RE: Assign IP based on CallingStationID.

2006-11-09 Thread banga
I use dafault table-layout. How I understand you just change username authentication to callingstationid authentication inside sql.conf. Thx, it’s really good idea. I think that I could do the same by myself, but it will take a time. Therefore any examples will be very useful. Can you post it

Re: Assign IP based on CallingStationID.

2006-11-09 Thread Peter Nixon
Hi Banga We have a large system in production that does almost exactly what you state. It can all be done with a few modifications of the sql queries. (Infact we have a rather complex postgresql stored procedure, but one simpler query is possible depending on what you need). If you wish to

RE: Assign IP based on CallingStationID.

2006-11-09 Thread John Longland
Title: RE: Assign IP based on CallingStationID. Here is the query that I put into sql.conf Maybe use it and build on it for your specific example ?? authorize_check_query = select id,UserName,Attribute,Value,op FROM ${authcheck_table} WHERE UserName in (select UserName from

Re: howto get/send the fullname of an user

2006-11-09 Thread James Wakefield
Ariel VIVES wrote: Hello the list, I'm starting with freeradius. Authentication works fine ! But the informations I get is only the username (le login name in /etc/passwd). How do I get the Fullname ? Or others informations (like mail, home directory, ...) Is it possible ? is it a

Re: howto get/send the fullname of an user

2006-11-09 Thread Ariel VIVES
James Wakefield wrote: Ariel VIVES wrote: Hello the list, I'm starting with freeradius. Authentication works fine ! But the informations I get is only the username (le login name in /etc/passwd). How do I get the Fullname ? Or others informations (like mail, home directory, ...) Is it

RE: Assign IP based on CallingStationID.

2006-11-09 Thread banga
John , I see the way now. Thx, for help. I’m going to install test radius in nearest future. I’ll try to check this query there. John Longland wrote: Here is the query that I put into sql.conf Maybe use it and build on it for your specific example ?? authorize_check_query =

Re: Assign IP based on CallingStationID.

2006-11-09 Thread banga
Thx Peter, I will try to install 1.1.3 to check sqlippool functions. Peter Nixonn wrote: Hi Banga We have a large system in production that does almost exactly what you state. It can all be done with a few modifications of the sql queries. (Infact we have a rather complex postgresql

Re: howto get/send the fullname of an user

2006-11-09 Thread James Wakefield
Ariel VIVES wrote: James Wakefield wrote: Ariel VIVES wrote: Hello the list, I'm starting with freeradius. Authentication works fine ! But the informations I get is only the username (le login name in /etc/passwd). How do I get the Fullname ? Or others informations (like mail, home

Re: howto get/send the fullname of an user

2006-11-09 Thread Ariel VIVES
James Wakefield wrote: Ariel VIVES wrote: James Wakefield wrote: Ariel VIVES wrote: Hello the list, I'm starting with freeradius. Authentication works fine ! But the informations I get is only the username (le login name in /etc/passwd). How do I get the Fullname ? Or others

Re: Assign IP based on CallingStationID.

2006-11-09 Thread Collen Blijenberg
Hmm i tried this, but it ain't working.. ?! i have: id - 1 username - blah attribute- Calling-Stattion-Id op- == value - [mac adress] still get username ask ?! no connection. dunno, what's the idea behinf this query ? mac = username ? no

Re[5]: limiting sessions

2006-11-09 Thread Andrew Long
Andrew Long [EMAIL PROTECTED] wrote: I tried Session-Timeout but it doesn't seem to do the job. So... is it being sent back to the NAS? If it is, then the NAS is ignoring it. Go ask your NAS manufacturer for a refund, or for a firmware upgrade that implements RADIUS. Alan DeKok.

RE: Re[5]: limiting sessions

2006-11-09 Thread Seferovic Edvin
radiusd -X in the debug mode you can see attributes that are being send back to you NAS. If you want to see what comes to NAS - please consult the documentation of your NAS ! Regards, E:S -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] g] On Behalf Of Andrew Long

RE: Assign IP based on CallingStationID.

2006-11-09 Thread John Longland
Title: RE: Assign IP based on CallingStationID. The idea is to do IP-assignment based on the Calling-Station-ID and disregarding the username,password that is passed to radius. JOhn -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]. org]On Behalf Of Collen

Re: Re[5]: limiting sessions

2006-11-09 Thread Alan DeKok
Andrew Long [EMAIL PROTECTED] wrote: How would you suggest I verify the session-timeout is actually being sent/received? tcpdump / wireshark? Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List

Re: howto get/send the fullname of an user

2006-11-09 Thread Alan DeKok
Ariel VIVES [EMAIL PROTECTED] wrote: Yes, and my accounts are under NIS. But i want to authenticate my users using freeradius. and it works... so it isn't possible to get additional informations with freeradius by using a shell script or with adding specific attribute ? Does the NIS

Re: howto get/send the fullname of an user

2006-11-09 Thread Ariel VIVES
Alan DeKok wrote: Ariel VIVES [EMAIL PROTECTED] wrote: Yes, and my accounts are under NIS. But i want to authenticate my users using freeradius. and it works... so it isn't possible to get additional informations with freeradius by using a shell script or with adding specific attribute ?

Re[7]: limiting sessions

2006-11-09 Thread Andrew Long
Andrew Long [EMAIL PROTECTED] wrote: I tried Session-Timeout but it doesn't seem to do the job. So... is it being sent back to the NAS? If it is, then the NAS is ignoring it. Go ask your NAS manufacturer for a refund, or for a firmware upgrade that implements RADIUS. Alan DeKok.

