Re: Send Access-Reject when user does not match any group?

2013-01-14 Thread A . L . M . Buxey
Hi, Hi, Is there a way to configure FreeRadius 2.1.10 to send Access-Reject on users which don't match any of the defined groups? I tried with: DEFAULT Group-Name !* , Auth-Type := Reject Reply-Message = Account rejected., Fall-Through = No and

Re: your mail

2013-01-14 Thread A . L . M . Buxey
Hi, Hi all, I want to configure the free radius to return access- reject based on the value of a particular column in database . How do i do that ??? please help probably with a bit of unlang like if(%{sql:SELECT group FROM `table` where

Re: Send Access-Reject when user does not match any group?

2013-01-14 Thread Bogdan Enache
Hello again, Hi, Hi, Is there a way to configure FreeRadius 2.1.10 to send Access-Reject on users which don't match any of the defined groups? I tried with: DEFAULT Group-Name !* , Auth-Type := Reject Reply-Message = Account rejected., Fall-Through =

Re: Send Access-Reject when user does not match any group?

2013-01-14 Thread A . L . M . Buxey
Hi, As you can see, it matches the rule in users first, and then the group named login in MySQL. There is no other match. because thats the order that you have them run in how can the users file know anything about the groups if you are doing the groups AFTER the users file? change the

Re: Send Access-Reject when user does not match any group?

2013-01-14 Thread Bogdan Enache
Hi, Pe 14.01.2013 15:17, a.l.m.bu...@lboro.ac.uk a scris: Hi, As you can see, it matches the rule in users first, and then the group named login in MySQL. There is no other match. because thats the order that you have them run in how can the users file know anything about the groups if

wiki.freeradius.org will be down for upgrades

2013-01-14 Thread Alan DeKok
We'll take it down for a few hours to do some upgrades. It should be back up later today. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Slow Ldap Authorization

2013-01-14 Thread Tyler Brady
Can someone help point me in the right direction? LDAP is taking too long to authorize due to something in my configuration. Keep in mind that I am about as newb as you can get when it comes to this stuff. I apologize for my ignorance. Any help would be greatly appreciated. [ldap] Bind was

Re: Slow Ldap Authorization

2013-01-14 Thread Arran Cudbard-Bell
On 14 Jan 2013, at 23:35, Tyler Brady tbr...@stc-comm.com wrote: Can someone help point me in the right direction? LDAP is taking too long to authorize due to something in my configuration. Keep in mind that I am about as newb as you can get when it comes to this stuff. I apologize for my

RE: Slow Ldap Authorization

2013-01-14 Thread Tyler Brady
Look. This is absolutely not a RADIUS issue, you need to buy a book on LDAP and read up on referals, and escaping special characters. Anyone involved in AAA needs to know about these fundimental protocols, spoonfeeding you information will not help your understanding of them. -Arran

Re: Slow Ldap Authorization

2013-01-14 Thread Phil Mayers
On 01/11/2013 10:15 PM, Tyler Brady wrote: basedn = DC=company,DC=com Try setting a more specific (longer) base DN. As Arran has pointed out, you're getting LDAP referrals. Active Directory likes to do this if you query the LDAP tree from a point above 1 database, even though

Re: Slow Ldap Authorization

2013-01-14 Thread Phil Mayers
On 01/15/2013 07:45 AM, Phil Mayers wrote: On 01/11/2013 10:15 PM, Tyler Brady wrote: basedn = DC=company,DC=com Try setting a more specific (longer) base DN. As Arran has pointed out, you're getting LDAP referrals. Active Directory likes to do this if you query the LDAP tree from a