Badusers?
Hi, 2 simple question. Freeradius, know or do something with badusers file? What is the idea of badusers file? Thanks. Fabián _ Mortgage refinance is hot 1) Rates near 30-yr lows 2) Good credit get intro-rate 4.625%* https://www2.nextag.com/goto.jsp?product=10035url=%2fst.jsptm=ysearch=mortgage_text_links_88_h2a5fs=4056p=5117disc=yvers=743 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Sqlcounter Max-Octets doesn't reset
Hi, take a look to sqlcounter dailycounter.
I think, you need modify your query, to get that you want.
Fabián
From: Sigfrido [EMAIL PROTECTED]
Reply-To: FreeRadius users mailing list
freeradius-users@lists.freeradius.org
To: freeradius-users@lists.freeradius.org
Subject: Sqlcounter Max-Octets doesn't reset
Date: Mon, 2 Apr 2007 11:54:58 +0200
Hi all,
freeradius 1.1.0 on Ubuntu Dapper
all's going but the counter below is not resetting:
sqlcounter volumelimitcounter {
counter-name = Total-Max-Octets
check-name = Max-Octets
reply-name = ChilliSpot-Max-Total-Octets
sqlmod-inst = sql
key = User-Name
reset = daily
query = SELECT SUM(AcctOutputOctets) FROM radacct
where UserName ='%{%k}'
}
I would like to reset, everyday at 00:00, the Max-Octets (in radcheck
table) to 0 but it seems not working. I tried also the hourly reset, with
same results.
Any idea ? It's a bug or what ?
TIA
--
Email.it, the professional e-mail, gratis per te: http://www.email.it/f
Sponsor:
Problemi di Liquiditÿ? Con Logos Finanziaria 30.000 ÿ in 24 ore a
dipendenti e lavoratori autonomi con rimborsi fino a 120 mesi clicca qui
*
Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=2907d=2-4
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
_
5.5%* 30 year fixed mortgage rate. Good credit refinance. Up to 5 free
quotes - *Terms
https://www2.nextag.com/goto.jsp?product=10035url=%2fst.jsptm=ysearch=mortgage_text_links_88_h2a5ds=4056p=5117disc=yvers=910
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Badusers?
Ok, thanks verry, verry much!!! This file come with phpdialupadmin, and others control panels for freeradius and I don't understand what they do whith that. Thanks Alan. I trying to do something to admin Freeradius with mySQL, so I'm looking every possibilities Thanks again Fabián From: Alan DeKok [EMAIL PROTECTED] Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Subject: Re: Badusers? Date: Mon, 02 Apr 2007 17:40:37 +0200 Internet-Wifi Operador wrote: Hi, 2 simple question. Freeradius, know or do something with badusers file? What is the idea of badusers file? No idea. What's a badusers file? Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _ Get a FREE Web site, company branded e-mail and more from Microsoft Office Live! http://clk.atdmt.com/MRT/go/mcrssaub0050001411mrt/direct/01/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Badusers?
