- Freeradius-Users - lists.freeradius.org

proxy accounting to two other radius servers
by Bill Schoolfield 31 Mar '16

31 Mar '16

I have a accounting only proxy in place to a single radius server. Works fine. I now need to proxy certain accounting packets to another server. Both request types have the same realm but there is a unique suffix to the username portion. I looked over the docs but I can't seem to figure out how to modify the configuration to do this. Can someone point me in the right direction? Bill

2 3

performance issues freeradius 2.1.12
by khouzam yaghi 30 Mar '16

30 Mar '16

hi i have around 10k users, i am creating a module for each acct-status-type and this module will call a php script in the accounting section, it is as follow if(Acct-Status-Type == "Start") { user-start } elsif (Acct-Status-Type == "Interim-Update") { user-interm-update } elsif(Acct-Status-Type == "Stop") { user-stop } is this a good design or there is a better one?? everything is working perfect, i have around 15 mikrotik nases, but sometimes i am receiving an error in the radius.log which is receiving conflicting packets , and the error is always from a specific nas i.e nas10, is it the nas that is not receiving the packet from the server or my server is slow, my database is well indexed + i am using an SSD hardisk

5 6

Re: performance issues freeradius 2.1.12
by khouzam yaghi 30 Mar '16

30 Mar '16

My cleanupdelay is set to 7 seconds, i am receiving alot of errors: receiving conflicting packet from nas11 , only after rebooting this nas, it will work fine, and after some hours , the error will come again, Regarding the sql database can you post more information on how to deal with it, In my database each service has its own speed and after a specific limit it will slow down( i.e 2MB after 1.5gb will drop to 1MB while 3MB after 2GB will drop to 1.5MB) This can be done using only sql database? Is it better use perl instead php? Will it show a big difference? On Wed, Mar 30, 2016 at 3:30 PM, <khouzamyaghi(a)gmail.com> wrote: > My cleanupdelay is set to 7 seconds, i am receiving alot of errors: > receiving conflicting packet from nas11 , only after rebooting this nas, it > will work fine, and after some hours , the error will come again, > > > Regarding the sql database can you post more information on how to deal > with it, > > In my database each service has its own speed and after a specific limit > it will slow down( i.e 2MB after 1.5gb will drop to 1MB while 3MB after 2GB > will drop to 1.5MB) > This can be done using only sql database? > > Is it better use perl instead php? Will it show a big difference? > > > On Mar 30, 2016, at 2:38 PM, Nathan Ward <lists+freeradius(a)daork.net> > wrote: > > > > Hi, > > > >> On 30/03/2016, at 22:47, khouzam yaghi <khouzam.yaghi(a)gmail.com> wrote: > >> > >> the php script calculate the overall quota for the user, the monthly and > >> the daily , each time i got an interim update for a user i added the > >> acctinputoctet and acctoutputoctet to the monthly and daily quota (daily > >> quota is to be reset everyday at 12 midnight) and it checks if the users > >> exceeds his daily or monthly quota it will decrease his speed as > specified > >> in the database, the script also take care of the free time, if the isp > >> specify a freetime , the server will not add the acctinputoctet and > >> acctoutputoctet to the quota at freetime. > >> > >> is it better to use perl instead of php or what do you think is better?? > > > > These things could be done directly with SQL to your database, which is > what I’d do. > > > >> what about receiving conflicting packets error (only from one nas out > of 15 > >> nases). is it the nas that is overloaded or the server is slow? > > > > > > I don’t have enough information to answer that. It’s strange that it’s > only that NAS, but, maybe that NAS just happens to be busy so there’s more > chance it happens there. > > > > Is the server replying before the NAS retransmits the request packet? > That would probably indicate packet loss in the downstream direction > towards the NAS. > > > > Perhaps you can post a debug of this happening. > > > > -- > > Nathan Ward > > > > - > > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

2 2

Re: Simultaneous-Use
by khouzam yaghi 30 Mar '16

30 Mar '16

The freeradius uses the checkrad only when it sees a duplicate user trying to connect , so it access the nas using snmp or telnet to check if the session is available on the nas or it is stuck only on the server On Wed, Mar 30, 2016 at 3:23 PM, <khouzamyaghi(a)gmail.com> wrote: > The freeradius uses the checkrad only when it sees a duplicate user trying > to connect , so it access the nas using snmp or telnet to check if the > session is available on the nas or it is stuck only on the server > > > On Mar 30, 2016, at 3:03 PM, Aurélio de Souza Ribeiro Neto < > netolistas(a)mpc.com.br> wrote: > > > > Hi Everyone, > > > > How the simultaneous-use check works? > > > > When FreeRadius receives an Authentication NAS Pack, it uses checkrad > or queries to check if user is on or not? > > > > Thanks > > > > Aurelio > > - > > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

