Re: postgresql HOWTO :)

2002-02-21 Thread Igor Chen
ok :) it's not a patch, just 4 lines added :) P.S. I also remind, that your sql.conf does not work with postgres :) On Wed, 20 Feb 2002, Alan DeKok wrote: Igor Chen [EMAIL PROTECTED] wrote: First of all, you should use freeradius-snapshot to work with op field. 1) db_postgresql.sql is not

HEEEEEEEEELP

2002-02-21 Thread stuartc
Sorry to disturb. This is my simplified problem, Which I can't change the machines I don't admin. I admin a proxy radius which queryies (for want of a better word) a master radius, I send the request and get back a response from a totally different master radius machine, obviously with

acct_unique

2002-02-21 Thread Igor Chen
Anybody uses that module? I've got a problem - sometimes cisco nas sends several requests and user's Start session is inserted to radacct twice or even more times... Using that module will solve the problem? -- cron-ripe - List info/subscribe/unsubscribe? See

the attribute of Exec-Program

2002-02-21 Thread Liu Tung-Chen
Hi, I would like to use the attribute of Exec-Program when the authentication is passed . But it doesn't work. Could anyone help me? Thanks. The user in file users in my freeradius server is

Re: HEEEEEEEEELP

2002-02-21 Thread stuartc
On Thu, 21 Feb 2002, Rainer Clasen wrote: stuartc wrote: I admin a proxy radius which queryies (for want of a better word) a master radius, I send the request and get back a response from a totally different master radius machine, obviously with different IP. I am sure by now most of

Re: can u gime some advice

2002-02-21 Thread Chad Miller
[removed crosspost to -devel; this is not about development] On Thu, Feb 21, 2002 at 02:58:30PM +0800, skycony wrote: I want to use freeradius in our commercial product, should I use the release freeradius0.4 or the snapshot? Unfortunately, FreeRADIUS doesn't have a formal release schedule or

Re: the attribute of Exec-Program

2002-02-21 Thread Alan DeKok
Liu Tung-Chen [EMAIL PROTECTED] wrote: I would like to use the attribute of Exec-Program when the authentication is passed . But it doesn't work. Could anyone help me? Grab the latest CVS snapshot. Read 'scripts/exec-program-wait' Alan DeKok. - List info/subscribe/unsubscribe? See

Re: (no subject)

2002-02-21 Thread Alan DeKok
Frank Cusack [EMAIL PROTECTED] wrote: But in some (many) cases, depending on config options desired, the newer dictionary(ies) are required. Are dictionaries replaced on make install? No. How about dictionary.local being used for local entries, and 'make install' always overwrites all

Re: postgresql HOWTO :)

2002-02-21 Thread Alan DeKok
Igor Chen [EMAIL PROTECTED] wrote: ok :) it's not a patch, just 4 lines added :) I've added it, thanks. I also remind, that your sql.conf does not work with postgres :) OK. I'll try to dig up the old message where you posted a working postgres sql.conf... Alan DeKok. - List

Re: HEEEEEEEEELP

2002-02-21 Thread Alan DeKok
stuartc [EMAIL PROTECTED] wrote: No it has to be done aboveSend a request one ip and get a response from one of two different masters... so I could infact send a request to one master and get a response from there other, there is no way round it. I'm *amazed* that this works for any

Passing access-list number from Radius server to Cisco PIX firewall - FreeRadius v0.4

2002-02-21 Thread Pierre Strazza
Hello there, I'm trying to set a configuration with a PIX firewall as an authentication gateway, relying on a freeradius server, which picks up users in a LDAP directory. I'd like to be able to : - pass access-lists numbers according radius groups (based on LDAP groups) to the PIX, - assign an

Re: HEEEEEEEEELP

2002-02-21 Thread Steve Langasek
On Thu, Feb 21, 2002 at 11:44:02AM -0500, Alan DeKok wrote: stuartc [EMAIL PROTECTED] wrote: No it has to be done aboveSend a request one ip and get a response from one of two different masters... so I could infact send a request to one master and get a response from there other, there

Re: HEEEEEEEEELP

2002-02-21 Thread Alan DeKok
Steve Langasek [EMAIL PROTECTED] wrote: Is this a good time to inquire whether Freeradius CVS fixes the bug where the server doesn't set the source address in its response packets, causing problems if radiusd is running on a server with multiple IP addresses? :) The server doesn't set the

Re: HEEEEEEEEELP

2002-02-21 Thread Alan DeKok
Alan DeKok [EMAIL PROTECTED] wrote: Hmm... if 'bind_address' is set, then the proxy fd *should* be bound to that IP address, too. That currently isn't done. Luckily, it's a ~5 line patch. Never mind... I read a little more of the code, and it *is* done. So if you set 'bind_address =

Re: Counter

2002-02-21 Thread Alan DeKok
Gillou [EMAIL PROTECTED] wrote: If I use reser = never, can I reset the counter manualy with a given value with a small perl script or C prog ? There is currently no way to do this. It shouldn't be hard to do from a small program. Alan DeKok. - List info/subscribe/unsubscribe? See

Cisco 5300

2002-02-21 Thread Peter Machell
Our Cisco 5300 IOS 12.1 doesn't seem to support the idle-timeout value. I know this is not Radius' fault but does anyone know how to get around it? TIA, Peter. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Cisco 5300

2002-02-21 Thread Tarquin Douglass \(Astronet Internet Access\)
interface Dialer 1 ip unnumbered LoopBack0 encapsulation ppp ppp authentication chap pap ppp multilink peer default ip address pool pool0 dialer in-band -dialer idle-timeout 3600 dialer-group 1 no ip mroute-cache no fair-queue no netbios nbf Monday is the term used to signify the eighth day

Re: HEEEEEEEEELP

2002-02-21 Thread Alan DeKok
Steve Langasek [EMAIL PROTECTED] wrote: Freeradius receives a request from a NAS sent to IP address a.b.c.d; it handles the request, and sends back a reply without explicitly choosing a source IP address for the socket -- it may be the right IP address, it may be (depending on what the kernel

Re: (no subject)

2002-02-21 Thread Frank Cusack
On Thu, Feb 21, 2002 at 11:14:11AM -0500, Alan DeKok wrote: Frank Cusack [EMAIL PROTECTED] wrote: How about dictionary.local being used for local entries, and 'make install' always overwrites all dictionary files? (and dictionary picks up an INCLUDE) Over-writing configuration files is