another thing, I'm waiting to k'now the new version because, I guess the new version have a new file named dictionary, and I'm watting to know how it work. I think thiis file is a verry good idea. Fabián From: Alan DeKok [EMAIL PROTECTED] Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Subject: Re: Badusers? Date: Mon, 02 Apr 2007 17:40:37 +0200 Internet-Wifi Operador wrote: Hi, 2 simple question. Freeradius, know or do something with badusers file? What is the idea of badusers file? No idea. What's a badusers file? Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _ i'm making a difference. Make every IM count for the cause of your choice. Join Now. http://clk.atdmt.com/MSN/go/msnnkwme008001msn/direct/01/?href=http://im.live.com/messenger/im/home/?source=hmtagline - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: NAS-IP-Address
Hi, Are you using Chillispot or something like that? Fabián From: Erico Augusto [EMAIL PROTECTED] Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org To: freeradius-users@lists.freeradius.org Subject: NAS-IP-Address Date: Tue, 27 Mar 2007 11:14:19 -0700 (PDT) Hi, i) during Authentication phase, NAS-IP-Address attribute is filled with correct IP. During Post-Auth, NAS-IP-Address is filled with loopback 127.0.0.1 Address ... Is it possible to send the correct NAS-IP-Address during Post-Auth? How is it possible? Thanks, Erico. __ Fale com seus amigos de graça com o novo Yahoo! Messenger http://br.messenger.yahoo.com/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _ Exercise your brain! Try Flexicon. http://games.msn.com/en/flexicon/default.htm?icid=flexicon_hmemailtaglinemarch07 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Res: NAS-IP-Address
something more freeradius don't put this any IP in NAS-IP-Value this value come from the clliente (NAS) Fabián From: Erico Augusto [EMAIL PROTECTED] Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Subject: Res: NAS-IP-Address Date: Tue, 27 Mar 2007 21:24:38 -0700 (PDT) well, I don't know what chillispot means until now ... googling it I can say that my application acts like that. why? thanks, Erico. - Mensagem original De: Internet-Wifi Operador [EMAIL PROTECTED] Para: freeradius-users@lists.freeradius.org Enviadas: Terça-feira, 27 de Março de 2007 15:37:03 Assunto: RE: NAS-IP-Address Hi, Are you using Chillispot or something like that? Fabián From: Erico Augusto [EMAIL PROTECTED] Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org To: freeradius-users@lists.freeradius.org Subject: NAS-IP-Address Date: Tue, 27 Mar 2007 11:14:19 -0700 (PDT) Hi, i) during Authentication phase, NAS-IP-Address attribute is filled with correct IP. During Post-Auth, NAS-IP-Address is filled with loopback 127.0.0.1 Address ... Is it possible to send the correct NAS-IP-Address during Post-Auth? How is it possible? Thanks, Erico. __ Fale com seus amigos de graça com o novo Yahoo! Messenger http://br.messenger.yahoo.com/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _ Exercise your brain! Try Flexicon. http://games.msn.com/en/flexicon/default.htm?icid=flexicon_hmemailtaglinemarch07 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __ Fale com seus amigos de graça com o novo Yahoo! Messenger http://br.messenger.yahoo.com/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _ 5.5%* 30 year fixed mortgage rate. Good credit refinance. Up to 5 free quotes - *Terms https://www2.nextag.com/goto.jsp?product=10035url=%2fst.jsptm=ysearch=mortgage_text_links_88_h2a5ds=4056p=5117disc=yvers=910 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: bandwidth and volume limit
Hi Mathieu, I'm not an expert but I had the same problem.
You need upgrade freeradius to new version too.
The sqlcounters in your version only reply SessionTimeout, whit new version
you can reply wathever you want.
You need download de source new version from
ftp://ftp.freeradius.org/pub/radius/freeradius-1.1.5.tar.gz
after is better if you make a package for Debian and install it.
With new version you can do something like this.
sqlcounter totaloctets {
counter-name = Octets-Total-Limits
check-name = Max-Total-Octets
reply-name = ChilliSpot-Max-Total-Octets (or the attribute that your
NAS know for that)
sqlmod-inst = sql
key = User-Name
reset = never
query = SELECT SUM(AcctOutputOctets+AcctInputOctets) FROM radacct
WHERE UserName='%{%k}'
}
Remember when you compile your new freeradius include experimental counters.
I'm not sure in this versions that is necessary but work for me.
If you don´t know how make a .deb for your debian tell me I can explain
howto.
Fabián Omar Franzotti
From: Alan DeKok [EMAIL PROTECTED]
Reply-To: FreeRadius users mailing list
freeradius-users@lists.freeradius.org
To: FreeRadius users mailing list freeradius-users@lists.freeradius.org
Subject: Re: bandwidth and volume limit
Date: Thu, 22 Mar 2007 13:28:00 +0100
Mathieu Lemaitre wrote:
HI all,
I'm running freeradius 1.0.2 on a debian stable. For new clients, I need
to implement 2 functions:
* a bandwidth limit on a per-user basis. I mean, I need to be able to
set, for a user, a value for his upstream and downstream bw, which is
sent by the radius as a reply attribute. Are they predefined attributes
to do this?
