[RadiusNT Digest]

radiusnt-digest-request@iea-software.com
Tue, 25 Aug 1998 00:01:27 -0700

Message 1: chap
from Aftab Rashid <aftab@shoa.net>

Message 2: TimeBanking no longer works with -9999
from Jamie Easterman <webmaster@londonweb.net>

Message 3: Re: SQL/S transition
from "Terry Bomersbach" <terryb@the-cia.net>

Message 4: Re: TimeBanking no longer works with -9999
from "Terry Bomersbach" <terryb@the-cia.net>

Message 5: unsubscribe
from "Jean-Philippe BAUDOUIN" <baudouin@cyberaccess.fr>

Message 6: Re: TimeBanking no longer works with -9999
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 7: Re: chap
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 8: RE: User Restrictions
from Tim Ballingall <tim@mazda.com.au>

Message 9: Re: User Restrictions
from "Terry Bomersbach" <terryb@the-cia.net>

Message 10: RE: User Restrictions
from Tim Ballingall <tim@mazda.com.au>

Message 11: Re: User Restrictions
from "Terry Bomersbach" <terryb@the-cia.net>

Message 12: RE: User Restrictions
from Tim Ballingall <tim@mazda.com.au>

Message 13: RE: User Restrictions
from "Ken Sorenson" <ksoren@tsi-online.com>

Message 14:
from "David Leigh" <davidl@logi.net.au>

Message 15: Re: Attribute 26 - vendor specific ?
from "Rudy Komsic" <rudyk@cyberglobe.net>

Message 16: RE: User Restrictions
from Tim Ballingall <tim@mazda.com.au>

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 1 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: chap
From: Aftab Rashid <aftab@shoa.net>
Date: Mon, 24 Aug 1998 15:34:20 +0500

How can I configure CHAP on radiusnt 2.2

Aftab Rashid

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 2 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: TimeBanking no longer works with -9999
From: Jamie Easterman <webmaster@londonweb.net>
Date: Mon, 24 Aug 1998 14:14:44 +0100

I am just upgrading from radius 2.2 to 2.5.124 and am having problems with
my unlimited access accounts. We are using Access as our datasource. If
timebanking is enabled and the account has -9999 in the timeleft field then
Radius is replying with "Your account is out of time"

Changing this field's value from -9999 to a blank value is letting the
accounts be authenticated once again.

We now have to change each account's value to a blank record to enable this
to be authenticated. Our management interface ( Custom Cold Fusion pages)
will have to be changed as well to do this by default. There is no
documentation about this change. It is fairly fundamental !!!!!

Can anyone comment wether this has affected them as well.

Dale can you comment as to whether this was changed by design or accident,
Why there are no notes on this, and whether we could have both modes
supported for consistency purposes. I want to upgrade but the databases are
so different now there is no backwards compatibility between 2.2 and
2.5.124. The upgrade must be done in one foul swoop. I was kinda hoping I
could make 2.5 changes to the 22 database but still use 2.2 until we were
ready for the switch of executables.

Regards

Jamie Easterman
<<<<<<<<<<<<<<<<<<<<<<<|>>>>>>>>>>>>>>>>>>>>>>>>
webmaster@londonweb.net http://www.londonweb.net
LONDON WEB COMMUNICATIONS +44 181 349 3995
<<<<<<<<<<<<<<<<<<<<<<<|>>>>>>>>>>>>>>>>>>>>>>>>

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 3 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Re: SQL/S transition
From: "Terry Bomersbach" <terryb@the-cia.net>
Date: Mon, 24 Aug 1998 08:22:13 -0500

Try using the SQL Upsizing tool for Access that Microsoft has available. It
will put your access database into the SQL server with or without the
current data.

-----Original Message-----
From: Ted Olson <tolson@ocsnet.net>
To: radiusnt@iea-software.com <radiusnt@iea-software.com>
Date: Saturday, August 22, 1998 11:12 AM
Subject: SQL/S transition

>Has anyone written a 'transition guide' to smooth the way from Access to
>SQL/S? Since many have gone this route, it seems inefficient to stumble
>along when there must be a few pointers that would be helpful. TIA...
>
>-Ted
>OCS Software
>

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 4 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Re: TimeBanking no longer works with -9999
From: "Terry Bomersbach" <terryb@the-cia.net>
Date: Mon, 24 Aug 1998 08:23:20 -0500

I did, but I just did a query update from access to update all the fields at
one time. No biggie.

