Re: (RADIATOR) two accounting start two accounting stop

2003-06-17 Thread Hugh Irvine
Hello Bon - Answers to your questions below. On Tuesday, Jun 17, 2003, at 20:12 Australia/Melbourne, Bon sy wrote: Hi Hugh, Mike, and Donald, I have a similar experience in the wireless case. Specifically, when I switched between two different authentication modes (e.g., EAP-TLS to PEAP)

Re: (RADIATOR) Problem with DateTime in Calls-table

2003-06-17 Thread Hugh Irvine
Hello Herman - Could you please send me a trace 4 debug showing what is happening? And how have you defined the column in the database? regards Hugh On Tuesday, Jun 17, 2003, at 18:31 Australia/Melbourne, Herman verschooten wrote: Hi,   I seem to have a little problem.  I notice in my

Re: (RADIATOR) How to setup muliple login tries for authentication.

2003-06-17 Thread Hugh Irvine
Hello - This is a Client and/or NAS issue, not really a radius (or Radiator) issue. In general if a NAS gets a reject it will hang up the call. regards Hugh On Wednesday, Jun 18, 2003, at 01:57 Australia/Melbourne, [EMAIL PROTECTED] wrote: Dear all Basically i want to setup so that if

Re: (RADIATOR) rewrite NAS-Port-type?

2003-06-17 Thread Hugh Irvine
Hello Craig - You can probably use a PreClientHook to do this, but you could also set up Handlers to do it as well. There are some example hooks in the file goodies/hooks.txt. regards Hugh On Wednesday, Jun 18, 2003, at 02:29 Australia/Melbourne, Craig Gittens wrote: I am trying to

Re: (RADIATOR) how to setup disconnection cause attribute

2003-06-15 Thread Hugh Irvine
Hello Talha - The disconnect cause is sent by the NAS, so you should check with your NAS vendor to ascertain to how to configure it. You can look at a trace 4 debug from Radiator to see what attributes are actually sent by the NAS. regards Hugh On Sunday, Jun 15, 2003, at 22:13

Re: (RADIATOR) query during insert data

2003-06-13 Thread Hugh Irvine
the data from mysql table rgds budi --- Hugh Irvine [EMAIL PROTECTED] wrote: Hello Budi - You should use two AuthBy SQL clauses with the AcctSQLStatement(s) in the second one. Alternatively you could possibly use a hook (there are some examples in goodies/hooks.txt). regards Hugh On Thursday

Re: (RADIATOR) Invalid object name 'inerted'

2003-06-13 Thread Hugh Irvine
Hello Michel - I don't know where the object called 'inerted' is coming from. A more complete trace 4 debug would be very useful. regards Hugh On Saturday, Jun 14, 2003, at 00:21 Australia/Melbourne, Michel Bant wrote: Hello all,   We try to write back some accounting to our SQL

Re: (RADIATOR) query during insert data

2003-06-12 Thread Hugh Irvine
) or AcctSQLStatement update set time_bill=ceiling('%{Acct-Session-Time}'/30) after that i make call for 5 seconds then check at mysql and got 0 it should be 1 any idea? rgds budi --- Hugh Irvine [EMAIL PROTECTED] wrote: Hello Boed - You should have a look at the AuthBy SQL clause in section 6.28 in the Radiator

Re: (RADIATOR) query during insert data

2003-06-12 Thread Hugh Irvine
=.08:15:43.031 UTC Thu Jun 12 2003', '=',-1),substring_index('h323-disconnect-cause=10', '=',-1),substring_index('h323-disconnect-time=.08:16:19.226 UTC Thu Jun 12 2003', '=',-1)) --- Hugh Irvine [EMAIL PROTECTED] wrote: Hello Budi - Can you please send me a copy of your configuration file

Re: (RADIATOR) How to debug ignored Access Request??

2003-06-12 Thread Hugh Irvine
Hello Erik - How nice to hear from you - I hope everything is going well. A trace 4 debug will show you every packet received on both the authentication and the accounting ports within Radiator, whether they are ultimately processed or not. If you are not seeing anything in the Radiator

Re: (RADIATOR) Ascend-Disconnect-Cause now logged as integer?