No. See the NAS documentation. It may do this, but likely not.
* a volume limit: I'd like to be able to set a maximum amount of data
monthly downloadable for each user.
There is no standard way to do that. See the NAS documentation. It
may do this, but likely not.
Alan DeKok.
--
http://deployingradius.com - The web site of the book
http://deployingradius.com/blog/ - The blog
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
_
Get a FREE Web site, company branded e-mail and more from Microsoft Office
Live! http://clk.atdmt.com/MRT/go/mcrssaub0050001411mrt/direct/01/
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: accounts disappears!
Try to change the username and password for access to sql, maybe the problem is someone hack your sql server, I had this problem too and I found one Wireless connection what did that Fabián From: Alan DeKok [EMAIL PROTECTED] Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Subject: Re: accounts disappears! Date: Tue, 20 Mar 2007 10:44:16 +0100 Marwan Sultan wrote: This system is up and running since september 2006, last week, we start to see a strange problem some account are disappearing from the system!! FreeRADIUS doesn't do SQL writes to delete accounts. The problem lies elsewhere. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _ Interest Rates near 39yr lows! $430,000 Mortgage for $1,399/mo - Calculate new payment http://www.lowermybills.com/lre/index.jsp?sourceid=lmb-9632-18466moid=7581 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Opertors Problems
I have
in radgroupcheck
GroupName Attribute op Value
14 daysSession-Terminate := 1209600 (Time for 14 days
from first connection)
in usergroup
GroupName UserName
14 daysaaa
in radcheck
UserName Attribute op Value
aaa UserPassword == pepe
aaa Session-Terminate += 86400 (Time for 1 day to Add
to Session-Terminate)
@radiusd.conf
modules {
sqlcounter sessionterminate {
counter-name = Session-Limit-Time
check-name = Session-Terminate
reply-name = Session-Timeout
sqlmod-inst = sql
key = User-Name
reset = never
query = SELECT IF (UNIX_TIMESTAMP((SELECT
MIN(AcctStartTime) FROM radacct WHERE UserName='%{%k}'))0,
UNIX_TIMESTAMP() - UNIX_TIMESTAMP((SELECT MIN(AcctStartTime) FROM radacct
WHERE UserName='%{%k}'))),0)
}
...
}
instantiate {
.
sessionterminate
..
}
authorize {
..
sql
sessionterminate
.
}
Ok, when send the authentication request, everything work fine but
in reply Session-Timeout = 86400 so the radius overwrite the value not add.
rad_recv: Access-Request packet from host 172.16.0.3:2353, id=115, length=44
User-Name = aaa1
User-Password = pepe
rlm_sql (sql): Reserving sql socket id: 4
rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op
FROM radcheck WHERE Username = 'aaa1' ORDER BY id
rlm_sql_mysql: query: SELECT
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op
FROM radgroupcheck,usergroup WHERE usergroup.Username = 'aaa1' AND
usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id
rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op
FROM radreply WHERE Username = 'aaa1' ORDER BY id
rlm_sql_mysql: query: SELECT
radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op
FROM radgroupreply,usergroup WHERE usergroup.Username = 'aaa1' AND
usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id
rlm_sql (sql): Released sql socket id: 4
radius_xlat: Running registered xlat function of module sql for string
