Re: Lost package after use FreeRadius

2010-11-20 Thread Marinko Tarlac
Strange situation but you should check default profile which is set on Mtik. It should contain valid DNS server(s), valid Local Address, valid Remote Address (ip pool for pppoe users) and that pool must exist on Mtik (IP - Pool). Of course, all addresses which you have in ip pools must be

Re: Authenticating MACs and users

2010-11-20 Thread Rudolph Bott
Hi Alan, ok I'll try to be more specific: I have all the mac addresses (including the vlan attribute) in my users file. Can I just put in some user accounts as well and configure my switches to use the radius server for user authentication? How do I separate the management-users from my

Re: Authenticating MACs and users

2010-11-20 Thread Rudolph Bott
Hey Alan, On 20.11.2010 11:26, Rudolph Bott wrote: Hi Alan, ok I'll try to be more specific: I have all the mac addresses (including the vlan attribute) in my users file. Can I just put in some user accounts as well and configure my switches to use the radius server for user authentication?

Re: Changing radgroup with a sqlcounter ?

2010-11-20 Thread Arrgghh
Anyone ? -- View this message in context: http://freeradius.1045715.n5.nabble.com/Changing-radgroup-with-a-sqlcounter-tp3270524p3273562.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

http://wiki.freeradius.org/Mac-Auth is wrong

2010-11-20 Thread Tóth István
Hello! I tried to set up MAC authorization for testing purposes according to the instructions at http://wiki.freeradius.org/Mac-Auth. The solution there almost worked, except for the raddb/sites-available/default post-auth{} section. The wiki contains the code: if(control:Auth-Type ==

Re: Changing radgroup with a sqlcounter ?

2010-11-20 Thread JDL
If I understand you correctly, instead of kicking the user with the sqlcounter, you simply want to move them into a different group. It should pretty straight forward. You need to set read_groups = yes in your sql module. I would recommend that you put the check and reply attributes in the

Re: Authenticating MACs and users

2010-11-20 Thread Alan DeKok
Rudolph Bott wrote: I have all the mac addresses (including the vlan attribute) in my users file. Can I just put in some user accounts as well and configure my switches to use the radius server for user authentication? Yes. How do I separate the management-users from my 'fake'

Re: http://wiki.freeradius.org/Mac-Auth is wrong

2010-11-20 Thread Arran Cudbard-Bell
The return code issue is debatable, probably should be notfound but noop is acceptable. I've fixed the wiki page. Thanks for bringing this to the lists attention. -Arran On 20/11/2010, Tóth István st...@stoty.hu wrote: Hello! I tried to set up MAC authorization for testing purposes