[RADIATOR] Radius Feed to third party Billing Vendor

2012-01-24 Thread Traiano Welcome
Hi List

I have a number of radiator servers (radiator 4.9) handling auth+acct and
storing radius accounting data in local postgresql databases. At the same
time I need to "feed" all the radius accounting data I'm receiving to a
third party's data processing server using RADIUS protocol, so that it can
be analysed independently from our own billing operations.

As a feed mechanism, I'm thinking of somehow proxying all accounting
requests (in addition to handling them locally) but I can see a number of
problems with that. My question is:

Is there a means of getting radiator to feed (using radius protocol) a
copy of accounting requests to another radius system, while performing
all necessary auth and accounting operations localy as normal ?


Thanks in Advance!
Traiano Welcome

___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator


Re: [RADIATOR] Radius Feed to third party Billing Vendor

2012-01-24 Thread Heikki Vatiainen
On 01/24/2012 04:20 PM, Traiano Welcome wrote:

> I have a number of radiator servers (radiator 4.9) handling auth+acct and
> storing radius accounting data in local postgresql databases. At the same
> time I need to "feed" all the radius accounting data I'm receiving to a
> third party's data processing server using RADIUS protocol, so that it can
> be analysed independently from our own billing operations.
> 
> As a feed mechanism, I'm thinking of somehow proxying all accounting
> requests (in addition to handling them locally) but I can see a number of
> problems with that. My question is:
> 
> Is there a means of getting radiator to feed (using radius protocol) a
> copy of accounting requests to another radius system, while performing
> all necessary auth and accounting operations localy as normal ?

You can use AuthBy RADIUS for this. A couple of notes:
- Use NoForwardAuthentication or IgnoreAuthentication if you handle both
authentication and accounting with the same Handler. This will keep
authentication requests from getting proxied. See the manual for the
differences of the two options
- Note that when AuthBy RADIUS forwards the accounting request it will
return IGNORE. Depending on what other AuthBys you have and how your
AuthByPolicy has been set (defaults to ContinueWhileIgnore), you may
need to do accounting forwarding with the last AuthBy

Thanks!
Heikki

-- 
Heikki Vatiainen 

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS,
NetWare etc.
___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator


[RADIATOR] Using Storable in a hook

2012-01-24 Thread Jared Watkins
I'm seeing some weird errors and behavior trying to use the freeze method from 
Storable.  Is there a special trick to making it work in hook code? 

I saw a reference on the cpan page for special handling when used in a 'Safe' 
compartment.. is that what's happening here?   For reference.. for 
development/debugging I'm attempting to serialize and store (in db field) a 
hash I'm creating with all the per packet name-value pairs.

Thanks,
J


___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator


Re: [RADIATOR] Using Storable in a hook

2012-01-24 Thread Heikki Vatiainen
On 01/24/2012 10:44 PM, Jared Watkins wrote:

> I'm seeing some weird errors and behavior trying to use the freeze method 
> from Storable.  Is there a special trick to making it work in hook code? 

I have not used Storable myself, but if you could reply with some
examples I can take a a look.

Note that some of the data structures, such as radius requests ($p
usually) are very large. You could see e.g. with Data::Dumper to see
what they look like.

> I saw a reference on the cpan page for special handling when used in a 'Safe' 
> compartment.. is that what's happening here?   For reference.. for 
> development/debugging I'm attempting to serialize and store (in db field) a 
> hash I'm creating with all the per packet name-value pairs.

Hard to tell. Examples would be useful :)

Thanks!
Heikki

-- 
Heikki Vatiainen 

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS,
NetWare etc.
___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator


Re: [RADIATOR] Radius Feed to third party Billing Vendor

2012-01-24 Thread Hugh Irvine

Hello Triano -

The way I generally do this sort of thing is with Handlers (not Realms):

…..

# accounting



AuthByPolicy ContinueAlways

# proxy to remote


…..


# normal local processing


…..




# authentication



# normal local processing


…..




…..

hope that helps

regards

Hugh


On 25 Jan 2012, at 07:30, Heikki Vatiainen wrote:

> On 01/24/2012 04:20 PM, Traiano Welcome wrote:
> 
>> I have a number of radiator servers (radiator 4.9) handling auth+acct and
>> storing radius accounting data in local postgresql databases. At the same
>> time I need to "feed" all the radius accounting data I'm receiving to a
>> third party's data processing server using RADIUS protocol, so that it can
>> be analysed independently from our own billing operations.
>> 
>> As a feed mechanism, I'm thinking of somehow proxying all accounting
>> requests (in addition to handling them locally) but I can see a number of
>> problems with that. My question is:
>> 
>> Is there a means of getting radiator to feed (using radius protocol) a
>> copy of accounting requests to another radius system, while performing
>> all necessary auth and accounting operations localy as normal ?
> 
> You can use AuthBy RADIUS for this. A couple of notes:
> - Use NoForwardAuthentication or IgnoreAuthentication if you handle both
> authentication and accounting with the same Handler. This will keep
> authentication requests from getting proxied. See the manual for the
> differences of the two options
> - Note that when AuthBy RADIUS forwards the accounting request it will
> return IGNORE. Depending on what other AuthBys you have and how your
> AuthByPolicy has been set (defaults to ContinueWhileIgnore), you may
> need to do accounting forwarding with the last AuthBy
> 
> Thanks!
> Heikki
> 
> -- 
> Heikki Vatiainen 
> 
> Radiator: the most portable, flexible and configurable RADIUS server
> anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
> Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
> TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
> DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS,
> NetWare etc.
> ___
> radiator mailing list
> radiator@open.com.au
> http://www.open.com.au/mailman/listinfo/radiator


--

Hugh Irvine
h...@open.com.au

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, 
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER etc. 
Full source on Unix, Windows, MacOSX, Solaris, VMS, NetWare etc.

___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator


Re: [RADIATOR] Using Storable in a hook

2012-01-24 Thread Jared Watkins
I figured out that I have to call it directly like Storable::nfreeze(\%x) but 
the error I was getting for other way was:

Bizarre copy of HASH in refgen at

Now.. I'm passing the value in as a bound parameter in the hook and according 
to a length call on the variable.. it's going in with an average length of 1450 
bytes.  However.. when I fetch it from the database (postgres) I'm only getting 
back 3 bytes.

I'm using just the attributes list out of the $p variable by $p->{'Attributes'}.

I've done binary data through DBI before (to mysql) without a problem.. so I'm 
not sure where it might be getting lost here. 

Thanks,
Jared


On Jan 24, 2012, at 5:59 PM, Heikki Vatiainen wrote:

> On 01/24/2012 10:44 PM, Jared Watkins wrote:
> 
>> I'm seeing some weird errors and behavior trying to use the freeze method 
>> from Storable.  Is there a special trick to making it work in hook code? 
> 
> I have not used Storable myself, but if you could reply with some
> examples I can take a a look.
> 
> Note that some of the data structures, such as radius requests ($p
> usually) are very large. You could see e.g. with Data::Dumper to see
> what they look like.
> 
>> I saw a reference on the cpan page for special handling when used in a 
>> 'Safe' compartment.. is that what's happening here?   For reference.. for 
>> development/debugging I'm attempting to serialize and store (in db field) a 
>> hash I'm creating with all the per packet name-value pairs.
> 
> Hard to tell. Examples would be useful :)
> 
> Thanks!
> Heikki
> 
> -- 
> Heikki Vatiainen 
> 
> Radiator: the most portable, flexible and configurable RADIUS server
> anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
> Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
> TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
> DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS,
> NetWare etc.

___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator