Re: Source IP address for proxy requests

2006-09-26 Thread Angel L. Mateo
El lun, 25-09-2006 a las 22:54 +0300, Peter Nixon escribió: I had this problem previously with FreeRADIUS where radius had to reply from the inside interface of a multihomed server else the packets would not match the IPSec tunnel ACLs bound to the external interface (A common config) I

How to use rlm_dbm module ???

2006-09-26 Thread 나종현
I want to use gdbm in radius. For management user_id, passwd etc. is it possible for using rlm_dbm module. How to modify radiusd.conf module section. Help me please. ☞ 카트라이더가 지겹다면? 이제는 인라인 레이싱게임

Re: Apologies for Mr. Peter Nixon and updated sqlippool debug

2006-09-26 Thread Peter Nixon
On Tue 26 Sep 2006 00:49, Guilherme Franco wrote: Mr. Nixon, Please accept my humble apologies for the earlier spam. I would like to test your experimental module sqlippool in Oracle and in return, contribute somehow with my working configs and tables to the CVS. I understand that you are

Auth-Type issue

2006-09-26 Thread Apu islam
Hello good FreeRadius People, I have the radius server running fine, however I am having issues with user being authenticated. To note, I am using dialup-admin to create the user. Here is the error output: --- rad_recv: Access-Request packet from host x.x.x.x:63762, id=252,

Re: Source IP address for proxy requests

2006-09-26 Thread Nicolas Baradakis
Peter Nixon wrote: On Mon 25 Sep 2006 19:05, Nicolas Baradakis wrote: That has nothing to do with FreeRADIUS. The source address of an outgoing UDP packet is chosen by the kernel according to the local network configuration. I had this problem previously with FreeRADIUS where radius had

Re: Apologies for Mr. Peter Nixon and updated sqlippool debug

2006-09-26 Thread Peter Nixon
On Tue 26 Sep 2006 14:45, Guilherme Franco wrote: Hi, This is what happens: SQL UPDATE radippool SET nasipaddress = '', pool_key = 0,callingstationid = '', expiry_time = current_timestamp - interval '1' second(1) WHERE pool_key = '2398432'; 0 rows updated. SQL SELECT

Re: Apologies for Mr. Peter Nixon and updated sqlippool debug

2006-09-26 Thread Guilherme Franco
Hello, But how can my first query work if the pool-key was not saved anywhere in the database? When I do the same query without the where pool_key = something, it works: UPDATE radippool SET nasipaddress = '', pool_key = 0,callingstationid = '', expiry_time = current_timestamp - interval

Re: Source IP address for proxy requests

2006-09-26 Thread Peter Nixon
On Tue 26 Sep 2006 11:55, Nicolas Baradakis wrote: Peter Nixon wrote: On Mon 25 Sep 2006 19:05, Nicolas Baradakis wrote: That has nothing to do with FreeRADIUS. The source address of an outgoing UDP packet is chosen by the kernel according to the local network configuration. I had

Prefixing Topics with Mailing list name

2006-09-26 Thread Graham Beneke
Hi Guys Something thats been bugging me about this list for a while is the fact that the post subjects have no indication which mailing list they are from. All the other mailing lists I'm on prefix subjects with something like [freeradius] but since this list (as well as freeradius-devel)

Re: Prefixing Topics with Mailing list name

2006-09-26 Thread Peter Nixon
On Tue 26 Sep 2006 15:01, Graham Beneke wrote: Hi Guys Something thats been bugging me about this list for a while is the fact that the post subjects have no indication which mailing list they are from. All the other mailing lists I'm on prefix subjects with something like [freeradius] but

Re: Source IP address for proxy requests

2006-09-26 Thread Nicolas Baradakis
Peter Nixon wrote: On Tue 26 Sep 2006 11:55, Nicolas Baradakis wrote: However, a proxy request is different, because it's a new outgoing packet. In this case, we don't force the source IP in FreeRADIUS and we shouldn't do so because the NAS and the realm server are possibly on a

RE: Hiding Passwords in Debug Output

2006-09-26 Thread Garber, Neal
The administrator has access to ALL secret information by simple fact that he's an administrator. He can run tcpdump, and manually decrypt the passwords. So hiding the password on the server is pointless, and a waste of time. I realize that. I wasn't trying to *prevent* the admin. from

Re: Hiding Passwords in Debug Output

2006-09-26 Thread Alan DeKok
Garber, Neal [EMAIL PROTECTED] wrote: That's unfair Alan. I was not trying to *dictate* that other admins shouldn't see it - I was proposing that admins should have a choice - because, IMO it's not needed to troubleshoot most problems. It's no more unfair than your comment about why don't

Re: proxy.conf

2006-09-26 Thread Francois-Xavier GAILLARD
Le Mon, Sep 25, 2006 at 09:28:52PM +0200, srg krn ecrivait: Hello: I have a freeradius proxy working fine with one realm (radgroup) defined in proxy.conf. If it receives a query for [EMAIL PROTECTED] if sends to another radius server striping the @radgroup from username and all is OK.

RE: Source IP address for proxy requests

2006-09-26 Thread Sebastien Cantos
I've you seen my post or are you just ignoring it ? :) -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Angel L. Mateo Envoyé : mardi 26 septembre 2006 08:34 À : freeradius-users@lists.freeradius.org Objet : Re: Source IP address for proxy requests El

Re: Apologies for Mr. Peter Nixon and updated sqlippool debug

2006-09-26 Thread Peter Nixon
So what exactly is the problem. You posted me a debug log. I told you what the problem was. If you say that it now works then there is no problem. If you have ANOTHER problem, then post the debug for it. The first query is not SUPPOSED to work if the pool_key doesn't exist. I CLEARS existing

RE: Hiding Passwords in Debug Output

2006-09-26 Thread Garber, Neal
Insulting me because I disagree with you pretty much guarantees that I will never agree with you. Please accept my apology as it was not my intent to offend or insult you. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Source IP address for proxy requests

2006-09-26 Thread Phil Mayers
Nicolas Baradakis wrote: Yes you are correct. Abviously I didn't read the thread in enough depth. It does bring up the issue that we maybe should have an optional proxy_source_ip config option.. All IP protocol servers should offer each type of socket a configurable bind address (or list of

Re: Source IP address for proxy requests

2006-09-26 Thread Alan DeKok
Phil Mayers [EMAIL PROTECTED] wrote: All IP protocol servers should offer each type of socket a configurable bind address (or list of such). That is quite aside from the specifics of this issue - that is, it solves other, much much harder to solve problems than just this issue, and is

Re: Prefixing Topics with Mailing list name

2006-09-26 Thread Dennis Skinner
Jan Mulders wrote: Because most other lists (for example, Sourceforge) add [prefixes] to emails, that make it easier - for me at least - to filter emails by list in Gmail and other mail clients. Create a label in Gmail and then apply it based on the sender, reply-to, or to...whichever is the

mod_auth_radius-2.0

2006-09-26 Thread William
Greetings, I am having some probles with mod_auth_radius-2.0 on apache 2.0.54. The error I am receiving is: Cannot load /usr/local/apache/modules/mod_auth_radius-2.0.so into server: /usr/local/apache/modules/mod_auth_radius-2.0.so: undefined symbol: ap_snprintf I am running on suse

Re: Prefixing Topics with Mailing list name

2006-09-26 Thread A . L . M . Buxey
Hi, Because most other lists (for example, Sourceforge) add [prefixes] to emails, that make it easier - for me at least - to filter emails by list in Gmail and other mail clients. I'm currently subscribed to the following lists that use [prefixes]: [shorewall-users] [openvpn-users]

Re: mod_auth_radius-2.0

2006-09-26 Thread James Wakefield
William wrote: Greetings, I am having some probles with mod_auth_radius-2.0 on apache 2.0.54. The error I am receiving is: Cannot load /usr/local/apache/modules/mod_auth_radius-2.0.so into server: /usr/local/apache/modules/mod_auth_radius-2.0.so: undefined symbol: ap_snprintf I am

RADIUS + MySQL + decisionmaking?

2006-09-26 Thread Jan Mulders
Hello, I am trying to set up some decision-making logic into FreeRADIUS, to assign users a different speed of service depending on how much bandwidth they've used since their billing started. I want to issue 512k speed to users in group A, who have used less than 20GB of bandwidth