'SELECT IF(UNIX_TIMESTAMP((SELECT MIN(AcctStartTime) FROM radacct WHERE
UserName='aaa1'))0,(UNIX_TIMESTAMP()-UNIX_TIMESTAMP((SELECT
MIN(AcctStartTime) FROM radacct WHERE UserName='aaa1'))),0)'
rlm_sql (sql): - sql_xlat
rlm_sql (sql): Reserving sql socket id: 3
rlm_sql_mysql: query: SELECT IF(UNIX_TIMESTAMP((SELECT MIN(AcctStartTime)
FROM radacct WHERE
UserName='aaa1'))0,(UNIX_TIMESTAMP()-UNIX_TIMESTAMP((SELECT
MIN(AcctStartTime) FROM radacct WHERE UserName='aaa1'))),0)
rlm_sql (sql): - sql_xlat finished
rlm_sql (sql): Released sql socket id: 3
rlm_sql (sql): Reserving sql socket id: 2
rlm_sql_mysql: query: SELECT COUNT(*) FROM radacct WHERE UserName='aaa1'
AND AcctStopTime = 0
rlm_sql (sql): Released sql socket id: 2
rlm_sql (sql): Processing sql_postauth
rlm_sql (sql): Reserving sql socket id: 1
rlm_sql_mysql: query: INSERT into radpostauth (id, user, pass, reply, date)
values ('', 'aaa1', 'pepe', 'Access-Accept', NOW())
rlm_sql (sql): Released sql socket id: 1
Sending Access-Accept of id 115 to 172.16.0.3 port 2353
Reply-Message += Hola aaa1\\r\\n
WISPr-Bandwidth-Max-Down := 20
WISPr-Bandwidth-Max-Up := 2
Acct-Interim-Interval := 120
Idle-Timeout := 390
Session-Timeout = 86400
I did that before with freeradius 1.0.2 but stop to work and I don't know
why. I install the new freeradius 1.1.5, Wow is to better and more easy, but
my problem continue, I guess I forget something, please if someone have any
idea why the operators doesn't work. Can help me?
Thanks.
Fabián Franzotti
_
With tax season right around the corner, make sure to follow these few
simple tips.
http://articles.moneycentral.msn.com/Taxes/PreparationTips/PreparationTips.aspx?icid=HMFebtagline
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Opertors Problems
Ok, Thanks, I confused something, because it was working and i don't have
any external program, but now I will try to do one, Again Thanks Verry Verry
Much
Fabián
From: [EMAIL PROTECTED]
Reply-To: FreeRadius users mailing list
freeradius-users@lists.freeradius.org
To: FreeRadius users mailing list freeradius-users@lists.freeradius.org
Subject: Re: Opertors Problems
Date: Thu, 15 Mar 2007 21:49:37 +0100
Operator works as expected.
***
Attribute += Value
Always matches as a check item, and adds the current attribute with value
to the list of configuration items.
As a reply item, it has an identical meaning, but the attribute is added
to the reply items.
***
It adds attribute to the list not add up values. You are probably mixing
it up with computer programming operator += which adds up that way.
Ivan Kalik
Kalik Informatika ISP
Dana 15/3/2007, Internet-Wifi Operador [EMAIL PROTECTED]
pi¹e:
I have
in radgroupcheck
GroupName Attribute op Value
14 daysSession-Terminate := 1209600 (Time for 14
days
from first connection)
in usergroup
GroupName UserName
14 daysaaa
in radcheck
UserName Attribute op Value
aaa UserPassword == pepe
aaa Session-Terminate += 86400 (Time for 1 day to
Add
to Session-Terminate)
@radiusd.conf
modules {
sqlcounter sessionterminate {
counter-name = Session-Limit-Time
check-name = Session-Terminate
reply-name = Session-Timeout
sqlmod-inst = sql
key = User-Name
reset = never
query = SELECT IF (UNIX_TIMESTAMP((SELECT
MIN(AcctStartTime) FROM radacct WHERE UserName='%{%k}'))0,
UNIX_TIMESTAMP() - UNIX_TIMESTAMP((SELECT MIN(AcctStartTime) FROM radacct
WHERE UserName='%{%k}'))),0)
}
...
}
instantiate {
.
sessionterminate
..
}
authorize {
..
sql
sessionterminate
.
