Re: (RADIATOR) EncryptedPassword Problem.
Hi Cameron -
On Mon, 09 Aug 1999, Cameron Andrews wrote:
Hi guys,
Got a small problem, below is my AuthSQL with my AuthSelect in it, but
for some reason the encrypted passwords dont appear to be working, people can
login supplying anything for their password, could someone please show me what
to do to fix this little problem, thanx..
AuthSelect select ENCRYPTEDPASSWORD, concat('Expiration =
',FROM_UNIXTIME(TERM_DATE,'%%b %%d %%Y')), if(IPNUMBER,concat("Framed-IP-Address = ",
IPNUMBER), concat("Framed-Group = ", IPGROUP)), CHECKATTR, REPLYATTR from SUBSCRIBERS
where USERNAME='%n'
EncryptedPassword
AuthColumnDef 1, Expiration, check
AuthColumnDef 2, GENERIC, reply
AuthColumnDef 3, GENERIC, check
AuthColumnDef 4, GENERIC, reply
AddToReply
Service-Type=Framed-User,Framed-Protocol=PPP,Framed-Routing=Broadcast-Listen,Framed-MTU=552
I don't think there is anything wrong with your AuthSelect, rather your users
file or SQL database has a DEFAULT user in it without a password. Please
send us your config file (no secrets) and a debug trace (level 4) so we can see
what is happening.
hth
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
RE: (RADIATOR) Allow All
I think this is what you will get with AuthByTEST /Ingvar -Original Message- From: Greg Kornatowsky [mailto:[EMAIL PROTECTED]] We want to setup radiator so that all users get authenticated regrdless of what password or username they enter. We also want to accounting. So basically, we have an open system if our SQL server goes down so our users will still have access. Can someone please show me a config file to do this. Thank You. === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Problems with radiator 2.14.1
Hi all, I know i posted about this last week, however I am still having similar problems - Radiator is dieing when the tcp/ip link to the database dies. Situation: DB server is on one segment Radiator radius machine is on another. Router in the middle crashes. Radiator crashes altogether, and requires a kill -9 pid We are using Oracle 8.0.5, Radiator 2.14.1, DBI 1.13. The machine is a Sparc Solaris 2.5.1 Anyone got any ideas? This is causing us big problems. Our backup radius server is running Solaris/x86 2.6, with Radiator 2.13.1, and DBI 1.01 and is runnign fine through these crashes -- Jeremy Burton Database Administrator, Netspace Online Systems [EMAIL PROTECTED] [EMAIL PROTECTED], [EMAIL PROTECTED] === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
RE: (RADIATOR) Client, NAS-Type and Handler
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Perhaps you should say it Handler Realm=foo.bar, NAS-IP-Address=/a\.b\.(c\.d|e\.f)/ this way? HTH - -- Arturo Pina / [EMAIL PROTECTED] Dpto. I+D / CTV-Jet (http://www.ctv-jet.com/) Tfno: +34 96 5845291 / Fax: +34 96 5844896 -Mensaje original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]En nombre de Neale Banks Enviado el: domingo, 08 de agosto de 1999 5:54 Para: [EMAIL PROTECTED] Asunto: (RADIATOR) Client, NAS-Type and Handler I looked in the docs, but this one's not mentioned either way. If I specify a Client: Client box.foo.bar NasType=vendor . DefaultRealm foo.bar /Client 1. Are there any side-effects of NAS-Type if I don't specify any Simultaneus-Use anywhere? 2. Can I then use NAS-Type as a check item in a Handler, like: Handler NAS-Type=vendor, Realm=foo.bar # generic stuff for foo.bar # vendor-specific stuff /Handler Handler Realm=foo.bar # just generic stuff for foo.bar /Handler If that won't work, any reason why I couldn't get around it by constructing a handler like: Handler Realm=foo.bar, NAS-IP-Address=/a.b.(c.d|e.f)/ Thanks, Neale. === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message. -BEGIN PGP SIGNATURE- Version: PGPfreeware 6.5.1 for non-commercial use http://www.pgp.com iQA/AwUBN66U4WXwKH++xlSbEQKYawCdEKoQtYIYSSjCFEM1tL2meOeOmikAnAi2 AaToxtAd3MGBGrq2hlFZZOMq =us2I -END PGP SIGNATURE- === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Strange errors
Hi All Thanks in advance
the next USER use ISDN and connect to pm3.
