Re: (RADIATOR) Unix Passwords

2001-10-01 Thread Hugh Irvine
Hello Ricky - I don't quite understand your question, sorry. If you want to use the shadow file, you can either use an AuthBy UNIX clause and point it at the shadow file directly, or you can use an AuthBy SYSTEM (possibly with the UseGetspnamf parameter). Have a look at sections 6.25 and 6.3

Re: (RADIATOR) PreClientHook

2001-10-01 Thread Hugh Irvine
Hello Michael - I don't think that a PreClientHook is the right way to go about this. If you are going to keep the number matrix in a database, it is probably easiest to just use two AuthBy SQL clauses - the first one to check the numbers and the second one to check the users. hth Hugh On

Re: (RADIATOR) AuthByPolicy question

2001-10-01 Thread Hugh Irvine
Hello Toni - You have discovered the reason for the existence of the AuthBy GROUP clause. Ie. you cannot change an AuthByPolicy part way through a list of AuthBy clauses, so you need different lists. So here is what to do: Identifier Auth-SQL ... Account

Re: (RADIATOR) Efficiency

2001-10-01 Thread Hugh Irvine
Hello Jaime - The first example that you show below is incorrect and not supported. The second example is correct. regards Hugh On Monday 01 October 2001 22:08, Jaime Elizaga Jr. wrote: > > Hello everyone, > > I just need some inputs on which config would provide a more efficient > running

Re: (RADIATOR) Check callingstationid

2001-10-01 Thread Hugh Irvine
Hello Anton - This should be quite easy to do with an AuthBy PORTLIMITCHECK clause (together with a SessionDatabase SQL). Have a look at section 6.41 in the Radiator 2.18.4 reference manual. regards Hugh On Tuesday 02 October 2001 03:55, Anton Krall wrote: > > Guys. > > I just enabled a s

Re: (RADIATOR) prerequisite Digest::MD5 2.12 not found

2001-10-01 Thread Hugh Irvine
Hello Alireza - The latest version of Radiator is 2.18.4 - you should use that. Please let me know if you still have problems, and send me the complete transcript of the steps you have followed. thanks Hugh On Tuesday 02 October 2001 05:16, Alireza Veiseh wrote: > > I just downloaded the

Re: (RADIATOR) Radiator NAT problem

2001-10-01 Thread Hugh Irvine
Hello George - You can use the "OutPort nnn" parameter in the AuthBy RADIUS clause to force the use of a particular port number. This parameter is supported in Radiator 2.18.1 and later - note that the current version is Radiator 2.18.4. regards Hugh On Tuesday 02 October 2001 01:14, PANAG

Re: (RADIATOR) PORTLIMITCHECK problem

2001-10-01 Thread Hugh Irvine
Hello Kevin - This seems quite strange - can you please send me a copy of the configuration file (no secrets) together with a trace 4 debug showing what is happening? BTW - the latest version of Radiator is 2.18.4. thanks Hugh On Tuesday 02 October 2001 07:33, Kevin McKee wrote: > When I t

Re: (RADIATOR) MAXSESSIONTIME

2001-10-01 Thread Hugh Irvine
Hello Jesus - On Tuesday 02 October 2001 10:25, Jesus Duarte wrote: > Hello > > I want to set a MAXSESSIONTIME for all users. Can I do that with the > config file with an AddToReply statement instead of adding that field to > all user accounts? If so, what is the syntax? > # define AuthBy

Re: (RADIATOR) Attibute Value Pair for Priv_lvl

2001-10-01 Thread Hugh Irvine
Hello Amy - This doesn't really have a radius equivalent (as far as I know), however there are lots of things that you can do with Cisco's using the "cisco-avpair ..." construct, so you should check with Cisco what is possible. You should also be aware that there are *major* differences in ra

Re: (RADIATOR) Multiple Clients

2001-10-01 Thread Hugh Irvine
Hello Shane - On Tuesday 02 October 2001 16:51, Shane Malden wrote: > > We are looking at purchasing a copy of Radiator but I was just after some > opinion on it?? Also one of our Main features was to Proxy the Requests off > to another Radius Product (RSA ACE/Server) and have Radiator reply wi

(RADIATOR) Re: Using RADIUS as authentication provider for WIN2K RRAS

2001-10-02 Thread Hugh Irvine
Hello Ali - You will first of all need to start Radiator (radiusd) as a service on the ports that you want it to listen on. Then you will be able to send authentication requests to it and it should respond. Note that you can also use the "radpwtst" program for testing. hth Hugh On Tuesday

Re: (RADIATOR) Accounting responses.

