Re: proxy authentication

2006-12-28 Thread Owen DeLong
I would think that you could cobble together an rlm_perl module that would log the contents of whatever hashes you are interested in to another server by whatever means you wish, then return MODULE_OK without modifying any of the data in the hashes. Owen On Dec 27, 2006, at 11:39 PM, Dubi Lego

Re: dialup admin coding - help required

2006-12-21 Thread Owen DeLong
I don't have an environment to test this, and, I'm no PHP expert, but, I've got some similar stuff working, and, I suspect that the changes below might work for you... You can't include PHP variables in HTML text outside of the ? ? tags and expect them to be interpolated. Generally, it's

LDAP-RADIUS Attribute Mapping

2006-12-08 Thread Owen DeLong
I have an environment where I am already using LDAP for AAA for a number of things. We have historically used the AuthorizedService attribute in LDAP to control the level of access available to the user. We would like to continue to do so. However, in order for that to work, I need to

Re: Help please, /var/run/freeradius/freeradius.pid: No such file or directory?

2006-11-04 Thread Owen DeLong
This usually mens that the directory that the file goes into does not exist. try: mkdir -p /var/run/freeradius Owen On Nov 4, 2006, at 3:27 AM, Cameron Cowie wrote: Hi: I am trying to setup freeradius on the latest stable version of Ubuntu. Version ... [EMAIL PROTECTED]:/sbin#

Re: Freeradius server can not see any request from clients.

2006-10-26 Thread Owen DeLong
Sounds like you may be running iptables or other similar filter software on your server which is blocking the packet from reaching RADIUS. Owen On Oct 26, 2006, at 4:38 AM, richard Bai wrote: Hi, everyone, I face a very strange problem right now when I configure a freeradius server with

Re: block users on-the-fly

2006-10-16 Thread Owen DeLong
On Oct 16, 2006, at 6:25 AM, Guilherme Franco wrote: Hi, Does anyone already have a program to block freeradius on-the-fly? ie: user has PAID = YES in radcheck table. Whenever I set PAID = NO, the user would no longer authenticate the next time he/ she logs in. OK, this works, but, if the

Re: Inserting and/or replacing reply attributes on a proxy request

2006-10-14 Thread Owen DeLong
Seems to me that you need to know which RADIUS box you sent the proxy request to and which destinations it is allowed to return. Then, you should be able to map any responses which don't match those tuples to proxy-reject with an error indicating that the proxy returned nefarious content.

Help returning multiple values for attrbute (rlm_ldap)

2006-10-12 Thread Owen DeLong
OK... The suggestion I got here last night allowed me to get basic auth working as desired, however, I have another problem. I need to return in the reply a series of values for a given attribute, such as: dn: uid=foo,ou=people,dc=zone,dc=example,dc=com uid: foo Attribute: first_value

Re: Help returning multiple values for attrbute (rlm_ldap)

2006-10-12 Thread Owen DeLong
On Oct 12, 2006, at 11:39 AM, Kostas Kalevras wrote: Owen DeLong wrote: OK... The suggestion I got here last night allowed me to get basic auth working as desired, however, I have another problem. I need to return in the reply a series of values for a given attribute, such as: dn

LDAP authorizedService attribute matching

2006-10-11 Thread Owen DeLong
I've got an LDAP database which works with PAM and uses PosixAccounts to describe users. It uses the authorizedService attribute to specify which services the user is allowed to log into. I've configured freeradius to map authorizedService - Service-Type and have set up Service-Type as a