN0HQA/OK ATP CFII BE200 BE300 BE300F BE1900 BE2000 BE2000S CE500 SIC CE525 HS125 LR45 LRJET The Internet... The place to be!
I also thought about doing a radlast -r and pulling out the IP addresses and adding them to the database every 5 minutes or so, but many sessions are not removed from that list and I end up with 20 times as many sessions there as I have real sessions on line. How can I get freeradius to at least delete an old radlast entry when the user signs in again? On Thu, 27 Mar 2008, Bill Brunton wrote:
Date: Thu, 27 Mar 2008 19:20:58 -0500 (CDT) From: Bill Brunton <bbrunton@icu.net> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Freeradius and poprelayd - any ideas please
Well - it seems that many customers have trouble with Outlook and Outlook Express.. If they have an email in the outbox, say they compose offline and connect to send it, it tries to send it before checking email... In other words no POP before SMTP. If Outlook does not send successfully - then it does not check for new email either. So I get a lot of "I can't send or receive email" complaints.
I have SMTP AUTH set up too but you know how users are - when it does not work they go in and try to fix it before asking for help and SMTP AUTH is found to be disabled or has the wrong info set up.
So - if I could have freeradius add the IP to the popip database when they log in, it would make everyone much happier, especially me.
I think it should be an easy thing to do...
On Fri, 28 Mar 2008, Ivan Kalik wrote:
Date: Fri, 28 Mar 2008 01:08:12 +0100 From: Ivan Kalik <tnt@kalik.net> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Freeradius and poprelayd - any ideas please
Do you need freeradius at all? This is normally done with pop before smtp. You contact the pop server, it logs the IP and then you can send.
Ivan Kalik Kalik Informatika ISP
Dana 27/3/2008, "Bill Brunton" <bbrunton@icu.net> pi?e:
I am using Freeradius 1.1.3 on Centos 5.
I have been trying to figure out how to add the IP address of each authenticated user to the popip database maintained by poprelayd. It is easy to add an ip address to the popip database with the command:
/usr/sbin/poprelayd -a <ip>
How do I incorporate that as post processing step, module etc in freeradius?
Any ideas or suggestions?
Thank you
-- Bill bbrunton@icu.net http: //www.brunton.net http: //www.video-records.com http: //www.icu.net KA0SEP NNN0HQA/OK ATP CFII BE200 BE300 BE300F BE1900 BE2000 BE2000S CE500 SIC CE525 HS125 LR45 LRJET
The Internet... The place to be!
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Bill bbrunton@icu.net http://www.brunton.net http://www.video-records.com http://www.icu.net KA0SEP NNN0HQA/OK ATP CFII BE200 BE300 BE300F BE1900 BE2000 BE2000S CE500 SIC CE525 HS125 LR45 LRJET The Internet... The place to be!
pop-before-smtp is a module that you install on your mail server so it *always* connects to pop server before connecting to the smtp server. Put it in Google and have a look. AFAIK logged IPs have a timeout of a few minutes. Putting IPs in the database when users connect is not the best solution. If they go surfing before checking e-mail, IP entry will expire - and you are back where you started from. Ivan Kalik Kalik Informatika ISP Dana 28/3/2008, "Bill Brunton" <bbrunton@icu.net> piše:
Well - it seems that many customers have trouble with Outlook and Outlook Express.. If they have an email in the outbox, say they compose offline and connect to send it, it tries to send it before checking email... In other words no POP before SMTP. If Outlook does not send successfully - then it does not check for new email either. So I get a lot of "I can't send or receive email" complaints.
I have SMTP AUTH set up too but you know how users are - when it does not work they go in and try to fix it before asking for help and SMTP AUTH is found to be disabled or has the wrong info set up.
So - if I could have freeradius add the IP to the popip database when they log in, it would make everyone much happier, especially me.
I think it should be an easy thing to do...
On Fri, 28 Mar 2008, Ivan Kalik wrote:
Date: Fri, 28 Mar 2008 01:08:12 +0100 From: Ivan Kalik <tnt@kalik.net> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Freeradius and poprelayd - any ideas please
Do you need freeradius at all? This is normally done with pop before smtp. You contact the pop server, it logs the IP and then you can send.
Ivan Kalik Kalik Informatika ISP
Dana 27/3/2008, "Bill Brunton" <bbrunton@icu.net> pi?e:
I am using Freeradius 1.1.3 on Centos 5.
I have been trying to figure out how to add the IP address of each authenticated user to the popip database maintained by poprelayd. It is easy to add an ip address to the popip database with the command:
/usr/sbin/poprelayd -a <ip>
How do I incorporate that as post processing step, module etc in freeradius?
Any ideas or suggestions?
Thank you
-- Bill bbrunton@icu.net http://www.brunton.net http://www.video-records.com http://www.icu.net KA0SEP NNN0HQA/OK ATP CFII BE200 BE300 BE300F BE1900 BE2000 BE2000S CE500 SIC CE525 HS125 LR45 LRJET
The Internet... The place to be!
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/usershtml
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Bill bbrunton@icu.net http://www.brunton.net http://www.video-records.com http://www.icu.net KA0SEP NNN0HQA/OK ATP CFII BE200 BE300 BE300F BE1900 BE2000 BE2000S CE500 SIC CE525 HS125 LR45 LRJET
The Internet... The place to be!
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Yes - I am already using poprelayd and I can set the IP timeout to any value I want. Thank you for telling me that it is not the best way, but that does not answer my question. How can I do it? On Fri, 28 Mar 2008, Ivan Kalik wrote:
Date: Fri, 28 Mar 2008 10:44:14 +0100 From: Ivan Kalik <tnt@kalik.net> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Freeradius and poprelayd - any ideas please
pop-before-smtp is a module that you install on your mail server so it *always* connects to pop server before connecting to the smtp server. Put it in Google and have a look.