2001-10-02 Thread Hugh Irvine
Hello Ian - On Tuesday 02 October 2001 17:51, Ian Burgess wrote: > Hi > > I have got involved in a radiator config. Everything is running. We are > adding more network functionality (DSL) connections. > > The Telco insists that the Accounting response to the stop record have > certain attributes

Re: (RADIATOR) radmon.sh does not restart radiator when run as cronjob

2001-10-02 Thread Hugh Irvine
Hello Andrew - What is "radmon.sh"? In any case, I suspect there is something missing in the environment when the script is run as the user that cron runs as. Either that or permissions problems for the same reason. BTW - we provide a tool called "restartWrapper" for this purpose (in the go

Re: (RADIATOR) IP Pools by Group

2001-10-02 Thread Hugh Irvine
Hello Camillo - On Tuesday 02 October 2001 23:52, Camilo A. Echeverry wrote: > Hi All .. > > i want to know how to use a different IP pool for each group in my > machine: > > eg. > group staff uses 192.168.0.XX 255.255.255.0 > group admin uses 192.168.1.XX 255.255.255.0 > You can either assign

Re: (RADIATOR) MPPE

2001-10-02 Thread Hugh Irvine
Hello Andre - Could you please send me a copy of your configuration file (no secrets) together with a trace 4 debug from Radiator showing what is happening? If it is the router that is complaining, it sounds like the router has not even sent the request yet, so Radiator would not be involved

Re: (RADIATOR) Radiator on NT stopping.

2001-10-02 Thread Hugh Irvine
Hello Ian - > > I have NT4 with radiator. > > I have a Telco proxying requests to me. > > he tells me that my radius stops responding to his proxy. I restart the > service and he is happy again. > > logs show no activity for the period he believes that I am disconnected. > This is the only app o

Re: (RADIATOR) Concatenating or modifying values for SQL accounting

2001-10-03 Thread Hugh Irvine
Hello Josh - You can't do what you describe with a simple AcctColumnDef, however you can certainly do it with an AcctSQLStatement. Have a look at section 6.28.15 in the Radiator 2.18.4 reference manual. regards Hugh On Thursday 04 October 2001 06:47, Ward, Josh wrote: > Ok, > > I'm a new r

Re: (RADIATOR) AcctLogFileName and AuthBy LDAP2 ??

2001-10-03 Thread Hugh Irvine
Hello Eric - On Wednesday 03 October 2001 22:40, Eric Castaneda wrote: > We are running Radiator 2.18.4 using Authby LDAP2 to authenticate > users against Open LDAP 2.0.7. We need to have "detail" type logging > that is enabled by using the "AcctLogFileName" option in the radius.cfg > fil

Re: (RADIATOR) Dynamic DNS with Radiator & Bind

2001-10-03 Thread Hugh Irvine
Hello Ricardo - Radiator does not support dynamic DNS updates. regards Hugh On Thursday 04 October 2001 00:51, Ricardo D. Albano wrote: > > Hi, any was implemented a dynamic DNS with radiator and bind ? > Any know good information about this stuff ? > > RDA.- --

Re: (RADIATOR) Accouting File

2001-10-03 Thread Hugh Irvine
Hello Rod - > > I finally got my validation process working with multiple > sections, but am still > not getting any entries in the AcctLogFileName file. > > If I run the radpwtst program, it DOES put a start and stop entry into that > AcctLogFileName file, > but actual dialup validations are

Re: (RADIATOR) addtoreply

2001-10-03 Thread Hugh Irvine
Hello - There are some example hooks in the file "goodies/hooks.txt" in the Radiator distribution. hth Hugh > > Below is a realm file this works ok but when I have tried to make this > AddToReply as part of a postauthHook as a addtoreplyifnotexit for all > default users but if user x,y,k t

Re: (RADIATOR) acct starts and acct stops

2001-10-03 Thread Hugh Irvine
Hello Lloyd - You cannot do what you show below, you will need two separate AuthBy SQL clauses. What else are you doing in the configuration file? regards Hugh On Wednesday 03 October 2001 19:36, lloyd dagoc wrote: > hello, > i just want to ask if this can be done...i want to split acct sto

Re: (RADIATOR) Radiator and RAdmin WinNT Help

2001-10-04 Thread Hugh Irvine
Hello John - The latest versions are Radiator 2.18.4 and Radmin 1.5. On Thursday 04 October 2001 08:32, John Edward wrote: > > Hello > > We have bought Radiator and Radmin, we installed Radiator 2.18.2 using > an AuthNT.pm file from a old version 2.14.x because the AuthNT.pm > version 2.18.2 n

Re: (RADIATOR) Shells.

