<P>
<BR>
<BR>
<BR>
Ivan,<BR>
<BR>
Thanks for your response. FreeRadisu is able to connect to the MySQL database and write into the radacct table. However I am not ablle to set things up for logging the VSA attributes into the database. How to edit the dialup.conf for the VSA value logging. I edited the dialup.conf with the inset query for the VSAs as follows:<BR>
<BR>
accounting_start_query = " \<BR>
INSERT INTO ${acct_table1} \<BR>
(IPC_SESSION_ID, IPC_SERVICE_TYPE, IPC_SESSION_SEQUENCE_NUM, \<BR>
IPC_POS_TRANSPORT_PROTOCOL, IPC_POS_TRANSPORT_PORT, IPC_POS_TRANSPORT_IP, \ .......<BR>
<BR>
<BR>
VALUES \<BR>
('%{IPC-Session-Id}', '%{IPC-Service-Type}', \<BR>
'%{IPC-Session-Sequence-Num}', \<BR>
'%{IPC-Pos-Transport-Protocol}', '%{IPC-Pos-Transport-Port}', '%{IPC-Pos-Transport-IP}', \<BR>
......<BR>
<BR>
<BR>
I removes all other queries fom the dialup.conf and just have the above one but to no avail.<BR>
<BR>
Please suggest.<BR>
<BR>
Regards,<BR>
Prabhu<BR>
<BR>
<BR>
<BR>
On Thu, 06 Nov 2008 prabhu s sugumaran wrote :<BR>
><BR>
><BR>
>Hi,<BR>
><BR>
>I am facing difficulties in integrating MySQL and FreeRadius for the accounting. I have setup the mysql with a database named 'radius'. I have also defined a table 'rt_cdr1' which is to be used to store the CDRs that come in the accounting request. I add the following statements in radiusd.conf.<BR>
><BR>
>-----------<BR>
><BR>
>accounting{<BR>
>detail<BR>
>sql<BR>
>}<BR>
>------<BR>
><BR>
>Also in the mysql.conf I have the following :<BR>
><BR>
>acct_table1="rt_cdr1"<BR>
>acct_table2="rt_cdr1"<BR>
><BR>
>Is their any other configurations that needs to be done to make the free radius pump the accounting request into databas?..I serarched to no avail .<BR>
><BR>
>The following is the output of 'radiusd -X -f' :<BR>
><BR>
><BR>
><BR>
>ot@electron freeradius]#<BR>
>[root@electron freeradius]# /usr/local/sbin/radiusd -X -f<BR>
>FreeRADIUS Version 2.1.1, for host i686-pc-linux-gnu, built on Nov 5 2008 at 14:56:50<BR>
>Copyright (C) 1999-2008 The FreeRADIUS server project and contributors.<BR>
>There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A<BR>
>PARTICULAR PURPOSE.<BR>
>You may redistribute copies of FreeRADIUS under the terms of the<BR>
>GNU General Public License v2.<BR>
>Starting - reading configuration files ...<BR>
>including configuration file /usr/local/etc/raddb/radiusd.conf<BR>
>including configuration file /usr/local/etc/raddb/proxy.conf<BR>
>including configuration file /usr/local/etc/raddb/clients.conf<BR>
>including files in directory /usr/local/etc/raddb/modules/<BR>
>including configuration file /usr/local/etc/raddb/modules/wimax<BR>
>including configuration file /usr/local/etc/raddb/modules/detail.example.com<BR>
>including configuration file /usr/local/etc/raddb/modules/radutmp<BR>
>including configuration file /usr/local/etc/raddb/modules/etc_group<BR>
>including configuration file /usr/local/etc/raddb/modules/chap<BR>
>including configuration file /usr/local/etc/raddb/modules/attr_rewrite<BR>
>including configuration file /usr/local/etc/raddb/modules/mac2ip<BR>
