ok well i guess i will do manuall replys for each user :(
So freeRadius 2.x have taken care of my problem and I actually can use SQL
to controll everything?
Read man unlang on freeradius site and you will see how much more you can
do in 2.x.
Ivan Kalik
Kalik Informatika ISP
-
List
will do
here is the thing... i did all that was sujested and tested on my comps and
gor rejections if my username belong to SQL Group that has reject reply or i
was able to block myyslef by mac address. Well I just looked at the log and
I see that 2 users that bloked by both mac and username,
yey thats seam to work, but still getting one problem.
So the comp gets bloket regardless of username, but the Reply-message from
the bloked table is not being displayed. So I have bloked huntgroup name
and I have SQL group: Deny_Trial that sends Reply-Message + Reject for all
its members (which
yey thats seam to work, but still getting one problem.
So the comp gets bloket regardless of username, but the Reply-message from
the bloked table is not being displayed. So I have bloked huntgroup name
and I have SQL group: Deny_Trial that sends Reply-Message + Reject for all
its members (which
ok well i guess i will do manuall replys for each user :(
So freeRadius 2.x have taken care of my problem and I actually can use SQL
to controll everything?
On Fri, Feb 6, 2009 at 8:07 PM, t...@kalik.net wrote:
yey thats seam to work, but still getting one problem.
So the comp gets bloket
Ah, sql groups don't work properly in 1.x. Upgrade.
Ivan Kalik
Kalik Informatika ISP
Dana 31/1/2009, Alex M freerad...@lrcommunications.net piše:
I guess its different in newer version of radius but in my 1.5 the only
table that has PRIO is radgroupreply
and there is table radusergroup
damn, upgrade will be painfull for me :(
I guess I will try to use other means to block missbehaving users. At least
we got only 3 people who try to free ride.
thanks for help
2009/1/31 t...@kalik.net
Ah, sql groups don't work properly in 1.x. Upgrade.
Ivan Kalik
Kalik Informatika ISP
Here is a trick from the old days:
Create a huntgroup like:
blocked Calling-Station-Id == whatever
SQL-Group == suspend
Where suspend is the group with Auth-Type := Reject in it. That will blok
him if he is in suspend group or not (only the message in radius.log
will be
Hi i just tried to add following (as adviced) into my radcheck table in
MySQL:
UserName: DEFAULT
Attribute: Calling-Station-Id
op: ==
Value: 00:0b:6a:xx:xx:xx, Auth-Type := Reject
And it did not work
guessI just can not add value with operator in it, but still how can i
reject user based on
Hi i just tried to add following (as adviced) into my radcheck table in
MySQL:
UserName: DEFAULT
Attribute: Calling-Station-Id
op: ==
Value: 00:0b:6a:xx:xx:xx, Auth-Type := Reject
And it did not work
guessI just can not add value with operator in it, but still how can i
reject user based on
Tried that...
now i'm getting all users rejected regardless of mac address in the given
group :(
How do i set priorities? I though priorities only apply to radreply.
Do I have to set fall through?
Or maybe i did something wrong?
On Fri, Jan 30, 2009 at 5:45 PM, t...@kalik.net wrote:
Hi i
Tried that...
now i'm getting all users rejected regardless of mac address in the given
group :(
That shouldn't happen. Post the debug.
How do i set priorities?
You have priority field in radusergroup table.
I though priorities only apply to radreply.
There are no priorities in radreply.
I guess its different in newer version of radius but in my 1.5 the only
table that has PRIO is radgroupreply
and there is table radusergroup instead there is a group called usergroup.
I'm getting fustrated. :(
On Fri, Jan 30, 2009 at 7:32 PM, t...@kalik.net wrote:
Tried that...
now i'm
Hi,
I'm using MySQL to store all configs. I want to reject some comuters by
their MAC address (Calling-Station-Id) Ex: one user keeps creating new
userrnames to avoid administratice actions, so I got bored playing tom and
jerry with him and I just want to bun his MAC address regardless of what
I'm using MySQL to store all configs. I want to reject some comuters by
their MAC address (Calling-Station-Id) Ex: one user keeps creating new
userrnames to avoid administratice actions, so I got bored playing tom and
jerry with him and I just want to bun his MAC address regardless of what
15 matches
Mail list logo