2001-10-04 Thread Hugh Irvine
Hello Ricky - In the file that you use for the AuthBy FILE (%D/users) you could simply add those users that you want to lock out like this: # %d/users user1 Password = * .. hth Hugh On Friday 05 October 2001 01:06, ricky wrote: > > Guys, > > I noticed a couple of years back someo

Re: (RADIATOR) Problem with radiator and NAS 5300 Cisco

2001-10-04 Thread Hugh Irvine
Hello Ivan - I will need to see a copy of your configuration file (no secrets) together with a trace 4 debug from Radiator showing what is going on. thanks Hugh On Friday 05 October 2001 01:48, Ivan Arias wrote: > hi > > I just install a NAS 5300 (Cisco Asscess Server) in my network > It is

Re: (RADIATOR) LDAP AUTH and MySQL Accounting

2001-10-04 Thread Hugh Irvine
Hello Andreas - This is fairly straightforward to implement. Here is how to do it: # radius.cfg AuthPort1645 AcctPort1646 # define Client(s) Secret mysecret DupInterval 0 # define AuthBy(s) Identifier CheckFILE Filename

Re: (RADIATOR) 2 questions

2001-10-04 Thread Hugh Irvine
Hello Anton - On Friday 05 October 2001 14:31, Anton Krall wrote: > > Guys.. I have 2 questions: > Only two? :-) > 1. I need to send the accounting info to 2 diff. databases so I created > 2 sessiondatbases clauses now.. my question is... can I send the > accounting using 2 sessiondatba

Re: (RADIATOR) Cisco router sending 4 RADIUS accts per login

2001-10-04 Thread Hugh Irvine
Hello Stephen - Thanks for sending the configuration and accounting output. You will notice that the Acct-Delay-Time attribute is shown as 0, 5, 10 in each of the succeeding packets. This indicates that the Cisco has not received an accounting response and is resending the request. >From you

Re: (RADIATOR) Identifier in Handler

2001-10-04 Thread Hugh Irvine
Hello William - On Friday 05 October 2001 08:00, William Hernandez wrote: > Hello everyone, > > We use handlers in our radius.cfg such as > > > Identifier prdigital > SessionDatabase prw-sessiondb > AuthBy prdigital-plat > > PostAuthHook file:"/etc/raddb/setSessi

Re: (RADIATOR) 2 questions

2001-10-04 Thread Hugh Irvine
ton Krall wrote: > What if password are in some other file? The pw file is a sql genertaed > file.. > > Saludos > > Anton Krall > > > > -Original Message- > From: Hugh Irvine [mailto:[EMAIL PROTECTED]] > Sent: Jueves, 04 de Octubre de 2001 06:22 p.m. > To: A

Re: (RADIATOR) NASIDENTIFIER

2001-10-04 Thread Hugh Irvine
Hello Jesus - The default DeleteQuery already uses NASIDENTIFIER and NASPORT - why have you changed it? It seems to me that simply using the correct query will fix the problem. Note that you can add the USERNAME to the delete query too if you need to. hth Hugh On Friday 05 October 2001 10

Re: (RADIATOR) LDAP AUTH and MySQL Accounting

2001-10-05 Thread Hugh Irvine
adius::AuthFILE ACCEPT: > Fri Oct 5 10:10:31 2001: DEBUG: Handling with Radius::AuthSQL > Fri Oct 5 10:10:31 2001: INFO: Access rejected for mike@test: > Authentication disabled > Fri Oct 5 10:10:31 2001: DEBUG: Packet dump: > *** Sending to 212.73.0.14 port 49152 > C

Re: (RADIATOR) Maxsessions

2001-10-05 Thread Hugh Irvine
Hello Todd - On Saturday 06 October 2001 02:32, Todd Dokey wrote: > Is there a way to enforce MaxSessions across different Clients? > > I have a problem with people using the same login in San Francisco and Los > Angeles. > > By and large, they both are dealt with by the Default Client and Defau

Re: (RADIATOR) AuthSQL looks for match

2001-10-05 Thread Hugh Irvine
Hello William - It looks to me like the shared secrets are incorrect (or the password is wrong). The trace that you show correcly indicates the SQL query that was run for this user 'cumminspr': > Fri Oct 5 15:03:26 2001: DEBUG: Query is: select password, > active, timeleft, bl > ockuser, gu

Re: (RADIATOR) "Request from unknown client" woes

2001-10-05 Thread Hugh Irvine
Hello Dave - I will need to see a copy of the configuration file (no secrets) together with a trace 4 debug showing the startup messages. Are you sure you don't have a second definition for 192.168.5.21 further down in your configuration file that is overwriting the first? regards Hugh On

Re: (RADIATOR) Radiator and Merit-AAA 4.5

2001-10-18 Thread Hugh Irvine
Hello Rafi - Vendor 2352 is Redback, so you should add the Redback vendor specifics to the standard dictionary file with your favourite text editor (from dictionary.redback). The problem with the accounting requests can probably be fixed with the following: # define Merit Client clause with