>including configuration file /usr/local/etc/raddb/modules/inner-eap<BR>
>including configuration file /usr/local/etc/raddb/modules/ippool<BR>
>including configuration file /usr/local/etc/raddb/modules/logintime<BR>
>including configuration file /usr/local/etc/raddb/modules/attr_filter<BR>
>including configuration file /usr/local/etc/raddb/modules/counter<BR>
>including configuration file /usr/local/etc/raddb/modules/digest<BR>
>including configuration file /usr/local/etc/raddb/modules/always<BR>
>including configuration file /usr/local/etc/raddb/modules/smbpasswd<BR>
>including configuration file /usr/local/etc/raddb/modules/checkval<BR>
>including configuration file /usr/local/etc/raddb/modules/passwd<BR>
>including configuration file /usr/local/etc/raddb/modules/sradutmp<BR>
>including configuration file /usr/local/etc/raddb/modules/krb5<BR>
>including configuration file /usr/local/etc/raddb/modules/mschap<BR>
>including configuration file /usr/local/etc/raddb/modules/detail.log<BR>
>including configuration file /usr/local/etc/raddb/modules/linelog<BR>
>including configuration file /usr/local/etc/raddb/modules/preprocess<BR>
>including configuration file /usr/local/etc/raddb/modules/detail<BR>
>including configuration file /usr/local/etc/raddb/modules/realm<BR>
>including configuration file /usr/local/etc/raddb/modules/expr<BR>
>including configuration file /usr/local/etc/raddb/modules/ldap<BR>
>including configuration file /usr/local/etc/raddb/modules/files<BR>
>including configuration file /usr/local/etc/raddb/modules/acct_unique<BR>
>including configuration file /usr/local/etc/raddb/modules/echo<BR>
>including configuration file /usr/local/etc/raddb/modules/sql_log<BR>
>including configuration file /usr/local/etc/raddb/modules/mac2vlan<BR>
>including configuration file /usr/local/etc/raddb/modules/pap<BR>
>including configuration file /usr/local/etc/raddb/modules/policy<BR>
>including configuration file /usr/local/etc/raddb/modules/unix<BR>
>including configuration file /usr/local/etc/raddb/modules/pam<BR>
>including configuration file /usr/local/etc/raddb/modules/exec<BR>
>including configuration file /usr/local/etc/raddb/modules/expiration<BR>
>including configuration file /usr/local/etc/raddb/eap.conf<BR>
>including configuration file /usr/local/etc/raddb/sql.conf<BR>
>including configuration file /usr/local/etc/raddb/sql/mysql/dialup.conf<BR>
>including configuration file /usr/local/etc/raddb/sql/mysql/counter.conf<BR>
>including configuration file /usr/local/etc/raddb/policy.conf<BR>
>including files in directory /usr/local/etc/raddb/sites-enabled/<BR>
>including configuration file /usr/local/etc/raddb/sites-enabled/inner-tunnel<BR>
>including configuration file /usr/local/etc/raddb/sites-enabled/default<BR>
>including dictionary file /usr/local/etc/raddb/dictionary<BR>
>main {<BR>
> prefix = "/usr/local"<BR>
> localstatedir = "/usr/local/var"<BR>
> logdir = "/usr/local/var/log/radius"<BR>
> libdir = "/usr/local/lib"<BR>
> radacctdir = "/usr/local/var/log/radius/radacct"<BR>
> hostname_lookups = no<BR>
> max_request_time = 30<BR>
> cleanup_delay = 5<BR>
> max_requests = 1024<BR>
