Re: default linelog Accounting-Request handling broken?

2009-12-09 Thread Alan DeKok
Josip Rodin wrote: Yes, I understood that originally. The gist of the rationale for the current behaviour is quite clear, but even so, many users would nevertheless be best served by many per-packet errors being more clearly visible, because even when they enable debug level 2+, they get a

Re: Pre-release of Version 2.1.8

2009-12-09 Thread Josip Rodin
On Wed, Dec 09, 2009 at 07:50:05AM +0100, Alan DeKok wrote: Then the home servers are *extremely* slow. Sending 300 packets over the course of a second or two wouldn't overload a 486. AFAIK they are not 486s :) but we're still investigating what made them so. Can any conclusions be drawn

Re: Changing the format of a date attribute

2009-12-09 Thread Patric
Hi again all :) Patric wrote: Alan DeKok wrote: Patric wrote: Is there any way for me to get my FreeRADIUS-Acct-Session-Start-Time attribute value into that date format? http://dev.mysql.com/doc/refman/5.0/en/date-and-time-functions.html#function_from-unixtime So now I have the

Re: Possible to add a NAS in any MySQL table?

2009-12-09 Thread Maciej Łukasz Wojszkun
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 W dniu 2009-12-09 08:42, Patric pisze: Peter Carlstedt wrote: Hello everyone, I´ve been searching the net for answers but havent´been able to find any information about how to add a NAS in the MySQL tables instead of using the clients.conf

Re: I cant Connect to GSM Operator by using APN

2009-12-09 Thread Alan DeKok
On 09-12-09 2:27 PM, Tevfik Ceydeliler wrote: Hi, I have freeradius and I have a Secovid OTP server. I use free radius as proxy. When I try to connect via APN, altough OTP server accept-access , I get access-reject as final result. Can anybody say what is wrong??? This packet receives an

Re: Changing the format of a date attribute

2009-12-09 Thread Alan DeKok
On 09-12-09 11:37 AM, Patric wrote: The problem with the above is that some of those formatting options ('%M %d %Y %H:%i:%s') are also defined as one-character variables, so instead of formatting the date with those options, its replacing each with the variable value, and when Im trying to end

Re: Changing the format of a date attribute

2009-12-09 Thread Patric
Alan DeKok wrote: On 09-12-09 11:37 AM, Patric wrote: The problem with the above is that some of those formatting options ('%M %d %Y %H:%i:%s') are also defined as one-character variables, so instead of formatting the date with those options, its replacing each with the variable value, and

Re: Possible to add a NAS in any MySQL table?

2009-12-09 Thread tnt
so, maybe You know, Patric, how I can insert into radacct table username from inner session, not outer session? Don't hijack other peoples threads. If you have something to ask - start your own. That is documented in post-auth section of inner-tunnel virtual server. Ivan Kalik - List

radwho and radtest

2009-12-09 Thread Ramzi Abdallah
hi, I installed FreeRADIUS Version 2.1.7 from the RPM package that is included with Fedora core 12. The server starts without errors and authentication is working fine. The problem I am having is with the radwatch displays no output and radtest fails. output of the radtest

RE: radwho and radtest

2009-12-09 Thread Ramzi Abdallah
thank you alan for the quick reply. It worked just fine. Now I am still facing the problem with the radwho and radlast. Any idea Regards, Ramzi Date: Wed, 9 Dec 2009 20:00:29 + From: a.l.m.bu...@lboro.ac.uk To: rabdal...@pobox.com; freeradius-users@lists.freeradius.org Subject:

Re: radwho and radtest

2009-12-09 Thread gera
A copy of the relevant parts of your users and clients config files would be great. If no body's logged in, it's fine if you see nothing on the radwho output On Wednesday 09 December 2009 12:41:48 pm Ramzi Abdallah wrote: hi, I installed FreeRADIUS Version 2.1.7 from the RPM package that

RE: radwho and radtest

2009-12-09 Thread Ramzi Abdallah
Thank you gera, attached are copies for the users and clients.conf config files. Normally when I run radwho and radlast I am authenticated with user rsa so I should at least see my login :) Regards, Ramzi To: rabdal...@pobox.com; freeradius-users@lists.freeradius.org Subject: Re: radwho

