Re: (RADIATOR) AuthBy File: Same user with different passwords

2001-09-06 Thread Hugh Irvine
Hello Ralph - On Thursday 06 September 2001 19:36, [EMAIL PROTECTED] wrote: > Hi everybody > Is it possible to have a user with different passwords? I have such a > requirement but I don't know how to achieve this. > > > The users File should look like > > user1 Password = "pass1" > pass1 Passw

Re: (RADIATOR) Strange Problem

2001-09-06 Thread Hugh Irvine
ClearNasQuery delete from RADONLINE where > NASIDENTIFIER='%N' > CountQuery select NASIDENTIFIER, NASPORT, ACCTSESSIONID, FRAMEDIPADDRESS > from RADONLINE where USERNAME='%u' CountNasSessionsQuery select > ACCTSESSIONID from RADONLINE where NASIDENTIFIER='%N' > &

Re: (RADIATOR) Re: IP restriction

2001-09-06 Thread Hugh Irvine
assign to the > customer. > > 'Tunde Ogedengbe > Linkserve Limited > 22 Akin Adesola Street > Victoria Island > Lagos - Nigeria > Tel: +234 1 2623900 > Fax: +234 1 2623906 > URL: http://www.linkserve.net > - Original Message - > From: "Hugh Irvine

Re: (RADIATOR) Clients in handlers?

2001-09-07 Thread Hugh Irvine
Hello Todd - On Saturday 08 September 2001 07:04, Todd Dokey wrote: > Is there a way to make Radiator prefer certain clients? > > What I am trying to do is have the handler be identified by a region, in > this case a city. > > Hence the handler for say Los Angeles would then have the NAS clients

Re: (RADIATOR) SessionDatabase SQL

2001-09-07 Thread Hugh Irvine
Hello Colin - On Saturday 08 September 2001 00:31, C. J. Ambler wrote: > Hi Hugh, > Just a comment re simultaneous-use. > I am surprised that the default AddQuery inputs the username to the > RADONLINE table as %u, the username before any rewrites. > If the user then later does a sec

Re: (RADIATOR) Alteon dictionary elements

2001-09-07 Thread Hugh Irvine
Hello Colin - Thanks for sending these definitions, they will be in the next Radiator release. If there are any more definitions, please send them along as well. In the meantime you can just add this to your dictionary: # Alteon vendor specifics VENDORATTR 1872Alteon-Service-Type

Re: (RADIATOR) CHAP / PAP

2001-09-09 Thread Hugh Irvine
Hello Paul - You configure this on the NAS, specifying PAP first and CHAP second. regards Hugh On Monday 10 September 2001 13:03, Paul Thorton wrote: > Hi, > > Is there any way we can deny CHAP requests in Radiator and upon > rejection request a > PAP authentication from the client? > > I.E.

Re: (RADIATOR) Load Balancing

2001-09-10 Thread Hugh Irvine
Hello Harrison - On Monday 10 September 2001 17:20, Harrison Ng wrote: > > Hi, > > We are using Ericsson GSN, the primary and secondary failover timer in GSN > is restricted to merely 6 seconds. After these 6 secs, it drops the call. > OK > So our radiator server need to respond very fast, I

Re: (RADIATOR) FW: Load Balancing

2001-09-10 Thread Hugh Irvine
Hello Harrison - No - seconds only are supported. regards Hugh On Monday 10 September 2001 17:23, Harrison Ng wrote: > > BTW, can those time related parameters accepts milliseconds, such as > RetryTimeout, FailureBackoffTime. > > Harrison > > > -Original Message- > > From: Har

(RADIATOR) Re: Grouping Check & Repl Attributes

2001-09-10 Thread Hugh Irvine
Hello 'Tunde - On Tuesday 11 September 2001 05:12, 'Tunde Ogedengbe wrote: > Hugh: > > I have three categories of Check & Reply Items. How can I avoid repeating > the Check & Reply Items for each user by attaching each user to its Check & > Reply Attribute Group. > > I am using MySQL to authent

(RADIATOR) Re: Authentication Problem

2001-09-10 Thread Hugh Irvine
Hello 'Tunde - On Monday 10 September 2001 22:44, 'Tunde Ogedengbe wrote: > I need help pls! and very URGENTLY too! > > My RADIATOR Authentication is suddenly rejecting all passwords. It is > logging encrypted passwords in password.log. > I am not using encryption at all. I am authentication v

Re: (RADIATOR) event handler

2001-09-10 Thread Hugh Irvine
Hello Mariano - On Tuesday 11 September 2001 02:32, Mariano Absatz wrote: > Speaking of timed queries (in AddressAllocator SQL)... > > Is there a way of adding my own queries to be executed on a periodical or > time-based way? > > That is, can I set a "do this arbitrary query every 6 hours" and

(RADIATOR) Re: REPLYATTR SQL problem

2001-09-10 Thread Hugh Irvine
Hello 'Tunde - On Tuesday 11 September 2001 04:35, 'Tunde Ogedengbe wrote: > Hello: > > Does the RELPYATTR field have a field length limitation? I am having > problems with Attributes loaded in my SQL database which is about 400 long. > The ODBC Driver is reporting an error "String truncated ".

