MySQL Collation and Multiple Login Possibility Help

the right direction? I am not sure if this has been fixed for newer FR versions. Thanks Deepak - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: MySQL Collation and Multiple Login Possibility Help

 raddb/sql/mysql/dialup.conf Using the case sensitive version of query solved the problem. Thanks! - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Custom message question

that. I am using Access Period counter for user time limit. In counter.conf documentation I saw that the message can be changed by using reply-message. I tired it but nothing changed. Is there a way to change this message? Thanks Deepak - List info/subscribe/unsubscribe? See http

Echo Effect Help

? Where to look for the clue? 3. What can trigger account update every second and multiple entry in 'radacct'? Regards Deepak - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Echo Effect Help

Blame the NAS. As I said before sounds crazy.. Most probably NAS is to blame. Thanks Deepak - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Mac-Auth with MySQL

I need to specify the MAC in file instead of database? Thanks Deepak - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Mac-Auth with MySQL

make that work with mysql? Thanks again Deepak - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Tie up user to specific NAS

Deepak -- == Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3 == - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Bandwidth Hardware Requirement Question

On Fri, Aug 21, 2009 at 11:28 PM, Alan DeKokal...@deployingradius.com wrote: Deepak wrote: Thanks for info I needed. I got the hardware part. Regarding the bandwidth in router, how much bandwidth is needed (rough estimate) given that thousands of users are online and radius is continuously

Bandwidth Hardware Requirement Question

Hi all, I have done basic setup of freeradius and tested in my old PC (PIII). Now I want to do the real thing but I need some estimation regarding this. Can somebody share their knowledge on this? What is the bandwidth requirement for dedicated radius service based on numbers of user or

Re: Bandwidth Hardware Requirement Question

On Fri, Aug 21, 2009 at 2:27 PM, Igor Smitransi...@blic.net wrote: Bandwidth is needed on your router. Between your router and your radius server you will only have authentication and accounting packets which are small and do not consume much of a bandwidth. Radius server will not do any rate

Re: Stale Session and Simultaneous-Use Question

3) acctterminatecause - What are the possible values here? In my table, I can see User-Request and Session-Timeout. In the link I mentioned in my previous post uses User-Reset. This is the part I am not sure on what is the appropriate value to use in this field. Found in

Re: Comparing live sessions between NAS and freeradius

sees?  How do I update a user's acctstoptime when the NAS doesn't have a session for that user, but the DB shows as NULL (i.e. freeradius believes the user is live)? It is called stale session. I am also trying to solve the same. I just discussed this topic few days back. Check the list

Re: Stale Session and Simultaneous-Use Question

On Sat, Aug 15, 2009 at 4:26 PM, Marinko Tarlacmangi...@gmail.com wrote: Just like I said... I already posted one solution on this list. In the same mail you will find 3 php lines for cron script and instructions for adding one column to radacct table... I won't be at home next 10 days so

Stale Session and Simultaneous-Use Question

Hi, I am simulating the problem on what if the AP goes down (due to various reasons). I observed that user is not properly disconnected and result is stale session. When the AP is up and when the previous user tries to log in he/she gets login failed message because Simultaneous-Use is in effect

Convention, Rule or Convenience?

Hi, Sounds like silly question to myself and having second thoughts about asking in the list. I am very new to radius and quite confused about this. Done some research on this too but could not find the answer I am looking for. It is something like this: 1) In radcheck table I can insert the

Re: [Daloradius-users] Batch PIN Code Authentication

When you refer to PIN authentication does this mean that you would like that Batch User Add to create batch PIN users with Auth-Type := Accept (meaning, they automatically authenticate ok with just providing the PIN number). Is that what would make the current Batch Add User page suitable

Simutaneus Check Query in FR2?

Hi, Currently my Simultaneous-Use attribute is not working and I have few questions regarding this. Following are my setup: OS: CentOS 5.3 freeradius2-2.1.6 MySQL 5.0.45 PERL 5.8.8 === I am consulting the FAQ checklist. Some are not applicable to me since I am doing

Re: Simutaneus Check Query in FR2?

You are looking for in the wrong directory.  In FR2 the SQL queries are in sql/mysql/dialup.conf. In this file you will find the simulaneus-use queries. Thanks for the quick reply. This solved the problem. What about the radutmp thing? Do I need to leave it uncommented or disable it in

Re: Simutaneus Check Query in FR2?

I think you do not understand why you use radutmp. If you use a DB system, then  you needn't use a flat file for save the session log. Look at radacct table. Thanks. I understand that but I was just concerned about unwanted side effects if in case other tools are using that. I got the idea.

