Re: (RADIATOR) insert

2003-07-04 Thread Hugh Irvine
Hello Craig - I generally find it easier to use Handlers for this sort of thing and process special usernames like "TEST" seperately: . . regards Hugh On Saturday, Jul 5, 2003, at 09:09 Australia/Melbourne, Craig Gittens wrote: Hey guys, Is there a way to exempt certain u

Re: (RADIATOR) Allowing password caseinsensitive.

2003-07-04 Thread Hugh Irvine
Hello Mushtaque - You should add the following to your AuthBy SQL clause: . CaseInsensitivePasswords See section 6.17.16 in the Radiator 3.6 reference manual ("doc/ref.html"). regards Hugh On Saturday, Jul 5, 2003, at

Re: (RADIATOR) Errors while starting radiator 3.6 daemon

2003-07-04 Thread Hugh Irvine
Hello Freerk - There is a FAQ item on this problem here: http://www.open.com.au/radiator/faq.html#127 regards Hugh On Saturday, Jul 5, 2003, at 04:34 Australia/Melbourne, Freerk J. Bosscha wrote: Thanks for reading this question: When I start my radiator daemon on my redhat linux 9.0 box w

Re: (RADIATOR) problems during installation

2003-07-04 Thread Hugh Irvine
Hello Binya - I have not been able to find your records in our database, so could you please send me the name of the registered company that has purchased this copy of Radiator, together with the username and password you use to access the web site. Please respond to me directly. BTW - the late

Re: (RADIATOR) insert

2003-07-06 Thread Hugh Irvine
thing is after looking at this is that I should really be using SQL> for Authentication. I will make the changes but what about the question above? Thanks, Craig. -Original Message- From: Hugh Irvine [mailto:[EMAIL PROTECTED] Sent: Friday, July 04, 2003 8:05 PM To: Craig Gittens Cc

Re: (RADIATOR) Radiator 3.6 buildsql not working

2003-07-07 Thread Hugh Irvine
Hello Angus - The correct spelling is "dbi:Oracle:rad". See section 24.4 in the Radiator 3.6 reference manual ("doc/ref.html"). regards Hugh On Tuesday, Jul 8, 2003, at 14:16 Australia/Melbourne, Angus Yiu wrote: Dear Sir,       I am trying to config. a radiator (3.6-demo)  using in order

Re: (RADIATOR) Dual Radiator Setup

2003-07-07 Thread Hugh Irvine
Hello Tony - Many Radiator users do exactly what you describe. You can have different configuration files, but it is usually easier if you have a single configuration file and use parameters and GlobalVar's passed in on the command line to set up the two instances. regards Hugh On Tuesday, J

Re: (RADIATOR) PEAP and LEAP

2003-07-07 Thread Hugh Irvine
Hello - Yes you should use the "eap_multi.cfg" configuration file to begin with and set the correct EAPType's. You will find this topic discussed on the Radiator mailing list archive: www.open.com.au/archives/radiator regards Hugh On Tuesday, Jul 8, 2003, at 15:28 Australia/Melbourne, [EMA

Re: (RADIATOR) Radiator 3.6 buildsql not working

2003-07-08 Thread Hugh Irvine
itting the use of e-mail for such purpose.   - ----- Original Message - From: Hugh Irvine To: Angus Yiu Cc: [EMAIL PROTECTED] Sent: Tuesday, July 08, 2003 1:14 PM Subject: Re: (RADIATOR) Radiator 3.6 buildsql not wor

Re: (RADIATOR) radius reply from different server!

2003-07-09 Thread Hugh Irvine
Hello Shan - You should probably use the "UseExtendedIds" parameter in the AuthBy RADIUS clause in Radiator 3.6 (plus patches). Otherwise you can use the "ServerHasBrokenAddresses" parameter. regards Hugh On Wednesday, Jul 9, 2003, at 14:49 Australia/Melbourne, S H A N wrote: hi, we

Re: (RADIATOR) Problems with GlobalVars in client handler

2003-07-09 Thread Hugh Irvine
Hello Chris - I have copied this to Mike (who is away at the moment), but I doubt that it can be done. regards Hugh On Wednesday, Jul 9, 2003, at 12:42 Australia/Melbourne, Chris Myers wrote: Hi Hugh, Radiator doesn't seem to like though seems to work fine in other places. Could th

Re: (RADIATOR) Multiple Accounting DBs, Single Auth DB.

