Re: DHCP support in freeradius

it. I will be doing just that. I'll let you guys know how it works out (in our test environment, anyway). Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.32.14-127.fc12.x86_64 x86_64 GNU/Linux 19:26:14 up 20 days, 10:14, 8 users, load average: 0.03, 0.10, 0.08 - List info/subscribe

DHCP support in freeradius

support usable or should I still stay away? Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.32.14-127.fc12.x86_64 x86_64 GNU/Linux 17:17:03 up 19 days, 8:04, 7 users, load average: 0.13, 0.10, 0.09 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Some users getting duplicate NULL acctstoptime records in radacct

than the other? Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.29-170.2.78.fc10.x86_64 x86_64 GNU/Linux 11:44:44 up 10 days, 12:41, 5 users, load average: 1.41, 0.83, 0.43 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Some users getting duplicate NULL acctstoptime records in radacct

, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.29-170.2.78.fc10.x86_64 x86_64 GNU/Linux 11:45:32 up 4 days, 12:42, 5 users, load average: 1.21, 1.18, 0.91 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Some users getting duplicate NULL acctstoptime records in radacct

. So, how could this happen? If it helps, I'm not using an ippool at the moment. I have IPs assigned to the user with entries in radreply (framed-ip-address). Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.29-170.2.78.fc10.x86_64 x86_64 GNU/Linux 19:43:28 up 3 days, 20:40, 3 users, load

Re: Comparing live sessions between NAS and freeradius

a better idea of how to solve my problem. But, I still have a question: does lease-duration affect stale sessions? That is, if lease-duration is 3600, any sessions longer than that will be regarded as stale by freeradius, and therefore killed? Regards, Ranbir -- Kanwar Ranbir Sandhu Linux

Re: Decoupled accounting

: listen { ipaddr = 1.1.1.2 port = 0 interface = eth0 type = acct virtual_server = write_detail.blah.com } Would that work? If not, why? Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.25-170.2.72.fc10

Re: Decoupled accounting

buffered accounting adjustments. I just copied and pasted only this one part to spare everyone another long email. Thanks for answering my questions. Now to do some testing to see if it works. Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.25-170.2.72.fc10.x86_64 x86_64 GNU/Linux 08:31:53 up

Re: Decoupled accounting

On Wed, 2009-07-29 at 13:23 -0400, Kanwar Ranbir Sandhu wrote: I'm using freeradius 2.1.6 and want to move to decoupled accounting. I understand the example configs, but one question I still have is this: do I have to have preacct and accounting sections in my virtual.blah.com file (very

Re: Decoupled accounting

in the listen section. Thanks for answering. It was the the only question I had about decoupled accounting. The configs were otherwise quite helpful. Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.25-170.2.72.fc10.x86_64 x86_64 GNU/Linux 14:39:15 up 6 days, 6:06, 4 users, load average: 1.59

Decoupled accounting

, even though I will have preacct and accounting sections in the decoupled-accounting file? Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.25-170.2.72.fc10.x86_64 x86_64 GNU/Linux 13:16:02 up 5 days, 4:42, 5 users, load average: 1.43, 1.36, 1.26 - List info/subscribe/unsubscribe? See

Re: Decoupled accounting

about the sections where you define the various other modules that preacct and accounting would use (e.g. sql, sqlippool, etc.). Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.25-170.2.72.fc10.x86_64 x86_64 GNU/Linux 18:01:57 up 5 days, 9:28, 4 users, load average: 1.16, 1.09, 0.63

Re: simultaneous checking

-- Kanwar Ranbir Sandhu Linux 2.6.27.25-170.2.72.fc10.x86_64 x86_64 GNU/Linux 09:46:11 up 4 days, 16:17, 3 users, load average: 1.87, 1.62, 1.56 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: simultaneous checking

causing database filed overflow. No worries. In my case, I simply do not know if we have control over the length of those attributes. Frankly, I assumed whatever was coming in was the default setup in the NAS. Perhaps it isn't. Thanks, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.25-170.2.72

Re: simultaneous checking

for request 4 Sending Access-Reject of id 50 to 1.2.3.4 port 5 Reply-Message := \r\nYou are already logged in - access denied\r\n\n Waking up in 4.9 seconds. Cleaning up request 4 ID 50 with timestamp +360 Ready to process requests. -- Kanwar Ranbir Sandhu Linux 2.6.27.25-170.2.72.fc10

Re: simultaneous checking

0 0 NULL Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.25-170.2.72.fc10.x86_64 x86_64 GNU/Linux 14:32:20 up 3 days, 21:03, 3 users, load average: 1.52, 1.59, 1.60 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: simultaneous checking

On Tue, 2009-07-21 at 15:00 -0400, Kanwar Ranbir Sandhu wrote: The DB shows the exact same Acct-Session-Id that is in the packets themselves. Below are the three rows that get entered into radacct when the AAA test is run from the E120. Is it the = in the callingstationid field that's

