From ian.truelsen@gmail.com Mon Apr  9 23:00:41 2007
From: Ian Truelsen <ian.truelsen@gmail.com>
To: freeradius-users@lists.freeradius.org
Subject: Accounting question
Date: Mon, 09 Apr 2007 14:00:31 -0700
Message-ID: <1176152431.5583.10.camel@mercury.brentwood-internet.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============8812796462383289355=="

--===============8812796462383289355==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit

When I connect to my AP, authenticated by freeradius using EAP-TLS, I
get an entry into radpostauth, entries
in /var/log/radius/radacct/192.168.3.115/detail-auth and detail-reply
files, but I am not getting any entries into radacct. I don't know
whether this is because the NAS is not sending any accounting packets or
my setup is not correct. However, since I am getting the entries into
radpostauth, I think I must have the setup correct.

In what circumstances are accounting packets sent from the NAS? How can
I test to see whether the packets are being sent? What sort of
information is supposed to be stored in radacct?
-- 
Ian Truelsen
s/v Sting
Email: ian.truelsen@gmail.com
AIM: ihtruelsen
MSN: ihtruelsen@hotmail.com
Google Talk: ian.truelsen@gmail.com


--===============8812796462383289355==--


From aland@deployingradius.com Tue Apr 10 01:23:40 2007
From: Alan DeKok <aland@deployingradius.com>
To: freeradius-users@lists.freeradius.org
Subject: Re: Accounting question
Date: Tue, 10 Apr 2007 01:22:56 +0200
Message-ID: <461ACAD0.9010400@deployingradius.com>
In-Reply-To: <1176152431.5583.10.camel@mercury.brentwood-internet.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============7300906571263723355=="

--===============7300906571263723355==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit

Ian Truelsen wrote:
> When I connect to my AP, authenticated by freeradius using EAP-TLS, I
> get an entry into radpostauth, entries
> in /var/log/radius/radacct/192.168.3.115/detail-auth and detail-reply
> files, but I am not getting any entries into radacct. I don't know
> whether this is because the NAS is not sending any accounting packets or
> my setup is not correct. However, since I am getting the entries into
> radpostauth, I think I must have the setup correct.

  As the README and FAQ say: run the server in debugging mode.  It will
tell you if it's receiving accounting packets.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog

--===============7300906571263723355==--


From ethan.dicks@gmail.com Tue Apr 10 04:15:22 2007
From: Ethan Dicks <ethan.dicks@gmail.com>
To: freeradius-users@lists.freeradius.org
Subject: Re: Accounting question
Date: Mon, 09 Apr 2007 21:15:16 -0500
Message-ID: <f4eb766f0704091915v58bcf67bm1a4d483e394c1c38@mail.gmail.com>
In-Reply-To: <461ACAD0.9010400@deployingradius.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============3608122054417912184=="

--===============3608122054417912184==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit

On 4/9/07, Alan DeKok <aland@deployingradius.com> wrote:
> Ian Truelsen wrote:
> > When I connect to my AP, authenticated by freeradius using EAP-TLS, I
> > get an entry into radpostauth, entries
> > in /var/log/radius/radacct/192.168.3.115/detail-auth and detail-reply
> > files, but I am not getting any entries into radacct. I don't know
> > whether this is because the NAS is not sending any accounting packets or
> > my setup is not correct. However, since I am getting the entries into
> > radpostauth, I think I must have the setup correct.
>
>   As the README and FAQ say: run the server in debugging mode.  It will
> tell you if it's receiving accounting packets.

I did just that when I set up a Foundry test switch, and I noticed
that I was getting (and entering into the database) authorization, but
not accounting packets.  I bit of digging in the docs later, and I was
able to cobble up the incantation to tell the switch to send
accounting information, too.  I'd previously set up the correct ports,
but it took additional commands to get the switch to _send_ the
packets over the port.

Check the docs for your NAS, specifically look for something like "aaa
accounting enable..." or the like.  You didn't say what vendor made
your NAS, so guessing commands is going to be a bit difficult.

-ethan

--===============3608122054417912184==--


