Re: Usage Limit and Accounting Plan

2013-01-22 Thread Russell Mike
1. I need to limit the user monthly usage, for example bandwidth 2Mbps with 5GB monthly usage. 1a.) You would not need script, you need RLM SQLCOUNTER to limit daily/weekly/monthly traffic quota 1b.) you need to control the bandwidth using radius and radius client attributes, such as

Re: Usage Limit and Accounting Plan

2013-01-22 Thread Russell Mike
On Tue, Jan 22, 2013 at 10:17 AM, Sokphak TOUCH touch.sokp...@gmail.comwrote: Thanks Russell for your respond. It would more appreciate if you can share some document. At the mean time I will doing research about it. Regards, Sokphak Understand the concept here, it is very easy with

Re: Realm

2013-01-23 Thread Russell Mike
On Wed, Jan 23, 2013 at 2:47 PM, Miha m...@softnet.si wrote: Hi, my radius client is sending with user-name and password aslo realm. I can not disable sending realm, is it possible to configure radius that will not user realm with user-name (user-name@realm)? i only know that it is

Re: free radius output attributes configuration

2013-02-06 Thread Russell Mike
what is output attributes ? On Wed, Feb 6, 2013 at 10:19 AM, Lakshmi Narayana Baliah lb0074...@techmahindra.com wrote: Hi All, How can configure output attributes in free-radius? How do i do that ??? please help Thanks Lakshmi

Re: Load Balancing Issue

2013-02-12 Thread Russell Mike
There are many different things you are talking at the same time. You want increase the response time of auth. Is your database indexed? Thanks On Tuesday, February 12, 2013, Muhammad Nadeem wrote: thanks alan Actually I am using load balancing for rapid authentication of users. let suppose

Re: DHCP reply don't go out

2013-02-12 Thread Russell Mike
Is there any layer 3 device between client and dhcp server? Then you need dhcp relay agent, if that is not the case chk firewall. Thanks On Tuesday, February 12, 2013, Michele Pinassi wrote: Hi all, i've just installed a FreeRadius server 2.2.0 with DHCP support because i need a dhcp server

Re: radiusd starts but rejects test user

2013-02-15 Thread Russell Mike
On Fri, Feb 15, 2013 at 3:50 PM, a.l.m.bu...@lboro.ac.uk wrote: Hi, I am new to radius. I have installed the freeradius to my linux and after starting radiusd -X I executed radtest tool for testing as below but it could not get authenticated and Access-Reject returned.

Re: User disconnects but stays online in radius

2013-02-18 Thread Russell Mike
On Monday, February 18, 2013, Phil Mayers wrote: On 18/02/13 18:02, Mobin Yazarlou wrote: Hi, I am using freeradius v2.1.12 with MySQL support and noticed if a user disconnect when radius server is down, NAS can not inform radius about user being disconnected and radius assume user is

Re: User disconnects but stays online in radius

2013-02-18 Thread Russell Mike
On Monday, February 18, 2013, Mobin Yazarlou wrote: On Mon, Feb 18, 2013 at 9:50 PM, Phil Mayers p.may...@imperial.ac.ukjavascript:_e({}, 'cvml', 'p.may...@imperial.ac.uk'); wrote: On 18/02/13 18:02, Mobin Yazarlou wrote: Hi, I am using freeradius v2.1.12 with MySQL support and

Re: User disconnects but stays online in radius

2013-02-19 Thread Russell Mike
On Tue, Feb 19, 2013 at 11:08 AM, Phil Mayers p.may...@imperial.ac.ukwrote: On 19/02/13 06:53, Russell Mike wrote: Hi Phil Moby, I am also interested in this solution since experiencing the same problem. I liked the solution no1. But I have no idea where I can get that script but I can

Re: User disconnects but stays online in radius

2013-02-19 Thread Russell Mike
On Tue, Feb 19, 2013 at 11:23 AM, Mobin Yazarlou yazarlo...@gmail.comwrote: On Tue, Feb 19, 2013 at 10:23 AM, Russell Mike radius@gmail.comwrote: On Monday, February 18, 2013, Mobin Yazarlou wrote: On Mon, Feb 18, 2013 at 9:50 PM, Phil Mayers p.may...@imperial.ac.ukwrote: On 18/02

