RE: plpgsql freeradius authentication function

2010-10-18 Thread Santiago Balaguer García
In which statement do you implement this query? Date: Sat, 16 Oct 2010 11:49:36 -0400 Subject: plpgsql freeradius authentication function From: kak...@gmail.com To: freeradius-users@lists.freeradius.org Hi I have a plpgsql function being called from freeradius to do authentication but i

Re: Authentication failing when using *...@domain.com

2010-10-18 Thread Alan DeKok
Ryan Garrett wrote: I have a test account setup within a test domain. The username is dadmin. If I authenticate with just dadmin it works fine, I get an access accept response and I am up and running. OK. However, if I try dad...@testlab.net authentication is rejected. Because names

Re: Matching a value within an IP subnet

2010-10-18 Thread Alan DeKok
Brian Candler wrote: DEFAULT NAS-IP-Address =~ 192.0.2.0/27, NAS-Group := ADSL-BRAS I've had a look at paircmp() in src/lib/valuepair.c and can't see any logic which might do this. Nope. Write a regex to do the matching. The above string after =~ is *not* a regex. Alan

Re: plpgsql freeradius authentication function

2010-10-18 Thread Kafui Akyea
Hi I implemented this in the freeradius postgresql.conf file SELECT id,username,attribute,op,value FROM try('714094','') as(id integer,username varchar,attribute varchar,op character,value varchar); and implemented this function on the Postgres database server CREATE OR REPLACE FUNCTION

Re: plpgsql freeradius authentication function

2010-10-18 Thread Alan DeKok
Kafui Akyea wrote: Hi I implemented this in the freeradius postgresql.conf file SELECT id,username,attribute,op,value That's the wrong order. See the default SELECT in raddb/sql/postgresql/dialup.conf. I am generally trying to authenticate with a postgres function Make sure it returns

DHCP with option 82 best practice

2010-10-18 Thread Zietz, Marco
Hi everybody, at first I want to thank Arran and Alan for their help with my last post. Good job! Had trouble getting the lists reply's, but solved now. I am curious if somebody could share information how to get FR as DHCP with option 82 authentication up and running. Couldn't find much

Re: DHCP with option 82 best practice

2010-10-18 Thread Phil Mayers
On 10/18/2010 05:05 PM, Zietz, Marco wrote: I am curious if somebody could share information how to get FR as DHCP with option 82 authentication up and running. Couldn't find much information in provided sample files and on the net. My own experiments with auth configs were not particularly

Cisco LNS with Freeradius and MySQL

2010-10-18 Thread Stephane MAGAND
Hi I request a small help for my configuration, sorry for my english: I have a cisco router with VRF I have a Freeradius server with sql I have a lot of Adsl user in L2TP. I want add one user to a specific vrf, i have added to the mysql table: INSERT INTO `radgroupreply` VALUES (9,

Re: Cisco LNS with Freeradius and MySQL

2010-10-18 Thread Phil Mayers
On 10/18/2010 06:07 PM, Stephane MAGAND wrote: but when the user connect, that's don't work ... See the FAQ for it doesn't work. Second question: I use sqlippool for dynamic IP, if i want specify a IP to a username (static) what is the process ? create a specific group ? You can assign

LDAP authentication failed

2010-10-18 Thread snowman5840
Hi i have some problems with LDAP authentication. If I login on my windows xp sp3 client i want to check die login credentials against my LDAP service. But the xp client uses doubleslashs in the username!! I think this will be the problem!? If I test with radtest it works. What can i do to

Re: Cisco LNS with Freeradius and MySQL

2010-10-18 Thread Stephane MAGAND
2010/10/18 Phil Mayers p.may...@imperial.ac.uk: On 10/18/2010 06:07 PM, Stephane MAGAND wrote: but when the user connect, that's don't work ... See the FAQ for it doesn't work. Thanks for your answer Phil, but i don't see in the FAQ a answer at my question. Do you create the VRF on the

Re: LDAP authentication failed

2010-10-18 Thread Alan Buxey
hi, you need to use the ntdomain module and ensure that the \\ method is enabled. (check the realm module section) this will then populate stripped-user-name with just the username and not also have the hostname or domain name lurking around. alan - List info/subscribe/unsubscribe? See

Re: plpgsql freeradius authentication function

2010-10-18 Thread Kafui Akyea
Alan, Thanks a lot that worked Kafui On Mon, Oct 18, 2010 at 11:52 AM, Alan DeKok al...@deployingradius.comwrote: Kafui Akyea wrote: Hi I implemented this in the freeradius postgresql.conf file SELECT id,username,attribute,op,value That's the wrong order. See the default SELECT

