Re: Diferent Session-Timeout depending on NAS

2006-07-03 Thread Santiago Balaguer GarcĂ­a
Yeah!! Your solution is the easiest one. I did not explain enough well my problem. the session-timeout has to asign depending on the NAS and the remaining time. My goal is sends the value of Session-Timeout attribute once this value had benn multiplied by a factor depending on the NAS. For

Re: Diferent Session-Timeout depending on NAS

2006-07-03 Thread Stefan Winter
Yes. Value is modified in execution time. Does someone know any solution ? In your scenario, Session-Time does not need to be calculated at execution time, it is solely dependent on the NAS. The solution I proposed accounts to that. Depending on the NAS IP address, you can enter whatever

unsuscribe

2006-07-03 Thread alfonso
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

eap/peap-mschap-v2 users file and check items

2006-07-03 Thread Sascha Lucas
Hi, I use successfully WinXP with peap-mschap-v2. But I'm unable to enter aditional items in the check list. The users file for working peap-mschap-v2 looks this way: test Auth-Type := EAP, User-Password == abc123 And I want it also to check for NAS-IP and NAS-Port. Doing local tests (non eap

ntlm_auth and clear-text passwords

2006-07-03 Thread robiwan
Dear all, For AAA-Authenticating on a Cisco Catalyst Switch 3750, i try to use use the ntlm_auth to authenticate users against our Active Directory (domain-name: SOUTH). Users telnet the switch, therefore a clear-text password will be sent. according to an earlier posting

Script to archive radacct table

2006-07-03 Thread Barry O'Donovan
Folks, I just wrote a PHP (sorry!) CLI script to archive completed radacct session data that's older than the current month and last month to a separate database. As the radacct table grows in size, INSERTs, UPDATEs and DELETEs take longer as the data and index file sizes grow. SELECTs also

Username in MySQL with regexp

2006-07-03 Thread christian meutes
Hello list, iam using FreeRADIUS-1.0.5 with MySQL-Backend. Now i want a username check with an regexp operator (=~), so that i can match usernames (+1234567(0-9)) against a regexp of ^\+^1234567 and dont have the need of creating 10 users which have all the same reply attributes. The

question on postauth_query

2006-07-03 Thread Jurgen van Vliet
Title: WANBound Briefpapier Hi people, I have a question I coulnt find in FAQ/Google, maybe I missed it or maybe I am thinking too difficult, but: Is it possible to do multiple queries in 1 postauth_queryusing somesort of IF THEN meganism ? Like : postauth_query = { if QUERY1=1

Re: Diferent Session-Timeout depending on NAS

2006-07-03 Thread Stefan Winter
For instance, an account has Session-timeout = 600. If the account is used in Europe Session-timeout = 600, but it is used in Mexico Session-timeout = 600*2.5 = 1500. Yes. Value is modified in execution time. Does someone know any solution ? Um, sorry. After reading your post again, I

Re: eap/peap-mschap-v2 users file and check items

2006-07-03 Thread Alan DeKok
Sascha Lucas [EMAIL PROTECTED] wrote: The users file for working peap-mschap-v2 looks this way: test Auth-Type := EAP, User-Password == abc123 No, it doesn't. If you did that, you didn't read the documentation. Don't set Auth-Type. It's NOT necesary. And use := for User-Password,

Re: Username in MySQL with regexp

2006-07-03 Thread Alan DeKok
christian meutes [EMAIL PROTECTED] wrote: iam using FreeRADIUS-1.0.5 with MySQL-Backend. Now i want a username check with an regexp operator (=~), so that i can match usernames (+1234567(0-9)) against a regexp of ^\+^1234567 and dont have the need of creating 10 users which have all the

Re: ntlm_auth and clear-text passwords

2006-07-03 Thread Michael Griego
Something is different between your test ntlm_auth and the ntlm_auth you're running under FreeRADIUS. Your test may return OK, but under FreeRADIUS, its returning NO SUCH USER. In any case, since you're doing cleartext authentication in this case, you could use LDAP authentication against

RADIUS-LDAPv3.schema db_mysql.sql

2006-07-03 Thread Rohaizam Abu Bakar
I noticed that from Freeradius1.1.1 onwards, both RADIUS-LDAPv3.schema db_mysql.sql NOT included in source dir? Looking for latest schema since i'm currently would like to upgrade my ldap. --haizam - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: ntlm_auth and clear-text passwords

2006-07-03 Thread King, Michael
-Original Message- On Behalf Of [EMAIL PROTECTED] Users telnet the switch, therefore a clear-text password will be sent. Just a completely left field question. Any particular reason you have chosen not to enable SSH on that switch? It's in the IOS (Assuming you have the correct IOS

Re: RADIUS-LDAPv3.schema db_mysql.sql

2006-07-03 Thread Alan DeKok
Rohaizam Abu Bakar [EMAIL PROTECTED] wrote: I noticed that from Freeradius1.1.1 onwards, both RADIUS-LDAPv3.schema db_mysql.sql NOT included in source dir? Looking for latest schema since i'm currently would like to upgrade my ldap. doc/examples Alan DeKok. - List