Re: radwho and radtest

2009-12-09 Thread Alan Buxey
hi, got accounting details sent from NAS? why dont you run in debug mode when you are doing the tests? you can then see what is going on...and why things arent being recorded. what method of session tracking are you using? radutmp etc - check your config for the session information. alan -

RE: radwho and radtest

2009-12-09 Thread tnt
thank you alan for the quick reply. It worked just fine. Now I am still facing the problem with the radwho and radlast. Any idea Yes, you have sent an authentication request. No accounting. So there is nothing for radwho to show. It displays accounting information. In case you weren't aware,

RE: radwho and radtest

2009-12-09 Thread Ramzi Abdallah
thanks Ivan, when I run in debug mode I get the bellow errors ++[preprocess] returns ok [acct_unique] WARNING: Attribute NAS-Port was not found in request, unique ID MAY be inconsistent [acct_unique] Hashing ',Client-IP-Address = 193.188.129.17,NAS-IP-Address = 193.188.129.17,Acct-Session-Id

RE: radwho and radtest

2009-12-09 Thread tnt
[acct_unique] WARNING: Attribute NAS-Port was not found in request, unique ID MAY be inconsistent ... rlm_radutmp: No NAS-Port seen. Cannot do anything. Nothing misterious in those messages. NAS is not sending NAS-Port and radutmp needs it to work. Ivan Kalik - List

RE: radwho and radtest

2009-12-09 Thread Ramzi Abdallah
great, then I have to contact the fortinet guys to see why this is happening Date: Wed, 9 Dec 2009 22:08:56 + Subject: RE: radwho and radtest From: t...@kalik.net To: rabdal...@pobox.com; freeradius-users@lists.freeradius.org [acct_unique] WARNING: Attribute NAS-Port was not found

Re: radwho and radtest

2009-12-09 Thread gera
Maybe I'm missing something, but is this shown while you do use the radtest command? If so, then it's normal that you get nothing on radwho. If you get nothing on radwho when using the NAS (and you didn't went so far from the default freeradius configuration), then indeed you still need to

RE: radwho and radtest

2009-12-09 Thread Ramzi Abdallah
I get this when I login to the firewall To: rabdal...@pobox.com; freeradius-users@lists.freeradius.org Subject: Re: radwho and radtest From: g...@gera.me Date: Wed, 9 Dec 2009 15:28:30 -0700 Maybe I'm missing something, but is this shown while you do use the radtest command? If so,

RE: radwho and radtest

2009-12-09 Thread tnt
I get this when I login to the firewall It would help if you wouldn't edit the debug. Post the whole thing request + processing (both for authentication and accounting). Ivan Kalik - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Testing radius server

2009-12-09 Thread Alex Bahoor
the radius as if I'm the AP, but from the command line on the server? Thanks, Alex __ Information from ESET NOD32 Antivirus, version of virus signature database 4674 (20091209) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information

Re: Testing radius server

2009-12-09 Thread gera
to test the radius as if I'm the AP, but from the command line on the server? Thanks, Alex __ Information from ESET NOD32 Antivirus, version of virus signature database 4674 (20091209) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com

Re: Testing radius server

2009-12-09 Thread gera
database 4674 (20091209) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information from ESET NOD32 Antivirus, version of virus signature database 4674 (20091209) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com

RE: radwho and radtest

2009-12-09 Thread Ramzi Abdallah
hello Ivan attached is the complete debug log Date: Wed, 9 Dec 2009 23:28:49 + Subject: RE: radwho and radtest From: t...@kalik.net To: rabdal...@pobox.com; freeradius-users@lists.freeradius.org I get this when I login to the firewall It would help if you wouldn't edit the

Re: Testing radius server

2009-12-09 Thread Alan Buxey
hi, sounds like your server has firewall on it - so whilst the daemon is listening locally, the firewall is rejecting the packets (that'd be the cause of the ICMP unreachable). add UDP 1812,1813 and 1814 to the firewall config... on redhat - /etc/sysconfig/iptables or use a GUI tool

RE: Testing radius server

2009-12-09 Thread Alex Bahoor
the radius as if I'm the AP, but from the command line on the server? Thanks, Alex __ Information from ESET NOD32 Antivirus, version of virus signature database 4674 (20091209) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com