Accounting inquiry

[Nabawia Khalil]

Dear luis,

Here is a small logical graph of my configuration, my NAS is my  WS
controller, and my traffic shaper can only receive accounting date forwarded
to it from my radius.

The radius did the authorization according to LDAP-Group received from the
LDAP

We want the traffic shaper to apply   policy on users according to the
ldap-group of each user. The ldap-group is included as a replyitem in the
authorization data.

The traffic shaper can only listen to the accounting data of the radius,
cannot act as NAS, and don't support a direct communication with the LDAP.

We are searching for a way to append ldap-group to the accounting data
before it is forwarded to the traffic shaper.


[image: Radius-ldap.jpg]



On Fri, Nov 26, 2010 at 3:15 PM, Toledo, Luis Carlos <lscrlstld at gmail.com>wrote:

> Noop...
>
> you have a conceptual design problem of in your project...
>
> Usually the NAS receives the network parameters in auth reply packet, and
> allow or disallow access, bandwidth, session time, etc.
>
> Acct packet only store the usage data.
>
> Your appliance must acct as NAS.
>
> > I need to forward the accounting data including the LDAP-Group to a
> > traffic shaper appliance installed before our internet gateway.
> >
> >
> > From the accounting data, This appliance will allow a quota internet
> > usage for each user according to its LDAP-Group category (student,
> > faculty, admin, par timer, assistant,.....)d
> >
> > Nabawia
> >
> >
> >> I want a help how to insert this in the accounting packet.
> >> The problem is not how to configure the LDAP lookup, but how to enables
> >> field in the accounting request.
> >what is the purpose of that? What you want or need?
>
>
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/devel.html
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-devel/attachments/20101126/6bd9884d/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Radius-ldap.jpg
Type: image/jpeg
Size: 41604 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-devel/attachments/20101126/6bd9884d/attachment.jpg>