Re: (RADIATOR) radiusd segfaults on Access-Request via SQL

2002-08-22 Thread Hugh Irvine


Hello Justin -

Please send me a copy of the configuration file (no secrets) together 
with a trace 4 debug from Radiator and a copy of the error output from 
Perl when it crashes (run radiusd from the command line).

regards

Hugh


On Thursday, August 22, 2002, at 12:41 AM, Justin White-Lowther wrote:


 Greetings,

 I'm attempting to set up Radiator 3.2 on a Mandrake Linux 8.2 system to
 authenticate with Platypus.  Perl 5.6.1, the Perl DBI 1.30 and DBD-ODBC
 0.43 modules and associated iODBC and OpenLink driver claim to be
 installed correctly, and communication with the database is possible
 through their own tests.  However, when I try radpwtst, radiusd 
 segfaults
 just after the sending Access-Request  message appears.  This error
 occurs even with a minimal configuration file, with RPM and with 
 tarball.

 Any solutions or possible avenues for finding a solution would be much
 appreciated!

 --
 Justin White-Lowther

 ===
 Archive at http://www.open.com.au/archives/radiator/
 Announcements on [EMAIL PROTECTED]
 To unsubscribe, email '[EMAIL PROTECTED]' with
 'unsubscribe radiator' in the body of the message.



NB: I am travelling this week, so there may be delays in our 
correspondence.

--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Handing out static IP's

2002-08-22 Thread Hugh Irvine


Hello Michael -

You would do something like this:

# define AuthBy clauses

AuthBy FILE
Identifier CheckUsers
Filename %D/users
AddToReply Service-Type = Framed-User, \
Framed-Protocol = PPP, \
Framed-IP-Netmask = ..
/AuthBy

AuthBy UNIX
Identifier CheckUnix
.
/AuthBy

# define Realms or Handlers

Realm 
AuthBy CheckUsers
.
/Realm


Your users file would look something like this:

# %D/users

specialuser Auth-Type = CheckUnix
Framed-IP-Address = n.n.n.n

DEFAULT Auth-Type = CheckUnix


regards

Hugh


 Help!  I've been charged with fixing an ugly situation.   We upgraded to
 radius, but we only have one user that needs a static IP.  We do our
 authentication with AuthBy UNIX.  Is there a quick and easy way to set
 up for only one user to get a static IP while the NAS' hand out ip's
 from their pools for the rest of the users?



NB: I am travelling this week, so there may be delays in our 
correspondence.

--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) How to strip realm from in SessinDatabase?

2002-08-22 Thread Hugh Irvine


Hello Lin -

You will need to supply your own queries in the SessionDatabase SQL 
clause to use the rewritten username (%n).

Have a look at section 6.7 in the Radiator 3.2 reference manual.

regards

Hugh


On Thursday, August 22, 2002, at 12:13 AM, Huaikun Lin wrote:

 Hi

 We use SQL server as the Session Database.

 But I don't want the user name shows up as [EMAIL PROTECTED] in 
 RADONLINE table.

 In SessionDatabase,how do I strip the realm xxx.xx.xx?

 Even I tried adding RewriteUsername s/^([^@]+).*/$1/ clause in 
 SessionDatabase like the following, the username still shows up as
 [EMAIL PROTECTED] in RADONLINE table.

 SessionDatabase SQL
 RewriteUsername s/^([^@]+).*/$1/
 DBSourcedbi:Sybase:server=;database=
 DBUsername  xx
 DBAuth  xx

 /SessionDatabase SQL

 How to solve the problem?

 Lin

 ===
 Archive at http://www.open.com.au/archives/radiator/
 Announcements on [EMAIL PROTECTED]
 To unsubscribe, email '[EMAIL PROTECTED]' with
 'unsubscribe radiator' in the body of the message.



NB: I am travelling this week, so there may be delays in our 
correspondence.

--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Interim-Updates!

2002-08-22 Thread Hugh Irvine
 Hello Skeeve -

The accounting counters start when a session starts on the NAS and the accounting alive requests contain the value of the counters when the request is sent (the values are *not* deltas). The accounting stop shows the final values for each of the counters. Of course you should do some testing to verify that your NAS does actually do the right thing (TM).