-----Original Message-----
From: Jamie Easterman <webmaster@londonweb.net>
To: radiusnt@iea-software.com <radiusnt@iea-software.com>
Date: Monday, August 24, 1998 7:56 AM
Subject: TimeBanking no longer works with -9999

>I am just upgrading from radius 2.2 to 2.5.124 and am having problems with
>my unlimited access accounts. We are using Access as our datasource. If
>timebanking is enabled and the account has -9999 in the timeleft field then
>Radius is replying with "Your account is out of time"
>
>Changing this field's value from -9999 to a blank value is letting the
>accounts be authenticated once again.
>
>We now have to change each account's value to a blank record to enable this
>to be authenticated. Our management interface ( Custom Cold Fusion pages)
>will have to be changed as well to do this by default. There is no
>documentation about this change. It is fairly fundamental !!!!!
>
>Can anyone comment wether this has affected them as well.
>
>Dale can you comment as to whether this was changed by design or accident,
>Why there are no notes on this, and whether we could have both modes
>supported for consistency purposes. I want to upgrade but the databases are
>so different now there is no backwards compatibility between 2.2 and
>2.5.124. The upgrade must be done in one foul swoop. I was kinda hoping I
>could make 2.5 changes to the 22 database but still use 2.2 until we were
>ready for the switch of executables.
>
>Regards
>
>
>Jamie Easterman
><<<<<<<<<<<<<<<<<<<<<<<|>>>>>>>>>>>>>>>>>>>>>>>>
>webmaster@londonweb.net http://www.londonweb.net
>LONDON WEB COMMUNICATIONS +44 181 349 3995
><<<<<<<<<<<<<<<<<<<<<<<|>>>>>>>>>>>>>>>>>>>>>>>>

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 5 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: unsubscribe
From: "Jean-Philippe BAUDOUIN" <baudouin@cyberaccess.fr>
Date: Mon, 24 Aug 1998 17:29:58 +0200

unsubscribe

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 6 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Re: TimeBanking no longer works with -9999
From: "Dale E. Reed Jr." <daler@iea-software.com>
Date: Mon, 24 Aug 1998 13:37:09 -0700

Jamie Easterman wrote:
>
> I am just upgrading from radius 2.2 to 2.5.124 and am having problems with
> my unlimited access accounts. We are using Access as our datasource. If
> timebanking is enabled and the account has -9999 in the timeleft field then
> Radius is replying with "Your account is out of time"
>
> Changing this field's value from -9999 to a blank value is letting the
> accounts be authenticated once again.
>
> We now have to change each account's value to a blank record to enable this
> to be authenticated. Our management interface ( Custom Cold Fusion pages)
> will have to be changed as well to do this by default. There is no
> documentation about this change. It is fairly fundamental !!!!!
>
> Can anyone comment wether this has affected them as well.

Its actually a fix to a kludge we added when we ran into a problem
with MS Access supporting the NULL value for it. NULL is the correct
value for all databases now. I'll check the docs to see if it was
updated to reflect that.

> Dale can you comment as to whether this was changed by design or accident,
> Why there are no notes on this, and whether we could have both modes
> supported for consistency purposes. I want to upgrade but the databases are
> so different now there is no backwards compatibility between 2.2 and
> 2.5.124. The upgrade must be done in one foul swoop. I was kinda hoping I
> could make 2.5 changes to the 22 database but still use 2.2 until we were
> ready for the switch of executables.

You can use a simple query to update it:

Update Services Set TimeLeft = NULL Where TimeLeft = -9999

Although I thought it did, it doesn't look like 2.5 is respecting the
-9999. I thought it still did, and that is the main reason why there
wasn't a big note about it.

-- Dale E. Reed Jr.  (daler@iea-software.com)_________________________________________________________________       IEA Software, Inc.      |  RadiusNT, Emerald, and NT FAQs Internet Solutions for Today  |   http://www.iea-software.com

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 7 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: chapFrom: "Dale E. Reed Jr." <daler@iea-software.com>Date: Mon, 24 Aug 1998 13:38:12 -0700

Aftab Rashid wrote:> > How can I configure CHAP on radiusnt 2.2

There is nothing to configure with respect to CHAP. What are you trying to do with it?

-- Dale E. Reed Jr.  (daler@iea-software.com)_________________________________________________________________       IEA Software, Inc.      |  RadiusNT, Emerald, and NT FAQs Internet Solutions for Today  |   http://www.iea-software.com

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 8 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: RE: User RestrictionsFrom: Tim Ballingall <tim@mazda.com.au>Date: Tue, 25 Aug 1998 10:00:07 +1000

I tried creating an entry in the RadConfigs table & my connection getsrejected.. The Ascend disconnect cause is 185. If I create a differentaccount type in RadATConfigs & fix the IP address in there everythingworks ok..

