[RadiusNT Digest]

radiusnt-digest-request@iea-software.com
Tue, 26 May 1998 00:00:32 -0700

Message 1: RADIUS contingency measures
from "Danny Sinang" <danny@uplink.com.ph>

Message 2: Re: ODBC: SQLExecDirect Error -1053:
from Sheldon Edwards <slick@caribsurf.com>

Message 3: Re: RADIUS contingency measures
from Jim Dunmyer <jdunmyer@toltbbs.com>

Message 4: Re: RADIUS contingency measures
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 5: Re: RADIUS contingency measures
from Jamie Easterman <webmaster@londonweb.net>

Message 6: Re: RADIUS contingency measures
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 7: Radius Attributes
from Michael Whisenant <mwhisen@airnet.net>

Message 8: Re: Radius Attributes
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 9: Re: RADIUS contingency measures
from Jamie Easterman <webmaster@londonweb.net>

Message 10: Re: RADIUS contingency measures
from "Dale E. Reed Jr." <daler@iea-software.com>

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 1 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: RADIUS contingency measures
From: "Danny Sinang" <danny@uplink.com.ph>
Date: Mon, 25 May 1998 21:50:10 +0800

Dale,

I know that NAS's can be configured to use a primary and secondary RADIUS
server. In case the primary server doesn't respond, then the secondary
server will be queried.

However, isn't it true that both the primary and secondary server share only
one user database ? This is a single-point-of-failure, isn't it ?

What measures could I take to make sure that in the event the first user
database conks-out, a secondary database might be used ?

Danny Sinang
President - Uplink Technologies, Inc.
( Provider of "Clean" Internet Access )
www.uplink.com.ph
danny@uplink.com.ph

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 2 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Re: ODBC: SQLExecDirect Error -1053:
From: Sheldon Edwards <slick@caribsurf.com>
Date: Mon, 25 May 1998 10:41:51 -0500

Okay.... What I want you to do is the following:
1. Make sure that all the key fields in the Calls table are valid attributes
and
stored in the RadAttributes table

2. Run radius in a dos box using radius -x15 and see if you can capture the
INSERT statement that is generating the error. From what I can see,
Radius is
trying to insert a record into the Calls table and one of the key fields
is null.

Let me know if this helps....

Lorri Thomas wrote:

> Checked Calls Table and is was NASIdentifier........
>
> -----Original Message-----
> From: Sheldon Edwards <slick@caribsurf.com>
> To: radiusnt@iea-software.com <radiusnt@iea-software.com>
> Date: Friday, May 22, 1998 3:07 PM
> Subject: Re: ODBC: SQLExecDirect Error -1053:
>
> >Check the Calls Table in Access and make sure that the field name is
> >NASIdentifier. If not change the field name to this and see if this fixes
> the
> >problem...

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 3 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Re: RADIUS contingency measures
From: Jim Dunmyer <jdunmyer@toltbbs.com>
Date: Mon, 25 May 1998 11:05:47 -0400

At 09:50 PM 5/25/98 +0800, you wrote:
>Dale,
>
>I know that NAS's can be configured to use a primary and secondary RADIUS
>server. In case the primary server doesn't respond, then the secondary
>server will be queried.
>
>However, isn't it true that both the primary and secondary server share only
>one user database ? This is a single-point-of-failure, isn't it ?
>
>What measures could I take to make sure that in the event the first user
>database conks-out, a secondary database might be used ?

We run a second copy of RADIUSNT on another machine that also has the SQL
client intstalled on it. Every 3 hours, a batch file runs that uses the
RADUSERS program to query the main database and create a new USERS file.
The batch file checks the integrity of the USERS file before copying it
over the existing one, as a corrupt/useless file is created if the SQL
server isn't working.

We can shut down the main server, running Emerald, SQL Server, and RADIUSNT
and everything will keep right on keeping on. Adding users can be a bit
problematic, but we could even do that with a text editor if we have a
long-term emergency or outage on the main machine.