BTW - many operators simply use accounting stops only.

regards

Hugh


On Wednesday, August 21, 2002, at 10:24 PM, Skeeve Stevens wrote:

Hey Hugh,
 
    We are actually writing our own billing system and I am not quite sure about these alive records.
 
Is the data these alive records a cumulative amount 'since' the start or the previous alive record and... if there is a stop record, can that simply be considered the last alive record?
 
...Skeeve


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Hugh Irvine
Sent: Wednesday, August 21, 2002 5:25 PM
To: Solomon Sokolovsky
Cc: [EMAIL PROTECTED]
Subject: Re: (RADIATOR) Interim-Updates!

Hello Solomon -

Radiator will automatically log Interim-Updates (radius accounting alive requests), however you will need to use a billing system that understands them to process them correctly. You will find a list of billing systems we have tested against here:

http://www.open.com.au/radiator/technical.html#billing

regards

Hugh


On Tuesday, August 20, 2002, at 07:07 PM, Solomon Sokolovsky wrote:

Hi All,
 
We want to be able to use this for broadband customers which don't disconnect for ages, and use
the Interim-Updates functions like what Cisco and Redback use.  But need to be able to accumulate the usage and
understand it correct!  The Interim-Updates need to be accumulated in relation to the start and stop packets.  Do you know of any billing system, able to work with Radiator and understand Interim-Updates?  Is it possible to have a script which can in the Radius which calculated the required info and get it imported in to a billing package?
 
Thanks All!
Solomon


NB: I am travelling this week, so there may be delays in our correspondence.

--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.



NB: I am travelling this week, so there may be delays in our correspondence.

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.


(RADIATOR) Accounting Handled

2002-08-22 Thread rcortez

Hi,



   I have configured Accounting Handled and also LogMicroseconds under 
the Global Parameter Realm this is how it goes.


Foreground
AuthPort 1645
AcctPort 1646
LogDir  /data/LOGFILE
LogFile %L/%Y-%m-%d-%H-logfile.log
DbDir /usr/local/etc/raddb
Trace 4
SocketQueueLength 100
LogMicroseconds

Client localhost
Secret mysecret
DupInterval 60
/Client

Handler Called-Station-Id = 1234567
AccountingHandled
MaxSessions 1
SessionDatabase TEST
#RewriteUsername   tr/A-Z/a-z/
AcctLogFileName %L/TEST/%Y-%m-%d-detail
PasswordLogFileName %L/TEST/%Y-%m-%d-password
AcctLogFileFormat %m %d %Y %H:%M:%S NAS-IP-Address=%{NAS-IP-
Address} NAS-Port=%{NAS-Port} User-Name=%{User-Name} Called-Station-Id=%
{Called-Station-Id} Calling-Station-Id=%{Calling-Station-Id} Acct-
Status-Type=%{Acct-Status-Type} Service-Type=%{Service-Type} Acct-
Session-Id=%{Acct-Session-Id} Framed-Protocol=%{Framed-Protocol} Framed-
IP-Address=%{Framed-IP-Address} Acct-Session-Time=%{Acct-Session-Time} 
Tunnel-Server-Auth-ID=%{Tunnel-Server-Auth-ID} Acct-Terminate-Cause=%
{Acct-Terminate-Cause}
PreAuthHook file:%D/sample.hook
AuthBy SQL
 .
 .
 .
 .
/AuthBy
/Handler



 I would just like to ask if my configuration is right? Is there 
something that would see something different in my logfile?


Ray

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Accounting Handled

2002-08-22 Thread Hugh Irvine


Hello Ray -

Your configuration file looks OK.

You will see the microseconds logged in the timestamps in the trace 4 
debug so you can see how long each operation is taking. This will give 
you a good idea where things are slow.

regards

Hugh


On Thursday, August 22, 2002, at 09:36 AM, [EMAIL PROTECTED] wrote:

 Hi,



I have configured Accounting Handled and also LogMicroseconds under
 the Global Parameter Realm this is how it goes.