AFAIK logged IPs have a timeout of a few minutes. Putting IPs in the database when users connect is not the best solution. If they go surfing before checking e-mail, IP entry will expire - and you are back where you started from.
Ivan Kalik Kalik Informatika ISP
Dana 28/3/2008, "Bill Brunton" <bbrunton@icu.net> pi?e:
Well - it seems that many customers have trouble with Outlook and Outlook Express.. If they have an email in the outbox, say they compose offline and connect to send it, it tries to send it before checking email... In other words no POP before SMTP. If Outlook does not send successfully - then it does not check for new email either. So I get a lot of "I can't send or receive email" complaints.
I have SMTP AUTH set up too but you know how users are - when it does not work they go in and try to fix it before asking for help and SMTP AUTH is found to be disabled or has the wrong info set up.
So - if I could have freeradius add the IP to the popip database when they log in, it would make everyone much happier, especially me.
I think it should be an easy thing to do...
On Fri, 28 Mar 2008, Ivan Kalik wrote:
Date: Fri, 28 Mar 2008 01:08:12 +0100 From: Ivan Kalik <tnt@kalik.net> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Freeradius and poprelayd - any ideas please
Do you need freeradius at all? This is normally done with pop before smtp. You contact the pop server, it logs the IP and then you can send.
Ivan Kalik Kalik Informatika ISP
Dana 27/3/2008, "Bill Brunton" <bbrunton@icu.net> pi?e:
I am using Freeradius 1.1.3 on Centos 5.
I have been trying to figure out how to add the IP address of each authenticated user to the popip database maintained by poprelayd. It is easy to add an ip address to the popip database with the command:
/usr/sbin/poprelayd -a <ip>
How do I incorporate that as post processing step, module etc in freeradius?
Any ideas or suggestions?
Thank you
-- Bill bbrunton@icu.net http://www.brunton.net http://www.video-records.com http://www.icu.net KA0SEP NNN0HQA/OK ATP CFII BE200 BE300 BE300F BE1900 BE2000 BE2000S CE500 SIC CE525 HS125 LR45 LRJET
The Internet... The place to be!
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/usershtml
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Bill bbrunton@icu.net http://www.brunton.net http://www.video-records.com http://www.icu.net KA0SEP NNN0HQA/OK ATP CFII BE200 BE300 BE300F BE1900 BE2000 BE2000S CE500 SIC CE525 HS125 LR45 LRJET
The Internet... The place to be!
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Bill bbrunton@icu.net http://www.brunton.net http://www.video-records.com http://www.icu.net KA0SEP NNN0HQA/OK ATP CFII BE200 BE300 BE300F BE1900 BE2000 BE2000S CE500 SIC CE525 HS125 LR45 LRJET The Internet... The place to be!
Bill Brunton wrote:
So - if I could have freeradius add the IP to the popip database when they log in, it would make everyone much happier, especially me.
I think it should be an easy thing to do...
I think we did something like that in the lab about 6 years ago and never deployed it. IIRC, we ran a command line script out of acct_users (see /etc/raddb/acct_users; look for Exec-Program). I believe the pop-before-relay server we were using had a command line interface to let us update the database, and I think we set the expiration time to about 15 minutes. Regards, Richard Siddall
Thank you... I will look into that. On Fri, 28 Mar 2008, Richard Siddall wrote:
Date: Fri, 28 Mar 2008 08:33:36 -0400 From: Richard Siddall <richard.siddall@elirion.net> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Freeradius and poprelayd - any ideas please
Bill Brunton wrote:
So - if I could have freeradius add the IP to the popip database when they log in, it would make everyone much happier, especially me.
I think it should be an easy thing to do...
I think we did something like that in the lab about 6 years ago and never deployed it. IIRC, we ran a command line script out of acct_users (see /etc/raddb/acct_users; look for Exec-Program). I believe the pop-before-relay server we were using had a command line interface to let us update the database, and I think we set the expiration time to about 15 minutes.
Regards,
Richard Siddall - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Bill bbrunton@icu.net http://www.brunton.net http://www.video-records.com http://www.icu.net KA0SEP NNN0HQA/OK ATP CFII BE200 BE300 BE300F BE1900 BE2000 BE2000S CE500 SIC CE525 HS125 LR45 LRJET The Internet... The place to be!
Bill Brunton wrote:
I have been trying to figure out how to add the IP address of each authenticated user to the popip database maintained by poprelayd.
Is the IP assigned via RADIUS?
It is easy to add an ip address to the popip database with the command:
/usr/sbin/poprelayd -a <ip>
How do I incorporate that as post processing step, module etc in freeradius?
See rlm_exec. You can execute a program with any arguments you want, including an assigned IP address. Alan DeKok.
As I should act, that all worked for me, as well as in 1.1.7? -----Original Message----- From: freeradius-users-bounces+snaut=snaut.ru@lists.freeradius.org [mailto:freeradius-users-bounces+snaut=snaut.ru@lists.freeradius.org] On Behalf Of Ivan Kalik Sent: Thursday, March 27, 2008 11:52 PM To: FreeRadius users mailing list Subject: Re: safe_characters in freeradius 2.0.3
And what is the =22??
ASCII for double quote - ". Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (6)
-
Alan DeKok -
Bill Brunton -
Dmitry A. Sysoev -
Ivan Kalik -
Richard Siddall -
snaut＠snaut.ru