First let me say I have worked on this for a day, read pretty much all i can find, docs etc, and am getting more confused as I go, so its time to step back and ask for some help om what I am doing wrong. I am trying to get a default profile to work I can't put on in the users file cause the billling program auto creates a file, and its the culprit that won't input the ascend-data-filter in the correct format. So I can't create a default profile in the users file I use a users txt file for users to auth thats imported by our billing program This works great, etc and users auth, etc aok all works and is in production The issue came up when the ascend data filter would not work well it turns out the billing program sends the info wrong it just not chageable at the billing software Ascend-Data-Filter = "ip in forward tcp est", ---> note no + as += And of course without the += when its sent out to the nas its only seeing the 1st line and doesn't read the rest of the filters The issue is its importing the ascend data filter attribute incorrectly and theirs no way to change it at the rodopi billing end I won't get into details of that for its just not possible to get that to happen So I need to come up with a way add that info at the radius level I have played with the hints file but i am not sure thats my answer, and for some reason its not even appearing to see it ie the preprocess is uncommented in radiusd.conf authorize section and in accounting section Heres the example Heres whats happening on a user with what i have been trying First I have two realms example realm sakeoftest.net { type = radius authhost = LOCAL accthost = LOCAL nostrip realm sakeoftest2.net { type = radius authhost = LOCAL accthost = LOCAL nostrip --- Heres the hints file entry DEFAULT Suffix == "", Strip-User-Name = No Hint = "test", Framed-Protocol = PPP, Service-Type = Framed-User, Session-Timeout = 14400, Ascend-Data-Filter += "ip in forward tcp est", Ascend-Data-Filter += "ip in forward dstip *.*.*.*/32", Ascend-Data-Filter += "ip in forward dstip *.*.*.*/32", Ascend-Data-Filter += "ip in forward dstip *.*.*.*/32", Ascend-Data-Filter += "ip in forward dstip *.*.*.*/32", Ascend-Data-Filter += "ip in drop tcp dstport = 25", Ascend-Data-Filter += "ip in forward", Port-Limit = 1 --- Heres the entry for the users.txt file joe "test" Hint = "test", Fall-Through = no Any ideas anyone ???? Please!!!!!!!!!
Jeff wrote:
I am trying to get a default profile to work I can't put on in the users file cause the billling program auto creates a file, and its the culprit
Then post-process the file to fix it. ...
well it turns out the billing program sends the info wrong it just not chageable at the billing software Ascend-Data-Filter = "ip in forward tcp est", ---> note no + as += And of course without the += when its sent out to the nas its only seeing the 1st line and doesn't read the rest of the filters ... So I need to come up with a way add that info at the radius level
You can't. You have to re-write the file.
I have played with the hints file but i am not sure thats my answer,
It's not.
Heres the hints file entry
The "hints" file re-writes the *request*. This is documented. The Ascend-Data-Filters go into the *reply*.
Heres the entry for the users.txt file
joe "test" Hint = "test", Fall-Through = no
That is *not* the correct format for a "users" file entry. See "man users", and read the examples in the "users" file for how to use "Hint" correctly. Alan DeKok.
could i do a attr_rewrite to fix the ascend being written long and place it in ost process section? _____ From: Alan DeKok [mailto:aland@deployingradius.com] To: FreeRadius users mailing list [mailto:freeradius-users@lists.freeradius.org] Sent: Thu, 28 Jun 2007 03:03:30 -0400 Subject: Re: Hints File and Users file and I am lost Jeff wrote:
I am trying to get a default profile to work I can't put on in the users file cause the billling program auto creates a file, and its the culprit
Then post-process the file to fix it. ...
well it turns out the billing program sends the info wrong it just not chageable at the billing software Ascend-Data-Filter = "ip in forward tcp est", ---> note no + as += And of course without the += when its sent out to the nas its only seeing the 1st line and doesn't read the rest of the filters ... So I need to come up with a way add that info at the radius level
You can't. You have to re-write the file.
I have played with the hints file but i am not sure thats my answer,
It's not.
Heres the hints file entry
The "hints" file re-writes the *request*. This is documented. The Ascend-Data-Filters go into the *reply*.
Heres the entry for the users.txt file
joe "test" Hint = "test", Fall-Through = no
That is *not* the correct format for a "users" file entry. See "man users", and read the examples in the "users" file for how to use "Hint" correctly. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
gotcha thanks _____ From: Alan DeKok [mailto:aland@deployingradius.com] To: FreeRadius users mailing list [mailto:freeradius-users@lists.freeradius.org] Sent: Thu, 28 Jun 2007 08:50:45 -0400 Subject: Re: Hints File and Users file and I am lost Jeff wrote:
could i do a attr_rewrite to fix the ascend being written long and place it in ost process section?