}
Ok, when send the authentication request, everything work fine but
in reply Session-Timeout = 86400 so the radius overwrite the value not
add.
rad_recv: Access-Request packet from host 172.16.0.3:2353, id=115,
length=44
User-Name = aaa1
User-Password = pepe
rlm_sql (sql): Reserving sql socket id: 4
rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op
FROM radcheck WHERE Username = 'aaa1' ORDER BY id
rlm_sql_mysql: query: SELECT
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op
FROM radgroupcheck,usergroup WHERE usergroup.Username = 'aaa1' AND
usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id
rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op
FROM radreply WHERE Username = 'aaa1' ORDER BY id
rlm_sql_mysql: query: SELECT
radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op
FROM radgroupreply,usergroup WHERE usergroup.Username = 'aaa1' AND
usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id
rlm_sql (sql): Released sql socket id: 4
radius_xlat: Running registered xlat function of module sql for string
'SELECT IF(UNIX_TIMESTAMP((SELECT MIN(AcctStartTime) FROM radacct WHERE
UserName='aaa1'))0,(UNIX_TIMESTAMP()-UNIX_TIMESTAMP((SELECT
MIN(AcctStartTime) FROM radacct WHERE UserName='aaa1'))),0)'
rlm_sql (sql): - sql_xlat
rlm_sql (sql): Reserving sql socket id: 3
rlm_sql_mysql: query: SELECT IF(UNIX_TIMESTAMP((SELECT
MIN(AcctStartTime)
FROM radacct WHERE
UserName='aaa1'))0,(UNIX_TIMESTAMP()-UNIX_TIMESTAMP((SELECT
MIN(AcctStartTime) FROM radacct WHERE UserName='aaa1'))),0)
rlm_sql (sql): - sql_xlat finished
rlm_sql (sql): Released sql socket id: 3
rlm_sql (sql): Reserving sql socket id: 2
rlm_sql_mysql: query: SELECT COUNT(*) FROM radacct WHERE UserName='aaa1'
AND AcctStopTime = 0
rlm_sql (sql): Released sql socket id: 2
rlm_sql (sql): Processing sql_postauth
rlm_sql (sql): Reserving sql socket id: 1
rlm_sql_mysql: query: INSERT into radpostauth (id, user, pass, reply,
date)
values ('', 'aaa1', 'pepe', 'Access-Accept', NOW())
rlm_sql (sql): Released sql socket id: 1
Sending Access-Accept of id 115 to 172.16.0.3 port 2353
Reply-Message += Hola aaa1\\r\\n
WISPr-Bandwidth-Max-Down := 20
WISPr-Bandwidth-Max-Up := 2
Acct-Interim-Interval := 120
Idle-Timeout := 390
Session-Timeout = 86400
I did that before with freeradius 1.0.2 but stop to work and I don't know
why. I install the new freeradius 1.1.5, Wow is to better and more easy,
but
my problem continue, I guess I forget something, please if someone have
any
idea why the operators doesn't work. Can help me?
Thanks.
Fabián
Operators += don�t work !!!
I have a s sqlcounter Like Max-All-Session until 2 or 3 weeks ago when I did use this with '+=' operator it work prefect because add some time to the user. 2 or 3 days ago it stop to work Somebody any Idea? Fabián _ Get a FREE Web site, company branded e-mail and more from Microsoft Office Live! http://clk.atdmt.com/MRT/go/mcrssaub0050001411mrt/direct/01/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [Chillispot] Correction of Reply Messages
I give to you a fast solution to show the message that you want, otherwise edit the module, rewrite and compile it. Fabián From: [EMAIL PROTECTED] Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Subject: Re: [Chillispot] Correction of Reply Messages Date: Mon, 12 Mar 2007 14:41:15 +0100 Oh, I see. So the script works as it should but the people complain that the message doesn't sound right when never is there. You could put an if there to send the message without the parameter for never and as it is for others, but if configurable message is in the pipeline it probably isn't worth the bother. Ivan Kalik Kalik Informatika ISP Dana 12/3/2007, Alan DeKok [EMAIL PROTECTED] pi¹e: [EMAIL PROTECTED] wrote: I think that this is a trivial bug: It sends reset parameter instead of (?)check name parameter in the reply. You should report it. The reset is often monthly or daily, in which case the message makes sense. Sending the check name wouldn't make sense, as it's internal to the RADIUS server. Ideally, the message should be configurable. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _ Get a FREE Web site, company branded e-mail and more from Microsoft Office Live! http://clk.atdmt.com/MRT/go/mcrssaub0050001411mrt/direct/01/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FR supported attributes
