Re: [RADIATOR] Question about TACACS group assignment based on AD groups

2016-10-12 Thread Hartmaier Alexander
Hi Daniel, we generate the Client config blocks using ClientListSQL from our NMS database. The identifier is the hostname and we use the OSC-Group-Identifier set to the support group name for further distinguishment in the handlers. We also add other metadata like OSC-Customer-Identifier for logg

Re: [RADIATOR] Question about TACACS group assignment based on AD groups

2016-09-07 Thread Hugh Irvine
Hello Daniel - You can use Identifiers in your Client clauses to indicate what sort of device they are, then use those identifiers in your Handlers. Something like this: …… Identifier Firewall ….. Identifier Firewall ….. Identifier Switch

Re: [RADIATOR] Question about regex matching realm in handlers

2016-02-11 Thread David Rose
Heikki, Now that you assembled the pieces for me, it makes perfect sense. I figured I had to be missing something. Thank you! David On 2/11/2016 5:17 AM, Heikki Vatiainen wrote: > On 10.2.2016 23.31, David Rose wrote: > >> However, if I comment out the two "[TTLS|PEAP]_INNER_GENERIC" handlers >

Re: [RADIATOR] Question about regex matching realm in handlers

2016-02-11 Thread Heikki Vatiainen
On 10.2.2016 23.31, David Rose wrote: > However, if I comment out the two "[TTLS|PEAP]_INNER_GENERIC" handlers > and associated statements (i.e. no other changes to client config or > anywhere else) and restart Radiator, "tu...@iit.edu" no longer matches > the regex and the inner request is then c

Re: [RADIATOR] Question about AuthByPolicy anything else and AuthBy SQL

2012-06-27 Thread Ricardo Martinez
iator-boun...@open.com.au] En nombre de Heikki Vatiainen Enviado el: miércoles, 27 de junio de 2012 17:35 Para: radiator@open.com.au Asunto: Re: [RADIATOR] Question about AuthByPolicy anything else and AuthBy SQL On 06/27/2012 11:23 PM, Ricardo Martinez wrote: > I’m using Radiator 3.1.13 Versio

Re: [RADIATOR] Question about AuthByPolicy anything else and AuthBy SQL

2012-06-27 Thread Heikki Vatiainen
On 06/27/2012 11:23 PM, Ricardo Martinez wrote: > I’m using Radiator 3.1.13 Version 3.x is quite old, so you could consider upgrading in case they are more problems. > I have this configuration file : I think the main problem is this: DBusername user The option is slightly inc

Re: [RADIATOR] question about machine based authentication

2011-12-09 Thread Joy Veronneau
Ok, that's what I was looking for! putting DEFAULT in the file yields the desired behavior. Thanks! Joy On 12/8/11 5:47 PM, "Heikki Vatiainen" wrote: >On 12/09/2011 12:31 AM, Joy Veronneau wrote: >> Hmm, but EAPTLS_NoCheckId also doesn't check that the cert name matches >> the computer name. S

Re: [RADIATOR] question about machine based authentication

2011-12-08 Thread Heikki Vatiainen
On 12/09/2011 12:31 AM, Joy Veronneau wrote: > Hmm, but EAPTLS_NoCheckId also doesn't check that the cert name matches > the computer name. Seems like I would want the cert name checked? > Is there a way I can still check the cert name? In this case you could try not enabling EAPTLS_NoCheckId and

Re: [RADIATOR] question about machine based authentication

2011-12-08 Thread Joy Veronneau
Hmm, but EAPTLS_NoCheckId also doesn't check that the cert name matches the computer name. Seems like I would want the cert name checked? Is there a way I can still check the cert name? Sorry to have so many questionsŠ Thanks, Joy On 12/8/11 5:26 PM, "Heikki Vatiainen" wrote: >On 12/09/2011 12

Re: [RADIATOR] question about machine based authentication

2011-12-08 Thread Heikki Vatiainen
On 12/09/2011 12:15 AM, Joy Veronneau wrote: > But if I do that, I will still have to have the names of the machines in > the tls_anon file, wouldn't I? Good point, I overlooked that part. Please see ref.pdf section "5.20.46 EAPTLS_NoCheckId". You can turn off the name check. Thanks! Heikki > T

Re: [RADIATOR] question about machine based authentication

2011-12-08 Thread Joy Veronneau
But if I do that, I will still have to have the names of the machines in the tls_anon file, wouldn't I? Thanks, Joy On 12/8/11 5:07 PM, "Heikki Vatiainen" wrote: >On 12/07/2011 11:42 PM, Joy Veronneau wrote: > >Hello Joy, > >> I am still working on my machine based authentication config. >> >