Re: (RADIATOR) Radiator load problem

2001-10-18 Thread Hugh Irvine
Hello David - On Thursday 18 October 2001 11:57, David Napier wrote: > Thanx for the reply High, can't fault this service :) > We try to please. Actually, we try to be *much* better than any other product and any other support you have ever seen. > > The first question of course is "what ha

Re: (RADIATOR) NAS problem

2001-10-18 Thread Hugh Irvine
Hello Anura - This is undoubtedly because you are not sending a correct Service-Type in the access accept, which Cisco's require. You will need to add at least the following to the reply: Service-Type = Framed-User, Framed-Protocol = PPP, .. If you need further he

Re: (RADIATOR) Tunnel-Client-Auth-ID and Tunnel-Server-Auth-ID

2001-10-18 Thread Hugh Irvine
Hi Wim - On Thursday 18 October 2001 23:55, Wim Biemolt wrote: > Hello Hugh, > > ==> From: Hugh Irvine > > > You are defining the attributes as vendor specifics, but Radiator is > > complaining about standard attributes. Here is how to define them: > > >

Re: (RADIATOR) insert errors

2001-10-18 Thread Hugh Irvine
Salut Jerome - Merci pour ca! I have copied Mike on this mail and he will consider the patch for inclusion in the next release. A+ Hugues On Thursday 18 October 2001 20:00, Jerome Fleury wrote: > --On Tuesday, October 16, 2001 09:57:17 AM +0200 Jesús M Díaz > > <[EMAIL PROTECTED]> wrote: >

Re: (RADIATOR) AddToReply also in accounting?

2001-10-18 Thread Hugh Irvine
Hi Wim - I have copied Mike on this mail and the manual will be clarified for the next release. Thanks for pointing out the inconsistency. regards Hugh On Friday 19 October 2001 00:04, Wim Biemolt wrote: > Hola Mariano, Hello Hugh, > > ==> From: Hugh Irvine > > > Yes

Re: (RADIATOR) Block Time on RADMIN

2001-10-18 Thread Hugh Irvine
Hello Suwat - The latest version of Radmin has support for per-user and per-service check and reply attributes. You should upgrade to Radmin-1.5. regards Hugh On Thursday 18 October 2001 22:05, Suwat Charoensakpanich wrote: > Hello... > I use RADMIN for manage user on MySQL.It's > w

Re: (RADIATOR) Multiple Accounting Stop Records

2001-10-18 Thread Hugh Irvine
/var/log/radacct/detail > > > Does it make sense? Do I need an AuthBy clause if I'm only > handling Accounting-Request? > > Thanks in advance, > William > > -Original Message- > From: Hugh Irvine [mailto:[EMAIL PROTECTED]] > Sent: Monday, August 27, 200

Re: (RADIATOR) signal to NAS

2001-10-18 Thread Hugh Irvine
Hello Lloyd - On Saturday 20 October 2001 18:13, lloyd dagoc wrote: > hello, > > just wondering if RADIATOR can send a signal to NAS to disconnect a > particular usercan RADIATOR do that? if yes , how? > Radiator cannot do it directly, however if your NAS software supports the new radius "

(RADIATOR) IMPORTANT - what exactly is the Timestamp in Radiator?

2001-10-18 Thread Hugh Irvine
Hello Shanaka - On Friday 19 October 2001 13:58, Shanaka Rabel wrote: > Hi Hugh, > I wrote to u sometime back regarding a pre-paid solution on a Radiator. > Thanx for the help:-) > > I need one more suggestion from you. I want to call a rating engine when > a login request comes thru, and then s

Re: (RADIATOR) MSSQL best connection method

2001-10-19 Thread Hugh Irvine
Hello Robert - Probably the simplest and easiest thing to do in your situation is to proxy the radius requests to a copy of Radiator running on the MSSQL host, and then just use the native ODBC support there. regards Hugh On Saturday 20 October 2001 01:33, Robert Blayzor wrote: > We are cu

Re: (RADIATOR) Acct-Status-Type = Alive

2001-10-20 Thread Hugh Irvine
Hello Rick - On Saturday 20 October 2001 16:12, ricky wrote: > Guys, > > I am seeing 'Acct-Status-Type = Alive' in the logs from my comindico ports. > > Is this something to do with V.92? > > How should one of these things be treated for accouting information. Is > there a an 'Dead' or 'NotAlive

Re: (RADIATOR) How to route a IP pool (subnet) to a dailup user

2001-10-21 Thread Hugh Irvine
Hello Abdul - On Sunday 21 October 2001 23:12, Abdul Rehman Saeed wrote: > Hi, > > I want to route a IP pool like 210.56.13.0/29 to a dailup user.if any body > help me with example in this regard I will be very thankful to him. > > Also another question is I would like to route selected IP addr