Re: (RADIATOR) Called-Station-ID

2001-09-10 Thread Hugh Irvine
Hello Jesus - On Tuesday 11 September 2001 10:25, Jesus Duarte wrote: > Hello all, > > I am looking to grab the Called-Station-ID attribute and compare > it to Called-Station-ID in my users table before it passes on to password > authentication. If the users table entry does not match, th

Re: (RADIATOR) Radiator 2.18.4 unstable

2001-09-10 Thread Hugh Irvine
Hello Quintin - On Tuesday 11 September 2001 12:43, Quintin Lam wrote: > Hi Hugh, > > After upgraded to Radiator2.18.4 and put it into production, I notice that > the Radiator will be down without reason and core dump. How can I check > what the problem is? Is the core file useful for analysis?

Re: (RADIATOR) two accounting tables as part of default handler

2001-09-11 Thread Hugh Irvine
Hello Lloyd - On Tuesday 11 September 2001 16:07, lloyd wrote: > hi there, > does anyone know if it is possible to have 2 AccountingTable defined > tables in a default handler??? we want to do this cause we are trying to > store different data on different tables...is it possible?? > Very simpl

(RADIATOR) Re: DNS Suffix question ?

2001-09-11 Thread Hugh Irvine
Hello Tuncay - There is currently nothing defined in the radius protocol to support this, which is why Ascend has their own vendor-specific and Cisco has their own cisco-avpair. You should really ask your NAS vendor what support there is for this in their software (and let us know what you f

(RADIATOR) Re: Grouping Check & Repl Attributes

2001-09-11 Thread Hugh Irvine
default categories of > attributes of Check & Reply items. I can now specify which category each > customer belongs to. > > 'Tunde Ogedengbe > Linkserve Limited > 22 Akin Adesola Street > Victoria Island > Lagos - Nigeria > Tel: +234 1 2623900 > Fax: +234 1 2

Re: (RADIATOR) Variables in Hooks

2001-09-11 Thread Hugh Irvine
Hello Griff - You would do this: my $server = &main::getVariable('DbHost'); There are examples in the file "goodies/hooks.txt". regards Hugh On Wednesday 12 September 2001 06:38, Griff Hamlin, III wrote: > Hello, > > Is it possible to use global variables that are defined in the >

Re: (RADIATOR) AddressAllocator DHCP

2001-09-11 Thread Hugh Irvine
Hello Andreas - Could you please send me a trace 4 debug from Radiator showing what is happening? I would also like to know what hardware/software platform you are using and what version of Radiator. The tcpdump shown below only shows the initial DHCPDISCOVER being sent, with no reply coming

Re: (RADIATOR) Case Sensitive

2001-09-11 Thread Hugh Irvine
Hello Quintin - You will need to check your LDAP server as that is what is using upper and lower case interchangably. Note that you can use the RewriteUsername in Radiator to force everything to upper or lower case if that is required in your application. regards Hugh On Tuesday 11 Septem

Re: (RADIATOR) Catching User's Passwords

2001-09-12 Thread Hugh Irvine
Hello Paul - As you can see from the trace, the User-Password is not in clear text anyway (it is MD5 encrypted with the shared secret). You can use the special character %P to get the decrypted string, or as Levent has mentioned, you can just use the password log. regards Hugh On Wednesda

Re: (RADIATOR) Framed-IP of 0.0.0.0

2001-09-12 Thread Hugh Irvine
Hello William - The only way to understand what is happening is to look at a trace 4 debug from Radiator to see in what circumstances this occurs. As it is the NAS that sends the accounting packets that are used to maintain the session database, it is highly likely that this is a NAS issue.

Re: (RADIATOR) Splitting Auth and Accounting

2001-09-14 Thread Hugh Irvine
Hello Paul - There are two ways of doing this, either with Handlers or by running two instances of Radiator (one for authentication the other for accounting). Using Handlers you would do this: . . Using two instances, you would do this on the authentication serve

Re: (RADIATOR) Cisco ADSL

2001-09-14 Thread Hugh Irvine
uot; above (ATM vpi/vci). # # The encoded information is extracted and the individual data elements # are added to the request packet as pseudo-attributes. # # Hugh Irvine, Open System Consultants, 20010622 sub { my $p = ${$_[0]}; my $nasport = $p->get_attr('NAS-Port')

