radgroupcheck attributes and test client

2013-05-03 Thread ch2009
All, I'm a newbie in radius. I've setup freeradius with mySQL and max-daily-session. When I set max-daily-session := 10 in radgroupcheck table, a user of this group can login (accept packet after authentication), even if he already has been logged in for 10 seconds before. I'm using NTRadPing

Re: radgroupcheck attributes and test client

2013-05-03 Thread Russell Mike
FR should be able to know if the allowed time used / consumed before it can deny request. have you setup rlm_sqlcounter ? Thanks RM -- On Fri, May 3, 2013 at 7:49 AM, ch2...@arcor.de wrote: All, I'm a newbie in radius. I've setup freeradius with mySQL and max-daily-session. When I set

Re: Proxy Treatment of PAP/Chap Auth Types

2013-05-03 Thread Matthew Newton
On Fri, May 03, 2013 at 04:46:27AM +0200, James T Mugauri wrote: attributes so: radtest -t type iS_u2h4gna a2uwv localhost 1812 ... [chap] login attempt by iS_u2h4gna with CHAP password [chap] Using clear text password uz3f9 for user iS_u2h4gna authentication. [chap] Password check failed ...

Re: Proxy Treatment of PAP/Chap Auth Types

2013-05-03 Thread Prashant Abhang
Hi Matthew, I faced the same issue.  I am using sql for storing user password. For solving issue I changed the password type from 'Cleartext-Password' to User-Password and it worked for me. But as you said, there is no difference and User-Password is deprecated. So what would be the reason

Re: Proxy Treatment of PAP/Chap Auth Types

2013-05-03 Thread Alan DeKok
James T Mugauri wrote: We have 2 RADIUS installations, thus: 1. FreeRADIUS/mysql Version 2.1.1, in whose radcheck, Password attribute is 'User-Password' Change that to Cleartext-Password. 2. FreeRADIUS/mysql Version 2.1.10, in whose radcheck, Password attribute is 'Cleartext-Password'

Re: Proxy Treatment of PAP/Chap Auth Types

2013-05-03 Thread Alan DeKok
Prashant Abhang wrote: I faced the same issue. I am using sql for storing user password. For solving issue I changed the password type from 'Cleartext-Password' to User-Password and it worked for me. But as you said, there is no difference and User-Password is deprecated. So what would be

Re: Proxy Treatment of PAP/Chap Auth Types

2013-05-03 Thread Matthew Newton
On Fri, May 03, 2013 at 09:19:40PM +0800, Prashant Abhang wrote: I faced the same issue.  I am using sql for storing user password. For solving issue I changed the password type from 'Cleartext-Password' to User-Password and it worked for me. But as you said, there is no difference and

Unlang comparing variable correctly

2013-05-03 Thread Tyller D
Hi, I am trying to compare a variable in freeradius using unlang but it seems to not be working correctly, more than likely i've made a mistake but let me show you. ? Evaluating (control:IMS-ActiveDirectory == 0) - FALSE ++? if (control:IMS-ActiveDirectory == 0) - FALSE ++? if

Re: Unlang comparing variable correctly

2013-05-03 Thread k...@rice.edu
On Fri, May 03, 2013 at 05:03:41PM +0200, Tyller D wrote: Hi, I am trying to compare a variable in freeradius using unlang but it seems to not be working correctly, more than likely i've made a mistake but let me show you. ? Evaluating (control:IMS-ActiveDirectory == 0) - FALSE ++? if

Re: Valgrind memcheck FR 2.2.1shows memory leak

2013-05-03 Thread Alan DeKok
Wang, Yu wrote: I installed FR 2.2.1 from git on one of our radius servers on April 22. After installation, I ran valgrind memcheck against radiusd binary and it showed no memory leak. A few days later now, I ran valgrind again. It showed memory leak. Code doesn't magically change. The

Re: Unlang comparing variable correctly

2013-05-03 Thread Alan DeKok
Tyller D wrote: So as you can see it enters entering if (control:IMS-Data 0) {...}, as it says that IMS-Data is 0. Its not, so I echoed out the variable in the next line and its value is 3221197824... The strange thing is if the variable is equal to 2147465216 then it does not enter that

Re: Proxy Treatment of PAP/Chap Auth Types

2013-05-03 Thread James T. Mugauri
Thanks for your usual indulgence and assistance, Alan and all. Much appreciated. I did the hopelessly illogical thing of testing it from an actual NAS associated with the proxy. The home server, which had been returning those rejects thus far, now accepted the user without fuss. Must be

Aw: Re: radgroupcheck attributes and test client

2013-05-03 Thread ch2009
Hi, Von: Russell Mike radius@gmail.com FR should be able to know if the allowed time used / consumed before it can deny request. have you setup rlm_sqlcounter ? Yes. The same setup is working with a Coova Chilli WLAN Router, so I guess it is a client issue. Chris - List

Re: Unlang comparing variable correctly

2013-05-03 Thread Alan DeKok
Tyller D wrote: The strange thing is if the variable is equal to 2147465216 then it does not enter that function. Why? I've pushed a fix to the v2.x.x branch on github. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Valgrind memcheck FR 2.2.1shows memory leak

2013-05-03 Thread Wang, Yu
Alan, Thanks. It is very helpful. Yu Wang -Original Message- From: freeradius-users-bounces+ywang10=fsu@lists.freeradius.org [mailto:freeradius-users-bounces+ywang10=fsu@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Friday, May 03, 2013 12:32 PM To: FreeRadius users