eap-ttls with SMD5-Password

2013-09-20 Thread Nasser Heidari
Hi, I'm trying to setup eap-ttls with freeradius, all my tests in LAB was successful. I've test it with both users file and sql and it was working. Now I'm going to prepare it for real setup, my only problem is that all my User-Passwords is database is stored with SMD5-Password attribute and

eap-ttls with SMD5-Password

2013-09-20 Thread Nasser Heidari
Hi, I'm trying to setup eap-ttls with freeradius, all my tests in LAB was successful. I've test it with both users file and sql and it was working. Now I'm going to prepare it for real setup, my only problem is that all my User-Passwords is database is stored with SMD5-Password attribute and

reference to check items using unlang

2013-05-20 Thread Nasser Heidari
Hi All, How can I reference to check items using unlang? When I use perl script , simply reference it by $RAD_CHECK. For example I want to check if there is a check item in sql user profile , then do some actions using unlang and if not then ignore it. By the way I know that I can do that by

RE: reference to check items using unlang

2013-05-20 Thread Nasser Heidari
to check items using unlang On 20 May 2013, at 03:03, Nasser Heidari nas...@rasana.net wrote: Hi All, How can I reference to check items using unlang? When I use perl script , simply reference it by $RAD_CHECK. For example I want to check if there is a check item in sql user profile , then do

unlang equivalent of radlog

2013-05-19 Thread Nasser Heidari
Hi, I have several Perl modules running on my Radius server, I'm going to remove them all and use unlang instead. I have two questions: 1- The reason that I'm going to change Perl modules with unlang is Performance ! I think unlang should have better performance in comparison to Perl

RE: unlang equivalent of radlog

2013-05-19 Thread Nasser Heidari
mailing list Subject: Re: unlang equivalent of radlog On Mon, May 20, 2013 at 5:13 AM, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: On 19 May 2013, at 12:47, Nasser Heidari nas...@rasana.net wrote: Hi, I have several Perl modules running on my Radius server, I'm going to remove them all

RE: Freeradius CoA - Need Help

2013-01-24 Thread Nasser Heidari
Can Anybody help me with this issue? -Original Message- From: freeradius-users-bounces+nasser=rasana@lists.freeradius.org [mailto:freeradius-users-bounces+nasser=rasana@lists.freeradius.org] On Behalf Of Nasser Heidari Sent: Tuesday, January 22, 2013 1:33 PM To: freeradius

Freeradius CoA - Need Help

2013-01-22 Thread Nasser Heidari
Hi, I'm going to setup Freeradius CoA Virtual Server, I have already gone through originate-coa document, but need some help. This is the way that I traditionally originate CoA or POD packets: - I have wrote a Perl scripts that it listens on port 1810. - when I want to disconnect a user , I use

Duplicate Radius Packets to another server

2012-04-19 Thread Nasser Heidari
Dear Folks, I've did some changes in my radius configuration (adding some scripts and modules) and now I'm going to test it. I've checked in my test env with several packets and it looks working, but I'm afraid of It's functioning in Real world. Is there any

Apply Exception in Accounting Packets

2011-04-15 Thread Nasser Heidari
Hello, Is it possible to NOT count Accounting packets (Input/Output) from a user to special destination? (I don't want to charge a PPPOE User who downloads a file from local Network.) I know that FreeRadius just uses the information that NAS have sent, but want to know that does anybody has any

Policy Based on NAS IP address

2010-09-15 Thread Nasser Heidari
Hi, Is it possible to apply special policy based on NAS IP Address, for example I want to check originating ip address for special NAS or set IP Address pool for the other NAS . Thanks in advance - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Save Passwords Encrypted in DB

2010-09-06 Thread Nasser Heidari
Hi, I want to save encrypted passwords in DB. As I reviewed mailing list , it looks that I don't need major changes on my Freeradius and DB records. Currently my users password in database is like this : ++---+--++-- + | id

RE: Save Passwords Encrypted in DB

2010-09-06 Thread Nasser Heidari
+nasser=rasana@lists.freeradius.org on behalf of Alan DeKok Sent: Mon 9/6/2010 7:49 PM To: FreeRadius users mailing list Subject: Re: Save Passwords Encrypted in DB Nasser Heidari wrote: But no success, also I add Password-With-Header := {crypt} to my sql.conf but no success ! Do I

RE: Save Passwords Encrypted in DB

2010-09-06 Thread Nasser Heidari
-bounces+nasser=rasana@lists.freeradius.org on behalf of Nasser Heidari Sent: Mon 9/6/2010 10:51 PM To: FreeRadius users mailing list Subject: RE: Save Passwords Encrypted in DB r...@tradius:~# cat /etc/raddb/users DEFAULT Auth-Type := Local, Simultaneous-Use := 1 Fall-Through = Yes

Problem with rlm_perl

2010-09-03 Thread Nasser Heidari
Dear Folks, I'm using a perl module to record and save clients MAC address to DB. In situations that cisco-av-pair is not included in RADIUS packet, I'm replacing it with ... Everything is working just fine in test environment but when running on production servers the recorded MAC

Problem with rlm_perl

2010-09-03 Thread Nasser Heidari
Dear Folks, Apologies for previous unwanted / half complete email, We are using a perl module to record and save clients MAC address to DB. In situations that cisco-av-pair is not included in RADIUS packet, We are replacing it with ... Everything is working just fine in test

RE: Problem with rlm_perl

2010-09-03 Thread Nasser Heidari
users mailing list Subject: Re: Problem with rlm_perl Nasser Heidari wrote: I wanted to capture users mac address, so I've added a perl module , and after parsing cisco-av-pair attribute , I save it to DB. In normal situation everything works like a charm , but in some cases, If NAS

Writing Accounting Detail log to DataBase

2010-04-28 Thread Nasser Heidari
Dear All, I want to know how can I insert accounting detail log to Mysql database. Thanks . - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Permanent mysql connection in mod_perl

2010-04-07 Thread Nasser Heidari
Hi, I'm using mod_perl in my radius configuration and using it I write some logs to database. Today I noticed that, there are lots of mysql connections in TIME_WAIT state. # netstat -epn --tcp | grep TIME_WAIT | wc -l 15015 netstat -epn --tcp | grep TIME_WAIT | tail -1 tcp 0 0 192.168.1.4:49060

RE: Permanent mysql connection in mod_perl

2010-04-07 Thread Nasser Heidari
db connection part in Perl script into sub CLONE {} . Is that correct? -- --- Apostolos Pantsiopoulos Kinetix Tele.com R D email: r...@kinetix.gr --- On 7/4/2010 12:01 μμ, Nasser Heidari wrote: Hi, I'm

Getting pervious module return code in rlm_perl

2009-10-17 Thread Nasser Heidari
Hi, Currently I've a Perl module that checks my Users NAS-IP-Address. I want to know how can I call (get) pervious module return code in Perl script? Because now I run this module for all my users, either the pervious module rejects or accepts user . Thanks - List info/subscribe/unsubscribe?

RE: Custom Logging

2009-10-05 Thread Nasser Heidari
-Original Message- From: Nev [mailto:n...@watchuktv.co.uk] Sent: 2009/10/05 02:22 To: nas...@rasana.net Subject: Custom Logging Hi Nasser, I was wondering if you could share how you configured checkval module to allow certain users/groups to access specific NAS servers.

Custom Logging

2009-10-04 Thread Nasser Heidari
Dear Folks, I have added some additional radcheck options using checkval module. For example I have several NAS Servers, and I've defined which user from which NAS allowed to login. Now I want to know is it possible to configure Freeradius in a way, that when it rejects a user, it prints a custom