***** Mysql ********** mysql> select * from radcheck where UserName='test2'; +----+----------+--------------------+----+-------+ | id | username | attribute | op | value | +----+----------+--------------------+----+-------+ | 2 | test2 | Cleartext-Password | := | tstg | | 13 | test2 | Max-Daily-Session | := | 300 | +----+----------+--------------------+----+-------+ ****************** default ************* authorize { preprocess chap mschap digest eap sql noresetcounter dailycounter monthlycounter pap } accounting { unix radutmp sql exec attr_filter } ******** *********** Freeradius Debug Mode ************************ ********** Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnel Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 52476, id=35, length=272 ChilliSpot-Version = "1.2.6" User-Name = "test2" User-Password = "tstg" Service-Type = Login-User Acct-Session-Id = "4fe17cf300000001" Framed-IP-Address = 192.168.0.2 NAS-Port-Type = Wireless-802.11 NAS-Port = 1 NAS-Port-Id = "00000001" Calling-Station-Id = "00-19-D2-6C-9A-EB" Called-Station-Id = "00-20-A6-61-3A-31" NAS-IP-Address = 192.168.0.1 NAS-Identifier = "nas01" WISPr-Location-ID = "isocc=,cc=,ac=,network=Coova," WISPr-Location-Name = "My_HotSpot" WISPr-Logoff-URL = "http://192.168.0.1:3990/logoff" Message-Authenticator = 0xe87753c4fe16ea7a2a247c6ce37a0ec4 # Executing section authorize from file /etc/freeradius/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop ++[digest] returns noop [suffix] No '@' in User-Name = "test2", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop [sql] expand: %{User-Name} -> test2 [sql] sql_set_user escaped user --> 'test2' rlm_sql (sql): Reserving sql socket id: 3 [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'test2' ORDER BY id [sql] User found in radcheck table [sql] expand: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radreply WHERE username = 'test2' ORDER BY id [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'test2' ORDER BY priority rlm_sql (sql): Released sql socket id: 3 ++[sql] returns ok rlm_sqlcounter: Entering module authorize code rlm_sqlcounter: Could not find Check item value pair ++[noresetcounter] returns noop rlm_sqlcounter: Entering module authorize code sqlcounter_expand: 'SELECT SUM(AcctSessionTime - GREATEST((1340143200 - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='%{User-Name}' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '1340143200'' [dailycounter] expand: SELECT SUM(AcctSessionTime - GREATEST((1340143200 - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='%{User-Name}' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '1340143200' -> SELECT SUM(AcctSessionTime - GREATEST((1340143200 - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='test2' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '1340143200' sqlcounter_expand: '%{sql:SELECT SUM(AcctSessionTime - GREATEST((1340143200 - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='test2' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '1340143200'}' [dailycounter] sql_xlat [dailycounter] expand: %{User-Name} -> test2 [dailycounter] sql_set_user escaped user --> 'test2' [dailycounter] expand: SELECT SUM(AcctSessionTime - GREATEST((1340143200 - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='test2' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '1340143200' -> SELECT SUM(AcctSessionTime - GREATEST((1340143200 - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='test2' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '1340143200' rlm_sql (sql): Reserving sql socket id: 2 [dailycounter] row[0] returned NULL rlm_sql (sql): Released sql socket id: 2 [dailycounter] expand: %{sql:SELECT SUM(AcctSessionTime - GREATEST((1340143200 - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='test2' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '1340143200'} -> rlm_sqlcounter: No integer found in string "" ++[dailycounter] returns noop rlm_sqlcounter: Entering module authorize code rlm_sqlcounter: Could not find Check item value pair ++[monthlycounter] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns updated Found Auth-Type = PAP # Executing group from file /etc/freeradius/sites-enabled/default +- entering group PAP {...