Accounting question

Joseph Abadi joseph.abadi at gmail.com
Wed Jun 15 17:42:01 CEST 2005


Hello,

I have a question regarding the way accounting is done. I configured
freeradius 1.0.1 with openssl and mysql support on a Fedora Core 3
system. I'm using it with PEAP and TLS for wireless authentication.
The authentication works fine, but the accounting packets are always
missing the username and the IPs of client and NAS seem to be
interchanged.
Here is a sample packet extracted from running radiusd with debugging:

rad_recv: Accounting-Request packet from host 192.168.30.11:1223,
id=211, length=182
        Acct-Status-Type = Alive
        Acct-Session-Id = "0002e3412adf-000e6ad5debc-b0e1"
        NAS-IP-Address = 192.168.30.34
        Acct-Input-Octets = 10179
        Acct-Output-Octets = 11165
        Acct-Input-Packets = 47
        Acct-Output-Packets = 97
        Vendor-Specific = 0x45415020557365726e616d652069733a204a4f53455048
        Vendor-Specific = 0x564c414e2049442069733a2030
        Vendor-Specific = 0x4553534944203d2055746570736120486f742053706f74
        Vendor-Specific = 0x45415020547970652069733a204541502d50454150
        Acct-Session-Time = 63418

My question is.... Isn the NAS suppossed to be the wireless access
point? (in our case 192.168.30.11, not 192.168.30.34). Isn't the
client suppossed to be the computer from which the user authenticated?
(192.168.30.34 instead of .11). Is this just access point related? or
can I configure it in clients.conf?

The relevant portion of clients.conf looks like this:

client 192.168.30.0/24 {
        secret          = XXXXXX
        shortname       = wifiAP
}

Thanks for any help,




More information about the Freeradius-Users mailing list