RE: Cant Start Radius Server MAC OSX (snow leopard)

2011-08-15 Thread Marius Pesé
Hi Alan, David

Looks like the type of quote used just might be the issue...
“password” is pretty in MS Word, but UNIX prefers password

Kind regards

Marius Pesé
Mindspring Computing


-Original Message-
From: freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org 
[mailto:freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org] 
On Behalf Of Alan Buxey
Sent: Monday, August 15, 2011 10:12 AM
To: FreeRadius users mailing list
Subject: Re: Cant Start Radius Server MAC OSX (snow leopard)

Hi,

 Starting - reading configuration files ...
 including configuration file /private/etc/raddb/radiusd.conf
 Unable to open file /private/etc/raddb/radiusd.conf: Permission denied
 Errors reading /private/etc/raddb/radiusd.conf

sometimes its not permissions, but the code reading the configurations
files encounters an error - eg when reading radiusd.conf - which pulls
in all the files, and the error lies there..

 CHANGES I MADE PRIOR TO GETTING THIS ERROR

exactly

 Using textwrangler I edited  /etc/raddb/users

yes.

 user1  Cleartext-Password := “password”
 Service-Type = NAS-Prompt-User,
 cisco-avpair = “webvpn:user-vpn-group=SLRgroup1”

...and then you saw the errors in the debug log regarding this entry - 
this entry is wrong (or the server cannot read it due to incorrect.

maybe

user1  Cleartext-Password := “password”
Service-Type = NAS-Prompt-User,
cisco-avpair = “webvpn:user-vpn-group=SLRgroup1”

?

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Packet of Disconnect PHP

2011-08-03 Thread Marius Pesé
I didn't even know there were Radius functions in PHP...

Anyway, I did do my POD with PHP:

First get all the information you need from the database:

SELECT
`radcheck`.`username`,
`radcheck`.`attribute`,
`radcheck`.`value`*1024*1024*1024,
`radacct`.`framedipaddress`,
`radacct`.`xascendsessionsvrkey`,
`radacct`.`nasipaddress`,
`radacct`.`acctstoptime`,
`radacct`.`realm`
FROM
`radcheck`
CROSS JOIN
`radacct`
ON
`radcheck`.`username` = `radacct`.`username`
WHERE
.

Then you can use this to pipe it through radclient, assuming your web server 
hosting this script is the same as your Radius server this is quite easy:

$disconnect=exec('
echo User-Name = '.$row[0].', Framed-IP-Address = 
'.$row[3].', X-Ascend-Session-Svr-Key = '.$row[4].', NAS-IP-Address = 
'.$row[5].' | radclient -x NAS.IP.ADD.RESS:PORT disconnect SECRET
');

This way I am iterating through a list of accounts returned by the query (do 
some calculations) and then kick them off the network.
Maybe not the most sophisticated method but it does the trick.
Hope this helps

Kind regards

Marius Pesé
Mindspring Computing

-Original Message-
From: freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org 
[mailto:freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org] 
On Behalf Of Arran Cudbard-Bell
Sent: Wednesday, August 03, 2011 8:21 AM
To: FreeRadius users mailing list
Subject: Re: Packet of Disconnect PHP

Its possible... IIRC (and this was a long long time a go) type is just an 
integer value http://www.php.net/manual/en/function.radius-create-request.php 
and also though there are two constants defined, it can actually be *any* 
integer value, so just use type 40 for POD.

You'll need to make sure you have the right combination of attributes to 
identify the user, some NAS are *VERY* picky.

-Arran

PS I think the RADIUS stuff is an extension, so you'll need to install it using 
PECL.


On 3 Aug 2011, at 01:03, mark fennema wrote:

 Hello, I'm working on getting a hotspot set up, and I need the ability
 to have a user log themselves out, so that they can connect on another
 computer. I have it set up so that the user can enter their
 information and have it log them out, but it doesn't disconnect them
 from the router, so they can continue using the internet until they
 disconnect from the wireless, so I need to send a packet of
 disconnect. Is there a way to do this in php?
 -
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
 

Arran Cudbard-Bell
a.cudba...@freeradius.org

RADIUS - Half the complexity of Diameter


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Radius Database

2011-05-06 Thread Marius Pesé
Try the file sql.conf in your radius root directory for setting which database 
to use.
As for manipulating individual queries try sql/mysql/dialup.conf


