RE : RE : RE : IP Pool management and Re-authentication

2007-03-22 Thread Thibault Le Meur
> > > Thibault Le Meur wrote: > > > I've patched the radiusplugin to add Framed-IP-Address to > > the re-auth > > > request but rlm_ippool still allocates a new IP Address > > (I'm using FR > > > 1.1.4). > > > > Ok. It seems like rlm_ippool should be updated to look for > > Framed-IP-Address

RE : IP Pool management and Re-authentication

2007-03-21 Thread Thibault Le Meur
I've been using OpenVPN + Ralf's Radiusplugin for several months and recently moved away from server-side IP assignment. However, while I did use it, I found that in my configuration FreeRADIUS only assigned new IPs when the accounting for that user had stopped (ie, if it recieved a STOP packet)

Re: RE : RE : IP Pool management and Re-authentication

2007-03-21 Thread Jan Mulders
I've been using OpenVPN + Ralf's Radiusplugin for several months and recently moved away from server-side IP assignment. However, while I did use it, I found that in my configuration FreeRADIUS only assigned new IPs when the accounting for that user had stopped (ie, if it recieved a STOP packet).

RE : RE : IP Pool management and Re-authentication

2007-03-21 Thread Thibault Le Meur
> Thibault Le Meur wrote: > > I've patched the radiusplugin to add Framed-IP-Address to > the re-auth > > request but rlm_ippool still allocates a new IP Address > (I'm using FR > > 1.1.4). > > Ok. It seems like rlm_ippool should be updated to look for > Framed-IP-Address in the request.

Re: RE : IP Pool management and Re-authentication

2007-03-21 Thread Alan DeKok
Thibault Le Meur wrote: > I've patched the radiusplugin to add Framed-IP-Address to the re-auth > request but rlm_ippool still allocates a new IP Address (I'm using FR > 1.1.4). Ok. It seems like rlm_ippool should be updated to look for Framed-IP-Address in the request. That would be very us

RE : IP Pool management and Re-authentication

2007-03-21 Thread Thibault Le Meur
Hi Alan, > > > I'd like to patch the openvpn-radiusplugin so that an extra > > attribute > > > is sent in the Access-Accept packets so that FR will be able to > > > differentiate Initial and Renegociation Access-Accept > requests and > > > only assign new IP address from the pool on Initial Acce

RE : IP Pool management and Re-authentication

2007-03-20 Thread Thibault Le Meur
Thanks for your reply, > Thibault Le Meur wrote: > > Openvpn sometimes needs to renegotiate the connections and > thus sends > > authentication requests while the connection is still > active (with an > > already assigned IP address): this causes FR to assign a new IP > > address from the poo

Re: IP Pool management and Re-authentication

2007-03-20 Thread Alan DeKok
Thibault Le Meur wrote: > Openvpn sometimes needs to renegotiate the connections and thus sends > authentication requests while the connection is still active (with an > already assigned IP address): this causes FR to assign a new IP address from > the pool (which seems normal since FR has no way t