2003-06-12 Thread Hugh Irvine
Hello Karel - This is odd. Can you please send me a trace 5 debug from Radiator showing what is happening, together with the configuration file (no secrets). And can you also tell me what dictionary you are now using? regards Hugh On Friday, Jun 13, 2003, at 05:14 Australia/Melbourne, Karel

Re: (RADIATOR)

2003-06-11 Thread Hugh Irvine
Hello - I have not been able to find your records in our database. Could you please tell me the name of the registered company that has purchased this copy of Radiator and the username and password you use to access the download site? Please respond to me directly. regards Hugh On

Re: (RADIATOR) query during insert data

2003-06-11 Thread Hugh Irvine
Hello Boed - You should have a look at the AuthBy SQL clause in section 6.28 in the Radiator 3.6 reference manual. doc/ref.html You can use the AuthSQLStatement to insert during authentication and you can use the AcctSQLStatement to insert during accounting (you can also have multiple

Re: (RADIATOR) Radiator and MySQL 4

2003-06-11 Thread Hugh Irvine
Hello Bennie - As far as I know there are no incompatibilties, but you should set up a test configuration to verify correct operation with the DBI/DBD modules used by Radiator. regards Hugh On Thursday, Jun 12, 2003, at 14:21 Australia/Melbourne, Bennie Warren wrote: Is Radiator compatible

Re: (RADIATOR) install from 2.19 to 3.6?

2003-06-10 Thread Hugh Irvine
Hello Craig - There should be no problems upgrading. However I suggest you set up a test configuration first to check correct operation. And of course we are always happy to do on-site contracting. :-) regards Hugh On Wednesday, Jun 11, 2003, at 08:04 Australia/Melbourne, Craig Gittens

Re: (RADIATOR) Acct-Session-Time

2003-06-09 Thread Hugh Irvine
Hello Jack - This is a NAS configuration issue - you should check with your vendor to ascertain how to configure it. regards Hugh On Tuesday, Jun 10, 2003, at 05:58 Australia/Melbourne, jsingh wrote: Hey Guys  I am not receiving the Acct-Session-Time from the NAS when the user disconnects,

Re: (RADIATOR) modifying accounting SQL statements

2003-06-09 Thread Hugh Irvine
Hello Tunde - You should use the following syntax: 0%{Ascend-Xmit-Rate} which will insert 0 if the attribute is not present. regards Hugh On Tuesday, Jun 10, 2003, at 03:07 Australia/Melbourne, Ayotunde Itayemi wrote: Hi Hugh, Hi All,   I have some SQL accouting statement that inserts the

Re: (RADIATOR) Dictionary problem with mysql

2003-06-09 Thread Hugh Irvine
Hello Chris - How have you installed Radiator? And can you send me a copy of your configuration file and the trace 4 debug showing what is happening? You can also check the FAQ and the mailing list archive: www.open.com.au/radiator/faq.html www.open.com.au/archives/radiator regards Hugh

Re: (RADIATOR) Framed-Ip-Address in Accounting record

2003-06-09 Thread Hugh Irvine
Hello Jaws - This topic has been discussed on the mailing list previously, and I have suggested using the Class attribute to keep a second copy of the Framed-IP-Address in the accounting records. www.open.com.au/archives/radiator regards Hugh On Tuesday, Jun 10, 2003, at 12:41

Re: (RADIATOR) Radonline question

2003-06-09 Thread Hugh Irvine
Hello Lin - You can use different Session Databases for the different Handlers: SessionDatabase NULL Identifier NULLSDB /SessionDatabase SessionDatabase SQL Identifier SQLSDB /SessionDatabase Handler Realm = abc.co.nz SessionDatabase NULLSDB

Re: (RADIATOR) ISDN fails but Analog fine

2003-04-04 Thread Hugh Irvine
Hello Greg - I will need to see a hex packet dump from TCPdump together with a trace 5 debug from Radiator. regards Hugh On Friday, Apr 4, 2003, at 17:46 Australia/Melbourne, Greg 'Rafiq' Clarkson wrote: Hi all, An 'upstream' radius server is our dialup proxy and sends us access

Re: (RADIATOR) AddToReply and Hosts

2003-04-04 Thread Hugh Irvine
Hello Miko - No this won't work. As you have discovered, AddToReply and StripFromReply will not work in a Host .. clause. I think you will need to use a ReplyHook to manipulate the proxy reply. You will find some example hooks in the file goodies/hooks.txt. regards Hugh On Saturday, Apr 5,

Re: (RADIATOR) Another feature suggestion: profiles via dynamic username lookup for AuthFILE

2003-04-04 Thread Hugh Irvine
Hello Valentin - We have recently added an AuthenticateAttribute parameter which allows you to specify a different attribute to use other than User-Name, and we have also added generic caching of user database lookups. Perhaps you could check the latest Radiator 3.5 patches and let us know if

Re: (RADIATOR) Can't unzip patches on Linux or Windows?

2003-04-03 Thread Hugh Irvine
Hello John - There was a problem that is now fixed (I have just tested this). Please download the patches again. Our apologies for the inconvenience. regards Hugh On Friday, Apr 4, 2003, at 06:03 Australia/Melbourne, John McFadden wrote: Downloaded the 3.5 patches but can't use them.