2003-07-09 Thread Hugh Irvine
Hello Kevin - You will really need a slightly more complicated setup to do this. # define AuthBy clauses Identifier SQLAccounting . Identifier Proxy1 .. AddToReply Class = Proxy1 Identifier Proxy2 AddToReply Class

Re: (RADIATOR) authentication by using DBFile

2003-07-09 Thread Hugh Irvine
Hello Masa - What is the problem? And why are you using a DB file? Please send me a trace 4 debug from Radiator showing the problem together with a clear description of what is happening. regards Hugh On Wednesday, Jul 9, 2003, at 02:03 Australia/Melbourne, [EMAIL PROTECTED] wrote: Hello,

Re: (RADIATOR) LDAP SSL Connection

2003-07-09 Thread Hugh Irvine
Hello Jack - Have you installed the prerequisite perl modules to connect to your LDAP server? See section 6.35 in the Radiator 3.6 reference manual ("doc/ref.html"). regards Hugh On Thursday, Jul 10, 2003, at 06:46 Australia/Melbourne, jsingh wrote: Hi  I have ported over my Radiator insta

Re: (RADIATOR) Use of Oracle in PostAuthHook?

2003-07-09 Thread Hugh Irvine
Hello John - In your case I would suggest using Oracle stored procedures for your business rules. There is a contributed module in the goodies directory called "AuthBy PLSQL" that you can use for this. regards Hugh On Thursday, Jul 10, 2003, at 01:47 Australia/Melbourne, John McFadden wrote

Re: (RADIATOR) Handler question

2003-07-10 Thread Hugh Irvine
Hello Andy - Yes you can use regular expressions with Handlers, and the first match is the only match. If a request can match multiple Handlers, it will only be processed by the first one that matches. Therefore the more specific Handlers must appear before the more general Handlers in the lis

Re: (RADIATOR) TLS problem?

2003-07-10 Thread Hugh Irvine
Hello Masa - Thanks for the configuration and log file. It looks like Radiator is crashing and restarting, so could you also run radiusd from the command line to capture the Perl error message? perl radiusd -foreground -log_stdout -trace 4 -config_file . I have copied this mail to Mike,

Re: (RADIATOR) LDAP SSL Connection

2003-07-10 Thread Hugh Irvine
Hello Jack - Are you getting any error messages from Perl? You can run radiusd from the command line to see what is happening: perl radiusd -foreground -log_stdout -trace 4 -config_file .. Please send a copy of the configuration file together with the trace 4 debug and any error messages.

Re: (RADIATOR) Assign static ip address based on NAS Identifier

2003-07-10 Thread Hugh Irvine
Hello Dirk - I don't quite understand exactly what you want to do - can you give me a bit more detail? regards Hugh On Thursday, Jul 10, 2003, at 20:45 Australia/Melbourne, Dirk Laan wrote: Hello, Is it possible to assign a static ip addresses based on the NAS Identifier and how do I confi

Re: (RADIATOR) Radiator 3.6 authenticate two times

2003-07-10 Thread Hugh Irvine
Hello Angus - On Friday, Jul 11, 2003, at 13:14 Australia/Melbourne, Angus Yiu wrote: Dear Sir,   > I want to configure the radiator that the user need to authenticate by 2 steps, first check Database A that the user exist, then check the username and password in another Database B, is it possib

Re: (RADIATOR) Linux PPP concentrator problems

2003-07-10 Thread Hugh Irvine
Hello Craig - Thanks for your mail. As you can see from the trace below, there is no NAS-Port-Type attribute present in the request. Here is the dictionary definition from Radiator 3.6: ATTRIBUTE NAS-Port-Type 61 integer I think you will need to check the configur

Re: (RADIATOR) Cisco console privilege level

2003-07-14 Thread Hugh Irvine
Hello Telmo - Thanks for your mail. I think this is a Cisco issue, as the debug appears to show that radius is doing the same thing in both cases. Perhaps it is not possible to control the console port in this way? Check with your Cisco support person or the Cisco web site. regards Hugh On

Re: (RADIATOR) Recommendation on Session Table

2003-07-15 Thread Hugh Irvine
Hello Shan - You can configure your own AddQuery in the SessionDatabase SQL clause. See section 6.7.3 in the Radiator 3.6 reference manual. regards Hugh On Tuesday, Jul 15, 2003, at 16:49 Australia/Melbourne, S H A N wrote: hi, i need to maintain session table in a mysql database table. by

Re: (RADIATOR) Recommendation on Session Table

2003-07-15 Thread Hugh Irvine
A N wrote: so if i opt to use only userid then session table with userids only would be ok? rgds, On Tue Jul 15, 2003 at 03:32:31PM SGT, Hugh Irvine wrote: Hello Shan - You can configure your own AddQuery in the SessionDatabase SQL clause. See section 6.7.3 in the Radiator 3.6 reference m

Re: (RADIATOR) Problems upgrading

2003-07-15 Thread Hugh Irvine
Hello Bogdan - I suggest you upgrade to the latest version - Radiator 3.6 (plus patches). There have been many improvements to the SQL code since 2.19. regards Hugh On Tuesday, Jul 15, 2003, at 20:44 Australia/Melbourne, Bogdan TARU wrote: Hi everyone, I have some problems when trying to

Re: (RADIATOR) Separate per Realm?