Re: [RADIATOR] question about machine based authentication

2011-12-08 Thread Heikki Vatiainen
On 12/07/2011 11:42 PM, Joy Veronneau wrote: Hello Joy, > I am still working on my machine based authentication config. > > Config1 (below) works fine but requires that the names of the machines be > listed in the file tls_anon. Try with something like this: AuthByPolicy ContinueWhileAccept

Re: [RADIATOR] question about machine based authentication

2011-12-07 Thread Joy Veronneau
Hi, I am still working on my machine based authentication config. Config1 (below) works fine but requires that the names of the machines be listed in the file tls_anon. I need to modify this config so that I do not need to maintain a list of host names on the radiator server and so that I can ex

Re: [RADIATOR] question about machine based authentication

2011-11-19 Thread Heikki Vatiainen
On 11/19/2011 12:18 AM, Joy Veronneau wrote: > I think I need some more help with my config. It is working ok for my > machine cert based authentication, but only if I put the name of the > machine in a file on the radius server. Here is my config snippet: You could experiment using . Instead of

Re: [RADIATOR] question about machine based authentication

2011-11-18 Thread Joy Veronneau
Hi, I think I need some more help with my config. It is working ok for my machine cert based authentication, but only if I put the name of the machine in a file on the radius server. Here is my config snippet: Identifier TLS Filename %D/tls_anon EAPType TLS EAPTLS_CAFile /app/radius/keys/ADRoot

Re: [RADIATOR] question about machine based authentication

2011-11-15 Thread Heikki Vatiainen
On 11/15/2011 07:43 PM, Joy Veronneau wrote: > I've made some progress on this. The windows 7 machine is now contacting > the radius server, but its username starts with "host/" and radiator > doesn't seem to like that. Should the machine be sending some sort of > different username? I don't think

Re: [RADIATOR] question about machine based authentication

2011-11-15 Thread Joy Veronneau
Hi, I've made some progress on this. The windows 7 machine is now contacting the radius server, but its username starts with "host/" and radiator doesn't seem to like that. Should the machine be sending some sort of different username? I don't think I can get the request to the correct handler

Re: [RADIATOR] question about machine based authentication

2011-11-10 Thread Heikki Vatiainen
On 11/09/2011 09:46 PM, Joy Veronneau wrote: > Is it possible for the radiator server to do machine-based > authentication (via certificate) to an Active Directory domain? You may want to check if the really mean certificates, since machine based authentication can work with PEAP/EAP-MSCHAP-V2 t

Re: [RADIATOR] Question on FarmSize, SocketQueueLength, and net.core.rmem_max on Linux

2011-08-24 Thread Heikki Vatiainen
On 08/23/2011 05:52 PM, Frank Danielson wrote: > We are currently running Radiator 4.7 under Redhat 5.5 and I am > trying to make sure I understand the effect that the FarmSize > setting has on the amount of memory allocated for the SocketQueue. > > If Radiator is configured with some FarmSize do

Re: [RADIATOR] Question about IP Pool.

2011-08-21 Thread Heikki Vatiainen
On 08/20/2011 09:07 PM, Faisal Imtiaz wrote: Hello Faisal, > I am currently using Raditor configured with mysql for authenticating > DSL Subscribers. So far we have been allocating fixed IP addresses & > framed routes as needed for the subscribers. > > We have bunch of subscribers who need to

Re: (RADIATOR) Question in

2003-10-02 Thread Hugh Irvine
g Fei Sent: Thursday, October 02, 2003 1:58 PM To: 'Mike McCauley'; 'Hugh Irvine' Cc: [EMAIL PROTECTED] Subject: RE: (RADIATOR) Question in Hi Do i need to pass any parameter to testcommand.pl ? MAN -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] O

RE: (RADIATOR) Question in

2003-10-02 Thread Man Meng Fei
, 2003 1:58 PM To: 'Mike McCauley'; 'Hugh Irvine' Cc: [EMAIL PROTECTED] Subject: RE: (RADIATOR) Question in Hi Do i need to pass any parameter to testcommand.pl ? MAN -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike McCauley Sen

RE: (RADIATOR) Question in

2003-10-01 Thread Man Meng Fei
Hi Do i need to pass any parameter to testcommand.pl ? MAN -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike McCauley Sent: Thursday, October 02, 2003 12:36 PM To: Hugh Irvine; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: (RADIATOR) Question

Re: (RADIATOR) Question in

2003-10-01 Thread Mike McCauley
Hi Hugh, If you look at godies/external.cfg, you will see he needs something like this: Command c:/perl/bin/perl ./goodies/testcommand.pl DOS does not know how to interpret #!/usr/bin/perl so it cant run C:\Perl\bin\testcommand.pl without some cluues. Cheers. On Thu, 2 Oct 20

