cisco_vsa_hack
Does turning on the hack do anything to the attributes other than adding
the value to matching defined attributes?
From the code:
if ((vp-attribute 0x) == 1) {
const char *p;
DICT_ATTR *dattr;
p = vp-vp_strvalue;
gettoken(p, newattr, sizeof(newattr));
if (((dattr = dict_attrbyname(newattr)) != NULL)
(dattr-type == PW_TYPE_STRING)) {
VALUE_PAIR *newvp;
/*
* Make a new attribute.
*/
newvp = pairmake(newattr, ptr + 1,
T_OP_EQ);
if (newvp) {
pairadd(vp, newvp);
}
}
} else {/* h322-foo-bar = h323-foo-bar = baz */
/*
* We strip out the duplicity from the
* value field, we use only the value on
* the right side of the '=' character.
*/
strlcpy(newattr, ptr + 1, sizeof(newattr));
strlcpy((char *)vp-vp_strvalue, newattr,
sizeof(vp-vp_strvalue));
vp-length = strlen((char *)vp-vp_strvalue);
}
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: cisco_vsa_hack
Joe Maimon wrote: Does turning on the hack do anything to the attributes other than adding the value to matching defined attributes? ? It doesn't add the value. It turns: Cisco-AVPair = foo = bar into foo = bar or foo = foo = bar into foo = bar I would say I have no idea why Cisco did it that way... but I know some of the people involved, and they thought it was a great idea. sigh Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: strangeness with cisco_vsa_hack=yes ...
Ilia Chipitsine wrote: decoded fields: Cisco-AVPair = session-protocol=cisco Cisco-AVPair = h323-incoming-conf-id=D0236F56 EA0811D9 B31C9978 Cisco-AVPair = subscriber=Unknown Cisco-AVPair = call-id=766F6970 6D726B74 A04FC642 7C760600 The attributes above are present on the dictionary files. not decoded fields: Cisco-AVPair = gw-rxd-cdn=ton:0,npi:1,#:73512327225 Cisco-AVPair = release-source=2 Cisco-AVPair = remote-media-address=XXX Cisco-AVPair = out-trunkgroup-label=Chel Cisco-AVPair = gw-rxd-cgn=ton:0,npi:1,#:73512287317 why does it decode just few fields ? what did I do wrong ? You need to add the attributes to the dictionary files. You can create a custom dictionary (i.e. dictionary.custom) then add the attributes not being decoded: For example: # Custom attributes ATTRIBUTE remote-media-address3000string Cisco ATTRIBUTE release-source 3001string Cisco ATTRIBUTE gw-rxd-cgn 3002string Cisco ATTRIBUTE gw-final-xlated-cgn 3003string Cisco HTH, Roy - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
strangeness with cisco_vsa_hack=yes ...
Dear Sirs, I'm running freeradius-1.0.4 for h323 accounting from Cisco AS5350. I turned cisco_vsa_hack to yes, but according to detail (and pgsql-voip module) not all Cisco-VSA are decoded to normal AV pairs: (I replaced several fields with in order to hide IP addresses) Sat Jul 2 09:26:14 2005 Acct-Session-Id = 00039908 Calling-Station-Id = 73512287317 Called-Station-Id = 73512327225 Cisco-AVPair = call-id=766F6970 6D726B74 A04FC642 7C760600 h323-setup-time = 09:26:08.476 BST Sat Jul 2 2005 h323-gw-id = X h323-conf-id = D0236F56 EA0811D9 B31C9978 D534BC2D h323-call-origin = answer h323-call-type = VoIP Cisco-AVPair = h323-incoming-conf-id=D0236F56 EA0811D9 B31C9978 D534BC2D Cisco-AVPair = subscriber=Unknown Cisco-AVPair = session-protocol=cisco Cisco-AVPair = gw-rxd-cdn=ton:0,npi:1,#:73512327225 Acct-Input-Octets = 360 Acct-Output-Octets = 5556 Acct-Input-Packets = 67 Acct-Output-Packets = 195 Acct-Session-Time = 0 h323-connect-time = 09:26:14.670 BST Sat Jul 2 2005 h323-disconnect-time = 09:26:14.670 BST Sat Jul 2 2005 h323-disconnect-cause = 10 h323-remote-address = X Cisco-AVPair = release-source=2 h323-voice-quality = 0 Cisco-AVPair = remote-media-address=XXX Cisco-AVPair = out-trunkgroup-label=Chel Cisco-AVPair = gw-rxd-cgn=ton:0,npi:1,#:73512287317 User-Name = mos-spa-gkp-1 Acct-Status-Type = Stop Service-Type = Login-User NAS-IP-Address = Acct-Delay-Time = 0 call-id = 766F6970 6D726B74 A04FC642 7C760600 h323-incoming-conf-id = D0236F56 EA0811D9 B31C9978 D534BC2D subscriber = Unknown session-protocol = cisco gw-rxd-cdn = ton:0,npi:1,#:73512327225 Client-IP-Address = XXX Acct-Unique-Session-Id = e8c1a697340192ad Timestamp = 1120292774 as far as I can see, decoded fields: Cisco-AVPair = session-protocol=cisco Cisco-AVPair = h323-incoming-conf-id=D0236F56 EA0811D9 B31C9978 Cisco-AVPair = subscriber=Unknown Cisco-AVPair = call-id=766F6970 6D726B74 A04FC642 7C760600 not decoded fields: Cisco-AVPair = gw-rxd-cdn=ton:0,npi:1,#:73512327225 Cisco-AVPair = release-source=2 Cisco-AVPair = remote-media-address=XXX Cisco-AVPair = out-trunkgroup-label=Chel Cisco-AVPair = gw-rxd-cgn=ton:0,npi:1,#:73512287317 why does it decode just few fields ? what did I do wrong ? Cheers, Ilia Chipitsine - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: cisco_vsa_hack
If you can send me the patch asap I can test it (while I still have a quintum for testing) and commit it to cvs if it works ok Cheers Peter On Thursday 23 September 2004 16:16, Amedzekor Kafui wrote: I don't know how to use CVS but I am learning to do that now. I only tried it on postgresql using Peter Nixon's schema. I only had to do some minor changes. I will post the patch here. Thanks. Kafui Amedzekor --- Apu islam [EMAIL PROTECTED] wrote: Hello Kafui, Is that hack being sent with CVS/Standard distribution ? Does that work with the posgreSQL billing options that are provided ? -apu --- Amedzekor Kafui [EMAIL PROTECTED] wrote: Yes I did write it. Kafui Amedzekor. --- Peter Nixon [EMAIL PROTECTED] wrote: On Friday 06 August 2004 18:19, Amedzekor Kafui wrote: --snip-- Anyway what I am aiming at is to write a hack for quintum gateways so that Quintums sending cisco type accounting packets can use the schema provided by Peter Nixon in src/billing. Has anyone written this already? Thanks. Kafui Amedzekor. Did anyone ever write a Quintum VSA hack? Regards -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ___ Do you Yahoo!? Declare Yourself - Register online to vote today! http://vote.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __ Do you Yahoo!? Yahoo! Mail - You care about security. So do we. http://promotions.yahoo.com/new_mail - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ___ Do you Yahoo!? Declare Yourself - Register online to vote today! http://vote.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: cisco_vsa_hack
