radacct is not filled up

Andreas Meyer anmeyer at anup.de
Tue Jul 17 11:54:42 CEST 2012


Hello!

"Fajar A. Nugraha" <list at fajar.net> wrote:

> On Tue, Jul 17, 2012 at 4:08 PM, Andreas Meyer <anmeyer at anup.de> wrote:
> 
> > Hm, no luck with this one. I changed buffered.sql to log to sql, but it
> 
> Did I EVER mention anything about buffered.sql?
> Was it EVER mentioned in the wiki page?
> 
> >        accounting {
> >         sql
> >         }
> 
> so accounting section has sql. That's good.
> 
> > # Executing section post-auth from file /usr/etc/raddb/sites-enabled/default
> 
> See that? That's post-auth. That section is called after
> access-request packets are processed.

Ok

> 
> > +- entering group post-auth {...}
> > [reply_log]     expand: /usr/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /usr/var/log/radius/radacct/192.168.1.254/reply-detail-20120717
> > [reply_log] /usr/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /usr/var/log/radius/radacct/192.168.1.254/reply-detail-20120717
> > [reply_log]     expand: %t -> Tue Jul 17 10:57:08 2012
> > ++[reply_log] returns ok
> > [sql]   expand: %{Stripped-User-Name} ->
> > [sql]   ... expanding second conditional
> > [sql]   expand: %{User-Name} -> bitcorner-1
> 
> ... and you didn't have ANYTHING in the log about accounting.
> 
> Does your NAS send accounting packets? Accounting section is only
> called when radius receive accounting packets.

I fear the AP is not sending accounting packets at all. The only
thing I can configure at the TP-Link AP is that it can communicate
with the radiusserver at port 1812 for auth packets.

> Or is it that you want to log some data to sql in post-auth, instead
> of accounting? If so, then you need to modify the correct section

not that I know of

I have a section in radisud.conf to listen for type = acct

> (i.e. post-auth, not accounting). And the table modified will NOT be
> radacct, but radpostauth. See sql.conf and sql/mysql/dialup.conf for
> details, look for "postauth". You CAN change what's logged, and where,
> by editing the queries.

I must say I am not sure, what information belongs to post-auth exactly
and why. I promise I read the FAQ!

  Andreas


More information about the Freeradius-Users mailing list