Freeradius configuration.
Hi All, I have installed freeradius on caldera linuX V3.1. It is running reasonably Ok. Last week I had a problem. Radius assigned the dial-in user an address which was outside the pool. On Cisco 5300 we have made a pool of IP address x.x.x.10 to x.x.x.235and from x.x.x.236 address for framed IP assignment. Last week an user was assigned IP in range of x.x.x.236. I have defined users as following: user1 auth-type:local, password=="abcxyz", Framed-IP-address = x.x.x.10+, Fall-Through = Yes, Session-timeout = 1800 Is there any way I can restrict users so that do not get IP address beyond x.x.x.235. Is there a way to refresh the IP assignement so users do not go beyond x.x.x.235 address. Another thing I want to do is that another user say USER2 should also be able to get IP assigned from this pool. What I mean that user1 and user2 should get IP assigned from the pool. Alsowill multiple sessions with same user name be allowed? Thanks Rakesh Jha Kuwait Disclaimer: Any non official business related views, opinions or other information presented in this electronic mail are solely those of the sender/author. Burgan Bank does not endorse or accept responsibility for these opinions, views or conclusion. If you are not the addressee indicated in this electronic mail or responsible for delivering this electronic message to the intended recipient, you should delete this message and notify the sender immediately. Burgan Bank
Re: unable to get a clean gmake
the ACTUAL zeke [EMAIL PROTECTED] wrote: i have tried several builds, we are running BSDI BSD/OS 4.2 compiled under: ... the output of check-radiusd-config is pasted below /usr/local/sbin/radiusd: can't resolve symbol 'fgetgrent' Upgrade to the latest CVS snapshot. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Freeradius configuration.
rakesh jha [EMAIL PROTECTED] wrote: Framed-IP-address = x.x.x.10+, Fall-Through = Yes, Session-timeout = 1800 Is there any way I can restrict users so that do not get IP address beyond x.x.x.235. No. The port number is added to the IP address, ot get the address to give to the user. See the 'doc' directory for more information. You'll have to change your IP address layout, OR go to NAS managed IP pools. Another thing I want to do is that another user say USER2 should also be able to get IP assigned from this pool. What I mean that user1 and user2 should get IP assigned from the pool. When you use 'x.x.x.10+ for an IP address, there is no pool. Nothing is managed, and you can have as many users as you want using the same configuration. Also will multiple sessions with same user name be allowed? That's a different issue. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
FreeRADIUS with MS SQL
Hello I need to setup RADIUS wich works with MS SQL, can somebody give me an advice? Does FreeRADIUS can do this? ODBC or something? Thanks -- Michael Vasilenko - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: unable to get a clean gmake
the version that produces these errors is: freeradius-snapshot-20020209 Z Upgrade to the latest CVS snapshot. Z Alan DeKok. has freeradius ever worked on BSDI? if so, what options need to be added to ./configure. i think that could be my only problem. i am sorry to be such a pain, we have used merit AAA successfully for many years, but suddenly qwest needs Ascend-Data-Filter, which is broken in AAA but several users (none on BSDI) are passing filters successfully from freeradius according to qwest. we are up against a deadline of tuesday. we have a machine available to load with your recommended flavor of linux as an alternate solution. thanks again ...z - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: unable to get a clean gmake
the ACTUAL zeke [EMAIL PROTECTED] wrote: the version that produces these errors is: freeradius-snapshot-20020209 Hmm... if you look in the src/module/rlm_unix directory, you'll see that there are compatibility functions. do: cd src/module/rlm_unix rm config.cache ./configure make The module *should* build correctly. Please watch out for any errors or warnings. Once it's built, you should be able to do 'make install' from that directory to get it installed. has freeradius ever worked on BSDI? if so, what options need to be added to ./configure. i think that could be my only problem. I'm not sure if it's worked on BSDI. The only problem is the compatibility functions in rlm_unix. If you don't mind poking at the make files and/or source code, you can probably get it to work. i am sorry to be such a pain, we have used merit AAA successfully for many years, but suddenly qwest needs Ascend-Data-Filter, which is broken in AAA but several users (none on BSDI) are passing filters successfully from freeradius according to qwest. Yes. It does work for some people. we are up against a deadline of tuesday. we have a machine available to load with your recommended flavor of linux as an alternate solution. I use Linux for my development, so it's definitely tested there. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRADIUS with MS SQL
Michael Vasilenko [EMAIL PROTECTED] wrote: I need to setup RADIUS wich works with MS SQL, can somebody give me an advice? Does FreeRADIUS can do this? ODBC or something? ODBC should work in the latest CVS snapshot. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Simultaneous Use not working
Simultaneous Use is not working for me. The checkrad script works fine when
I call it manually, but it is never executed by radius. I have turned
debugging on in checkrad - but the script is never executed. running
radiusd -xx does not give any indication that it is trying to call checkrad
or that it is doing anything about the Simultaneous Use. I am using
Freeradius 0.3 (had such a time getting it running smoothly with my
PostgreSQL database, other than simultaneous use, that i'm too scared to try
0.4). I have read all of the doc's about simultaneous use, as well as
followed the instructions given in one of the archived posts. However in
that post, it doesn't look like the person having the problem got it sorted
out either. What am I doing wrong?
