Hello Jaskaran -
Can you please send me a trace 4 debug showing what is happening?
thanks
Hugh
On 13/11/2003, at 3:04 AM, jsingh wrote:
Hello Hugh
� I understand that Radiator is supposed to drop the connection after it connects and talks to the LDAP Server. But I can see a connection for each of my incoming requests. I changed the configuration file for Radiator to sustain one connection, which is not the ideal situation as far as my project is concerned. I would like to know if I am missing something in my config or is this a bug in radiator. I am attaching my config without the secrets. I am using Radiator-3.5 on solaris 8 with perl 5.6.1
Thanks
�
Foreground
LogStdout
LogDir����������� /var/log/radius3.5.1���������
DbDir������ .����
Trace������ 4
PidFile ��� /var/log/radius3.5.1/radiusd.pid
AuthPort��� 11645
AcctPort��� 11646
DefineGlobalVar Max 7200
DictionaryFile /usr/local/adm/src/Radiator-3.5/dictionary
�
# Clients to suit your site. ###################################
<Client xx.xx.xx.xx>
����� Secret����� xxxxxx
����� DupInterval 0
</Client>
##################################
�
<Client xxxx.fdu.edu>
����� Secret xxxxx
����� DupInterval 0
</Client>
##################################
<Client xxxxxxx>
����� Secret xxxx
����� DupInterval 0
</Client>
#################################
�
<Client xxx.xx.xx.xxx>
����� Secret xxx
����� DupInterval 0
</Client>
�
<Client xx.xx.xx.xx>
����� #Description Cisco AS5300
����� Secret xxxxx
����� DupInterval 0
</Client>
<Client xx.xx.xx.xx>
����� #Description Cisco AS5300
����� Secret xxxx
����� DupInterval 1
</Client>
<Client DEFAULT>
Secret
DupInterval 0
</Client>
�
<AuthBy LDAP2>
����� ����� Identifier� CheckLDAP��
����������� Host� xxx.fdu.edu
����������� Port 636
����� ����� UseSSL
����������� SSLCAPath /usr/local/adm/etc/
����������� BaseDN dc=xxx, dc=xxx��������
����������� Scope subtree
����������� UsernameAttr� xxxxx����
����������� PasswordAttr� userPassword
����������� ServerChecksPassword���
����������� Timeout 2
��������������� FailureBackoffTime 30
��������������� HoldServerConnection
����������� #CheckAttr cn
�����������������
����������� #AuthAttrDef ipaddress,Framed-IP-Address,reply
�
����������� AddToReply Framed-Protocol = PPP,\
������� ��������� Framed-Routing = None,\
������� ��������� Framed-MTU = 1500,\
����������������� Framed-Compression = Van-Jacobson-TCP-IP,\
����������������� Service-Type = Framed-User,\
����������������� Idle-Timeout = 300
�����������������
����������� Debug 255
�
</AuthBy> ####################################################################### ##
<AuthBy SQL>
�����
����� Identifier� Block-Time-SQL
����� DBSource���� dbi:mysql:xxxx:localhost
����� DBUsername�� xxxxxx
����� DBAuth������ xxx
����� DefaultSimultaneousUse 1
����� AccountingTable xxxxx
����� AuthSelect Select Time_Left from RADUSERS where User_Name='%n'
����� AuthColumnDef 0, Session-Timeout,reply
�����
����� AcctSQLStatement Update RADUSERS set Time_Left=Time_Left -'%{Acct-Session-Time}'� \����
����������� where User_Name='%n';
�
�
</AuthBy> ####################################################################### #
<AuthLog SQL>
����� Identifier REQUEST
����� DBSource dbi:mysql:xxxx:localhost
����� DBUsername xxxxxx�����
����� DBAuth����������� xxxxxx
����� LogSuccess�
����� SuccessQuery insert into RADAUTHLOG (TIME_STAMP,USERNAME,TYPE) values ('%l','%n',1)
����� LogFailure
����� FailureQuery insert into RADAUTHLOG (TIME_STAMP,USERNAME,TYPE,REASON) values ('%l','%n',0,%1) </AuthLog> ####################################################################### ##
<Realm 1.1>
����� AuthByPolicy ContinueWhileAccept
����� PreAuthHookfile:"/usr/local/adm/bin/filename.pl"
����� AuthBy CheckLDAP
����� AuthBy Block-Time-SQL
����� AuthLog REQUEST��
����� MaxSessions 1
����� PostAuthHookfile:"/usr/local/adm/bin/filename.pl"
����� SessionDatabase SQLDB
</Realm> ################################################################
<Realm 1.1.1>
����� AccountingHandled
����� AuthByPolicy ContinueWhileAccept
����� PreAuthHookfile:"/usr/local/adm/bin/filename.pl"
����� AuthBy CheckLDAP
����� AuthBy Block-Time-SQL
����� PostAuthHookfile:"/usr/local/adm/bin/filename.pl"
����� MaxSessions 1
����� SessionDatabase SQLDB
����� AcctLogFileName /var/radius/Acct
</Realm> #######################################################################
<SessionDatabase SQL>
��������������� Identifier SQLDB
��������������� DBSource�� dbi:mysql:xxx:localhost
��������������� DBUsername xxxxx
��������������� DBAuth���� xxxxx
</SessionDatabase>
�
�
�
Jaskaran Singh
University Systems & Security
Fairleigh Dickinson University
Teaneck,NJ 07666
�
NB: have you included a copy of your configuration file (no secrets), together with a trace 4 debug showing what is happening?
-- Radiator: the most portable, flexible and configurable RADIUS server anywhere. Available on *NIX, *BSD, Windows, MacOS X. - Nets: internetwork inventory and management - graphical, extensible, flexible with hardware, software, platform and database independence. - CATool: Private Certificate Authority for Unix and Unix-like systems.
=== Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