RE: (RADIATOR) Question in

2003-10-01 Thread Man Meng Fei
sending Access-Request... No reply sending Accounting-Request Start... No reply sending Accounting-Request Stop... No reply C:\> -Original Message----- From: Hugh Irvine [mailto:[EMAIL PROTECTED] Sent: Thursday, October 02, 2003 10:24 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re:

Re: (RADIATOR) Question in

2003-10-01 Thread Hugh Irvine
Hello Man Meng Fei - I suspect that Radiator is not able to run the external command. What happens when you run the following in a MS-DOS window: C:\Perl\bin\testcommand.pl There is probably something wrong with either the path or the contents of the file. regards Hugh On Thursday, Oct 2,

Re: (RADIATOR) Question on PreHandlerHook

2003-08-31 Thread Hugh Irvine
Hello Oscar - You should use "changeUserName()". ${$_[0]}->changeUserName("new-test-value"); See the code in Radius/Radius.pm->changeUserName(). This is because Radiator does some caching of the username internally. regards Hugh On Monday, Sep 1, 2003, at 04:45 Australia/Melbourne, Oscar Ga

Re: (RADIATOR) Question about spliting the NAS-IP-ADDRESS for SQL use

2003-08-22 Thread Hugh Irvine
Hello Troy - I suggest you write a PreClientHook that will add the pseudo-attributes shown below to the incoming request packet. There is an example that does something quite similar for Cisco pseudo-attributes in the file "goodies/hooks.txt". regards Hugh On Friday, Aug 22, 2003, at 06:49 A

Re: (RADIATOR) Question about AuthBy ADSI

2003-07-30 Thread Hugh Irvine
Hello Steve - Your configuration file is incorrect. You cannot have Realms inside Handlers. If you are using Handlers, you must use only Handlers and they cannot be placed inside other Handlers. You cannot have clauses inside clauses either. regards Hugh On Thursday, Jul 31, 2003, at 02:

Re: (RADIATOR) Question about AuthBy ADSI

2003-07-30 Thread Steve Caporossi
Hugh, Layers 8 & 9 prevent me from running Radiator on anything but a Linux box, I have no bias. :-) I am not very familiar with AD. My understanding is that policies can be managed for users, machines, etc. In our environment, we are mapping drives and limiting machines/user rights to resour

Re: (RADIATOR) Question about configuration file

2003-07-25 Thread Mike McCauley
Hello Geoffrey, On Fri, 25 Jul 2003 09:42 am, Hugh Irvine wrote: > Hello Geoffrey - > > On Thursday, Jul 24, 2003, at 19:40 Australia/Melbourne, DUFOUR > > Geoffrey wrote: > > Hello, > > > > > > > > As far as I understand, radiusd reads the configuration file only once > > (when it starts). Cor

Re: (RADIATOR) Question about configuration file

2003-07-24 Thread Andrew Stevenson
On Thu, 24 Jul 2003, DUFOUR Geoffrey wrote: > As far as I understand, radiusd reads the configuration file only once > (when it starts). Correct ? AFAIK > Is there a way to force radiusd to read the file every x min. or every > time the file is updated (new realm, RADIUS client, ...) without > r

Re: (RADIATOR) Question about configuration file

2003-07-24 Thread Hugh Irvine
Hello Geoffrey - On Thursday, Jul 24, 2003, at 19:40 Australia/Melbourne, DUFOUR Geoffrey wrote: Hello, ? As far as I understand, radiusd reads the configuration file only once (when it starts). Correct ? Correct - but see below. ? Is there a way to force radiusd to read the file every x m

Re: (RADIATOR) Question about AuthBy ADSI

2003-07-23 Thread Hugh Irvine
Hello Steve - You can use the AuthBy RADIUS clause to forward radius requests to a remote radius server. The exact configuration will depend on what else you are already doing in your configuration file. I am not sure I understand what you mean by "domain policies" - can you give me a bit more

Re: (RADIATOR) Question about AuthBy ADSI

2003-07-23 Thread Steve Caporossi
Running radiator on a W2K server does not appear to be an option for us...I need to forward any domain logins ie, domain\username to a Windows radius server, but only if they try to login to the domain. Has anyone done this and be willing to share their methodology? Can the domain policies be

Re: (RADIATOR) Question about AuthBy ADSI

2003-07-22 Thread Hugh Irvine
Hello Steve - Correct. AuthBy ADSI and the new AuthBy LSA clauses are only supported on recent Windows releases. You can either try the AuthBy NT clause, or you can run an instance of Radiator on the Windows host and proxy requests to it. You will find details on AuthBy NT in section 6.27 of t

Re: (RADIATOR) question --> solved I think =)

2003-07-22 Thread Chris Garzon
- Original Message - From: "Hugh Irvine" <[EMAIL PROTECTED]> To: "Chris Garzon" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Tuesday, July 22, 2003 7:59 AM Subject: Re: (RADIATOR) question > You should test your SQL statements by han

