adding accounting attribute

2008-01-21 Thread Alexander Serkin
Hi, FreeRadius Users. Could somebody tell me if it's possible to add some accounting attribute depending on user's SQL group membership? For example - for all members of SQL group 'somegroupname' add: User-Category = '1' to every accounting packet. Which module should i read about more carefully?

Re: Version 2.0 is a lot closer to reality...

2007-04-04 Thread Alexander Serkin
Alan, thinking about upcoming upgrade from 1.1.5 to 2.0 i tried 2.0 with my configuration from 1.1.5. There seem to be some difference which i hope you can explain. proxy.conf configuration is realm NULL { type= radius authhost= LOCAL accthost

Re: Version 2.0 is a lot closer to reality...

2007-04-04 Thread Alexander Serkin
Arran Cudbard-Bell wrote: In 2.0 we lack the group checks: I thought group checks were slightly broken since 1.1.3 anyway if not can someone please close the bug report :) At least in 1.1.5 it doesn't fall through properly if a user belongs to multiple groups and the check items

2.0.0-pre0 Out of memory in event.c

2007-04-12 Thread Alexander Serkin
Hi. Some problems with FreeRADIUS Version 2.0.0-pre0, for host i686-pc-linux-gnu, built on Apr 12 2007 at 12:58:32 taken from cvs today: rad_recv: Access-Request packet from host 127.0.0.1 port 46565, id=8, length=95 User-Name = carta.skylink.msk.ru User-Password = cisco

sql auth problems with 2.0.0-pre

2007-04-12 Thread Alexander Serkin
Gurus, may be i'm pulling some common mistake with my configuration being tested against cvs snapshot, but no idea which one. I've an sql profile telling: some.dotted.user Cleartext-Password = cisco NAS-IP-Address =~ xxx.xxx.97.(85|86) authentication request:

Re: sql auth problems with 2.0.0-pre

2007-04-12 Thread Alexander Serkin
Arran Cudbard-Bell wrote: Alexander Serkin wrote: Gurus, may be i'm pulling some common mistake with my configuration being tested against cvs snapshot, but no idea which one. I've an sql profile telling: some.dotted.user Cleartext-Password = cisco NAS-IP-Address =~ xxx.xxx

Re: sql auth problems with 2.0.0-pre

2007-04-12 Thread Alexander Serkin
Milan Holub wrote: Hi Alexander, On Thu, Apr 12, 2007 at 02:52:49PM +0400, Alexander Serkin wrote: Doesn't matter, Arran. Tried User-Password and '==' with the same result: module sqlauth returns ok but then: rad_check_password: Found Auth-Type Local auth: type Local auth

Re: sql auth problems with 2.0.0-pre

2007-04-12 Thread Alexander Serkin
Alexander Serkin wrote: Gurus, may be i'm pulling some common mistake with my configuration being tested against cvs snapshot, but no idea which one. I've an sql profile telling: some.dotted.user Cleartext-Password = cisco NAS-IP-Address =~ xxx.xxx.97.(85|86) The problem

Re: sql auth problems with 2.0.0-pre

2007-04-12 Thread Alexander Serkin
Alan DeKok wrote: Alexander Serkin wrote: The problem is that regular expression check of NAS-IP-Address =~ xxx.xxx.97.(85|86) does not work. In the CVS head? Yes i played with CVS head today. Checked huge amount of regexp variants - none worked. -- Sincerely Yours, Alexander - List

Re: sql auth problems with 2.0.0-pre

2007-04-28 Thread Alexander Serkin
Hi, got cvs tree today. The read_groups configuration check is not included in rlm_sql.c for some reason. Adding: {read_groups, PW_TYPE_BOOLEAN, offsetof(SQL_CONFIG,read_groups), NULL, yes}, into static const CONF_PARSER module_config[] = { .. } helped a lot. Now my config

rlm_sql.c in 2.0.0-pre2

2007-06-18 Thread Alexander Serkin
Hi, Is the read_groups configuration paramter reading strings intentionally removed from rlm_sql.c? Why? Let me suggest a patch: *** rlm_sql.c.orig 2007-05-15 14:10:35.0 +0400 --- rlm_sql.c 2007-06-18 19:46:59.0 +0400 *** *** 57,62 --- 57,64

Re: rlm_sql.c in 2.0.0-pre2

2007-06-20 Thread Alexander Serkin
Arran Cudbard-Bell wrote: Alan DeKok wrote: I don't think it was ever added. I'm not sure the functionality is even tested. i.e. Does it work? Alan DeKok. Read Groups in SQL ? Yes, very very well tested. It's horribly broken in 1.*.* though, or at least it was for me.

