- Freeradius-Users - lists.freeradius.org

Stripped username
by Cliff Hayes 14 Jun '06

14 Jun '06

Hello, New user making good progress. Can see light at end of tunnel. I need to be able to only store the username without realm in the MySQL radcheck table. In the sql.conf file, I have tried commenting out the following: #sql_user_name = "%{User-Name}" ...and un-commenting the following: sql_user_name = "%{Stripped-User-Name:-%{User-Name:-DEFAULT}}" ...and it does not work. But, if I put the username with realm in the radcheck table, then it works. I also uncommented the following in the sql.conf file: default_user_profile = "DEFAULT" Cliff

3 4

Run radrelay as a different user
by Eric Merkel 14 Jun '06

14 Jun '06

Sorry if this is too basic of a question but I've been fighting with this for a while and google hasn't turned up anything for me. I am running freeradius on Centos and it runs the freeradius daemon as the radiusd user&group. However when I start radrelay it starts as root which then changes the detail file to be owned by root thus causing radiusd not to be able to write any further accounting packets to the file. I've tried starting radrelay as the user radiusd as follows but its not working. # su -c 'radrelay -xx -s SecretPass -r 192.168.1.4:1645 /var/log/radius/radacct/detail' radiusd I do not get any debug information back it just goes back to the prompt and radrelay doesn't start. Is there another way of making radrelay run as the user radiusd? I guess I could change radiusd to run as root or make the detail file permissions world writeable but I would like to avoid doing either of those if at all possible. -Eric