Re: (RADIATOR) Anonymous rejected with PEAP and LDAP authentication

2003-04-03 Thread Hugh Irvine
Hello John - I will need to see a copy of your configuration file (no secrets) together with a complete trace 4 debug showing the entire sequence of processing including all the packet dumps. regards Hugh On Friday, Apr 4, 2003, at 02:02 Australia/Melbourne, John McFadden wrote: I'm

(RADIATOR) Re: time-based access and radiator

2003-04-03 Thread Hugh Irvine
Hello Tunde - The following lines need to be in the AuthBy SQL clause, not the Hanlder: # Adjust the time left when they log out  AccountingStopsOnly  AcctSQLStatement update SUBSCRIBERS set TIMELEFT=TIMELEFT-0%{Acct-Session-Time} \   where USERNAME='%n' and ISPREPAID = 1 regards Hugh On

Re: (RADIATOR) send accounting from radius server to a backup server

2003-04-03 Thread Hugh Irvine
Hello Jaws - In what circumstances do you want this to occur? regards Hugh On Friday, Apr 4, 2003, at 13:36 Australia/Melbourne, jaws wrote: Hi, How do i configure my radiator server and my backup rad server so that the radiator server will send accounting record to my backup rad server?

Re: (RADIATOR) send accounting from radius server to a backup server

2003-04-03 Thread Hugh Irvine
: for realtime backup of my accounting record. At 03:07 PM 4/4/2003 +1000, Hugh Irvine wrote: Hello Jaws - In what circumstances do you want this to occur? regards Hugh On Friday, Apr 4, 2003, at 13:36 Australia/Melbourne, jaws wrote: Hi, How do i configure my radiator server and my backup rad server

Re: (RADIATOR) Realms and domain

2003-04-02 Thread Hugh Irvine
Hello Jack - You can either do this with Handlers or with cascaded AuthBy clauses. If you are already using Handlers, you can do this: Handler Realm = abc.com, Client-Identifier = ...> /Handler> Handler Realm = abc.com> /Handler> If you are using Realms, you would do this: #

(RADIATOR) Fwd: Feature Suggestion: optional disabling of Tunnel-Password encryption in AuthRADIUS

2003-04-02 Thread Hugh Irvine
Hello Valentin - Many thanks for the contribution. The patch is now available on the web site. regards Hugh Begin forwarded message: From: Mike McCauley [EMAIL PROTECTED] Date: Thu Apr 3, 2003 10:12:52 Australia/Melbourne To: Hugh Irvine [EMAIL PROTECTED] Subject: Re: Fwd: Feature

(RADIATOR) Re: Values Disappearing

2003-04-01 Thread Hugh Irvine
Hello Nathan - I am surprised that you are having a problem with the AddQuery, as it is only used when an accounting start is received, and the counters should be zero. Could you please send me a complete copy of the configuration file (no secrets) together with a trace 4 debug showing

Re: (RADIATOR) MySQL accounting massively slows responses

2003-03-31 Thread Hugh Irvine
Hello Matthew - It sounds like your accounting table is much too large, causing SQL inserts to take a very long time. In general you should keep the accounting table as small as possible by archiving the older data. You should be able to see what is happening by looking at the database logs. As

Re: (RADIATOR) tigris and Accounting-Request

2003-03-31 Thread Hugh Irvine
Hello Adam - This looks very much to me like a NAS bug. If you are not using a session database at all, you can set up the following: # define NULL session database SessionDatabase NULL Identifier NULLSDB /SessionDatabase And you could also set up a special Handler to catch these

Re: (RADIATOR) Handler Acct-Status-Type=

2003-03-31 Thread Hugh Irvine
Hello Sergey - I would suggest you do this: Handler Acct-Status-Type=/Start|Stop/ /Handler Handler /Handler The Handler clause will catch everything not processed by the previous Handlers and it will be much faster. regards Hugh On Monday, Mar 31, 2003, at 20:15

Re: (RADIATOR) Radiator as a Windows Service

2003-03-30 Thread Hugh Irvine
Hello Brian - You might try installing cygwin (www.cygwin.com) to see whether tail -f works. You might also consider using an AuthLog clause (section 6.50 in the manual). regards Hugh On Sunday, Mar 30, 2003, at 11:17 Australia/Melbourne, Brian Morris wrote: Hi Mike, The ability to run

Re: (RADIATOR) Handler for capturing 151 at the end of the Called-Station-Id

2003-03-30 Thread Hugh Irvine
Hello Martin - Yes this is correct - although you should always do some testing to verify correct operation. Also note that Handlers are evaluated in the order they appear in the configuration file, so the more specific must appear before the more general. regards Hugh On Monday, Mar 31,

Re: (RADIATOR) NASIDENTIFIER in RADONLINE and Accounting Detail File

2003-03-27 Thread Hugh Irvine
Hello William - This sounds like a NAS configuration issue, as the Radiator Client clauses are based on the source IP address for a request. It seems strange that an access request would use a different source IP address compared to an accounting request from the same device. regards Hugh