Do I need anything else in my RadConfigs beside AccountID, Attribute ID( 8 )& a data value that contains my IP address. The value column isleft as 0.

Thanks

Tim

-----Original Message-----From: Dale E. Reed Jr. [mailto:daler@iea-software.com]Sent: Friday, August 21, 1998 4:36 AMTo: radiusnt@iea-software.comSubject: Re: User Restrictions

Michael Edholm wrote:> > If you run your Radius server in ODBC mode you are saying that Ishould make> another field in the subaccounts table for the fixed ip adress? Ifthat is> the case which fields do I need to add in the table?

No. You would add entries in the RadConfigs table matching the user'sAccountID with the RADIUS attributes you want specifically for that user (like Framed-Address).

--Dale E. Reed Jr.  (daler@iea-software.com)_________________________________________________________________       IEA Software, Inc.      |  RadiusNT, Emerald, and NT FAQs Internet Solutions for Today  |   http://www.iea-software.comThis message has successfully passed virus checking.Mazda Australia takes every precaution to ensure email messages are virus free. For complete protection, you should virus test this message.

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 9 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: User RestrictionsFrom: "Terry Bomersbach" <terryb@the-cia.net>Date: Mon, 24 Aug 1998 19:20:16 -0500

>I tried creating an entry in the RadConfigs table & my connection gets>rejected.. The Ascend disconnect cause is 185. If I create a different>account type in RadATConfigs & fix the IP address in there everything>works ok..>>Do I need anything else in my RadConfigs beside AccountID, Attribute ID>( 8 )& a data value that contains my IP address. The value column is>left as 0.

I have found that I must also add an attribute for Framed-Netmask (9) inorder for my Max's to handle it correctly for each Framed-Address (8) that Iadd in RadConfigs.

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 10 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: RE: User RestrictionsFrom: Tim Ballingall <tim@mazda.com.au>Date: Tue, 25 Aug 1998 11:05:40 +1000

I entered the Framed-Netmask & still had no luck.. I ran a debug &noticed that the only data I am sending is that which I have put in theRadConfigs table.. It ( RadiusNT ) doesn't seem to be sending all myother values that are setup in RadATConfigs - that is things likeRouting info, Protocol etc...

I hope this doesn't mean I need to duplicate my account defaults in theRadConfigs ?

Thanks

Tim

-----Original Message-----From: Terry Bomersbach [mailto:terryb@the-cia.net]Sent: Tuesday, August 25, 1998 10:20 AMTo: radiusnt@iea-software.comSubject: Re: User Restrictions

>I tried creating an entry in the RadConfigs table & my connection gets>rejected.. The Ascend disconnect cause is 185. If I create a different>account type in RadATConfigs & fix the IP address in there everything>works ok..>>Do I need anything else in my RadConfigs beside AccountID, Attribute ID>( 8 )& a data value that contains my IP address. The value column is>left as 0.

I have found that I must also add an attribute for Framed-Netmask (9) inorder for my Max's to handle it correctly for each Framed-Address (8)that Iadd in RadConfigs.

This message has successfully passed virus checking.Mazda Australia takes every precaution to ensure email messages are virus free. For complete protection, you should virus test this message.

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 11 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: User RestrictionsFrom: "Terry Bomersbach" <terryb@the-cia.net>Date: Mon, 24 Aug 1998 20:25:05 -0500

>I entered the Framed-Netmask & still had no luck.. I ran a debug &>noticed that the only data I am sending is that which I have put in the>RadConfigs table.. It ( RadiusNT ) doesn't seem to be sending all my>other values that are setup in RadATConfigs - that is things like>Routing info, Protocol etc...>>I hope this doesn't mean I need to duplicate my account defaults in the>RadConfigs ?

Uhm, I think you lost me. I use the RadConfig file to specify specialsettings for each account and use the RadATConfig for generic info.

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 12 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: RE: User RestrictionsFrom: Tim Ballingall <tim@mazda.com.au>Date: Tue, 25 Aug 1998 11:59:56 +1000

You seem to be using it the same as I am, except that when I have somevalues entered in RadConfig they are causing the generic info ( All info) in RadATConfig to be ignored..

For example - If I have the user tim, subaccount ID 1, & all details (except IP Address ) set in RadATConfigs ( The account type is set ).

