Re: NAS info + MySQL

2005-06-07 Thread Marcin Jessa
On Mon, 06 Jun 2005 21:41:22 -0400 Alan DeKok [EMAIL PROTECTED] wrote: Marcin Jessa [EMAIL PROTECTED] wrote: Web scripts get executed as the www user. That way I need to grand apache access to HUP radiusd and that can be done with sudo adding www user to the sudoers file and allowing it to

Re: NAS info + MySQL

2005-06-07 Thread Alan DeKok
Seferovic Edvin [EMAIL PROTECTED] wrote: I have been watching this from the beginning ;) It got really interesting now. Does anyone know about OMAPI support in DHCPd? It allows you to change the config ( for example - update a lease ) at the real time without a need to restart a server. As

Re: NAS info + MySQL

2005-06-07 Thread Alan DeKok
Marcin Jessa [EMAIL PROTECTED] wrote: I was hoping I would not need to explain it one more time. I am very clear on what you want, and why. What you're not clear on is my answers. It does not metter what kind of signal httpd sends to radiusd, it would still need to be able to execute the

Re: NAS info + MySQL

2005-06-07 Thread Alan DeKok
Marcin Jessa [EMAIL PROTECTED] wrote: One more thing about this solution is you would need to either run radiusd as root or chown radiususer:radiusgroup the radius configs in order to be able to HUP radiusd. Radius daemon is started as root and then switched to the unprivileged user defined

RE: NAS info + MySQL

2005-06-07 Thread Seferovic Edvin
PROTECTED]; FreeRadius users mailing list Subject: Re: NAS info + MySQL Seferovic Edvin [EMAIL PROTECTED] wrote: I have been watching this from the beginning ;) It got really interesting now. Does anyone know about OMAPI support in DHCPd? It allows you to change the config ( for example - update

Re: NAS info + MySQL

2005-06-07 Thread Alan DeKok
Seferovic Edvin [EMAIL PROTECTED] wrote: I must have missed that part. Where can I find some doc about OMAPI support in freeradius? sigh FreeRADIUS does not have OMAPI support. Like DHCPd, FreeRADIUS supports live updates of SOME configuration. FreeRADIUS does this by using *databases*

Re: NAS info + MySQL

2005-06-06 Thread Marcin Jessa
Hi again. I noticed when I add new NAS servers to SQL on a running radius server, they will not be used before the radius server is restarted. Is that a case or am I mistaken here? If that's the case, how will restarting radius affect user's accounting info? What will happen with the accounting

Re: NAS info + MySQL

2005-06-06 Thread Edgars
Hi again. I noticed when I add new NAS servers to SQL on a running radius server, they will not be used before the radius server is restarted. Is that a case or am I mistaken here? it is like it currently is supposted to be. IMHO, the accounting packets which will be droped due this will

Re: NAS info + MySQL

2005-06-06 Thread Alan DeKok
Marcin Jessa [EMAIL PROTECTED] wrote: I noticed when I add new NAS servers to SQL on a running radius server, they will not be used before the radius server is restarted. Is that a case or am I mistaken here? You can send a HUP signal to th eserver. If that's the case, how will restarting

Re: NAS info + MySQL

2005-06-06 Thread Marcin Jessa
Hi. On Mon, 06 Jun 2005 14:48:22 -0400 Alan DeKok [EMAIL PROTECTED] wrote: Marcin Jessa [EMAIL PROTECTED] wrote: I noticed when I add new NAS servers to SQL on a running radius server, they will not be used before the radius server is restarted. Is that a case or am I mistaken here?

Re: NAS info + MySQL

2005-06-06 Thread Alan DeKok
Marcin Jessa [EMAIL PROTECTED] wrote: You can send a HUP signal to th eserver. That would require apache to have access to the radius deamon when using a web-based interface. Uh, no. Even worse, it'd be pretty much impossible to write an secure GUI application to remotely access

Re: NAS info + MySQL

2005-06-06 Thread Marcin Jessa
On Mon, 06 Jun 2005 17:11:46 -0400 Alan DeKok [EMAIL PROTECTED] wrote: Marcin Jessa [EMAIL PROTECTED] wrote: You can send a HUP signal to th eserver. That would require apache to have access to the radius deamon when using a web-based interface. Uh, no. The way I understand it,

