Re: Accounting and Acct-Delay-Time in MySQL

2010-11-18 Thread Stefan Winter
Hi, I'd re-visit the entire accounting table queries. Create a *new* table, so that people don't have surprises when they upgrade. Ideally, it should be robust in the face of duplicate packets, and packets forwarded via 2 different paths (think radrelay + delays) Okay, I'll see what

Re: [Segmentation Fault while proxing Request to home server]

2010-11-18 Thread Влад Власов
Hello Thomas. I have the same problem After installing 2.1.6 version everything worked well . - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Help: 802.1x with freeRadius and mySql database

2010-11-18 Thread Alan Buxey
Hi, Then I start to use mySql database, instead of clients.conf and users. I followed the instructions from this link [1]http://wiki.freeradius.org/SQL_HOWTO. I use the radtest command to test the username/password. It works fine. Then I use the Cisco switch to test the

Changing radgroup with a sqlcounter ?

2010-11-18 Thread Arrgghh
Hello, I am working on a radius config for a hotspot. I already configured a script that kick the user when the quota exceed thanks to some very useful posts in the coova forum. I used this counter : sqlcounter noresetBytecounter { counter-name = Total-Max-Octets

LDAP auth success / User reject

2010-11-18 Thread Michael Arndt
hello * Szenario: freeradius auth via LDAP simple bind with user passwd / user name for a hot spot Used config works with two other setups of same environment Problem: simple bind returns ok then another module rejects the user Any hints where i should look ?

Re: configure output summary

2010-11-18 Thread Josip Rodin
On Wed, Nov 17, 2010 at 07:53:02AM +0100, Stefan Winter wrote: I think it would generally make sense to put a summary output of configure at the end of its run, so that one can easily see which modules will be disabled. In an acute case of bash script fiddling, I created the attached

Re: configure output summary

2010-11-18 Thread Alan DeKok
Josip Rodin wrote: I've actually been a bit confused by the notion of having separate autoconf installations/invocation in multiple subdirectories. The point of that would seem to be that if you just want to reconfigure and rebuild one particular part, you can do it. But who ever does that?

Re: LDAP auth success / User reject

2010-11-18 Thread Alan DeKok
Michael Arndt wrote: below debug output hu Nov 18 11:20:52 2010 : Debug: modsingle[authorize]: returned from suffix (rlm_realm) for request 0 Use -X. You've added an additional -x, which makes the output harder to read. Thu Nov 18 11:20:52 2010 : Debug: rad_check_password: Found

Re: configure output summary

2010-11-18 Thread John Dennis
On 11/18/2010 08:21 AM, Josip Rodin wrote: I've actually been a bit confused by the notion of having separate autoconf installations/invocation in multiple subdirectories. The point of that would seem to be that if you just want to reconfigure and rebuild one particular part, you can do it. But

Re: configure output summary

2010-11-18 Thread Josip Rodin
On Thu, Nov 18, 2010 at 08:48:38AM -0500, John Dennis wrote: On 11/18/2010 08:21 AM, Josip Rodin wrote: I've actually been a bit confused by the notion of having separate autoconf installations/invocation in multiple subdirectories. The point of that would seem to be that if you just want to

Re: Re: LDAP auth success / User reject

2010-11-18 Thread Michael Arndt
Alan, Use -X. You've added an additional -x, which makes the output harder to read. ok, understood, attached below Thu Nov 18 11:20:52 2010 : Debug: rad_check_password: Found Auth-Type Reject Thu Nov 18 11:20:52 2010 : Debug: rad_check_password: Auth-Type = Reject, rejecting user

Re: Crypt Passwords in SQL

2010-11-18 Thread Kenneth Marshall
On Wed, Nov 17, 2010 at 05:00:19PM -0500, William wrote: On Wednesday, November 17, 2010 04:24:32 pm Kenneth Marshall wrote: On Wed, Nov 17, 2010 at 04:15:47PM -0500, William wrote: Greetings, First, Thanks Alan DeKok. That was exactly what I needed for NAS_Showt_Name.