Chillispot is a captive portal that's it You can use it with wired and wireless LAN. Check It!!! Other point. You right, Expiration is an Internal Freeradius Attribute, but by default only check if the expiration date NOW(), so if user make a connection 1 milisecond beford that expiration date, the connection is accepted and the user keep connected until it want. Freeradius don´t generate Session-Timeout reply by default, so the nas don´t know when disconnect the user, if you use the correct reply message for the nas that manage the connection, the nas will disconnect the user when the timeout. Do you know something I don't? I'm sure do you know something I don't, but I don't find more information about freeradius and I write on my experience. I think the idea is put the system to work, because many people like me, need a fast solutions and don't have time to investigate or try find of perfection Fabián Franzotti From: [EMAIL PROTECTED] Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Subject: Re: FR supported attributes Date: Mon, 12 Mar 2007 14:04:25 +0100 Wired chilli? The makers say: ChilliSpot is an open source captive portal or wireless LAN access point controller. It is used for authenticating users of a wireless LAN. Do you know something they don't? Expiration is an internal FreeRadius attribute - it doesn't go out in radius packets. It is used to generate real radius attributes like Session-Timeout. So NAS (Cisco, Chilli, Mickrotik, whatever) will never see this attribute. None of them would know what to do with it if they would recieve it. Ivan Kalik Kalik Informatika ISP Dana 12/3/2007, Internet-Wifi Operador [EMAIL PROTECTED] pi¹e: Chillispot is a gateway, not matter if you passthrough with Wifi connection or wire connection, Chillispot not identify they. The litle diference is, if you use Expiration attribute Chillispot ignores it, so when the time is reach chillispot not logoff the user. So, you need send the correct reply for each gateway, switch or device that manage the connection because Freeradius not disconnect the users, this is a NAS job. Fabián From: [EMAIL PROTECTED] Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Subject: Re: FR supported attributes Date: Sat, 10 Mar 2007 18:49:35 +0100 There should be no difference in using Expiration and WISPr-Session-Terminate-Time in this case. Expiration sets Session-Timeout and ChilliSpot knows that one. The only difference is that Expiration will work with wired connections too. Ivan Kalik Kalik Informatika ISP Dana 10/3/2007, Internet-Wifi Operador [EMAIL PROTECTED] pi¹e: If you use Chillispot, put in your user Max-All-Session and WISPr-Session-Terminate-Time they work very good together because if you use Expire attribute the freeradius know it but chillispot no, so if the user try to connect after the Expire time the radius reject this connection, but i the user is connected and the chillispot don't know the expire attribute so the connection continue. here is the suported attributes for the chillispot http://www.chillispot.org/features.html#mozTocId149863 From: PD [EMAIL PROTECTED] Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Subject: Re: FR supported attributes Date: Sat, 10 Mar 2007 03:46:50 + Unfortunatelly, I found the answer of the similar question. see http://www.arcknowledge.com/gmane.comp.freeradius.user/2003-02/msg00671.html Well.. just to make sure, can Expiration attribute work together with Max-All-Session attribute ? The case is suppose to create an account for 10 hours but only valid one week after the creation date. TIA PD On 3/10/2007, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Radius attributes - http://www.freeradius.org/rfc/attributes.html . You actually invent sqlcounter attributes yourself by making the appropriate SQL query. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _ Get a FREE Web site, company branded e-mail and more from Microsoft Office Live! http://clk.atdmt.com/MRT/go/mcrssaub0050001411mrt/direct/01/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _ Find a local pizza place, movie theater, and more .then map the best route! http://maps.live.com/?icid=hmtag1FORM=MGAC01 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list
Re: FR supported attributes