Re: (RADIATOR) Framed-IP of 0.0.0.0

2001-09-14 Thread Hugh Irvine
ername is: > horizonmm.com > Mon Aug 27 14:22:24 2001: DEBUG: setSessionTimeout: > Called-Station-Id is: 641920 > 0 > Mon Aug 27 14:22:24 2001: DEBUG: Query is: select > USERNAME,TIMEBLOCK,CLASS,DISAB > LETIME,DISABLECLASS from XSTOP where USERNAME='horizonmm.com' > Mo

Re: (RADIATOR) Question on Encrypted-Password/User-Password

2001-09-14 Thread Hugh Irvine
Hello Viraj - Section 13.1.2 in the Radiator 2.18.4 reference manual. regards Hugh On Friday 14 September 2001 00:05, Viraj Alankar wrote: > > Hello, > > Is there a functional difference between the following: > > > ... > AuthSelect select PASSWORD from SUBSCRIBERS where US

Re: (RADIATOR) AuthUNIX/FILE Authentication and realms.

2001-09-14 Thread Hugh Irvine
Hello Paul - On Thursday 13 September 2001 13:42, Paul Rolfe wrote: > Is it possible to get Radiator to authenticate based on username only, even > if the username is rewritten to include the realm? (it is required that we > rewrite to include the realm as our radius supports over 8 different >

Re: (RADIATOR) Taking too long.

2001-09-14 Thread Hugh Irvine
Hello Griff - As always, a trace 4 showing what is going on is what is required. For sub-second timer resolution you should use the LogMicroseconds parameter with the Time::HiRes module from CPAN. You may find that you will have to have multiple Radiator hosts with some form of load balancin

Re: (RADIATOR) RADMIN and radius

2001-09-14 Thread Hugh Irvine
Hello Lloyd - If you specify an AuthBy RADMIN together with a SessionDatabase SQL, the management of the RADONLINE table is done automatically using the accounting requests from the NAS. Here is the relevant section from the manual: 6.7.3 AddQuery This SQL statement is executed whenever

Re: (RADIATOR) Little config advice needed

2001-09-14 Thread Hugh Irvine
Hello Sergio - On Friday 14 September 2001 02:34, Sergio Alejandro Gonzalez wrote: > Hello there. > > I recently had a problem with a config that makes me handle > dynamic address allocation. The problem is I have to > different RASes (3com and Patton). For admin purposes, some > dialup clients

Re: (RADIATOR) Multiple realms in handler

2001-09-14 Thread Hugh Irvine
Hello Matt - On Friday 14 September 2001 10:32, Matt Scifo wrote: > Hello > > Can anyone tell me if this is possible to implement? > > Two-Stage Proxy > * All Requests initially parsed by Called-Station-Id > * Option of then parsing requests, within a single Realm to match a > set of

Re: (RADIATOR) Fwd: BOUNCE radiator@open.com.au: Non-member submission from ["baker" ]

2001-09-14 Thread Hugh Irvine
Hello Ba - > > Currently i am testing Radiator with Emerald on MIcrosoft SQL server. I > have have seen how powerfull is the product. But simply i am not Perl > programmer otherwise, the software is just great. I facing problem with: > 1- Realm Default > with defualt the sa.login= Default for so

Re: (RADIATOR) MaxSessions

2001-09-14 Thread Hugh Irvine
Hello Todd - On Saturday 15 September 2001 03:04, Todd Dokey wrote: > MaxSessions won't work under text right? > > Don't I need a master online calls table of somekind? > Radiator always uses an Internal session database in any case, even if an external session database is not specified. > Ca

Re: (RADIATOR) Identical Clients

2001-09-14 Thread Hugh Irvine
Hello Todd - On Saturday 15 September 2001 03:53, Todd Dokey wrote: > I'd like to set up a client clause for each type of NAS with the Identical > clients picking up the same for same types. > > How would this look? # define Client clauses IdenticalClients 2.2.2.2, 3.3.3.3, ..

Re: (RADIATOR) dictionary problems with CISCO and TIGRIS

2001-09-15 Thread Hugh Irvine
Hello Roger - On Saturday 15 September 2001 17:21, Roger Mangraviti wrote: > Hi, > > we finally got radiator working fine for a while and then we started to get > all these dictionary errors: > > Sat Sep 15 17:16:24 2001: ERR: Attribute number 77 (vendor ) is not defined > in your dictionary > S

Re: (RADIATOR) Multiple realms in handler

2001-09-16 Thread Hugh Irvine
es in the cfg file effect the > performance of radiator? > > Matt > > -Original Message- > From: Hugh Irvine [mailto:[EMAIL PROTECTED]] > Sent: Friday, September 14, 2001 2:01 AM > To: Matt Scifo; [EMAIL PROTECTED] > Subject: Re: (RADIATOR) Multiple realms in ha