> allow_core_dumps = no<BR>
> pidfile = "/usr/local/var/run/radiusd/radiusd.pid"<BR>
> checkrad = "/usr/local/sbin/checkrad"<BR>
> debug_level = 0<BR>
> proxy_requests = yes<BR>
> log {<BR>
> stripped_names = no<BR>
> auth = no<BR>
> auth_badpass = no<BR>
> auth_goodpass = no<BR>
> }<BR>
> security {<BR>
> max_attributes = 200<BR>
> reject_delay = 1<BR>
> status_server = yes<BR>
> }<BR>
>}<BR>
> client localhost {<BR>
> ipaddr = 127.0.0.1<BR>
> require_message_authenticator = no<BR>
> secret = "testing123"<BR>
> nastype = "other"<BR>
> }<BR>
> client 192.168.72.32 {<BR>
> require_message_authenticator = no<BR>
> secret = "secret"<BR>
> }<BR>
>radiusd: #### Loading Realms and Home Servers ####<BR>
> proxy server {<BR>
> retry_delay = 5<BR>
> retry_count = 3<BR>
> default_fallback = no<BR>
> dead_time = 120<BR>
> wake_all_if_all_dead = no<BR>
> }<BR>
> home_server localhost {<BR>
> ipaddr = 127.0.0.1<BR>
> port = 1812<BR>
> type = "auth"<BR>
> secret = "testing123"<BR>
> response_window = 20<BR>
> max_outstanding = 65536<BR>
> zombie_period = 40<BR>
> status_check = "status-server"<BR>
> ping_interval = 30<BR>
> check_interval = 30<BR>
> num_answers_to_alive = 3<BR>
> num_pings_to_alive = 3<BR>
> revive_interval = 120<BR>
> status_check_timeout = 4<BR>
> }<BR>
> home_server_pool my_auth_failover {<BR>
> type = fail-over<BR>
> home_server = localhost<BR>
> }<BR>
> realm example.com {<BR>
> auth_pool = my_auth_failover<BR>
> }<BR>
> realm LOCAL {<BR>
> }<BR>
>radiusd: #### Instantiating modules ####<BR>
> instantiate {<BR>
> Module: Linked to module rlm_exec<BR>
> Module: Instantiating exec<BR>
> exec {<BR>
> wait = no<BR>
> input_pairs = "request"<BR>
> shell_escape = yes<BR>
> }<BR>
> Module: Linked to module rlm_expr<BR>
> Module: Instantiating expr<BR>
> Module: Linked to module rlm_expiration<BR>
> Module: Instantiating expiration<BR>
> expiration {<BR>
> reply-message = "Password Has Expired "<BR>
> }<BR>
> Module: Linked to module rlm_logintime<BR>
> Module: Instantiating logintime<BR>
> logintime {<BR>
> reply-message = "You are calling outside your allowed timespan "<BR>
> minimum-timeout = 60<BR>
> }<BR>
> }<BR>
>radiusd: #### Loading Virtual Servers ####<BR>
>server inner-tunnel {<BR>
> modules {<BR>
> Module: Checking authenticate {...} for more modules to load<BR>
> Module: Linked to module rlm_pap<BR>
> Module: Instantiating pap<BR>
> pap {<BR>
> encryption_scheme = "auto"<BR>
> auto_header = no<BR>
> }<BR>
> Module: Linked to module rlm_chap<BR>
> Module: Instantiating chap<BR>
> Module: Linked to module rlm_mschap<BR>
> Module: Instantiating mschap<BR>
> mschap {<BR>
> use_mppe = yes<BR>
> require_encryption = no<BR>
> require_strong = no<BR>
> with_ntdomain_hack = no<BR>
> }<BR>
> Module: Linked to module rlm_unix<BR>
> Module: Instantiating unix<BR>
> unix {<BR>
> radwtmp = "/usr/local/var/log/radius/radwtmp"<BR>
> }<BR>
> Module: Linked to module rlm_eap<BR>
> Module: Instantiating eap<BR>
> eap {<BR>
> default_eap_type = "md5"<BR>
> timer_expire = 60<BR>
> ignore_unknown_eap_types = no<BR>
> cisco_accounting_username_bug = no<BR>
> max_sessions = 2048<BR>