2 4

Re: Stale sessions
by Stelio Gouveia 13 Jun '06

13 Jun '06

Thank you Carlos for your reply, your post has been most helpful to reinforce my understanding of freeradius. According to your reply i am going to assume that the only field that need to be updated is the AcctStopTime field. To be honest i dont really understand the logic behind the Interrim-Interval and the query you've provided. I am using a Authentication backend but i simply test to see if the AcctStopTime is NULL, in which case i update the AcctStopTime with Start + Session. Could you provide some information about what areas of radius could impact on the SQL session handling method? As requested by Alan, the radius debug dump when i do get an error: I typically would get 2 accepts and 1 reject in successions THE ACCEPT Waking up in 4 seconds... rad_recv: Access-Request packet from host 127.0.0.1:32776, id=15, length=68 User-Name = "testuser" User-Password = "password" NAS-IP-Address = 255.255.255.255 NAS-Port = 1812 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 7 modcall[authorize]: module "preprocess" returns ok for request 7 modcall[authorize]: module "chap" returns noop for request 7 modcall[authorize]: module "mschap" returns noop for request 7 modcall[authorize]: module "suffix" returns noop for request 7 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 7 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 7 radius_xlat: 'testuser' rlm_sql (sql): sql_set_user escaped user --> 'testuser' radius_xlat: ' ??SELECT id, UserName, Attribute, Value, Op ??FROM radcheck ??WHERE Username = 'testuser' ??ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 rlm_sql_postgresql: query: ??SELECT id, UserName, Attribute, Value, Op ??FROM radcheck ??WHERE Username = 'testuser' ??ORDER BY id rlm_sql_postgresql: Status: PGRES_TUPLES_OK rlm_sql_postgresql: affected rows = radius_xlat: 'SELECT radgroupcheck.id, radgroupcheck.GroupName, ??radgroupcheck.Attribute, radgroupcheck.Value,radgroupcheck.Op ??FROM radgroupcheck, usergroup ??WHERE usergroup.Username = 'testuser' AND usergroup.GroupName = radgroupcheck.GroupName ??ORDER BY radgroupcheck.id' rlm_sql_postgresql: query: SELECT radgroupcheck.id, radgroupcheck.GroupName, ??radgroupcheck.Attribute, radgroupcheck.Value,radgroupcheck.Op ??FROM radgroupcheck, usergroup ??WHERE usergroup.Username = 'testuser' AND usergroup.GroupName = radgroupcheck.GroupName ??ORDER BY radgroupcheck.id rlm_sql_postgresql: Status: PGRES_TUPLES_OK rlm_sql_postgresql: affected rows = radius_xlat: 'REMOVED FROM DUMP TO CUTDOWN SIZE...' rlm_sql_postgresql: query: REMOVED FROM DUMP TO CUTDOWN SIZE... rlm_sql_postgresql: Status: PGRES_TUPLES_OK rlm_sql_postgresql: affected rows = rlm_sql: Failed to create the pair: Unknown value for attribute ChilliSpot-Max-Output-Octets rlm_sql (sql): Error getting data from database radius_xlat: 'SELECT radgroupreply.id, radgroupreply.GroupName, radgroupreply.Attribute, ??radgroupreply.Value, radgroupreply.Op ??FROM radgroupreply,usergroup ??WHERE usergroup.Username = 'testuser' AND usergroup.GroupName = radgroupreply.GroupName ??ORDER BY radgroupreply.id' rlm_sql_postgresql: query: SELECT radgroupreply.id, radgroupreply.GroupName, radgroupreply.Attribute, ??radgroupreply.Value, radgroupreply.Op ??FROM radgroupreply,usergroup ??WHERE usergroup.Username = 'testuser' AND usergroup.GroupName = radgroupreply.GroupName ??ORDER BY radgroupreply.id rlm_sql_postgresql: Status: PGRES_TUPLES_OK rlm_sql_postgresql: affected rows = rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns ok for request 7 modcall: leaving group authorize (returns ok) for request 7 rad_check_password: Found Auth-Type Local auth: type Local auth: user supplied User-Password matches local User-Password Processing the session section of radiusd.conf modcall: entering group session for request 7 radius_xlat: 'testuser' rlm_sql (sql): sql_set_user escaped user --> 'testuser' radius_xlat: 'SELECT COUNT(*) FROM radacct WHERE UserName='testuser' AND AcctStopTime IS NULL' rlm_sql (sql): Reserving sql socket id: 3 rlm_sql_postgresql: query: SELECT COUNT(*) FROM radacct WHERE UserName='testuser' AND AcctStopTime IS NULL rlm_sql_postgresql: Status: PGRES_TUPLES_OK rlm_sql_postgresql: affected rows = rlm_sql (sql): Released sql socket id: 3 modcall[session]: module "sql" returns ok for request 7 modcall: leaving group session (returns ok) for request 7 Processing the post-auth section of radiusd.conf modcall: entering group post-auth for request 7 radius_xlat: '/usr/local/var/log/radius/radacct/127.0.0.1/reply-detail-20060613' rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/127.0.0.1/reply-detail-20060613 modcall[post-auth]: module "reply_log" returns ok for request 7 rlm_sql (sql): Processing sql_postauth radius_xlat: 'testuser' rlm_sql (sql): sql_set_user escaped user --> 'testuser' radius_xlat: 'INSERT into radpostauth (username, pass, reply, authdate) ??values ('testuser', 'password', 'Access-Accept', NOW())' radius_xlat: '/usr/local/var/log/radius/sqltrace.sql' rlm_sql (sql) in sql_postauth: query is INSERT into radpostauth (username, pass, reply, authdate) ??values ('testuser', 'password', 'Access-Accept', NOW()) rlm_sql (sql): Reserving sql socket id: 2 rlm_sql_postgresql: query: INSERT into radpostauth (username, pass, reply, authdate) ??values ('testuser', 'password', 'Access-Accept', NOW()) rlm_sql_postgresql: Status: PGRES_COMMAND_OK rlm_sql_postgresql: affected rows = 1 rlm_sql (sql): Released sql socket id: 2 modcall[post-auth]: module "sql" returns ok for request 7 modcall: leaving group post-auth (returns ok) for request 7 Sending Access-Accept of id 15 to 127.0.0.1 port 32776 Finished request 7 Going to the next request --- Walking the entire request list --- Waking up in 3 seconds... --- Walking the entire request list --- Cleaning up request 6 ID 11 with timestamp 448eb25e Waking up in 3 seconds... --- Walking the entire request list --- Cleaning up request 7 ID 15 with timestamp 448eb261 Nothing to do. Sleeping until we see a request. THE REJECT --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 127.0.0.1:32776, id=253, length=68 User-Name = "testuser" User-Password = "password" NAS-IP-Address = 255.255.255.255 NAS-Port = 1812 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 5 modcall[authorize]: module "preprocess" returns ok for request 5 modcall[authorize]: module "chap" returns noop for request 5 modcall[authorize]: module "mschap" returns noop for request 5 modcall[authorize]: module "suffix" returns noop for request 5 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 5 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 5 radius_xlat: 'testuser' rlm_sql (sql): sql_set_user escaped user --> 'testuser' radius_xlat: ' ??SELECT id, UserName, Attribute, Value, Op ??FROM radcheck ??WHERE Username = 'testuser' ??ORDER BY id' rlm_sql (sql): Reserving sql socket id: 1 rlm_sql_postgresql: query: ??SELECT id, UserName, Attribute, Value, Op ??FROM radcheck ??WHERE Username = 'testuser' ??ORDER BY id rlm_sql_postgresql: Status: PGRES_TUPLES_OK rlm_sql_postgresql: affected rows = radius_xlat: 'SELECT radgroupcheck.id, radgroupcheck.GroupName, ??radgroupcheck.Attribute, radgroupcheck.Value,radgroupcheck.Op ??FROM radgroupcheck, usergroup ??WHERE usergroup.Username = 'testuser' AND usergroup.GroupName = radgroupcheck.GroupName ??ORDER BY radgroupcheck.id' rlm_sql_postgresql: query: SELECT radgroupcheck.id, radgroupcheck.GroupName, ??radgroupcheck.Attribute, radgroupcheck.Value,radgroupcheck.Op ??FROM radgroupcheck, usergroup ??WHERE usergroup.Username = 'testuser' AND usergroup.GroupName = radgroupcheck.GroupName ??ORDER BY radgroupcheck.id rlm_sql_postgresql: Status: PGRES_TUPLES_OK rlm_sql_postgresql: affected rows = radius_xlat: '...' rlm_sql_postgresql: query: REMOVED CODE rlm_sql_postgresql: Status: PGRES_TUPLES_OK rlm_sql_postgresql: affected rows = rlm_sql: Failed to create the pair: Unknown value for attribute ChilliSpot-Max-Output-Octets rlm_sql (sql): Error getting data from database radius_xlat: 'SELECT radgroupreply.id, radgroupreply.GroupName, radgroupreply.Attribute, ??radgroupreply.Value, radgroupreply.Op ??FROM radgroupreply,usergroup ??WHERE usergroup.Username = 'testuser' AND usergroup.GroupName = radgroupreply.GroupName ??ORDER BY radgroupreply.id' rlm_sql_postgresql: query: SELECT radgroupreply.id, radgroupreply.GroupName, radgroupreply.Attribute, ??radgroupreply.Value, radgroupreply.Op ??FROM radgroupreply,usergroup ??WHERE usergroup.Username = 'testuser' AND usergroup.GroupName = radgroupreply.GroupName ??ORDER BY radgroupreply.id rlm_sql_postgresql: Status: PGRES_TUPLES_OK rlm_sql_postgresql: affected rows = rlm_sql (sql): Released sql socket id: 1 modcall[authorize]: module "sql" returns ok for request 5 modcall: leaving group authorize (returns ok) for request 5 rad_check_password: Found Auth-Type Local auth: type Local auth: No password configured for the user auth: Failed to validate the user. Delaying request 5 for 1 seconds Finished request 5 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 127.0.0.1:32776, id=253, length=68 Sending Access-Reject of id 253 to 127.0.0.1 port 32776 --- Walking the entire request list --- Waking up in 3 seconds... --- Walking the entire request list --- Cleaning up request 4 ID 249 with timestamp 448eb1c7 Cleaning up request 5 ID 253 with timestamp 448eb1c7 Nothing to do. Sleeping until we see a request. Carlos Sobrinho wrote: > On Monday 12 June 2006 15:32, Alan DeKok wrote: > >> Stelio Gouveia <stelio(a)skyrove.com> wrote: >> >>> I have noticed that you cant rely on the sql method, even thou there is >>> a simul_count_query! In my case when i encounter a stale session i set >>> the AcctStopTime = AcctStartTime + AcctSessionTime. Although this seems >>> to work most of the time, its not fool proof as can be seen in this case >>> study: >>> > > I did something similar. In case of a stalled session, my Authentication > Backend tests this: > $sql = " > SELECT RadAcctId, > UserName, > TIME_TO_SEC(TIMEDIFF(NOW(), > ADDTIME(AcctStartTime,SEC_TO_TIME(AcctSessionTime)))) AS Stalled > FROM radacct > WHERE AcctStopTime = 0 AND > TIME_TO_SEC(TIMEDIFF(NOW(), ADDTIME(AcctStartTime,SEC_TO_TIME(AcctSessionTime)))) > 300 AND > UserName='$key' > "; > > Since I have Interrim-Interval to 120s, if its stalled its bigger than 300. > Then I just UPDATE the StopTime to the Start+Session. > > I get a stalled session for every user every time my NAS crash/reboot... > I just put a string "For security reasons... please wait 5m" in the login page. > > Best Regards > C.Sobrinho > > >> RADIUS accounting isn't foolproof because packets can be lost. >> >> Don't blame the server. It can't maker perfect decisions when it >> has imperfect information. >> >> Alan DeKok. >> >> - >> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html >> > >

