- Freeradius-Users - lists.freeradius.org

Re[4]: how get current TRAFFIC (ACCT) ?
by Andreas Sokov 15 Dec '05

15 Dec '05

Hi. [ You wrote Thursday, December 15, 2005, 2:52:10 PM ] =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= SE> Well you have set up your pppoe-server to send the accounting information SE> only at the end of the session. If connection is "lost", you will have the SE> accounting data in your database with AcctTerminateCause something like SE> "terminated by server". SE> The session you have sent me is just an open session. SE> As I said - you can set the Acct-Interim-Interval attribute so that your SE> server sends the accouting packets every few minutes for example. i try i insert into radreply : id UserName Attribute op Value 1 test Framed-IP-Address := 192.168.96.10 4 test Acct-Status-Type := Interim-Update 5 test Acct-Interim-Interval := 60 6 test Framed-IP-Netmask := 255.255.252.0 but it is not worked you wrote : add attribute into dictionary file tell me please IN WHAT FILE I NEED ADD IT ? and what will have to line ? into /etc/freeradius folder i c one file ./dictionaty : # # This is the master dictionary file, which references the # pre-defined dictionary files included with the server. # # Any new/changed attributes MUST be placed in this file, as # the pre-defined dictionaries SHOULD NOT be edited. # # $Id: dictionary.in,v 1.4 2004/04/14 15:26:20 aland Exp $ # # # The filename given here should be an absolute path. # $INCLUDE /usr/share/freeradius/dictionary # # Place additional attributes or $INCLUDEs here. They will # over-ride the definitions in the pre-defined dictionaries. # # See the 'man' page for 'dictionary' for information on # the format of the dictionary files. # # If you want to add entries to the dictionary file, # which are NOT going to be placed in a RADIUS packet, # add them here. The numbers you pick should be between # 3000 and 4000. # #ATTRIBUTE My-Local-String 3000 string #ATTRIBUTE My-Local-IPAddr 3001 ipaddr #ATTRIBUTE My-Local-Integer 3002 integer what i need add there ? like this : ATTRIBUTE Acct-Interim-Interval 3003 integer ATTRIBUTE Acct-Status-Type 3004 string ?? SE> -----Original Message----- SE> From: Andreas Sokov [mailto:andre.s@j8.com.ru] SE> Sent: Donnerstag, 15. Dezember 2005 12:42 SE> To: freeradius-users(a)lists.freeradius.org SE> Cc: edvin.seferovic(a)kolp.at SE> Subject: Re[2]: how get current TRAFFIC (ACCT) ? SE> Hi. SE> [ You wrote Thursday, December 15, 2005, 2:14:10 PM ] SE> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- SE> =-= SE>> Hi, SE>> for traffic information - look at the RADACCT table in your mysql SE> database SE>> called radius. A simple sql query could be - SE> -) SE> i know what information about traffic collect in that table. SE> But please, look at this : SE> RadAcctId AcctSessionId AcctUniqueId UserName Realm SE> NASIPAddress NASPortId NASPortType AcctStartTime AcctStopTime SE> AcctSessionTime AcctAuthentic ConnectInfo_start SE> ConnectInfo_stop AcctInputOctets AcctOutputOctets SE> CalledStationId CallingStationId AcctTerminateCause SE> ServiceType FramedProtocol FramedIPAddress SE> AcctStartDelay AcctStopDelay SE> 19 43A154E9151B00 835535e0e65d3ace test SE> 213.159.102.146 0 Virtual 2005-12-15 14:35:05 0000-00-00 SE> 00:00:00 0 RADIUS 0 0 SE> Framed-User PPP 192.168.96.10 0 0 SE> 18 43A13CE87DBE00 73e57ea8afc72d3b test SE> 213.159.102.146 0 Virtual 2005-12-15 12:52:40 2005-12-15 SE> 14:10:12 4652 RADIUS 6857793 7229167 SE> User-Request Framed-User PPP 192.168.96.10 0 0 SE> look at id=19 into AcctStopTime and SE> while session OPENS! the value AcctInputOctets AcctOutputOctets == 0 SE> !!! SE> and if session will be open during 20 hourse - we can not know that current SE> value of SE> AcctInputOctets AcctOutputOctets ?! SE> What you think about it ? SE>> SELECT SUM(AcctOutputOctets) as download, SUM(AcctInputOctets) as upload SE>> GROUP BY Username ORDER BY Username ASC; SE>> This should give you a list of your users and their upload and download SE>> traffic ( list is sorted ascending by usernames ). SE>> Regards, SE>> Edvin SE>> -----Original Message----- SE>> From: freeradius-users-bounces(a)lists.freeradius.org SE>> [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of SE> Andreas SE>> Sokov SE>> Sent: Donnerstag, 15. Dezember 2005 11:33 SE>> To: freeradius-users(a)lists.freeradius.org SE>> Subject: how get current TRAFFIC (ACCT) ? SE>> Importance: High SE>> Hi, freeradius-users. SE>> Linux Debian, # uname -a SE>> Linux g48 2.6.14.3-1 #4 Sun Dec 11 05:57:57 MSK 2005 i686 GNU/Linux SE>> #freeradius -v SE>> freeradius: FreeRADIUS Version 1.0.5, for host , built on Oct 16 2005 at SE>> 11:56:56 SE>> # mysql -V SE>> mysql Ver 14.12 Distrib 5.0.13-rc, for pc-linux-gnu (i486) using SE> readline SE>> 5.0 SE>> TELL ME PLEASE : HOW I CAN GET CURRENT TRAFFIC INFORMATION ? SE>> I need to kno how much traffic user eat before it close your session. SE>> Do Know anybody ? SE>> I try radwho, radlast - but they show all but acct information SE>> Try radacct - but it is not show anything info, just run and no SE> information SE>> ... SE>> HELP PLEASE. SE> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- SE> =-= SE> -- ------------------------------------- SE> Best Regards, Andreas SE> Thursday, December 15, 2005 2:36:16 PM SE> Web-Media L.t.d. SE> +7 (901) 301-5811 SE> ICQ UIN 177624 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -- ------------------------------------- Best Regards, Andreas Thursday, December 15, 2005 2:55:28 PM Web-Media L.t.d. +7 (901) 301-5811 ICQ UIN 177624