Re: (RADIATOR) question

2003-07-21 Thread Hugh Irvine
Hello Chris - You should test your SQL statements by hand with your database tools first before putting them in the configuration file. regards Hugh On Monday, Jul 21, 2003, at 20:10 Australia/Melbourne, Chris Garzon wrote: Hi, I've set up my AcctSQLStatement to look like this: AcctSQLStat

Re: (RADIATOR) question

2003-07-21 Thread Chris Garzon
Hi, I've set up my AcctSQLStatement to look like this: AcctSQLStatement update RADUSERS set TIMELEFT=TIMELEFT-0%{Acct-Session-Time}, OCTETSINLEFT=OCTETSINLEFT-0%{Ac \ ct-Input-Octets}, OCTETSOUTLEFT=OCTETSOUTLEFT-0%{Acct-Output-Octets} where USERNAME='%n' AcctSQLStatement update RADUSERS set VAL

Re: (RADIATOR) question

2003-07-18 Thread Chris
> AcctSQLStatement update RADUSERS set VALIDFROM=now where VALIDFROM IS NULL and Oh, ok thanks I get it, now how can my Radmin database set VALIDFROM initially to NULL, I tried to test it using radmin editUser.pl web script and it gave out this error: Not updated because: Invalid date/time format

Re: (RADIATOR) question

2003-07-18 Thread Mike McCauley
Hello Chris, On Fri, 18 Jul 2003 09:56 pm, Chris wrote: > > You could use an AcctSQLStatement that sets thir expiry date if it is > > currently NULL. The the first successful session start will set their > > expiry > > > date to, say the current date + 30 days (or whatever your policy is). > > tha

Re: (RADIATOR) question

2003-07-18 Thread Chris
> You could use an AcctSQLStatement that sets thir expiry date if it is > currently NULL. The the first successful session start will set their expiry > date to, say the current date + 30 days (or whatever your policy is). thanks mike should I be safe then if I add this to my AcctSQLStatement to

Re: (RADIATOR) question

2003-07-18 Thread queksteven
lt;[EMAIL PROTECTED]>, <[EMAIL PROTECTED]> cc: (bcc: QUEK Steven/Prod Dev Dir/STSunPage/ST Group) Subj

Re: (RADIATOR) question

2003-07-18 Thread Mike McCauley
Hello Chris, On Fri, 18 Jul 2003 12:05 pm, Chris wrote: > Hello list, > > I'm using radmin + radiator, Right now I want to do these to my system, > please point me out to some examples or possible solutions: > > 1. How do I make first time users to base their starting usage from the > moment they

Re: (RADIATOR) Question about configuration

2003-07-16 Thread Hugh Irvine
Hello William - Thanks for your mail. As far as I can see from what you show below, Radiator is running correctly. When you start the "radiusd" process, it prints out the messages as shown and then it waits until it receives a radius request from a client device. It looks like "radiusd" is

Re: (RADIATOR) Question about AutyBy LSA module?

2003-06-18 Thread Mike McCauley
Hello John, On Thu, 19 Jun 2003 01:27 am, John McFadden wrote: > Saw the annoucement on the AuthBy LSA module and I wanted to make sure I > understood it's implications. > > Does this module allow us to authenticate MSCHAP passwords against an > ActiveDirectory of NT domain controller? Yes. > >

Re: (RADIATOR) question about Radiator and Orinoco AP-2500

2003-03-19 Thread Hugh Irvine
Hello Primoz - You should probably use a packet sniffer (snoop, tcpdump, ethereal...)to check on exactly what radius reply attributes are being sent back by Cisco ACS and then configure Radiator to send the same ones. In general you will need at least the following: Filename /radiato

Re: (RADIATOR) Question on Make Test error [Radiator 3.5 on Solaris 2.8]

2003-02-24 Thread Hugh Irvine
Hello Kiaran - Could you please send me the name of the registered company that has purchased this copy of Radiator? Please reply to me directly and include the username that you use to access the web site. thanks and regards Hugh On Tuesday, Feb 25, 2003, at 14:05 Australia/Melbourne, [EMAI

Re: (RADIATOR) question on AuthSQLStatement

2002-12-30 Thread Hugh Irvine
Hello Seung Park - There is no mechanism currently to access the results of an AuthSQLStatement later during packet processing. This is why I suggested a PostAuthHook to post-process the results of the AuthSelect/AuthColumnDef in my other mail. Of course, you can also run SQL statements direc

Re: (RADIATOR) Question

2002-11-12 Thread Hugh Irvine
Hello Chris - Keep in mind that there are two different things going on in this scenario. The first is authentication which checks the username and password (and does whatever checks are required), and the second is accounting which is used to manage the session database. You should get the i