2003-07-16 Thread Hugh Irvine
Hello Michael - I can't see any reason why this shouldn't work. Can you send me a trace 4 debug showing what is happening? regards Hugh I have the following: AuthByPolicy ContinueWhileAccept Identifier myauthlogger Filename authlog Succ

Re: (RADIATOR) LEAP and AuthBy LDAP2

2003-07-16 Thread Hugh Irvine
Hello Mauro - You are correct, you will need to use plaintext passwords with LEAP. regards Hugh On Wednesday, Jul 16, 2003, at 19:04 Australia/Melbourne, ZAGO, Mauro wrote: Dear all, I am trying to configure Radiator as radius server for a Cisco Aironet 340. My userlist is on an Op

Re: (RADIATOR) Radiator & IPTables integraton

2003-07-16 Thread Hugh Irvine
Hello Francisco - You can use a PostAuthHook to do whatever is required to add a dynamic rule to iptables. There are some example hooks in the file "goodies/hooks.txt" in the Radiator distribution. regards Hugh Is it possible to add a dynamic rule to Iptables allowing the authenticated us

Re: (RADIATOR) AcctLogFileFormat

2003-07-16 Thread Hugh Irvine
Hello Pedro - You could add a pseudo-attribute to the current request which would contain the time string in whatever format you require. There are some example hooks in the file "goodies/hooks.txt" in the Radiator distribution. regards Hugh On Thursday, Jul 17, 2003, at 08:23 Australia/Melb

Re: (RADIATOR) RADIATOR

2003-07-16 Thread Hugh Irvine
Hello Karen - My apologies, but I don't quite understand your question. The Radiator dictionary file contains the radius protocol attribute definitions, together with a number of vendor specific attribute definitions and the enumerated values for those attributes that use them. There are a nu

Re: (RADIATOR) Question about configuration

2003-07-16 Thread Hugh Irvine
Hello William - Thanks for your mail. As far as I can see from what you show below, Radiator is running correctly. When you start the "radiusd" process, it prints out the messages as shown and then it waits until it receives a radius request from a client device. It looks like "radiusd" is

(RADIATOR) Re: radiusd Dos Command works great....but service is intermittent

2003-07-16 Thread Hugh Irvine
Hello Robert - You will find some information on this in section 16.4 of the Radiator 3.6 reference manual ("doc/ref.html"). regards Hugh On Wednesday, Jul 16, 2003, at 22:53 Australia/Melbourne, Robert Torres wrote: Hello, Everyone. In the past few weeks of my radius 3.6 implementation i

Re: (RADIATOR) Problems upgrading

2003-07-16 Thread Hugh Irvine
with the MySQL connection? Again, only the first test results in this "mysql has gone away" error, the following tests are allright. Thank you, bogdan On Wed, 16 Jul 2003, Hugh Irvine wrote: Hello Bogdan - I suggest you upgrade to the latest version - Radiator 3.6 (plus patches). T

Re: (RADIATOR) Radiator & IPTables integraton

2003-07-17 Thread Hugh Irvine
lient IP I need to use the clause or can I stay witch my DHCPD service? - When user disconnects form the network, how can I run another script to remove him from the IPTABLES list? Best regards, Francisco Contreiras -Original Message----- From: Hugh Irvine [mailto:[EMAIL PROTECTED] Sent: q

Re: (RADIATOR) Problems upgrading

2003-07-17 Thread Hugh Irvine
quot;MySQL has gone away problem", here are the infos: FreeBSD 4.8-REL on x86 Perl v5.6.1 (built from ports) DBD::mysql v2.9002 DBI v1.37 MySQL 3.23.55 Thanks, bogdan On Thu, 17 Jul 2003, Hugh Irvine wrote: Hello Bogdan - The first problem is because radpwtst cannot find the dictionary file.

Re: (RADIATOR) UsernameCharset Option

2003-07-17 Thread Hugh Irvine
Hello Marcella - You could use a PreClientHook to check the usernames in the same fashion that more recent Radiator versions do. You will find some example hooks in the file "goodies/hooks.txt". You should also consider upgrading - latest version is Radiator 3.6 (plus patches). regards Hugh

Re: (RADIATOR) Queries on proxy radius and config file auto refresh on Radiator Radius

2003-07-18 Thread Hugh Irvine
Hello Brian - For your first question, you can use the AuthBy SQLRADIUS clause for your radius proxy targets, and you can use a Client DEFAULT to match any number of client devices. . See section 6.45 in the Radiator 3.6 reference manual ("doc/ref.html"). For your second question, you ca