2 1

Re[2]: how get current TRAFFIC (ACCT) ?
by Andreas Sokov 15 Dec '05

15 Dec '05

Hi. [ You wrote Thursday, December 15, 2005, 2:14:10 PM ] =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= SE> Hi, SE> for traffic information - look at the RADACCT table in your mysql database SE> called radius. A simple sql query could be - -) i know what information about traffic collect in that table. But please, look at this : RadAcctId AcctSessionId AcctUniqueId UserName Realm NASIPAddress NASPortId NASPortType AcctStartTime AcctStopTime AcctSessionTime AcctAuthentic ConnectInfo_start ConnectInfo_stop AcctInputOctets AcctOutputOctets CalledStationId CallingStationId AcctTerminateCause ServiceType FramedProtocol FramedIPAddress AcctStartDelay AcctStopDelay 19 43A154E9151B00 835535e0e65d3ace test 213.159.102.146 0 Virtual 2005-12-15 14:35:05 0000-00-00 00:00:00 0 RADIUS 0 0 Framed-User PPP 192.168.96.10 0 0 18 43A13CE87DBE00 73e57ea8afc72d3b test 213.159.102.146 0 Virtual 2005-12-15 12:52:40 2005-12-15 14:10:12 4652 RADIUS 6857793 7229167 User-Request Framed-User PPP 192.168.96.10 0 0 look at id=19 into AcctStopTime and while session OPENS! the value AcctInputOctets AcctOutputOctets == 0 !!! and if session will be open during 20 hourse - we can not know that current value of AcctInputOctets AcctOutputOctets ?! What you think about it ? SE> SELECT SUM(AcctOutputOctets) as download, SUM(AcctInputOctets) as upload SE> GROUP BY Username ORDER BY Username ASC; SE> This should give you a list of your users and their upload and download SE> traffic ( list is sorted ascending by usernames ). SE> Regards, SE> Edvin SE> -----Original Message----- SE> From: freeradius-users-bounces(a)lists.freeradius.org SE> [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Andreas SE> Sokov SE> Sent: Donnerstag, 15. Dezember 2005 11:33 SE> To: freeradius-users(a)lists.freeradius.org SE> Subject: how get current TRAFFIC (ACCT) ? SE> Importance: High SE> Hi, freeradius-users. SE> Linux Debian, # uname -a SE> Linux g48 2.6.14.3-1 #4 Sun Dec 11 05:57:57 MSK 2005 i686 GNU/Linux SE> #freeradius -v SE> freeradius: FreeRADIUS Version 1.0.5, for host , built on Oct 16 2005 at SE> 11:56:56 SE> # mysql -V SE> mysql Ver 14.12 Distrib 5.0.13-rc, for pc-linux-gnu (i486) using readline SE> 5.0 SE> TELL ME PLEASE : HOW I CAN GET CURRENT TRAFFIC INFORMATION ? SE> I need to kno how much traffic user eat before it close your session. SE> Do Know anybody ? SE> I try radwho, radlast - but they show all but acct information SE> Try radacct - but it is not show anything info, just run and no information SE> ... SE> HELP PLEASE. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -- ------------------------------------- Best Regards, Andreas Thursday, December 15, 2005 2:36:16 PM Web-Media L.t.d. +7 (901) 301-5811 ICQ UIN 177624