Re: (RADIATOR) Question about "Calls" table

2002-11-06 Thread Hugh Irvine
Hello Lin - This is because the default format for integer-date is being used. If you want to change it you should specify your own DateFromat. See sections 6.28.14 and 6.3 in the Radiator 3.3.1 reference manual. regards Hugh On Wednesday, November 6, 2002, at 07:55 AM, Huaikun Lin wrote:

Re: (RADIATOR) Question about "Calls" table

2002-11-05 Thread Huaikun Lin
Hi Hugh Here is my radius configuration: Foreground LogStdout LogDir /var/log/radius DbDir /local/etc/radius PidFile /var/run/radiusd.pid SnmpgetProg /local/bin/snmpget AuthPort1645 AcctPort1646 Trace 3 ... RewriteUsername s/^([^@]+).*/$1

Re: (RADIATOR) Question about "Calls" table

2002-11-04 Thread Hugh Irvine
Hello Lin - I will need to see a copy of your Radiator configuration file (no secrets) together with a trace 4 debug showing what is happening. regards Hugh On Tuesday, November 5, 2002, at 10:21 AM, Huaikun Lin wrote: Hi I am using SQL server and radiator 3.1 radius. In SQL server,we ha

Re: (RADIATOR) Question about AcctSQLStatement.

2002-10-23 Thread Hugh Irvine
Hello Sergio - From section 6.2 in the Radiator 3.3.1 reference manual: %% The percent character regards Hugh On Thursday, October 24, 2002, at 02:44 AM, Sergio Gonzalez wrote: *This message was transferred with a trial version of CommuniGate(tm) Pro* Hello. I'm having problems with th

Re: (RADIATOR) Question...

2002-05-26 Thread Hugh Irvine
Hello Stephen - Have a look at "buildsql" in the Radiator distribution. Section 10 in the Radiator 3.1 reference manual. ("doc/ref.html") regards Hugh On Mon, 27 May 2002 10:21, Stephen Malenshek wrote: > I was wondering if anyone has a script to import password and shadow files > into a sq

Re: (RADIATOR) question

2002-04-21 Thread Hugh Irvine
Hello Arnulfo - How are you programming the amount of time that a user is allowed to use? Most Radiator users employ an SQL database for user definitions and accounting and it is relatively easy to provide pre-paid services such as you describe in this way. This topic has been discussed many

Re: (RADIATOR) Question Time

2002-04-21 Thread Hugh Irvine
Hello Mick - You would use an AuthLog SQL for authentication logging. See section 6.50 in the Radiator 3.0 reference manual. For your proxy question I will need to see a copy of your configuration file (no secrets) together with a trace 4 debug from Radiator showing what is happening. regard

Re: (RADIATOR) question

2002-04-21 Thread Hugh Irvine
Hello Arnulfo - I am not exactly sure what you mean, as Radiator does not normally expire user accounts. Can you give me a bit more information about what you want to have happen? regards Hugh On Sat, 20 Apr 2002 13:52, Arnulfo Rojas Yanquen wrote: > Hello, > > I work an ISP and I have a

Re: (RADIATOR) Question

2002-03-26 Thread Hugh Irvine
Hello Stephen - To assign static addresses, you would normally specify the address in the reply attributes for the user in whatever user database you have. In a flat file it would look like this: # define users # check attributes on the first line (no trailing comma) # reply attributes on sec

Re: (RADIATOR) Question

2002-02-01 Thread Hugh Irvine
Hello Steve - We offer on-site training and consulting services on a contract basis. I have copied Joanne on this mail and she will send you the details. You can set up a users file with a DEFAULT entry like this: # define DEFAULT to accept everything DEFAULT Auth-Type = Accept regards Hu

RE: (RADIATOR) Question

2002-02-01 Thread Paul
Hi Steve, A handler like the one below will not perform any authentication: AuthByPolicy ContinueWhileAccept AuthBy AllocateIPAddressForGPRS AcctLogFileName %L/%N-gprs-%{GlobalVar:HostId}-detail%Y%m%d.log PostAuthHook file:"filename" However remember that yo

Re: (RADIATOR) Question about Radius and SQL

2002-01-25 Thread Hugh Irvine
Hello Martin - > Fri Jan 25 17:42:13 2002 32431: ERR: Could not connect to any SQL database. > Requ est is ignored. Backing off for 10 seconds > Fri Jan 25 17:42:28 2002 911157: ERR: Execute failed for > 'Sp_fetchUserPassword ' clouston'': SQL Timeout > Fri Jan 25 17:42:32 2002 481065: ERR: Exec

Re: (RADIATOR) Question about DBM Auth...

