Re: FR supported attributes
Yes. Expiration can stop them logging on after a week and Max-All-Session can limit usage to 10 hours. Ivan Kalik Kalik Informatika ISP Dana 10/3/2007, PD [EMAIL PROTECTED] piše: Unfortunatelly, I found the answer of the similar question. see http://www.arcknowledge.com/gmane.comp.freeradius.user/2003-02/msg00671.html Well.. just to make sure, can Expiration attribute work together with Max-All-Session attribute ? The case is suppose to create an account for 10 hours but only valid one week after the creation date. TIA PD On 3/10/2007, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Radius attributes - http://www.freeradius.org/rfc/attributes.html . You actually invent sqlcounter attributes yourself by making the appropriate SQL query. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [Chillispot] Correction of Reply Messages
I think that this is a trivial bug:
sqlcounter noresetcounter {
counter-name = Max-All-Session-Time
check-name = Max-All-Session
sqlmod-inst = sql
key = User-Name
reset = never
query = SELECT SUM(AcctSessionTime) FROM radacct WHERE
UserName='%{%k}'
}
It sends reset parameter instead of (?)check name parameter in the reply.
You should report it.
There should be something else (? %S if there is one) instead of %s here:
snprintf(msg, sizeof(msg), Your maximum %s usage time has been
reached, data-reset);
Ivan Kalik
Kalik Informatika ISP
Dana 10/3/2007, PD [EMAIL PROTECTED] piše:
Thx Brad...
But... our FR installation is came from FBSD ports, not self compiling.
How to apply yr patch ?
Cheers
PD
On 3/10/2007, Brad Evans [EMAIL PROTECTED] wrote:
Hi,
Check out the FreeRadius forum at www.chillispot.org - there is a
patch there which allows you to specify custom reply messge text.
Cheers
PD wrote:
Dear all,
Sorry for cross post... since I doubt about which area of this question.
I just create one account call test for duration 300 second / 5 minutes.
After the maximum time reached, I logged by the system out. When I try
to log in again, the reply message display is Your maximum never usage
time has been reached
Seems that I have some correction for the message (take out never), but I
do not know how to do it.
Can some one let me know where to edit the above reply message ?
TIA
PD
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
requiring a sample of a mysql radius database
Hey everyone, I'm working on a new radius control panel in php and for the sake of working with actual records I need some real data to fill my radacct table as well as my radreply and others. Ofcourse those tables are including passwords and other private stuff so I'm not talking about a dump of the radius database from your production systems :) So if you have any test systems I would love it if you could attach a dump of the radius database. Thanks guys. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [Chillispot] Correction of Reply Messages
I don´t understand what you want exactly, but if want change the message,
You can check the reply message in your hostspotlogin.cgi or php script, so
when receibe
if ($msg ==Your maximum) $msg = The message you want
echo $msg;
That is did.
Sorry if not you what you are looking for, but my english is too bad.
From: [EMAIL PROTECTED]
Reply-To: FreeRadius users mailing list
freeradius-users@lists.freeradius.org
To: FreeRadius users mailing list freeradius-users@lists.freeradius.org
Subject: Re: [Chillispot] Correction of Reply Messages
Date: Sat, 10 Mar 2007 11:39:19 +0100
I think that this is a trivial bug:
sqlcounter noresetcounter {
counter-name = Max-All-Session-Time
check-name = Max-All-Session
sqlmod-inst = sql
key = User-Name
reset = never
query = SELECT SUM(AcctSessionTime) FROM radacct WHERE
UserName='%{%k}'
}
It sends reset parameter instead of (?)check name parameter in the reply.
You should report it.
There should be something else (? %S if there is one) instead of %s here:
snprintf(msg, sizeof(msg), Your maximum %s usage time has been
reached, data-reset);
Ivan Kalik
Kalik Informatika ISP
Dana 10/3/2007, PD [EMAIL PROTECTED] pi¹e:
Thx Brad...