When I run debug the only details passed are Framed-Address & Netmask..<snip> Framed-Address = 10.7.0.250 (0) Framed-Netmask = 255.255.255.255 (0)Sending Ack of id 143 to 90820705 (telstra-1) Framed-Address = 10.7.0.250 Framed-Netmask = 255.255.255.255

Whereas I should be getting ...

Framed-Protocol = PPP (1) User-Service = Framed-User (2) Primary-DNS = 10.3.0.4 (2) Framed-Address = 255.255.255.254 (0) Framed-Routing = Broadcast-Listen (3) Framed-Netmask = 255.255.255.255 (0) Idle-Timeout = Idle Time-out (10)Sending Ack of id 151 to 90820405 (telstra-1) Framed-Protocol = PPP User-Service = Framed-User Primary-DNS = 10.3.0.4 Framed-Address = 255.255.255.254 Framed-Routing = Broadcast-Listen Framed-Netmask = 255.255.255.255 Idle-Timeout = 10

-----Original Message-----From: Terry Bomersbach [mailto:terryb@the-cia.net]Sent: Tuesday, August 25, 1998 11:25 AMTo: radiusnt@iea-software.comSubject: Re: User Restrictions

>I entered the Framed-Netmask & still had no luck.. I ran a debug &>noticed that the only data I am sending is that which I have put in the>RadConfigs table.. It ( RadiusNT ) doesn't seem to be sending all my>other values that are setup in RadATConfigs - that is things like>Routing info, Protocol etc...>>I hope this doesn't mean I need to duplicate my account defaults in the>RadConfigs ?

Uhm, I think you lost me. I use the RadConfig file to specify specialsettings for each account and use the RadATConfig for generic info.

This message has successfully passed virus checking.Mazda Australia takes every precaution to ensure email messages are virus free. For complete protection, you should virus test this message.

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 13 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: RE: User RestrictionsFrom: "Ken Sorenson" <ksoren@tsi-online.com>Date: Mon, 24 Aug 1998 21:36:16 -0500

I believe that any caller specific entry bypasses the generic info settings.You must enter a complete profile for any specific settings you need.

-----Original Message-----From: radiusnt-request@iea-software.com[mailto:radiusnt-request@iea-software.com] On Behalf Of Tim BallingallSent: Monday, August 24, 1998 9:00 PMTo: 'radiusnt@iea-software.com'Subject: RE: User Restrictions

You seem to be using it the same as I am, except that when I have somevalues entered in RadConfig they are causing the generic info ( All info) in RadATConfig to be ignored..

For example - If I have the user tim, subaccount ID 1, & all details (except IP Address ) set in RadATConfigs ( The account type is set ).

When I run debug the only details passed are Framed-Address & Netmask..<snip> Framed-Address = 10.7.0.250 (0) Framed-Netmask = 255.255.255.255 (0)Sending Ack of id 143 to 90820705 (telstra-1) Framed-Address = 10.7.0.250 Framed-Netmask = 255.255.255.255

Whereas I should be getting ...

Framed-Protocol = PPP (1) User-Service = Framed-User (2) Primary-DNS = 10.3.0.4 (2) Framed-Address = 255.255.255.254 (0) Framed-Routing = Broadcast-Listen (3) Framed-Netmask = 255.255.255.255 (0) Idle-Timeout = Idle Time-out (10)Sending Ack of id 151 to 90820405 (telstra-1) Framed-Protocol = PPP User-Service = Framed-User Primary-DNS = 10.3.0.4 Framed-Address = 255.255.255.254 Framed-Routing = Broadcast-Listen Framed-Netmask = 255.255.255.255 Idle-Timeout = 10

-----Original Message-----From: Terry Bomersbach [mailto:terryb@the-cia.net]Sent: Tuesday, August 25, 1998 11:25 AMTo: radiusnt@iea-software.comSubject: Re: User Restrictions

>I entered the Framed-Netmask & still had no luck.. I ran a debug &>noticed that the only data I am sending is that which I have put in the>RadConfigs table.. It ( RadiusNT ) doesn't seem to be sending all my>other values that are setup in RadATConfigs - that is things like>Routing info, Protocol etc...>>I hope this doesn't mean I need to duplicate my account defaults in the>RadConfigs ?

Uhm, I think you lost me. I use the RadConfig file to specify specialsettings for each account and use the RadATConfig for generic info.

This message has successfully passed virus checking.Mazda Australia takes every precaution to ensure email messages are virusfree. For complete protection, you should virus test this message.