No. Fix the files written by your billing software to be correct, OR create entries yourself that follow the documented format. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I have a fast question I created this in the users file and reloaded config as instructed using radtest i tryed a login request, the default group wasn't added to login using radius -X is showing nothing accept see below what I have for default users file at the top ----- DEFAULT Service-Type == Framed-User Framed-Protocol = PPP, Session-Timeout = 18000, Ascend-Data-Filter += "ip in forward tcp est", Ascend-Data-Filter += "ip in forward dstip *.*.*.*/32", <-----removed ip addreesses for being posted here Ascend-Data-Filter += "ip in forward dstip *.*.*.*/32", <-----removed ip addreesses for being posted here Ascend-Data-Filter += "ip in forward dstip *.*.*.*/32", <-----removed ip addreesses for being posted here Ascend-Data-Filter += "ip in forward dstip *.*.*.*/32", <-----removed ip addreesses for being posted here Ascend-Data-Filter += "ip in drop tcp dstport = 25", <-----removed ip addreesses for being posted here Ascend-Data-Filter += "ip in forward", Port-Limit = 1 ----- Test User in users file testuser Password = "justatest" Fall-Through = Yes ----- Heres all that is posted back and as i said using radiusd -x only shows this much also stopping at Nas-Port radius:/home/jeffa # radtest testuser@test.realm justatest localhost testing123 Sending Access-Request of id 29 to 70.62.12.98 port 1645 User-Name = "testuser@test.realm" User-Password = "justatest" NAS-IP-Address = 255.255.255.255 NAS-Port = 10 rad_recv: Access-Accept packet from host localhost:1645, id=29, length=20 _____ From: Jeff [mailto:jeffa@jahelpdesk.com] To: FreeRadius users mailing list [mailto:freeradius-users@lists.freeradius.org] Sent: Thu, 28 Jun 2007 09:22:27 -0400 Subject: Re: Hints File and Users file and I am lost gotcha thanks _____ From: Alan DeKok [mailto:aland@deployingradius.com] To: FreeRadius users mailing list [mailto:freeradius-users@lists.freeradius.org] Sent: Thu, 28 Jun 2007 08:50:45 -0400 Subject: Re: Hints File and Users file and I am lost Jeff wrote:
could i do a attr_rewrite to fix the ascend being written long and place it in ost process section?
No. Fix the files written by your billing software to be correct, OR create entries yourself that follow the documented format. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
That's normal. radtest doesn't send Service-Type in the request so it can't get those replies. You can use radclent to test with attributes. You should add Service-Type as a reply as well: DEFAULT Service-Type == Framed-User Service-Type = Framed-User, Framed-Protocol = PPP, ... Ivan Kalik Kalik Informatika ISP Dana 28/6/2007, "Jeff" <jeffa@jahelpdesk.com> piše:
I have a fast question I created this in the users file and reloaded config as instructed
using radtest i tryed a login request, the default group wasn't added to login using radius -X is showing nothing accept see below
what I have for default users file at the top ----- DEFAULT Service-Type == Framed-User Framed-Protocol = PPP, Session-Timeout = 18000, Ascend-Data-Filter += "ip in forward tcp est", Ascend-Data-Filter += "ip in forward dstip *.*.*.*/32", <-----removed ip addreesses for being posted here Ascend-Data-Filter += "ip in forward dstip *.*.*.*/32", <-----removed ip addreesses for being posted here Ascend-Data-Filter += "ip in forward dstip *.*.*.*/32", <-----removed ip addreesses for being posted here Ascend-Data-Filter += "ip in forward dstip *.*.*.*/32", <-----removed ip addreesses for being posted here Ascend-Data-Filter += "ip in drop tcp dstport = 25", <-----removed ip addreesses for being posted here Ascend-Data-Filter += "ip in forward", Port-Limit = 1 ----- Test User in users file
testuser Password = "justatest" Fall-Through = Yes
-----
Heres all that is posted back and as i said using radiusd -x only shows this much also stopping at Nas-Port
radius:/home/jeffa # radtest testuser@test.realm justatest localhost testing123 Sending Access-Request of id 29 to 70.62.12.98 port 1645 User-Name = "testuser@test.realm" User-Password = "justatest" NAS-IP-Address = 255.255.255.255 NAS-Port = 10 rad_recv: Access-Accept packet from host localhost:1645, id=29, length=20
_____
From: Jeff [mailto:jeffa@jahelpdesk.com] To: FreeRadius users mailing list [mailto:freeradius-users@lists.freeradius.org] Sent: Thu, 28 Jun 2007 09:22:27 -0400 Subject: Re: Hints File and Users file and I am lost
gotcha thanks _____
From: Alan DeKok [mailto:aland@deployingradius.com] To: FreeRadius users mailing list [mailto:freeradius-users@lists.freeradius.org] Sent: Thu, 28 Jun 2007 08:50:45 -0400 Subject: Re: Hints File and Users file and I am lost
Jeff wrote:
could i do a attr_rewrite to fix the ascend being written long and place it in ost process section?
No.
Fix the files written by your billing software to be correct, OR create entries yourself that follow the documented format.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Alan DeKok -
Jeff -
tnt＠kalik.co.yu