Re: (RADIATOR) Problem with Handlers, it seems

2003-07-18 Thread Hugh Irvine
Hello Tim - This looks like an error in the configuration file, probably in an AddToReply or similar. Without seeing the configuration file it is hard to say for sure. regards Hugh On Saturday, Jul 19, 2003, at 03:28 Australia/Melbourne, Timothy G. Wells wrote: Greetings, I upgraded from a

Re: (RADIATOR) portmaster and User-Name changes

2003-07-18 Thread Hugh Irvine
Hello Michael - A more usual and portable method of doing this is to use the Class attribute and log it in your accounting. AddToReply Class = "[EMAIL PROTECTED]" regards Hugh On Saturday, Jul 19, 2003, at 04:18 Australia/Melbourne, Michael Shoemaker wrote: Greetings... I have been able t

Re: (RADIATOR) Warnings in log file

2003-07-20 Thread Hugh Irvine
Hello Binaya - The problem is that you do not have a Client clause in your Radiator configuration file for the device at IP address 202.52.241.1 (or something similar). You will need to check a copy of the configuration file against a trace 4 debug showing what is happening. regards Hugh On M

Re: (RADIATOR) Radiator + Oracle Bug?

2003-07-21 Thread Hugh Irvine
Hello Wesley - If the SQL database access times out, Radiator by default will wait 10 minutes before trying again. You can adjust the Timeout and FailureBackoffTime parameters in the AuthBy SQL clause. See sections 6.28.4 and 6.28.5 in the Radiator 3.6 reference manual. regards Hugh On Sund

Re: (RADIATOR) dirt newbie question on moving from flat file to SQL auth

2003-07-21 Thread Hugh Irvine
ne close by who has some experience with SQL and Microsoft SQL in particular who can assist you. BTW - this topic has been discussed often on the mailing list, so I suggest you look there as well: www.open.com.au/archives/radiator regards Hugh On Sunday, Jul 20, 2003, at 10:37 Australia/Me

Re: (RADIATOR) dirt newbie question on moving from flat file to SQL auth

2003-07-21 Thread Hugh Irvine
ards Hugh Thanks again, shamefacedly. Sr. Mary Grace ****** Hi Hugh Irvine and all you folks who know LOTS more than we idiots over here :-) We have been running Radiator for years on a flat file users list. Recently, we have bee

Re: (RADIATOR) Queries on proxy radius and config file auto refre sh on Radiator Radius

2003-07-21 Thread Hugh Irvine
Hello Brian - On Monday, Jul 21, 2003, at 17:21 Australia/Melbourne, Brian CHNG Sing Yong wrote: Hi Hugh   Thanks for the reply, further queries on the two questions, using the client default resolves the need to configure new RAS client in the Radiator but at my Radius Host i still need to add

Re: (RADIATOR) Radusage table not updated.

2003-07-21 Thread Hugh Irvine
Hello Michael - You should try the queries by hand to see what is happening. regards Hugh On Saturday, Jul 19, 2003, at 08:43 Australia/Melbourne, Michael Bellears wrote: Radiator/Radmin is auth/acct for dialup users (MAX6000/PM3's), and also DSL users(Cisco7200). Dialup users acct data i

Re: (RADIATOR) Wildcards in Handler Clause

2003-07-21 Thread Hugh Irvine
Hello Brian - You can do something like this: BTW - as always you should test thoroughly to verify correct operation. regards Hugh On Monday, Jul 21, 2003, at 18:14 Australia/Melbourne, Brian Morris wrote: Hi All,   Is it possible to have wildcards in handlers?   I would like to hav

Re: (RADIATOR) Radiator + Oracle Bug?

2003-07-21 Thread Hugh Irvine
Hello Dan - No it shouldn't stop/freeze the process (except that Radiator will stop during the Timeout period). regards Hugh On Tuesday, Jul 22, 2003, at 08:22 Australia/Melbourne, Dan Melomedman wrote: Hugh Irvine wrote: Hello Wesley - If the SQL database access times out, Radiat

Re: (RADIATOR) Radusage table not updated.

2003-07-21 Thread Hugh Irvine
Hello Michael - The problem is due to the incorrect quoting of the string containing the "@" sign. In most clauses based on SQL, %0 can be used for the username string and it will always be correctly quoted. regards Hugh On Monday, Jul 21, 2003, at 20:24 Australia/Melbourne, Michael Bellea

Re: (RADIATOR) question

2003-07-21 Thread Hugh Irvine
Hello Chris - You should test your SQL statements by hand with your database tools first before putting them in the configuration file. regards Hugh On Monday, Jul 21, 2003, at 20:10 Australia/Melbourne, Chris Garzon wrote: Hi, I've set up my AcctSQLStatement to look like this: AcctSQLStat

Re: (RADIATOR) Radusage table not updated.