Re: rlm_ippool and NAS-Port missing in access-request

2004-06-17 Thread Alexander Serkin
Kostas Kalevras wrote: On Thu, 17 Jun 2004, Pate Mark-marpate1 wrote: rlm_ippool needs the nas-port-id to work. In the future the search key will be configurable. For now you could configure your NAS to also send the accounting-session-id in the access-request: radius-server attribute 44

Re: rlm_ippool and NAS-Port missing in access-request

2004-06-17 Thread Alexander Serkin
Alexander Serkin wrote: ... Thank you, Kostas. that's what i was looking for. Can you give an example of attr_rewrite block to copy attributes? The explanations in radiusd.conf are not quite clear for me :) My acct-session-id comes with value D47761550033DDC3 for example. I've also copied CLID

accounting_update_query_alt ?

2004-06-30 Thread Alexander Serkin
Hello. I wonder if there're any plans to add the accounting_update_query_alt to the sql configuration with INSERT? If not, i'll try myself. It is possible that the accounting update packet comes and AAA server did not see start record for it. The session is not registered in this case. --

NULL file in logdir

2004-07-01 Thread Alexander Serkin
What means file named NULL in logdir? It's created by radiusd after start and is filled continuously by my users' names, NAS addresses and framed-ip-addresses divided by ':'. Radius (0.9.3) is built with mysql support (authacct). Found nothing in docs and mail archive. -- Alexander - List

Re: NULL file in logdir

2004-07-01 Thread Alexander Serkin
oops. sorry, this is wtmp file when its name is not defined in config. Alexander Serkin wrote: What means file named NULL in logdir? It's created by radiusd after start and is filled continuously by my users' names, NAS addresses and framed-ip-addresses divided by ':'. Radius (0.9.3) is built

event-timestamp 3gpp2 attribute 41

2004-07-02 Thread Alexander Serkin
disappeared in P.S0001-B (http://www.3gpp2.org/Public_html/specs/P.S0001-B_v1.0.pdf), but was defined in P.S0001-A-1 (http://www.3gpp2.org/Public_html/specs/P.S0001-A-1.pdf). -- Sincerely Yours, Alexander Serkin, Moscow Cellular Communications ph. +7(095)7952089 fa. +7(095)7952084 - List info/subscribe

Re: freeradius 1.0.0 crashes on oracle errors

2004-08-31 Thread Alexander Serkin
Hello. I see a lot of 1401 errors in radiusd.log. But they does not lead to core dumps. Radiusd performs correctly. These errors come when users supply incorrect usernames those are longer than the username column size. We work on SPARC Solaris 2.8, gcc 3.3, Oracle 9.2.0.5, freeradius-1.0.0..

Re: rlm_ippool and NAS-Port missing in access-request

2004-09-09 Thread Alexander Serkin
I can live without it. Already. -- Alexander Alan DeKok wrote: [EMAIL PROTECTED] wrote: Well, this exactly what I'd like to do: to build a one and to get it working... But I need some help from developers. So who wants cooperate ? Any help/hints are welcome

sql group checks

2004-10-15 Thread Alexander Serkin
== 19 blackholed Auth-Type Reject:= In my case user is accepted though he is a member of blackholed group with Auth-Type - Reject. -- Sincerely Yours, Alexander Serkin, Skylink, Moscow - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: sql group checks

2004-10-15 Thread Alexander Serkin
Kostas Kalevras wrote: On Fri, 15 Oct 2004, Alexander Serkin wrote: Hi. could anybody explain me what exactly FR does with group checks working with SQL (Oracle in my case) ? I see group_membership_query in sql.conf, but i do not see that FR uses it in debug: group_membership_query is used

replication with radrelay: Failed to aquire filelock

2004-09-30 Thread Alexander Serkin
radrelay and radiusd processes are bumped with each other on detail file lock? Is it possible to avoid this if so? -- Sincerely Yours, Alexander Serkin, Skylink, Moscow - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: replication with radrelay: Failed to aquire filelock