 Foreground
 AuthPort 1645
 AcctPort 1646
 LogDir  /data/LOGFILE
 LogFile %L/%Y-%m-%d-%H-logfile.log
 DbDir /usr/local/etc/raddb
 Trace 4
 SocketQueueLength 100
 LogMicroseconds

 Client localhost
 Secret mysecret
 DupInterval 60
 /Client

 Handler Called-Station-Id = 1234567
 AccountingHandled
 MaxSessions 1
 SessionDatabase TEST
 #RewriteUsername   tr/A-Z/a-z/
 AcctLogFileName %L/TEST/%Y-%m-%d-detail
 PasswordLogFileName %L/TEST/%Y-%m-%d-password
 AcctLogFileFormat %m %d %Y %H:%M:%S NAS-IP-Address=%{NAS-IP-
 Address} NAS-Port=%{NAS-Port} User-Name=%{User-Name} Called-Station-Id=%
 {Called-Station-Id} Calling-Station-Id=%{Calling-Station-Id} Acct-
 Status-Type=%{Acct-Status-Type} Service-Type=%{Service-Type} Acct-
 Session-Id=%{Acct-Session-Id} Framed-Protocol=%{Framed-Protocol} Framed-
 IP-Address=%{Framed-IP-Address} Acct-Session-Time=%{Acct-Session-Time}
 Tunnel-Server-Auth-ID=%{Tunnel-Server-Auth-ID} Acct-Terminate-Cause=%
 {Acct-Terminate-Cause}
 PreAuthHook file:%D/sample.hook
 AuthBy SQL
  .
  .
  .
  .
 /AuthBy
 /Handler



  I would just like to ask if my configuration is right? Is there
 something that would see something different in my logfile?


 Ray

 ===
 Archive at http://www.open.com.au/archives/radiator/
 Announcements on [EMAIL PROTECTED]
 To unsubscribe, email '[EMAIL PROTECTED]' with
 'unsubscribe radiator' in the body of the message.



NB: I am travelling this week, so there may be delays in our 
correspondence.

--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) Edit session timeouts via radius

2002-08-22 Thread Jaime Elizaga Jr.
Title: Blank error message



Hi All,

Is it possible for Radiator to send a disconnect 
request to a NAS? Also, we are currently implementing session timeouts on 
our users. Is is possible for Radiator so send something tto the NAS that would 
either decrease or increase the 'session timeout' counter on the NAS 
itself?

Thanks for your replies..

Jaime

  - Original Message - 
  From: 
  Le Anh Tuan 

  To: [EMAIL PROTECTED] 
  Sent: Thursday, August 22, 2002 11:34 
  AM
  Subject: (RADIATOR) Blank error 
  message
  
  -BEGIN PGP SIGNED MESSAGE-Hash: SHA1Hi all,I 
  configured a roaming system between our HQ and Branch office in seperate 
  location using Radiator and AuthBy Radius. But I can not get a reason 
  message each time a authentication reject occur, AuthBy Radius only returns 
  message like 'INFO: Access rejected for user: Proxied' or 'INFO: Access 
  rejected for user:'. Can you help me how to configure Radiator to get a reason 
  message, I need it to put into my AuthLog SQL to help my 
  administration work.Thank you very much.Le Anh TuanRD 
  DepartmentNetnam CorporationInstitute of Information 
  TechnologyEmail: [EMAIL PROTECTED]-BEGIN PGP 
  SIGNATURE-Version: PGP 
  7.0.4iQA/AwUBPWRb1BLw+KcRUiRLEQJWKgCgrD80FhdzABN9e+etScPsJS3qom0AnRdyDZvo2KmUrDFUOMWRkRntMR5q=ILzK-END 
  PGP SIGNATURE-


Re: (RADIATOR) Edit session timeouts via radius

2002-08-22 Thread Hugh Irvine
 Hello Jaime -

Yes Radiator can send a Disconnect-Request, but only via proxy. Note that the NAS acts as a radius *server* for the purposes of processing a Disconnect-Request. You can use radpwtst to generate a Disconnect-Request and either send it directly to the NAS, or proxy it through Radiator (using an AuthBy RADIUS clause).

And as far as I know there is no way to change the session timeout on an existing session on a NAS.

regards

Hugh


On Thursday, August 22, 2002, at 11:30 AM, Jaime Elizaga Jr. wrote:

Hi All,
 
Is it possible for Radiator to send a disconnect request to a NAS?  Also, we are currently implementing session timeouts on our users. Is is possible for Radiator so send something tto the NAS that would either decrease or increase the 'session timeout' counter on the NAS itself?
 
Thanks for your replies..
 