Kind regards

Marius Pesé
Mindspring Computing


-Original Message-
From: freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org 
[mailto:freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org] 
On Behalf Of SC@
Sent: Friday, May 06, 2011 3:40 PM
To: freeradius-users@lists.freeradius.org
Subject: Re: Radius Database


I think you didn't understand my problem...
I have no problem with one software particularly... I have installed
freeradius, i have imported its database, i have written in, i have
connected my computer to a switch to test and all is right.
In an other hand, I have created a website to manage a database, i have
create a database with phpmyadmin to test and all is right... but i don't
know how to connect both... the database of freeradius is in a file, the
database of phpmy admin is in an other... when i modify my website's code to
manage my radius database it is not find because it is not at the right
place... that's why I want freeradius to create its database at another
place... but i don't think it is a problem of knowledge with that softwares,
it is way to change but where and how ? I know this website
(http://wiki.freeradius.org/SQL_HOWTO) because i have installed freeradius
with that, but when they talk about mysql it is to import the database of
freeradius (schema.sql) !!!
so... someone can help me ?

--
View this message in context: 
http://freeradius.1045715.n5.nabble.com/Radius-Database-tp4375341p4375938.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: FW: Duplicate Accounting maybe once, twice a day

2011-04-13 Thread Marius Pesé
Hi Alan,

thanks for the quick reply.
If accounting packets are sent twice per default, do you have a guess as to why 
1 or 2 per day lead to duplicate entries and the other hundred or so just have 
1 entry?

Thanks 
Marius

From: freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org 
[freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org] On 
Behalf Of Alan DeKok [al...@deployingradius.com]
Sent: Wednesday, April 13, 2011 12:12 PM
To: FreeRadius users mailing list
Subject: Re: FW: Duplicate Accounting maybe once, twice a day

Marius Pesé wrote:
 This is both the same package. Maybe the odd thing is not the duplicate every 
 once in a while but rather the fact that the bulk of them is not duplicated?

  Accounting packets WILL get sent twice.  There's little you can do to
avoid that.

  You need to design the system so that it handles duplicate accounting
packets.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Duplicate Accounting maybe once, twice a day

2011-04-11 Thread Marius Pesé
Hi everyone,

we are having an issue on our FreeRadius setup where our redundant servers will 
maybe once, twice a day create duplicate accounting entries.
I have switched the servers to debug for a full day and caught one of these 
incidents in the log file, see attached.

The strange thing is it only happens maybe once a day, regardless of realm or 
user, and the other couple of hundred accounting requests are fine.
Can anyone see why this particular one would bounce back and forth?

Our setup consists of two virtually identical FreeRadius2 servers, each with 
their own mySQL database, so each of them is capable of doing Auth and Acct, 
and proxies Acct to the other one.
Also I changed the acct_update_alt query to write to a failover table since I 
thought this was the alt query being triggered, but this does not make a 
difference. Still duplicates in radacct table.

Thanks!
Marius

__
Marius Pesé
Senior Software Developer
B.Sc. Computer Science
[cid:image003.jpg@01CBF85B.77F8AF50]http://www.mindspring.co.za/
Unit 5, Doncaster Office ParkMindspring Computing
Punters Way, Kenilworth   P O Box 46926
Cape Town, South Africa   Glosderry 7702
Phone: +27 21 657 1780  Fax   : +27 21 671 7599
Cell : 072 100 70 73
E-mail: mar...@mindspring.co.zamailto:mar...@mindspring.co.za