But... our FR installation is came from FBSD ports, not self compiling.
How to apply yr patch ?
Cheers
PD
On 3/10/2007, Brad Evans [EMAIL PROTECTED] wrote:
Hi,
Check out the FreeRadius forum at www.chillispot.org - there is a
patch there which allows you to specify custom reply messge text.
Cheers
PD wrote:
Dear all,
Sorry for cross post... since I doubt about which area of this
question.
I just create one account call test for duration 300 second / 5
minutes.
After the maximum time reached, I logged by the system out. When I try
to log in again, the reply message display is Your maximum never
usage
time has been reached
Seems that I have some correction for the message (take out never),
but I
do not know how to do it.
Can some one let me know where to edit the above reply message ?
TIA
PD
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
_
Find what you need at prices youll love. Compare products and save at MSN®
Shopping.
http://shopping.msn.com/default/shp/?ptnrid=37,ptnrdata=24102tcode=T001MSN20A0701
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FR supported attributes
If you use Chillispot, put in your user Max-All-Session and WISPr-Session-Terminate-Time they work very good together because if you use Expire attribute the freeradius know it but chillispot no, so if the user try to connect after the Expire time the radius reject this connection, but i the user is connected and the chillispot don't know the expire attribute so the connection continue. here is the suported attributes for the chillispot http://www.chillispot.org/features.html#mozTocId149863 From: PD [EMAIL PROTECTED] Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Subject: Re: FR supported attributes Date: Sat, 10 Mar 2007 03:46:50 + Unfortunatelly, I found the answer of the similar question. see http://www.arcknowledge.com/gmane.comp.freeradius.user/2003-02/msg00671.html Well.. just to make sure, can Expiration attribute work together with Max-All-Session attribute ? The case is suppose to create an account for 10 hours but only valid one week after the creation date. TIA PD On 3/10/2007, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Radius attributes - http://www.freeradius.org/rfc/attributes.html . You actually invent sqlcounter attributes yourself by making the appropriate SQL query. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _ Get a FREE Web site, company branded e-mail and more from Microsoft Office Live! http://clk.atdmt.com/MRT/go/mcrssaub0050001411mrt/direct/01/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: requiring a sample of a mysql radius database
Very well, I´m doing the same, but i can't find information about the way freeradius process the attributes and operator, I have a litle idea but some times the results don´t match with my idea. I supose is a problem in my freeradius confiration or maybe in mySQL configuration, so if you find this information please send to me. Thanks From: liran tal [EMAIL PROTECTED] Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Subject: requiring a sample of a mysql radius database Date: Sat, 10 Mar 2007 14:39:12 +0200 Hey everyone, I'm working on a new radius control panel in php and for the sake of working with actual records I need some real data to fill my radacct table as well as my radreply and others. Ofcourse those tables are including passwords and other private stuff so I'm not talking about a dump of the radius database from your production systems :) So if you have any test systems I would love it if you could attach a dump of the radius database. Thanks guys. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _ Find what you need at prices youll love. Compare products and save at MSN® Shopping. http://shopping.msn.com/default/shp/?ptnrid=37,ptnrdata=24102tcode=T001MSN20A0701 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [Chillispot] Correction of Reply Messages
It will (probably) work for someone with ChilliSpot, but the problem in
Freeradius will remain. I am pointing out the line in rlm_sqlcounter.c
code which is quite likely the reason for the error. If someone
fixes this module this problem will be resolved for everybody in new
Freeradius versions. I hope that the idea is to fix the bug when you
find one.
Ivan Kalik
Kalik Informatika ISP
Dana 10/3/2007, Internet-Wifi Operador [EMAIL PROTECTED]
piše:
I don´t understand what you want exactly, but if want change the message,
You can check the reply message in your hostspotlogin.cgi or php script, so
when receibe
if ($msg ==Your maximum) $msg = The message you want
echo $msg;
That is did.
