Koozali.org: home of the SME Server

Monowall Gateway / SME Authentication and Accounting

cc_skavenger

Monowall Gateway / SME Authentication and Accounting
« Reply #15 on: February 24, 2005, 05:40:50 AM »
Stuntshell,
I currently use a SME 6.X server for radius authentication (mac address of client only) and bandwidth management (including port limiting) using cbq.  I am using another SME 6.X server for a caching gateway (squid setup to use a 20GB cache directory on a separate drive to cache anything and everything 128MB and smaller as well as setup with 8192 available file descriptors).  I am also using another SME 6.X server as a DNS server.

We authinticate both the wireless client device and the router (by hand).  We also setup the bandwidth management (by hand). I have been reluctant (ok, lazy) to change because I have been doing it this way for a while.  I have not tried dialup admin, but will try it tonight on a test server.  I am looking into trying to create a server panel for cbq and radius, but am still trying to learn how the panels are created.

I am looking at monowall for the captive portal, but I have only played with it for a couple of hours.  I will probably be ordering something in a itx form factor for the monowall box or possibly using some embedded board like a wrap board.
I will post something here about dialup admin, and what it takes to get it to work with the sme-radius contrib.

Sorry for the long story...

cc_skavenger

Monowall Gateway / SME Authentication and Accounting
« Reply #16 on: February 24, 2005, 06:00:57 AM »
yeah, ok, dialup admin is beyond me....I think I will stay with editing files by hand.   :-)

Offline Franco

  • *
  • 1,171
  • +0/-0
    • http://contribs.org
Monowall Gateway / SME Authentication and Accounting
« Reply #17 on: February 25, 2005, 03:16:17 PM »
cc_skavenger,
I followed the instructions given by Shane (Thanks a lot!!!) , and recorded my "step by step", so it'll be easier to make it work:
1-Added an ibay[dialadmin in my case] and made execution of dynamic content possible.
2-Downloaded the DialupAdmin and uncompressed to the html folder.
4-In the command line, changed to the sql directory and added the tables to the Radius Database:
Code: [Select]
cd /home/e-smith/files/ibays/dialadmin/html/sql

Code: [Select]
[root@brio sql]# mysql radius < userinfo.sql
[root@brio sql]# mysql radius < badusers.sql
[root@brio sql]# mysql radius < mtotacct.sql
[root@brio sql]# mysql radius < totacct.sql

5-Now it's time to edit the admin.conf inside de conf directory:
Things to change:
Code: [Select]

general_base_dir: /home/e-smith/files/ibays/dialadmin/html/
general_radiusd_base_dir: /usr/sbin/radiusd
general_domain: mydomain.homeunix.net
general_radius_server_secret testing123 "this is the default FreeRadius secret"
sql_password_attribute: Crypt-Password



6-Modify the info of the sql database to fit yours, mine is radius for the database and the user (I'm using the RPM radius package), I used phpmyadmin to reset the user password and added here as well.
Now if I go to my server at:
http://SME/dialadmin/htdocs/

it works!

cc_skavenger

Monowall Gateway / SME Authentication and Accounting
« Reply #18 on: February 25, 2005, 09:04:22 PM »
Are you using the server in server only mode or server/gateway mode?

Offline Franco

  • *
  • 1,171
  • +0/-0
    • http://contribs.org
Monowall Gateway / SME Authentication and Accounting
« Reply #19 on: February 25, 2005, 09:21:46 PM »
Server gateway, and when I created the iBay I restricted the access to only-local.

cc_skavenger

Monowall Gateway / SME Authentication and Accounting
« Reply #20 on: February 26, 2005, 06:33:43 AM »
ok, will give it a shot later tonight...

thanks

Skydiver

mysql
« Reply #21 on: March 21, 2005, 11:02:20 AM »
Hi
I have completed the dialupadmin as per this thread and it seems to be working except it says can not connect to database.
I think i have this next bit wrong since i played with it.
I am using sme7.0 alpha3

# This variable is used by the scripts in the bin folder
# It should contain the path to the sql binary used to run
# sql commands (mysql and psql are only supported for now)
sql_command: /usr/bin/mysql


What should it be... i can not find it

Cheers
From Brain Dead Man  :hammer:

shanen

Monowall Gateway / SME Authentication and Accounting
« Reply #22 on: March 22, 2005, 02:21:42 AM »
Did you edit the admin.conf and set the database variables?
Lines 168, 169, 170
sql_username:
sql_password:
sql_database:

Shane

shanen

Monowall Gateway / SME Authentication and Accounting
« Reply #23 on: March 22, 2005, 11:40:13 AM »
Hi all
sme-radius-1.0-1.i386.rpm is missing one important feature if you require pre paid cards for your wifi hotspot. Accounting "time to finish". (counter).
The dialup_admin interface makes it easy for us to add users but we have little control over their usage. Sure we can see their usage and we can make them time out or have timed sessions, but they can just log back in again.

Hmmm. Seems to run ok on SME 7 with Freeradius RHEL rpms.
I'll keep you posted

Shane