<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-text-plain" wrap="true" graphical-quote="true"
style="font-family: -moz-fixed; font-size: 14px;" lang="x-western">
<pre wrap="">On 19.5.2014 13:48, Phil Mayers wrote:
</pre>
<blockquote type="cite" style="color: #000000;">
<pre wrap="">On 19/05/2014 11:52, Matej Žerovnik wrote:
</pre>
<blockquote type="cite" style="color: #000000;">
<pre wrap="">This should update control record for 'dailycounter' and run it if user
signs from Ethernet NAS port type. In case he logs in via wifi, system
will skip execution of dailycounter and session-timeout will not be
sent. Is my thinking correct?
</pre>
</blockquote>
<pre wrap="">Yes, I think so.
</pre>
</blockquote>
<pre wrap="">Ok, will try it on my test installation...
</pre>
<blockquote type="cite" style="color: #000000;">
<blockquote type="cite" style="color: #000000;">
<pre wrap="">What if I want to extend session timeout for a certain user?
I've had success sending a COA packet with radclient. Is it possible to
change it without running radclient?
</pre>
</blockquote>
<pre wrap="">Not really. If you're extending a session timeout, that's in response to
an external, non-RADIUS event e.g. administrative configuration, user
self-service.
FreeRADIUS responds to RADIUS packets.
</pre>
<blockquote type="cite" style="color: #000000;">
<pre wrap="">Can I create a custom sql table where I insert user name and wanted
session length and radius will read that out and send COA to client?
</pre>
</blockquote>
<pre wrap="">No, definitely not. FreeRADIUS is event-driven in response to radius
packets.
</pre>
</blockquote>
<pre wrap="">I guess I could do a little DIY script that reads SQL database, sends
CoA package with radclient and just put everything in cron.
</pre>
<blockquote type="cite" style="color: #000000;">
<blockquote type="cite" style="color: #000000;">
<pre wrap="">Is it possible to somehow get the current set session-timeout for a
certain user?
</pre>
</blockquote>
<pre wrap="">You could log the value you returned in post-auth with linelog or sql.
</pre>
</blockquote>
<pre wrap="">I think that will work...
</pre>
<blockquote type="cite" style="color: #000000;">
<blockquote type="cite" style="color: #000000;">
<pre wrap="">If not, can I somehow store it in a database on login or update?
</pre>
</blockquote>
<pre wrap="">Login yes, as above. Update no - as mentioned this is a non-RADIUS event.
</pre>
</blockquote>
<pre wrap="">I guess I could store it on login and then use the script from above to
update session-timeout field in my sql table. After update, I would send
the CoA package using radclient.
Is there a php radius client available, so that I don't need to call
external programs?
I know all this is not the best solution, but it still seems the best
way to extend sessions for one user on all NAS-es.
The other option would be to update max-session-time and tell user to
reconnect, but I would like for users to be as painless as possible.
Matej
</pre>
</div>
</body>
</html>