inline: image003.jpgrad_recv: Accounting-Request packet from host 196.43.1.87 port 1820, id=1, 
length=261
Acct-Session-Id = 3/0/0/5.159_00A0493F
Framed-Protocol = PPP
Framed-IP-Address = 41.144.110.38
User-Name = aba...@msp.co.za
X-Ascend-Connect-Progress = LAN-Session-Up
X-Ascend-PreSession-Time = 3
X-Ascend-Xmit-Rate = 4096000
X-Ascend-Data-Rate = 4096000
Acct-Session-Time = 3404
Acct-Input-Octets = 970
Acct-Output-Octets = 994
X-Ascend-Pre-Input-Octets = 86
X-Ascend-Pre-Output-Octets = 91
Acct-Input-Packets = 62
Acct-Output-Packets = 62
X-Ascend-Pre-Input-Packets = 5
X-Ascend-Pre-Output-Packets = 6
Acct-Authentic = RADIUS
Acct-Status-Type = Interim-Update
NAS-Port-Type = Virtual
NAS-Port = 805634207
NAS-Port-Id = 3/0/0/5.159
Connect-Info = AutoShapedVC
Calling-Station-Id = 0182932392
Class = NL1
Service-Type = Framed-User
NAS-IP-Address = 196.43.27.100
X-Ascend-Session-Svr-Key = 01FB51D4
Acct-Delay-Time = 5
Telkom-Access-Type = DSL
Proxy-State = 0x3436
+- entering group preacct {...}
++[preprocess] returns ok
[acct_unique] Hashing 'NAS-Port = 805634207,Client-IP-Address = 
196.43.1.87,NAS-IP-Address = 196.43.27.100,Acct-Session-Id = 
3/0/0/5.159_00A0493F,User-Name = aba...@msp.co.za'
[acct_unique] Acct-Unique-Session-ID = bf140131ce2e1d1f.
++[acct_unique] returns ok
[suffix] Looking up realm msp.co.za for User-Name = aba...@msp.co.za
[suffix] Found realm msp.co.za
[suffix] Adding Stripped-User-Name = abacus
[suffix] Adding Realm = msp.co.za
[suffix] Proxying request from user abacus to realm msp.co.za
[suffix] Preparing to proxy accounting request to realm msp.co.za 
++[suffix] returns updated
++[files] returns noop
+- entering group accounting {...}
[radutmp]   expand: /var/log/radius/radutmp - /var/log/radius/radutmp
[radutmp]   expand: %{User-Name} - aba...@msp.co.za
++[radutmp] returns ok
[sql]   expand: %{User-Name} - aba...@msp.co.za
[sql] sql_set_user escaped user -- 'aba...@msp.co.za'
[sql]   expand: %{Acct-Input-Gigawords} - 
[sql]   ... expanding second conditional
[sql]   expand: %{Acct-Input-Octets} - 970
[sql]   expand: %{Acct-Output-Gigawords} - 
[sql]   ... expanding second conditional
[sql]   expand: %{Acct-Output-Octets} - 994
[sql]   expand:UPDATE radacct   SET  
framedipaddress = '%{Framed-IP-Address}',  acctsessiontime = 
'%{Acct-Session-Time}',  acctinputoctets = 
'%{%{Acct-Input-Gigawords}:-0}'   32 |
'%{%{Acct-Input-Octets}:-0}',  acctoutputoctets= 
'%{%{Acct-Output-Gigawords}:-0}'  32 |
'%{%{Acct-Output-Octets}:-0}'   WHERE acctsessionid = 
'%{Acct-Session-Id}'   AND username= '%{SQL-User-Name}' 
  AND nasipaddress= '%{NAS-IP-Address}' -UPDATE radacct
   SET  framedipaddress = '41.144.110.38',  
acctsessiontime = '3404',  acctinputoctets = '0'   32 |   
 '970',  acctoutputoctets= '0' 
 32 |'994'   WHERE acctsessionid 
= '3/0/0/5.159_00A0493F'   AND username= 'aba...@msp.co.za
rlm_sql (sql): xlat failed.
rlm_sql (sql): Reserving sql socket id: 5
rlm_sql_mysql: query: UPDATE radacct   SET  
framedipaddress

Proxying: 2nd server's database doesn't write the realm field

2011-01-28 Thread Marius Pesé
Hi everyone,

in my FreeRadius setup accounting requests are proxied to a secondary server, 
the realm is stripped but still written to database on server1, but server2 
only writes the username, the realm field remains empty. Can anyone point me in 
the right direction on this one?

Thanks
Marius
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Proxying: 2nd server's database doesn't write the realm field

2011-01-28 Thread Marius Pesé
Hi Alan,

switched stripping off in radiusd on server1 and restarted the daemon but 
nothing seems to have changed.
Server1's DB still has the stripped username in username field and the realm in 
realm field, server2 has the stripped username but no realm.
Should I send a debug output or can you tell from the top of your head where I 
went wrong?