Re: (RADIATOR) AuthBy External cascading accounting requests

2003-03-27 Thread Hugh Irvine
Hello Joshua - I will need to see a trace 4 debug from Radiator showing what is happening. And it would also be useful to see any debug messages from your external programs showing what the exit status is. BTW - it is often easier to use Handlers and/or hooks for this sort of thing. # define

Re: (RADIATOR) Using the Ascend-data-filter

2003-03-27 Thread Hugh Irvine
Hello John - This depends somewhat on what else you are doing in your configuration file, but if you want to add this to every session, you can do something like this: # define Realms or Handlers Realm ... AuthBy ... . AddToReply

(RADIATOR) Re: Unknown-vendor 762, size 6=

2003-03-27 Thread Hugh Irvine
is confidential or which is subject to legal professional privilege. You must not use this email or the Information in it. Any confidentiality or privilege is not waived or lost because this email has been sent to you by mistake. ? ? - Original Message - From: Hugh Irvine To: Joshua Masiko Cc

Re: (RADIATOR) PEAP Aironet 1200

2003-03-26 Thread Hugh Irvine
Hello Jack - There is an example PEAP configuration file in the Radiator 3.5 distribution in the file goodies/eap_peap.cfg. I've included a copy in this mail. regards Hugh eap_peap.cfg Description: application/applefile eap_peap.cfg Description: Binary data On Thursday, Mar 27, 2003,

Re: (RADIATOR) AuthBy LDAP bind

2003-03-25 Thread Hugh Irvine
Hello Steve - Yes. You can use the ServerChecksPassword parameter in the AuthBy LDAP2 clause. See section 6.35.17 in the Radiator 3.5 reference manual (doc/ref.html). regards Hugh On Wednesday, Mar 26, 2003, at 10:36 Australia/Melbourne, Steve Rogers wrote: Hi,   Is it possible to get

Re: (RADIATOR) Radiator Issues

2003-03-25 Thread Hugh Irvine
Hello Bret - Thanks for your mail. This problem was fixed recently, so please install the latest patches from the web site. If you still have a problem, please let me know. regards Hugh On Wednesday, Mar 26, 2003, at 08:35 Australia/Melbourne, Bret Jordan wrote: I have noticed the

(RADIATOR) Re: multiple copies of radiator running?

2003-03-25 Thread Hugh Irvine
Hello Tunde - Yes this is correct. The first line is just showing you what command RestartWrapper is running. If you need to restart Radiator, just use kill. kill 3422 RestartWrapper will then restart Radiator automatically. regards Hugh On Tuesday, Mar 25, 2003, at 22:29

Re: (RADIATOR) Radiator/Wireless/DHCP

2003-03-24 Thread Hugh Irvine
. If it's ok with you, I would not like to have this information public. I know that I have configured everything correctly. Thank you, Robert Torres Unit Computing Manager Rutgers University 973-353-1821 http://torres.rutgers.edu -Original Message- From: Hugh Irvine [mailto:[EMAIL

Re: (RADIATOR) Radiator/Wireless/DHCP

2003-03-20 Thread Hugh Irvine
Hello Robert - Thanks for sending the details. To get a trace 4 debug, add Trace 4 to the top of your configuration file (and restart). From what you are saying, the laptop appears to be successfully authenticating from Radiator? I do not have any detailed knowledge about the Orinoco

Re: (RADIATOR) Attribute number 9 (vendor 2233623) is not defined

2003-03-20 Thread Hugh Irvine
Hello Haven - Thanks for sending the debug trace. This is a broken vendor-specific attribute at the end of the radius request packet: 1a 2e 00 22 15 17 09 28 01 45 4d 42 6d 06 4b 64 00 00 00 7d 00 00 92 56 00 00 3d 58 00 00 a0 c6 b9 b0 fd 57 40 fe e5 79 bb 70 2b 50 e3 5d 1a = 26 =

Re: (RADIATOR) Juniper Dictionary info

2003-03-20 Thread Hugh Irvine
Hello Eric - Many thanks. There will be a patch available on the web site later today. regards Hugh On Friday, Mar 21, 2003, at 13:49 Australia/Melbourne, Eric Kilfoil wrote: Here is the juniper dictionary if you would like to include this in the distribution: VENDORATTR 2636

Re: (RADIATOR) Dicionary Entries needed for Redback

2003-03-19 Thread Hugh Irvine
Hello Brian - These are from the Radiator 3.5 dictionary. VENDORATTR 2352 RB-Acct-Input-Octets-64 128 integer8 VENDORATTR 2352 RB-Acct-Output-Octets-64129 integer8 VENDORATTR 2352 RB-Acct-Input-Packets-64130 integer8 VENDORATTR 2352