Re: User disconnects but stays online in radius

2013-02-19 Thread Russell Mike
On Tue, Feb 19, 2013 at 5:28 PM, Phil Mayers p.may...@imperial.ac.ukwrote: On 19/02/13 16:09, Russell Mike wrote: *A.) *Enable interim accounting Yes *B.)* Enable post-auth { update reply { Acct-Interim-Interval = 900 } } Yes C.) *You Said:* You also need

MAC-Auth + Freeradius + MySQL Database

2013-02-23 Thread Russell Mike
Greetings Dear Alan D. List Members, First of all, thank you very much for developing such application. I need help, i have functional Freeradius server with MySQL backend. i have been asked to add MAC address authentication support for the servers. i googled the topic and got many many mail

Re: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread Russell Mike
On Sunday, February 24, 2013, Alan DeKok wrote: Russell Mike wrote: i also came across where guys are discussing EAP and MAC authentication. i could not conclude, if it is a better way of doing MAC authentication using EAP. To be clear: you don't. EAP is authentication. MAC

Re: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread Russell Mike
On Sun, Feb 24, 2013 at 2:20 PM, Alan DeKok al...@deployingradius.comwrote: Russell Mike wrote: Thanks for guidelines. exactly, as you stated I simple want to store MAC address somewhere compair against the request. Can they be in radcheck? I wouldn't do that. Just create your own

Re: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread Russell Mike
On Sun, Feb 24, 2013 at 1:55 PM, David Peterson dav...@wirelessconnections.net wrote: I know of one person doing something similar to what you are looking to do. If your NAS sends the MAC of the device with the EAP request, you can extract the MAC from the request using unlang and check that

Re: MAC-Auth + Freeradius + MySQL Database

2013-02-24 Thread Russell Mike
scheduling 500 home visits was a worse option than writing some code to authorize the CPE. ** ** David ** ** *From:* Russell Mike [mailto:radius@gmail.com] *Sent:* Sunday, February 24, 2013 10:00 AM *To:* David Peterson-WirelessConnections; FreeRadius users mailing list

Re: Authentication Using Framed-IP-Address

2013-03-07 Thread Russell Mike
Hi Arran, Thanks for the answer to my question. Nothing wrong to say thanks but perhaps to see it from that angle. Regards / RM -- On Thu, Mar 7, 2013 at 3:12 PM, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: On 7 Mar 2013, at 09:50, Russell Mike radius@gmail.com wrote: Dear

Redirecting Reject Request To Webpage

2013-03-08 Thread Russell Mike
Hi FreeRadius List Members, Thanks for all the support ever. i am having difficulty to understand something, i need help. i am able to configure mac authentication base on the following logic. it Works !! username=mac address;attribute=Auth-Type;op=:=;value=Accept username=mac

Re: Redirecting Reject Request To Webpage

2013-03-08 Thread Russell Mike
...@deployingradius.comwrote: Russell Mike wrote: *Question:* Redirecting Reject Request To Webpage For example, a customer would get reject from FR due to non payment. but at this stage customer do not know, what is happening. Why internet in down. We want the request to redirected to a web page

Re: Redirecting Reject Request To Webpage

2013-03-10 Thread Russell Mike
Thanks Dear Arran. your input is very much appreciated. I will check on NAS side. Thanks On Fri, Mar 8, 2013 at 4:30 PM, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: On 8 Mar 2013, at 11:22, Russell Mike radius@gmail.com wrote: Thanks Dear Alan D. Good answer

Re: Cannot access radius server from remote host

2013-03-10 Thread Russell Mike
Hi, note for ever. FR will simply ignore the request if NAS (client) in not configured. As Mohammed has explained by giving full example earlier. when your NAS will change in future and may need additional NAS support. You need to define second client entry in the same file or in MySQL DB, only if