Re: Cisco LNS with Freeradius and MySQL

2010-10-18 Thread Stephane MAGAND
Ok i have resolved my problems ;=) 2010/10/18 Stephane MAGAND stmagconsult...@gmail.com: 2010/10/18 Phil Mayers p.may...@imperial.ac.uk: On 10/18/2010 06:07 PM, Stephane MAGAND wrote: but when the user connect, that's don't work ... See the FAQ for it doesn't work. Thanks for your

Radiusd error + libfreeradius-radius-2.1.10.so

2010-10-18 Thread Octavio Ramirez
Hi all, I try to install freeradius server 2.1.10. After the commands #./configure #make #make install everything is ok. Then, when I try to execute radiusd -X, I have this error: radiusd: error while loading shared libraries: libfreeradius-radius-2.1.10.so: cannot open shared object file: No

Re: Radiusd error + libfreeradius-radius-2.1.10.so

2010-10-18 Thread Alan DeKok
Octavio Ramirez wrote: Then, when I try to execute radiusd -X, I have this error: radiusd: error while loading shared libraries: libfreeradius-radius-2.1.10.so: cannot open shared object file: No such file or directory Where can I find these shared libraries?? I have to modify the PATH

Re: DHCP with option 82 best practice

2010-10-18 Thread Alan DeKok
Zietz, Marco wrote: I am curious if somebody could share information how to get FR as DHCP with option 82 authentication up and running. I don't know what option 82 authentication means. Couldn't find much information in provided sample files and on the net. My own experiments with auth

Re: Cisco LNS with Freeradius and MySQL

2010-10-18 Thread Phil Mayers
On 10/18/2010 06:51 PM, Stephane MAGAND wrote: 2010/10/18 Phil Mayersp.may...@imperial.ac.uk: On 10/18/2010 06:07 PM, Stephane MAGAND wrote: but when the user connect, that's don't work ... See the FAQ for it doesn't work. I meant literally the FAQ item It still doesn't work, which

Re: plpgsql freeradius authentication function

2010-10-18 Thread Kafui Akyea
Hi There is one more problem i am encountering although the function works. If i try to authenticate a user who is not valid i do not get an Access-Reject but rather i get RADIUS: Retransmit to (192.168.1.12:1812,1813) for id 1645/201 RADIUS: Retransmit to (192.168.1.12:1812,1813) for id 1645/201

Redundant SQL

2010-10-18 Thread Chesterfield McMillan
I'm trying to implement the redundant SQL feature into my freeradius setup. The one problem I am coming up against is when freeradius is starting, but not all the SQL servers are available. I have set up sql1 and sql2 as a single virtual module and would ideally like it to *try* to connect to

Re: plpgsql freeradius authentication function

2010-10-18 Thread Alan Buxey
Hi, If i try to authenticate a user who is not valid i do not get an Access-Reject but rather i get RADIUS: Retransmit to ([1]192.168.1.12:1812,1813) for id 1645/201 RADIUS: Retransmit to ([2]192.168.1.12:1812,1813) for id 1645/201 RADIUS: Retransmit to

Re: plpgsql freeradius authentication function

2010-10-18 Thread Kafui Akyea
This is what the freeradius debug looks like when i try to authenticate a user who is not valid. I dont get an Access-Reject. But for valid users the function works fine. radius_xlat: 'SELECT id,username,attribute,value,op FROM tryagain('7140949870','') as (id integer,username

Limiting access to Cisco boces to certain users

2010-10-18 Thread Richard D
We have numerous routers that all our NEs need access to, so that's no issue. However, there is a developer that needs full access to one particular router. I've added him to the users file, but he has access to everything right now. I've tried using huntgroups but that completely locks him

Re: Redundant SQL

2010-10-18 Thread Alan DeKok
Chesterfield McMillan wrote: Assuming the total failure to is what is meant to happen, I can understand why, but in my case I’d rather have it connect to at least one database server than fail if it can’t connect to them all. For now, modify the source code. Alan DeKok. - List

Re: plpgsql freeradius authentication function

2010-10-18 Thread Alan DeKok
Kafui Akyea wrote: This is what the freeradius debug looks like when i try to authenticate a user who is not valid. ... rlm_sql: The 'Attribute' field is empty or NULL, skipping the entire row. rlm_sql (sql): Error getting data from database rlm_sql (sql): SQL query error; rejecting user