Re: (RADIATOR) question about Radiator and Orinoco AP-2500

2003-03-19 Thread Hugh Irvine
Hello Primoz - You should probably use a packet sniffer (snoop, tcpdump, ethereal...)to check on exactly what radius reply attributes are being sent back by Cisco ACS and then configure Radiator to send the same ones. In general you will need at least the following: Realm DEFAULT AuthBy

Re: (RADIATOR) Wanting to give certain users a static IP on a Cisco VPN

2003-03-19 Thread Hugh Irvine
Hello Troy - You can use cascaded AuthBy clauses for this. -- Client DEFAULT Secret x DupInterval 0 /Client AuthBy GROUP Identifier vpn AuthBy GROUP AuthByPolicy ContinueUntilReject

Re: (RADIATOR) Changing Alive records into stop records

2003-03-19 Thread Hugh Irvine
Hello Matthew - I would suggest you do this by post-processing the accounting records. I can't think of an easy way to do it inside Radiator. regards Hugh On Thursday, Mar 20, 2003, at 10:02 Australia/Melbourne, mhobbs wrote: Hi I would like to be able to change Alive radius records into

Re: (RADIATOR) How to differentiate PEAP-EAP-CHAPV2 and EAP-TTLS radius packets

2003-03-19 Thread Hugh Irvine
Hello Ken - Could you please send me a copy of your configuration file (no secrets) together with a trace 4 debug from Radiator showing what is happening in each case? regards Hugh On Thursday, Mar 20, 2003, at 11:11 Australia/Melbourne, Kawakubo, Ken wrote: All, I would like Radiator to

Re: (RADIATOR) How to differentiate PEAP-EAP-CHAPV2 and EAP-TTLS radius packets

2003-03-19 Thread Hugh Irvine
Hello Ken - On thinking about this a bit more, you should be able to do what you need like this (note the AuthBy RADIUS must be last): # define AuthBy clauses AuthBy PAM Identifier CheckPAM . /AuthBy AuthBy RADIUS Identifier ForwardToIAS . /AuthBy .

Re: (RADIATOR) Different authentication methods for differen ip-ranges

2003-03-18 Thread Hugh Irvine
Hello Freerk - It is possible to do almost anything with Radiator, however in answer to this particular question, I need to know what the network segments described below correspond to in radius terms? Are there different radius client NAS(s) that are located on these different segments? If so

Re: (RADIATOR) Attributes in Access-Reject packet

2003-03-18 Thread Hugh Irvine
Hello Pavel - An AddToReply in a Realm or Handler will add the attributes to all replies including access rejects. Realm AuthBy ... /AuthBy AddToReply . /Realm However a PostAuthHook will give you complete control over what is included in

Re: (RADIATOR) AV-PAIR attribute to send to apply a ACL list on Cisco AS5400

2003-03-18 Thread Hugh Irvine
Hello Tony - This is really a question for Cisco, however a quick check of the archives turns up this (and more besides): www.open.com.au/archives/radiator search on cisco-avpair filter http://www.open.com.au/archives/radiator/2002-11/msg00091.html The answer is to simply use the standard

Re: (RADIATOR) PPTP problem.

2003-03-18 Thread Hugh Irvine
Hello Troy - As long as you are using PAP for authentication, you will have access to the decoded password, if not you won't. Both CHAP and MS-CHAP use one-way encryption of the password, hence you will also need access to the cleartext password in your user database to be able to perform the

Re: (RADIATOR) DeleteQuery

2003-03-18 Thread Hugh Irvine
Hello - No it is not possible to have more than one DeleteQuery in the SessionDatabase SQL clause. You can however use one or more AuthBy SQL clauses with one or more AcctSQLStatements to do whatever you require. See section 6.28.16 in the Radiator 3.5 reference manual (doc/ref.html).

Re: (RADIATOR) FailureBackoffTime

2003-03-17 Thread Hugh Irvine
Hello Ruud - You are correct. The 'FailureBackoffTime' parameter will be used for both SQL and RADIUS. It is not possible to use a different 'FailureBackoffTime' for each host. regards Hugh On Monday, Mar 17, 2003, at 23:40 Australia/Melbourne, [EMAIL PROTECTED] wrote: Hi all, According

Re: (RADIATOR) Radiator dying

2003-03-17 Thread Hugh Irvine
Hello Jamie - As you say, we will need to see a copy of your configuration file (no secrets) together with a trace 4 debug from Radiator showing what is happening as well as the output from Perl when the crash occurs. One possibility I can think of is that you are receiving an MS-CHAP request

Re: (RADIATOR) SnmpgetProg and DefaultRealms

2003-03-17 Thread Hugh Irvine
query code to equalize both the search for name and the result by adding the default realm to both if no realm is specified. I apologize if the above is not very clear, it gets my mind in knots sometimes trying to understand it myself. - jeremy 04:36 PM 2/27/2003, Hugh Irvine wrote: Hello