2003-07-21 Thread Hugh Irvine
Hello Michael - Can you please tell me what versions of Radiator and Radmin you are running? Latest versions are Radiator 3.6 (plus patches) and Radmin 1.7 (plus patches). regards Hugh On Tuesday, Jul 22, 2003, at 10:38 Australia/Melbourne, Michael Bellears wrote: Hi Hugh, The problem is

Re: (RADIATOR) Warnings in log file

2003-07-21 Thread Hugh Irvine
That NAS was present earlier and it no longer exists. So we had removed its entry from the cfg file ( and also reloaded the cfg file) . Still the error appears.       - Original Message - From: Hugh Irvine To: Binaya Joshi Cc: [EMAIL PROTECTED] Sent: Monday, July 21, 2003 12:27 PM Su

Re: (RADIATOR) radiator server under high load problem

2003-07-22 Thread Hugh Irvine
Hello Steve - Thanks for your mail - this topic comes up fairly frequently on the list. I don't really have enough information to give you definitive answers, but in my experience performance problems are almost always due to back-end services such as SQL databases and/or LDAP servers. I sugge

Re: (RADIATOR) Question about AuthBy ADSI

2003-07-22 Thread Hugh Irvine
Hello Steve - Correct. AuthBy ADSI and the new AuthBy LSA clauses are only supported on recent Windows releases. You can either try the AuthBy NT clause, or you can run an instance of Radiator on the Windows host and proxy requests to it. You will find details on AuthBy NT in section 6.27 of t

Re: (RADIATOR) Problem using AuthBy DYNADDRESS with AuthBy RADIUS

2003-07-22 Thread Hugh Irvine
Hello Ken - As the AuthBy RADIUS clause returns immediately and operates asynchronously, you cannot use an AuthByPolicy. To call an AuthBy DYNADDRESS after the proxy reply comes back you will need to use a ReplyHook in the AuthBy RADIUS clause. There is an example of how to do this in the file

Re: (RADIATOR) Can'nt get Framed-IP-Address

2003-07-22 Thread Hugh Irvine
Hello Fernando - You should look at a trace 4 debug from Radiator to see what radius attributes are included in the accounting packets. From what you say, the Cisco access point is not sending the Framed-IP-Address in the accounting requests, so you should check with Cisco to see how to config

Re: (RADIATOR) Variable Substitution

2003-07-22 Thread Hugh Irvine
Hello Tim - The simplest way to do this is to add one or more "pseudo-attributes" to the incoming request packet and then refer to it (them) in your processing. You can either use an "AddToRequest ", or you can use a hook. There is an example PreClientHook in the file "goodies/hooks.txt" that

Re: (RADIATOR) Radiator & IPTables integraton

2003-07-23 Thread Hugh Irvine
ed to use the clause or can I stay witch my DHCPD service? - When user disconnects form the network, how can I run another script to remove him from the IPTABLES list? Best regards, Francisco Contreiras -----Original Message- From: Hugh Irvine [mailto:[EMAIL PROTECTED] Sent: quinta-feir

Re: (RADIATOR) buildsql trouble

2003-07-23 Thread Hugh Irvine
Hello Matteo - You will need to install both DBI and DBD-Mysql first of all. Then you will need to create the database in MySQL and build the tables using "goodies/mysqlCreate.sql". You should then use the "mysql" program to connect to the database and verify that the tables are there. Only a

Re: (RADIATOR) Question about AuthBy ADSI

2003-07-23 Thread Hugh Irvine
ween these? Thanks, Steve Hugh Irvine wrote: Hello Steve - Correct. AuthBy ADSI and the new AuthBy LSA clauses are only supported on recent Windows releases. You can either try the AuthBy NT clause, or you can run an instance of Radiator on the Windows host and proxy requests to it. You will find

Re: (RADIATOR) Bypassing AuthBy

2003-07-23 Thread Hugh Irvine
Hello Lee - As I can't find your details in our customer database, could you please send me the name of the registered company that has purchased this copy of Radiator? Please reply to me directly including the username and password you use to access the web site. regards Hugh On Thursday, J

Re: (RADIATOR) Question about configuration file

2003-07-24 Thread Hugh Irvine
Hello Geoffrey - On Thursday, Jul 24, 2003, at 19:40 Australia/Melbourne, DUFOUR Geoffrey wrote: Hello, ? As far as I understand, radiusd reads the configuration file only once (when it starts). Correct ? Correct - but see below. ? Is there a way to force radiusd to read the file every x m

Re: (RADIATOR) Issue with Duplicate Key when Adding a Session

2003-07-24 Thread Hugh Irvine
Hello Paul - The error is a MySQL error which is complaining about a duplicate entry for a unique key. The unique key for the RADONLINE table is the combination of the NAS-Identifier and NAS-Port which is what Radiator bases its session database and simultaneous use checking on - the assump

Re: (RADIATOR) Radiator, SQL and null passwords

2003-07-25 Thread Hugh Irvine
Hello Richard - This is the expected behaviour. If you want to change this you will need to supply an AuthSelect statement that does something different. See section 6.28.6 in the Radiator 3.6 reference manual ("doc/ref.html"). Here is the relevant point: If the password (or encrypted password

Re: (RADIATOR) AuthDyna re-emerging bug??