Sorry if not you what you are looking for, but my english is too bad.
From: [EMAIL PROTECTED]
Reply-To: FreeRadius users mailing list
freeradius-users@lists.freeradius.org
To: FreeRadius users mailing list freeradius-users@lists.freeradius.org
Subject: Re: [Chillispot] Correction of Reply Messages
Date: Sat, 10 Mar 2007 11:39:19 +0100
I think that this is a trivial bug:
sqlcounter noresetcounter {
counter-name = Max-All-Session-Time
check-name = Max-All-Session
sqlmod-inst = sql
key = User-Name
reset = never
query = SELECT SUM(AcctSessionTime) FROM radacct WHERE
UserName='%{%k}'
}
It sends reset parameter instead of (?)check name parameter in the reply.
You should report it.
There should be something else (? %S if there is one) instead of %s here:
snprintf(msg, sizeof(msg), Your maximum %s usage time has been
reached, data-reset);
Ivan Kalik
Kalik Informatika ISP
Dana 10/3/2007, PD [EMAIL PROTECTED] piše:
Thx Brad...
But... our FR installation is came from FBSD ports, not self compiling.
How to apply yr patch ?
Cheers
PD
On 3/10/2007, Brad Evans [EMAIL PROTECTED] wrote:
Hi,
Check out the FreeRadius forum at www.chillispot.org - there is a
patch there which allows you to specify custom reply messge text.
Cheers
PD wrote:
Dear all,
Sorry for cross post... since I doubt about which area of this
question.
I just create one account call test for duration 300 second / 5
minutes.
After the maximum time reached, I logged by the system out. When I try
to log in again, the reply message display is Your maximum never
usage
time has been reached
Seems that I have some correction for the message (take out never),
but I
do not know how to do it.
Can some one let me know where to edit the above reply message ?
TIA
PD
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
_
Find what you need at prices you#65533;ll love. Compare products and save at
MSNŽ
Shopping.
http://shopping.msn.com/default/shp/?ptnrid=37,ptnrdata=24102tcode=T001MSN20A0701
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: requiring a sample of a mysql radius database
Sorry, but I didn't really understand how does that relate to the fact that I'm working on a new radius web management interface... :-) If I could get a sample dumpf of mysql's radius database I could post some screenshots. Thanks again. On 3/10/07, Internet-Wifi Operador [EMAIL PROTECTED] wrote: Very well, I´m doing the same, but i can't find information about the way freeradius process the attributes and operator, I have a litle idea but some times the results don´t match with my idea. I supose is a problem in my freeradius confiration or maybe in mySQL configuration, so if you find this information please send to me. Thanks From: liran tal [EMAIL PROTECTED] Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Subject: requiring a sample of a mysql radius database Date: Sat, 10 Mar 2007 14:39:12 +0200 Hey everyone, I'm working on a new radius control panel in php and for the sake of working with actual records I need some real data to fill my radacct table as well as my radreply and others. Ofcourse those tables are including passwords and other private stuff so I'm not talking about a dump of the radius database from your production systems :) So if you have any test systems I would love it if you could attach a dump of the radius database. Thanks guys. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _ Find what you need at prices you'll love. Compare products and save at MSN(r) Shopping. http://shopping.msn.com/default/shp/?ptnrid=37,ptnrdata=24102tcode=T001MSN20A0701 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Digest before authorize_check_query
Hi, I am using freeradius 1.1.4 with postgresql. My question is howto force digest to extract attributes from Digest-Attributes, before the authorize_check_query is run. I am using this to authenticate openser users. Similar problem was on this list but noone responded :) http://www.mail-archive.com/freeradius-users@lists.freeradius.org/ msg27755.html Thanks in advance Dariusz Dwornikowski [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Digest before authorize_check_query
ok i think that was my fault.. It appears that I made a mistake, sorry for bothering :) On Mar 10, 2007, at 11:00 PM, Dariusz Dwornikowski wrote: Hi, I am using freeradius 1.1.4 with postgresql. My question is howto force digest to extract attributes from Digest-Attributes, before the authorize_check_query is run. I am using this to authenticate openser users. Similar problem was on this list but noone responded :) http://www.mail-archive.com/freeradius-users@lists.freeradius.org/ msg27755.html Thanks in advance Dariusz Dwornikowski [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/ users.html Dariusz Dwornikowski [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FR supported attributes