1 0

Re: Interim-Update
by khouzam yaghi 30 Mar '16

30 Mar '16

you can use the checkrad script which is already available with freeradius, you just need to enable it by inserting in the nas table (if you are using database) or clients.conf file the type of your nas. checkrad checks the nas to see if the user is already logged in the nas or not, if the user is not logged in, then it will end the session for this user and start a new session. On Wed, Mar 30, 2016 at 2:02 AM, khouzam yaghi <khouzamyaghi(a)gmail.com> wrote: > you can use the checkrad script which is already available with > freeradius, you just need to enable it by inserting in the nas table (if > you are using database) or clients.conf file the type of your nas. checkrad > checks the nas to see if the user is already logged in the nas or not, if > the user is not logged in, then it will end the session for this user and > start a new session. > > On Tue, Mar 29, 2016 at 10:13 PM, Bill Schoolfield <bill(a)billmax.com> > wrote: > >> You not going to be able to rely on the accounting packet stop receipt to >> release the ip. There's a SNMP script that you can use (i forget the name) >> to pol the nas for connections. If not found then you manually release the >> ip in the table. >> >> Someone here will know the details. >> >> Bill >> >> >> On 3/29/2016 1:48 PM, Aurélio de Souza Ribeiro Neto wrote: >> >>> Thanks Bill, >>> >>> Lost (not received) accounting packets will not have any affect on your >>>> customer's connection. >>>> >>>> For my customer's no affect but for my dhcp_pool I lost an IP. >>> >>> Aurélio >>> >>> >>> >>> - >>> List info/subscribe/unsubscribe? See >>> http://www.freeradius.org/list/users.html >>> >> >> - >> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html >> > >

2 1

(no subject)
by khouzam yaghi 29 Mar '16

29 Mar '16

hi i have around 10k users, i am creating a module for each acct-status-type and this module will call a php script in the accounting section, it is as follow if(Acct-Status-Type == "Start") { user-start } elsif (Acct-Status-Type == "Interim-Update") { user-interm-update } elsif(Acct-Status-Type == "Stop") { user-stop } is this a good design or there is a better one?? everything is working perfect, i have around 15 mikrotik nases, but sometimes i am receiving an error in the radius.log which is receiving conflicting packets , and the error is always from a specific nas i.e nas10, is it the nas that is not receiving the packet from the server or my server is slow, my database is well indexed + i am using an SSD hardisk

1 0

Re: Support for EAP-AKA in free radius
by manjunath uthappa ponnachana 29 Mar '16

29 Mar '16

Hi, Heard there is patch to test eap-aka with lower version of freeradius.Please provide me the patch and steps to configure freeradius using this patch for eap-aka. Thanks & regardsManjunath From: Alan DeKok <aland(a)deployingradius.com> Sent: Sun, 27 Mar 2016 19:26:45 To: pu_manjunath(a)rediffmail.com, FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Subject: Re: Support for EAP-AKA in free radius On Mar 27, 2016, at 3:02 AM, manjunath uthappa ponnachana <pu_manjunath(a)rediffmail.com> wrote: > Wanted to know whether free radius support EAP-AKA.Heard there is some patch available for EAP-AKA in free radius.Please let me know &nbsp;the link/source from where this patch can be downloaded.It will be helpful, if somebody can send the steps for configuring free radius with EAP-AKA.  If FreeRADIUS supported EAP-AKA, it would include EAP-AKA in the main releases.  Alan DeKok.

1 0

Modify Accounting records
by Andrés Gómez 29 Mar '16

29 Mar '16

Hi dear list. I have a trouble. I'm using a NAS that sends its accounting data fine, but it send its MAC address in the calledstationid data, but it use a " - " as separator instead of ":" like my other NAS. Is there a way to change that " - " character by the " : " when it arrives? May be using ulang? Regards -- *C. Andrés Gómez R.*

4 7

Freeradius vs bash control
by Syed Jahanzaib 28 Mar '16

28 Mar '16

Greetings. I need some recommendation. Is it good idea to control users disconnection / coa via freeradius (via accounting section ) ? Or its better to do via bash script which pulls data from the mysql and take action accordingly like disconnect expired / over quota users or change package accordingly or aimilar actions?

3 2

Support for EAP-AKA in free radius
by manjunath uthappa ponnachana 27 Mar '16

27 Mar '16

Hi, Wanted to know whether free radius support EAP-AKA.Heard there is some patch available for EAP-AKA in free radius.Please let me know  the link/source from where this patch can be downloaded.It will be helpful, if somebody can send the steps for configuring free radius with EAP-AKA. Thanks & regardsManjunath

4 3