Re: (RADIATOR) Bad attribute=value pair:

2001-10-22 Thread Hugh Irvine
Hello Lloyd - Just what it says - somewhere in your configuration you have incorrectly specified an "Attribute = value" pair. This usually seems to happen with GENERIC SQL definitions that only have a value in them (like "116000" or "72000") instead of the "Attribute = value" syntax. hth Hu

(RADIATOR) Fwd: radpwtst

2001-10-22 Thread Hugh Irvine
-- Forwarded Message -- Subject: radpwtst Date: Fri, 19 Oct 2001 05:17:56 +0100 From: "Paul O'Shea" <[EMAIL PROTECTED]> To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>, "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> Also in the unlikely event that anyone else is interested in it I have

Re: (RADIATOR) SNMP Error!!!

2001-10-22 Thread Hugh Irvine
Hello Hakim - Please send me a copy of your configuration file (no secrets) together with a trace 4 debug showing what is going on and a description of what was working, what is not working now, and what you have changed. thanks Hugh On Monday 22 October 2001 17:28, hakim wrote: > hi all!!

Re: (RADIATOR) Radius Authentication of PPTP Endpoints on Windows NT 4 supported?

2001-10-22 Thread Hugh Irvine
Hello Ralph - On Monday 22 October 2001 18:28, [EMAIL PROTECTED] wrote: > Hi > > From faq, manual and mailing list archive it is not completely clear if > - Windows NT4 supports radius authentication of PPTP endpoints > - What is necessary on the Windows NT side > - What is necessary on the Radi

Re: (RADIATOR) Logging question

2001-10-22 Thread Hugh Irvine
Hello Steve - On Tuesday 23 October 2001 05:12, Stephen Caporossi wrote: > I am trying to setup radiator to log our VPN users to a different file > than PPP users. We have several PPP and VPN servers and I do not want > each to log to it's own file. Is there a way to do this? Is there some >

Re: (RADIATOR) Malformed

2001-10-22 Thread Hugh Irvine
Hello Andy - On Monday 22 October 2001 23:46, Andy De Petter wrote: > Hello guys, > > Anyone heard of an issue with RedBack sending back malformed vendor > specific attributes with length 6? I've been having this problem for > months now, and still no solution found for it. It's not bothering

Re: (RADIATOR) SNMP Error continutes(d)!!!

2001-10-22 Thread Hugh Irvine
Hello Hakim - Thanks for sending the trace file. The messages that you show below are not from Radiator - where are they from? I am guessing that there is something wrong with the installation of the ucd-snmp package. Note this package is now called net-snmp and is found on Sourceforge (www.

Re: (RADIATOR) Rewriting Usernames on the Fly

2001-10-22 Thread Hugh Irvine
Hello Martin - Why don't you just use two AuthBy SQL clauses with different AuthSelect statements? # define AuthBy SQL statements Identifier CheckNewUserName . AuthSelect select password from \ serviceuser where id_user = '%n' AuthColumnDef

(RADIATOR) Re: Ip Allocator error

2001-10-23 Thread Hugh Irvine
Hello Dave - There are two problems in what you show below. The first is that you have the AddressPool definition commented out, so there are no addresses configured in the AuthBy DYNADDRESS. The second is that you have not defined a PoolHint to say where you want the address to come from.

Re: (RADIATOR)

2001-10-23 Thread Hugh Irvine
Title: Re: (RADIATOR) Hello - Hello, I wonder if you can help me a couple Radiator configuration problems.   OK. 1. It seem that Radiator is disconecting users ( dial-up), the disconection cause appears NULL. This doesn't happen to all of our users, only to some. Some of them are disconne

Re: (RADIATOR) Strange radiusd startup problem

2001-10-23 Thread Hugh Irvine
Hello Ray - >Hi all, I have just restored a Linux system that had a hard drive failure >and I am having a problem starting radiusd. Previously I always started >radiusd from /etc/rc5.d and never had a problem. Now it starts fine but the >first authentication request causes radiusd to die. The

Re: (RADIATOR) AuthSelect

2001-10-23 Thread Hugh Irvine
Hello Lloyd - >hello, >can i do this in an AuthBy SQL?? > > Session-Timeout = Class <<- this is basically my question > > AuthColumnDef 0,Encrypted-Password,check > AuthColumnDef 1,Filter-Id,reply > AuthColumnDef 2,Session-Timeout,reply > AuthColumnDef 3,Simultaneous-

Re: (RADIATOR) Authlog

2001-10-24 Thread Hugh Irvine
Hello Todd - Keep in mind that there are different things happening with what is output from Radiator. Standard error, debug, info messages and so on (controlled by the Trace setting) go to the LogFile or clause or whatever. The is only used for authentication logging. And the accounting r

Re: (RADIATOR) proxying requests

2001-10-25 Thread Hugh Irvine
Hello Utku - On Thursday 25 October 2001 19:09, Utku Er wrote: > Hi, > > first I want to thank Hugh for the answering to my last question... > > I want to make sure that when radiator (lets say A) proxy requests to > another proxy (lets say B) do I loose the original requester NAS > inform

Re: (RADIATOR) how do you guys handle your users' left time, using Radiator?