2 1

Re[2]: HELP - Freeradius+mysql - LOST ACCOUNTING
by Andreas Sokov 15 Dec '05

15 Dec '05

Hi. [ You wrote Thursday, December 15, 2005, 2:14:10 PM ] =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= SE> Hi, SE> use Acct-Interim-Interval attribute I TRY! and no changes Tell me please in that table i need write this attribute ? SE> ( maybe you will need to change your dictionary file ). yes, i had search this attribute and not foubd in any dictionaty Help me please - in what file of dictionalty i need write it ? SE> This also depends on pppoe which is using radclient - I SE> am not sure if it is supported by your server. I am using Poptop with SE> freeradius and it works. TEll me please what is PopTop ? SE> Regards, SE> Edvin SE> -----Original Message----- SE> From: freeradius-users-bounces(a)lists.freeradius.org SE> [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Andreas SE> Sokov SE> Sent: Donnerstag, 15. Dezember 2005 11:29 SE> To: freeradius-users(a)lists.freeradius.org SE> Subject: HELP - Freeradius+mysql - LOST ACCOUNTING SE> Importance: High SE> Hi, freeradius-users-bounces. SE> I use pppoe+ppp+freeradius+mysql on Linux Debian. SE> When user connect by pppoe - into radacct table insertes records, where SE> inOctets & out ==0 SE> If session will be 20 hours - data about acct will be updated after session SE> will be close. SE> But if session will be lost - i lost ALL DATA ABOUT TRAFFIC (ACCT) SE> Tel me please - how i can update with interval current traffic for ever SE> connected users ? =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -- ------------------------------------- Best Regards, Andreas Thursday, December 15, 2005 2:42:04 PM Web-Media L.t.d. +7 (901) 301-5811 ICQ UIN 177624

1 0

HELP - Freeradius+mysql - LOST ACCOUNTING
by Andreas Sokov 15 Dec '05

15 Dec '05

Hi, freeradius-users-bounces. I use pppoe+ppp+freeradius+mysql on Linux Debian. When user connect by pppoe - into radacct table insertes records, where inOctets & out ==0 If session will be 20 hours - data about acct will be updated after session will be close. But if session will be lost - i lost ALL DATA ABOUT TRAFFIC (ACCT) Tel me please - how i can update with interval current traffic for ever connected users ? -- Best Regards, Andreas Thursday, December 15, 2005 3:22:10 AM "Do not hesitate to ask me" ICQ UIN 177624 http://ServersLease.net - Offshore Dedicated Servers, Offshore Collocation http://HOST-LUX.RU - Offshore Virtual Hosting, Web Hosting, as low as 5$ per 1Gb HDD/month http://Reg-Master.net - Register`s Master of Domains http://Web-Media.Ru - Web Design studio. http://VEHICLE.RU - автомобили на заказ из США

2 1

how get current TRAFFIC (ACCT) ?
by Andreas Sokov 15 Dec '05

15 Dec '05

Hi, freeradius-users. Linux Debian, # uname -a Linux g48 2.6.14.3-1 #4 Sun Dec 11 05:57:57 MSK 2005 i686 GNU/Linux #freeradius -v freeradius: FreeRADIUS Version 1.0.5, for host , built on Oct 16 2005 at 11:56:56 # mysql -V mysql Ver 14.12 Distrib 5.0.13-rc, for pc-linux-gnu (i486) using readline 5.0 TELL ME PLEASE : HOW I CAN GET CURRENT TRAFFIC INFORMATION ? I need to kno how much traffic user eat before it close your session. Do Know anybody ? I try radwho, radlast - but they show all but acct information Try radacct - but it is not show anything info, just run and no information ... HELP PLEASE. -- Best Regards, Andreas Thursday, December 15, 2005 1:29:42 PM "Do not hesitate to ask me" ICQ UIN 177624 http://ServersLease.net - Offshore Dedicated Servers, Offshore Collocation http://HOST-LUX.RU - Offshore Virtual Hosting, Web Hosting, as low as 5$ per 1Gb HDD/month http://Reg-Master.net - Register`s Master of Domains http://Web-Media.Ru - Web Design studio. http://VEHICLE.RU - автомобили на заказ из США

2 1

chillispot, apache2, freeradius: my experience and howto
by Christophe Gravier 15 Dec '05