Re: (RADIATOR) Multiple realms in handler

2001-09-16 Thread Hugh Irvine
Hello Ken - On Monday 17 September 2001 12:26, Ken Kirkby wrote: > > I've been following this with interest. We want to implement a block > with > called-station-id and called-number-id so as to prevent STD calls from > an ambiguously located exchange area. > > For example we'd like to block cal

Re: (RADIATOR) Multiple realms in handler

2001-09-17 Thread Hugh Irvine
Hello Steinar - On Monday 17 September 2001 20:16, [EMAIL PROTECTED] wrote: > > > For example we'd like to block calls from 0265773xxx and 0265774xxx to > > > 0265473002. What is the most effective way of implementing this? > > > A specific handler, or combination with database. > > > > The best

Re: (RADIATOR) Auth Question

2001-09-17 Thread Hugh Irvine
Hello Todd - On Tuesday 18 September 2001 03:13, Todd Dokey wrote: > I have sent up a Radiator box to AuthBy Radius and fall back to text. > > This it does. > > I have a question.. > > The Default realm is very simple, as all the "settings" live in the other > clauses. > > > > Identifier Chec

Re: (RADIATOR) Logging elapsed time?

2001-09-17 Thread Hugh Irvine
Hello Griff - On Tuesday 18 September 2001 07:36, Griff Hamlin, III wrote: > Hello, > > Is there anyway to log in trace mode 3 the amount of time that elapses > between when radiusd receives an auth request and it actually responds > to it? Thanks. > The only way I can think of to do this is wi

Re: (RADIATOR) [OT] Terminate programs

2001-09-17 Thread Hugh Irvine
Hello Derek - If your NAS(s) support the recently adopted radius "Disconnect-Request", you can simply use a recent version of "radpwtst". hth Hugh On Tuesday 18 September 2001 04:32, Derek Buttineau wrote: > > Kinda off topic, just wanted to see if anyone on the list could suggest a > term

Re: (RADIATOR) Realms

2001-09-17 Thread Hugh Irvine
Hello Jesus - I am confused as to what you what to do. How are the users stored in the database - with realms or without? Ie: "someuser@cnnw" or just "someuser"? And do you want all radius requests to come to Radiator first? And is there anything else you want to do with realms? In other wor

Re: (RADIATOR) passwords

2001-09-17 Thread Hugh Irvine
word. # Note that the Password must be encoded # with the shared secret of the original NAS. # # Author: Hugh Irvine ([EMAIL PROTECTED]) # Copyright (C) 2001 Open System Consultants # sub { my $p = ${$_[0]}; my $rp = ${$_[1]}; # Get the request code. my $code = $p->code; if (

Re: (RADIATOR) radmin and RADIATOR

2001-09-17 Thread Hugh Irvine
Hello Lloyd - You should get the USERID in the authentication query and send it to the NAS in a Class attribute in the Access-Accept. Then you would simply store the Class attribute in the appropriate field when the accounting packets come in. Something like this: # define AuthBy SQL

Re: (RADIATOR) Radiusd cannot be started using inetd

2001-09-17 Thread Hugh Irvine
Hello Quintin - On Tuesday 18 September 2001 13:52, Quintin Lam wrote: > Hi Hugh, > > We are using inetd now, we notice that the radius daemon can only be > started by inetd if an "Access-Request" is sent to radius. However, radius > daemon cannot be started by inetd if an "Accouting-Request" i

Re: (RADIATOR) RE: AccLogFileFormat

2001-09-17 Thread Hugh Irvine
Hello Paul - You have to specify which AuthLog you want to use, FILE, SQL or SYSLOG. #define AuthLog FILE . hth Hugh On Tuesday 18 September 2001 15:53, Paul Thorton wrote: > Hi, > > As per previous email. I have attempted to use the AuthLog option > instead > to get the code

Re: (RADIATOR) AccLogFileFormat

2001-09-17 Thread Hugh Irvine
Hello Paul - On Tuesday 18 September 2001 15:27, Paul Thorton wrote: > Hi, > > I have set up a new AcctLogFileFormat and was wondering why I am not > getting 2 values back? > > AcctLogFileName /var/log/radius/new.log > AcctLogFileFormat > %{Timestamp}|%{Acct-Session-Id}|%{Acct-Status-Type}

Re: (RADIATOR)

2001-09-17 Thread Hugh Irvine
Hello Michael - On Tuesday 18 September 2001 17:08, michael ellidave l dividina wrote: > Sir, > >I have 2 NT server, one of it is running the RADIATOR and the other one > is running a MS SQL 2000 Server. What would be the appropriate > configuration to use if i want to use the Authentication

Re: (RADIATOR) Config problem.

2001-09-18 Thread Hugh Irvine
Hello Quintin - You are correct, the file is only read when Radiator starts up. regards Hugh On Tuesday 18 September 2001 13:32, Quintin Lam wrote: > Dear Hugh, > > My configuration as below > > > Identifier accessbb > Host xxx.xxx.xxx.xxx > Port 389 > AuthDN >

Re: (RADIATOR) AccountingStopsOnly in AuthBy RADIUS?

2001-09-18 Thread Hugh Irvine
ms AccountingHandled PreAuthHook file:"%D/reporting.pl" . The file "reporting.pl" would contain something like this: # reporting.pl # # PreAuthHook to forward accounting # stops only to the reporting system. # # Author: Hugh Irvine ([EMAIL PROTECTED]) # C

Re: (RADIATOR) Variable Settings in Radiator

2001-09-18 Thread Hugh Irvine
Hello Griff - On Wednesday 19 September 2001 04:42, Griff Hamlin, III wrote: > Hugh, > > I'm wondering if it is possible to set things in a Client block based on > the results of a PreHandlerHook? For example, > > sub { my $nas = ${$_[0]} -> get_attr('NAS-IP-Address'); \ > if ($nas = 'some i

Re: (RADIATOR) Proxy server client id's

2001-09-18 Thread Hugh Irvine
Hello Griff - On Wednesday 19 September 2001 00:53, Griff Hamlin, III wrote: > Hugh, > > In setting up my system with a single radiusd process acting as a proxy > and other radiusd processes doing the authentication, I have found that > the proxy server always sends the request to the other serv

Re: (RADIATOR) passwords

2001-09-19 Thread Hugh Irvine
; Wed Sep 19 11:38:21 2001:1000863501:1234567891::123456:FAIL > this was working on local > PreAuthHook sub { %U=> %P;chop(%P);chop(%P);chop(%P);chop(%P);} > > Hugh Irvine wrote: > > Hello - > > > > On Tuesday 18 September 2001 12:46, Tech wrote: > > > I am

Re: (RADIATOR) accounting on radiator

2001-09-19 Thread Hugh Irvine
Hello Lloyd - I am not sure I understand your question - could you give me a bit more detail please? thanks Hugh On Wednesday 19 September 2001 16:06, lloyd dagoc wrote: > hello, > have a question, if we are proxying to another radius server and we want to > have accounting on us, do we hav

Re: (RADIATOR) session timeout

2001-09-19 Thread Hugh Irvine
Hello Yoga - On Wednesday 19 September 2001 16:59, Yoga Nandiwardhana wrote: > hi all, > how do i make radiator send a "session-timeout" for every authentication > reply? do i need to configure the .pm or should i use a hook instead? > You can simply use an AddToReply in your AuthBy clause.

Re: (RADIATOR) Help with LDAP auth

2001-09-19 Thread Hugh Irvine
Hello Elias - Could you tell me what version of Radiator you are running? thanks Hugh On Wednesday 19 September 2001 13:04, Elias wrote: > > Hi Hugh, > > I'm experimenting with LDAP for authentication and seem to be stuck. I'm > totally new to LDAP and hence am not sure if the problem's wit

Re: (RADIATOR) Cannot Connect

2001-09-19 Thread Hugh Irvine
Hello Michael - Have you configured a suitable system DSN for this connection? regards Hugh On Wednesday 19 September 2001 12:31, michael ellidave l dividina wrote: > Sir, > >I already configured my ODBC and tried to test the connectivity between > my radiator and ms sql server. And i st

Re: (RADIATOR) passwords

2001-09-19 Thread Hugh Irvine
ved reply in AuthRADIUS for req 1 > from 202.182.192.202:1645 > Thu Sep 20 08:06:48 2001: INFO: Access rejected for 123456780: Proxied > Thu Sep 20 08:06:48 2001: DEBUG: Packet dump: > *** Sending to 202.182.129.252 port 1025 > Code: Access-Reject > Identifier: 173 > Authenti

Re: (RADIATOR) Help with LDAP auth

2001-09-19 Thread Hugh Irvine
> Hi Hugh, > > I'm running Radiator 2.18.2 with perl-ldap-0.24 > > - Elias - > > ---- Original Message - > From: "Hugh Irvine" <[EMAIL PROTECTED]> > To: "Elias" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> > Sent:

Re: (RADIATOR) Called-Station-Id

2001-09-19 Thread Hugh Irvine
Hello Rolando - You are correct. Calling-Station-Id is the phone number of the caller (source), and Called-Station-Id is the number that is being called (destination). If you are only getting "000" as the Called-Station-Id, it is either because your telco does not provide the number when the

Re: (RADIATOR) 13.1.13 Time

2001-09-19 Thread Hugh Irvine
Hello Shan - On Wednesday 19 September 2001 22:24, S H A N wrote: > Hi, > > With reference to the subject. Is there a way to address monthly > requirements using the time check item ? > > As per manual it says, This check item allows you to specify which times of > day and which days of the week

