Accounting to MySQL not working

Christoph Schwabl christoph.schwabl at gmx.at
Fri May 28 13:38:46 CEST 2010


Hi Alan,

thank you for your response.

> 
> according to the debug:
> 
> +- entering group accounting {...}
> [detail]        expand:
> /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d ->
> +/var/log/freeradius/radacct/192.168.1.10/detail-20100527
> [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d
> expands to
> +/var/log/freeradius/radacct/192.168.1.10/detail-20100527
> [detail]        expand: %t -> Thu May 27 23:32:23 2010
> ++[detail] returns ok
> ++[unix] returns ok
> [radutmp]       expand: /var/log/freeradius/radutmp ->
> /var/log/freeradius/radutmp
> [radutmp]       expand: %{User-Name} -> chrissql
> ++[radutmp] returns ok
> [attr_filter.accounting_response]       expand: %{User-Name} -> chrissql
>  attr_filter: Matched entry DEFAULT at line 12
> ++[attr_filter.accounting_response] returns updated
> Sending Accounting-Response of id 77 to 192.168.1.10 port 1646
> Finished request 19.
> 
> 
> so, its drops into accouting section...it does 
> 
> detail
> unix
> radutmp
> attr_filter.accounting_response
> 
> but where oh were was the SQL being called?   hmm, from here is doesnt
> look like you are calling it. check the sites-enabled/* files  (I dont
> know what virtual servers you have running or what you've called
> them) and please uncomment the 'sql'
> 
> It comes after the lines that say:
> 
>         #
>         #  Log traffic to an SQL database.
>         #
>         #  See "Accounting queries" in sql.conf
> 
> 

this part is (and was) enabled
please find below the configuration of the files (which is the same configuration as for 2.0.4 - this configuration is working for 2.0.4)

however, it seems the sql line is ignored by the radius server


file: default

authorize {
        preprocess
        chap
        mschap
        suffix
        eap {
                ok = return
        }
        unix
        files
        sql
        expiration
        logintime
        pap

}
authenticate {
        Auth-Type PAP {
                pap
        }
        Auth-Type CHAP {
                chap
        }
        Auth-Type MS-CHAP {
                mschap
        }
        unix
        eap
}
preacct {
        preprocess
        acct_unique
        suffix
        files
}
accounting {
        detail
        unix
        radutmp
        sql
        attr_filter.accounting_response
}
session {
        radutmp

}
post-auth {
        exec
        Post-Auth-Type REJECT {
                attr_filter.access_reject
        }
}
pre-proxy {
}
post-proxy {
        eap
}

----------------------------------------------------------

fiel: inner-tunnel

server inner-tunnel {
authorize {
        chap
        mschap
        unix
        suffix
        update control {
               Proxy-To-Realm := LOCAL
        }
        eap {
                ok = return
        }
        files
        sql
        expiration
        logintime
        pap
}
authenticate {
        Auth-Type PAP {
                pap
        }
        Auth-Type CHAP {
                chap
        }
        Auth-Type MS-CHAP {
                mschap
        }
        unix
        eap
}
session {
        radutmp
}
post-auth {
        Post-Auth-Type REJECT {
                attr_filter.access_reject
        }
}
pre-proxy {
}
post-proxy {
        eap
}

BTW: If I uncomment all 'sql' entries, I get data into the radpostauth table, but I never get data into the radacct table.

Has somebody a working configuration for logging into the radacct mysql table with freeradius v2.1.8 (under Debian Lenny)?

br
Christoph

-- 
GMX.at - Österreichs FreeMail-Dienst mit über 2 Mio Mitgliedern
E-Mail, SMS & mehr! Kostenlos: http://portal.gmx.net/de/go/atfreemail



More information about the Freeradius-Users mailing list