2001-10-25 Thread Hugh Irvine
Hello Masoud - It looks like you are doing most things correctly in your Radiator configuration, but I suspect you may have a problem because you are not sending the addtional attributes required by the Cisco. You will need to add at least what is shown below: DBSource

Re: (RADIATOR) a little help for the new guy...

2001-10-25 Thread Hugh Irvine
Hello Mike - I will need to know a bit more about what you mean below. And can you also tell me what platform you are running on? There is a very extensively documented example configuration file in the distribution in the file called "radius.cfg" that you should have a look at. It contains

Re: (RADIATOR) Error in Reference Manual

2001-10-25 Thread Hugh Irvine
Hello Gustavo - Quite right - many thanks for pointing this out. I have copied Mike on this mail and the manual will be corrected for the next release. Thanks! Hugh On Thursday 25 October 2001 23:56, Gustavo Moreira wrote: > You have an error in Radiator Reference manual. In (6.7.6 CountQu

Re: (RADIATOR) new config

2001-10-25 Thread Hugh Irvine
Hello Kieran - Please send me a copy of your configuration file (no secrets) and a trace 4 debug from Radiator showing what is happening. BTW - there is an extensively documented example configuration file in the distribution in the file called "radius.cfg". thanks Hugh On Friday 26 Octob

Re: (RADIATOR) Activestate Perl and Digest-MD5 v2.12 requirement

2001-10-25 Thread Hugh Irvine
Hello Craig - Radiator 2.18.4 will operate correctly in spite of the message. The makefile has been corrected for the next release (due out in the next couple of days). Thanks for reporting the problem. regards Hugh On Friday 26 October 2001 09:26, Massey, Craig wrote: > We've just attemp

Re: (RADIATOR) Authentication CHAP

2001-10-25 Thread Hugh Irvine
Ciao Giuseppe - Radiator will automatically handle CHAP-Password as long as you have the cleartext password available in the user defintion. regards Hugh On Friday 26 October 2001 01:08, Giuseppe Denora wrote: > Hi everybody, > > I' m trying to set up a Radiator Authenticator using the clau

Re: (RADIATOR) Radiator behaviour as Proxy radius server

2001-10-25 Thread Hugh Irvine
Hello Abdul Rehman - When you configure Radiator to operate as a radius proxy, it will send all radius requests to the radius target including authentication and accounting. If you wish to record the accounting records locally as well, that is very easy to accomplish. Here is an example: #

Re: (RADIATOR) NAS not receiving access-accept

2001-10-25 Thread Hugh Irvine
Hello Julien - As far as I can see in the debug below, you are sending back an access accept within one second of receiving the request. However, there are no reply attributes set, so perhaps that is your problem? You would usually do something like this: .

Re: (RADIATOR) Stopping processing on Invalid radius requests

2001-10-25 Thread Hugh Irvine
Hello Martin - The simplest way to do what you describe is with Handlers. # define a special Handler to trap bogus accounting . Note that you should not mix Realms and Handlers in the same configuration file. Convert any Realms like this: becomes It is usually much easie

Re: (RADIATOR) IMPORTANT - what exactly is the Timestamp in Radiator?

2001-10-26 Thread Hugh Irvine
Hello Dave - On Saturday 27 October 2001 01:31, Dave Kitabjian wrote: > One question I've always had... > > Given an accounting record: > > Wed Mar 28 17:08:50 2001 > User-Name = "[EMAIL PROTECTED]" > Service-Type = Framed-User > NAS-IP-Address = 103.73.154.6 > NA

Re: (RADIATOR) user-auth

2001-10-27 Thread Hugh Irvine
Hello Atif - You would use an AuthBy UNIX clause. Have a look at section 6.25 in the Radiator reference manual (included in the distribution in the file "doc/ref.html". There is also an extensively documented example configuration file in the distribution in the file called "radius.cfg". re

Re: (RADIATOR) AuthBy SQLRADIUS and Rewrite

2001-10-28 Thread Hugh Irvine
Hello Mark - On Monday 29 October 2001 07:41, Mark - Orcon Support wrote: > The new SQLRADIUS function looks awesome, so thanks Hugh and the team for > all your work on the continued new features for Radiator. > Most of the thanks should go to Mike - he's the one who writes the code! > I was h