Thanks
MArius



-Original Message-
From: freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org 
[mailto:freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org] 
On Behalf Of Alan DeKok
Sent: Friday, January 28, 2011 10:50 AM
To: FreeRadius users mailing list
Subject: Re: Proxying: 2nd server's database doesn't write the realm field

Marius Pesé wrote:
 in my FreeRadius setup accounting requests are proxied to a secondary
 server, the realm is stripped but still written to database on server1,
 but server2 only writes the username, the realm field remains empty. Can
 anyone point me in the right direction on this one?

  Don't strip the realm on server 1.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: SQL query error; rejecting user

2010-10-12 Thread Marius Pesé
That's not a bug, that is someone trying to use the MS SQL schema on a MySQL 
server. Obviously those files will only work for the database server they were 
written for.

-Original Message-
From: freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org 
[mailto:freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org] 
On Behalf Of Daniel Sandulescu
Sent: Tuesday, October 12, 2010 10:46 AM
To: FreeRadius users mailing list
Subject: Re: SQL query error; rejecting user

If I want to upload schema.sql same bug as here:
http://www.mail-archive.com/freeradius-users@ 
lists.freeradius.org/msg61853.html


- Original Message - 
From: Alan Buxey a.l.m.bu...@lboro.ac.uk
To: FreeRadius users mailing list freeradius-users@lists.freeradius.org
Sent: Tuesday, October 12, 2010 11:20 AM
Subject: Re: SQL query error; rejecting user


 Hi,
 So I did, I deleted everything in / etc / raddb and I configuration, 
 again
 depending on the requirements there.

 check that the raddb directory is the right onw - I seem to recall that 
 one
 of your logs showed it was /usr/local/etc/raddb/

 the default configuration works for basic tests etc - it certainly doesnt
 have the blank query error that you posted.

 alan
 -
 List info/subscribe/unsubscribe? See 
 http://www.freeradius.org/list/users.html
 

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Use both SQL and SQL-LOG

2010-09-20 Thread Marius Pesé
Marius Pesé wrote:
 I’m using mySQL to log accounting data, and also want to save the
 queries (not the packets) to a text file to use with a different
 program. Since that is both in sites-enabled/default, they seem to be
 mutually exclusive.

  No.  Why would you conclude that?

  Alan DeKok.


Hi Alan, I assumed that to be the case because uncommenting sql_log didn't work 
and the comment says:
#  Instead of sending the query to the SQL server,
#  write it into a log file.
So essentially uncommenting the line should call modules/sql_log which should 
write into the text file, correct? 
Maybe I'm simply having a permissions issue then...

Thanks for the advice
Marius

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Use both SQL and SQL-LOG

2010-09-17 Thread Marius Pesé
Hi everyone,

 

I'm using mySQL to log accounting data, and also want to save the queries (not 
the packets) to a text file to use with a different program. Since that is both 
in sites-enabled/default, they seem to be mutually exclusive. Or maybe I'm just 
a bit blind - it's Friday after all. Any hint would be appreciated.

 

Regards

Marius

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Adding additional row to radcheck table

2010-08-27 Thread Marius Pesé
Hi everyone,

 

Radcheck usually stores CAP and PASSWORD, I have added an additional value to 
the dictionary and wanted to add that as a row in radcheck, like

 

IDUsername   Attribute Op  Value

66   b...@internet   cancelled ==   no

 

However when I then try to authenticate debug returns No known good password 
even though the Crypt-Password Attribute is still there.

Deleting the line in the radcheck table and everything works again.

 

Anybody see what I missed?

 

Regards

Marius

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Proxying creates 200 Attributes resulting in DoS warning

2010-07-29 Thread Marius Pesé
Hi Alan,

Managed to get that one right, but now its stripping off the realm despite me 
having set nostrip, and the second server then complains about not knowing the 
user. Where else can a realm get stripped except for proxy.conf and 
sites-enabled/default?

-Original Message-
From: freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org 
[mailto:freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org] 
On Behalf Of Alan DeKok
Sent: Wednesday, July 28, 2010 5:04 PM
To: FreeRadius users mailing list
Subject: Re: Proxying creates 200 Attributes resulting in DoS warning

Marius Pesé wrote:
 After spending some more time on our FreeRadius2 project it managed once 
 again to leave me clueless. The error message:
 
 WARNING: Possible DoS attack from host 196.25.xxx.xx: Too many attributes in 
 request (received 201, max 200 are allowed).