> }<BR>
> Module: Linked to sub-module rlm_eap_md5<BR>
> Module: Instantiating eap-md5<BR>
> Module: Linked to sub-module rlm_eap_leap<BR>
> Module: Instantiating eap-leap<BR>
> Module: Linked to sub-module rlm_eap_gtc<BR>
> Module: Instantiating eap-gtc<BR>
> gtc {<BR>
> challenge = "Password: "<BR>
> auth_type = "PAP"<BR>
> }<BR>
> Module: Linked to sub-module rlm_eap_tls<BR>
> Module: Instantiating eap-tls<BR>
> tls {<BR>
> rsa_key_exchange = no<BR>
> dh_key_exchange = yes<BR>
> rsa_key_length = 512<BR>
> dh_key_length = 512<BR>
> verify_depth = 0<BR>
> pem_file_type = yes<BR>
> private_key_file = "/usr/local/etc/raddb/certs/server.pem"<BR>
> certificate_file = "/usr/local/etc/raddb/certs/server.pem"<BR>
> CA_file = "/usr/local/etc/raddb/certs/ca.pem"<BR>
> private_key_password = "whatever"<BR>
> dh_file = "/usr/local/etc/raddb/certs/dh"<BR>
> random_file = "/usr/local/etc/raddb/certs/random"<BR>
> fragment_size = 1024<BR>
> include_length = yes<BR>
> check_crl = no<BR>
> cipher_list = "DEFAULT"<BR>
> make_cert_command = "/usr/local/etc/raddb/certs/bootstrap"<BR>
> cache {<BR>
> enable = no<BR>
> lifetime = 24<BR>
> max_entries = 255<BR>
> }<BR>
> }<BR>
> Module: Linked to sub-module rlm_eap_ttls<BR>
> Module: Instantiating eap-ttls<BR>
> ttls {<BR>
> default_eap_type = "md5"<BR>
> copy_request_to_tunnel = no<BR>
> use_tunneled_reply = no<BR>
> virtual_server = "inner-tunnel"<BR>
> }<BR>
> Module: Linked to sub-module rlm_eap_peap<BR>
> Module: Instantiating eap-peap<BR>
> peap {<BR>
> default_eap_type = "mschapv2"<BR>
> copy_request_to_tunnel = no<BR>
> use_tunneled_reply = no<BR>
> proxy_tunneled_request_as_eap = yes<BR>
> virtual_server = "inner-tunnel"<BR>
> }<BR>
> Module: Linked to sub-module rlm_eap_mschapv2<BR>
> Module: Instantiating eap-mschapv2<BR>
> mschapv2 {<BR>
> with_ntdomain_hack = no<BR>
> }<BR>
> Module: Checking authorize {...} for more modules to load<BR>
> Module: Linked to module rlm_realm<BR>
> Module: Instantiating suffix<BR>
> realm suffix {<BR>
> format = "suffix"<BR>
> delimiter = "@"<BR>
> ignore_default = no<BR>
> ignore_null = no<BR>
> }<BR>
> Module: Linked to module rlm_files<BR>
> Module: Instantiating files<BR>
> files {<BR>
> usersfile = "/usr/local/etc/raddb/users"<BR>
> acctusersfile = "/usr/local/etc/raddb/acct_users"<BR>
> preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users"<BR>
> compat = "no"<BR>
> }<BR>
> Module: Checking session {...} for more modules to load<BR>
> Module: Linked to module rlm_radutmp<BR>
> Module: Instantiating radutmp<BR>
> radutmp {<BR>
> filename = "/usr/local/var/log/radius/radutmp"<BR>
> username = "%{User-Name}"<BR>
> case_sensitive = yes<BR>
> check_with_nas = yes<BR>
> perm = 384<BR>
> callerid = yes<BR>
> }<BR>
> Module: Checking post-proxy {...} for more modules to load<BR>
> Module: Checking post-auth {...} for more modules to load<BR>
> Module: Linked to module rlm_attr_filter<BR>
> Module: Instantiating attr_filter.access_reject<BR>
> attr_filter attr_filter.access_reject {<BR>
> attrsfile = "/usr/local/etc/raddb/attrs.access_reject"<BR>
> key = "%{User-Name}"<BR>