2003-07-27 Thread Hugh Irvine
Hello Tim - What you are seeing is the expected behaviour. If you configure an AuthBy DYNADDRESS, it is expected to allocate an address - failure to do so is considered an error. regards Hugh On Sunday, Jul 27, 2003, at 01:54 Australia/Melbourne, Timothy G. Wells wrote: Hi All, I have a si

Re: (RADIATOR) static ip address

2003-07-27 Thread Hugh Irvine
Hello Cory - You could set up an AuthBy SQL clause with an AuthSelect statement to do exactly what you describe. AuthSelect select PASSWORD from SUBSCRIBERS where \ USERNAME = %0 and STATICADDRESS = '%{Framed-IP-Address}' regards Hugh On Saturday, Jul 26, 2003, at 16:05

(RADIATOR) Re: "No PoolHint found. No address will be allocated" using

2003-07-27 Thread Hugh Irvine
Hello Francisco - When using the AddressAllocator DHCP, the PoolHint must be an IP address that matches what is configured in the DHCP server. You should also probably use the SubnetSelectionOption with the ISC DHCP server. See the example in "goodies/addressallocatordhcp.cfg". regards Hugh

(RADIATOR) Re: How to time-stamp SQL Accounting database w/o timestamp attribute

2003-07-27 Thread Hugh Irvine
2003, at 13:10 Australia/Melbourne, Mary Grace wrote: Hello list! Hugh Irvine has been very kind and helped us tremendously in getting AuthBy SQL going with MySQL. Hopefully Hugh will not think we are as clueless now as he probably has been thinking, but compared to you all we are still reall

Re: (RADIATOR) RADONLINE problems. No queries.

2003-07-28 Thread Hugh Irvine
Hello Charles - Your configuration file is incorrect - it should look like what is shown below (note the Realm clause at the end). regards Hugh #Foreground #LogStdout LogDir /var/adm/radacct DbDir /etc/raddb SnmpgetProg /usr/local/bin/snmpget Trace 4 RewriteUsername s/^([EMAIL PROTEC

Re: (RADIATOR) Using "Identifier" in a client clause

2003-07-28 Thread Hugh Irvine
Hello Bob - The parameters that are passed to the external program are the attributes that are contained in the request packet, so you will need to arrange for the Identifier to be added to the incoming request. With recent versions of Radiator you can do this with an AddToRequest in the Clien

Re: (RADIATOR) MySQL auth

2003-07-28 Thread Hugh Irvine
Hello Matteo - I am not quite sure I understand what you are wanting to do. The AuthBy SQL clause should look like this if you want to use the CHECKATTR and REPLYATTR columns in the database for the check and reply attributes: DBSourcedbi:mysql:radius

Re: (RADIATOR) Radius upgrade 1.91 <-> 3.6

2003-07-28 Thread Hugh Irvine
Hello Wesley - I generally recommend something like the following - the directories shown are what I usually use, but feel free to use whatever suits your particular installation. Create a directory to store the configuration files, hooks, db files, etc. mkdir /usr/local/etc/radius Copy all

Re: (RADIATOR) Unknown reply received in...

2003-07-28 Thread Hugh Irvine
Hello Simon - This problem is in fact caused by your use of "Fork". You should use neither "Fork" nor "Synchronous" in an AuthBy [SQL]RADIUS clause, as it operates asynchronously and maintains a table of outstanding requests for which it is awaiting a response. When you use "Fork" the new c

Re: (RADIATOR) Radiator and Berkeley.

2003-07-29 Thread Hugh Irvine
source is out there! On Tue, 29 Jul 2003, Hugh Irvine wrote: Hello Wesley - I generally recommend something like the following - the directories shown are what I usually use, but feel free to use whatever suits your particular installation. Create a directory to store the configuration files

Re: (RADIATOR) RADONLINE problems. No queries.