Chillispot is a gateway, not matter if you passthrough with Wifi connection or wire connection, Chillispot not identify they. The litle diference is, if you use Expiration attribute Chillispot ignores it, so when the time is reach chillispot not logoff the user. So, you need send the correct reply for each gateway, switch or device that manage the connection because Freeradius not disconnect the users, this is a NAS job. Fabián From: [EMAIL PROTECTED] Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Subject: Re: FR supported attributes Date: Sat, 10 Mar 2007 18:49:35 +0100 There should be no difference in using Expiration and WISPr-Session-Terminate-Time in this case. Expiration sets Session-Timeout and ChilliSpot knows that one. The only difference is that Expiration will work with wired connections too. Ivan Kalik Kalik Informatika ISP Dana 10/3/2007, Internet-Wifi Operador [EMAIL PROTECTED] pi¹e: If you use Chillispot, put in your user Max-All-Session and WISPr-Session-Terminate-Time they work very good together because if you use Expire attribute the freeradius know it but chillispot no, so if the user try to connect after the Expire time the radius reject this connection, but i the user is connected and the chillispot don't know the expire attribute so the connection continue. here is the suported attributes for the chillispot http://www.chillispot.org/features.html#mozTocId149863 From: PD [EMAIL PROTECTED] Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Subject: Re: FR supported attributes Date: Sat, 10 Mar 2007 03:46:50 + Unfortunatelly, I found the answer of the similar question. see http://www.arcknowledge.com/gmane.comp.freeradius.user/2003-02/msg00671.html Well.. just to make sure, can Expiration attribute work together with Max-All-Session attribute ? The case is suppose to create an account for 10 hours but only valid one week after the creation date. TIA PD On 3/10/2007, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Radius attributes - http://www.freeradius.org/rfc/attributes.html . You actually invent sqlcounter attributes yourself by making the appropriate SQL query. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _ Get a FREE Web site, company branded e-mail and more from Microsoft Office Live! http://clk.atdmt.com/MRT/go/mcrssaub0050001411mrt/direct/01/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _ Find a local pizza place, movie theater, and more .then map the best route! http://maps.live.com/?icid=hmtag1FORM=MGAC01 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FR supported attributes
You need send the message for each NAS, because they are not handle an standart attributes I think that. Fabián From: PD [EMAIL PROTECTED] Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Subject: Re: FR supported attributes Date: Sun, 11 Mar 2007 03:22:15 + Thx for the answers... Actually we have plan to use multiple tipe and number of wireless NAS, such as chillispot, mikrotik, etc. Therefor we are looking for the attributes that compatiple for all NAS type. For the Expiration attribute, how the correct syntax ? If I want to expire the account at march 20, 2007 which is the correct syntax ? TIA PD On 3/10/2007, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: There should be no difference in using Expiration and WISPr-Session-Terminate-Time in this case. Expiration sets Session-Timeout and ChilliSpot knows that one. The only difference is that Expiration will work with wired connections too. Ivan Kalik Kalik Informatika ISP Dana 10/3/2007, Internet-Wifi Operador [EMAIL PROTECTED] pi¹e: If you use Chillispot, put in your user Max-All-Session and WISPr-Session-Terminate-Time they work very good together because if you use Expire attribute the freeradius know it but chillispot no, so if the user try to connect after the Expire time the radius reject this connection, but i the user is connected and the chillispot don't know the expire attribute so the connection continue. here is the suported attributes for the chillispot http://www.chillispot.org/features.html#mozTocId149863 From: PD [EMAIL PROTECTED] Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Subject: Re: FR supported attributes Date: Sat, 10 Mar 2007 03:46:50 + Unfortunatelly, I found the answer of the similar question. see http://www.arcknowledge.com/gmane.comp.freeradius.user/2003-02/msg00671.html Well.. just to make sure, can Expiration attribute work together with Max-All-Session attribute ? The case is suppose to create an account for 10 hours but only valid one week after the creation date. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _ Find what you need at prices youll love. Compare products and save at MSN® Shopping. http://shopping.msn.com/default/shp/?ptnrid=37,ptnrdata=24102tcode=T001MSN20A0701 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [Chillispot] Correction of Reply Messages
I don´t understand what you want exactly, but if want change the message,
You can check the reply message in your hostspotlogin.cgi or php script, so
when receibe
if ($msg ==Your maximum) $msg = The message you want
echo $msg;
That is did.
Sorry if not you what you are looking for, but my english is too bad.