I don't know how to use CVS but I am learning to do that now. I only tried it on postgresql using Peter Nixon's schema. I only had to do some minor changes. I will post the patch here. Thanks. Kafui Amedzekor --- Apu islam [EMAIL PROTECTED] wrote: Hello Kafui, Is that hack being sent with CVS/Standard distribution ? Does that work with the posgreSQL billing options that are provided ? -apu --- Amedzekor Kafui [EMAIL PROTECTED] wrote: Yes I did write it. Kafui Amedzekor. --- Peter Nixon [EMAIL PROTECTED] wrote: On Friday 06 August 2004 18:19, Amedzekor Kafui wrote: --snip-- Anyway what I am aiming at is to write a hack for quintum gateways so that Quintums sending cisco type accounting packets can use the schema provided by Peter Nixon in src/billing. Has anyone written this already? Thanks. Kafui Amedzekor. Did anyone ever write a Quintum VSA hack? Regards -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ___ Do you Yahoo!? Declare Yourself - Register online to vote today! http://vote.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __ Do you Yahoo!? Yahoo! Mail - You care about security. So do we. http://promotions.yahoo.com/new_mail - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ___ Do you Yahoo!? Declare Yourself - Register online to vote today! http://vote.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: cisco_vsa_hack
On Friday 06 August 2004 18:19, Amedzekor Kafui wrote: --snip-- Anyway what I am aiming at is to write a hack for quintum gateways so that Quintums sending cisco type accounting packets can use the schema provided by Peter Nixon in src/billing. Has anyone written this already? Thanks. Kafui Amedzekor. Did anyone ever write a Quintum VSA hack? Regards -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: cisco_vsa_hack
Yes I did write it. Kafui Amedzekor. --- Peter Nixon [EMAIL PROTECTED] wrote: On Friday 06 August 2004 18:19, Amedzekor Kafui wrote: --snip-- Anyway what I am aiming at is to write a hack for quintum gateways so that Quintums sending cisco type accounting packets can use the schema provided by Peter Nixon in src/billing. Has anyone written this already? Thanks. Kafui Amedzekor. Did anyone ever write a Quintum VSA hack? Regards -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ___ Do you Yahoo!? Declare Yourself - Register online to vote today! http://vote.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: cisco_vsa_hack
Hello Kafui, Is that hack being sent with CVS/Standard distribution ? Does that work with the posgreSQL billing options that are provided ? -apu --- Amedzekor Kafui [EMAIL PROTECTED] wrote: Yes I did write it. Kafui Amedzekor. --- Peter Nixon [EMAIL PROTECTED] wrote: On Friday 06 August 2004 18:19, Amedzekor Kafui wrote: --snip-- Anyway what I am aiming at is to write a hack for quintum gateways so that Quintums sending cisco type accounting packets can use the schema provided by Peter Nixon in src/billing. Has anyone written this already? Thanks. Kafui Amedzekor. Did anyone ever write a Quintum VSA hack? Regards -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ___ Do you Yahoo!? Declare Yourself - Register online to vote today! http://vote.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __ Do you Yahoo!? Yahoo! Mail - You care about security. So do we. http://promotions.yahoo.com/new_mail - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
cisco_vsa_hack
Hello, This question is for Thomas J (off course all answers are welcome) the author of cisco_vsa_hack in rlm_preprocess.c. Can you explain this line in your code? vendorcode = (vp-attribute 16); /* HACK! */ I was wondering if you couldn't compare the vp-attribute == 9 straightway instead of the hack. Also why this further check in the code if ((vp-attribute 0x) == 1) Anyway what I am aiming at is to write a hack for quintum gateways so that Quintums sending cisco type accounting packets can use the schema provided by Peter Nixon in src/billing. Has anyone written this already? Thanks. Kafui Amedzekor. __ Do you Yahoo!? New and Improved Yahoo! Mail - Send 10MB messages! http://promotions.yahoo.com/new_mail - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: cisco_vsa_hack
Amedzekor Kafui [EMAIL PROTECTED] wrote: Can you explain this line in your code? vendorcode = (vp-attribute 16); /* HACK! */ I was wondering if you couldn't compare the vp-attribute == 9 straightway instead of the hack. The vendor codes vendor-specific attribute numbers are packed into vp-attribute. See src/lib/radius.c for packing/unpacking code. See also src/lib/dict.c Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: We are willing to pay to get support on this (Was: Cisco-AVPair cisco_vsa_hack())
On Tue, Apr 20, 2004 at 12:30:54PM +0200, Jérôme Warnier wrote:
Le mar 20/04/2004 à 00:47, Paul Hampson a écrit :
On Sun, Apr 18, 2004 at 03:51:12PM +0200, Jerome Warnier wrote:
On Sun, 2004-04-18 at 15:13, Paul Hampson wrote:
On Sun, Apr 18, 2004 at 12:33:53PM +0200, Jerome Warnier wrote:
On Sun, 2004-04-18 at 05:43, Paul Hampson wrote:
On Sat, Apr 17, 2004 at 11:41:27PM +0200, Jerome Warnier wrote:
On Sat, 2004-04-17 at 06:02, Paul Hampson wrote:
On Fri, Apr 16, 2004 at 09:55:01PM +0200, Jerome Warnier wrote:
On Fri, 2004-04-16 at 20:42, Alan DeKok wrote:
?ISO-8859-1?Q?J=E9r=F4me?= Warnier [EMAIL PROTECTED] wrote:
...