> }<BR>
> }<BR>
>}<BR>
> modules {<BR>
> Module: Checking authenticate {...} for more modules to load<BR>
> Module: Checking authorize {...} for more modules to load<BR>
> Module: Linked to module rlm_preprocess<BR>
> Module: Instantiating preprocess<BR>
> preprocess {<BR>
> huntgroups = "/usr/local/etc/raddb/huntgroups"<BR>
> hints = "/usr/local/etc/raddb/hints"<BR>
> with_ascend_hack = no<BR>
> ascend_channels_per_line = 23<BR>
> with_ntdomain_hack = no<BR>
> with_specialix_jetstream_hack = no<BR>
> with_cisco_vsa_hack = no<BR>
> with_alvarion_vsa_hack = no<BR>
> }<BR>
> Module: Checking preacct {...} for more modules to load<BR>
> Module: Linked to module rlm_acct_unique<BR>
> Module: Instantiating acct_unique<BR>
> acct_unique {<BR>
> key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port"<BR>
> }<BR>
> Module: Checking accounting {...} for more modules to load<BR>
> Module: Linked to module rlm_detail<BR>
> Module: Instantiating detail<BR>
> detail {<BR>
> detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d"<BR>
> header = "%t"<BR>
> detailperm = 384<BR>
> dirperm = 493<BR>
> locking = no<BR>
> log_packet_header = no<BR>
> }<BR>
> Module: Instantiating attr_filter.accounting_response<BR>
> attr_filter attr_filter.accounting_response {<BR>
> attrsfile = "/usr/local/etc/raddb/attrs.accounting_response"<BR>
> key = "%{User-Name}"<BR>
> }<BR>
> Module: Checking session {...} for more modules to load<BR>
> Module: Checking post-proxy {...} for more modules to load<BR>
> Module: Checking post-auth {...} for more modules to load<BR>
> }<BR>
>radiusd: #### Opening IP addresses and Ports ####<BR>
>listen {<BR>
> type = "auth"<BR>
> ipaddr = *<BR>
> port = 0<BR>
> clients = "per_socket_clients"<BR>
> client 192.168.72.32 {<BR>
> require_message_authenticator = no<BR>
> secret = "secret"<BR>
> }<BR>
>}<BR>
>listen {<BR>
> type = "acct"<BR>
> ipaddr = *<BR>
> port = 0<BR>
>}<BR>
>Listening on authentication address * port 1812<BR>
>Listening on accounting address * port 1813<BR>
>Listening on proxy address * port 1814<BR>
>Ready to process requests.<BR>
> rad_recv: Accounting-Request packet from host 192.168.72.32 port 50000, id=38, length=774<BR>
> User-Name = "192.168.72.32"<BR>
> NAS-IP-Address = 192.168.72.32<BR>
> Acct-Status-Type = Stop<BR>
> Acct-Session-Id = "61505"<BR>
> NAS-Port-Type = Async<BR>
> NAS-Port = 1504<BR>
> Calling-Station-Id = "192.168.76.17"<BR>
> Called-Station-Id = "172.27.247.80\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000"<BR>
> IPC-Session-Id = 0x0000000000000000<BR>
> IPC-Service-Type = 0<BR>
> IPC-Session-Sequence-Num = 1504<BR>
> IPC-Pos-Transport-Protocol = 0<BR>
> IPC-Pos-Transport-Port = 51235<BR>
> IPC-Pos-Transport-IP = 192.168.76.17<BR>
> IPC-Pos-Transport-DNS = "192.168.76.17"<BR>
> IPC-Ingress-Transport-Protocol = 0<BR>
> IPC-Ingress-Transport-Port = 4444<BR>
> IPC-Ingress-Transport-IP = 192.168.72.32<BR>
> IPC-Ingress-Transport-DNS = "192.168.72.32"<BR>
> IPC-Host-Transport-Protocol = 0<BR>
> IPC-Host-Transport-Port = 8045<BR>
> IPC-Host-Transport-IP = 172.27.247.80<BR>
> IPC-Host-Transport-DNS = "172.27.247.80"<BR>