Re: limiting sessions

2006-11-09 Thread Kevin Bonner
On Thursday 09 November 2006 11:00, Andrew Long wrote: Here is the output from radiusd -X regarding the answer to an auth-request from one of the properties where I changed session-timeout to 1800. It does not look to me like the session-timeout attribute is being sent... any suggestions?

Re[2]: limiting sessions

2006-11-09 Thread Andrew Long
On Thursday 09 November 2006 11:00, Andrew Long wrote: Here is the output from radiusd -X regarding the answer to an auth-request from one of the properties where I changed session-timeout to 1800. It does not look to me like the session-timeout attribute is being sent... any suggestions?

Queries apear in Dialup_admin page

2006-11-09 Thread CASTANHEIRA, Nuno Osvaldo
Hi, i have a strange problem in my freeradius with dialup_admin interface. When i choose the fields,statistics, user statistics, online users, radius clients .etc, the queries apear in Dialup_Admin page... very strange. Can anyone tell me what i´m i doing wrong. Sorry for

Re: Queries apear in Dialup_admin page

2006-11-09 Thread Hernan Antolini
Nuno, check you admin.conf under dialup_admin install dir; i guess you have an sql_debug : true entry. regards Hernan Antolini [EMAIL PROTECTED] wrote on 11/09/2006 02:09:06 PM: Hi, i have a strange problem in my freeradius with dialup_admin interface. When i choose the fields, statistics,

Re: howto get/send the fullname of an user

2006-11-09 Thread Phil Mayers
Ariel VIVES wrote: You're trying to use radius for something it's not really intended for. You'd be better off querying that information from a real directory service, like LDAP, or NIS, if you want it quicker and nastier. Yes, and my accounts are under NIS. But i want to authenticate my

Re: Queries apear in Dialup_admin page

2006-11-09 Thread Richard Cotrina
Take a look at your conf/admin.conf file in the dialup_admin directory, and disable sql or ldap debug ( depends on what you are using ): ldap_debug: false sql_debug: false regards On Thu, 9 Nov 2006, CASTANHEIRA, Nuno Osvaldo wrote: Hi, i have a strange problem in my freeradius with

RE: Queries apear in Dialup_admin page

2006-11-09 Thread CASTANHEIRA, Nuno Osvaldo
Thank you very much .. it resolve the problem. De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Em nome de Hernan AntoliniEnviada: quinta-feira, 9 de Novembro de 2006 17:31Para: FreeRadius users mailing listAssunto: Re: Queries apear in Dialup_admin page Nuno, check you

Re: Multiple LDAP (Not failover) lookup...

2006-11-09 Thread Eric Martell
Thanks Alan. I figured it out. It should be ldap2 { notfound = reject } as ldap2 is returning notfound status. Thanks so much again. --- Alan DeKok [EMAIL PROTECTED] wrote: Eric Martell [EMAIL PROTECTED] wrote: Thanks so much Neal. You got it 95% right. The problem is FreeRadius

Re: limiting sessions

2006-11-09 Thread Kevin Bonner
* Try to respond just to the list and not me personally. I don't enjoy wading through duplicate messages. Thanks! On Thursday 09 November 2006 11:34, Andrew Long wrote: also ran SELECT `usergroup`.`UserName`, `usergroup`.`creationdate`, `usergroup`.`GroupName` from usergroup where

Re: howto get/send the fullname of an user

2006-11-09 Thread James Wakefield
Ariel VIVES wrote: Alan DeKok wrote: Ariel VIVES [EMAIL PROTECTED] wrote: Yes, and my accounts are under NIS. But i want to authenticate my users using freeradius. and it works... so it isn't possible to get additional informations with freeradius by using a shell script or with adding

Re: Server logs say users authenticate, but they don't (Now with more details!)

2006-11-09 Thread Ernie Dunbar
Here's the output from `freeradius -X` for one attempted user login: rad_recv: Access-Request packet from host AS5300:1645, id=32, length=88 NAS-IP-Address = AS5300 NAS-Port = 47 NAS-Port-Type = Async User-Name = Pheilmann Called-Station-Id = 6811527

Re: howto get/send the fullname of an user

2006-11-09 Thread Alan DeKok
Ariel VIVES [EMAIL PROTECTED] wrote: Does the NIS documentation say I can't do that with RADIUS ? No. Now you're being ridiculous. The NIS documentation doesn't say you can't use NIS to make wine, either. That doesn't mean it *does* make wine. If the NIS documentation doesn't tell

Re[2]: limiting sessions

2006-11-09 Thread Andrew Long
On Thursday 09 November 2006 11:34, Andrew Long wrote: also ran SELECT `usergroup`.`UserName`, `usergroup`.`creationdate`, `usergroup`.`GroupName` from usergroup where username = '4aroma70370'; and that also comes up null... Does it make sense that radius is not recognizing the

Discarding new rquests and CPU eats 99.9%

2006-11-09 Thread Cihan DEMİR
Hi all, Were using 0.9.3 version on RedHat. I start radius in normal mode then it start to eat 99.9% of CPU and produce error messages : . Thu Nov  9 14:52:16 2006 : Error: Discarding new request from client turkcell:4166 - ID: 14 due to live request 26387 Thu Nov  9 14:52:16