Re: R: R: freeradius and IP pools

2008-12-15 Thread tnt
Mon Dec 15 10:38:11 2008 : Info: No Pool-Name defined   (did  cli  port
user us...@without_ip)

Tecnically the authentication works fine, I want only understand if I can
avoid this message.


Don't log it. You will need to alter the code for that.

Ivan Kalik
Kalik Informatika ISP

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


R: R: freeradius and IP pools

2008-12-15 Thread Arrigo Savio
-Messaggio originale-
Da: freeradius-users-bounces+a.savio=bascom...@lists.freeradius.org
[mailto:freeradius-users-bounces+a.savio=bascom...@lists.freeradius.org] Per
conto di t...@kalik.net
Inviato: venerdì 12 dicembre 2008 18.00
A: FreeRadius users mailing list
Oggetto: Re: R: freeradius and IP pools

OK. I have in proxy.conf:
realm with_ip {
authhost= LOCAL
accthost= LOCAL

realm without_ip {
authhost= LOCAL
accthost= LOCAL

Next I have mysql tables containing usernames:
mysql select * from radcheck;
++--+-+++---+
| id | username | realm   | attribute  | op | value |
++--+-+++---+
|  1 | user | with_ip | Cleartext-Password | := | ip|
++--+-+++---+
mysql select * from radgroupcheck;
++-+---++--+
| id | groupname   | attribute | op | value|
++-+---++--+
|  1 | withipgroup | Pool-Name | := | ip_pool |
++-+---++--+
mysql select * from radippool;
++---+-+
| id | pool_name | framedipaddress |
++---+-+
|  1 | ip_pool   | 10.0.0.1|
|  2 | ip_pool   | 10.0.0.2|
++---+-+
mysql select * from radusergroup;
+--+-+-+--+
| username | realm   | groupname   | priority |
+--+-+-+--+
| user | with_ip | withipgroup |1 |
+--+-+-+--+

That's good for ip-provided users and it works. But I need to understand
how
to configure the second user, the without-ip one.

Make just radcheck entry for that one.

Ivan Kalik
Kalik Informatika ISP


I configured user2 in radcheck table
++--++++---+
| id | username | realm  | attribute  | op | value |
++--++++---+
|  1 | user1| with_ip| Cleartext-Password | := | ip|
|  2 | user2| without_ip | Cleartext-Password | := | noip  |
++--++++---+

without group membership for this user2. In radius.log I see this message:

Mon Dec 15 10:38:11 2008 : Info: No Pool-Name defined   (did  cli  port
user us...@without_ip)

Tecnically the authentication works fine, I want only understand if I can
avoid this message.

Thanks, Arrigo.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: R: freeradius and IP pools

2008-12-14 Thread Angel L. Mateo
If both users are the same, it is better to configure just one user and
make checks stripping the realm.

-- 
Angel L. Mateo Martínez
Sección de Telemática
Área de Tecnologías de la Información   _o)
y las Comunicaciones Aplicadas (ATICA)  / \\
http://www.um.es/atica_(___V
Tfo: 968367590
Fax: 968398337

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

R: freeradius and IP pools

2008-12-12 Thread Arrigo Savio
OK. I have in proxy.conf:
realm with_ip {
authhost= LOCAL
accthost= LOCAL

realm without_ip {
authhost= LOCAL
accthost= LOCAL

Next I have mysql tables containing usernames:
mysql select * from radcheck;
++--+-+++---+
| id | username | realm   | attribute  | op | value |
++--+-+++---+
|  1 | user | with_ip | Cleartext-Password | := | ip|
++--+-+++---+
mysql select * from radgroupcheck;
++-+---++--+
| id | groupname   | attribute | op | value|
++-+---++--+
|  1 | withipgroup | Pool-Name | := | ip_pool |
++-+---++--+
mysql select * from radippool;
++---+-+
| id | pool_name | framedipaddress |
++---+-+
|  1 | ip_pool   | 10.0.0.1|
|  2 | ip_pool   | 10.0.0.2|
++---+-+
mysql select * from radusergroup;
+--+-+-+--+
| username | realm   | groupname   | priority |
+--+-+-+--+
| user | with_ip | withipgroup |1 |
+--+-+-+--+

That's good for ip-provided users and it works. But I need to understand how
to configure the second user, the without-ip one.

Arrigo



-Messaggio originale-
Da: freeradius-users-bounces+a.savio=bascom...@lists.freeradius.org
[mailto:freeradius-users-bounces+a.savio=bascom...@lists.freeradius.org] Per
conto di t...@kalik.net
Inviato: venerdì 12 dicembre 2008 17.02
A: FreeRadius users mailing list
Oggetto: Re: freeradius and IP pools

For example:



u...@with_ip

has to receive an IP from configured RADIPPOOL table



u...@without_ip

has only to be authenticated (a user who log to a portal, for example).



How can I make it possibile? Where can I setup this behaviuor?

Create those realms as local realms in proxy.conf. Put:

DEFAULT   Realm == with_ip, Pool-Name:= your_pool_name

in users file.

Ivan Kalik
Kalik Informatika ISP



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: R: freeradius and IP pools

2008-12-12 Thread tnt
OK. I have in proxy.conf:
realm with_ip {
authhost= LOCAL
accthost= LOCAL

realm without_ip {
authhost= LOCAL
accthost= LOCAL

Next I have mysql tables containing usernames:
mysql select * from radcheck;
++--+-+++---+
| id | username | realm   | attribute  | op | value |
++--+-+++---+
|  1 | user | with_ip | Cleartext-Password | := | ip|
++--+-+++---+
mysql select * from radgroupcheck;
++-+---++--+
| id | groupname   | attribute | op | value|
++-+---++--+
|  1 | withipgroup | Pool-Name | := | ip_pool |
++-+---++--+
mysql select * from radippool;
++---+-+
| id | pool_name | framedipaddress |
++---+-+
|  1 | ip_pool   | 10.0.0.1|
|  2 | ip_pool   | 10.0.0.2|
++---+-+
mysql select * from radusergroup;
+--+-+-+--+
| username | realm   | groupname   | priority |
+--+-+-+--+
| user | with_ip | withipgroup |1 |
+--+-+-+--+

That's good for ip-provided users and it works. But I need to understand how
to configure the second user, the without-ip one.

Make just radcheck entry for that one.

Ivan Kalik
Kalik Informatika ISP

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html