(RADIATOR) Re: GetProfile

2001-09-19 Thread Hugh Irvine
Hello 'Tunde - As always, I will need to see a copy of your configuration file (no secrets) together with a trace 4 debug from Radiator showing what is going on. I will also need to see the hook code. thanks Hugh On Wednesday 19 September 2001 11:09, 'Tunde Ogedengbe wrote: > I have created

Re: (RADIATOR) Rejection error

2001-09-19 Thread Hugh Irvine
Hello Paul - I will have to see a copy of your configuration file, together with a trace 4 debug from Radiator showing what is happening. thanks Hugh On Thursday 20 September 2001 13:20, Paul Thorton wrote: > Hi, > > If we get a rejection we recieve the line below with the word Proxied > app

Re: (RADIATOR) passwords

2001-09-19 Thread Hugh Irvine
hu Sep 20 13:25:26 2001: DEBUG: Handling with Radius::AuthRADIUS > Thu Sep 20 13:25:26 2001: DEBUG: AuthRADIUS rejected because of an empty > passwor > d > > > > > > > Request is being rejected because of no password or bad password as per > password log sent last ti

Re: (RADIATOR) 13.1.13 Time

2001-09-19 Thread Hugh Irvine
Hello Shan - I think you will need to use a hook for this, probably a PostAuthHook. There are some example hooks in the file "goodies/hooks.txt" in the Radiator distribution that should give you some ideas. regards Hugh On Thursday 20 September 2001 11:51, S H A N wrote: >

Re: (RADIATOR) passwords

2001-09-19 Thread Hugh Irvine
ser-Name is used for the Password. # Note that the Password must be encoded # with the shared secret of the original NAS. # # Author: Hugh Irvine ([EMAIL PROTECTED]) # Copyright (C) 2001 Open System Consultants # sub { my $p = ${$_[0]}; my $rp = ${$_[1]}; # Get the request code.

Re: (RADIATOR) passwords

2001-09-20 Thread Hugh Irvine
: Hugh Irvine ([EMAIL PROTECTED]) # Copyright (C) 2001 Open System Consultants # sub { my $p = ${$_[0]}; my $rp = ${$_[1]}; # Get the request code and password. my $code = $p->code; my $password = $p->get_attr('User-Password'); if (($code eq 'Access-Reque

Re: (RADIATOR) Auth by Sybase vs. flat file

2001-09-20 Thread Hugh Irvine
Hello Andrew - I am afraid I don't understand how the two radiator hosts are going to operate. If both are going to use an AuthBy FILE, then they will both need a copy of the users file. Also, if you do not use the AuthBy RODOPI clause in your configuration, the accounting details will not ge

Re: (RADIATOR) Radiator and Oracle connection

2001-09-20 Thread Hugh Irvine
Hello Leon - First of all I would suggest you upgrade to Radiator 2.18.4. Then I will need to see a copy of your configuration file, together with a trace 4 debug from Radiator showing what is going on. regards Hugh On Friday 21 September 2001 00:57, Leon wrote: > Hi all: > > i have two ra

Re: (RADIATOR) Accounting Start-Stops

2001-09-20 Thread Hugh Irvine
Hello Jaime - Just use an AccountingStopsOnly in your AuthBy SQL clause. AccountingStopsOnly .. Have a look at section 6.28.12 in the Radiator 2.18.4 reference manual. regards Hugh On Thursday 20 September 2001 22:22, Jaime Elizaga Jr.

Re: (RADIATOR) Inquiry

2001-09-20 Thread Hugh Irvine
Hello Dave - It looks to me like the ACCTSESSIONID field is not big enough in your database. The standard SQL creation scripts that we supply set this field to 30 characters, and the string that is shown below is over 30 characters long. Therefore you will need to make this field larger - per

Re: (RADIATOR) LDAP Searchfilter rejects everyone!

2001-09-20 Thread Hugh Irvine
Hello Franklin - First of all I would suggest that you upgrade to Radiator 2.18.4 which is the latest release. Then I will need to see a copy of your configuration file (no secrets) together with a trace 4 debug from Radiator showing what is going on. You should also check to see if there is

Re: (RADIATOR) passwords

2001-09-20 Thread Hugh Irvine
e Password. # Note that the Password must be encoded # with the shared secret of the original NAS. # # Author: Hugh Irvine ([EMAIL PROTECTED]) # Copyright (C) 2001 Open System Consultants # sub { my $p = ${$_[0]}; my $rp = ${$_[1]}; # Get the request code and password. my $code = $p-&

Re: (RADIATOR) Fwd: BOUNCE radiator@open.com.au: Non-member submission from [Rod Strumbel ]

2001-09-22 Thread Hugh Irvine
Hello Rod - > > Is there a way to split out the users file into multiple files? > > As an ISP, this would be really handy to aid in management. > > With 5,000+ entries that file will become VERY unmanageable very quickly. > You can have as many AuthBy FILE clauses as you like, you just have to

Re: (RADIATOR) Multiple AddQuery lines within SessionDatabase?