Jaime

- Original Message -
From: Le Anh Tuan
To: [EMAIL PROTECTED]
Sent: Thursday, August 22, 2002 11:34 AM
Subject: (RADIATOR) Blank error message

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi all,
I configured a roaming system between our HQ and Branch office in seperate location using Radiator and AuthBy Radius>. But I can not get a reason message each time a authentication reject occur, AuthBy Radius only returns message like 'INFO: Access rejected for user: Proxied' or 'INFO: Access rejected for user:'. Can you help me how to configure Radiator to get a reason message, I need it to put into my AuthLog SQL> to help my administration work.
Thank you very much.

Le Anh Tuan
RD Department
Netnam Corporation
Institute of Information Technology
Email: [EMAIL PROTECTED]


-BEGIN PGP SIGNATURE-
Version: PGP 7.0.4

iQA/AwUBPWRb1BLw+KcRUiRLEQJWKgCgrD80FhdzABN9e+etScPsJS3qom0AnRdy
DZvo2KmUrDFUOMWRkRntMR5q
=ILzK
-END PGP SIGNATURE-



NB: I am travelling this week, so there may be delays in our correspondence.

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.


(RADIATOR) Can't connect to SQL database

2002-08-22 Thread Rickard Gunnarsson

Hi,

I've successfully used Radiator with a Postgres Database for a while now,
but suddenly I start receiving error messages like the one below when
starting Radiator. I can't think of anything I have changed in my setup.
Could someone please help me interpret this error message and give a hint
about where to start looking?

**
Thu Aug 22 17:14:13 2002: ERR: Could not connect to SQL database with
DBI-connect dbi:Pg:dbname=radius, user, password: install_driver(Pg)
failed: Can't load '/usr/local/lib/site_perl/i386-linux/auto/DBD/Pg/Pg.so'
for module DBD::Pg: /usr/local/lib/site_perl/i386-linux/auto/DBD/Pg/Pg.so:
undefined symbol: Perl_no_modify at /usr/lib/perl/5.6.1/DynaLoader.pm line
202, FILE line 28.
 at (eval 25) line 3

Compilation failed in require at (eval 25) line 3, FILE line 28.
Perhaps a required shared library or dll isn't installed where expected
 at Radius/SqlDb.pm line 106
*

Regards,
Rickard

___
Rickard Gunnarsson | [EMAIL PROTECTED]
WLAN Alliance AB, Stureplan 6, 114 35 Stockholm, Sweden


===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Can't connect to SQL database

2002-08-22 Thread Hugh Irvine


Hello Rickard -

It looks like the Postgres DBD module is not installed correctly.

regards

Hugh


On Thursday, August 22, 2002, at 04:20 PM, Rickard Gunnarsson wrote:

 Hi,

 I've successfully used Radiator with a Postgres Database for a while 
 now,
 but suddenly I start receiving error messages like the one below when
 starting Radiator. I can't think of anything I have changed in my setup.
 Could someone please help me interpret this error message and give a 
 hint
 about where to start looking?

 **
 Thu Aug 22 17:14:13 2002: ERR: Could not connect to SQL database with
 DBI-connect dbi:Pg:dbname=radius, user, password: install_driver(Pg)
 failed: Can't load 
 '/usr/local/lib/site_perl/i386-linux/auto/DBD/Pg/Pg.so'
 for module DBD::Pg: 
 /usr/local/lib/site_perl/i386-linux/auto/DBD/Pg/Pg.so:
 undefined symbol: Perl_no_modify at /usr/lib/perl/5.6.1/DynaLoader.pm 
 line
 202, FILE line 28.
  at (eval 25) line 3

 Compilation failed in require at (eval 25) line 3, FILE line 28.
 Perhaps a required shared library or dll isn't installed where expected
  at Radius/SqlDb.pm line 106
 *

 Regards,
 Rickard

 ___
 Rickard Gunnarsson | [EMAIL PROTECTED]
 WLAN Alliance AB, Stureplan 6, 114 35 Stockholm, Sweden


 ===
 Archive at http://www.open.com.au/archives/radiator/
 Announcements on [EMAIL PROTECTED]
 To unsubscribe, email '[EMAIL PROTECTED]' with
 'unsubscribe radiator' in the body of the message.



NB: I am travelling this week, so there may be delays in our 
correspondence.

--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.