From: [EMAIL PROTECTED]
Reply-To: FreeRadius users mailing list
freeradius-users@lists.freeradius.org
To: FreeRadius users mailing list freeradius-users@lists.freeradius.org
Subject: Re: [Chillispot] Correction of Reply Messages
Date: Sat, 10 Mar 2007 11:39:19 +0100
I think that this is a trivial bug:
sqlcounter noresetcounter {
counter-name = Max-All-Session-Time
check-name = Max-All-Session
sqlmod-inst = sql
key = User-Name
reset = never
query = SELECT SUM(AcctSessionTime) FROM radacct WHERE
UserName='%{%k}'
}
It sends reset parameter instead of (?)check name parameter in the reply.
You should report it.
There should be something else (? %S if there is one) instead of %s here:
snprintf(msg, sizeof(msg), Your maximum %s usage time has been
reached, data-reset);
Ivan Kalik
Kalik Informatika ISP
Dana 10/3/2007, PD [EMAIL PROTECTED] pi¹e:
Thx Brad...
But... our FR installation is came from FBSD ports, not self compiling.
How to apply yr patch ?
Cheers
PD
On 3/10/2007, Brad Evans [EMAIL PROTECTED] wrote:
Hi,
Check out the FreeRadius forum at www.chillispot.org - there is a
patch there which allows you to specify custom reply messge text.
Cheers
PD wrote:
Dear all,
Sorry for cross post... since I doubt about which area of this
question.
I just create one account call test for duration 300 second / 5
minutes.
After the maximum time reached, I logged by the system out. When I try
to log in again, the reply message display is Your maximum never
usage
time has been reached
Seems that I have some correction for the message (take out never),
but I
do not know how to do it.
Can some one let me know where to edit the above reply message ?
TIA
PD
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
_
Find what you need at prices youll love. Compare products and save at MSN®
Shopping.
http://shopping.msn.com/default/shp/?ptnrid=37,ptnrdata=24102tcode=T001MSN20A0701
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FR supported attributes
If you use Chillispot, put in your user Max-All-Session and WISPr-Session-Terminate-Time they work very good together because if you use Expire attribute the freeradius know it but chillispot no, so if the user try to connect after the Expire time the radius reject this connection, but i the user is connected and the chillispot don't know the expire attribute so the connection continue. here is the suported attributes for the chillispot http://www.chillispot.org/features.html#mozTocId149863 From: PD [EMAIL PROTECTED] Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Subject: Re: FR supported attributes Date: Sat, 10 Mar 2007 03:46:50 + Unfortunatelly, I found the answer of the similar question. see http://www.arcknowledge.com/gmane.comp.freeradius.user/2003-02/msg00671.html Well.. just to make sure, can Expiration attribute work together with Max-All-Session attribute ? The case is suppose to create an account for 10 hours but only valid one week after the creation date. TIA PD On 3/10/2007, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Radius attributes - http://www.freeradius.org/rfc/attributes.html . You actually invent sqlcounter attributes yourself by making the appropriate SQL query. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _ Get a FREE Web site, company branded e-mail and more from Microsoft Office Live! http://clk.atdmt.com/MRT/go/mcrssaub0050001411mrt/direct/01/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: requiring a sample of a mysql radius database
Very well, I´m doing the same, but i can't find information about the way freeradius process the attributes and operator, I have a litle idea but some times the results don´t match with my idea. I supose is a problem in my freeradius confiration or maybe in mySQL configuration, so if you find this information please send to me. Thanks From: liran tal [EMAIL PROTECTED] Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.org To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Subject: requiring a sample of a mysql radius database Date: Sat, 10 Mar 2007 14:39:12 +0200 Hey everyone, I'm working on a new radius control panel in php and for the sake of working with actual records I need some real data to fill my radacct table as well as my radreply and others. Ofcourse those tables are including passwords and other private stuff so I'm not talking about a dump of the radius database from your production systems :) So if you have any test systems I would love it if you could attach a dump of the radius database. Thanks guys. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _ Find what you need at prices youll love. Compare products and save at MSN® Shopping. http://shopping.msn.com/default/shp/?ptnrid=37,ptnrdata=24102tcode=T001MSN20A0701 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
