rlm_sql - authenticatione vs authorization - update internal attribute within sql module

2013-04-08 Thread duffy
hi list, i'm trying to set one custom attribute during rad_check to use it while selecting proper vsa in rad_reply. these are my 4 steps: 1) add custom attribute to the dictionary; 2) get it set by rad_check, if necessary; 3) modify dialup.conf to pass my custom attribute to rad_reply [using

Re: MAC Address Auth

2013-04-08 Thread Mulindwa
Hi good pple, have been reading on how to enforce the attribute of Mac-Addr and i have not seen it anywhere. Has anyone done it before, please help throw some light on how i can achieve this. I want user eric@ut3 with this Mac Address to log in , and if the MAC address is different he will

Re: MAC Address Auth

2013-04-08 Thread Marinko Tarlać
Add eric@ut3 Calling-Station-Id == 02:1B:9E:D3:0B:F0 inside radcheck table or inside users file eric@ut3 Cleartext-Password := eric, Simultaneous-Use := 1 Calling-Station-Id == 02:1B:9E:D3:0B:F0 Service-Type = Framed-User, Qos-Policy-Policing =

perl examples

2013-04-08 Thread Alex Sharaz
Hi, There don't seem to be many examples relating to using perl to access remote databases…. in fact there don't seem to be many perl examples at all. Got example.pl configured a wee bit and running on test server but could do with a better db related example. Unfortunately my perl skills

Re: MAC Address Auth

2013-04-08 Thread George Chelidze
On 2013-04-08 15:18, Mulindwa wrote: Hi good pple, have been reading on how to enforce the attribute of Mac-Addr and i have not seen it anywhere. You don't read carefully what good pple reply to you. Ironically, the reply to your question is attached to your question. As Matthias already

Re: perl examples

2013-04-08 Thread A . L . M . Buxey
Hi, There don't seem to be many examples relating to using perl to access remote databases…. in fact there don't seem to be many perl examples at all. thats because its a PERL issue not a FreeRADIUS one :-) In post-auth I want to extract the nas-ip address and calling station-id of the

SV: perl examples

2013-04-08 Thread Alexander Silveröhrt
Since i was just in the making of some hooks using DBI I took some time to copy paste something that could be something towards the thing you wanted? This is just an example so don't take it to serious.. I also don't think you should do it as post_auth hook but a authorize hook so Don't forget

Re: perl examples

2013-04-08 Thread Alex Sharaz
On 8 Apr 2013, at 13:32, a.l.m.bu...@lboro.ac.uk wrote: Hi, There don't seem to be many examples relating to using perl to access remote databases…. in fact there don't seem to be many perl examples at all. thats because its a PERL issue not a FreeRADIUS one :-) :-)) but its perl

Re: MAC Address Auth

2013-04-08 Thread Matthew Newton
On Mon, Apr 08, 2013 at 04:18:54AM -0700, Mulindwa wrote: I want user eric@ut3 with this Mac Address to log in, and if the MAC address is different he will not be granted access. Move the Mac-Addr attribute from the reply list to the check list, and make it a check operator (==) not assignment

Re: perl examples

2013-04-08 Thread Alex Sharaz
Magic! many thanks, got all the bits I needed One question though, Why auth and not post-auth? I'm working on the basis that the stuff I do doesn't have anything to do with the actual auth process, in post-auth I'm doing things like setting session-timeouts. vlan assignments etc. based

Re: perl examples

2013-04-08 Thread A . L . M . Buxey
Hi, In post-auth I want to extract the nas-ip address and calling station-id of the client device open a db connection and perform a query that'll let me decide what vlan-id to send back in the access-accept packet write radius attributes into the access-accept reply one more

Re: MAC Address Auth

2013-04-08 Thread Mulindwa
Thanks Matthew, Sorry to askm but where is the reply list and where is the check list?   Eric M From: Matthew Newton m...@leicester.ac.uk To: Mulindwa meri...@yahoo.com; FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Monday, April

Re: perl examples

2013-04-08 Thread Alex Sharaz
On 8 Apr 2013, at 14:24, a.l.m.bu...@lboro.ac.uk wrote: Hi, In post-auth I want to extract the nas-ip address and calling station-id of the client device open a db connection and perform a query that'll let me decide what vlan-id to send back in the access-accept packet write radius

Re: MAC Address Auth

2013-04-08 Thread Marinko Tarlać
Do you plan to read anything or you think we're here in a chat room, waiting for your questions (the same questions every day...) ? On 8.4.2013 15:32, Mulindwa wrote: Thanks Matthew, Sorry to askm but where is the reply list and where is the check list? Eric M

Re: MAC Address Auth

2013-04-08 Thread Mulindwa
I have read and read, and i have not seen where thr reply list or check list is   Eric M From: Marinko Tarlać mangi...@gmail.com To: freeradius-users@lists.freeradius.org Sent: Monday, April 8, 2013 5:02 PM Subject: Re: MAC Address Auth Do you plan to read

Re: perl examples

2013-04-08 Thread Phil Mayers
On 08/04/13 14:47, Alex Sharaz wrote: On 8 Apr 2013, at 14:24, a.l.m.bu...@lboro.ac.uk wrote: Hi, In post-auth I want to extract the nas-ip address and calling station-id of the client device open a db connection and perform a query that'll let me decide what vlan-id to send back in the

Re: MAC Address Auth

2013-04-08 Thread Alan DeKok
Mulindwa wrote: I have read and read, and i have not seen where thr reply list or check list is $ man unlang Read doc/rlm_sql I have no idea which files you're reading. But it's clear you're *not* reading the documentation that comes with the server. Don't google for random pages on

Re: MAC Address Auth

2013-04-08 Thread Mulindwa
Great, thanx Alan   Eric M From: Alan DeKok al...@deployingradius.com To: Mulindwa meri...@yahoo.com; FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Monday, April 8, 2013 5:21 PM Subject: Re: MAC Address Auth Mulindwa wrote: I

Re: perl examples

2013-04-08 Thread Alex Sharaz
ok. This looks easier Thx A On 8 Apr 2013, at 15:18, Phil Mayers p.may...@imperial.ac.uk wrote: On 08/04/13 14:47, Alex Sharaz wrote: On 8 Apr 2013, at 14:24, a.l.m.bu...@lboro.ac.uk wrote: Hi, In post-auth I want to extract the nas-ip address and calling station-id of the client

Re: perl examples

2013-04-08 Thread A . L . M . Buxey
Hi, Why auth and not post-auth? I'm working on the basis that the stuff I do doesn't have anything to do with the actual auth process, in post-auth I'm doing things like setting session-timeouts. vlan assignments etc. based upon whether it's an access-request or an access-reject. Is

Re: perl examples

2013-04-08 Thread Alex Sharaz
That's fine then, that's where I'm doing this A On 8 Apr 2013, at 15:49, a.l.m.bu...@lboro.ac.uk wrote: Hi, Why auth and not post-auth? I'm working on the basis that the stuff I do doesn't have anything to do with the actual auth process, in post-auth I'm doing things like setting