2002-01-17 Thread Hugh Irvine
Hello Fernando - There are no limits on the number of AuthBy clauses you can use (unless there is some underlying operating system limit on the number of files a single process can have open). Perhaps you can send me a copy of the complete configuration file (no secrets) together with a trac

Re: (RADIATOR) question about debug

2002-01-15 Thread Hugh Irvine
Hello David - It looks like you have specified an AuthBy RADIUS clause without specifying which ports to send to. Here is an example: Host . Secret . AuthPort 1812 AcctPort 1813 . Ha

Re: (RADIATOR) Question on defining realms

2001-11-19 Thread Hugh Irvine
Hello Elias - On Tuesday 20 November 2001 16:14, [EMAIL PROTECTED] wrote: > Hi Hugh, > > I defined a realm abc in my config file. So far Radiator has been > running great but now I have several users logging in as user@abc@abc. > How can I stop this? Thanks! > > > . > . > . > > The answer to

Re: (RADIATOR) Question:

2001-10-17 Thread neil d. quiogue
Though replying to my own email is bad form, I just decided to create a hook for this and it worked. Regards, Neil D. Quiogue - Original Message - From: "neil d. quiogue" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, October 17, 2001 8:01 PM Subject: (RADIATOR) Question:

Re: (RADIATOR) Question on Encrypted-Password/User-Password

2001-09-14 Thread Hugh Irvine
Hello Viraj - Section 13.1.2 in the Radiator 2.18.4 reference manual. regards Hugh On Friday 14 September 2001 00:05, Viraj Alankar wrote: > > Hello, > > Is there a functional difference between the following: > > > ... > AuthSelect select PASSWORD from SUBSCRIBERS where US

Re: (RADIATOR) Question regarding Internet phone

2001-09-05 Thread Hugh Irvine
Hello Ganbold - As mentioned previously, you should address this question to your NAS vendor. regards Hugh On Thursday 06 September 2001 23:51, ganbold wrote: > Hi Hugh, > > > Yes, NAS will use Voice over IP. > How it would be in this case? > > > Ganbold > > Hugh Irvine wrote: > > Hello Ganb

Re: (RADIATOR) Question regarding Internet phone

2001-09-05 Thread ganbold
Hi, Also there some billing systems we are interesting. MIND CTI, Portal etc. Are there anybody knows about these system on Radiator? Please let me know. thanks in advance, Ganbold Hugh Irvine wrote: > Hello Ganbold - > > Radiator can be used for any application that uses the radius proto

Re: (RADIATOR) Question regarding Internet phone

2001-09-05 Thread ganbold
Hi Hugh, Yes, NAS will use Voice over IP. How it would be in this case? Ganbold Hugh Irvine wrote: > Hello Ganbold - > > Radiator can be used for any application that uses the radius protocol. > > The question to ask is "what protocol does the NAS use to authenticate > Voice-Over-IP?". >

Re: (RADIATOR) Question regarding Internet phone

2001-09-05 Thread Hugh Irvine
Hello Ganbold - Radiator can be used for any application that uses the radius protocol. The question to ask is "what protocol does the NAS use to authenticate Voice-Over-IP?". As you rightly point out, Radiator is not a billing system, so you will still have to address that aspect, either by

Re: (RADIATOR) question

2001-07-23 Thread Brandon
- From: "Brandon" <[EMAIL PROTECTED]> To: "Pascal Robert" <[EMAIL PROTECTED]> Sent: Monday, July 23, 2001 10:28 AM Subject: Re: (RADIATOR) question > Same here. > Can anyone help us out? > > Brandon > > - Original Message - > From: "P

Re: (RADIATOR) Question about Rodopi?

2001-07-13 Thread Hugh Irvine
Hello Chairarth - It only makes sense to keep your user definitions in a single database, so if you are going to use Rodopi you should keep all your users there. regards Hugh On Friday 13 July 2001 21:23, Chairarth K wrote: > > Hello Hugh, > > Maybe only in Rodopi , maybe in Ropopi and Rad

Re: (RADIATOR) Question about Rodopi?

2001-07-13 Thread Chairarth K
Hello Hugh, Maybe only in Rodopi , maybe in Ropopi and Radmin  .  Please advise us in both case . Thanks, Chairath   Hugh Irvine wrote:  Hello Chairarth - Where are you going to maintain your customer definitions? In Radmin, Rodopi, or both? regards Hugh  At 13:49 +0700 01/7/12, Chairarth K wrot

Re: (RADIATOR) Question about Rodopi?