Re: (RADIATOR) SnmpgetProg and DefaultRealms

2003-03-16 Thread Hugh Irvine
by adding the default realm to both if no realm is specified. I apologize if the above is not very clear, it gets my mind in knots sometimes trying to understand it myself. - jeremy 04:36 PM 2/27/2003, Hugh Irvine wrote: Hello Jeremy - The way to deal with this situation is to add a column

Re: (RADIATOR) SnmpgetProg and DefaultRealms

2003-03-14 Thread Hugh Irvine
04:36 PM 2/27/2003, Hugh Irvine wrote: Hello Jeremy - The way to deal with this situation is to add a column to the session database to contain the rewritten username in addition to the original username. Then you can do your session limit checking on the rewritten username, and the NAS query

Re: (RADIATOR) RE: Automatically Proxing of accouting/authen. by HostSelect in clause SQLRADIUS

2003-03-13 Thread Hugh Irvine
Hello Tony - I think you may need to set up two Handlers, and extend the RADSQLRADIUS table (or use two) so you have both authentication and accounting targets. Then you will need to run a second instance of Radiator on this same host to deal with the local authentication. The configuration

Re: (RADIATOR) Configuration help for fail-proff authentification method

2003-03-13 Thread Hugh Irvine
Hello Antonio - A simple approach would be to do something like this (which may not be what you want): Realm DEFAULT AuthByPolicy ContinueWhileAccept AuthBy GROUP AuthByPolicy ContinueWhileIgnore AuthBy SQL .

Re: (RADIATOR) how to handle double accounting

2003-03-13 Thread Hugh Irvine
Hello Utku - You should check the return path for filters (or perhaps your Radiator host has two interfaces?). And you should remove duplicates from the accounting data when doing the post-processing for billing. regards Hugh Hello,=20 We have lots of double accounting coming from our

Re: (RADIATOR) dealing with one account in two ways

2003-03-13 Thread Hugh Irvine
Hello Levent - Its nice to hear from you - I hope everything is going well? The problem with your first solution is the format of the user entry, which should have all the check items on the first line and all the reply items on the second and following lines with white space at the

Re: (RADIATOR) tests 2f, 3d,5a,5d and 5f fail on Redhat 8.0

2003-03-13 Thread Hugh Irvine
: If I'm going to use this version, what features of radiator will not work?  Hugh Irvine [EMAIL PROTECTED]> wrote: Hello - I suspect this is because the expiry date check is failing because this is an older version of Radiator. You will find the tests in the file called test.pl in the m

Re: (RADIATOR) Radiator Configuration with PostgreSQL

2003-03-12 Thread Hugh Irvine
Hello Ruben - You should use an AuthBy SQL clause and configure it to use PostgreSQL. Have a look at sections 6.28 and 24.6 in the Radiator 3.5 reference manual (doc/ref.html). You will also find example configuration files in the goodies directory and this topic has also been discussed

Re: (RADIATOR) Could not find a Client

2003-03-12 Thread Hugh Irvine
Hello Andy - You should probably set up your NAS equipment and your Radiator installation to be consistent. Either configure the NAS's to use the internal addresses for radius, and configure the Radiator Client clauses to use the same addresses, or configure the NAS's to use the external

Re: (RADIATOR) Radiator, AuthBy Policy and ACE

2003-03-12 Thread Hugh Irvine
Hello Steve - What you show below should work fine. regards Hugh On Thursday, Mar 13, 2003, at 07:21 Australia/Melbourne, [EMAIL PROTECTED]> wrote: Hi,   We have Radiator 3.5 on solaris and have a requirement to authenticate by file then by an ACE server. Has anyone done this or is it even

Re: (RADIATOR) Rewrite only for Accouting

2003-03-12 Thread Hugh Irvine
Hello Tony - You should do something like this: Handler Request-Type = Accounting-Request # deal with accounting RewriteUsername s/^([EMAIL PROTECTED]).*/$1/ /Hanlder Handler # deal with authentication . /Handler regards Hugh On Thursday, Mar

Re: (RADIATOR) FW: NAS REPLY

2003-03-11 Thread Hugh Irvine
Hello Zack - You will need to add the corresponding AuthColumnDef's to your AuthBy SQL clause. AuthBy SQL . AuthSelect select PASSWORD, CHECKATTR, REPLYATTR \ from SUBSCRIBERS where User-Name = %0 AuthColumnDef

Re: (RADIATOR) How to assign range of usernames in handler for auth accouting...