FR Login-Time Vs Unix-Time-Based-Login

2013-03-12 Thread Russell Mike
Hi Freeradius List, Why someone will use Unix-Time-Based-Login why not Login-Time FR attribute? Does it offer more flexibility or control over each other. Actually, we want to implement login based on time. i am reading mail archives since yesterday to understand basic functionality of the

Re: FR Login-Time Vs Unix-Time-Based-Login

2013-03-12 Thread Russell Mike
Hi, Please mind my mistake 1.) Unix-Time-Based-Login using unlang rather than Login-Time FR attribute. On Tue, Mar 12, 2013 at 11:06 AM, Russell Mike radius@gmail.com wrote: Hi Freeradius List, Why someone will use Unix-Time-Based-Login why not Login-Time FR attribute? Does it offer

Re: How to use checkval

2013-03-13 Thread Russell Mike
checkval can helpful when you need to apply NAS-identifier Calling-Station-Id - FR attributes. checkval calledstationid { item-name = Called-Station-Id check-name = Called-Station-Id data-type = string notfound-reject = no } checkval nasidentifier {

Re: How to use checkval

2013-03-13 Thread Russell Mike
- Wed Mar 13 17:47:09 2013 I check the ldap.attrmap and its correctly mapped to the LDAP attribute. So how to make sure that Radius reject the request when the MAC address is not listed.. thats what i want to achieve Thanks Danny On Wed, Mar 13, 2013 at 4:51 PM, Russell Mike radius

Re: how i can check if password is not correct ?

2013-03-30 Thread Russell Mike
Debian, Ubuntu: freeradius -XXX Redhat CentOS: radiusd -XXX Thank / RM -- On Sat, Mar 30, 2013 at 9:12 AM, Mehdi Ravanbakhsh baba...@gmail.comwrote: Hi All if password in request is not correct wich module handele this and reject the client? where i can check if password is not correct

Re: noresetcounter

2013-04-01 Thread Russell Mike
Because you have disable the valid check item Query using # sqlcounter forevertimecounter { counter-name = Max-All-Session-Time check-name = Max-All-Session count-attribute = Acct-Session-Time reply-name = Session-Timeout

Freeradius Expire-After How To .. ?

2013-04-01 Thread Russell Mike
Hi List, i need to expire the prepaid card after three months of first login. after reading mail achieves, i was able to figured out that i need to use Expire-After FR attribute and value in seconds. i was bit of unclear how to bring the module in to the action because i am unable to locate

Re: Freeradius Expire-After How To .. ?

2013-04-02 Thread Russell Mike
settings in Plan. Regards, Muhammad Nuzaihan Bin Kamal Luddin On Mon, 2013-04-01 at 17:12 +, Russell Mike wrote: Hi List, i need to expire the prepaid card after three months of first login. after reading mail achieves, i was able to figured out that i need to use Expire-After

Re: session section is not working

2013-04-07 Thread Russell Mike
Do you mean simultaneous session? If you using MySQL, Please check if enabled under session section. Thanks RM -- On Friday, April 5, 2013, Mehdi Ravanbakhsh wrote: Hi All my Session Section in site enable in not woking ! i do not have any log about that section in my radius.log file . Do

Volume Control

2013-04-16 Thread Russell Mike
Dear Alan D. What Freeraidus is using currently as to keep track. Is it 64bit or 32bit. Thanks / Regards - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Volume Control

2013-04-17 Thread Russell Mike
/ Regards On Tue, Apr 16, 2013 at 5:42 PM, Alan DeKok al...@deployingradius.comwrote: Russell Mike wrote: Dear Alan D. I may create a new rule. People who address mail to me personally get unsubscribed. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org

Re: captive portal auth with freeradius

2013-04-17 Thread Russell Mike
Hi, Can you please revise your question and put it in better way, i am not clear, do some more typing. if captive portal (NAS) is CoovaChilli, this works for me. HS_RAD_PROTO=pap Thanks / Regards On Wed, Apr 17, 2013 at 11:51 AM, Chitrang Srivastava chitrang.srivast...@gmail.com wrote: I