<<jdunmyer@toltbbs.com>>
<<www.toltbbs.com/~jims>>

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 4 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Re: RADIUS contingency measures
From: "Dale E. Reed Jr." <daler@iea-software.com>
Date: Mon, 25 May 1998 08:14:21 -0700

Danny Sinang wrote:
>
> I know that NAS's can be configured to use a primary and secondary RADIUS
> server. In case the primary server doesn't respond, then the secondary
> server will be queried.
>
> However, isn't it true that both the primary and secondary server share only
> one user database ? This is a single-point-of-failure, isn't it ?

It doesn't have to be "one physical" database. It has to be the same
user list. For example, you could be copying an MS Access database
from your primary to your seconday, or use SQL Server replication with
two SQL Servers. RadiusNT 2.5 allows you to have a different DSN for
authentication and accounting. I've done some pretty complicated
installations with SQL Server using 3-4 SQL Servers in a distributed
environment (local auth, read only) and primary accounting centralized.

> What measures could I take to make sure that in the event the first user
> database conks-out, a secondary database might be used ?

The other thing we are looking into is having a promary and secondary
ODBC DSN for both accounting and authentication. Things get a little
more tricky on the install, though. RadiusNT 2.5 does have text backup
mode, which allows it to auth against the users file ONLY if the
ODBC DSN fails.

-- Dale E. Reed Jr.  (daler@iea-software.com)_________________________________________________________________       IEA Software, Inc.      |  RadiusNT, Emerald, and NT FAQs Internet Solutions for Today  |   http://www.iea-software.com

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 5 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: RADIUS contingency measuresFrom: Jamie Easterman <webmaster@londonweb.net>Date: Mon, 25 May 1998 16:49:14 +0100

How can we make a plain text users file from an access database?

Regards

Jamie Easterman

------------------------------London Web Communications 69 Ballards LaneLondon N3 1LW UKTel: +44 181 349 4500Fax: +44 181 349 4488http://www.londonweb.netmailto:webmaster@londonweb.net------------------------------

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 6 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: RADIUS contingency measuresFrom: "Dale E. Reed Jr." <daler@iea-software.com>Date: Mon, 25 May 1998 09:17:09 -0700

Jamie Easterman wrote:> > How can we make a plain text users file from an access database?

The old version of radusers will probably work (the one in /emerald/beta).The new one uses stored procedures, so it wouldn't work for MS Access.

-- Dale E. Reed Jr.  (daler@iea-software.com)_________________________________________________________________       IEA Software, Inc.      |  RadiusNT, Emerald, and NT FAQs Internet Solutions for Today  |   http://www.iea-software.com

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 7 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Radius AttributesFrom: Michael Whisenant <mwhisen@airnet.net>Date: Mon, 25 May 1998 12:01:42 -0500

I am looking for the table that has the radius specific information. Ihave assigned specific attributes over time to various users, that I nowwant a summary. I have started looking in many of the tables, but as yethave not found the correct one. I have read through the documentation andI must be overlooking the darn thing.

For example if I have added to user A Framed-Address ='xxx.xxx.xxx.xxx' orFramed-Protocol = 'xxxxx' in which table is this information stored?Michael J. WhisenantVice-President, OperationsAIRnet Internet Services, Inc.ph: (256) 704-4692 fax: (256) 704-2329

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 8 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: Radius AttributesFrom: "Dale E. Reed Jr." <daler@iea-software.com>Date: Mon, 25 May 1998 13:21:03 -0700

Michael Whisenant wrote:> > I am looking for the table that has the radius specific information. I> have assigned specific attributes over time to various users, that I now> want a summary. I have started looking in many of the tables, but as yet> have not found the correct one. I have read through the documentation and> I must be overlooking the darn thing.> > For example if I have added to user A Framed-Address ='xxx.xxx.xxx.xxx' or> Framed-Protocol = 'xxxxx' in which table is this information stored?

