Re: FreeRADIUS + OpenLDAP for accounting

["Peter Micunek" <peter.micunek@gmail.com>]

The proxy cannot speak to an SQL server. 

Do you know some LDAP-SQL proxy which listen on LDAP server  port  and convert  LDAP  request  to  SQL  and vice versa.

Also, I am considering to use:

NAS ---> FreeRADIUS (rlm_sql_mysql) ---> MySQL DB <--->  OpenLDAP with slapd-sql <---> LDAP client

what do you think about this?

regards,
Peter Micunek

On 2/3/07, Phil Mayers <p.mayers@imperial.ac.uk > wrote:

Peter Micunek wrote:
> A problem is that this proxy know IP address of customer instead of
> MSISDN and unfortunately cannot use a RADIUS to
> obtain the MSISDN from another source. This proxy is able to use only
> the LDAP request with IP of customer and then

FreeRadius can't write to (account to) an LDAP directory.

It's a fundamentally bad idea to do lots of writes to LDAP. Most LDAP
servers are heavily read-optimised - not write.

Can the proxy speak to an SQL server?

If not, you could use an Exec-Program attribute in the "acct_users" file
to run "ldapmodify"
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html