What is this error and why he can loging twice ?
NOTICE: Session for yair at 194.90.152.130:1 has gone away
INFO: Duplicate request id 155 received from 194.90.152.130: ignored
Client 194.90.152.130
Secret
NasType Livingston
# DupInterval 0
/Client
AuthSelect select PASSWORD, CHECKATTR, REPLYATTR, STATUS \
from SUBSCRIBERS \
where USERNAME='%n' and STATUS!="Freeze"
select * from SUBSCRIBERS where USERNAME="yair";
USERNAME = yair
PASSWORD = {crypt}xx
CHECKATTR = Expiration = "Dec 10 1999", Simultaneous-Use = 1
REPLYATTR = Service-Type = Framed-User, Framed-Protocol =
PPP,Framed-IP-Address = 255.255.255.254, Framed-MTU = 1500, Idle-Timeout
= 1200, Port-Limit = 1
STATUS = Subscribed
--
Canaan Surfing Ltd.
Internet Service Providers
Ben-Nes Michael - Manager
Tel: 972-6-6925757
Fax: 972-6-6925858
http://www.canaan.co.il
--
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
(RADIATOR) adding default items to a reply
Hi all, For some attributes (especially timeouts) I want to add a "default" value iff the attribute is not specified in the user's record (if it is specified, we just use what's in the user's record. Can I do this with AddToReply (docs don't mention conditional adding), or will it be necessary to do something more convoluted in a Hook? Thanks, Neale. === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Rlogin Prefix
Hi Mike, I have just about got all of my initial problems with Radiator sorted out. This should be the last one. My UUCP users need to rlogin to a machine to run a shell session and pick up their mail and news via uucico. I've setup the following prefix for them to login with a U prefix on their login id. Problem is I'm still getting an access denied message when I test this prefix. Here is the entry in my users file. Could you let me know if their is anything wrong with the way this prefix is specified? Regards. Paul DEFAULT Auth-Type = System, Service-Type = Login-User, Login-IP-Host = ice.triode.net.au, Login-Service = Rlogin, Client-Id = pm1 Prefix="U", Framed-IP-Address = 255.255.255.254 === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) TIMESTAMp
Hi all, I want to have the database have the current time when the user is connected.What is the variable that stores the date field apart from timestamp. Rajesh Get your own FREE, personal Netscape WebMail account today at http://webmail.netscape.com. ÿ Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Simultaneous Logins
Hello Radiator Users (mess. sent to [EMAIL PROTECTED])
I'm having some problems with simultaneous logins here at my ISP, we use
Radiator to authenticate and account incoming connection request.
Since we are an ISP we have very different types of users, but most of them
do not have permission to have more then one connection per user. Bellow is
my config file, I'm running Radiator on WinNT 4.0 as a system service ...
..
# MAX.cfg
Foreground
LogStdout
Trace 5
LogDir c:\radiator\malbanet\log
LogFile %L\%Y%m%d.log
DbDir c:\radiator
DictionaryFile %D\dictionary.nt
Client localhost
Secret
/Client
Client x.x.x.x
Secret
/Client
Client x.x.x.x
Secret
/Client
Client x.x.x.x
Secret
/Client
Realm DEFAULT
RewriteUsername tr/[A-Z]/[a-z]/
AuthByPolicy ContinueUntilAccept
AuthBy SQL
AuthSelect
DBSource dbi:ODBC:ODBCsource
AccountingTable Table
AcctColumnDef SessionID,Acct-Session-Id
AcctColumnDef TIME_STAMP,Timestamp,integer
AcctColumnDef StatusType,Acct-Status-Type
AcctColumnDef UserName,User-Name
AcctColumnDef SessionTime,Acct-Session-Time,integer
AcctColumnDef InPackets,Acct-Input-Packets
AcctColumnDef OutPackets,Acct-Output-Packets
AcctColumnDef FoneID,Calling-Station-Id
AcctColumnDef IpAddress,Framed-IP-Address
AcctColumnDef TIME_STAMP,Timestamp,formatted-date,('%e %m %Y %H:%M:%S')
/AuthBy
# Users file that can have more then 1 login
AuthBy FILE
DefaultSimultaneousUse 5
Filename %D/userx
/AuthBy
# Users file that have hour restrictions
AuthBy FILE
DefaultSimultaneousUse 1
Filename %D/userz
/AuthBy
# Users File - DEFAULT - sends authentication requests to be handled
# with NT Domain Controller
AuthBy FILE
DefaultSimultaneousUse 1
Filename %D/usery
/AuthBy
# 1 Log accounting to the detail file in LogDir
AcctLogFileName %L\%Y%m.act
# 2 Log accounting to the detail file in LogDir
AcctLogFileName %L\%Y%m%d.act
/Realm
AuthBy NT
Identifier nt
/AuthBy
.