1 0

Freeradius 1.1.1: 'sqlippools' concurrency problems
by Robles Rodriguez,Alejandro 13 Jun '06

13 Jun '06

Hi, I'm performance-testing freeradius with rlm_sqlippools support (an MySQL 5.0 Cluster) and have set up my SQLs in 'sqlipool.sqls' file as follows (regarding IP address allocation): ------------------ sqlippool.sqls ---------------------- # # This series of queries allocates an IP number # allocate_begin = "BEGIN" allocate-clear = "UPDATE radippool \ SET SGSNIPV4Address = '', \ NASIPAddress = '', \ username = '', \ calling_station_id = '', \ expiry_time = NOW() - INTERVAL 1 SECOND \ WHERE calling_station_id = '%{Calling-Station-Id}'" allocate-find = "SELECT ip_address FROM radippool \ WHERE pool_name = '%P' AND expiry_time < NOW() \ LIMIT 1 \ FOR UPDATE" allocate-update = "UPDATE radippool \ SET calling_station_id = '%i', \ username = '%u', \ NASIPAddress = '%{NAS-IP-Address}', \ expiry_time = NOW() + INTERVAL '%J' SECOND, \ SGSNIPV4Address = '%{3GPP-SGSN-Address}' \ WHERE ip_address = '%I'" allocate_commit = "COMMIT" allocate_rollback = "ROLLBACK" ------------------------------------------------------------ I'm using two 'radclient' that concurrently send 1000 Access-Requests each. All of the requests get answered positively and an IP returned. The problem is that in many instances these IP addresses are the "same" i.e. the 'allocate-find' doesn't seem to lock the returned row properly. I have read that MySQL with Cluster Storage Engine uses 'READ COMMITED' isolation level so I think it should be ok for my purposes (SQLs above). However the locks don't seem to work. Has anyone noticed this behavior with similar SQL setup on MySQL or similar Relational Database with similar isolation level and locking mechanisms? If so do you have any advice on how to prevent the above described problem? Thanks! Cheers, Alex.

2 1

Re: Freeradius 1.1.1: 'radclient' incorrect Authenticator
by Robles Rodriguez,Alejandro 13 Jun '06

13 Jun '06

"Alan DeKok" <aland(a)nitros9.org> wrote: >> I'm using freeradius 1.1.1 and trying to performance test it using >> as client the 'radclient' utility program. I have been experiencing >> some problems when load testing it since freeradius was responding >> in some cases responding to the client with old (already sent) >> responses when in fact the request was different (Attribute-wise at >> least). > The server shouldn't do that. The request authenticators are >different, so the requests should be treated as different. I have traced (ethereal) the requests I'm sending and only 256 are actually unique. Thereafter they are repeated over and over throughout the requests provided in the input file. It seems like the IDs are being reused. >> I might be mistaken but one odd thing is that I see a comment in the >> code saying that if a request has already been used then it needs to >> make sure that the Authenticator value is unique. However I don't >> see that happening in the code actually ('radclient.c', function >> 'request_free'): > Look at the rest of the code. See send_one_packet(), which creates >a unique vector. I agree there it's were the "vector" is set (by invoking the MD5 library) however, I don't see where that "vector" is made random for every request. Again I might be mistaken but the end result is what I described above, that the same request ID gets the exact same Authenticator value. The reasons why in many instances I don't get a "Re-send" of an old reply is simply because it might no longer be stored in the cache hence a brand new one generated. The latter behavior is dependent on the number of messages allowed in the cache and the time before they stale. I had this time set to 5 seconds and given the performance of a litle over 50 req/sec it was causing it to be right in the limit: (256req / 50req/sec ~= 5 sec). Thanks for the help. Regards, Alex.

