Re: [RADIATOR] Mod Authby SQL Query

2024-01-08 Thread Hugh Irvine via radiator
Hello Gabe - Nice to hear from you - best wishes for 2024. What you show below looks correct. And as a general rule it is a good idea to run separate instances of Radiator for authentication and accounting, one running on port numbers 1645, 1812 for authentication and the other on 1646,

Re: [RADIATOR] AuthBy OpenID or SAML ?

2023-09-15 Thread Hugh Irvine via radiator
Hi Patrik - There is an AuthSAML2.pm module in the Radius directory, so you can use an AuthBy SAML2 in your configuration. There does not appear to be anything about it in the manual however. regards Hugh > On 15 Sep 2023, at 16:50, Patrik Forsberg via radiator > wrote: > > Hello, >

Re: [RADIATOR] Store 'LogFormat' in varaible

2023-09-14 Thread Hugh Irvine via radiator
Hello Jan - You could also try this: DefineFormattedGlobalVar LogFormatDefinition [%%Y-%%m-%%dT%%H:%%M:%%S.%%s] [%%O] [%%3] [%%1] %%2 The first % character is used to escape the second one. Let me know if it works - I haven't tested it. regards Hugh On 14/9/2023 22:41, Jan Bělina

Re: [RADIATOR] Store 'LogFormat' in varaible

2023-09-14 Thread Hugh Irvine via radiator
Hello Jan - H - yes I see. Well, you can always use a single hook defined in a file I suppose.     .     LogFormatHook file:"%D/yourformat.pl"     . regards Hugh On 14/9/2023 22:41, Jan Bělina wrote: In that variant, special formaters are translated at compile time and

Re: [RADIATOR] Store 'LogFormat' in varaible

2023-09-14 Thread Hugh Irvine via radiator
Of course that should be:     .     LogFormat %{GlobalVar:LogFormatDefinition}     . On 14/9/2023 20:54, Hugh Irvine wrote: Hello Jan - Try this instead: DefineFormattedGlobalVar LogFormatDefinition [%Y-%m-%dT%H:%M:%S.%s] [%O] [%3] [%1] %2 Then in your LogFile:    

Re: [RADIATOR] Store 'LogFormat' in varaible

2023-09-14 Thread Hugh Irvine via radiator
Hello Jan - Try this instead: DefineFormattedGlobalVar LogFormatDefinition [%Y-%m-%dT%H:%M:%S.%s] [%O] [%3] [%1] %2 Then in your LogFile:     .     LogFormat %{LogFormatDefinition}     . Please let us know your results. regards Hugh On 14/9/2023 19:11, Jan Bělina wrote:

Re: [RADIATOR] Store 'LogFormat' in varaible

2023-09-14 Thread Hugh Irvine via radiator
Hello Jan - LogFormat %{GlobalVar:} But if they all have the same LogFormat, why not use an Identifier and have just one ? regards Hugh On 14/9/2023 18:48, Jan Bělina via radiator wrote: Hi all, does anyone have an idea, how to store LogFormat in a variable? I have many

Re: [RADIATOR] UNS: Basic Question on 802.1X

2023-08-25 Thread Hugh Irvine via radiator
Hello Roberto - Yes, loadbalancers usually employ some method to determine the “aliveness” of the configured targets. I’ve seen cases where RADIUS requests are used, and yes Access-Reject is an indication of “aliveness”. regards Hugh > On 26 Aug 2023, at 01:53, Ullfig, Roberto Alfredo via

Re: [RADIATOR] UNS: Basic Question on 802.1X

2023-08-24 Thread Hugh Irvine via radiator
Hello Roberto - As EAP is a sequence of RADIUS requests, anything that interrupts the sequence will result in a failure. Ie. dropped packets, incorrect load-balancing, or even just out of sequence requests will cause failure. This being the case it is entirely possible that the same

Re: [RADIATOR] Blacklist issue

2023-08-22 Thread Hugh Irvine via radiator
Hi Patrik - You should build a little test rig in the lab and make sure that this will do what you expect. cheers Hugh On 22/8/2023 23:03, Patrik Forsberg via radiator wrote: Hey  So, if I understand this correctly, I can combine “NoDefault” with “Blacklist” ? If so.. will it block

Re: [RADIATOR] Blacklist issue

2023-08-22 Thread Hugh Irvine via radiator
Hey Patrik - Very good to hear from old friends! As it happens, this is very much by design. Radiator has a "special" user called DEFAULT as described in the manual: 3.32.13. NoDefault Normally if Radiator searches for a user in the database and either does not find one, or finds one but

Re: [RADIATOR] (no subject)

2023-05-24 Thread Hugh Irvine via radiator
Hello Greg - Yes this sounds good - well done. Thanks for letting us know. regards Hugh > On 25 May 2023, at 12:53, Greg Haverkamp via radiator > wrote: > > Thanks, Heikki. This was enough to set me on the right path. > > > On Mon, May 22, 2023 at 4:20 PM Heikki Vatiainen via radiator

Re: [RADIATOR] AuthBy DUO - Identifier clause issue?

2023-02-08 Thread Hugh Irvine via radiator
Hi again - When dealing with complex configuration files, Include is your friend. I generally define all of my Client clauses in one file, all of my AuthBy’s in another file, etc. I put the Include’s at the beginning of the configuration file and really only have the Handler’s there. It

Re: [RADIATOR] Add atttributes to request. How?

2023-02-08 Thread Hugh Irvine via radiator
Hello Pavel - Yes I see your point. Unfortunately, AuthBy FILE doesn’t have a way to do this, unlike AuthBy SQL for example. However, here is a simple way to do it: AuthByPolicy ContinueWhileAccept Filename %D/users.test1