2003-03-11 Thread Hugh Irvine
Hello AbdusSami - You would do something like this: Handler User-Name = /abc10001|abc2/ The expression between // is a Perl regular expression that can be set to whatever is required. You should check the Camel book (Programming Perl from O'Reilly) for details on regular expressions,

Re: (RADIATOR) authorization on subnet base

2003-03-11 Thread Hugh Irvine
Hello Freerk - I am not quite sure how you are going to recognise the requests that you show below - are there different NAS's servicing each subnet? It is usually the NAS itself that allocates IP addresses. The only thing you need to do to authenticate logon's to NAS equipment is to configure

Re: (RADIATOR) Possible bug in Radiator 3.5+patches Util.pm on Win2k

2003-03-11 Thread Hugh Irvine
Hello Valentin - I believe Mike fixed this yesterday and the patch is available on the web site. regards Hugh On Tuesday, Mar 11, 2003, at 23:57 Australia/Melbourne, Valentin Tumarkin wrote: Hi, There seems to be a bug in Radiator 3.5 + latest patches on Win2k OS in Util.pm. I haven't

Re: (RADIATOR) Radiator adding attributes when forwarding a packet

2003-03-11 Thread Hugh Irvine
Hello Victor - I will need to see a copy of your Radiator configuration file (no secrets), together with a trace 5 debug showing what is happening (trace 5 debug includes hex packet dumps). regards Hugh On Tuesday, Mar 11, 2003, at 20:04 Australia/Melbourne, Victor Stanescu wrote: Hello,

Re: (RADIATOR) (no subject)

2003-03-11 Thread Hugh Irvine
Hello Mau Lim - Your AcctColumnDef is incorrect. You must define the DateFormat seperately: AuthBy SQL AcctColumnDef TIMESTAMP, Timestamp, integer-date /AuthBy Note that the default for integer-date should work for MySQL.

Re: (RADIATOR) MSQL-DBD for win2k perl

2003-03-10 Thread Hugh Irvine
Hello Zack - As mentioned in my other mail, you should use DBD-ODBC to connect to MS-SQL on Windows. regards Hugh On Monday, Mar 10, 2003, at 20:20 Australia/Melbourne, [EMAIL PROTECTED] wrote: any docs on where to get a win32version DBD-msql and how to install Thanking in Advance regards

Re: (RADIATOR) (no subject)

2003-03-10 Thread Hugh Irvine
Hello Mau Lim - Please send a copy of your configuration file (no secrets) together with a trace 4 debug from Radiator showing what is happening. regards Hugh On Monday, Mar 10, 2003, at 20:49 Australia/Melbourne, mau lim wrote: I have set up radiator with AuthBy SQL with prepaid setup the

Re: (RADIATOR) Reload the configuration file on run-time

2003-03-10 Thread Hugh Irvine
Hello Sergio - Please have a look at section 16 in the Radiator 3.5 reference manual (doc/ref.html). regards Hugh On Tuesday, Mar 11, 2003, at 05:32 Australia/Melbourne, Sergio Robles wrote: Hi Everyone, We are currently evaluating Radiator. Some form exists to reload the radiator

Re: (RADIATOR) Null passwords

2003-03-10 Thread Hugh Irvine
Hello Faez - We will need to see a copy of your Radiator configuration file (no secrets) together with a trace 4 debug showing what is happening. regards Hugh On Tuesday, Mar 11, 2003, at 05:46 Australia/Melbourne, [EMAIL PROTECTED] wrote: Hi, We are using Radiator 3.5 with AuthSQL but we

Re: (RADIATOR) tools exist for this?

2003-03-09 Thread Hugh Irvine
Hello Chris - This should do what you want: goodies/radimportacct regards Hugh On Monday, Mar 10, 2003, at 14:02 Australia/Melbourne, Chris M wrote: Are there any tools that take the text detail files and import them into MySQL? Chris === Archive at

Re: (RADIATOR) Anyone get EAP-PEAP on XP to work Radius?

2003-03-07 Thread Hugh Irvine
Hello Christian - Thanks for posting this. And yes there is a simple way to add reply attributes in the configuration file: AuthBy ... AddToReply State = . /AuthBy regards Hugh On Saturday, Mar 8, 2003, at 08:03 Australia/Melbourne,

Re: (RADIATOR) Configuration for radias server.