> IPC-Ingress-Interface-Number = 0<BR>
> IPC-Transaction-Identifier = "be3521eaac1bf659"<BR>
> IPC-Transaction-Protocol-Type = 2<BR>
> IPC-Visa-Transaction-Mode = 0<BR>
> IPC-Security-Protocol = 0<BR>
> IPC-Call-Start-Ingress-Sec = 1225958119<BR>
> IPC-Call-Start-Ingress-Msec = 680<BR>
> IPC-Call-Connect-Ingress-Sec = 1225958119<BR>
> IPC-Call-Connect-Ingress-Msec = 680<BR>
> IPC-Call-Hs-Comp-Time-Sec = 1225958119<BR>
> IPC-Call-Hs-Comp-Time-Msec = 680<BR>
> IPC-Call-End-Time-Sec = 1225958119<BR>
> IPC-Call-End-Time-Msec = 730<BR>
> IPC-Call-Durn-Connect-Disc = 0<BR>
> IPC-Call-Termination-Cause = 256<BR>
> IPC-Response-Time-Host = 0<BR>
> IPC-Transaction-Bytes-Sent-POS = 14<BR>
> IPC-Transaction-Bytes-Sent-Host = 9<BR>
> IPC-Transaction-Bytes-Received-POS = 9<BR>
> IPC-Transaction-Bytes-Received-Host = 12<BR>
> IPC-Transaction-Bytes-Lost = 0<BR>
> IPC-Duplicate-Transactions = 0<BR>
> IPC-Re-Transmission-Pos = 0<BR>
> IPC-Re-Transmission-Host = 0<BR>
> IPC-NTP-Timezone = "GMT"<BR>
> USR-Attr-33068 = 0x00000000<BR>
>+- entering group preacct {...}<BR>
>++[preprocess] returns ok<BR>
>[acct_unique] Hashing 'NAS-Port = 1504,Client-IP-Address = 192.168.72.32,NAS-IP-Address = 192.168.72.32,Acct-Session-Id = "61505",User-Name = "192.168.72.32"'<BR>
>[acct_unique] Acct-Unique-Session-ID = "b38696cc273b57fb".<BR>
>++[acct_unique] returns ok<BR>
>[suffix] No '@' in User-Name = "192.168.72.32", looking up realm NULL<BR>
>[suffix] No such realm "NULL"<BR>
>++[suffix] returns noop<BR>
>++[files] returns noop<BR>
>+- entering group accounting {...}<BR>
>[detail] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /usr/local/var/log/radius/radacct/192.168.72.32/detail-20081106<BR>
>[detail] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/192.168.72.32/detail-20081106<BR>
>[detail] expand: %t -> Thu Nov 6 19:26:25 2008<BR>
>++[detail] returns ok<BR>
>++[unix] returns ok<BR>
>[radutmp] expand: /usr/local/var/log/radius/radutmp -> /usr/local/var/log/radius/radutmp<BR>
>[radutmp] expand: %{User-Name} -> 192.168.72.32<BR>
>rlm_radutmp: Logout for NAS 192.168.72.32 port 1504, but no Login record<BR>
>++[radutmp] returns ok<BR>
>[attr_filter.accounting_response] expand: %{User-Name} -> 192.168.72.32<BR>
> attr_filter: Matched entry DEFAULT at line 12<BR>
>++[attr_filter.accounting_response] returns updated<BR>
>Sending Accounting-Response of id 38 to 192.168.72.32 port 50000<BR>
>Finished request 0.<BR>
>Cleaning up request 0 ID 38 with timestamp +10<BR>
>Going to the next request<BR>
>Ready to process requests.<BR>
><BR>
><BR>
><BR>
>Please suggest.<BR>
><BR>
>Thanks,<BR>
>Prabhu<BR>
><BR>
</P>
<br><br>
<Table border=0 Width=644 Height=57 cellspacing=0 cellpadding=0 style='font-family:Verdana;font-size:11px;line-height:15px;'><TR><td><a href='http://adworks.rediff.com/cgi-bin/AdWorks/click.cgi/www.rediff.com/signature-default.htm/1050715198@Middle5/2206641_2199021/2201651/1?PARTNER=3&OAS_QUERY=null' target=new ><img src ='http://imadworks.rediff.com/cgi-bin/AdWorks/adimage.cgi/2206641_2199021/creative_2201651.gif' alt='Rediff Shopping' border=0></a></td></TR></Table>