Re: Volume Control

2013-04-17 Thread Russell Mike
Dear Arrran, Thanks you very(32) much. Thats what i wanted to know if it is not FR limitation. Regards / RM -- On Wed, Apr 17, 2013 at 2:13 PM, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: On 17 Apr 2013, at 05:27, Russell Mike radius@gmail.com wrote: Hi Aran, thanks

Re: radgroupcheck attributes and test client

2013-05-03 Thread Russell Mike
FR should be able to know if the allowed time used / consumed before it can deny request. have you setup rlm_sqlcounter ? Thanks RM -- On Fri, May 3, 2013 at 7:49 AM, ch2...@arcor.de wrote: All, I'm a newbie in radius. I've setup freeradius with mySQL and max-daily-session. When I set

Re: radgroupcheck attributes and test client

2013-05-05 Thread Russell Mike
You said same setup is working with Coovachilli, same groups / profiles? Else cross chech your reply check items, if in place. If FR groups are same check NAS side. Thanks On Friday, May 3, 2013, wrote: Hi, Von: Russell Mike radius@gmail.com javascript:; FR should be able to know

Re: radgroupcheck attributes and test client

2013-05-06 Thread Russell Mike
On Sun, May 5, 2013 at 6:51 PM, ch2...@arcor.de wrote: Von: Russell Mike radius@gmail.com You said same setup is working with Coovachilli, same groups / profiles? Else cross chech your reply check items, if in place. If FR groups are same check NAS side. Thanks I'll check

Service Provisioning Using AAA (FreeRadius)

2013-05-28 Thread Russell Mike
Dear FreeRadius Gurus Greetings, I work with an ISP, i have been asked to research about service provisioning using AAA. I am NOT very new to FreeRadius. Have implemented and managing central CoovaChilli hotspot solution where we run more than 35 hotspots across the city using CoovaChilli +

Re: Service Provisioning Using AAA (FreeRadius)

2013-05-28 Thread Russell Mike
: Russell Mike wrote: Currently, We do manually connection / disconnection. If a customer did not pay until 31st, somebody manually disconnect the link. And manually connect when customer comes to pay. That's what Session-Timeout is for. Set it to 1 day (86400 seconds). That way they have

Re: Service Provisioning Using AAA (FreeRadius)

2013-06-04 Thread Russell Mike
* | | := | *Accept * | | 67 | *41.157.61.30* | | := | *Reject*| Thanks Everyone Regards --RM On Tue, May 28, 2013 at 4:12 PM, Alan DeKok al...@deployingradius.comwrote: Russell Mike wrote: Dear Mulindawa / Marinal Alan Dekok Thanks you very much for your advice, very

Re: Accouting time duratin calculation

2013-06-05 Thread Russell Mike
Hi, On Wed, Jun 5, 2013 at 7:43 AM, Miha m...@softnet.si wrote: Hi, how does freeradius calculate duration time? MySQL query grabs the information from radacct i.e. sqlcounter forevertimecounter { counter-name = Max-All-Session-Time check-name =

Re: Service Provisioning Using AAA (FreeRadius)

2013-06-05 Thread Russell Mike
Dear Alan DeKok John Dennis Thanks for your input, words and clarification. Explanation was very good. Moreover, good to have people like you on the list. Regards Prabhpal Singh On Wed, Jun 5, 2013 at 1:34 PM, Alan DeKok al...@deployingradius.comwrote: John Dennis wrote: You're both right,

Re: Service Provisioning Using AAA (FreeRadius)

2013-06-05 Thread Russell Mike
Hi John Alan, Kindly clarify Does this means, it is posible to use only authorize function of FR and process all authentication requests with following virtual server? 1. server accept_all_requests { authorize { update control {

Re: Service Provisioning Using AAA (FreeRadius)