2004-09-30 Thread Alexander Serkin
Kostas Kalevras wrote: On Thu, 30 Sep 2004, Alexander Serkin wrote: Hello again. While replicating accounting info to secondary server with radrelay i see the following message in radius.log: Thu Sep 30 10:48:51 2004 : Error: rlm_detail: Failed to aquire filelock for /opt/fr/radacct/detail

radrelay segmentation failt

2004-10-29 Thread Alexander Serkin
in main (argc=-4262312, argv=0x13470) at radrelay.c:1003 The machine is SunOS abs-test 5.8 Generic_108528-29 sun4u sparc SUNW,Sun-Fire-V240 The same result is on SunOS mcc-aaa2 5.8 Generic_108528-27 sun4u sparc SUNW,Ultra-60 What can be wrong? -- Sincerely Yours, Alexander Serkin, Skylink, Moscow, ph

problem building from CVS

2004-11-01 Thread Alexander Serkin
-test 5.8 Generic_108528-29 sun4u sparc SUNW,Sun-Fire-V240 SMClibtool libtool (sparc) 1.5 What is it? -- Sincerely Yours, Alexander Serkin, Skylink, Moscow - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Radrelay segfault with 1.1.0-Pre0 and Mandrake 10 (2.4 Kernel)

2004-11-02 Thread Alexander Serkin
Exact the same problem on sunOS-5.8. Alan said the fix for some kind of radrelay segfault will be in v1.0.2. The snapshot is of 1.1.0pre0, but no fixes for radrelay. Such alternative to Proxy-to-Realm removed in 1.0.0 is not good, yeah? We'll try to be patient and wait for some time... Daniel W.

Re: Cisco-AVPair Help (help!!) Part 1

2004-11-05 Thread Alexander Serkin
in 1 seconds... --- Walking the entire request list --- Cleaning up request 2 ID 58 with timestamp 418a7c77 Nothing to do. Sleeping until we see a request. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Sincerely Yours, Alexander Serkin, Skylink, Moscow, ph. +7

Re: Cisco-AVPair Help (help!!) Part 1

2004-11-05 Thread Alexander Serkin
Alexander Serkin wrote: BTW - does mysql permit : in column names ? oops. stupid question. ignore it. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Oracle cursor leak

2004-11-11 Thread Alexander Serkin
apply patch taken from the web: patching file src/modules/rlm_sql/drivers/rlm_sql_oracle/sql_oracle.c patch: malformed patch at line 60: @@ -311,9 +328,11 @@ -- Sincerely Yours, Alexander Serkin, Skylink, Moscow - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

max_servers num_sql_socks

2004-11-11 Thread Alexander Serkin
about 1200 maximum active sessions with accounting update period of 10 minutes. -- Sincerely Yours, Alexander Serkin, Skylink, Moscow - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: max_servers num_sql_socks

2004-11-11 Thread Alexander Serkin
advice will be appretiated. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Sincerely Yours, Alexander Serkin, Skylink, Moscow /* * Function to convert unix timestamp into local date format */ CREATE OR REPLACE FUNCTION from_unixtime (unix_time

how many records in radacct

2004-11-22 Thread Alexander Serkin
Hello, how many records in radacct table do you manage to keep, guys? I see that radius stops working properly after about 15 accounting records in Oracle (9.2.0.4) database or ~3 in PostgreSQL 7.4.6. After that amount accounting records are not written into table and FR (v1.0.1) claims

Re: how many records in radacct

2004-11-23 Thread Alexander Serkin
Thank you all for the hints. Really stupid was it not to create index on acctuniqueid. And 'explain' is my best friend ad finem seculorum. -- Alexander Kostas Kalevras wrote: On Mon, 22 Nov 2004, Alexander Serkin wrote: Hello, how many records in radacct table do you manage to keep, guys? I see

Re: Index on MCC/MNC

2004-12-07 Thread Alexander Serkin
Phil -- Sincerely Yours, Alexander Serkin, Skylink, Moscow - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Index on MCC/MNC

2004-12-07 Thread Alexander Serkin
attribute 18, but I am unsure on how to configure the check on this parameter Phil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alexander Serkin Sent: 07 December 2004 14:55 To: [EMAIL PROTECTED] Subject: Re: Index on MCC/MNC Phil Reilly wrote: Hi there, Does

Re: Configuration sample CDMA-EVDO

2008-12-12 Thread Alexander Serkin
Hi, Aldo. There's nothing special for freeradius providing AAA services for cdma ev-do. We're running CDMA (1xRTT, 1xEV-DO rev0/revA) network with ~25k peak online users on two servers running FR. Drop me a message if you're interested in details. -- Alexander Aldo wrote: Hello, could please