According to the RadiusNT Documentation section describing the AuthenticationProcess(http://www.iea-software.com/radiusnt/radiusntdocs.html#8.Authentication)

> 9.If there are matching records in the RadConfigs table for the user's > AccountID, send an ACK with them for the reply attributes. > 10.If there are matching records in the RadATConfigs table for the user's > Account Type, send an ACK with them for the reply attributes.

The RadConfigs table holds the information you are looking for.

-- Dale E. Reed Jr.  (daler@iea-software.com)_________________________________________________________________       IEA Software, Inc.      |  RadiusNT, Emerald, and NT FAQs Internet Solutions for Today  |   http://www.iea-software.com

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 9 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: RADIUS contingency measuresFrom: Jamie Easterman <webmaster@londonweb.net>Date: Mon, 25 May 1998 23:28:27 +0100

This is what I got back. When I typed radusers.exe. What is missing??

D:\radius>radusers Couldn't open data source The Microsoft Jet database engine cannot find the input table or query'RadiusUsers'. Make sure it exists and that its name is spelled correctly.

Regards

Jamie Easterman

At 09:17 25/05/98 -0700, you wrote:>Jamie Easterman wrote:>> >> How can we make a plain text users file from an access database?>>The old version of radusers will probably work (the one in /emerald/beta).>The new one uses stored procedures, so it wouldn't work for MS Access.>>-- >Dale E. Reed Jr. (daler@iea-software.com)>_________________________________________________________________> IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs> Internet Solutions for Today | http://www.iea-software.com> ------------------------------London Web Communications 69 Ballards LaneLondon N3 1LW UKTel: +44 181 349 4500Fax: +44 181 349 4488http://www.londonweb.netmailto:webmaster@londonweb.net------------------------------

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 10 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: RADIUS contingency measuresFrom: "Dale E. Reed Jr." <daler@iea-software.com>Date: Mon, 25 May 1998 15:35:06 -0700

Jamie Easterman wrote:> > This is what I got back. When I typed radusers.exe. What is missing??> > D:\radius>radusers> Couldn't open data source> The Microsoft Jet database engine cannot find the input table or query> 'RadiusUsers'. Make sure it exists and that its name is spelled correctly.

The program does a {Call RadiusUsers} expecting a stored procedure. Iwas mistaken about it. I don't think MS Access supports this. You maybe able to create a RadiusUsers query, though.

This is the query from Emerald:

CREATE PROCEDURE RadiusUsers AS

SELECT sa.Login, sa.Password, ra.Name, ra.Type, rc.Data, rc.Value, MasterExpire=DateAdd(Day, (ma.Extension+ma.OverDue+1), maExpireDate), SubExpire=DateAdd(Day, sa.Extension, saExpireDate) From MasterAccounts ma, SubAccounts sa, RadConfigs rc, RadAttributes ra Where ma.CustomerID = sa.CustomerID AND rc.AccountID = sa.AccountID AND ra.RadAttributeID = rc.RadAttributeID AND maExpireDate Is Not Null AND sa.Login<>'' AND ma.Active = 1 AND sa.Active = 1

UNION

SELECT sa.Login, sa.Password, ra.Name, ra.Type, rc.Data, rc.Value, MasterExpire=DateAdd(Day, (ma.Extension+ma.OverDue+1), maExpireDate), SubExpire=DateAdd(Day, sa.Extension, saExpireDate) From MasterAccounts ma, SubAccounts sa, RadATConfigs rc, RadAttributes ra Where ma.CustomerID = sa.CustomerID AND rc.AccountType = sa.AccountType AND ra.RadAttributeID = rc.RadAttributeID AND maExpireDate Is Not Null AND sa.Login<>'' AND ma.Active = 1 AND sa.Active = 1

AND NOT EXISTS ( Select * From RadConfigs rc2 where sa.AccountID = rc2.AccountID )

Order BY sa.LoginGO

-- Dale E. Reed Jr.  (daler@iea-software.com)_________________________________________________________________       IEA Software, Inc.      |  RadiusNT, Emerald, and NT FAQs Internet Solutions for Today  |   http://www.iea-software.com