Re: Different users file per virtual server

2010-08-06 Thread Arran Cudbard-Bell
> > I get the output: > /etc/freeradius/sites-enabled/noc[153]: Failed to find module "files". > /etc/freeradius/sites-enabled/noc[63]: Errors parsing authorize section. > > Also tried stating "files noc" in the authorize section. After doing this I > don't even get any debug output. The instan

Re: Different users file per virtual server

2010-08-06 Thread Cory Johnson
On 08/06/2010 04:41 PM, Arran Cudbard-Bell wrote: On Aug 6, 2010, at 4:14 PM, Cory Johnson wrote: Is there a way to have seperate "users" files per virtual server? The location of the users file appears to be specified in modules/files. I can only seem to load modules from the global radi

Re: Different users file per virtual server

2010-08-06 Thread Arran Cudbard-Bell
On Aug 6, 2010, at 4:14 PM, Cory Johnson wrote: > Is there a way to have seperate "users" files per virtual server? The > location of the users file appears to be specified in modules/files. I can > only seem to load modules from the global radiusd.conf, so each server uses > the same users fi

Different users file per virtual server

2010-08-06 Thread Cory Johnson
Is there a way to have seperate "users" files per virtual server? The location of the users file appears to be specified in modules/files. I can only seem to load modules from the global radiusd.conf, so each server uses the same users file. My goal is to use a different users file based on the

Re: Freeradius accounting issues

2010-08-06 Thread Arran Cudbard-Bell
On Aug 6, 2010, at 3:12 PM, Marinko Tarlac wrote: > Or you can simple make small changes in SQL queries for accounting and you > won't need to use unlang... I guess if you really just want to: "update this entries after a certain time has pass" Then that's easy enough with a simple u

Re: Freeradius accounting issues

2010-08-06 Thread Marinko Tarlac
Or you can simple make small changes in SQL queries for accounting and you won't need to use unlang... Arran Cudbard-Bell wrote: Actually, option 4. If your NAS supports interim updates, you can add an additional field to the accounting database, and update the timestamp in this field every

Re: Freeradius accounting issues

2010-08-06 Thread Arran Cudbard-Bell
Actually, option 4. If your NAS supports interim updates, you can add an additional field to the accounting database, and update the timestamp in this field every time an interim update packet is received. Then run a cron job to check for timestamps which are older than the interim update period

Re: Freeradius accounting issues

2010-08-06 Thread Arran Cudbard-Bell
On Aug 6, 2010, at 2:53 PM, Siryx XL wrote: > Hi everyone. > > I got freeradius to AAA the access to a Cisco Routers. > > If for some reason you disconnect because the router power off, an accounting > finish packets is not sent to my radius, so in the DB looks like the user is > still logged

Freeradius accounting issues

2010-08-06 Thread Siryx XL
Hi everyone. I got freeradius to AAA the access to a Cisco Routers. If for some reason you disconnect because the router power off, an accounting finish packets is not sent to my radius, so in the DB looks like the user is still logged in an example: mysql> select radacctid,username,acct

radius does not check table radgroupcheck

2010-08-06 Thread Erick de A. Fabbio
Hi! I'm having the following problem: Any item that I put in radgroupcheck is not being considered by the radius ... the radius only checks the table radcheck ... I'm using Radius 2 with mysql database. *nas *id: 200 idrevenda: 1 nasname: 192.168.0.10 shortname: rb45g type: other ports: 1812 sec

Re: Of accounting data and security

2010-08-06 Thread Alan DeKok
Natr Brazell wrote: > Is there a way to secure the communication between the radius server and > the NAS especially wrt accounting data? IPSec. Most NASes implement IPv4, and not much else. "Security" means "don't run RADIUS over a network where users have access". Alan DeKok. - List info

Re: Of accounting data and security

2010-08-06 Thread Arran Cudbard-Bell
On Aug 6, 2010, at 12:32 PM, Natr Brazell wrote: > Is there a way to secure the communication between the radius server and the > NAS especially wrt accounting data? I assume RADSEC will handle Accounting data too, but it's only a draft currently. IPSec? Create tunnels between the NAS and the

Of accounting data and security

2010-08-06 Thread Natr Brazell
Is there a way to secure the communication between the radius server and the NAS especially wrt accounting data? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: VMPS configuration examples

2010-08-06 Thread Alan DeKok
Brett A. Karns wrote: > Can someone point me in the right direction of some VMPS configuration > examples please, there seems to be very limited information about this > on the web. raddb/sites-available/vmps raddb/modules/mac2vlan Alan DeKok. - List info/subscribe/unsubscribe? See http://w

VMPS configuration examples

2010-08-06 Thread Brett A. Karns
Can someone point me in the right direction of some VMPS configuration examples please, there seems to be very limited information about this on the web. ___ Brett - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Assistance in handling ldap query failure scenario

2010-08-06 Thread Gary Prosser
I'm sure Alan or someone else will correct me if wrong, but I belive you can prioritise the call result so that eg notfound overrides fail but found ends the process. Our config (following Alan's advice does this kind of thing) modules ldap ldap1 { server = "localhost"

Assistance in handling ldap query failure scenario

2010-08-06 Thread John Douglass
I believe this bit of magic can be done based on other configurations but I can't work out the right "foo" so hopefully someone can help me out. I have my service manager asking for some additional magic out of our freeradius servers that handle our wireless WPA enterprise authentication/author

Re: Setting up pam_radius_auth

2010-08-06 Thread Mike J
On Fri, Aug 6, 2010 at 12:39 AM, Alan DeKok wrote: > Mike J wrote: > > I've fixed the x86 module (was using a wrong client config file). So I > > have x86 working but don't have the ppc module working. > .. > > Is this likely the cause of my issue? > > Yes. Figure out how to build the MD5 code

[no subject]

2010-08-06 Thread Walter Goulet
Ssee ee - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Problem about simultaneous-use parameter and windows DC.

2010-08-06 Thread 李程
> Date: Fri, 6 Aug 2010 08:53:22 +0200 > From: al...@deployingradius.com > To: freeradius-users@lists.freeradius.org > Subject: Re: Problem about simultaneous-use parameter and windows DC. > > 李程 wrote: > > I've read that. But found nothing useful. > > Nonsense: > > This solution checks the