Access request with no User-Name

2005-02-01 Thread Alexander Serkin
Hi. I need a solution to deal with access requests not containing User-Name attribute. The request is as below: 3GPP2-Correlation-Id = 768E Calling-Station-Id = 25009769921 Framed-Protocol = PPP User-Password = secret Service-Type = Framed NAS-IP-Address = a.b.c.d Acct-Session-Id =

radius behavior when DB is down

2005-04-11 Thread Alexander Serkin
hi. Can anybody explain me the scenario of rlm_sql_... module actions while DB is inaccessible? I mean what happens whith daemon when 1) it starts and encounters that its sql store is down. 2) the db goes down while radius daemon is running. Does it make an attempt to reconnect or it dies too? Is

Re: radius behavior when DB is down

2005-04-12 Thread Alexander Serkin
Alan DeKok wrote: Alexander Serkin [EMAIL PROTECTED] wrote: Can anybody explain me the scenario of rlm_sql_... module actions while DB is inaccessible? I mean what happens whith daemon when 1) it starts and encounters that its sql store is down. Have you tried checking this yourself? It's

strange behavior with two sql instances

2005-05-03 Thread Alexander Serkin
Hello all. I've some strange radius behavior using two sql databases. I built two databases - one on the radius server itself for auth and another on separate db server for accounting. Splitted the sql.conf into sqlauth and sqlacct parts. And made changes in radiusd.conf: $INCLUDE

Re: Event-Timestamp attribute

2005-05-18 Thread Alexander Serkin
Ok. RFC says exactly that The Value field is four octets encoding an unsigned integer with the number of seconds since January 1, 1970 00:00 UTC. I did not think radiusd rewrites unix timestamp into date. Just because previous radius i was using used to put the timestamp into accounting as

Re: Event-Timestamp attribute

2005-05-19 Thread Alexander Serkin
Alexander Serkin wrote: Edit oraclesql.conf to use the query you want. That's why the queries are configurable. Shure i will. I've seen them occasionally :-) The question was to guys who may did the trick already. Because in Oracle You can parse the string May 18 2005 12:08:18 +0400 easily

Re: Event-Timestamp attribute

2005-05-20 Thread Alexander Serkin
Alan DeKok wrote: Alexander Serkin [EMAIL PROTECTED] wrote: No. It takes the time that the packet was received. The Event-Timestamp attribute MAY be a lie. oops. When and why? Have not seen a lie from cisco NASes yet. Set the time wrong on the Cisco box, then look at Event-Timestamp. Set

Re: Release date for 1.1.0/CVS?

2005-08-19 Thread Alexander Serkin
/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Sincerely Yours, Alexander Serkin, Skylink, Moscow - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

dictionary.3gpp2 note

2006-01-18 Thread Alexander Serkin
hi, According to http://www.3gpp2.org/Public_html/specs/P.S0001-B_v2.0_041004.pdf (page 65) the attribute 41 (3GPP2-R-P-Session-Id) in dictionary.3gpp2 should be integer, not string. And i'd remove the comment '#' on it in the file. Thanks, -- als - List info/subscribe/unsubscribe? See

regular expressions parsing changed in 1.1.2 ?

2006-05-30 Thread Alexander Serkin
Hi, I recently built 1.1.2 and it claims about regular expression in huntgroups: /opt/fr/etc/raddb/huntgroups[87]: Parse error (check) for entry UNKNOWN: Illegal regular expression in attribute: Calling-Station-Id: ?, *, +, or { } not preceded by valid regular expression The string contains:

mysql 5.0.22 with fr 1.1.2

2006-06-01 Thread Alexander Serkin
while trying to compile the fr 1.1.2 with mysql 5.0.22 i got the following with rlm_sq_mysql configure: checking for mysql_config... yes checking for mysql_init in -lmysqlclient (using mysql_config)... no checking for mysql_init in -lmysqlclient... no configure: warning: mysql libraries not