Re: Script for logging out user from their session

By the way for Max-All-Session to work, do I need to run chilli with coaport 3977 and coanoipcheck option? No. Session-Timeout will do fine. Ivan Kalik Kalik Informatika ISP Thanks -- == Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3

Idle-Timeout not working

Hi, After fixing the Max-All-Session thing, today I am checking Idle-Timeout but it is not working? I checked with all the browser closed except the You Are Logged In popup windows from chilli to simulate the idle time but it is not triggered? Need some suggestion. Thanks OS: CentOS 5.3

Re: Idle-Timeout not working

If Idle-Timeout is in the Access-Accept packet - NAS doesn't support it. Take it up with them. I didn't quite get it. Can you explain further? It seems to be random. In first login i was not automatically logged out so I manually logged out and again logged back in. This time, it worked. It

Re: Idle-Timeout not working

On Sun, Aug 2, 2009 at 11:47 PM, Deepakd88...@gmail.com wrote: If Idle-Timeout is in the Access-Accept packet - NAS doesn't support it. Take it up with them. I didn't quite get it. Can you explain further? It seems to be random. In first login i was not automatically logged out so I

Re: Idle-Timeout not working

Which is a problem with the portal, not radius. Direct your questions to their support. Ivan Kalik Kalik Informatika ISP Ok. Thanks -- == Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3 == - List

Re: Idle-Timeout not working

The portal is broken. It needs fixing. After the firmware upgrade, it is working now but with minor issue. You are Logged In pop up windows doesn't show any indication of user being logged out unlike when Session-Timeout occurs.. It keeps on rolling the time even if user have been logged out.

Re: Unknown attribute Max-All-Session

On Sat, Aug 1, 2009 at 12:00 AM, boroba --flac...@hotmail.com wrote: From: flac...@hotmail.com To: flac...@hotmail.com Subject: RE: Unknown attribute Max-All-Session Date: Fri, 31 Jul 2009 15:56:03 + thanks for reply i have install freeradius2 and

Script for logging out user from their session

Hi, I am a newbie trying to create a prepaid hotspot and I am using following. CentOS 5.3 freeradius2-2.1.6 mysql 5.0.45 daloradius-0.9-8 chillispot 1.0 (in dd-wrt) I have managed to put this all together and it is working fine so far. Now I wanted to try that if I will give a user 1 hour

Re: Script for logging out user from their session

On Sat, Aug 1, 2009 at 10:06 PM, Ivan Kalikt...@kalik.net wrote: I am a newbie trying to create a prepaid hotspot and I am using following. CentOS 5.3 freeradius2-2.1.6 mysql 5.0.45 daloradius-0.9-8 chillispot 1.0 (in dd-wrt) Now I wanted to try that if I will give a user 1 hour time (1

Re: Unknown attribute Max-All-Session

On Sat, Aug 1, 2009 at 9:53 PM, Ivan Kalikt...@kalik.net wrote: Plus you need to add  Max-All-Session attribute in dictionary file like: (this is causing your error) ATTRIBUTE     Max-All-Session    3000    Integer

Re: Unknown attribute Max-All-Session

You need to add the counter to instantiate section of radiusd.conf. That will create the attribute and instantiate sql instance even if you are not using it elsewhere. Ivan Kalik Kalik Informatika ISP Thanks for this info. Learned something new. Regards --

Re: Script for logging out user from their session

Yes, there is a probloem when counter query returns NULL (no records for that user; once there is accounting for that user everything works fine), and it's not just that counter. This seems to be the probloem:        radius_xlat(querystr, MAX_QUERY_LEN, responsestr, request,

radwho error: Is this minor typo error in rpm packaging?

Hi, I have rpm based freeradius package installed in my CentOS 5.3 box. In the course of experimentation, I noticed that radwho gives me following error: == /var/log/radius/sradutmp: No such file or directory == I guess this is a minor typo error in rpm package. Actually radwho

Re: Location of freeradius log file

On Tue, Jul 14, 2009 at 12:25 AM, John Dennisjden...@redhat.com wrote: On 07/13/2009 11:35 AM, Deepak wrote: Hi, I have following installed. === OS: CentOS 5.3 freeradius 2.1.6 (rpm version) daloradius 0.9-8 mysql 5.0.45 === When I try to check the radius log

Re: Invalid octet string Error

You need to list the sqlcounter in authorize (in virtual server) and instantiate (in radiusd.conf). Ivan Kalik Kalik Informatika ISP Thanks for the info. Its working now. :-) Regards -- == Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3

Location of freeradius log file

Hi, I have following installed. === OS: CentOS 5.3 freeradius 2.1.6 (rpm version) daloradius 0.9-8 mysql 5.0.45 === When I try to check the radius log file from daloradius interface, it give me following error: error reading log file: looked for log file in

Invalid octet string Error

Hi, I have a user with Max-All-Session attribute set to 3600. When trying to connect, server is rejecting the user with following error === rlm_sql: Failed to create the pair: Invalid octet string 3600 for attribute name Max-All-Session rlm_sql (sql): Error getting data from database

Re: Invalid octet string Error

On Sun, Jul 12, 2009 at 8:03 PM, Deepakd88...@gmail.com wrote: Hi, I have a user with Max-All-Session attribute set to 3600. When trying to connect, server is rejecting the user with following error === rlm_sql: Failed to create the pair: Invalid octet string 3600 for attribute

