(RADIATOR) radiator server under high load problem

2003-07-22 Thread Steve Wilson
Hi, We are currently in the process of migrating about 5 icradius servers into 1 system, we are currently at the stage where everything (about 10 NAS's) use our a central radiator server to authenticate, this then sends the request to the correct icradius server based on the realm. As this is

Re: (RADIATOR) radiator server under high load problem

2003-07-22 Thread Hugh Irvine
Hello Steve - Thanks for your mail - this topic comes up fairly frequently on the list. I don't really have enough information to give you definitive answers, but in my experience performance problems are almost always due to back-end services such as SQL databases and/or LDAP servers. I

(RADIATOR) Can'nt get Framed-IP-Address

2003-07-22 Thread Fernando Romão
Hi, I have Radiator and Cisco 1100 AP configured to make accounting logs. But the IP of the client doesn´t appear. After the authentication by PEAP method, the client have access to a VLAN where it gets it´s IP from a local DHCP server. I tried following the sugestions of the question

(RADIATOR) WiFi Protected Access - WPA

2003-07-22 Thread Fernando Romão
Hi, Has anyone gotten WPA working with Windows XP, Radiator and Cisco AP and want share to the configurations with me? I have the PEAP authentication working but when I install the Microsoft WPA patch(815485)the authentication doesn't work. Anyone with experience in this area

Re: (RADIATOR) question -- solved I think =)

2003-07-22 Thread Chris Garzon
- Original Message - From: Hugh Irvine [EMAIL PROTECTED] To: Chris Garzon [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Tuesday, July 22, 2003 7:59 AM Subject: Re: (RADIATOR) question You should test your SQL statements by hand with your database tools first before putting them in

(RADIATOR) Problem using AuthBy DYNADDRESS with AuthBy RADIUS

2003-07-22 Thread Ken Wolstencroft
Hi All, I am trying to use my proxy radius servers to allocate dynamic IP addresses. When I call the AuthBy RADIUS routine before AuthBy DYNADDRESS, IP addresses do not get allocated. I am using an AuthByPolicy of ContinueWhileAccept. If I swap the AuthBy calls around (AuthBy DYNADDRESS and then

(RADIATOR) Question about AuthBy ADSI

2003-07-22 Thread Steve Caporossi
I am running radiator 3.6 (fully patched) on RH7.3 and need to tie into AD for domain login and username/password checking. In the reference manual section 6.40 AuthBy ADSI it has the statement, snip It is only available on Windows 2000 platforms. It is implemented in AuthADSI.pm /snip I am

Re: (RADIATOR) Question about AuthBy ADSI

2003-07-22 Thread Hugh Irvine
Hello Steve - Correct. AuthBy ADSI and the new AuthBy LSA clauses are only supported on recent Windows releases. You can either try the AuthBy NT clause, or you can run an instance of Radiator on the Windows host and proxy requests to it. You will find details on AuthBy NT in section 6.27 of

Re: (RADIATOR) Problem using AuthBy DYNADDRESS with AuthBy RADIUS

2003-07-22 Thread Hugh Irvine
Hello Ken - As the AuthBy RADIUS clause returns immediately and operates asynchronously, you cannot use an AuthByPolicy. To call an AuthBy DYNADDRESS after the proxy reply comes back you will need to use a ReplyHook in the AuthBy RADIUS clause. There is an example of how to do this in the

Re: (RADIATOR) Can'nt get Framed-IP-Address

2003-07-22 Thread Hugh Irvine
Hello Fernando - You should look at a trace 4 debug from Radiator to see what radius attributes are included in the accounting packets. From what you say, the Cisco access point is not sending the Framed-IP-Address in the accounting requests, so you should check with Cisco to see how to

(RADIATOR) Variable Substitution

2003-07-22 Thread Timothy G. Wells
Hi All, Is there a way to have a variable be defined or set within a certain Realm or Handler so that the AuthBy some-auth-name could use that variable in its processing? realm xyz.com variable=1 AuthBy someauthhandler /realm authBy SQL query where the value of variable is desired... /authby

Re: (RADIATOR) Variable Substitution

2003-07-22 Thread Hugh Irvine
Hello Tim - The simplest way to do this is to add one or more pseudo-attributes to the incoming request packet and then refer to it (them) in your processing. You can either use an AddToRequest , or you can use a hook. There is an example PreClientHook in the file goodies/hooks.txt that does

Re: (RADIATOR) Problem using AuthBy DYNADDRESS with AuthBy RADIUS

2003-07-22 Thread Ken Wolstencroft
Thanks Hugh, I'll try a ReplyHook.. Ken - Original Message - From: Hugh Irvine [EMAIL PROTECTED] To: Ken Wolstencroft [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Wednesday, July 23, 2003 12:00 AM Subject: Re: (RADIATOR) Problem using AuthBy DYNADDRESS with AuthBy RADIUS Hello Ken

Re: (RADIATOR) radiator server under high load problem

2003-07-22 Thread Brian Morris
Hi Hugh / Steve, We also experienced a similar sort of problem under load and are currently still investigating the problem although it now appears to be corrected... Running Radiator (as Proxy) on Sun /Solaris which sends requests to another Radiator server running on Win2k with the database on