Re: ippool-dhcp and Oracle

2013-03-25 Thread Arran Cudbard-Bell
I am not sure what is happening here so I will have to do some reading. Fixed. Git pull. -Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

radius.log on DB

2013-03-25 Thread AemNet
Hi everybody is there any way log the requests for the radius in a DB like MySQL? In other words is possible to put radius.log entry in a DB without use the local system syslog daemon? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

change Access-Reject output of module with unlang

2013-03-25 Thread Mehdi Ravanbakhsh
Dear ALL How change Access-Reject output of module with unlang in sites-enable to Access-Accept and do some update control ? I can not find what is the replay attribute of reject or accept to check in If condition and change them in update replay. and Do we have any reference for such

Re: change Access-Reject output of module with unlang

2013-03-25 Thread A . L . M . Buxey
Hi, How change Access-Reject output of module with unlang in sites-enable to Access-Accept and do some update control ? what method? you cant just 'Access-Accept' an EAP method that relies on the agreement between client and authentication server for the cipher keys etc alan - List

Re: radius.log on DB

2013-03-25 Thread Olivier Beytrison
On 25.03.2013 09:26, AemNet wrote: Hi everybody is there any way log the requests for the radius in a DB like MySQL? In other words is possible to put radius.log entry in a DB without use the local system syslog daemon? This is not possible directly from freeradius. What you can do, is

Re: change Access-Reject output of module with unlang

2013-03-25 Thread Phil Mayers
On 03/25/2013 09:14 AM, Mehdi Ravanbakhsh wrote: Dear ALL How change Access-Reject output of module with unlang in sites-enable to Access-Accept and do some update control ? I don't think you can. And as AlanB says, it probably won't work anyway - you can't force accept on

Re: radius.log on DB

2013-03-25 Thread AemNet
On 25/03/2013 11:05, Olivier Beytrison wrote: This is not possible directly from freeradius. What you can do, is tell FreeRadius to log to your syslog deamon (like syslog-ng) and then tell syslog-ng to write the log within an INSERT statement for your database. Then you can send this to your

Re: radius.log on DB

2013-03-25 Thread Alex Sharaz
I the past I've tail'd a log file ( this was for squid and not freeradius) and piped that into a perl script that would then write things into a database but it's a lot easier using syslog talking to an rsyslog back end database that writes things into a database for you. Rgds alex On 25 Mar

Re: radius.log on DB

2013-03-25 Thread A . L . M . Buxey
Hi, Thank you for the answer and for the links Olivier, but I prefer don't use the syslog system if it's possilbe. Do you think it's possible instead to use a script (perl/bash anything else) after the request arrive and put it in a DB? the SQL module has the psotauth table... you could

Re: radius.log on DB

2013-03-25 Thread Chris Knipe
Perl File::Tail works very well for things like this... On Mon, Mar 25, 2013 at 12:45 PM, AemNet sysadmin-aem...@aemnet.it wrote: On 25/03/2013 11:05, Olivier Beytrison wrote: This is not possible directly from freeradius. What you can do, is tell FreeRadius to log to your syslog deamon

Re: radius.log on DB

2013-03-25 Thread Olivier Beytrison
On 25.03.2013 11:45, AemNet wrote: Thank you for the answer and for the links Olivier, but I prefer don't use the syslog system if it's possilbe. Do you think it's possible instead to use a script (perl/bash anything else) after the request arrive and put it in a DB? You could make a perl

Re: change Access-Reject output of module with unlang

2013-03-25 Thread Mehdi Ravanbakhsh
You means that if modules such as SQL module in session section return reject i can not change that to accept and then update some control attribute ? and can i change sql module ?( i know SQL.conf but in that file i just can change the query ) Best regards. On Mon, Mar 25, 2013 at 2:45

Wrong destination port in reply to DHCP relay

2013-03-25 Thread Бен Томпсон
Hello Everyone I have an issue with an installation of FreeRADIUS 2.2.0 configured for DHCP, and I am seeing a problem where FreeRADIUS is replying to the wrong port on the DHCP relay. The request comes in like this :- Received DHCP-Discover of id de6dc6f2 from 10.77.1.254:68 to 10.0.0.1:67

Re: ldap connection status

2013-03-25 Thread Chitrang Srivastava
Hi, Wiki page of fail-over suggest authorize { preprocess redundant { sql1 sql2 notfound = return } files } I am trying to do similar but radius is giving error group { redundant { ldap_primary

Re: change Access-Reject output of module with unlang

2013-03-25 Thread Phil Mayers
On 25/03/13 11:16, Mehdi Ravanbakhsh wrote: You means that if modules such as SQL module in session section return reject i can not change that to accept and then update some control attribute ? I don't think so. and can i change sql module ?( i know SQL.conf but in that file i just can