Try the latest CVS snapshot, it may work better there.
And you have of course to use dh_perl in debian/rules to substitute the
${perl:Depends}. I suggest the following (not tested):
dh_perl -p freeradius-dialupadmin dialup_admin/bin
I think I'll make that a Recommends, not a Depends... Unless those perl
scripts are vital to the operation of most of dialup-admin? A brief
examination of the README suggest they're all optional extras, that I
(for example) would never run. (We don't do bandwidth tracking/billing,
and I don't want it whacking data from my radacct table.)
There is also a crontab file in this directory, which uses most the
other scripts there, but needs fixing before being (optionally) put into
/etc/cron.d. This file needs fixing anyway, because it currently points
to /usr/local/...
I'll put this in as an example, I think. However, I will have to add a
sed script to fix the paths in the crontab.
Yes, put it in /usr/share/doc/freeradius-dialupadmin/examples instead of
the current directory.
Do you want me to write the sed script?
Something like this should do the trick:
sed -i 's/usr/local/dialup\_admin_/usr/share/dialupadmin'
dialup_admin.cron
I did indeed use something like that, thankyou. Building overnight, if
it worked I'll commit to CVS in the morning.
--
Paul TBBle Hampson, on an alternate email client.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Cisco-AVPair cisco_vsa_hack()
Hi,
As Alan DeKok advised us, we upgraded to the latest CVS snapshot on
17/04/2004... and now it's working fine, thanks :-)
Pascal Polleunus wrote:
Hi,
We are trying to do VoIP accounting using Cisco material but we've
problems with the attribute Cisco-AVPair.
We've defined with_cisco_vsa_hack = yes, and it works for other
Cisco's VSA.
In rlm_preprocess.c, in cisco_vsa_hack(), I found:
/*
* Cisco-AVPair's get packed as:
*
* Cisco-AVPair = h323-foo-bar = baz
*
* which makes sense only if you're a lunatic.
* This code looks for the attribute named inside
* of the string, and if it exists, adds it as a new
* attribute.
*/
Does that well mean that %{h323-foo-bar} will be available (if defined
in a dictionary)?
So if we receive the following:
Cisco-AVPair = h323-incoming-conf-id=...
Cisco-AVPair = gw-rxd-cdn=ton:0,npi:1,#:0123456789
Cisco-AVPair = in-carrier-id=1
%{h323-incoming-conf-id}, %{gw-rxd-cdn} and %{in-carrier-id} should be
available, right?
h323-incoming-conf-id is already defined in dictionary.cisco, so we
didn't redefined it, but for the others, we've defined a dictionary
containing the following entries:
ATTRIBUTE in-carrier-id 224 string Cisco
ATTRIBUTE out-carrier-id 225 string Cisco
ATTRIBUTE gw-rxd-cdn 226 string Cisco
And we tried also with the following entries instead:
VALUE Cisco-AVPairin-carrier-id 224
VALUE Cisco-AVPairout-carrier-id 225
VALUE Cisco-AVPairgw-rxd-cdn 226
But, %{Cisco-AVPair} contains only the first attribute received
(h323-incoming-conf-id=...) and %{gw-rxd-cdn} and %{in-carrier-id}
contain nothing.
Does someone know how to solve that?
Thanks for your help,
Pascal Polleunus
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: We are willing to pay to get support on this (Was: Cisco-AVPair cisco_vsa_hack())
Jerome Warnier wrote: ...snip... There is also a crontab file in this directory, which uses most the other scripts there, but needs fixing before being (optionally) put into /etc/cron.d. This file needs fixing anyway, because it currently points to /usr/local/... Did not use any yet, so you are probably right. Maybe a debconf question would be useful (setup crontab for accounting or not)? Don't forget it just applies to Dialup Admin, which many people won't probably bother installing anyway. The default install directory for dialup admin is /usr/local/... If you are installing in other locations, then write a sed script to update the command locations. -- Guy Fraser - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: We are willing to pay to get support on this (Was: Cisco-AVPair cisco_vsa_hack())
On Mon, 2004-04-19 at 17:13, Guy Fraser wrote: Jerome Warnier wrote: ...snip... There is also a crontab file in this directory, which uses most the other scripts there, but needs fixing before being (optionally) put into /etc/cron.d. This file needs fixing anyway, because it currently points to /usr/local/... Did not use any yet, so you are probably right. Maybe a debconf question would be useful (setup crontab for accounting or not)? Don't forget it just applies to Dialup Admin, which many people won't probably bother installing anyway. The default install directory for dialup admin is /usr/local/... If you are installing in other locations, then write a sed script to update the command locations. I know, we were discussing about the Debian package, which installs by default into /usr, not /usr/local. Anyway, don't mind if you do not use the current Debian packages. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: We are willing to pay to get support on this (Was: Cisco-AVPair cisco_vsa_hack())
On Sun, Apr 18, 2004 at 03:51:12PM +0200, Jerome Warnier wrote:
On Sun, 2004-04-18 at 15:13, Paul Hampson wrote:
On Sun, Apr 18, 2004 at 12:33:53PM +0200, Jerome Warnier wrote:
On Sun, 2004-04-18 at 05:43, Paul Hampson wrote:
On Sat, Apr 17, 2004 at 11:41:27PM +0200, Jerome Warnier wrote:
On Sat, 2004-04-17 at 06:02, Paul Hampson wrote:
On Fri, Apr 16, 2004 at 09:55:01PM +0200, Jerome Warnier wrote:
On Fri, 2004-04-16 at 20:42, Alan DeKok wrote:
?ISO-8859-1?Q?J=E9r=F4me?= Warnier [EMAIL PROTECTED] wrote:
...
