Hi Alan, Thanks a lot for your help to explain this to me.
oh. generally you do all the accounting and pre-paid stuff and timing of sessions etc on the SERVER. all the required bits are already there. various rlm_* modules that can interface nicely to a database backend etc.
But I still have this puzzle inside my head :) My scenario is that the client will do some meassurement after it receive access_accept from server. I think I can trigger this by writing shell script when the packet access_accept received. (am i right?) Second question : How do I learn to use the command line to run client? I just using this command to send access_request for user name Maria, # echo "User-Name = Maria, User-Password = testing" | radclient 10.1.0.76 auth testing123 How do I find other command to start and stop accounting? I think I can use the same command like above just change the auth become acct. But the problem is how do i tell the server that I want to stop the acct session?
And for the process interaction that i want to see (between client and server) is for example the case of session timeout. How do i see if the client sending the message to the server.How do I make untill all of these information show in let say tcpdump.
you can see the stuff with tcpdump (in the usual way) but there are special filters for RADIUS in ethereal package - which some people prefer to use when looking at the network stuff. you could look at the server end still - since you can see all the into that the server sends and that the server receives. if you have a problem with the network so that packets dont arrive than thats another issue altogether.
In the debug out (when i run radiusd -X) it only written
"Nothing to do. Sleeping until we see a request."
ah. if you are ONLY seeing this and yet you are trying to run the radclient on another box...then the packets arent arriving to the server. in this case perhaps there is a firewall in the way (usual suspect and reason). if you have misconfigured the client/server relationship (wrong passphrase etc) then you would see info...and it would tell you!
alan
I finally make progres so the server send this access-Accept to the client. Sending Access-Accept of id 131 to 10.1.0.15:32768 Framed-Protocol = PPP Session-Timeout = 600 Login-Service = Telnet Idle-Timeout = 360 But why the session-TImeout is not working? I already set this attributes in users file. seems no sign that it works. How do I see if the time already passed, the client will be disconnected from server? Sorry for long questions. I really apreciate if you want to answer them. Have a great weekend San __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com