...
I understand you don't want to duplicate records in the database, but
killing radsqlrelay from time to time is not something you usually do.
Of course, patches are welcome.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
}
}
This method no longer depend on the value of post_proxy_authorize
option. (which should always be set to 'no')
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
at the beginning of authorize
section. This will enable the proxy function.
When you find the user in your database, add the variable
Proxy-To-Realm := LOCAL as a check item (ie in authcheck_table)
This will cancel proxying when the user is found.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe
] Error 1
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
the same, too.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Mark Elkins wrote:
I want to put the contents of radius.log into a MySQL Database - in
**real time**.
How do I do this?
See
http://www.freeradius.org/cgi-bin/cvsweb.cgi/radiusd/doc/Post-Auth-Type?rev=1.4
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http
. Even if you've never seen
the Failed to aquire filelock message, just tell me if the new version
works exactly like before. That will help, too.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
$(R)$(bindir)
$(INSTALL) -m 755checkrad.pl$(R)$(sbindir)/checkrad
+ $(LIBTOOL) --mode=install $(INSTALL) -m 755 radsqlrelay$(EXEEXT)
$(R)$(bindir)
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
will have no effect.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
...),
that's why, if you agree with that, I'll look at this issue more
closely and try to provide a patch in a few days.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
it will not work for that reason, but perhaps I am
mistaken.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
this, but it is nothing
more that a workaround. The configuration is error prone, and the
post_proxy_authorize is a deprecated option. However, I didn't manage
to do the same thing otherwise until now.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list
Joe H wrote:
Error: rlm_attr_filter: Authorize method will be deprecated.
[...]
I'm just wondering about that error.
Don't bother about it, this is always printed at module initialization.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list
##*/}/radiusd.conf
I hope nobody use a module with an option named port, support, or
anything that will match the regex above, too.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
|
| | |
| | |
\|/
\ | /
\ | /
\ | /
\|/
\ | /
\ | /
|radius4-ACCT|
Is this possible ?
You might use radrelay, it comes with FreeRADIUS.
See doc/radrelay in the source tarball.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
in the accounting section.
It's a known bug, see http://bugs.freeradius.org/show_bug.cgi?id=173
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
radtest$(R)$(bindir)
$(INSTALL) -m 755checkrad.pl$(R)$(sbindir)/checkrad
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
according to the SQL server's capabilities
- you won't have a lot of outstanding requests on the RADIUS sever
when the SQL server is slow
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| |
\__/
Which one do you think is the most effective ?
Any constructive criticism is welcome !
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
,
Fall-Through = Yes
DEFAULT
Put here all other attributes you need otherwise they'll
be removed from the packet
This is an alternate approach. It may work, too. And finally you will
get not one, but two solutions to setup you FreeRADIUS proxy !
--
Nicolas Baradakis
Pasi Kärkkäinen wrote:
But, I'm using sql-users.. How do you put that kind of entries to
(my)sql?
http://www.frontios.com/freeradius.html
http://www.freeradius.org/cgi-bin/cvsweb.cgi/~checkout~/radiusd/doc/rlm_sql?rev=1.4
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http
{
addbarpool
}
...
}
Any idea why the proxy_reply is illegal value for searchin?
It was in an example in the radiusd.conf..
It's strange... I can't help you with that, sorry.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list
in the man page.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
/
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
approach: perhaps it could be easier to add a
source NAT rule on the firewall rather than hacking the source IP
inside radiusd. Did you try this ?
Regards
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| |
| | proxy2 eth0
+--|- 62.4.m.n
client 2 vip 2|
10.4.i.j --- 10.4.k.l | proxy2 eth1
+- 10.4.o.p
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list
*) salocal;
memset ((char *) sa, '\0', sizeof(salocal));
sa-sin_family = AF_INET;
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
play with
/proc/sys/net/ipv4/ip_nonlocal_bind
but I prefer having freeradius responding with the correct IP
source (that's what the patch udpfromto does) rather than
allowing to bind external address for all processes.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http
[EMAIL PROTECTED] wrote :
Does any one know how to set multiple tags in a RADIUS record.
See the operator +=
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
and Paul Hampson for the advices they're giving to us.
4. The source is freely available, and you can extend it to fit
specific needs. (a few features in FreeRADIUS was submitted by
Cegetel's developpers)
--
Nicolas Baradakis and Thomas Marchesseau
for the Sitadelle team
-
List info
301 - 331 of 331 matches
Mail list logo