15 Dec '05

Hello, I wrote a little "how to" of what I have done in order to make freeradius working with chilli, regarding my configuration. Because it involves several services (apache ssl, freeradius, ldap, sql, ..) I didn't really find a suitable complete how to for my needs. That's the reason why I wrote mine (in french sorry) but then translated it into english and posted it to ChilliSpot forum (http://www.chillispot.org/forum/viewtopic.php?p=3035#3035) It aims at being exhausted, explaining thing from apache, ssl chilli, freeradius and next ldap (as soon I get it working). As someone told me on the list, I should not forget freeradius wiki ! So, do you think this is valuable ? (it covers not only freeradius in fact) . If yes, where in the wiki is it suitable to propose this ? Regards, Christophe. PS: I sent this mail on chillispot ml as well. -- Christophe Gravier Laboratoire DIOM, groupe SATIn - Doctorant ISTASE - Ingénieur d'études Perso: http://perso.univ-st-etienne.fr/gravchri/ SATIn: http://www.istase.com/satin Tel : 04 7748 5034 A mediter: http://www.fsffrance.org/news/article2005-11-25.fr.html

1 0

A draft of a complete howto of my chilli experience.
by Christophe Gravier 15 Dec '05

15 Dec '05

Hello, I wrote a little "how to" of what I have done in order to make chilli working, regarding my configuration. Because it involves several services (apache ssl, freeradius, ldap, sql, ..) I didn't really find a suitable complete how to for my needs. That's the reason why I wrote mine (in french sorry) but then translated it into english and posted it to ChilliSpot forum (http://www.chillispot.org/forum/viewtopic.php?p=3035#3035) Just feel free to add your comment to get it improved and share your opinion. Regards, Christophe. -- Christophe Gravier Laboratoire DIOM, groupe SATIn - Doctorant ISTASE - Ingénieur d'études Perso: http://perso.univ-st-etienne.fr/gravchri/ SATIn: http://www.istase.com/satin Tel : 04 7748 5034 A mediter: http://www.fsffrance.org/news/article2005-11-25.fr.html

1 0

Flexible clients' addresses?
by Martin Pauly 15 Dec '05

15 Dec '05

Hi, I have some 150 new radius clients waiting at my doorstep. Unfortuantely their IP addresses are _not_ within a single Subnet. Most of them are, however grouped into a bunch of 25 pseudo-subnets of the following kind: client 192.168.<n>.240/28 { secret = somesecret shortname = somename } with n between 0 and 254. Rather than putting 25+ entries of this kind into clients.conf, I am looking for a more flexible way of client specification. I have two ways in mind to approach the problem: Approach 1: Specify a subnet mask with a "hole": client 192.168.0.240/255.255.0.28 { secret = somesecret shortname = somename } describes what I need when interpreted with bitwise netmask semantics. This is currently not supported, but for what reason -- considererd insane or simply not desired by anyone yet? Approach 2 (more general): Store the property of being a radius client in my LDAP database. I found some older postings related to this: On Jan 30, 2005, Alan walters wrote: > > We have free radius working with ldap I have been looking for a way > > to add our clients files o our ldap has anyone had any success with this reply from "Mitchell, Michael J" <Michael.Mitchell(a)team.telstra.com>: > I've actually been looking at this over the weekend. Have written some > code, but haven't tested it yet. I'm hoping to get to that today > sometime. I based it largely on what was done in the sql module, so it > may need a bit of refinement. > > I believe Kostas has it on his todo list also. I'm happy to submit a > "draft patch" for review and comment if it helps get this completed. Has there been any progress on that? I quick look at src/main/client.c has revealed nothing so far. Thanks, Martin -- Dr. Martin Pauly Fax: 49-6421-28-26994 HRZ Univ. Marburg Phone: 49-6421-28-23527 Hans-Meerwein-Str. E-Mail: pauly(a)HRZ.Uni-Marburg.DE D-35032 Marburg

2 1

Forwarding Accounting Requests
by David Bickle 15 Dec '05

15 Dec '05

Hi, I am looking to have FreeRadius forward accounting stop/start packets to a third party device. I understand this can be done by configuring the proxy .conf. The problem has to do with how the accounting requests are forwarded. In other versions of Radius it is possible to forward accounting packets with an attribute setting that ensures the forwarding server doesn't listen for a response. I would like to set this same configuration in FreeRadius but it doesn't appear that this functionality. Is there a way to forward accounting request packets (start/stop) without requiring the forwarding server to listen for responses? Thanks in advance.

1 0

Multiple Home Servers
by maxim maxime 14 Dec '05

14 Dec '05

Hello, I have a 0.9.2 server working as a proxy to three ISPs. Since they've just decided to work together, they still have some dial-up users. Their new users will be generated with a proper prefix, but all of the old users (with no prefix/suffix) will go through NULL realm. Although I can have multiple NULL realms, but only if one server replies with reject, it will not go through other realms (it will fail-over if no answer). How can I tell freeradius to go to next server if the username was not found in the previous home server? It is possible with modules as mentioned in configurable_failover and changing "action on results". How about in proxy? Thanks. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0