Try the latest CVS snapshot, it may work better there.
And you have of course to use dh_perl in debian/rules to substitute the
${perl:Depends}. I suggest the following (not tested):
dh_perl -p freeradius-dialupadmin dialup_admin/bin
I think I'll make that a Recommends, not a Depends... Unless those perl
scripts are vital to the operation of most of dialup-admin? A brief
examination of the README suggest they're all optional extras, that I
(for example) would never run. (We don't do bandwidth tracking/billing,
and I don't want it whacking data from my radacct table.)
There is also a crontab file in this directory, which uses most the
other scripts there, but needs fixing before being (optionally) put into
/etc/cron.d. This file needs fixing anyway, because it currently points
to /usr/local/...
I'll put this in as an example, I think. However, I will have to add a
sed script to fix the paths in the crontab.
Did not use any yet, so you are probably right. Maybe a debconf question
would be useful (setup crontab for accounting or not)?
Don't forget it just applies to Dialup Admin, which many people won't
probably bother installing anyway.
Bleh, no good. Conditionally installing a file into /etc/ is a pain
under Debian Policy. I'll have to make a note in the README.Debian
about that.
--
Paul TBBle Hampson, on an alternate email client.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: We are willing to pay to get support on this (Was: Cisco-AVPair cisco_vsa_hack())
On Sun, 2004-04-18 at 05:43, Paul Hampson wrote:
On Sat, Apr 17, 2004 at 11:41:27PM +0200, Jerome Warnier wrote:
On Sat, 2004-04-17 at 06:02, Paul Hampson wrote:
On Fri, Apr 16, 2004 at 09:55:01PM +0200, Jerome Warnier wrote:
On Fri, 2004-04-16 at 20:42, Alan DeKok wrote:
?ISO-8859-1?Q?J=E9r=F4me?= Warnier [EMAIL PROTECTED] wrote:
...
Try the latest CVS snapshot, it may work better there.
My first remarks:
I was surprised to find the dialup-admin as a Debian package. Though, it
is completely broken. The files are not where they should, and are not
even copied at all.
$ dpkg -L freeradius-dialupadmin
/.
/usr
/usr/share
/usr/share/dialupadmin
/usr/share/doc
/usr/share/doc/dialupadmin
/usr/share/doc/freeradius-dialupadmin
/usr/share/doc/freeradius-dialupadmin/README.Debian
/usr/share/doc/freeradius-dialupadmin/copyright
/usr/share/doc/freeradius-dialupadmin/changelog.gz
/usr/share/doc/freeradius-dialupadmin/README.gz
/usr/share/doc/freeradius-dialupadmin/changelog.Debian.gz
/dialup_admin
/dialup_admin/conf
/dialup_admin/conf/accounting.attrs
/dialup_admin/conf/admin.conf
/dialup_admin/conf/auth.request
/dialup_admin/conf/captions.conf
/dialup_admin/conf/config.php3
/dialup_admin/conf/CVS
/dialup_admin/conf/default.vals
/dialup_admin/conf/extra.ldap-attrmap
/dialup_admin/conf/naslist.conf
/dialup_admin/conf/sql.attrmap
/dialup_admin/conf/sql.attrs
/dialup_admin/conf/user_edit.attrs
/dialup_admin/conf/username.mappings
/dialup_admin/bin
/dialup_admin/Changelog
/dialup_admin/CVS
/dialup_admin/doc
/dialup_admin/htdocs
/dialup_admin/html
/dialup_admin/lib
/dialup_admin/README
/dialup_admin/sql
/etc
/etc/freeradius-dialupadmin
/usr/share/dialupadmin/conf
Hmm, that's interesting. I _thought_ it worked when I did it here...
I'll have another look now, and see what I did wrong... The directories
are right, the files just didn't go _into_ them. :-(
I must have been looking none to closely... it was indeed incorrect
here.
The /dialup_admin/* are wrong, indeed.
OK, that was easily fixed. Replace dh_installdirs with dh_install. I've
just comitted that to CVS.
I guess the dependencies for the freeradius-dialupadmin package are not
correct either. Here is a suggested fix for it:
Depends: apache | httpd, php4 | php4-cgi, php4-pear, ${perl:Depends}
And you have of course to use dh_perl in debian/rules to substitute the
${perl:Depends}. I suggest the following (not tested):
dh_perl -p freeradius-dialupadmin dialup_admin/bin
I'm going to submit a patch soon because I'd like to see how this one
runs.
I'm still struggling with this, but have yet fixed several things.