Re: ldap connection status

2013-03-25 Thread Olivier Beytrison
On 25.03.2013 13:00, Chitrang Srivastava wrote: I am trying to do similar but radius is giving error group { redundant { ldap_primary fail = return -*Entry with no value is invalid* } if(fail){

Re: ldap connection status

2013-03-25 Thread Chitrang Srivastava
Even with ldap_secondary I get same error redundant { ldap_primary ldap_secondary fail = 1 } On Mon, Mar 25, 2013 at 5:57 PM, Olivier Beytrison oliv...@heliosnet.orgwrote: On 25.03.2013 13:00, Chitrang

Re: ldap connection status

2013-03-25 Thread Alan DeKok
Chitrang Srivastava wrote: Even with ldap_secondary I get same error redundant { ldap_primary ldap_secondary fail = 1 } Read doc/configurable_failover, and man unlang. This is documented. Yout

Re: ldap connection status

2013-03-25 Thread Chitrang Srivastava
This is what wiki page says to do authorize { preprocess redundant { sql1 sql2 notfound = return } files } I am trying similar stuff On Mon, Mar 25, 2013 at 7:13 PM, Alan DeKok al...@deployingradius.comwrote: Chitrang Srivastava wrote: Even with

Re: ippool-dhcp and Oracle

2013-03-25 Thread Arran Cudbard-Bell
On 25 Mar 2013, at 02:57, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: I am not sure what is happening here so I will have to do some reading. Fixed. Git pull. Or would have been if git push hadn't hung... Sorry GitHub has been really flakey lately. -Arran - List

Re: change Access-Reject output of module with unlang

2013-03-25 Thread Mehdi Ravanbakhsh
thanks On Mon, Mar 25, 2013 at 4:40 PM, Phil Mayers p.may...@imperial.ac.ukwrote: On 25/03/13 11:16, Mehdi Ravanbakhsh wrote: You means that if modules such as SQL module in session section return reject i can not change that to accept and then update some control attribute ? I don't

Re: ldap connection status

2013-03-25 Thread Chitrang Srivastava
Something like this seems to be working group *{* *fail =1 - is this OK ?* redundant { ldap_primary ldap_secondary } *}* if(fail){ files_local } else { files

Update reply to DHCP-Ack

2013-03-25 Thread Leo Combes
I have a small problem that I do not know how to solve. Freeradius works correctly as DHCP server delivering static IPs, but I need to write a log in the PostAuth database if the transaction finalizes with a DHCP-Ack. Currently when transaction ends with a DHCP-Ack, this configuration log a

Re: ippool-dhcp and Oracle

2013-03-25 Thread Бен Томпсон
2013/3/25 Arran Cudbard-Bell a.cudba...@freeradius.org: On 25 Mar 2013, at 02:57, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: I am not sure what is happening here so I will have to do some reading. Fixed. Git pull. Or would have been if git push hadn't hung... Sorry GitHub has

[no subject]

2013-03-25 Thread Mehdi Ravanbakhsh
Hi All I am create stored persedure in postgresql database named findout_cuncurrent_session_for_a_user_result that return Deny or Permit . I need to call this persidure in session section but it not working i check all policy that be explaned in unlang man page but this cod is not working :

Re: your mail

2013-03-25 Thread A . L . M . Buxey
Hi, session { if ({%sql:select findout_cuncurrent_session_for_a_user_result ('%{User-Name}','%{NAS-IP-Address}','%{Called-Station-Id}','%{Calling-Station-Id}')} == Deny) { update control { Pool-Name := Exceeded-Concurrent-Session } } } What is the

Auth-Type krb5 not recognized by v2.1.12

2013-03-25 Thread Jaap Winius
Hi folks, Recently my server received an in-place upgrade from Debian squeeze to wheezy (still testing). Along with that, freeradius was upgraded from version 2.1.10 to 2.1.12, but as a result it no longer works. The problem is that I use DEFAULT Auth-Type = krb5 in /etc/freeradius/ users, and

unlang CONDITIONS and sql query

2013-03-25 Thread Mehdi Ravanbakhsh
Hi All I am create stored procedure in postgresql database named findout_cuncurrent_session_for_a_user_result that return Deny or Permit . I need to call this procedure in session section but it not working i check all policy that be explaned in unlang man page but this is not working :

Re: your mail

2013-03-25 Thread Mehdi Ravanbakhsh
i dont have any information in session section in radius.log just one line: # Executing section session from file /usr/local/etc/raddb/sites-enabled/default # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default On Tue, Mar 26, 2013 at 3:47 AM,