Re: NAS info + MySQL

2005-06-06 Thread Alan DeKok
Marcin Jessa [EMAIL PROTECTED] wrote: The way I understand it, say a PHP script used to HUP radiusd would get executed as the httpd user. In that case the httpd deamon would need to be added to the sudoers group like this: www your.server = NOPASSWD: /usr/local/sbin/radiusd How else can

RE: NAS info + MySQL

2005-06-06 Thread Seferovic Edvin
users mailing list Subject: Re: NAS info + MySQL Marcin Jessa [EMAIL PROTECTED] wrote: The way I understand it, say a PHP script used to HUP radiusd would get executed as the httpd user. In that case the httpd deamon would need to be added to the sudoers group like this: www your.server

Re: NAS info + MySQL

2005-06-06 Thread Marcin Jessa
On Mon, 06 Jun 2005 18:13:32 -0400 Alan DeKok [EMAIL PROTECTED] wrote: Marcin Jessa [EMAIL PROTECTED] wrote: The way I understand it, say a PHP script used to HUP radiusd would get executed as the httpd user. In that case the httpd deamon would need to be added to the sudoers group like

Re: NAS info + MySQL

2005-06-06 Thread Marcin Jessa
On Tue, 7 Jun 2005 00:38:03 +0200 Seferovic Edvin [EMAIL PROTECTED] wrote: Hi, I have been watching this from the beginning ;) It got really interesting now. Does anyone know about OMAPI support in DHCPd? It allows you to change the config ( for example - update a lease ) at the real time

Re: NAS info + MySQL

2005-06-06 Thread Alan DeKok
Marcin Jessa [EMAIL PROTECTED] wrote: Web scripts get executed as the www user. That way I need to grand apache access to HUP radiusd and that can be done with sudo adding www user to the sudoers file and allowing it to exec /usr/local/sbin/radiusd. The only thing that needs non-WWW

Re: NAS info + MySQL

2005-06-06 Thread Avis Ng
Is there a way to make radius automatically read new entries added to the nas table ?Source code modifications. Can this be added to the todo list? Marcin, Since configuration changes aren't usually real-time, perhaps a normal cron job sending SIGHUP will suffice? FAQ 5.9 shows the

Re: NAS info + MySQL

2005-06-02 Thread Stefan Winter
in the slq conf file set readclients=yes and make sure that nas_table=nas. In the first email I said I had that enabled. So you mean nas table is properly used by freeradius and reads the hosts stored in it with the secret for the NAS? What about the clients.conf file? What should I keep

Re: NAS info + MySQL

2005-06-02 Thread Edgars
Marcin, you should configure your radiusd.conf file so that clients.conf would not be used at all, otherwise - yes, there should be at least one symbol in that file to run the radius. You should use the proper schema for the NAS table in order to get everything to work. Refer to

Re: NAS info + MySQL

2005-06-02 Thread Alan DeKok
Stefan Winter [EMAIL PROTECTED] wrote: What should I keep there? It needs at least one host definition or radius will not start. It is a bad behaviour that the server refuses to start. ... Alan DeKok once said he considers the patch for inclusion into the mainline server, but I didn't

NAS info + MySQL

2005-06-01 Thread Marcin Jessa
Hi guys. I was wondering if the information read from the nas table is in any way used by freeradius or maybe I misread/misconfigured something? The sql.conf file has set readclients = yes but freeradius is ignoring the information stored in sql using only the one from clients.conf. The

Re: NAS info + MySQL

2005-06-01 Thread Edgars
in the slq conf file set readclients=yes and make sure that nas_table=nas. Regards, Edgars Marcin Jessa wrote: Hi guys. I was wondering if the information read from the nas table is in any way used by freeradius or maybe I misread/misconfigured something? The sql.conf file has set

Re: NAS info + MySQL

2005-06-01 Thread Marcin Jessa
Hi Edgars. On Wed, 01 Jun 2005 16:41:15 +0300 Edgars [EMAIL PROTECTED] wrote: in the slq conf file set readclients=yes and make sure that nas_table=nas. In the first email I said I had that enabled. So you mean nas table is properly used by freeradius and reads the hosts stored in it with