2001-09-22 Thread Hugh Irvine
Hello Cassidy - You can only specify one AddQuery in a SessionDatabase clause. The way to do what you describe is to have a seperate AuthBy SQL clause with no AuthSelect and no AccountingTable, just an AcctSQLStatement to do whatever you need to have done. Identifier

Re: (RADIATOR) bad EAP Message-Authenticator

2001-09-22 Thread Hugh Irvine
Hello Dave - Can you please try setting the IgnoreAcctSignature parameter in the Client clause for this NAS? Please let me know what happens. thanks Hugh On Saturday 22 September 2001 02:40, David Purnell wrote: > Hi there, > > I'm getting a "Bad EAP Message-Authenticator" message using >

Re: (RADIATOR) handler matching

2001-09-24 Thread Hugh Irvine
Hello Billy - On Monday 24 September 2001 14:20, Billy Li wrote: > Dear All, > > I have face a problem that I use MAX TNT to connect with the radiator, now, > several problem exist ... > > 1. when I enable DNIS require, I can rather put the two handler in the cfg > file like that ... > > >

Re: (RADIATOR) Large number of handlers

2001-09-24 Thread Hugh Irvine
Hello David - If all you are doing is matching on Called-Station-Id, then I suggest you use the special code included in the goodies directory. The file is called "goodies/CalledStationId.pm" and it does a Realm-like direct table lookup on the Called-Station-Id in the access request. You wil

Re: (RADIATOR) Problem with Duplicate Accounting Records

2001-09-24 Thread Hugh Irvine
Hello Ganbaa - On Monday 24 September 2001 18:34, Ganbaa wrote: > > I am having a problem with radiator accounting records.Below I have > attached problem. I am using two kind of terminal server. One is Cisco5300, > other one is Cisco5400. And Radiator version is : 2.18.1 > 2001-09-14 09:59:46

Re: (RADIATOR) Large number of handlers

2001-09-24 Thread Hugh Irvine
Hello David - I neglected to answer your second question yesterday. Include files are only read once at startup (as are hooks), so yes, any changes will require a restart of Radiator. regards Hugh On Monday 24 September 2001 14:46, David Napier wrote: > Hi All :) > > I was wondering if the

Re: (RADIATOR) Accounting Table

2001-09-24 Thread Hugh Irvine
Hello GwangHee - I will need to see a trace 4 debug from Radiator showing what is happening. thanks Hugh On Tuesday 25 September 2001 07:10, GwangHee Yi wrote: > Dear, > > I want to store cdr into mysql accounting table without authentication. > I changed a little bit from sql.cfg. > I have

Re: (RADIATOR) Steel Belter Radius Shared Secret Problem

2001-09-24 Thread Hugh Irvine
Hello Leon - On Tuesday 25 September 2001 07:26, Leon Oosterwijk wrote: > All, > > I'm trying to setup my radiator to anwer a Steel Belter Radius server (SBR) > who forwars requests to me. And vica verca. So far this has not working > very well. > > The scenario's: > > 1: Radiator Server sends a

Re: (RADIATOR) AuthBy SQL

2001-09-24 Thread Hugh Irvine
Hello Quintin - My first question is what is Radiator meant to do with authentication requests? The answer will determine what the best approach will be in the configuration file. Please give me a clear explanation of what you are trying to achieve and I will suggest a suitable means to confi

Re: (RADIATOR) assign DNS config on radius

2001-09-24 Thread Hugh Irvine
Hello Anton - There is no defined radius attrbute to do this. You will need to check with your NAS vendor what they recommend. Ascend uses their own vendor-specifics, and Cisco's use their own avpairs. hth Hugh On Tuesday 25 September 2001 07:14, Anton Krall wrote: > > Guys.. is there a w

Re: (RADIATOR) More Questions..

2001-09-24 Thread Hugh Irvine
Hello Cassidy - The best way to do this is to return the rewitten username that was successfully authenticated in a Class attribute in the Access-Accept. Then you can use the Class attribute in the subsequent accounting requests to record the rewritten username. hth Hugh On Tuesday 25 Sep

Re: (RADIATOR) Feature Request - Shutdown hook

2001-09-24 Thread Hugh Irvine
Hello Rob - How are you going to initiate the shutdown? If it is by sending a signal, you could use a different signal first, such as a SIGHUP or a SIGWINCH, and use either a StartupHook (checking the parameter passed), or use a WINCHHook. In any case, it is easy enough to add a ShutdownHook,

Re: (RADIATOR) AuthBySQL

2001-09-25 Thread Hugh Irvine
Hello Paulo - You will need to configure your Handlers for the different requests. AccountingStartsOnly . AccountingStopsOnly . Note that is would be much simpler to just use AccountingStopsOnly in a single AuthBy SQL clause.