2 1

Alvarion issue with radius accounting in Free Radius server
by Robert Dukes 13 Jun '06

13 Jun '06

Hello, I am writing to see if anyone on the list is using Alarion breezeAcess radios with free radius for accounting? If can you give me a helping hand, I am trying to get freeradius to understand what the radios is sending and have it mapped the attributes to the right sql fields. I can send some debug data if needed . We are in Russia working on a project for schools kids and the orphanges and we need ot account trafice with our network of Alvarion radios !!!! -- Robert Dukes

1 0

huntgroup
by Kartthik Raghunathan 13 Jun '06

13 Jun '06

Am using two linksys access points for my wireless client. In one of my access points i want to restrict the users connecting to it, ist possible to do this using huntgroup. If so can someone show some light or provide a sample config to do it. thanks, Kartthik -- _______________________________________________ Search for businesses by name, location, or phone number. -Lycos Yellow Pages http://r.lycos.com/r/yp_emailfooter/http://yellowpages.lycos.com/default.as…

4 7

called failed 408 Request timeout
by raviprakash sunkara 13 Jun '06

13 Jun '06

hi users, I need to say just "hello to all" I'm working on openser + radius.. Actually in LAN network its working fine... When I deploy the openser + radius in My main server which is in some other place . its successfully login and When I trying to make call its show the log messages as " Called Failed :- 408 Request TimeOut.... " ========================================================================= modparam('registrar","nat_flag',6) modparam("nathelper","natping_interval",30) modparam("nathelper","ping_nated_only",1) modparam("nathelper", "rtpproxy_sock", "unix:/var/run/rtpproxy.sock") #################33 modparam("rr", "enable_full_lr", 1) ############################################### route { # initial sanity checks -- messages with # max_forwards==0, or excessively long requests if (!mf_process_maxfwd_header("13")) { sl_send_reply("483","Too Many Hops........................!"); exit; }; if ( msg:len > max_len ) { sl_send_reply("513", "Message too big"); exit; }; # we record-route all messages -- to make sure that # subsequent messages will go through our proxy; that's # particularly good if upstream and downstream entities # use different transport protocol if(!method== "REGISTER") { record_route(); }; # loose-route processing if (loose_route()) { # add now 0n 9 setflag(1); acc_rad_request("200 ok "); t_relay(); exit; }; # account completed transactions via syslog if(uri==myself) { if(method=="REGISTER") { if(!radius_www_authorize("192.168.2.55")) { www_challenge("192.168.2.55","0"); exit; }; #consume_credentials(); save("location"); if (m_dump()) { log("MSILO: offline messages dumped - if they were\n"); }else{ log("MSILO: no offline messages dumped\n"); }; exit; }; if(method=="INVITE"|| method=="ACK") { record_route(); acc_rad_request("200"); if(isflagset(6)) { force_rtp_proxy("e"); }; #setflag(1); t_on_reply("1"); }; /* if (method=="BYE") { record_route(); }; */ if (method=="MESSAGE") { log(1, "MESSAGE\n"); setflag(1); /* set for accounting (the same value as in log_flag!) */ }; fix_nat_contact(); if (method=="BYE" || method=="CANCEL") { #log (1, "BYE or CANCEL\n"); #setflag(1); acc_rad_request("200"); #acc_rad_request("Stop"); unforce_rtp_proxy("e"); #setflag(1); }; if(!lookup("location")) { sl_send_reply("404","Woo......... NOt found"); }; }; if(!t_relay()) { sl_reply_error(); }; lookup("aliases"); #setflag(2); exit; } onreply_route[1] { if( isflagset96) && status=~"[0-9][0-9][0-9]") { fix_nat_contact(); force_rtp_proxy("e"); }; } ========================================================================= -- Thanks and Regards with cheers Sunkara Ravi Prakash (Voip Developer) Hyperion Technology www.hyperion-tech.com <b>

2 1

nas table
by Cliff Hayes 13 Jun '06

13 Jun '06

Hello, I am a new user trying to set up FreeRadius on Fedora 5. I purchased a copy of Hassell's Radius book; didn't seem to help much. I was able to get it to work with clients.conf Then, I converted to MySQL. I think I'm supposed to copy the clients into the nas table, so I did that, but the table doesn't appear to be being used. What do I have to do to use the table? Am I supposed to be using the table? Cliff

