Implementing a "logout" sqlcounter

Ivan Kalik tnt at kalik.net
Tue May 12 10:57:33 CEST 2009


> I am thinking of using sqlcounter to implement a "logout" counter,
> ie whenever I want to logout a particular user, I set something
> into the database, then the sqlcounter will pick it up, and
> drop the existing session.
>

Dropping sessions on radius server will have no impact on users connection
to the NAS.

> OK I read in some of the older posts, one way people have
> implemented this feature is via then spin off radclient.
> This has the disadvantage in that, if the radius client is
> behind somekind of firewall, the server initiated radclient
> will have problem sending this to the radius client.
>

Use Packet-Src-IP-Address.

> Whereas the radclient continually sending accounting info to
> the server, I thought doing the reject at accouting will
> also some what accomplishing the same purpose.

Disconnecting users on accounting packets is not straightforward. NAS
features will dictate if this is at all possible. Many don't support CoA
and PoD and with some you can't remotely disconnect the user even using
SNMP.

Ivan Kalik
Kalik Informatika ISP




More information about the Freeradius-Users mailing list