In my users file I have:
DEFAULT Auth-Type := System, Simultaneous-Use :=1
Fall-Through = 1
in radiusd.conf I have
authorize {
preprocess
# counter
# attr_filter
suffix
sql
files
}
authenticate {
unix
}
preacct {
suffix
files
preprocess
}
accounting {
# acct_unique
detail
# counter
unix
sql
radutmp
# sradutmp
}
session {
radutmp
}
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
(no subject)
Hi, How can i install freeradius with postgreSQL? What are the arguments for 'configure' ? or what other things i have to do? regards, _ Descargue GRATUITAMENTE MSN Explorer en http://explorer.yupimsn.com/intl.asp. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
freeradius with PostgreSQL...
Hi, How can i install freeradius with postgreSQL? What are the arguments for 'configure' ? or what other things i have to do? regards, _ Hable con sus amigos en línea, pruebe MSN Messenger: http://messenger.msn.es - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Simultaneous Use not working
Are you using realms? If so, you'll need to get a current CVS
snapshot. Even v 0.4 will not work. (radutmp stores the username with the
realm stripped, but the checksimul routine looks for usernames without the
realm stripped).
There are *lots* of fixes to the SQL handling code, even since v 0.4. I'd
recommend setting up a test server with the latest CVS to see if it works
for you.
At 12:31 PM 2/11/2002 +1000, you wrote:
Simultaneous Use is not working for me. The checkrad script works fine when
I call it manually, but it is never executed by radius. I have turned
debugging on in checkrad - but the script is never executed. running
radiusd -xx does not give any indication that it is trying to call checkrad
or that it is doing anything about the Simultaneous Use. I am using
Freeradius 0.3 (had such a time getting it running smoothly with my
PostgreSQL database, other than simultaneous use, that i'm too scared to try
0.4). I have read all of the doc's about simultaneous use, as well as
followed the instructions given in one of the archived posts. However in
that post, it doesn't look like the person having the problem got it sorted
out either. What am I doing wrong?
In my users file I have:
DEFAULT Auth-Type := System, Simultaneous-Use :=1
Fall-Through = 1
in radiusd.conf I have
authorize {
preprocess
# counter
# attr_filter
suffix
sql
files
}
authenticate {
unix
}
preacct {
suffix
files
preprocess
}
accounting {
# acct_unique
detail
# counter
unix
sql
radutmp
# sradutmp
}
session {
radutmp
}
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Randy Moore
Axion Information Technologies, Inc.
email [EMAIL PROTECTED]
phone 301-408-1200
fax301-445-3947
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Simultaneous Use not working
No, I'm not using realms. It is just the straight username / password.
checkrad isn't even getting called. If i run checkrad manually it gives the
results you would expect, but radiusd isn't running it at all - ever.
- Original Message -
From: Randy Moore [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, February 11, 2002 2:15 PM
Subject: Re: Simultaneous Use not working
Are you using realms? If so, you'll need to get a current CVS
snapshot. Even v 0.4 will not work. (radutmp stores the username with the
realm stripped, but the checksimul routine looks for usernames without the
realm stripped).
There are *lots* of fixes to the SQL handling code, even since v 0.4. I'd
recommend setting up a test server with the latest CVS to see if it works
for you.
At 12:31 PM 2/11/2002 +1000, you wrote:
Simultaneous Use is not working for me. The checkrad script works fine
when
I call it manually, but it is never executed by radius. I have turned
debugging on in checkrad - but the script is never executed. running
radiusd -xx does not give any indication that it is trying to call
checkrad
or that it is doing anything about the Simultaneous Use. I am using
Freeradius 0.3 (had such a time getting it running smoothly with my
PostgreSQL database, other than simultaneous use, that i'm too scared to
try
0.4). I have read all of the doc's about simultaneous use, as well as
followed the instructions given in one of the archived posts. However in
that post, it doesn't look like the person having the problem got it
sorted
out either. What am I doing wrong?
In my users file I have:
DEFAULT Auth-Type := System, Simultaneous-Use :=1
Fall-Through = 1
in radiusd.conf I have
authorize {
preprocess
# counter
# attr_filter
suffix
sql
files
}
authenticate {
unix
}
preacct {
suffix
files
preprocess
}
accounting {
# acct_unique
detail
# counter
unix
sql
radutmp
# sradutmp
}
session {
radutmp
}
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
Randy Moore
Axion Information Technologies, Inc.
email [EMAIL PROTECTED]
phone 301-408-1200
fax301-445-3947
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRADIUS with MS SQL
On Sun, 10 Feb 2002, Alan DeKok wrote: AD Michael Vasilenko [EMAIL PROTECTED] wrote: AD I need to setup RADIUS wich works with MS SQL, can somebody give me an AD advice? Does FreeRADIUS can do this? ODBC or something? AD AD ODBC should work in the latest CVS snapshot. in latest CVS snapshot make is just broken: Making static in rlm_sql_unixodbc... gmake[9]: Entering directory `/usr/local/src/freeradius/radiusd/src/modules/rlm_sql/drivers/rlm_sql_unixodbc' gmake[9]: *** No rule to make target `static'. Stop. gmake[9]: Leaving directory `/usr/local/src/freeradius/radiusd/src/modules/rlm_sql/drivers/rlm_sql_unixodbc' gmake[8]: *** [common] Error 1 radius:/usr/local/src/freeradius/radiusd/src/modules/rlm_sql/drivers/rlm_sql_unixodbc# ./configure loading cache ./config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc ) works... yes checking whether the C compiler (gcc ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for sql.h... yes checking for SQLConnect in -lodbc... yes updating cache ./config.cache creating ./config.status creating Makefile sed: ./Makefile.in: No such file or directory AD Alan DeKok. -- Michael Vasilenko - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