--
Jerome Warnier [EMAIL PROTECTED]
BeezNest s.a r.l.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: We are willing to pay to get support on this (Was: Cisco-AVPair cisco_vsa_hack())
On Sun, 2004-04-18 at 12:33, Jerome Warnier wrote:
On Sun, 2004-04-18 at 05:43, Paul Hampson wrote:
On Sat, Apr 17, 2004 at 11:41:27PM +0200, Jerome Warnier wrote:
On Sat, 2004-04-17 at 06:02, Paul Hampson wrote:
On Fri, Apr 16, 2004 at 09:55:01PM +0200, Jerome Warnier wrote:
On Fri, 2004-04-16 at 20:42, Alan DeKok wrote:
?ISO-8859-1?Q?J=E9r=F4me?= Warnier [EMAIL PROTECTED] wrote:
...
Try the latest CVS snapshot, it may work better there.
My first remarks:
I was surprised to find the dialup-admin as a Debian package. Though, it
is completely broken. The files are not where they should, and are not
even copied at all.
$ dpkg -L freeradius-dialupadmin
/.
/usr
/usr/share
/usr/share/dialupadmin
/usr/share/doc
/usr/share/doc/dialupadmin
/usr/share/doc/freeradius-dialupadmin
/usr/share/doc/freeradius-dialupadmin/README.Debian
/usr/share/doc/freeradius-dialupadmin/copyright
/usr/share/doc/freeradius-dialupadmin/changelog.gz
/usr/share/doc/freeradius-dialupadmin/README.gz
/usr/share/doc/freeradius-dialupadmin/changelog.Debian.gz
/dialup_admin
/dialup_admin/conf
/dialup_admin/conf/accounting.attrs
/dialup_admin/conf/admin.conf
/dialup_admin/conf/auth.request
/dialup_admin/conf/captions.conf
/dialup_admin/conf/config.php3
/dialup_admin/conf/CVS
/dialup_admin/conf/default.vals
/dialup_admin/conf/extra.ldap-attrmap
/dialup_admin/conf/naslist.conf
/dialup_admin/conf/sql.attrmap
/dialup_admin/conf/sql.attrs
/dialup_admin/conf/user_edit.attrs
/dialup_admin/conf/username.mappings
/dialup_admin/bin
/dialup_admin/Changelog
/dialup_admin/CVS
/dialup_admin/doc
/dialup_admin/htdocs
/dialup_admin/html
/dialup_admin/lib
/dialup_admin/README
/dialup_admin/sql
/etc
/etc/freeradius-dialupadmin
/usr/share/dialupadmin/conf
Hmm, that's interesting. I _thought_ it worked when I did it here...
I'll have another look now, and see what I did wrong... The directories
are right, the files just didn't go _into_ them. :-(
I must have been looking none to closely... it was indeed incorrect
here.
The /dialup_admin/* are wrong, indeed.
OK, that was easily fixed. Replace dh_installdirs with dh_install. I've
just comitted that to CVS.
I guess the dependencies for the freeradius-dialupadmin package are not
correct either. Here is a suggested fix for it:
Depends: apache | httpd, php4 | php4-cgi, php4-pear, ${perl:Depends}
And you have of course to use dh_perl in debian/rules to substitute the
${perl:Depends}. I suggest the following (not tested):
dh_perl -p freeradius-dialupadmin dialup_admin/bin
Please find here-attached my fixed debian/rules.
It seems to work, though there is still a problem because conf gets
copied *under* /etc/freeradius-dialupadmin.
[EMAIL PROTECTED]:~/debian$ dpkg -L freeradius-dialupadmin
/.
/etc
/etc/freeradius-dialupadmin
/etc/freeradius-dialupadmin/conf
/etc/freeradius-dialupadmin/conf/accounting.attrs
/etc/freeradius-dialupadmin/conf/admin.conf
/etc/freeradius-dialupadmin/conf/auth.request
/etc/freeradius-dialupadmin/conf/captions.conf
/etc/freeradius-dialupadmin/conf/config.php3
/etc/freeradius-dialupadmin/conf/default.vals
/etc/freeradius-dialupadmin/conf/extra.ldap-attrmap
/etc/freeradius-dialupadmin/conf/naslist.conf
/etc/freeradius-dialupadmin/conf/sql.attrmap
/etc/freeradius-dialupadmin/conf/sql.attrs
/etc/freeradius-dialupadmin/conf/user_edit.attrs
/etc/freeradius-dialupadmin/conf/username.mappings
/usr
/usr/share
/usr/share/dialupadmin
/usr/share/dialupadmin/bin
/usr/share/dialupadmin/bin/clean_radacct
/usr/share/dialupadmin/bin/dialup_admin.cron
/usr/share/dialupadmin/bin/log_badlogins
/usr/share/dialupadmin/bin/monthly_tot_stats
/usr/share/dialupadmin/bin/showmodem
/usr/share/dialupadmin/bin/snmpfinger
/usr/share/dialupadmin/bin/tot_stats
/usr/share/dialupadmin/bin/truncate_radacct
/usr/share/dialupadmin/doc
/usr/share/dialupadmin/doc/AUTHORS
/usr/share/dialupadmin/doc/FAQ
/usr/share/dialupadmin/doc/HELP_WANTED
/usr/share/dialupadmin/doc/HOWTO
/usr/share/dialupadmin/doc/TODO
/usr/share/dialupadmin/htdocs
/usr/share/dialupadmin/htdocs/about.html
/usr/share/dialupadmin/htdocs/accounting.php3
/usr/share/dialupadmin/htdocs/badusers.php3
/usr/share/dialupadmin/htdocs/buttons.php3
/usr/share/dialupadmin/htdocs/clear_opensessions.php3
/usr/share/dialupadmin/htdocs/content.html
/usr/share/dialupadmin/htdocs/failed_logins.php3
/usr/share/dialupadmin/htdocs/find.php3
/usr/share/dialupadmin/htdocs/group_admin.php3