2001-07-11 Thread Hugh Irvine
Title: Re: (RADIATOR) Question about Rodopi? Hello Chairarth - Where are you going to maintain your customer definitions? In Radmin, Rodopi, or both? regards Hugh At 13:49 +0700 01/7/12, Chairarth K wrote: There is any problem if we will use Radmin, Radiator and Rodopi billing at the same

Re: (RADIATOR) question

2001-06-28 Thread Hugh Irvine
Title: Re: (RADIATOR) question Hello Brandon - If UUnet is mandating this, they must have a specification of what they mean. You will have to check with UUnet directly. regards Hugh At 3:09 AM -0700 6/26/01, Brandon wrote: Wish I knew too.  I tried emailing the list and know one seemed to

Re: (RADIATOR) question

2001-06-27 Thread Hugh Irvine
Title: Re: (RADIATOR) question Hello Eric - At 5:14 PM -0400 6/26/01, admin wrote: I need to reduce my Ascend-Data-Filter from length 28 to 26 Any ideas how?     You cannot just arbitrarily shorten the attribute - it contains a filter defintion that must remain logically consistent. What

Re: (RADIATOR) question

2001-06-26 Thread Brandon
Wish I knew too.  I tried emailing the list and know one seemed to know.  The only response I got back was that it was possible in PostAuthHooks.  UU.net is now requiring this to use their system. Brandon - Original Message - From: admin To: [EMAIL PROTECTED] Sent: Tue

Re: (RADIATOR) question on Auth-Requests

2001-06-18 Thread Hugh Irvine
Hello Viraj - You should not assume that Acct-Session-Id is always present in authentication packets. FWIW I have almost never seen it. hth Hugh At 4:32 PM -0400 6/16/01, Viraj Alankar wrote: >Hello, > > Watching authentication requests from our Ascend RASes show that >the Acct-Sessio

Re: (RADIATOR) Question on flat ISDN-users file -> CDB.

2001-06-07 Thread Hugh Irvine
Hello Jon - My suggestion would be to configure Radiator to access the Oracle database directly. This is very simple to set up with an AuthBy SQL clause. You will need to set up DBI and DBD-Oracle, together with the Oracle client libraries on the Radiator host, then configure the AuthBy SQL c

Re: (RADIATOR) Question

2001-05-21 Thread Hugh Irvine
Hello Quintin - > > I have purchased the Radiator and under evaluation. And I have a question > on the use of the check attribute "Group". > > According to the use of attribute Group, it will check under /etc/group. As > all we know that it is only a secondary group in /etc/group. Is there any

Re: (RADIATOR) question (failed insert in accounting)

2001-05-03 Thread Hugh Irvine
Hello Andy - As usual, a copy of the configuration file (no secrets) and a trace 4 debug from Radiator are neccessary for us to be able to help you. thanks Hugh On Thursday 03 May 2001 19:29, Andy De Petter wrote: > Hello, > > I have "AcctFailedLogFileName" configured, in my radius accountin

Re: (RADIATOR) question

2001-03-18 Thread Hugh Irvine
from LOCALCLIENTLIST,NEXTCLIENTLIST,MORECLIENTLIST > > > Chris > > > From: Hugh Irvine <[EMAIL PROTECTED]> > > Organization: Open System Consultants > > Reply-To: [EMAIL PROTECTED] > > Date: Mon, 19 Mar 2001 16:06:10 +1100 > > To: Chris M <[EMAIL P

Re: (RADIATOR) question

2001-03-18 Thread Chris M
+1100 > To: Chris M <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]> > Subject: Re: (RADIATOR) question > > > Hello Chris - > > On Monday 19 March 2001 15:13, Chris M wrote: >> Is it possible to have multiple tags in a config file? I'd >> like to mai

Re: (RADIATOR) question

2001-03-18 Thread Hugh Irvine
Hello Chris - On Monday 19 March 2001 15:13, Chris M wrote: > Is it possible to have multiple tags in a config file? I'd > like to maintain the client lists in separate tables for separate cities > (it simplifies some SQL queries later). > No. ClientListSQL is a global definition. You can ho

Re: (RADIATOR) Question about SessionDatabase

2000-11-17 Thread Hugh Irvine
Hello Alexey - On Fri, 17 Nov 2000, Alexey A. Shavaldin wrote: > Hello ! > > I have experienced a problem with simultaneous logins of such a case. > I have global RewriteUsername defined in my radius.cfg: > > RewriteUsername tr/[A-Z]/[a-z]/ > RewriteUsername s/^(.*)\/(.*)/$2/ > RewriteUsername

Re: (RADIATOR) question for the list...remote timeouts.

2000-10-17 Thread Hugh Irvine
Hello Blake - On Wed, 18 Oct 2000, Blake Golliher wrote: > > I have a database of users in Oracle, we arent' keeping track of accounting > data, and the only thing I have control over are the endpoint radius > servers. I need to be able to limit users to a set time out. all users in > a realm

Re: (RADIATOR) Question about LDAP Auth and SQL Accounting.