Re: Failed to find module sql Error

No, there wasn't, in part because the INSTALL, README, etc. don't install as part of the doc install. However, I've fixed this now and those files will now be installed in the doc directory. -- John Dennis jden...@redhat.com Looking to carve out IT costs? www.redhat.com/carveoutcosts/

Failed to find module sql Error

Hi all, I am newbie trying to make freeradius work with mysql and daloradius. First my system info: === OS: CentOS 5.3 mysql: 5.0.45 came with CentOS installation freeRadius: version freeradius2-2.1.6-2 (tried to install via yum but yum rejected telling that package is not signed

Re: Failed to find module sql Error

Main distribution package doesn't have mysql support. Have you installed freeradius-mysql (or something like that)? Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Yes. I installed the rpm from

Re: Failed to find module sql Error

You need to use correct secret. Localhost is configured in proxy.conf by default. You can find/change the secret there. Ivan Kalik Kalik Informatika ISP I had a look at proxy.conf and the secrect is testing123. This is what I did. mysql INSERT INTO radcheck (UserName, Attribute, Value)

Re: Failed to find module sql Error

On Fri, Jul 10, 2009 at 6:06 PM, Deepakd88...@gmail.com wrote: You need to use correct secret. Localhost is configured in proxy.conf by default. You can find/change the secret there. Ivan Kalik Kalik Informatika ISP I had a look at proxy.conf and the secrect is testing123. This is what I

Help needed to configure Challenge Response

Can someone guide me with the steps to enable the Challenge Response in Freeradius server? Thanks, Deepak - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

How can I start the freeradius server with user privileges other than root?

I need the instructions to start the freeradius server from any user account of the linux machine other than root. Can anyone help me out? Thanks, Deepak - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

New bee to FreeRadius; need help in configuration

can refresh itself everytime I add a client, automatically. Can anybody help me out? Thanks, Deepak - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: New bee to FreeRadius; need help in configuration

Hi, I feel there should be some way so that the server can refresh itself automatically with the clients without going down. Thanks, Deepak [EMAIL PROTECTED] wrote: Hi, Deepak, Have you considered using a ldap or sql backend instead of flat-file? those , too

freeradius performance , requests per second

. Can you please tell me the average number of authentication requests that freeradius can process per second. can it handle 1 lac requests per second. thanks deepak - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP-TLS problem

. If u know really gud online help available please let me know... copy CA and client certificate on client machine. there are lot of tutorials on net for this. i used one given in linuxjournal . -deepak regards shantanu -- Download prohibited? No problem

Re: EAP-SIM : symbol lookup error

hI Ben there is one file asserts.h is missing search that on net, include that in rlm_sim and recompile. it worked for me. -deepak On 5/15/07, Ben2148 [EMAIL PROTECTED] wrote: I have exactly the same problem (symbol lookup error). Can anyone help me fixing it ? Thanks Ben -- View

Re: EAP-TLS authentication

an entry DEFAULT Auth-Type==EAP, EAP-Type==SIM, Packet-Type==Access-Request Execute-Program=/notify.pl but even after user is authenticated, script is not executed at all. what condition should i use to execute the script when access-request for EAP-SIM comes first to freeradius. thanks deepak - List

EAP-SIM : symbol lookup error

: symbol lookup error: /usr/local/lib/rlm_sim_files-1.1.6.so: undefined symbol: rad_assert thanks Deepak - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP-TLS authentication

Hi Alan. Is there any way in freeradius, where freeradius server can invoke a java program in response to some event. eg if some user is logged out , this event should be propagated to java prog or to some other component. On 3/29/07, Alan DeKok [EMAIL PROTECTED] wrote: deepak kumar wrote

Re: EAP-TLS authentication

something. thanks deepak On 3/23/07, Alan DeKok [EMAIL PROTECTED] wrote: deepak kumar wrote: Hi I am using freeradius 1.1 on linux suse 10.1. I have implemented EAP-TTLS, EAP-TLS and UAM. I want to know is there any way to know by which method user is authenticated. I mean if user

Re: EAP-TLS authentication

database tables. there are two attributes Digest-Algorithm and EAP-Message , but I dont know how to put their values in radius tables. thanks deepak - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP-TLS authentication

Hi Alan thanks for your prompt reply. can you tell me how to modify chillispot to work with EAP-TLS. my radius server, Router and Xsupplicant all are supporting EAP-TLS. deepak On 3/20/07, Alan DeKok [EMAIL PROTECTED] wrote: deepak kumar wrote: ... but even after client authentication from

EAP-TLS authentication

Hi, I am using freeradius1.1 on linux suse 10.1 and chillispot for captive portal. I have implemented EAP -TLS using client and server side certificate and it worked well. but even after client authentication from certificate. the router(chillispot) prompts for a username and password and then