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 14 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: From: "David Leigh" <davidl@logi.net.au>Date: Tue, 25 Aug 1998 11:17:38 +0800

unsubscribe

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 15 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: Attribute 26 - vendor specific ?From: "Rudy Komsic" <rudyk@cyberglobe.net>Date: Tue, 25 Aug 1998 00:38:53 -0400

>Vendor Specific Attributes are only supported in ODBC mode. A couple>of people have reported problems with VSA in 2.5.12x and they are>testing a correction for it.>>You must add the Vendor ID in the RadVendors table (like 9 for>Cisco, etc) and then you can add attributes into the RadAttriutes>table with a RadAttributeID of 26, a RadVendorID matching the entry>you added, and a RadVendorType of the VSA you want to have. The>data portion will allways be the data speicfic to the VSA.>This was an old question I found. I have a USR Total Control Chassis with thefollowing Vendor Specific Information. I tried to add it in according to whatyou said but it does not function... I think I need to expand or convert theRadVendorType field for it to be supported.

Type: 26 (Vendor Specific)Length: 14Organization ID: 429 for US RoboticsIndicator: 0x900FName: Primary-DNS-ServerServer IP Addr: IP Address of DNS Server

When I tried to add it in, I got a duplicate RadAttributeID error.

How would I add this function into my radius to be able to support the vendorspecific functions.

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 16 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: RE: User RestrictionsFrom: Tim Ballingall <tim@mazda.com.au>Date: Tue, 25 Aug 1998 16:45:03 +1000

I'm not disputing that you have do this.. But why..? We already have theRadATConfigs table that will essentially do the same thing..?

Thanks

-----Original Message-----From: Ken Sorenson [mailto:ksoren@tsi-online.com]Sent: Tuesday, August 25, 1998 12:36 PMTo: radiusnt@iea-software.comSubject: RE: User Restrictions

I believe that any caller specific entry bypasses the generic infosettings.You must enter a complete profile for any specific settings you need.

-----Original Message-----From: radiusnt-request@iea-software.com[mailto:radiusnt-request@iea-software.com] On Behalf Of Tim BallingallSent: Monday, August 24, 1998 9:00 PMTo: 'radiusnt@iea-software.com'Subject: RE: User Restrictions

You seem to be using it the same as I am, except that when I have somevalues entered in RadConfig they are causing the generic info ( All info) in RadATConfig to be ignored..

For example - If I have the user tim, subaccount ID 1, & all details (except IP Address ) set in RadATConfigs ( The account type is set ).

When I run debug the only details passed are Framed-Address & Netmask..<snip> Framed-Address = 10.7.0.250 (0) Framed-Netmask = 255.255.255.255 (0)Sending Ack of id 143 to 90820705 (telstra-1) Framed-Address = 10.7.0.250 Framed-Netmask = 255.255.255.255

Whereas I should be getting ...

Framed-Protocol = PPP (1) User-Service = Framed-User (2) Primary-DNS = 10.3.0.4 (2) Framed-Address = 255.255.255.254 (0) Framed-Routing = Broadcast-Listen (3) Framed-Netmask = 255.255.255.255 (0) Idle-Timeout = Idle Time-out (10)Sending Ack of id 151 to 90820405 (telstra-1) Framed-Protocol = PPP User-Service = Framed-User Primary-DNS = 10.3.0.4 Framed-Address = 255.255.255.254 Framed-Routing = Broadcast-Listen Framed-Netmask = 255.255.255.255 Idle-Timeout = 10

-----Original Message-----From: Terry Bomersbach [mailto:terryb@the-cia.net]Sent: Tuesday, August 25, 1998 11:25 AMTo: radiusnt@iea-software.comSubject: Re: User Restrictions

>I entered the Framed-Netmask & still had no luck.. I ran a debug &>noticed that the only data I am sending is that which I have put in the>RadConfigs table.. It ( RadiusNT ) doesn't seem to be sending all my>other values that are setup in RadATConfigs - that is things like>Routing info, Protocol etc...>>I hope this doesn't mean I need to duplicate my account defaults in the>RadConfigs ?

Uhm, I think you lost me. I use the RadConfig file to specify specialsettings for each account and use the RadATConfig for generic info.

This message has successfully passed virus checking.Mazda Australia takes every precaution to ensure email messages arevirusfree. For complete protection, you should virus test this message.

This message has successfully passed virus checking.Mazda Australia takes every precaution to ensure email messages are virus free. For complete protection, you should virus test this message.