<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: Times New Roman; font-size: 12pt; color: #000000'>This is an issue for us as well. It seems in our case, the NAS retransmits the start packet 60 seconds later and this has an impact on the acctuniqueid as shown in the example below:<br><br>Tue Aug 30 13:32:49 2011<br> Event-Timestamp = "Aug 30 2011 13:32:48 EDT"<br> User-Name = "user@example.com"<br> NAS-IP-Address = 69.72.31.155<br> NAS-Identifier = "mtar-apx01.1dial.com"<br> Ascend-Owner-IP-Addr = 0.0.0.0<br> NAS-Port = 4652<br> Ascend-NAS-Port-Format = 4<br> NAS-Port-Type = Async<br> Service-Type = Framed-User<br> Class = 0x4241534943495350<br> Acct-Status-Type = Start<br> Acct-Delay-Time = 0<br> Acct-Session-Id = "592238627"<br> Acct-Authentic = RADIUS<br> Ascend-Auth-Delay = 1580<br> Ascend-Data-Rate = 21600<br> Ascend-Xmit-Rate = 40000<br> Ascend-Modem-PortNo = 92<br> Ascend-Modem-SlotNo = 14<br> Ascend-Modem-ShelfNo = 1<br> Calling-Station-Id = "..."<br> Ascend-Calling-Id-Type-Of-Num = Unknown<br> Ascend-Calling-Id-Number-Plan = Unknown<br> Ascend-Calling-Id-Presentatn = Allowed<br> Ascend-Calling-Id-Screening = 40<br> Called-Station-Id = "..."<br> Ascend-Data-Svc = Switched-Voice-Bearer<br> Framed-Protocol = PPP<br> Framed-IP-Address = 208.103.135.234<br> Proxy-State = 0x3138<br> Proxy-State = 0x313435<br> Proxy-State = 0x323034<br> Realm = "example.com"<br> Acct-Unique-Session-Id = "547e6cd62913bca0"<br> Timestamp = 1314725569<br> <br>Tue Aug 30 13:33:49 2011<br> Event-Timestamp = "Aug 30 2011 13:32:48 EDT"<br> User-Name = "user@example.com"<br> NAS-IP-Address = 69.72.31.155<br> NAS-Identifier = "mtar-apx01.1dial.com"<br> Ascend-Owner-IP-Addr = 0.0.0.0<br> NAS-Port = 4652<br> Ascend-NAS-Port-Format = 4<br> NAS-Port-Type = Async<br> Service-Type = Framed-User<br> Class = 0x4241534943495350<br> Acct-Status-Type = Start<br> Acct-Delay-Time = 60<br> Acct-Session-Id = "592238627"<br> Acct-Authentic = RADIUS<br> Ascend-Auth-Delay = 1580<br> Ascend-Data-Rate = 21600<br> Ascend-Xmit-Rate = 40000<br> Ascend-Modem-PortNo = 92<br> Ascend-Modem-SlotNo = 14<br> Ascend-Modem-ShelfNo = 1<br> Calling-Station-Id = "..."<br> Ascend-Calling-Id-Type-Of-Num = Unknown<br> Ascend-Calling-Id-Number-Plan = Unknown<br> Ascend-Calling-Id-Presentatn = Allowed<br> Ascend-Calling-Id-Screening = 40<br> Called-Station-Id = "..."<br> Ascend-Data-Svc = Switched-Voice-Bearer<br> Framed-Protocol = PPP<br> Framed-IP-Address = 208.103.135.234<br> Proxy-State = 0x3230<br> Proxy-State = 0x3832<br> Proxy-State = 0x3934<br> Realm = "example.com"<br> Acct-Unique-Session-Id = "0041ee21d0b1c6b1"<br> Timestamp = 1314725629<br><br>As with many companies using load balancing, it may not be good to use Client-IP-Address to key on as this changed 60 seconds later.<br><br>Default in modules/acct_unique:<br><br>acct_unique {<br> key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port"<br>}<br><br>The man page for rlm_acct_unique shows:<br><br>acct_unique {<br> key = "User-Name, Acct-Session-Id, NAS-IP-Address, NAS-Port"<br>}<br><br>Anyone know when this was changed?<br><br><hr id="zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>From: </b>"Arran Cudbard-Bell" <a.cudbardb@gmail.com><br><b>To: </b>"FreeRadius users mailing list" <freeradius-users@lists.freeradius.org><br><b>Sent: </b>Saturday, June 18, 2011 7:50:49 AM<br><b>Subject: </b>Re: different acctuniqueids with common keys?<br><br><br>On Jun 18, 2011, at 1:26 PM, andrew@sybaweb.com wrote:<br><br>> On Sat, 18 Jun 2011 07:39:53 +0200, Arran Cudbard-Bell wrote:<br>>> As Alan says it's the NAS not including a consistent set of<br>>> Attribute and or values.<br>> <br>> The key attributes per the config (acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port"<br>> }) *are* consistent in the radacct table yet the value of acctuniqueid is not. I suppose the missing values could have been populated later.<br><br>Um yes. Especially if you're using interim updates.<br><br>-Arran<br><br>Arran Cudbard-Bell<br>RM-RF Limited - Security consultation and contracting<br>VoIP: +1 916-436-1352 Cell: +44 7854041841<br><br><br><br><br><br>-<br>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html<br></div><br></div></body></html>