Freeradius-Users Digest, Vol 46, Issue 105 SOLVED - Why is groupname fieldblank in radacct

ngwarai zed makotore at gmail.com
Tue Mar 3 10:01:38 CET 2009


Thanks Kalik,

We changed the default sql to allow it to actually insert the grouname.

2009/2/26 <freeradius-users-request at lists.freeradius.org>

> Send Freeradius-Users mailing list submissions to
>        freeradius-users at lists.freeradius.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
>        http://lists.freeradius.org/mailman/listinfo/freeradius-users
> or, via email, send a message with subject or body 'help' to
>        freeradius-users-request at lists.freeradius.org
>
> You can reach the person managing the list at
>        freeradius-users-owner at lists.freeradius.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Freeradius-Users digest..."
>
>
> Today's Topics:
>
>   1. Re: SQLCounter configuration (Alan DeKok)
>   2. Re: SQLCounter configuration (Alexander Solodukhin)
>   3. Re: EAP-PEAP GTC auth_type (tnt at kalik.net)
>   4. Re: Freeradius-Users Digest, Vol 46,      Issue 102 Why is
>      groupname fieldblank in radacct (tnt at kalik.net)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Thu, 26 Feb 2009 11:03:22 +0100
> From: Alan DeKok <aland at deployingradius.com>
> Subject: Re: SQLCounter configuration
> To: FreeRadius users mailing list
>        <freeradius-users at lists.freeradius.org>
> Message-ID: <49A668EA.40702 at deployingradius.com>
> Content-Type: text/plain; charset=ISO-8859-1
>
> alt_ wrote:
> > Can you show some examples please? I try to do like this:
> >
> >     noresetBytecounter
> >
> >     if (reject) {
> >         update reply {
> >             Reply-Message := "Traffic limit exceeded."
> >         }
> >     }
> >
> > but if noresetBytecounter return reject freeradius immediatly return
> reject
> > to user and do not process 'if' clause
>
>  You need to put this in the "post-auth" section, "Reject" subsection.
>  See the example configuration files.
>
>  Alan DeKok.
>
>
> ------------------------------
>
> Message: 2
> Date: Thu, 26 Feb 2009 12:12:50 +0200
> From: "Alexander Solodukhin" <alt at softwarium.net>
> Subject: Re: SQLCounter configuration
> To: "FreeRadius users mailing list"
>        <freeradius-users at lists.freeradius.org>
> Message-ID: <op.upyenokwqsf5os at demon.cris.net>
> Content-Type: text/plain; format=flowed; delsp=yes; charset=koi8-r
>
> On Thu, 26 Feb 2009 12:03:22 +0200, Alan DeKok <aland at deployingradius.com>
> wrote:
>
> > alt_ wrote:
> >> Can you show some examples please? I try to do like this:
> >>
> >>     noresetBytecounter
> >>
> >>     if (reject) {
> >>         update reply {
> >>             Reply-Message := "Traffic limit exceeded."
> >>         }
> >>     }
> >>
> >> but if noresetBytecounter return reject freeradius immediatly return
> >> reject
> >> to user and do not process 'if' clause
> >
> >   You need to put this in the "post-auth" section, "Reject" subsection.
> >  See the example configuration files.
>
>
> /etc/freeradius/sites-enabled/default[412]: "SQL Counter" modules aren't
> allowed in 'post-auth' sections -- they have no such method.
>
> --
> ISP CrIS, Softwarium
>
>
> ------------------------------
>
> Message: 3
> Date: Thu, 26 Feb 2009 11:14:37 +0100
> From: <tnt at kalik.net>
> Subject: Re: EAP-PEAP GTC auth_type
> To: "FreeRadius users mailing list"
>        <freeradius-users at lists.freeradius.org>
> Message-ID: <FwAfhIxV.1235643277.5432590.tnt at kalik.net>
> Content-Type: text/plain; charset=ISO-8859-2
>
> >Great! It works perfectly.
> >Other than enabling ldap in authorize and authenticate in
> >inner-tunnel, I also had to change eap.conf's gtc section to auth_type
> >= LDAP.
> >
> >This works, but it brings up another problem. Setting auth_type to
> >PAP, Local, or commented out on gtc section does not work for LDAP. On
> >the other hand, If I set auth_type = LDAP, PEAP-GTC with system user
> >(which works if I set auth_type = PAP on gtc section) does not work.
> >
> >Is there a way I can authenticate with BOTH system user and LDAP using
> PEAP-GTC?
> >the main radiusd.conf can have multiple authorize methods available,
> >right? Why does gct have to explicitly set auth_type?
> >
>
> Leave gtc as pap. Change set_auth_type to no in ldap module
> configuration. Module will then just collect the password and pass it to
> pap module for authentication. It will not do "bind as user" ldap
> authentication.
>
> Ivan Kalik
> Kalik Informatika ISP
>
>
>
> ------------------------------
>
> Message: 4
> Date: Thu, 26 Feb 2009 11:34:28 +0100
> From: <tnt at kalik.net>
> Subject: Re: Freeradius-Users Digest, Vol 46,   Issue 102 Why is
>        groupname fieldblank in radacct
> To: "FreeRadius users mailing list"
>        <freeradius-users at lists.freeradius.org>
> Message-ID: <I1ceiOfk.1235644468.0624740.tnt at kalik.net>
> Content-Type: text/plain; charset=ISO-8859-2
>
> >I have MySQL 5.0.67 and PostgreSQL 8.3.6 and freeRADIUS 2.17 installed on
> >GNU/Linux Fedora 10 distribution. I have identical radius databases on
> both
> >MySQL and PostgreSQL. When I use the PostgreSQL, the groupname field in
> the
> >radacct table gets filled in but when I change the database to MySQL, the
> >groupname filled is blank. I checked the queries in mysql/diaup.conf and
> >postgresql/dialup.conf and found out that they are the same. Why is it
> >working with PostgreSQL and not working with MySQL? The groupnames are
> >defined in radusergroup table.
> >
>
> Default queries that come with the source don't write to groupname
> field. MySQL or PostgreSQL. You can place Class in radgroupreply and
> give it the value of the group name. Then put %{Class} into groupname
> field in accounting queries.
>
> Ivan Kalik
> Kalik Informatika ISP
>
>
>
> ------------------------------
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
>
> End of Freeradius-Users Digest, Vol 46, Issue 105
> *************************************************
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20090303/60d3fc39/attachment.html>


More information about the Freeradius-Users mailing list