2003-07-29 Thread Hugh Irvine
erHook(): Can't use string ("") as a subroutine ref while "strict refs" in use at /usr/local/lib/perl5/site_perl/5.6.1/Radius/Client.pm line 338. What does that mean ? Thanks, AL On Tue, 29 Jul 2003, Hugh Irvine wrote: Hello Charles - Your configuration file is incorrect -

Re: (RADIATOR) Reinstalling Radiator

2003-07-29 Thread Hugh Irvine
Hello Paul - I generally recommend using the source tarball like this (you can use whatever directories you wish): mkdir /usr/local/src/Radiator cp /tmp/Radiator-3.6-tgz /usr/local/src/Radiator cd /usr/local/src/Radiator gzip -c -d Radiator-3.6.tgz | tar xvf -

Re: (RADIATOR) Question about AuthBy ADSI

2003-07-30 Thread Hugh Irvine
cate wireless users via TTLS sucessfully. Am I mistaken or should this be happening? - Just not those trying to authenticate to the domain. Thanks, Steve Hugh Irvine wrote: Hello Steve - You can use the AuthBy RADIUS clause to forward radius requests to a remote radius server. The exact configura

Re: (RADIATOR) Radiator dying on unusual usernames

2003-07-30 Thread Hugh Irvine
Hello Barry - You can use the global UsernameCharset parameter in the configuration file to restrict usernames to a defined set of characters (and reject anything else). See section 6.4.30 in the Radiator 3.6 reference manual ("doc/ref.html"). I have also copied Mike on this mail, as he may

Re: (RADIATOR) One more question .. Regarding DEFAULT

2003-07-31 Thread Hugh Irvine
Hello AL - Radiator looks for an exact match of the username, followed by DEFAULT, DEFAULT1, DEFAULT2 and so on. This allows you to perform complex authentication with DEFAULT* users that cascade through to other authentication methods. If you only want to match on the exact username you can d

Re: (RADIATOR) ip addr allocation

2003-07-31 Thread Hugh Irvine
Hello Ronnie - I will need to see a copy of your configuration file (no secrets) together with a trace 4 debug from Radiator showing what is happening. regards Hugh On Friday, Aug 1, 2003, at 01:16 Australia/Melbourne, ronnie nyaruwabvu wrote: Hi, i have configured radiator on a linux platf

Re: (RADIATOR) Usage script

2003-07-31 Thread Hugh Irvine
Hello Samuel - There are a number of examples in the "goodies" directory of the Radiator distribution. See "reports", "radimportacct" and "radacct.cgi" for starters. You may also find other references on the Radiator mailing list archives: www.open.com.au/archives/radiator And of course you

Re: (RADIATOR) Logging Assigned IP

2003-07-31 Thread Hugh Irvine
Hello James - You probably want Framed-IP-Address. Check the RFC's for the attribute definitions (included in the Radiator distribution in "doc/rfc2865.txt" and "doc/rfc2866.txt"). regards Hugh What is the string I should use to log the IP that a customer is assigned after authenticating? I

Re: (RADIATOR) radpwtst does not authenticate

2003-08-01 Thread Hugh Irvine
Hello Alan - You should run "radiusd" from the command line first so you can see if there are any errors: perl radiusd -foreground -log_stdout -trace 4 -config_file . It may be that you have not installed Radiator correctly, or it may simply be that your configuration file is not set up t

Re: (RADIATOR) Subdomain problem

2003-08-03 Thread Hugh Irvine
Hello Dan - I will need to see a copy of your configuration file (no secrets) together with a trace 4 debug from Radiator showing what is happening. I would also like to see the user entry from the database. regards Hugh On Sunday, Aug 3, 2003, at 07:53 Australia/Melbourne, Dan Vande More

Re: (RADIATOR) How do you log proxy auth packets in a SQL dB or file?

2003-08-03 Thread Hugh Irvine
Hello Mary Grace - What you describe sounds like a session database. You should add something like this to the end of your configuration file: DBSource dbi:mysql:radius:1.2.3.4:3306 DBUsername foobar DBAuth raboof See section 6.7 in the Radiator 3.6 reference manual.

Re: (RADIATOR) ADSL authentication

2003-08-03 Thread Hugh Irvine
Hello Jeffry - I will need to see a copy of the configuration file (no secrets) together with a trace 4 debug from Radiator showing what is happening in both cases. regards Hugh On Monday, Aug 4, 2003, at 11:45 Australia/Melbourne, Jeffry June wrote: All, I need help ADSL modem Dynalink RT

Re: (RADIATOR) Un-sane packets

2003-08-03 Thread Hugh Irvine
Hi Kevin - I'll need to see a copy of the Radiator configuration file (no secrets) together with a trace 4 debug from Radiator showing what is happening. regards Hugh On Monday, Aug 4, 2003, at 14:19 Australia/Melbourne, Kevin Littlejohn wrote: Heya, I have a client who's just installed a n

(RADIATOR) Re: Active Directory Question

2003-08-04 Thread Hugh Irvine
Hello Brandon - The AuthBy ADSI and the new AuthBy LSA clauses only operate on the Windows platform, which would involve running an instance of Radiator on a Windows box and proxying the requests to it. The alternative would be to use an AuthBy NT clause as described in section 6.27 of the Rad

Re: (RADIATOR) WiFi Protected Access - WPA

2003-08-05 Thread Hugh Irvine
Hello Fernando - PEAP-GTC is Cisco's "generic token card" implementation. Are you planning on using a token card? In any case you will find a discussion on this issue here: Reference: http://www.suu.edu/it/nws/wireless/ regards Hugh On Wednesday, Aug 6, 2003, at 01:39 Australia/Melbourne, F