/usr/share/dialupadmin/htdocs/group_new.php3
/usr/share/dialupadmin/htdocs/index.html
/usr/share/dialupadmin/htdocs/login_time_create.php3
/usr/share/dialupadmin/htdocs/password.php3
/usr/share/dialupadmin/htdocs/password_generator.jsc
/usr/share/dialupadmin/htdocs/session_destroy.php3
Re: We are willing to pay to get support on this (Was: Cisco-AVPair cisco_vsa_hack())
[...] Please find here-attached my fixed debian/rules. It seems to work, though there is still a problem because conf gets copied *under* /etc/freeradius-dialupadmin. Fixed in this release, see attached rules. [EMAIL PROTECTED]:~/debian$ dpkg -L freeradius-dialupadmin /. /etc /etc/freeradius-dialupadmin /etc/freeradius-dialupadmin/accounting.attrs /etc/freeradius-dialupadmin/admin.conf /etc/freeradius-dialupadmin/auth.request /etc/freeradius-dialupadmin/captions.conf /etc/freeradius-dialupadmin/config.php3 /etc/freeradius-dialupadmin/default.vals /etc/freeradius-dialupadmin/extra.ldap-attrmap /etc/freeradius-dialupadmin/naslist.conf /etc/freeradius-dialupadmin/sql.attrmap /etc/freeradius-dialupadmin/sql.attrs /etc/freeradius-dialupadmin/user_edit.attrs /etc/freeradius-dialupadmin/username.mappings /usr /usr/share /usr/share/dialupadmin /usr/share/dialupadmin/bin /usr/share/dialupadmin/bin/clean_radacct /usr/share/dialupadmin/bin/dialup_admin.cron /usr/share/dialupadmin/bin/log_badlogins /usr/share/dialupadmin/bin/monthly_tot_stats /usr/share/dialupadmin/bin/showmodem /usr/share/dialupadmin/bin/snmpfinger /usr/share/dialupadmin/bin/tot_stats /usr/share/dialupadmin/bin/truncate_radacct /usr/share/dialupadmin/doc /usr/share/dialupadmin/doc/AUTHORS /usr/share/dialupadmin/doc/FAQ /usr/share/dialupadmin/doc/HELP_WANTED /usr/share/dialupadmin/doc/HOWTO /usr/share/dialupadmin/doc/TODO /usr/share/dialupadmin/htdocs /usr/share/dialupadmin/htdocs/about.html /usr/share/dialupadmin/htdocs/accounting.php3 /usr/share/dialupadmin/htdocs/badusers.php3 /usr/share/dialupadmin/htdocs/buttons.php3 /usr/share/dialupadmin/htdocs/clear_opensessions.php3 /usr/share/dialupadmin/htdocs/content.html /usr/share/dialupadmin/htdocs/failed_logins.php3 /usr/share/dialupadmin/htdocs/find.php3 /usr/share/dialupadmin/htdocs/group_admin.php3 /usr/share/dialupadmin/htdocs/group_new.php3 /usr/share/dialupadmin/htdocs/index.html /usr/share/dialupadmin/htdocs/login_time_create.php3 /usr/share/dialupadmin/htdocs/password.php3 /usr/share/dialupadmin/htdocs/password_generator.jsc /usr/share/dialupadmin/htdocs/session_destroy.php3 /usr/share/dialupadmin/htdocs/show_groups.php3 /usr/share/dialupadmin/htdocs/stats.php3 /usr/share/dialupadmin/htdocs/style.css /usr/share/dialupadmin/htdocs/help /usr/share/dialupadmin/htdocs/help/auth_type_help.html /usr/share/dialupadmin/htdocs/help/badusers_help.html /usr/share/dialupadmin/htdocs/help/callback_id_help.html /usr/share/dialupadmin/htdocs/help/callback_number_help.html /usr/share/dialupadmin/htdocs/help/class_help.html /usr/share/dialupadmin/htdocs/help/dialup_access_help.html /usr/share/dialupadmin/htdocs/help/expiration_help.html /usr/share/dialupadmin/htdocs/help/filter_id_help.html /usr/share/dialupadmin/htdocs/help/framed_compression_help.html /usr/share/dialupadmin/htdocs/help/framed_ip_address_help.html /usr/share/dialupadmin/htdocs/help/framed_ip_netmask_help.html /usr/share/dialupadmin/htdocs/help/framed_mtu_help.html /usr/share/dialupadmin/htdocs/help/framed_protocol_help.html /usr/share/dialupadmin/htdocs/help/help.php3 /usr/share/dialupadmin/htdocs/help/idle_timeout_help.html /usr/share/dialupadmin/htdocs/help/lock_message_help.html /usr/share/dialupadmin/htdocs/help/login_time_help.html /usr/share/dialupadmin/htdocs/help/port_limit_help.html /usr/share/dialupadmin/htdocs/help/reply_message_help.html /usr/share/dialupadmin/htdocs/help/service_type_help.html /usr/share/dialupadmin/htdocs/help/session_timeout_help.html /usr/share/dialupadmin/htdocs/help/simultaneous_use_help.html /usr/share/dialupadmin/htdocs/help/nomadix /usr/share/dialupadmin/htdocs/help/nomadix/nomadix_bw_down_help.html /usr/share/dialupadmin/htdocs/help/nomadix/nomadix_bw_up_help.html /usr/share/dialupadmin/htdocs/help/nomadix/nomadix_config_url_help.html /usr/share/dialupadmin/htdocs/help/nomadix/nomadix_endofsession_help.html /usr/share/dialupadmin/htdocs/help/nomadix/nomadix_expiration_help.html /usr/share/dialupadmin/htdocs/help/nomadix/nomadix_ip_upsell_help.html /usr/share/dialupadmin/htdocs/help/nomadix/nomadix_logoff_url_help.html /usr/share/dialupadmin/htdocs/help/nomadix/nomadix_maxbytesdown_help.html /usr/share/dialupadmin/htdocs/help/nomadix/nomadix_maxbytesup_help.html /usr/share/dialupadmin/htdocs/help/nomadix/nomadix_subnet_help.html /usr/share/dialupadmin/htdocs/help/nomadix/nomadix_url_redirection_help.html /usr/share/dialupadmin/htdocs/user_accounting.php3 /usr/share/dialupadmin/htdocs/user_admin.php3 /usr/share/dialupadmin/htdocs/user_delete.php3 /usr/share/dialupadmin/htdocs/user_edit.php3 /usr/share/dialupadmin/htdocs/user_finger.php3 /usr/share/dialupadmin/htdocs/user_info.php3 /usr/share/dialupadmin/htdocs/user_new.php3 /usr/share/dialupadmin/htdocs/user_state.php3 /usr/share/dialupadmin/htdocs/user_stats.php3 /usr/share/dialupadmin/htdocs/user_test.php3 /usr/share/dialupadmin/htdocs/images /usr/share/dialupadmin/htdocs/images/arrow.gif /usr/share/dialupadmin/htdocs/images/bg.gif
Re: We are willing to pay to get support on this (Was: Cisco-AVPair cisco_vsa_hack())
[...] The debian packages should also probably depend upon libsnmp5-dev|libsnmp4.2-dev instead of libsnmp4.2-dev only. Is there any reason why not to do it like that? -- Jerome Warnier [EMAIL PROTECTED] BeezNest s.a r.l. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: We are willing to pay to get support on this (Was: Cisco-AVPair cisco_vsa_hack())
On Sun, 2004-04-18 at 15:01, Paul Hampson wrote: On Sun, Apr 18, 2004 at 02:34:44PM +0200, Jerome Warnier wrote: The debian packages should also probably depend upon libsnmp5-dev|libsnmp4.2-dev instead of libsnmp4.2-dev only. Is there any reason why not to do it like that? Last time I checked, they didn't compile with libsnmp5-dev. It seems it does now. How could I check? -- Jerome Warnier [EMAIL PROTECTED] BeezNest s.a r.l. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: We are willing to pay to get support on this (Was: Cisco-AVPair cisco_vsa_hack())
On Sat, 2004-04-17 at 06:02, Paul Hampson wrote: On Fri, Apr 16, 2004 at 09:55:01PM +0200, Jerome Warnier wrote: On Fri, 2004-04-16 at 20:42, Alan DeKok wrote: ?ISO-8859-1?Q?J=E9r=F4me?= Warnier [EMAIL PROTECTED] wrote: ... Try the latest CVS snapshot, it may work better there. My first remarks: I was surprised to find the dialup-admin as a Debian package. Though, it is completely broken. The files are not where they should, and are not even copied at all. $ dpkg -L freeradius-dialupadmin /. /usr /usr/share /usr/share/dialupadmin /usr/share/doc /usr/share/doc/dialupadmin /usr/share/doc/freeradius-dialupadmin /usr/share/doc/freeradius-dialupadmin/README.Debian /usr/share/doc/freeradius-dialupadmin/copyright /usr/share/doc/freeradius-dialupadmin/changelog.gz /usr/share/doc/freeradius-dialupadmin/README.gz /usr/share/doc/freeradius-dialupadmin/changelog.Debian.gz /dialup_admin /dialup_admin/conf /dialup_admin/conf/accounting.attrs /dialup_admin/conf/admin.conf /dialup_admin/conf/auth.request /dialup_admin/conf/captions.conf /dialup_admin/conf/config.php3 /dialup_admin/conf/CVS /dialup_admin/conf/default.vals /dialup_admin/conf/extra.ldap-attrmap /dialup_admin/conf/naslist.conf /dialup_admin/conf/sql.attrmap /dialup_admin/conf/sql.attrs /dialup_admin/conf/user_edit.attrs /dialup_admin/conf/username.mappings /dialup_admin/bin /dialup_admin/Changelog /dialup_admin/CVS /dialup_admin/doc /dialup_admin/htdocs /dialup_admin/html /dialup_admin/lib /dialup_admin/README /dialup_admin/sql /etc /etc/freeradius-dialupadmin /usr/share/dialupadmin/conf Hmm, that's interesting. I _thought_ it worked when I did it here... I'll have another look now, and see what I did wrong... The directories are right, the files just didn't go _into_ them. :-( The /dialup_admin/* are wrong, indeed. I'm going to submit a patch soon because I'd like to see how this one runs. I'm still struggling with this, but have yet fixed several things. -- Jerome Warnier [EMAIL PROTECTED] BeezNest s.a r.l. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
We are willing to pay to get support on this (Was: Cisco-AVPair cisco_vsa_hack())
Le lun 12/04/2004 à 17:37, Pascal Polleunus a écrit :
Hi,
We are trying to do VoIP accounting using Cisco material but we've
problems with the attribute Cisco-AVPair.
We've defined with_cisco_vsa_hack = yes, and it works for other
Cisco's VSA.
In rlm_preprocess.c, in cisco_vsa_hack(), I found:
/*
* Cisco-AVPair's get packed as:
*
* Cisco-AVPair = h323-foo-bar = baz
*
* which makes sense only if you're a lunatic.
* This code looks for the attribute named inside
* of the string, and if it exists, adds it as a new
* attribute.
*/
Does that well mean that %{h323-foo-bar} will be available (if defined
in a dictionary)?
So if we receive the following:
Cisco-AVPair = h323-incoming-conf-id=...