2 2

sql_log outputs truncated sql-statements
by Hans-Peter Fuchs 13 Jun '06

13 Jun '06

I have updated to freeradius1.1.2 under linux rh as3 and want to use the sql_log module. Most of the lines sql_log outputs are valid sql-statements, but there are also a lot of truncated lines: INSERT INTO radacct (AcctSessionId, AcctUniqueId, UserName, Realm ,NASIPAddress , NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAut hentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProt ocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values('00045F05', '13b1 c0e611f3176f', 'a2757389', 'NULL', '172.20.24.2', '20205', 'ISDN', '2006-06-13 14:13:28', '0', '0', 'RADIUS', '', '', '0', '0', '276760', '2217882770', '', ' Framed-User', 'PPP', ' ', '0', '0'); UPDATE radacct SET FramedIPAddress = '134.95.88.79', AcctSessionTime = '', Ac ctInputOctets = '', ***** here is something missing **** INSERT INTO radacct (AcctSessionId, AcctUniqueId, UserName, Realm ,NASIPAddress , NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAut hentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProt ocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values('0000E964', 'b622 40b32eb6d15a', 'zhangn(a)uni-koeln.de', 'uni-koeln.de', '195.14.247.90', '0', 'Vi rtual', '2006-06-13 14:13:28', '0', '0', 'RADIUS', '', '', '0', '0', '', '', ' ', 'Framed-User', 'PPP', '134.95.91.102 ', '0', '0'); Configuration of sql_log: sql_log { path = ${radacctdir}/sql-relay acct_table = "radacct" postauth_table = "radpostauth" # Start = "INSERT INTO ${acct_table} (AcctSessionId, UserName, \ # NASIPAddress, FramedIPAddress, AcctStartTime, AcctStopTime, \ # AcctSessionTime, AcctTerminateCause) VALUES \ # ('%{Acct-Session-Id}', '%{User-Name}', '%{NAS-IP-Address}', \ # '%{Framed-IP-Address}', '%S', '0', '0', '');" # Stop = "INSERT INTO ${acct_table} (AcctSessionId, UserName, \ # NASIPAddress, FramedIPAddress, AcctStartTime, AcctStopTime, \ # AcctSessionTime, AcctTerminateCause) VALUES \ # ('%{Acct-Session-Id}', '%{User-Name}', '%{NAS-IP-Address}', \ # '%{Framed-IP-Address}', '0', '%S', '%{Acct-Session-Time}', \ # '%{Acct-Terminate-Cause}');" # Alive = "INSERT INTO ${acct_table} (AcctSessionId, UserName, \ # NASIPAddress, FramedIPAddress, AcctStartTime, AcctStopTime, \ # AcctSessionTime, AcctTerminateCause) VALUES \ # ('%{Acct-Session-Id}', '%{User-Name}', '%{NAS-IP-Address}', \ # '%{Framed-IP-Address}', '0', '0', '%{Acct-Session-Time}','');" # Start = "INSERT INTO ${acct_table} (AcctSessionId, AcctUniqueId, UserName, \ Realm ,NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, \ AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, \ AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, \ AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, \ AcctStartDelay, AcctStopDelay) values('%{Acct-Session-Id}', \ '%{Acct-Unique-Session-Id}', '%{User-Name}', '%{Realm}', \ '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', '0', '0', \ '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', \ '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', \ '%{Framed-IP-Address} ', '%{Acct-Delay-Time}', '0');" Stop = "UPDATE ${acct_table} SET AcctStopTime = '%S', \ AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Octet s}', \ AcctOutputOctets = '%{Acct-Output-Octets}', AcctTerminateCause = \ '%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time}', \ ConnectInfo_stop = '%{Connect-Info}' \ WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{User-Name}' \ AND NASIPAddress = '%{NAS-IP-Address}' AND AcctStopTime = '0';" Alive = "UPDATE ${acct_table} \ SET FramedIPAddress = '%{Framed-IP-Address}', \ AcctSessionTime = '%{Acct-Session-Time}', \ AcctInputOctets = '%{Acct-Input-Octets}', AcctOutputOctets = '%{Acct-Output-Octets}' \ WHERE AcctSessionId = '%{Acct-Session-Id}' \ AND UserName = '%{User-Name}' \ AND NASIPAddress= '%{NAS-IP-Address}';" Post-Auth = "INSERT INTO ${postauth_table} \ (user, pass, reply, date) VALUES \ ('%{User-Name}', '%{User-Password:-Chap-Password}', \ '%{reply:Packet-Type}', '%S');" } is this a bug or my stupidness? Grüße Hans-Peter Fuchs Hans-Peter Fuchs - RZKR, Zimmer 20 Zentrum fuer angewandte Informatik - Universitaetsweiter Service RRZK Universität zu Köln - Tel: 0221-470-6972

2 1