Re: mysql 5.0.22 with fr 1.1.2

2006-06-01 Thread Alexander Serkin
Oh, sorry for flood, found the solution in the archives. http://lists.freeradius.org/mailman/htdig/freeradius-users/2003-April/017789.html [EMAIL PROTECTED] пишет: Hi, while trying to compile the fr 1.1.2 with mysql 5.0.22 i got the following with rlm_sq_mysql configure: you did do

using CLID

2004-06-10 Thread Alexander Serkin
to another operator's AAA server. -- Sincerely Yours, Alexander Serkin, Moscow Cellular Communications ph. +7(095)7952089 fa. +7(095)7952084 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: using CLID

2004-06-11 Thread Alexander Serkin
Framed-IP-Address = 1.2.3.4 In my confguration after the first deafult matches, user is authorized, but his group attributes (placed in second DEFAILT instance) are ignored. Alan DeKok wrote: Alexander Serkin [EMAIL PROTECTED] wrote: Is there some way

copying accounting

2004-06-15 Thread Alexander Serkin
Is it possible to keep accounting for several realms locally along with sending it to third party AAA server? I.e. i need to write accounting for customers visiting us from another network, but also send it to their home AAA server. -- SY, Alexander Serkin, Moscow Cellular Communications ph. +7

Re: copying accounting

2004-06-15 Thread Alexander Serkin
Replicate-To-Realm seem to do what i want. Copying accounting matching the check item in acct_users to the realm specified while storing this accounting locally. Am i right? Alexander Serkin wrote: Is it possible to keep accounting for several realms locally along with sending it to third party

Re: copying accounting

2004-06-15 Thread Alexander Serkin
radrelay seem to do more than i need. Actually the task is to copy accounting for specific CLID of roaming users to their home AAA server. radrelay works directly with detail file which contains not only roaming CLIDs. Alan DeKok wrote: Alexander Serkin [EMAIL PROTECTED] wrote: Replicate

Re: copying accounting

2004-06-16 Thread Alexander Serkin
. And monitor their states. Not good, is it? Alan DeKok wrote: Alexander Serkin [EMAIL PROTECTED] wrote: radrelay seem to do more than i need. So? Replicate-To-Realm won't work. If it does, you're using an older version of the server, and that feature will STOP working when you upgrade. Don't use

rlm_ippool and NAS-Port missing in access-request

2004-06-17 Thread Alexander Serkin
hello again. The problem is that Cisco PDSN (NAS for 3G CDMA networks) does not send any NAS-Port attributes in its Access-Request: RADIUS(0022F081): Send to unknown id 21797/240 212.119.96.62:1812, Access-Request, len 131 RADIUS: authenticator C4 5F D4 5B EB C5 68 69 - 16 78 96 A7 5B A7 69 C3

Re: rlm_ippool and NAS-Port missing in access-request

2004-06-17 Thread Alexander Serkin
There is a command. Something like radius-server attribute nas-port, but it does not work for now. The IOS Release is the last for this kind of hardware. And i'll definitely open a case with Cisco regarding this problem. But this is not a subject for the freeradius-users. I wonder if i could fix

Re: rlm_ippool and NAS-Port missing in access-request

2004-06-17 Thread Alexander Serkin
Pate Mark-marpate1 wrote: I used only NAS-PortNAS-IP-Address with radclient and it seem enough to allocate an IP from the pool: Sending Access-Request of id 69 to 127.0.0.1:1812 User-Name = [EMAIL PROTECTED] User-Password = xx Calling-Station-Id = 25009702749 Framed-Protocol = PPP

FR-1.1.2 dies with error

2006-08-03 Thread Alexander Serkin
Hi all. We have some trouble with fr-1.1.2 Oracle-9.2.0.6 Solaris 9. The process dies periodically with the error: Thu Aug 3 14:27:43 2006 : Error: Assertion failed in request_list.c, line 1012 FR is built with the following configuration: ./configure \ --with-ltdl-lib=libltdl \

Re: FR-1.1.2 dies with error

2006-08-04 Thread Alexander Serkin
Alan DeKok пишет: It's probably because your DB is slow. See the logs for messages about unresponsive child. The code path to the assertion is taken only when the request has been marked done, but there is still a child thread blocked, and working on it. Either fix the DB, or delete the

Re: FR-1.1.2 dies with error

2006-08-06 Thread Alexander Serkin
Laker Netman wrote: How large a DB is this? And what type of link is there between FR and the DB? It's about 36 million records since april 2005. Unless there are, literally, (tens of) thousands of records and/or a *slow* link (think dial-up) and/or ancient hardware there should be some