Re: (RADIATOR) Response IP

2001-09-25 Thread Hugh Irvine
Hello Derek - You can use the BindAddress global parameter to bind Radiator to a particular IP address. However, it is usually the underlying operating system that chooses which interface to actually route the traffic over. hth Hugh On Wednesday 26 September 2001 01:55, Derek Buttineau wro

Re: (RADIATOR) Problem with authentication - Source IP differs due to OSPF

2001-09-25 Thread Hugh Irvine
Hello Jason - Why don't you just add a Client DEFAULT clause? # define a DEFAULT client as a catch-all Secret . hth Hugh On Wednesday 26 September 2001 11:35, Separovic, Jason wrote: > I'm having a problem with authenticating Enterasys SSR8600s. I set the > sourc

(RADIATOR) Re: Cisco NAS not returning Acct-Terminate-Cause

2001-09-25 Thread Hugh Irvine
Hello - You will need to check with Cisco about this - although I seem to remember some discussion a while back, so you should also check the archive site to see if there is something there (http://www.open.com.au/archives/radiator/). regards Hugh On Wednesday 26 September 2001 02:03, cist

Re: (RADIATOR) Radiusd got killed because OUT OF MEMORY

2001-09-25 Thread Hugh Irvine
Hello Leon - I will need to see a copy of your configuration file and a trace 4 debug from Radiator showing what is going on. I will also need to know what versions of Radiator, Perl and all Perl modules you are using. This sort of problem is usually due to Perl modules not releasing memory,

(RADIATOR) Re: Time check item

2001-09-25 Thread Hugh Irvine
tored in a mYSQL table which > radiator queries to authenticate users. I have tried leaving the field > blank, but authentication fails. > > Any ideas on how I can go about this. > > Thanks > > > Egie. > - Original Message - > From: Hugh Irvine <[EMAIL PROTECT

Re: (RADIATOR) Help Required

2001-09-26 Thread Hugh Irvine
Hello Wasim - You can use the RewriteUsername construct to maniplulate the username in whatever way is required. For example if your users file contains only UPPER CASE NAMES, you could do the following: RewriteUsername tr/a-z/A-Z/ Have a look at section 6.4.19 (and others) in the R

Re: (RADIATOR) auth. ISDN conections

2001-09-26 Thread Hugh Irvine
Hello Leandro - I will need to see a copy of your configuration file (no secrets) together with a trace 4 debug from Radiator showing what is going on. thanks Hugh > > we are an ISP in south Brasil, and we have a Lucent Max 6000. We can > receive 60 simultaneous convencional conections and a

Re: (RADIATOR) SMS service

2001-09-26 Thread Hugh Irvine
Hello Lloyd - I don't understand the question, sorry. Can you elaborate? thanks Hugh On Wednesday 26 September 2001 18:49, lloyd dagoc wrote: > hello, > i just want to know if SMS service can be incorporated to RADIATOR, if yes > how or what do we need > > thanks > lloyd > === > Archive at ht

IMPORTANT - Re: (RADIATOR) Missing EAP-Message and 5399

2001-09-29 Thread Hugh Irvine
Hello Ricky - There is a bug in the 5399 code, so we have put a work-around into the new code in Radiator to get around it. I will send you under separate cover a new version of AuthGeneric.pm. Please let me know how it works for you. regards Hugh On Sunday 30 September 2001 10:09, ricky

Re: (RADIATOR) Passlog to Database

2001-09-29 Thread Hugh Irvine
Hello Jaime - > > Hi, > > Is there a way to have the password inputs be logged in the MySQL = > Database? Does anyone have any idea on how to do this? > You can use an AuthLog SQL clause, with a SuccessQuery and/or FailureQuery to log whatever you need to. regards Hugh -- Radiator: the m

Re: Fwd: (RADIATOR) Vendor Attribute Problem in 2.18.4

2001-09-30 Thread Hugh Irvine
Hello Leigh - There is a patch for this problem in the downloads area: 20/9/01 Fixed a problem with AuthBy EMERALD, where user and service radius attributes were not properly extracted from the database. Download a new AuthEMERALD.pm from here regards Hugh > > > > Hello, > > > > I'm usin

Re: (RADIATOR) radiator agains Radiator-2.16.1

2001-10-01 Thread Hugh Irvine
Hello Christian - Radiator simply records whatever was sent in the radius accounting packets. Have a look at a trace 4 debug (or even a trace 5 hex dump) to see what Radiator receives (you can also look at a tcpdump to see what is on the wire). regards Hugh On Monday 01 October 2001 17:38,

<    4   5   6   7   8   9   10   11   12   13   >