2003-03-05 Thread Hugh Irvine
Hello Freerk - You will need to configure the access points to use radius authentication first of all pointing to your Radiator host. Then you will need to add Client clauses to your Radiator configuration file for the access points, and configure an AuthBy LDAP2 clause to query your LDAP

Re: (RADIATOR) external commands

2003-03-05 Thread Hugh Irvine
Hello Anton - Yes you can either use the AuthBy EXTERNAL clause, or you can use a hook(s). See section 6.26 in the Radiator 3.5 reference manual (doc/ref.html) and goodies/hooks.txt. regards Hugh On Thursday, Mar 6, 2003, at 05:39 Australia/Melbourne, Anton Krall wrote: Guys.. is there a

Re: (RADIATOR) Roaming With GlobalRoam

2003-03-05 Thread Hugh Irvine
Hello Farhan - Could you please send me the name of the registered company that has purchased this copy of Radiator? Reply to me directly if you wish. regards Hugh Hello all, I have configure radiator with standard configuration and it is working fine and now we want to to configure

Re: (RADIATOR) Oracle Accounting Log Trouble

2003-03-04 Thread Hugh Irvine
Hello Jack - Thanks for sending the files. The logfile you sent does not show any live requests, but if you are not seeing any accounting data I would supsect that the NAS is not sending any accounting requests. Could you check a trace 4 debug to confirm? regards Hugh On Wednesday, Mar 5,

Re: (RADIATOR) MS-MPPE needed for pptp

2003-03-04 Thread Hugh Irvine
Hello Fred - I will need to see a trace 4 debug from Radiator showing what is happening. regards Hugh On Wednesday, Mar 5, 2003, at 00:32 Australia/Melbourne, baxter wrote: I am using radiator to authenticate wireless users (from a bluesocket wireless gateway) with the authentication going

Re: (RADIATOR) AuthBy OPIE - can't locate loadable object

2003-03-04 Thread Hugh Irvine
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Hugh Irvine Sent: Thursday, February 27, 2003 10:46 PM To: Mark Wellins Cc: [EMAIL PROTECTED] Subject: Re: (RADIATOR) AuthBy OPIE - can't locate loadable object Hello Mark - See my other mail for instructions

Re: (RADIATOR) Session Database and MaxSessions

2003-03-03 Thread Hugh Irvine
Hello Dan - This looks very odd. What version of Radiator are you running? And can you send me the contents of the session database and a more complete trace 4 showing the startup messages and also what happens when you have a clean session database? I will need to see multiple access

Re: (RADIATOR) Copper Edge

2003-03-03 Thread Hugh Irvine
Hello Chris - As long as the NAS does standard radius, it will work with Radiator. If there are Copper Edge vendor-specific attributes, please get them from Copper Edge and send us a copy so we can include them in the Radiator dictionary. The dictionary is a simple text file and you can add

Re: (RADIATOR) Help concerning PreAuthentication with Radiator

2003-03-03 Thread Hugh Irvine
Hello Tony - We have many customers using Cisco NAS equipment for PreAuthentication. You should check the Cisco web site (or your support engineer) for the IOS configuration details. As far as Radiator is concerned there is nothing special about the requests other than the fact that they

Re: (RADIATOR) Forcing reauthentication by terminatiing sessions?

2003-02-28 Thread Hugh Irvine
Hello John - The first thing to do is check whether or not your wireless client actually displays anything meaningful when it receives a radius reject (most don't display the reply message in any case). regards Hugh On Saturday, Mar 1, 2003, at 06:34 Australia/Melbourne, John McFadden

Re: (RADIATOR) Session Database Verify?

2003-02-28 Thread Hugh Irvine
Hello William - This topic has been discussed on the list previously and I seem to remember that someone contributed some code, so you should check the mailing list archives, the FAQ and possibly the goodies directory of the Radiator 3.5 distribution. regards Hugh On Saturday, Mar 1, 2003,

Re: (RADIATOR) AuthBy OPIE - can't locate loadable object

2003-02-27 Thread Hugh Irvine
/Melbourne, Mark Wellins wrote: Thanks Hugh. I hope it's as simple as that! Attached if the radius.cfg and logfile (after I changed the debug variable to 4) (I left the file whole since it's a lab environment, you'll see the secret still) Regards, Mark -Original Message- From: Hugh Irvine

Re: (RADIATOR) Radiator on Windows 2000 multi-homed host

2003-02-27 Thread Hugh Irvine
Hello Nico - Thanks for the mail. This problem has in fact been discussed on the mailing list several times, and the answer is almost always the same - it is the operating system that decides how to actually send the packet. I am interested however that BindAddress works in your case, as it

Re: (RADIATOR) A different error, AuthBy OPIE seems to work now

2003-02-27 Thread Hugh Irvine
Hello Mark - The procedure for installing any Perl module is as follows: perl Makefile.PL make make test make install It looks from the trace like Perl is crashing due to a problem in OPIE. If you run radiusd from the command line you will be able to see the

Re: (RADIATOR) Limiting with port number

2003-02-27 Thread Hugh Irvine
Hello Petri - Yes, one or more AuthBy PORTLIMITCHECK clauses would be the way to go (with the appropriate columns and data in the session database). # define Realms or Handlers Handler AuthByPolicy ContinueWhileAccept AuthBy PORTLIMITCHECK .

<    3   4   5   6   7   8   9   10   11   12   >