  See the security section of radiusd.conf.

 Googleing showed that it most likely is the result of a mis-configuration in 
 proxy.conf.

  You are very likely proxying packets FROM the server TO itself, in an
infinite loop.  Stop that.

 This is our proxy.conf without comments:

  Have you tried running the server in debugging mode?  Do you see it
proxying packets to itself in an endless loop?  Does the debug log show
WHY the packets were proxied?

  If the packets really do have more than 200 real attributes, edit
radiusd.conf to allow this.

  If the packets have dozens of Proxy-State attributes, you've
misconfigured the server and broken it.

  Configure to proxy packets to *other* RADIUS servers, not to itself.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Proxying creates 200 Attributes resulting in DoS warning

2010-07-28 Thread Marius Pesé
After spending some more time on our FreeRadius2 project it managed once again 
to leave me clueless. The error message:

WARNING: Possible DoS attack from host 196.25.xxx.xx: Too many attributes in 
request (received 201, max 200 are allowed).


Googleing showed that it most likely is the result of a mis-configuration in 
proxy.conf.
This is our proxy.conf without comments:

proxy server {
default_fallback = no
}

home_server copy-acct-to-home-server-B {
type = acct
ipaddr = 196.25.xxx.xx
port = 1646
secret = xx
}

home_server_pool my_acct_failover {
type = fail-over
home_server = copy-acct-to-home-server-B
}


realm DEFAULT {
acct_pool = my_acct_failover
}



realm LOCAL {
}

Might look a bit odd because we played around for quite a bit. Who can spot the 
fatal error?

Thanks
Marius


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: RadSQLRelay

2010-07-08 Thread Marius Pesé


-Original Message-
From: Of Alan DeKok
Sent: Wednesday, July 07, 2010 4:10 PM
To: FreeRadius users mailing list
Subject: Re: RadSQLRelay

Marius Pesé wrote:
 We are still struggling to get our FreeRadius2 servers running on
 CentOS5.5 to relay accounting packages to one another.

  ? raddb/sites-available/copy-acct-to-home-server

 However if we start radsqlrelay

  Uh... why?

 (radsqlrelay -d mysql -b freeradius -h
 196.25.xxx.xxx -u root -p  /var/log/radius/radacct/relay/sql-relay)
 it opens quite a few connections to the secondary database, but does not
 seem to use the text file with the queries, also it does not give any
 debug output, regardless of the –x option. Tried both path and path+file
 for the filename, hostname and IP for the the secondary database system.
 Without debugging output fairly hard to figure out. Anybody else know
 this problem?

  I haven't used radsqlrelay for a long, long, time.  The detail file
reader/write works fine.

  Alan DeKok.


Thanks Alan, acct relay works fine now using proxy.conf and 
copy-acct-to-home-server!
One final question: Is it possible to replicate the Users table (mysql) using 
FreeRadius2?
The idea is never having to worry if a new user was properly created on both 
servers (or deleted on both servers). Easiest way seems to be updating the php 
script to talk to two databases, but if FreeRadius can compare and update its 
user tables itself it might be even more reliable.

Thanks again

Marius


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RadSQLRelay

2010-07-07 Thread Marius Pesé
Hi everyone,

 

We are still struggling to get our FreeRadius2 servers running on CentOS5.5 to 
relay accounting packages to one another. 

Right now I have one FR2 server with a local mySQL database and one additional 
machine just running mysqld. The FR2 machine writes it's own database and the 
textfile with the queries without problems.

 

However if we start radsqlrelay (radsqlrelay -d mysql -b freeradius -h 
196.25.xxx.xxx -u root -p  /var/log/radius/radacct/relay/sql-relay) it 
opens quite a few connections to the secondary database, but does not seem to 
use the text file with the queries, also it does not give any debug output, 
regardless of the -x option. Tried both path and path+file for the filename, 
hostname and IP for the the secondary database system. Without debugging output 
fairly hard to figure out. Anybody else know this problem?