2013-06-05 Thread Russell Mike
On Wed, Jun 5, 2013 at 4:17 PM, Alan DeKok al...@deployingradius.comwrote: Russell Mike wrote: Hi John Alan, Kindly clarify This isn't a private list. Messages should NOT be addressed to individual people. Apologies Everyone. Well noted for future Just reply to a message. It's

Re: Service Provisioning Using AAA (FreeRadius)

2013-06-06 Thread Russell Mike
. is it even posible to control that (Max-All-Session) using unlang code ? Thanks / Regards --RM On Wed, Jun 5, 2013 at 4:17 PM, Alan DeKok al...@deployingradius.comwrote: Russell Mike wrote: Hi John Alan, Kindly clarify This isn't a private list. Messages should NOT be addressed

WARNING: Unknown value specified for Post-Auth-Type

2013-06-07 Thread Russell Mike
Hi, It is not default virtual server). Following error occurs, when user attempt to login with invalid password, otherwise not. is it normal? or should be troubleshooted. Info: WARNING: Unknown value specified for Post-Auth-Type. Cannot perform requested action My postauth section post-auth

Re: unlang and update section

2013-06-13 Thread Russell Mike
Yes, i have come across this error once. there is little mistake in your unlang code. understand form following working code. ## Authorization Area Starts Here # If user not present allow them free access # Between 10:00 and 12:59PM ('Any1000-1259') # Whole Day ('Any-2359')

Vouchers Top Up

2013-07-16 Thread Russell Mike
Hi List is anyone able to implement top up for hotspot vouchers ? Top up means, if a hotspot user is browsing and his 3600 seconds are getting finish. he wish to top up another 1800 seconds to avoid disconnection. Thanks / Regards - List info/subscribe/unsubscribe? See

Re: sql_counter module doesn't count

2013-09-10 Thread Russell Mike
Hi, I am willing to help, What kind of NAS do you use? Does your NAS support accounting ? Thanks RM -- On Mon, Aug 12, 2013 at 9:50 PM, lucia j.esko...@gmx.de wrote: Thanks for quick reply, well I guess not. Can you give me a hint how I can figure it out how I can configure this ? I'm I

Managing Data Volume Control More Than 4GB FR CoovaChilli

2013-10-08 Thread Russell Mike
Hi List Members i have been reading archives and tying to understand for some days now, but unsuccessful. i am currently working to extend data volume control up to 10GB, which is requirement for the organization. Is anyone able to manage more then 4GB using CoovaChilli Freeradius? Since there

Re: Managing Data Volume Control More Than 4GB FR CoovaChilli

2013-10-08 Thread Russell Mike
Dear Arran C. Bell, Thank you very much, i am extremely grateful for your advise and guidelines for troubleshoot also. i am currently experimenting a different rlm_sqlcounter using CoovaChilli dictionary All-In-MB. In result, i can store short number in db. This counter would reset at 2TB with

Re: Managing Data Volume Control More Than 4GB FR CoovaChilli

2013-10-09 Thread Russell Mike
for failing: : un recognized value specified in * /usr/share/freeradius/dictionary.chillihotspot* Thanks / Regards RM -- On Tue, Oct 8, 2013 at 3:38 PM, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: On 8 Oct 2013, at 15:40, Russell Mike radius@gmail.com wrote: Dear Arran C. Bell

Re: Managing Data Volume Control More Than 4GB FR CoovaChilli

2013-10-09 Thread Russell Mike
on frequent basis. base on the output from the counter module (ok,noop,etc..), i understand how to update the reply from un-lang to log off user. Thanks / Regards RM-- On Wed, Oct 9, 2013 at 1:12 PM, Alan DeKok al...@deployingradius.comwrote: Russell Mike wrote: All-In-MB counter works. Please note

Re: Managing Data Volume Control More Than 4GB FR CoovaChilli

2013-10-09 Thread Russell Mike
Thanks Alan D understood. I will use unlang in accounting. Thanks On Wednesday, October 9, 2013, Alan DeKok wrote: Russell Mike wrote: So if you want to do something when the users traffic is over the quota, you have to do it in the accounting section. Could you please kindly indicate