Cisco-AVPair = gw-rxd-cdn=ton:0,npi:1,#:0123456789
Cisco-AVPair = in-carrier-id=1
%{h323-incoming-conf-id}, %{gw-rxd-cdn} and %{in-carrier-id} should be
available, right?
h323-incoming-conf-id is already defined in dictionary.cisco, so we
didn't redefined it, but for the others, we've defined a dictionary
containing the following entries:
ATTRIBUTE in-carrier-id 224 string Cisco
ATTRIBUTE out-carrier-id 225 string Cisco
ATTRIBUTE gw-rxd-cdn 226 string Cisco
And we tried also with the following entries instead:
VALUE Cisco-AVPairin-carrier-id 224
VALUE Cisco-AVPairout-carrier-id 225
VALUE Cisco-AVPairgw-rxd-cdn 226
But, %{Cisco-AVPair} contains only the first attribute received
(h323-incoming-conf-id=...) and %{gw-rxd-cdn} and %{in-carrier-id}
contain nothing.
Does someone know how to solve that?
Thanks for your help,
Pascal Polleunus
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--
Jérôme Warnier
Consultant
BeezNest
http://beeznest.net
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: We are willing to pay to get support on this (Was: Cisco-AVPair cisco_vsa_hack())
?ISO-8859-1?Q?J=E9r=F4me?= Warnier [EMAIL PROTECTED] wrote: ... Try the latest CVS snapshot, it may work better there. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: We are willing to pay to get support on this (Was: Cisco-AVPair cisco_vsa_hack())
On Fri, 2004-04-16 at 20:42, Alan DeKok wrote: ?ISO-8859-1?Q?J=E9r=F4me?= Warnier [EMAIL PROTECTED] wrote: ... Try the latest CVS snapshot, it may work better there. My first remarks: I was surprised to find the dialup-admin as a Debian package. Though, it is completely broken. The files are not where they should, and are not even copied at all. $ dpkg -L freeradius-dialupadmin /. /usr /usr/share /usr/share/dialupadmin /usr/share/doc /usr/share/doc/dialupadmin /usr/share/doc/freeradius-dialupadmin /usr/share/doc/freeradius-dialupadmin/README.Debian /usr/share/doc/freeradius-dialupadmin/copyright /usr/share/doc/freeradius-dialupadmin/changelog.gz /usr/share/doc/freeradius-dialupadmin/README.gz /usr/share/doc/freeradius-dialupadmin/changelog.Debian.gz /dialup_admin /dialup_admin/conf /dialup_admin/conf/accounting.attrs /dialup_admin/conf/admin.conf /dialup_admin/conf/auth.request /dialup_admin/conf/captions.conf /dialup_admin/conf/config.php3 /dialup_admin/conf/CVS /dialup_admin/conf/default.vals /dialup_admin/conf/extra.ldap-attrmap /dialup_admin/conf/naslist.conf /dialup_admin/conf/sql.attrmap /dialup_admin/conf/sql.attrs /dialup_admin/conf/user_edit.attrs /dialup_admin/conf/username.mappings /dialup_admin/bin /dialup_admin/Changelog /dialup_admin/CVS /dialup_admin/doc /dialup_admin/htdocs /dialup_admin/html /dialup_admin/lib /dialup_admin/README /dialup_admin/sql /etc /etc/freeradius-dialupadmin /usr/share/dialupadmin/conf I'm going to submit a patch soon because I'd like to see how this one runs. Thanks for your help, we'll let you know. Alan DeKok. -- Jerome Warnier [EMAIL PROTECTED] BeezNest s.a r.l. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: We are willing to pay to get support on this (Was: Cisco-AVPair cisco_vsa_hack())
On Fri, Apr 16, 2004 at 09:55:01PM +0200, Jerome Warnier wrote: On Fri, 2004-04-16 at 20:42, Alan DeKok wrote: ?ISO-8859-1?Q?J=E9r=F4me?= Warnier [EMAIL PROTECTED] wrote: ... Try the latest CVS snapshot, it may work better there. My first remarks: I was surprised to find the dialup-admin as a Debian package. Though, it is completely broken. The files are not where they should, and are not even copied at all. $ dpkg -L freeradius-dialupadmin /. /usr /usr/share /usr/share/dialupadmin /usr/share/doc /usr/share/doc/dialupadmin /usr/share/doc/freeradius-dialupadmin /usr/share/doc/freeradius-dialupadmin/README.Debian /usr/share/doc/freeradius-dialupadmin/copyright /usr/share/doc/freeradius-dialupadmin/changelog.gz /usr/share/doc/freeradius-dialupadmin/README.gz /usr/share/doc/freeradius-dialupadmin/changelog.Debian.gz /dialup_admin /dialup_admin/conf /dialup_admin/conf/accounting.attrs /dialup_admin/conf/admin.conf /dialup_admin/conf/auth.request /dialup_admin/conf/captions.conf /dialup_admin/conf/config.php3 /dialup_admin/conf/CVS /dialup_admin/conf/default.vals /dialup_admin/conf/extra.ldap-attrmap /dialup_admin/conf/naslist.conf /dialup_admin/conf/sql.attrmap /dialup_admin/conf/sql.attrs /dialup_admin/conf/user_edit.attrs /dialup_admin/conf/username.mappings /dialup_admin/bin /dialup_admin/Changelog /dialup_admin/CVS /dialup_admin/doc /dialup_admin/htdocs /dialup_admin/html /dialup_admin/lib /dialup_admin/README /dialup_admin/sql /etc /etc/freeradius-dialupadmin /usr/share/dialupadmin/conf Hmm, that's interesting. I _thought_ it worked when I did it here... I'll have another look now, and see what I did wrong... The directories are right, the files just didn't go _into_ them. :-( I'm going to submit a patch soon because I'd like to see how this one runs. -- Paul TBBle Hampson, on an alternate email client. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