Case-insensitive regexps in rlm_files

2010-11-18 Thread Brian Candler
In rlm_files, I can't see how to make a case-insensitive regular expression. - DEFAULT User-Name =~ (?i:foo) # nope, not supported by POSIX ERE. Logs: # Invalid regular expression (?i:foo) DEFAULT User-Name =~ /foo/i

Re: Case-insensitive regexps in rlm_files

2010-11-18 Thread Alan DeKok
Brian Candler wrote: In rlm_files, I can't see how to make a case-insensitive regular expression. You can't. - DEFAULT User-Name =~ (?i:foo) # nope, not supported by POSIX ERE. Logs: # Invalid regular

Re: LDAP auth success / User reject

2010-11-18 Thread Alan DeKok
Michael Arndt wrote: any hints, how to proceed to debug from where the Reject for rad_check_passwd is caused ? Find out what part of the configuration is setting Auth-Type := Reject. I checked ldap atributes and verified correctness of user passwd for simple bind with ldapsearch So i at

Re: configure output summary

2010-11-18 Thread Alan DeKok
Josip Rodin wrote: I personally have no problem with autoconf per se, configure.ac syntax in general tends to be fairly clear to me. But having N copies where we only seem to need 1? That sounds like a problem. Yes. The repetition is annoying. Also I think that this line of reasoning it's

Dynamic VLAN assignment on NAS

2010-11-18 Thread Attou eric
Hi the list I'm sure this is NAS question, not Freeradius' question. But perhaps somebody on the list had experienced this issue. Here is my problem. I setup : - A Freeradius configuration EAP/PEAP with user credentials stored in LDAP directory. - A NAS zcomax ag3621 wireless access

Re: Case-insensitive regexps in rlm_files

2010-11-18 Thread Brian Candler
Alan DeKok wrote: I'd prefer to avoid the users file entirely. The capability already exists in the server, in unlang. I'd suggest using that. The benefit to us in doing this in rlm_files/rlm_fastusers is that when these files are rsynced out, freeradius re-reads them without needing a

Re: [Segmentation Fault while proxing Request to home server]

2010-11-18 Thread Thomas Fagart
Hello, I've enable develloper mode, now I've got the following output : Finished request 13. Cleaning up request 13 ID 247 with timestamp +136 Going to the next request Waking up in 16.9 seconds. ASSERT FAILED event.c[1181]: We do not have threads, but the request is marked as queued or

Accounting data and NULL sessions

2010-11-18 Thread Natr Brazell
I have two questions if I may. One I think I've asked before but just getting around to trying to tackle it again. 1. I am using mysql for radacct data to keep track of sessions. The accounting data is going into flat files on each radius server. Is there a way to get the accounting data to

Re: configure output summary

2010-11-18 Thread Josip Rodin
On Thu, Nov 18, 2010 at 05:16:03PM +0100, Alan DeKok wrote: It's so that the modules are independent of the core. If you don't like a module rm -rf the directory. If you want a new one, drop files into a subdirectory, and the main configure/build process will find them. OK, that's actually

Re: [Segmentation Fault while proxing Request to home server]

2010-11-18 Thread Alan DeKok
Thomas Fagart wrote: I've enable develloper mode, now I've got the following output : ... ASSERT FAILED event.c[1181]: We do not have threads, but the request is marked as queued or running in a child thread == NULL Ah, that's easy. It's fixed in git commit 5849d7aa69. See the v2.1.x

Re: Accounting data and NULL sessions

2010-11-18 Thread Alan DeKok
Natr Brazell wrote: 1. I am using mysql for radacct data to keep track of sessions. The accounting data is going into flat files on each radius server. Is there a way to get the accounting data to go directly to into a mysql table? I don't want the accounting data in radacct. That

Re: Dynamic VLAN assignment on NAS

2010-11-18 Thread Alan DeKok
Attou eric wrote: The access point just put user1 on VLAN 30. My NAS ignore the VLAN ID 60 (Tunnel-Private-Group-Id:0 = 60) Then the NAS is broken. contained in the Access-Accept. I try with two different models of Access point (zcomax and cisco) My question: Is there a particular

Re: configure output summary

2010-11-18 Thread Stefan Winter
Hi, when running configure, lots of somewhat important messages scroll by, like silently disabling something you need :-) ./configure --with-whatever-options | grep WARN ;-) Yes, I can do that. I even dare say that I can spot WARNINGs while the scroll buffer runs by, and thus instantly

Re: configure output summary

2010-11-18 Thread Johan Meiring
On 2010/11/19 08:55 AM, Stefan Winter wrote: away. Much better than running a whacky script, of course! I feel that adding the script cannot do any harm whatsoever. I agree that a lot of newbies will not read it, but if _one_ person reads it a month, it will mean less questions on the