Re: (RADIATOR) ip address allocation problem

2003-08-07 Thread Hugh Irvine
Hello Ronnie - Thanks for sending the information. I will need to see a trace 4 debug from Radiator showing what is happening. regards Hugh On Tuesday, Aug 5, 2003, at 23:20 Australia/Melbourne, ronnie nyaruwabvu wrote: Hi All, i am in the process of setting up a radius server and i am fai

Re: (RADIATOR) SessionDatabase SQL

2003-08-10 Thread Hugh Irvine
Ciao Andrea - Thanks for sending the trace - everything looks fine as far as the access request is concerned. And the Session Database also appears to be working as far as it can because we see the DELETE happen when the access request is received and processed. However, there are no radius

Re: (RADIATOR) Acct-Session-Time Questions

2003-08-14 Thread Hugh Irvine
Hello Dan - The Acct-Session-Time attribute is received from the NAS and the value is whatever the NAS has reported. Radiator simply transcribes the attribute/value pair into the logs. You don't say what type of accounting requests are shown below, but I would guess they are "Alive's", in whic

Re: (RADIATOR) VENDORATTR 529

2003-08-14 Thread Hugh Irvine
Hi Paul - The standard dictionary contained in the Radiator 3.6 release includes all of the Ascend vendor specifics. Here are the two that you mention: VENDORATTR 529 Ascend-Client-Primary-DNS 135 ipaddr VENDORATTR 529 Ascend-Client-Secondary-DNS 136 ipaddr r

Re: (RADIATOR) EAPAnonymous question?

2003-08-14 Thread Hugh Irvine
ug 9, 2003, at 09:19 Australia/Melbourne, Hugh Irvine wrote: Hello John - No - EAPAnonymous can be used to change "anonymous" for the inner authentication. Have a look at the code in "Radius/EAP_21.pm" and "Radius/EAP_25.pm" if you are interested. regards Hugh On S

Re: (RADIATOR) Checking results of a AuthSQLStatment

2003-08-14 Thread Hugh Irvine
Hello John - Your configuration below is the cause of the problem, as the AuthColumnDef only operates on the results of the AuthSelect statement. There is also no way to operate on the results of the AuthSQLStatement in the AuthBy SQL clause - it will only operate on the database in the same f

Re: (RADIATOR) Somethingswrong with my Handler definitions?

2003-08-14 Thread Hugh Irvine
Hello Bobby - You should include the LANG environment setup in the /etc/init.d/radiator script. I would also suggest you set up your Handlers like this: # Handler for accounting RejectHasReason AuthByPolicy ContinueWhileAccept # PacketTrace # This logs acco

Re: (RADIATOR) Disconnecting users via RID - Originating port issue

2003-08-14 Thread Hugh Irvine
Hello Paul - Thanks for the suggestion - there is a new version of "radpwtst" available on the web site for downloading. You can now use "-outport" and "-bind_address" options. regards Hugh On Monday, Aug 11, 2003, at 12:04 Australia/Melbourne, Paul wrote: Currently I’m disconnecting users

Re: (RADIATOR) Urgent - Radiator does not reply NAS with accounting accept respo nse

2003-08-14 Thread Hugh Irvine
Hello Brian - You can do this with the "AccountingHandled" tag in your Realm or Handler. AccountingHandled . If you want to discard the accounting response from the proxy, you can add the "IgnoreAccountingResponse" tag to the AuthBy RADIUS clause (this will avoid the NAS getting two accou

Re: (RADIATOR) Retries - Could be a silly question

2003-08-14 Thread Hugh Irvine
Hello Martin - Retry never (send once - no retries). See section 6.29.6 in the Radiator 3.6 reference manual ("doc/ref.html"). regards Hugh On Thursday, Aug 7, 2003, at 09:46 Australia/Melbourne, Martin Edge wrote: Hey Guys,   Retries 0 , AuthRADIUS   Retry never, or retry forever?   Martin

Re: (RADIATOR) Authentication falied

2003-08-14 Thread Hugh Irvine
Hello Sara Sodagar - The only way I can help is if I have a copy of your configuration file (no secrets) together with a trace 4 debug from Radiator showing the problem. From what you describe it sounds like the database is responding very slowly to queries. regards Hugh On Tuesday, Aug 12, 2

Re: (RADIATOR) AuthLog & Framed-IP-Address

2003-08-14 Thread Hugh Irvine
Hello James - The first thing to understand is that there are two different things going on with the radius protocol. The first is the access request and and corresponding access accept - this is the authentication and authorisation phase. After the session has been established as a result

<    1   2   3   4   5   6   7   8   9   10   >