Re: (RADIATOR) AuthBy SQLRADIUS and Rewrite

2001-10-28 Thread Hugh Irvine
Hi Steve - On Monday 29 October 2001 11:41, Steve Roderick wrote: > At 09:44 AM 10/29/2001 +1000, you wrote: > >I think we will wait to see if anyone else has ideas for further > > enhancements and then we will incorporate all of them in Radiator 2.19.1. > > Actually I have a "HostColumnDefs" pi

Re: (RADIATOR) roblem with max simultanious users

2001-10-30 Thread Hugh Irvine
Hello Nir - If I understand you correctly you are trying to test simultaneous use with the radpwtst program? You need to be a bit careful doing this because of the way Radiator maintains the session database. When Radiator receives an access request it first of all deletes any existing sessi

(RADIATOR) Re: (RADIATOR-ANNOUNCE) Version 2.19 released

2001-10-30 Thread Hugh Irvine
Hello Mariano - Thanks for the kind words - we appreciate it. And I'm glad that we are keeping you happy - if you have any more good ideas for Radiator please let us know! regards Hugh >El 28 Oct 2001 a las 13:08, Mike McCauley escribió: > >> We are pleased to announce the release of Rad

Re: (RADIATOR) Radiator and Tagged L2TP attributes

2001-10-30 Thread Hugh Irvine
Hello Onno - How nice to hear from you - hope everything is going well? I have copied this to Mike to ask him to have a look at if for you. regards Hugh >Hi All, > >I am trying to send tagged tunneling attributes with radiator and having >some problems. I have read the FAQ/manual as per >"

Re: (RADIATOR) default gateway

2001-10-30 Thread Hugh Irvine
Title: Re: (RADIATOR) default gateway Hello Anton - I suppose you could use the "Framed-Route" attribute, however I think this is much more likely to be entirely dependent on the NAS and PPP client. You will have to check with your NAS vendor to see what options are available. regards Hugh

Re: (RADIATOR) sesion-timeout per client

2001-10-30 Thread Hugh Irvine
Hello Arwin - >Hello, > >How can I add a session-timeout attribute on a per client basis? >When I use AddToReply SessionTimeout=1800 in a handler, it works fine for >this handler. >But I want to do this on a per client basis. I think I'll have to use some >sort of hook, >but the client clause o

Re: (RADIATOR) sesion-timeout per client

2001-10-30 Thread Hugh Irvine
Hello Arwin - >Hello, > >How can I add a session-timeout attribute on a per client basis? >When I use AddToReply SessionTimeout=1800 in a handler, it works fine for >this handler. >But I want to do this on a per client basis. I think I'll have to use some >sort of hook, >but the client clause o

Re: (RADIATOR) Cisco ADSL trouble.

2001-10-30 Thread Hugh Irvine
Hello Wayne - The problem here is due to the fact that the NAS-Port value in all the access requests is always 0, therefore Radiator gets confused because the NAS-IP-Address/NAS-Port combination is what is used for the maintenance of the session database. You will have to check with your ven

Re: (RADIATOR) New err since installing 2.19

2001-10-30 Thread Hugh Irvine
Hello Matthew - The following is defined in the standard dictionary contained in the Radiator 2.19 distribution. ATTRIBUTE EAP-Message 79 binary What dictionary are you using? BTW - you should always start with the standard Radiator dictionary and add or remove defini

Re: (RADIATOR) "Called-Station-Id" It is not send in the"Access-Request"

2001-10-30 Thread Hugh Irvine
Salut Julien - You will have to check with the Ariel vendor to find out why this is. It may also be an issue with your telephone service that does not supply that information in the call setup data. regards Hugh >Radiator is not receiving the "Called-Station-Id" in the >"Access-Request" >

Re: (RADIATOR) Connection failure with MySQL

2001-10-30 Thread Hugh Irvine
Hello Gustavo - Have you installed and configured the DBI/DBD modules for Perl? regards Hugh >Hi guys, > > I'm trying to set up a radiator server with a MySQL server only to >assign three address pools. The trouble is that radiator can't connect to >the sql server, and I don't unders

Re: Fwd: (RADIATOR) Install error on radiator 2.19?

