(RADIATOR) Bug: still problems with AuthLDAP2 and TLS

2002-07-08 Thread Karl Gaissmaier
Hi Hugh or Mike, short: The second time after starting a StartTLS connection against an OpenLDAP Server the radiusd crashes, the first time after start it works well. The radiusd crashes with the following error message: Can't call method get_context_handle without a package or object

(RADIATOR) problem with multiple realms in one username

2002-07-08 Thread sviatoslav . rimdenok
Hi Guys, We've got Radiator running on our side. Recently I've found really strange behaviour of Radiator, - the problem comes then username in the incoming RADIUS packet looks like username@realmone@realmtwo (please see the live example from the log file): ... skipped . Mon Jul 8

(RADIATOR) Regex Handlers or bits of the attribute in a RewriteUsername?

2002-07-08 Thread Jeremy Burton
Hi there, At present, I'm trying to do some work with some weird L2TP stuff. Basically, I'm using 2 different wholesalers for ADSL. I want to use different handlers for each. They both come in from the same client ip address, so I can't just use different client clauses. I can use the

Re: (RADIATOR) problem with multiple realms in one username

2002-07-08 Thread Hugh Irvine
Hello Slava - You don't actually say what your requirements are - could you give me some more details on what exactly you want to do? BTW - if you want a handler to match slave.com as different to slava.com@SLAVA, you should do this: Handler User-Name = /slava.com$/ . /Handler

RE: (RADIATOR) problem with multiple realms in one username

2002-07-08 Thread sviatoslav . rimdenok
Hi Hugh, thank you for your quick response! I'd like to have handler that matches only [EMAIL PROTECTED], and do not match [EMAIL PROTECTED]@SLAVA, [EMAIL PROTECTED]@BLABLABLA nor username@[EMAIL PROTECTED] and so on.. that means : to match the rule it must be only one realm name (for example

(RADIATOR) which attribute?

2002-07-08 Thread Shon Stephens
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 i am working on a wifi project where several carriers proxy their radius packets to me. i need to be able to process some of these packets differently. unfortunately, every request, no matter what carrier it originates from, will have the same

(RADIATOR) Selecting domain stripping in AuthBySQLRADIUS

2002-07-08 Thread James Wiegand
Hello, I am trying to come up with a config where we can store the bulk of our roaming configurations in an SQL table. There is one question that does not seem to be obvious from the configuration. Is it possible to have to strip the domain (or not) based on the (domain, host) key? Here's the

(RADIATOR) User auths if in the users file only?

2002-07-08 Thread chris
I am having the weirdest issue. If I add a user into the users file with the simple line test123 Auth-Type = System They can authenticate and go on thier merry way If the user is not in there and gets caught by the default DEFAULT Auth-Type = System Port-Limit = 2, Service-Type

(RADIATOR) Radiator performance on various platforms.

2002-07-08 Thread Brian Morris
Hi All, We are looking at upgrading our radiator / radius server and are considering the various platform options available to us. The radiator reference manual cites various performance measurements using versions of hardware and operating systems which are now several generations out of date.

Re: (RADIATOR) User auths if in the users file only?

2002-07-08 Thread Karl Gaissmaier
Hi Chris, chris schrieb: I am having the weirdest issue. If I add a user into the users file with the simple line test123 Auth-Type = System They can authenticate and go on thier merry way If the user is not in there and gets caught by the default DEFAULT Auth-Type =

Re: (RADIATOR) Radiator performance on various platforms.

2002-07-08 Thread Karl Gaissmaier
Hi Brian, Brian Morris schrieb: Hi All, We are looking at upgrading our radiator / radius server and are considering the various platform options available to us. The radiator reference manual cites various performance measurements using versions of hardware and operating systems

Re: (RADIATOR) User auths if in the users file only?

2002-07-08 Thread chris
There is whitespace in there, its an email glitch - Original Message - From: Karl Gaissmaier [EMAIL PROTECTED] To: chris [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Monday, July 08, 2002 3:57 PM Subject: Re: (RADIATOR) User auths if in the users file only? Hi Chris, chris schrieb:

Re: (RADIATOR) Radiator performance on various platforms.

2002-07-08 Thread Brian Morris
From: Karl Gaissmaier [EMAIL PROTECTED] you should tell us what Authentication schemes you wil be using. I think the performance is only comparable using the same auth schemes. We have radiator running under Solaris 9. Charly, I am hoping to use Solaris 9 / MySql to authenticate around

Re: (RADIATOR) User auths if in the users file only?

2002-07-08 Thread Hugh Irvine
Hello Chris - It looks to me like your DEFAULT entry is not correct. It should look like this (there *must* be white space at the beginning of the second and subsequent lines): DEFAULT Auth-Type = System Port-Limit = 2, Service-Type = Framed-User, Framed-Protocol =

Re: (RADIATOR) problem with multiple realms in one username

2002-07-08 Thread Hugh Irvine
Hello Slava - # Handler for [EMAIL PROTECTED] Handler User-Name = /\@slava.com$/ . /Handler # Handler for [EMAIL PROTECTED]@whatever Handler User-Name = /\@slava.com\@/ . /Handler regards Hugh On Mon, 8 Jul 2002 20:17, [EMAIL PROTECTED] wrote: Hi Hugh, thank

Re: (RADIATOR) which attribute?

2002-07-08 Thread Hugh Irvine
Hello Shon - You would do something like this: Client .. Identifier Carrier1 . /Client Client .. Identifier Carrier1 . /Client Client .. Identifier Carrier2 . /Client Client .. Identifier Carrier3

Re: (RADIATOR) Radiator performance on various platforms.

2002-07-08 Thread Hugh Irvine
Hello Brian - The largest installation that we are aware of currently runs on multiple SUN servers (each with multi-processors and each running two instances of Radiator). These servers have a load-balancer in front of them and on the backend there is an enterprise class SUN server running

Re: (RADIATOR) Selecting domain stripping in AuthBySQLRADIUS

2002-07-08 Thread Hugh Irvine
Hello James - In Radiator 3.1, you can use the AuthBy SQLRADIUS clause with HostColumnDef's to supply a RewriteUsername (or not). Note that you will need the patched version of AuthBy SQLRADIUS from the Radiator 3.1 patches area. See section 6.45 in the Radiator 3.1 reference manual

Re: (RADIATOR) User auths if in the users file only?

2002-07-08 Thread chris
P.S. is this really a working example with this Framed-IP-Address? Yes, this is the DEFAULT selection, which is my understanding that is follows some rfc that states this address should be converted to one from a dynamic pool. This was where the problem was.thier setup did not follow this

Re: (RADIATOR) Selecting domain stripping in AuthBySQLRADIUS

2002-07-08 Thread James Wiegand
Just to clarify, because under section 6.30 RewriteUsername is not listed, even though it is shown in section 6.45, is it legal to have a RewriteUsername statement under a Hosts clause? This would be useful. Sorry to be pedantic, but the statement that anything which is legal in a Hosts clause

Re: (RADIATOR) Radiator performance on various platforms.

2002-07-08 Thread Bennie Warren
I have a question on Trace level. Should that be set to 0 in a configuration file when all is working? Oh and yes OS X is really nice. Bennie On 7/8/02 4:03 PM, Hugh Irvine [EMAIL PROTECTED] wrote: Hello Brian - The largest installation that we are aware of currently runs on multiple SUN