Re: FR-1.1.2 dies with error

2006-08-14 Thread Alexander Serkin
Hi all, Alan DeKok wrote: Alexander Serkin [EMAIL PROTECTED] wrote: Do you mean just comment out line 1012 in request_list.c ? Yes. I think i'll try this first because speeding up DB is not a trivial task by now. But it's the real source of the problem... I'm still trying

Re: FR-1.1.2 dies with error

2006-08-15 Thread Alexander Serkin
Alan DeKok wrote: Alexander Serkin [EMAIL PROTECTED] wrote: I'm still trying to investigate the problem with one of my AAA servers. It's a problem with the DB, not with the server. I understand this, Alan. My experiments with hiding assertion strings in request_list.c came into failure

Re: FR-1.1.2 dies with error

2006-08-16 Thread Alexander Serkin
Alan DeKok wrote: Alexander Serkin [EMAIL PROTECTED] wrote: And i feel that Oracle is not good production server for radius accounting. Or the DB structure is not optimal for our application. I know of Oracle installations with 400k users. And the default schema works with installations

Re: FR-1.1.2 dies with error

2006-08-16 Thread Alexander Serkin
Nicolas Baradakis wrote: Alexander Serkin wrote: And i feel that Oracle is not good production server for radius accounting. Or the DB structure is not optimal for our application. Does anybody in the list use the FROracle for the systems serving about 4500 simultaneous connections? It's

Oracle is not supported by radsqlrelay?

2006-08-16 Thread Alexander Serkin
Alexander Serkin wrote: Nicolas Baradakis wrote: Maybe you could use radsqlrelay for accounting data, so FreeRADIUS doesn't interact with the database anymore. See the manpages for rlm_sql_log(5) and radsqlrelay(8) for more details. didn't think about this yet. Is it possible to run

Re: Oracle is not supported by radsqlrelay?

2006-08-16 Thread Alexander Serkin
Nicolas Baradakis wrote: radsqlrelay was added in version 1.1.0 and since then it was never changed. (you can check the CVS log if you want) Yes. i was wrong. In my case i've just fed sqllog to sqlplus utility. Finally radsqlrelay works for me with oracle too after patching 2 strings as you

Re: FR-1.1.2 dies with error

2006-08-16 Thread Alexander Serkin
Alan DeKok wrote: Alexander Serkin [EMAIL PROTECTED] wrote: I know of Oracle installations with 400k users. And the default schema works with installations of millions of users. do you mean 400k active simultaneous connections? And do they use accounting updates (Interim-Update records

Re: Oracle is not supported by radsqlrelay?

2006-08-16 Thread Alexander Serkin
Nicolas Baradakis wrote: Alexander Serkin wrote: Finally radsqlrelay works for me with oracle too after patching 2 strings as you said. Please create a patch with diff -u radsqlrelay.orig radsqlrelay and post it to the list. I'll add it in version 1.1.3. Here it is: --- radsqlrelay.orig

rlm_perl link error

2006-09-18 Thread Alexander Serkin
Hi, i'm getting the following error while building rlm_perl module: make[6]: Entering directory `/opt/fr/src/freeradius-1.1.3/src/modules/rlm_perl' /opt/fr/src/freeradius-1.1.3/libtool --mode=link gcc -release 1.1.3 \ -module -export-dynamic -o rlm_perl.la \ -rpath /opt/fr/lib

FR-1.1.3 on solaris10 strange things

2006-11-02 Thread Alexander Serkin
Hi. We have strange behaviour on sparc solaris 10 server with fr-1.1.3 installed: without any visible reason the radiusd process goes to almost 100% CPU usage for 3-5 minutes. Then it comes back to normal state again (less than 1% CPU). Visually the 100% CPU load does not impact the system

Re: FR-1.1.3 on solaris10 strange things

2006-11-08 Thread Alexander Serkin
Alan DeKok wrote: Alexander Serkin [EMAIL PROTECTED] wrote: We have strange behaviour on sparc solaris 10 server with fr-1.1.3 installed: without any visible reason the radiusd process goes to almost 100% CPU usage for 3-5 minutes. Then it comes back to normal state again (less than 1% CPU

Re: FR-1.1.3 on solaris10 strange things

2006-11-13 Thread Alexander Serkin
Alan DeKok пишет: Alexander Serkin [EMAIL PROTECTED] wrote: May be someone could give an advice how to debug the problem while the server will not be in production? Attach to it with gdb, and see what it's doing. Got some debugs on this. The problem does not depend on solaris version