2001-10-31 Thread Hugh Irvine
Hello Jay - Thanks for pointing this out. Like the previous case, this is inoccuous and will be fixed in the next release. cheers Hugh > > > >Greetings; >> > >> >A few weeks ago we mentioned that on a fresh install of radiator 2.18, >> > which was being done on a freshly installed FreeB

Re: (RADIATOR) Problems with 5800

2001-10-31 Thread Hugh Irvine
Hello Lisa - >Hi all, > >I'm hoping someone out there has seen similar problems. > >In our set up of proxies and customer radius servers(all Radiators) we >periodically experience near blackouts. The users get a busy signal. The >problems occur only with Cisco 5800s. The Nortel CVX arena is usua

Re: (RADIATOR) cisco-avpair = ip:dns-servers=xxx.xxx.xxx.xxx

2001-10-31 Thread Hugh Irvine
Hello Wayne - The correct syntax for a cisco-avpair is as follows: cisco-avpair = "ip:dns-servers=xxx.xxx.xxx.xxx" note the quotes. regards Hugh >My ADSL radwho is working now thanks to Gareth's suggestion. I am trying to >use cisco-avpair = ip:dns-servers=xxx.xxx.xxx.xxx but radia

Re: (RADIATOR) Connection failure with MySQL

2001-10-31 Thread Hugh Irvine
Hello Gustavo - >Hugh: > > Yes, but there was any troubles with it... > I've fixed it and now it's working. > > Thanks to all that have helped me. > > In addition of all this stuff, I have another "little" doubt... > > I need to authenticate users from 5 realms in s

(RADIATOR) Re: Remote access ACL control with Radius

2001-11-01 Thread Hugh Irvine
Hello Manoj - What does a trace 4 debug from Radiator show? Is the reply attribute actually being sent in the reply correctly? If it is in the reply, you will then have to check on the Cisco to see what the Cisco is doing with the reply. You can use the debug command on the Cisco to see what

Re: (RADIATOR) Multiple accounting methods

2001-11-01 Thread Hugh Irvine
Hello Barry - Yes this is very simple to do. # define AuthBy clauses Identifier SQLAccounting DBSource . DBUsername . DBAuth . AuthSelect AccountingTable ACCOUNTING AcctCloumnDef . . Identifier Chec

Re: (RADIATOR) "Bad authenticator in request" read the FAQ'sstill not working

2001-11-01 Thread Hugh Irvine
Hello Andrew - It looks to me like the shared secrets are different between the NAS and the Client clause. You only show an accounting request and if this is only happening with accounting requests (ie. authentication requests are working) then it is likely a software bug in the NAS that the

Re: (RADIATOR) AcctLogFileFormat

2001-11-01 Thread Hugh Irvine
Hello William - >Hello everyone, > >I have the following in radius.cfg: > AcctLogFileFormat \ > %U \ > %{NAS-IP-Address} \ > %{NAS-Identifier} \ > %{Acct-Status-Type} \ > %{Acct-Session-Id} \ >

Re: (RADIATOR) Multiple accounting methods

2001-11-01 Thread Hugh Irvine
). regards Hugh >Hi Hugh, > >I still want to authenticate by the UNIX passwd file for the time being but >write accounting records to mySQL. Is thsi the correct config for that >scenario? > >Barry > >- Original Message - >From: "Hugh Irvine" <[EMAIL

RE: (RADIATOR) AcctLogFileFormat

2001-11-02 Thread Hugh Irvine
Framed-IP-Address = > VTS-Session-Key = > Call-Arrived-time = > Ascend-NAS-Port-Format = > Ascend-Multilink-ID = > Ascend-Num-In-Multilink = > Acct-Link-Count = > Acct-Multi-Session-Id = > Ascend-Modem-PortNo

Re: (RADIATOR) Session Limits for PPPoE

2001-11-02 Thread Hugh Irvine
Hello Mike - At 12:38 -0800 01/11/2, Mike Greene wrote: >Hello, > >We have just started using the session limit for our TotalControl >and Livingston NAS'es with pretty good results. I'm now looking >into how we can poll our Cisco 7206VXR for aDSL connections. I see >that Radiator utilizes

Re: (RADIATOR) command line

2001-11-03 Thread Hugh Irvine
Hello Kieran - Radiator does not have any command line "commands", although it does accept a number of command line options. You will find the complete reference manual in the file "doc/ref.html" in the distribution, and you can also use the "-h" flag to get a usage printout. > radiu

Re: (RADIATOR) Fwd: BOUNCE radiator@open.com.au: Non-membersubmission from ["Ronan Eckelberry" ]

2001-11-03 Thread Hugh Irvine
Hello Ronan - > > > For some reason, the portmasters are not authenticating users. >Looking at the trace of the Radiator log shows that it is sending >"Access-Accept" packets back to the portmasters, but the users are still >being disconnected. Users can authenticate properly with the Cis

Re: (RADIATOR) If available in Radonline

2001-11-04 Thread Hugh Irvine
Hello AbdusSami - At 12:35 +0300 01/11/4, Mohammed AbdusSami wrote: >Dear All, > >Once the user disconnected, if it is still showing in radonline table. Does >it create the problem to reconnect, and maxsession is 1. If the entry for the user is still in the session database, then yes there wi

<    5   6   7   8   9   10   11   12   13   14   >