2000-09-13 Thread Hugh Irvine
Hello Alejandro - On Thu, 14 Sep 2000, Alejandro Gajardo T. wrote: > Hello! > so far i had check the documentation, i couldn't find an option to do > LDAP Authentication > and send the accounting to a SQL Database, is this possible and i'm had > not see it. or it is not > supported right n

Re: (RADIATOR) question: Cisco 3000 VPN/radiator/windows 2000

2000-09-08 Thread Hugh Irvine
Hello Jeff - On Fri, 08 Sep 2000, Jeff Behl wrote: > > Hi all, > > I apologize for asking a question which has probably been asked before but I > can't seem to find an archive of the list. > http://www.starport.net/~radiator > As there is no Cisco VPN client for windows 2000, I've b

Re: (RADIATOR) Question about Client clause

2000-07-06 Thread Hugh Irvine
Hello Matt - On Thu, 06 Jul 2000, Matt Nichols wrote: > Hello, > > If I specify a clause in Radiator without specifying > DefaultRealm, will all the usernames be appended with 'username@' or will > they simply remain 'username'? Typically we have always had 'DefaultRealm > local' which woul

Re: (RADIATOR) question about

2000-06-09 Thread Hugh Irvine
Hello Christian - On Sat, 10 Jun 2000, [EMAIL PROTECTED] wrote: > hi there, > > we are using one part of radiator as radius-proxy. > > for some reason we get all the time such errors.. any idea where it comes from ? > > does the authenticator mean the accesserver or the clientradiusserver ? >

Re: (RADIATOR) question about radiator <-> mysql --> static ip assingment

2000-05-22 Thread Hugh Irvine
Hello Christian - On Mon, 22 May 2000, [EMAIL PROTECTED] wrote: > hi there, > > just have tried to install radiator with mysql-authentication. > everything works fine, except the assingnment of static ips > and the "login time left". - last one is probably a bug in the prg ? > i found out that

Re: (RADIATOR) Question regarding DupInterval

2000-02-09 Thread Paul Rolland
Hi Mike, Thanks for that The config will be changed according to your advice. Regards, Paul Dans son message (In his/her message), Mike McCauley ecrivait (wrote) : > Hi Christophe, > > My advice is to reduce the DupInterval to something like 2 seconds. It is > really only intended to catch

Re: (RADIATOR) Question regarding DupInterval

2000-02-09 Thread Mike McCauley
Hi Christophe, My advice is to reduce the DupInterval to something like 2 seconds. It is really only intended to catch genuine duplicate packets (ie packets sent along duplicate parallel network paths, or from some other pathological network problem). Its really not supposed to catch _retransmiss

Re: (RADIATOR) Question about accounting

1999-12-29 Thread Hugh Irvine
Hello John - On Wed, 29 Dec 1999, [EMAIL PROTECTED] wrote: > Hi; > > Our system is working just fine (authentication wise), but I need to be able to send accounting packets to two seperate locations for a particular realm. > > For example: > > Authentication packets for a certain realm are p

Re: (RADIATOR) Question about setup

1999-11-22 Thread Hugh Irvine
Hello Kelly - On Tue, 23 Nov 1999, Kelly Hamlin wrote: > Im using Ascend 6000 series NAS's and im using radiator to authenticate off > the platypus database, everything works fine, cept i get a lot of errors in > the window. Im using the ascend dictionary file and below i have my config > and be

RE: (RADIATOR) Question about setup

1999-11-22 Thread Dave Kitabjian
You say, "everything works fine...". Looking at your Calls table in the database, are there any entries in the "Username" column? Or are they just NULL? Dave On Monday, November 22, 1999 2:24 PM, Kelly Hamlin [SMTP:[EMAIL PROTECTED]] wrote: > Im using Ascend 6000 series NAS's and im using ra

Re: (RADIATOR) Question about group

1999-11-17 Thread Mike McCauley
Hello Jason, On Nov 16, 10:21pm, Jason Kao wrote: > Subject: (RADIATOR) Question about group > > After reading Radiator radius server manual and searching the FAQ and mail > archives, I still can not get the clear picture. My question is > > If I am planning to use group in order to reply differe

Re: (RADIATOR) Question about group

1999-11-16 Thread Hugh Irvine
Hello Jason - On Wed, 17 Nov 1999, Jason Kao wrote: > After reading Radiator radius server manual and searching the FAQ and mail > archives, I still can not get the clear picture. My question is > > If I am planning to use group in order to reply different reply items for > different group, do

Re: (RADIATOR) Question on auth by sql setup

1999-11-11 Thread Hugh Irvine
Hello Jay - On Thu, 11 Nov 1999, Jay West wrote: > - Original Message - > From: Jay West <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, November 09, 1999 6:44 AM > Subject: Question on auth by sql setup > > > > We're trying to switch from DBM user files to mySQL user fi

  1   2   >