Any Ideas are Thankful
Best Regards
Michael Gatti
Malbanet Serviços On-Line
Caxias do Sul - RS - Brasil
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
(RADIATOR) remote login using radiator and postgres
Hi, We are one of the ISP here in the Philippines and we are currently using radiator as our authentication. We are having problems on using postgres and radiator by remote login we've try dbi:Pg:$database:$hostname but still we can't connect to remote server Is there any configuration that we must do? Is dbi:Pg:$database:$hostname also compatible with postgres? We've try it using mysql and it works. === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) adding default items to a reply
On Mon, 09 Aug 1999, Neale Banks wrote: Hi all, For some attributes (especially timeouts) I want to add a "default" value iff the attribute is not specified in the user's record (if it is specified, we just use what's in the user's record. Can I do this with AddToReply (docs don't mention conditional adding), or will it be necessary to do something more convoluted in a Hook? Thanks, Neale. You should probably use "DefaultReply" (Section 6.14.8 in the 2.14.1 manual). hth Hugh -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, NT, Rhapsod === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) AUTH by postgres failed
Hi, I'm experiencing problem when connecting to remote database. I've used dbi:Pg:$hostname;$port:$Dbname and also dbi:Pg:$hostname;$port;$DBname but still I cannot connect to postgreSQL on the other server Is there any connect string that I can use? Or there are any configuration that I must do on my cfg file? === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) remote login using radiator and postgres
On Tue, 10 Aug 1999, ray cortez wrote: |o| We are one of the ISP here in the Philippines and we are |o| currently using radiator as our authentication. We are having |o| problems on using postgres and radiator by remote login we've try |o| dbi:Pg:$database:$hostname but still we can't connect to remote |o| server Is there any configuration that we must do? Is |o| dbi:Pg:$database:$hostname also compatible with postgres? We've |o| try it using mysql and it works. First off, which AuthBy method are you using. Are the DBI drivers installed for PostgreSQL? Are your access permissions correctly set between your Radiator host/user and your PostgreSQL server? We've tried Radiator with PostgreSQL (or Perl, in general) with PostgreSQL and can verify that it works. L L Richi Plana 8^) ,-,-. ,-,-. ,-,-. ,-,-. ,- LL LL Systems Administrator / / \ \ / / \ \ / / \ \ / / \ \ / / L Mosaic Communications, Inc. \ \ / / \ \ / / \ \ / / \ \ / / L mailto:[EMAIL PROTECTED] `-'-' `-'-' `-'-' `-'-' === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) AUTH by postgres failed
Hi Dennis - On Tue, 10 Aug 1999, Dennis G. Villanueva wrote: Hi, I'm experiencing problem when connecting to remote database. I've used dbi:Pg:$hostname;$port:$Dbname and also dbi:Pg:$hostname;$port;$DBname but still I cannot connect to postgreSQL on the other server Is there any connect string that I can use? Or there are any configuration that I must do on my cfg file? I have just replied to Ray on this topic, with an example. The correct syntax is in the 2.14.1 manual in Section 21.6. hth Hugh -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, NT, Rhapsody === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) remote login using radiator and postgres
Hi Ray - On Wed, 11 Aug 1999, ray cortez wrote: Hi, We are one of the ISP here in the Philippines and we are currently using radiator as our authentication. We are having problems on using postgres and radiator by remote login we've try dbi:Pg:$database:$hostname but still we can't connect to remote server Is there any configuration that we must do? Is dbi:Pg:$database:$hostname also compatible with postgres? We've try it using mysql and it works. The syntax for using postgres is different to mysql. Try something like this: DBSourcedbi:Pg:dbname=whatever;host=yourhost DBUsername username DBAuth somepassword hth Hugh -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, NT, Rhapsody === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
