'Idle-Timeout' and the 'Acct-Session-Time' argument

[Liran Tal]

Pierre,

So you are indeed looking for an Idle-Timeout, in this case how do you know
that it doesn't work? how can you be sure that your NAS is supposed to send
the Idle-Timeout at all?

I am talking about tests that you should do.
Taking the basic scenario - you authenticate and surf to google.com,
you then don't do anything for the 60 seconds time period which you defined
for Idle-Timeout and expect to be disconnected, right?
But the fact that you haven't touched your computer doesn't mean it's been
idle. It is possible that your browser refreshes the page automatically
every 30 seconds,
maybe some windows update software is running in the background, maybe some
DNS
records are resolving, maybe you have an IM software in the background doing
it's
stuff...

Get my point?


Regards,
Liran Tal.



On Sun, Feb 24, 2008 at 11:31 AM, GNULinuxSlackware <
gnulinuxslackware at free.fr> wrote:

> 2008/2/24, Liran Tal <liran at enginx.com>:
> > Hey Pierre,
> >
> > Chillispot will disconnect the user but the problem you're facing is
> that it
> > isn't actually idle (can happen because of many reasons that you didn't
> take
> > in consideration).
> >
> > So instead of idle-timeout use the session-timeout attribute and give it
> a
> > try.
>
> Yes but the 'session-timeout' argument disconnect the user after a
> time. And I would like the user is disconnected after an IDLE time.
> Do you have an other idea?
>
> >
> > Regards,
> > Liran Tal.
> >
> >
> > On Sat, Feb 23, 2008 at 6:09 PM, GNULinuxSlackware
> > <gnulinuxslackware at free.fr> wrote:
> > > 2008/2/23, Alan DeKok <aland at deployingradius.com>:
> > >
> > > > GNULinuxSlackware wrote:
> > > >  > I have fixed an 'Idle-Timeout' argument into the "radgroupreply"
> > MySQL table.
> > > >  > This works fine with the users in the group but the problem is
> that
> > > >  > "Idle-Timeout" doesn't report the logged out to
> "Acct-Session-Time".
> > > >
> > > >
> > > >   I have no idea what that means.
> > > OK. So I have a Chillispot Access Point (http://www.chillispot.info/)
> > > which use Freeradius.
> > > Freeradius use MySQL to store users accounts.
> > > There is a radius database with a lot of tables :
> > > -radgroupreply
> > > I can insert into the
> > >  'Idle-Timeout' argument.
> > > -radacct
> > > I can read the 'Acct-Session-Time' argument which give me the session
> > > time for each user who is logged out.
> > >
> > >
> > > >
> > > >
> > > >  > So, in the "radacct" table, I can't see the user session is
> > terminated.
> > > >  >
> > > >  > What is the solution to close automatically the session in the
> > > >  > "radacct" table when there is an "Idle-Timeout" report?
> > > >
> > > >
> > > >   Huh?  Idle-Timeout is not a report.
> > > No Idle-Timeout is only an argument for Freeradius in my MySQL radius
> > database.
> > >
> > >
> > > >
> > > >   If the access point does not log the user out after an
> Idle-Timeout,
> > > >  then it does not support that feature.  If you need that feature,
> you
> > > >  should use an access point which supports it.
> > > >
> > > >
> > > >   Alan DeKok.
> > >
> > > How to update automatically the 'Acct-Session-Time' argument when
> > > there is an 'Idle-Timeout'?
> > >
> > > Thank you a lot.
> > >
> > > >  -
> > > >  List info/subscribe/unsubscribe? See
> > http://www.freeradius.org/list/users.html
> > > >
> > > >
> > >
> > >
> > >
> > > --
> > > Samson PIERRE
> > > http://yugiohjcj.free.fr/
> > >
> > > [Licence Pro]
> > > Réseaux & Télécommunications
> > > [Diplôme Universitaire Technologique]
> > > Services et Réseaux de Communication
> > >
> > > -
> > >
> > >
> > >
> > > List info/subscribe/unsubscribe? See
> > http://www.freeradius.org/list/users.html
> > >
> >
> >
> > -
> >  List info/subscribe/unsubscribe? See
> > http://www.freeradius.org/list/users.html
> >
>
>
> --
> Samson PIERRE
> http://yugiohjcj.free.fr/
>
> [Licence Pro]
> Réseaux & Télécommunications
> [Diplôme Universitaire Technologique]
> Services et Réseaux de Communication
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20080224/2998f0a7/attachment.html>