Re: FR-1.1.3 on solaris10 strange things

2006-11-14 Thread Alexander Serkin
Alexander Serkin пишет: Alan DeKok пишет: Alexander Serkin [EMAIL PROTECTED] wrote: May be someone could give an advice how to debug the problem while the server will not be in production? Attach to it with gdb, and see what it's doing. Got some debugs on this. The problem does

Re: FR-1.1.3 on solaris10 strange things

2006-11-14 Thread Alexander Serkin
Alexander Serkin wrote: Alexander Serkin wrote: ... After that the srings Walking/Waking rapidly appear during dead_time configured in proxy.conf and at the same time the process takes about 50% of CPU on slow netra 1120 (2x440MHz) and up to 99% on Netra-240 (1x1GHz). After dead_time we see

Re: FR-1.1.3 on solaris10 strange things

2006-11-14 Thread Alexander Serkin
Sorry, sorry, sorry. It's all my fault. Proxy server instead of proxy server in proxy.conf. So it did not retries and set retry_delay to 0 and so on... -- Sincerely Yours, Alexander - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

new radrelay features

2006-11-21 Thread Alexander Serkin
Hi, According to the docs on 2.0.0 pre-release do i understand right that to proxy accounting requests i should set up radiusd.conf to put accounting into detail file and set up radrelay.conf to proxy requests to another servers? What confuses me is that both radiusd.conf and radrelay.conf

configuring groups in sql tables

2006-11-27 Thread Alexander Serkin
Hi, Wther i'm missing something in docs or it is impossible to do more than one groupcheck for the same username by sql. I have two groups which should be authorized differently - group1: DEFAULT Huntgroup-Name == MSK, Realm == domain.com, Auth-Type := Accept Service-Type =

configuring groups in sql tables

2006-12-14 Thread Alexander Serkin
-User, Tunnel-Type = L2TP, Tunnel-Server-Endpoint = 2.2.2.2, Cisco-AVpair += vpdn:l2tp-tunnel-password=secret2 and so on ? Alexander Serkin wrote: Hi, Wther i'm missing something in docs or it is impossible to do more than one groupcheck for the same username by sql. I

Re: configuring groups in sql tables

2006-12-14 Thread Alexander Serkin
Michael Schwartzkopff пишет: Perhaps you like to use the SQL-Group test like TestNAS1NAS-IP-Address == xxx.xxx.xxx.xxx SQL-Group == dialup, SQL-Group == adsl in the proxy config. Sorry, Michael. Did not understand this quite well. My multiple DEFAULT

dictionary.3gpp2 suggested patch

2007-01-11 Thread Alexander Serkin
Hi, freeradius-users. I'd suggest a small patch for dictionary.3gpp2. The corrections include some attributes described in latest 3gpp2 specifications, which are used in our environment. It corrects 3GPP2-R-P-Session-ID to be integer, and sets several attributes according to their description

Re: Freeradius on Sun Fire platforms

2007-01-11 Thread Alexander Serkin
[EMAIL PROTECTED] wrote: Could anyone advise whether Freeradius can be run on the below SUN Hardware/Software platform list. Many thanks in advance for the support you can provide, your help is much appreciated. Sun Fire V210UltraSPARC IIIi / Solaris 10 Java ES Sun Fire V240

Re: Cisco-AVpair rate-limit attributes

2007-01-19 Thread Alexander Serkin
satish patel wrote: Dear all i have cisco VPDN with freeradius ( 1.1.4 ) on Suse 10.2 my users connect throgh the xp client useig vpn connection and useing Internet Services but now thing is that i wann restrict user base bandwidth means i want to set bandwidth 64kbps for user1

Re: Cisco-AVpair rate-limit attributes

2007-01-19 Thread Alexander Serkin
satish patel wrote: Thanks dear now my cisco-AVPair working with users file but tell me is it work with mysql tables ? but i have notice when i set why not? 64000 then my bandwidth meter give me 500 kbps u r passing is it any issue regarding rate-limit ??? I'm

Re: Message in radius.log

2007-02-01 Thread Alexander Serkin
Jean Frontin wrote: Hello, Here is two lines of the radius.log. Everything in tables looks like okay. Where must I search, I don't understand the first line below. So, why is the second line good ? Perhaps your username is in users file and is not in database? What does mean cli at the