Thx for the answers... Actually we have plan to use multiple tipe and number of wireless NAS, such as chillispot, mikrotik, etc. Therefor we are looking for the attributes that compatiple for all NAS type. For the Expiration attribute, how the correct syntax ? If I want to expire the account at march 20, 2007 which is the correct syntax ? TIA PD On 3/10/2007, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: There should be no difference in using Expiration and WISPr-Session-Terminate-Time in this case. Expiration sets Session-Timeout and ChilliSpot knows that one. The only difference is that Expiration will work with wired connections too. Ivan Kalik Kalik Informatika ISP Dana 10/3/2007, Internet-Wifi Operador [EMAIL PROTECTED] pi¹e: If you use Chillispot, put in your user Max-All-Session and WISPr-Session-Terminate-Time they work very good together because if you use Expire attribute the freeradius know it but chillispot no, so if the user try to connect after the Expire time the radius reject this connection, but i the user is connected and the chillispot don't know the expire attribute so the connection continue. here is the suported attributes for the chillispot http://www.chillispot.org/features.html#mozTocId149863 From: PD [EMAIL PROTECTED] Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Subject: Re: FR supported attributes Date: Sat, 10 Mar 2007 03:46:50 + Unfortunatelly, I found the answer of the similar question. see http://www.arcknowledge.com/gmane.comp.freeradius.user/2003-02/msg00671.html Well.. just to make sure, can Expiration attribute work together with Max-All-Session attribute ? The case is suppose to create an account for 10 hours but only valid one week after the creation date. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
rlm_perl/rlm_python adding extra value pairs
Hi All I wish to add some extra valid pairs to accounting packets which are being proxied to other radius servers. If in the 'preacct' or the 'accounting' stage I was to add using rlm_python or rlm_perl value pairs would they be sent thought to the other radius servers ? Thanks Mike - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Oracle 10g
Dear All, I'm trying to use FreeRadius (Currently running 1.0.4) with Oracle 10g. When I built FreeRadius I got linking errors (I think they are because of the 64 bit libs I get with Oracle 10g). Now I want to build a 64 bit version of Radius, is this possible? did any one test this? Waiting for you thoughts on this. Yasser Awad - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius simultenoues-use error
Thnaks for suggestion i have create one script with is login in to cisco router through telnet and run desired command not i am getting your point u told me i kick off user from cisco nas thruogh the script but okie i will create it but i dont know wheather i put this script so that this script check login user info and i think this script repace checkrad right ??? plz u give me your suggestion wheather i put this script to check login user on NAS Dennis Skinner [EMAIL PROTECTED] wrote: satish patel wrote: I am not getting u how do i query from shell script to NAS ?? See your NAS docs. SNMP may be an option if the NAS supports it (and FR may be able to handle the query itself as another poster suggested), but there may be other ways For instance, we have a couple scripts we use when we want to boot a particular user. They are simple bash scripts that use expect to handle logging into our cisco modems and look for the tty that the user is on and then clear that tty. It has limitations as the cisco show users command only shows so many characters of the username, but it is used rarely and only by me. This option may work for you depending on your situation. and what is FR packet?? I said that FR (FreeRADIUS) may not hear the stop packet (the stop accounting record) from the NAS. if u have any script example script can u send me i am in problem :( Have a look at bash scripting and expect. It is fairly simple and you may be able to get away with it. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com - Heres a new way to find what you're looking for - Yahoo! Answers - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
