Re: Add LDAP groups as extra attributes

2013-03-19 Thread Robin Helgelin
On Fri, Mar 15, 2013 at 2:03 PM, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: I know, but that attribute isn't presented to the python function call. Is there another way such as an environmental variable or just please update the source? :) Did you check the control list (config

string up CUI for visiting eduroam users

2013-03-19 Thread Alex Sharaz
Hi, i'm in the process of setting up cui for visitors hear and for york user visiting other institutions. In the case of visiting eduroam users to our site, on an internal RADIUS server I've got pre-proxy { if (Packet-Type == Access-Request) { cui_authorize #

require_message_authenticator when sending

2013-03-19 Thread Stefan Winter
Hi, I just noticed something unintuitive when trying to enforce the presence of Message-Authenticator on a server which has FreeRADIUS 2.2.0 as a proxying client. In proxy.conf, home_server section, there is very strong wording that require_message_authenticator is good; and the default as spelt

Re: string up CUI for visiting eduroam users

2013-03-19 Thread Phil Mayers
On 03/19/2013 10:11 AM, Alex Sharaz wrote: /etc/freeradius/policy.conf[185]: SQL modules aren't allowed in 'post-proxy' sections -- they have no such method. /etc/freeradius/policy.conf[185]: Failed to parse cui entry. /etc/freeradius/policy.conf[184]: Failed to parse if subsection.

Re: string up CUI for visiting eduroam users

2013-03-19 Thread Scott Armitage
On 19 Mar 2013, at 10:11, Alex Sharaz alex.sha...@york.ac.uk wrote: Hi, working on the basis that we'll be proxying off the auth request to another site. I'm then assuming that in the response from the home server somewhere else on the planet there'll be a non null CUI attribute

Re: string up CUI for visiting eduroam users

2013-03-19 Thread Alex Sharaz
Sigh! Should have thought of that. Thanks, moved cui config to post-auth and it's up and running now Rgds Alex On 19 Mar 2013, at 10:24, Scott Armitage s.p.armit...@lboro.ac.uk wrote: On 19 Mar 2013, at 10:11, Alex Sharaz alex.sha...@york.ac.uk wrote: Hi, working on the basis that

Re: require_message_authenticator when sending

2013-03-19 Thread Phil Mayers
On 19/03/13 10:18, Stefan Winter wrote: Of course I'm fixing my config by making the yes explicit - but maybe adapting the defaults in realms.c might be a little more consistent behaviour. I believe Message-Authenticator is now always sent in 3.0, unconditionally. - List

Re: require_message_authenticator when sending

2013-03-19 Thread Alan DeKok
Phil Mayers wrote: I believe Message-Authenticator is now always sent in 3.0, unconditionally. Yes. It's best to always send it. It enables security and debugging checks that are otherwise not possible. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: require_message_authenticator when sending

2013-03-19 Thread Alan DeKok
Stefan Winter wrote: Of course I'm fixing my config by making the yes explicit - but maybe adapting the defaults in realms.c might be a little more consistent behaviour. Done. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

cuncurrent-session control

2013-03-19 Thread Mehdi Ravanbakhsh
Hello ALL I have Some problem in using Unlang. I need to call some function in PostgreSQL database send some parameter from request attribute to it , get replay from function and then change some check attribute item (such as Pool-Name).or replay attribute Unlang :

Re: cuncurrent-session control

2013-03-19 Thread Arran Cudbard-Bell
On 19 Mar 2013, at 18:15, Mehdi Ravanbakhsh baba...@gmail.com wrote: Hello ALL I have Some problem in using Unlang. I need to call some function in PostgreSQL database send some parameter from request attribute to it , get replay from function and then change some check attribute

send multiple parameter to stored procedure in database

2013-03-19 Thread Mehdi Ravanbakhsh
can i send multiple Parameter to stored procedure ( function) in database by SQL xlat? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: send multiple parameter to stored procedure in database

2013-03-19 Thread Alan DeKok
Mehdi Ravanbakhsh wrote: can i send multiple Parameter to stored procedure ( function) in database by SQL xlat? Yes. If you want to debug something, you will need to run the server in debugging mode as suggested in the FAQ, man page, web pages, and daily on this list. I'd also suggest