 

Regards

Marius

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Redundant Accounting

2010-06-22 Thread Marius Pesé
Hi everyone,

I have set up a FreeRadius2 v2.1.8 installation a while back and configured it 
according to our needs. It is running smoothly, currently doing Auth and Acc on 
one box with a MySQL database and a detail file being used. We now want to set 
up a second box which basically shall do the exact same thing as the first does 
as a failover and also give us two identical accounting tables in the databases.

Can you guys point me in the right direction for this - google just doesn't 
seem to like me on this one.

 

Thanks so much

Marius

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Redundant Accounting

2010-06-22 Thread Marius Pesé


-Original Message-
From: freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org 
[mailto:freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org] 
On Behalf Of Alan DeKok
Sent: Tuesday, June 22, 2010 10:19 AM
To: FreeRadius users mailing list
Subject: Re: Redundant Accounting

Marius Pesé wrote:
 Hi everyone,
 
 I have set up a FreeRadius2 v2.1.8 installation a while back and
 configured it according to our needs. It is running smoothly, currently
 doing Auth and Acc on one box with a MySQL database and a detail file
 being used. We now want to set up a second box which basically shall do
 the exact same thing as the first does as a failover and also give us
 two identical accounting tables in the databases.

  You're trying to configure:

= RADIUS + MySQL
NAS - /
   \
= RADIUS + MySQL

  Don't.

  Instead, configure

 = RADIUS = = MySQL
NAS - / \ - /
   \ = RADIUS =/   \= MySQL

  i.e. Configure MySQL failover for the two RADIUS servers.

  This turns the problem into a MySQL problem, rather than a RADIUS one.
 It also gives you two points of failover, rather than one.

  Alan DeKok.


Hi Alan,

Thanks for your reply. You are right about the scenario I am trying to achieve: 

RADIUS1 + MySQL
NAS -- |
RADIUS2 + MySQL

(Trying to point out the synchronized databases on both servers)

I read the MySQL white paper on the solution you are proposing, but since we 
are a fairly small company we are actually hoping to find a solution using only 
two servers as in the first scenario you depictured. 
Do you think there is another reason besides scalability not to run mySQL and 
Radius on the same box? 
Is mySQL clustering the way to get redundant accounting either way or is there 
something in FreeRadius one can use for our smaller setup?

Thanks again

Marius


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Redundant Accounting

2010-06-22 Thread Marius Pesé


-Original Message-
From: freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org 
[mailto:freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org] 
On Behalf Of Alan DeKok
Sent: Tuesday, June 22, 2010 11:22 AM
To: FreeRadius users mailing list
Subject: Re: Redundant Accounting

Marius Pesé wrote:
 Thanks for your reply. You are right about the scenario I am trying to 
 achieve: 
 
 RADIUS1 + MySQL
 NAS -- |
 RADIUS2 + MySQL
 
 (Trying to point out the synchronized databases on both servers)

  That's a database replication issue.

 I read the MySQL white paper on the solution you are proposing, but since we 
 are a fairly small company we are actually hoping to find a solution using 
 only two servers as in the first scenario you depictured. 
 Do you think there is another reason besides scalability not to run mySQL and 
 Radius on the same box? 

  Look at MySQL master-master replication.

 Is mySQL clustering the way to get redundant accounting either way or is 
 there something in FreeRadius one can use for our smaller setup?

  You can use MySQL clustering.  The code is GPL, so there's no cost
other than time.

  Alan DeKok.

Hi Alan,

So you would advise not to use any built-in Radius functionality? I thought I 
could achieve this with using one of the copy-acct-to-home-server modules or 
something like that...

Regards
Marius

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Redundant Accounting

2010-06-22 Thread Marius Pesé


-Original Message-
From: freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org 
[mailto:freeradius-users-bounces+marius=mindspring.co...@lists.freeradius.org] 
On Behalf Of Alan DeKok
Sent: Tuesday, June 22, 2010 12:40 PM
To: FreeRadius users mailing list
Subject: Re: Redundant Accounting

Marius Pesé wrote:
 So you would advise not to use any built-in Radius functionality?

  What did my message say?

Just double-checking.

 I thought I could achieve this with using one of the copy-acct-to-home-server 
 modules or something like that...

  You drew a picture showing how you wanted MySQL to MySQL
communication.  This is a MySQL issue, and has nothing to do with RADIUS.

  Alan DeKok.

Thanks for your advice, now I can concentrate my research on mySQL.

Regards
Marius

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html