Re: simultaneous checking

On Tue, 2009-07-21 at 15:58 -0400, Kanwar Ranbir Sandhu wrote: On Tue, 2009-07-21 at 15:00 -0400, Kanwar Ranbir Sandhu wrote: The DB shows the exact same Acct-Session-Id that is in the packets themselves. Below are the three rows that get entered into radacct when the AAA test is run from

SQL and huntgroups

to put it into the default config file? Thanks, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.25-170.2.72.fc10.x86_64 x86_64 GNU/Linux 16:41:50 up 2 days, 23:12, 4 users, load average: 0.54, 0.53, 0.37 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

simultaneous checking

}' \ # AND acctstoptime IS NULL -- Kanwar Ranbir Sandhu Linux 2.6.27.25-170.2.72.fc10.x86_64 x86_64 GNU/Linux 17:08:41 up 2 days, 23:39, 4 users, load average: 0.19, 0.23, 0.27 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: simultaneous checking

On Mon, 2009-07-20 at 22:54 +0100, Ivan Kalik wrote: I can't see anything good coming from those changes - only bad. I would be very surprised if that simultaneous use check works properly. It checks local IP pool and not something related to the NAS. That's what I was thinking. Thanks for

Re: simultaneous checking

. Thanks for the info. Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.25-170.2.72.fc10.x86_64 x86_64 GNU/Linux 21:15:49 up 3 days, 3:46, 3 users, load average: 0.41, 0.30, 0.22 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Change of Authorization (RFC 3576 / 5176)

On Thu, 2009-06-11 at 07:46 +0200, Alan DeKok wrote: And how would the server know if you changed the group? This is what I was thinking as well. If the group changes, you'll need to tell FreeRADIUS to re-evaluate the policies. Ok, makes sense. Regards, Ranbir -- Kanwar Ranbir Sandhu

Re: Change of Authorization (RFC 3576 / 5176)

changing the group a user in? For example, if a user in the allowed group is updated to be in the disallowed group (and auth/acct are in mysql), freeradius would originate a CoA packet to disconnect the user. Can this be done with unlang, or am I mad? Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.21

Re: Change of Authorization (RFC 3576 / 5176)

On Wed, 2009-06-10 at 15:09 -0400, Kanwar Ranbir Sandhu wrote: I have a related question, although it's a bit off topic. On Tue, 2009-05-19 at 14:08 +0200, Alan DeKok wrote: In 2.1.6, the server could *originate* CoA packets. e.g. If the users bandwidth consumption is over a quota, send

To proxy or not to proxy?

I need any other feature (in proxy.conf). Is there a reason why I should consider using home servers and/or proxies? I guess I'm just trying to figure out if I'm shooting myself in the foot by not using them. Thanks, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.21-170.2.56.fc10.x86_64 x86_64

Re: To proxy or not to proxy?

Ranbir Sandhu Linux 2.6.27.21-170.2.56.fc10.x86_64 x86_64 GNU/Linux 20:38:58 up 15 days, 21:48, 3 users, load average: 0.04, 0.04, 0.06 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: current RHEL/CentOS pre-built packages (Was: freeRADIUS)

for reporting this. This is fantastic! I won't have to maintain my own freeradius package for CentOS 5. Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.21-170.2.56.fc10.x86_64 x86_64 GNU/Linux 00:29:20 up 10 days, 1:39, 2 users, load average: 0.09, 0.22, 0.24 - List info/subscribe

buffered-sql doesn't make sense to me

. If it's not, how is it different? Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.21-170.2.56.fc10.x86_64 x86_64 GNU/Linux 15:25:10 up 20 days, 15:21, 4 users, load average: 1.09, 1.13, 0.83 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: buffered-sql doesn't make sense to me

terms, the end result is exactly the same? Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.21-170.2.56.fc10.x86_64 x86_64 GNU/Linux 16:52:53 up 20 days, 16:49, 4 users, load average: 1.24, 1.22, 1.18 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

failover and load balancing

, and then use that virtual server IP on the NAS? I don't get it. I must be missing something. Any help would be appreciated. Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.21-170.2.56.fc10.x86_64 x86_64 GNU/Linux 13:45:51 up 3 days, 13:42, 3 users, load average: 1.07, 0.61, 0.50 - List

RE: failover and load balancing

on multiple mysql servers. That's why I mentioned database cluster. I don't know if my assumption is correct. Regards, Ranbir -- Kanwar Ranbir Sandhu Linux 2.6.27.21-170.2.56.fc10.x86_64 x86_64 GNU/Linux 16:26:57 up 3 days, 16:23, 3 users, load average: 1.39, 1.30, 1.34 - List info/subscribe