[RADIATOR] RHEL6 install - Can't locate Radius/ServerConfig.pm

2011-02-04 Thread Jim Tyrrell
Hi, I have built a fresh RHEL 6.0 x86_64 server, installed perl and other prerequisites and installed Radiator 4.7-3 from RPM but when I try and start radiusd I get the following error messages: /usr/bin/radiusd -config_file /etc/radiator/radius.cfg -foreground Can't locate Radius/ServerConfig.

Re: [RADIATOR] RHEL6 install - Can't locate Radius/ServerConfig.pm

2011-02-04 Thread Jim Tyrrell
strong point and I don't want to add something in the wrong place which will cause other problems further down the line. Thanks. Jim. Christian Kratzer wrote: > Hi, > > On Fri, 4 Feb 2011, Jim Tyrrell wrote: > >> Hi, >> >> I have built a fresh RHEL 6.0

Re: [RADIATOR] NoSQL databases support

2011-10-18 Thread Jim Tyrrell
I use MySQL for monthly accounting with approx 100 million rows per month and 12 months retention and its very usable, less than 1 second to pull back a users records for the month. I don't have Radiator log directly to the MySQL though, I have it log the accounting to a file and have a scrip

Re: [RADIATOR] NoSQL databases support

2011-10-19 Thread Jim Tyrrell
gt; imported if the time comes. so, you still don't loose data. > > Essentially 2 levels of redundancy. You could use just one, or both. > > > Michael > > > On 11-10-18 11:25 AM, Jim Tyrrell wrote: >> I use MySQL for monthly accounting with approx 100 million ro

[RADIATOR] LDAP_OPERATIONS_ERROR

2011-12-13 Thread Jim Tyrrell
Hi, Can someone shed light on what the error message "LDAP_OPERATIONS_ERROR" actually means? I am seeing this quite frequently in the logs of our Radius servers that connect to a load balanced cluster of LDAP servers. I had suspected the connection being dropped/timed out on firewalls or the

[RADIATOR] AuthBy SQL - multiple rows/attributes

2012-06-25 Thread Jim Tyrrell
Hi, Is it possible for AuthBy SQL to return multiple attributes if the query returns multiple rows? I am currently using AuthBy SQL to return a Tunnel-Endpoint to a LAC with the following simplified config: DBSourcedbi:mysql:databasename:192.168.10.3 DBUsername

Re: [RADIATOR] AuthBy SQL - multiple rows/attributes

2012-06-26 Thread Jim Tyrrell
create an sql statement > that returns them all on one row. > > What is your sql table structure? multiple tables? > > mike > > > On 12-06-25 08:52 AM, Jim Tyrrell wrote: >> Hi, >> >> Is it possible for AuthBy SQL to return multiple attributes if the query >

[RADIATOR] TACACS+ not matching group

2012-11-01 Thread Jim Tyrrell
Hi, I'm just getting started with TACACS and have just tried to configure support in Radiator 4.10, I think I have followed the examples but I cant get it to match the correct group. I have configured "GroupMemberAttr tacacsgroup" under the ServerTACACSPLUS, and I can see the Access-Accept in

[RADIATOR] Could not load Radius::AuthTACACSPLUS

2012-11-22 Thread Jim Tyrrell
Hi, I have TACACS currently working and authenticating against a local filem but now I want to proxy authentication to another TACACS server if the user is not defined locally. I have added an 'AuthBy TACACSPLUS' but I am getting an the following error: Thu Nov 22 15:47:05 2012: ERR: Could no

Re: [RADIATOR] Slow response from Radiator

2013-03-11 Thread Jim Tyrrell
I would suggest testing the LDAP search on the Radiator server to the local address 127.0.0.1. Your Radiator debug shows it connecting to LDAP on 127.0.0.1: >Fri Mar 8 09:08:13 2013: INFO: Connecting to 127.0.0.1:389 But the ldapsearch you did was to 10.44.85.165 so not a valid comparison: > t

[RADIATOR] Hook add_attr requires Dictionary attributes?

2013-04-30 Thread Jim Tyrrell
Hi, I have created a PreProcessingHook to tweak a few attributes into a more friendly format for the MySQL inserts/updates. The hook creates new attributes: $p->add_attr("R_RouteList", $FramedRoutes); $p->add_attr("R_Tunnel-Server-Endpoint_in", @words[0]); $p->add_attr("R_Tunnel-Client-Endpoi

[RADIATOR] Unknown reply received in AuthRADIUS

2013-05-01 Thread Jim Tyrrell
Hi, I have a default accounting handler which currently formats a few attributes via a hook, updates a MySQL database with session info, and then relays the RADIUS packet onto a couple of Cisco management servers (so they can maintain a mapping of user to IP). We have always had a few "Unknown

Re: [RADIATOR] Unknown reply received in AuthRADIUS

2013-05-01 Thread Jim Tyrrell
tor 4.11 reference manual ("doc/ref.pdf"). > > regards > > Hugh > > > On 2 May 2013, at 04:49, Jim Tyrrell wrote: > >> Hi, >> >> I have a default accounting handler which currently formats a few >> attributes via a hook, updates a MySQL data

Re: [RADIATOR] Unknown reply received in AuthRADIUS

2013-05-03 Thread Jim Tyrrell
t;>> Hello Jim - >>> >>> Just add "IgnoreAccountingResponse" to your AuthBy RADIUS clauses. >>> >>> See section 5.32.30 in the Radiator 4.11 reference manual ("doc/ref.pdf"). >>> >>> regards >>> >>> H

Re: [RADIATOR] A way to verify that the number of failed attempt is lesser than 3 in the las 30 minutes

2013-05-22 Thread Jim Tyrrell
Could you log failed auth attempts to a database table (AuthLog SQL?) and when a user connects have an initial AuthBy that checks this table 1st, and if they have 3 Auth failures in the last 30 minutes take the appropriate action: eg If Authlog updates a table called authlog then have an AuthB

[RADIATOR] Same code for ReplyHook & PostAuthHook hooks

2013-09-04 Thread Jim Tyrrell
Hi, I am writing a hook to add attributes to a reply after the user has been authenticated either by local LDAP or RADIUS proxy, so I need to use PostAuthHook for LDAP and ReplyHook for the proxied requests. I'd like to have the same script handle both, but the attributes are slightly differe

[RADIATOR] Migrate Cisco ACS to Radiator

2013-10-10 Thread Jim Tyrrell
Hi, we need to migrate a customers users from their own Cisco ACS RADIUS server into our Radiator servers, but apparently its not possible to export the users passwords in a format we can import. I don't have direct access to the ACS server but have been given a dump that includes passwords in

[RADIATOR] AuthBy FILE - Dont check password

2015-01-20 Thread Jim Tyrrell
Is it possible to have the AuthBy FILE check a file for the username but not check the password? I ideally want the AuthBy to just check for a username in a file of only usernames, and if it matches generate the Reply, if it fails to match the username then it will fall back to a 2nd AuthBy (via A