} [pap] login attempt with password "tstg" [pap] Using clear text password "tstg" [pap] User authenticated successfully ++[pap] returns ok # Executing section post-auth from file /etc/freeradius/sites-enabled/default +- entering group post-auth {...} ++[exec] returns noop Sending Access-Accept of id 35 to 127.0.0.1 port 52476 Finished request 0. Going to the next request Waking up in 4.9 seconds. rad_recv: Accounting-Request packet from host 127.0.0.1 port 56322, id=1, length=216 ChilliSpot-Version = "1.2.6" ChilliSpot-Attr-10 = 0x00000002 Event-Timestamp = "Jun 20 2012 09:35:28 CEST" Acct-Status-Type = Start User-Name = "test2" Acct-Session-Id = "4fe17cf300000001" Framed-IP-Address = 192.168.0.2 NAS-Port-Type = Wireless-802.11 NAS-Port = 1 NAS-Port-Id = "00000001" Calling-Station-Id = "00-19-D2-6C-9A-EB" Called-Station-Id = "00-20-A6-61-3A-31" NAS-IP-Address = 192.168.0.1 NAS-Identifier = "nas01" WISPr-Location-ID = "isocc=,cc=,ac=,network=Coova," WISPr-Location-Name = "My_HotSpot" # Executing section preacct from file /etc/freeradius/sites-enabled/default +- entering group preacct {...} ++[preprocess] returns ok [acct_unique] Hashing 'NAS-Port = 1,Client-IP-Address = 127.0.0.1,NAS-IP-Address = 192.168.0.1,Acct-Session-Id = "4fe17cf300000001",User-Name = "test2"' [acct_unique] Acct-Unique-Session-ID = "c1e09879cf7f6028". ++[acct_unique] returns ok [suffix] No '@' in User-Name = "test2", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop ++[files] returns noop # Executing section accounting from file /etc/freeradius/sites-enabled/default +- entering group accounting {...} [detail] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/127.0.0.1/detail-20120620 [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/127.0.0.1/detail-20120620 [detail] expand: %t -> Wed Jun 20 09:35:28 2012 ++[detail] returns ok ++[unix] returns ok [radutmp] expand: /var/log/freeradius/radutmp -> /var/log/freeradius/radutmp [radutmp] expand: %{User-Name} -> test2 ++[radutmp] returns ok [sql] expand: %{User-Name} -> test2 [sql] sql_set_user escaped user --> 'test2' [sql] expand: %{Acct-Delay-Time} -> [sql] ... expanding second conditional [sql] expand: INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay, xascendsessionsvrkey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', rlm_sql (sql): Reserving sql socket id: 1 rlm_sql (sql): Released sql socket id: 1 ++[sql] returns ok ++[exec] returns noop [attr_filter.accounting_response] expand: %{User-Name} -> test2 attr_filter: Matched entry DEFAULT at line 12 ++[attr_filter.accounting_response] returns updated Sending Accounting-Response of id 1 to 127.0.0.1 port 56322 Finished request 1. Cleaning up request 1 ID 1 with timestamp +47 Going to the next request Waking up in 4.9 seconds. Cleaning up request 0 ID 35 with timestamp +47 Ready to process requests. ^@^@rad_recv: Accounting-Request packet from host 127.0.0.1 port 56322, id=2, length=258 ChilliSpot-Version = "1.2.6" ChilliSpot-Attr-10 = 0x00000002 Event-Timestamp = "Jun 20 2012 09:40:28 CEST" Acct-Status-Type = Interim-Update User-Name = "test2" Acct-Input-Octets = 27489042 Acct-Output-Octets = 831241 Acct-Input-Gigawords = 0 Acct-Output-Gigawords = 0 Acct-Input-Packets = 19089 Acct-Output-Packets = 11972 Acct-Session-Time = 300 Acct-Session-Id = "4fe17cf300000001" Framed-IP-Address = 192.168.0.2 NAS-Port-Type = Wireless-802.11 NAS-Port = 1 NAS-Port-Id = "00000001" Calling-Station-Id = "00-19-D2-6C-9A-EB" Called-Station-Id = "00-20-A6-61-3A-31" NAS-IP-Address = 192.168.0.1 NAS-Identifier = "nas01" WISPr-Location-ID = "isocc=,cc=,ac=,network=Coova," WISPr-Location-Name = "My_HotSpot" # Executing section preacct from file /etc/freeradius/sites-enabled/default +- entering group preacct {...} ++[preprocess] returns ok [acct_unique] Hashing 'NAS-Port = 1,Client-IP-Address = 127.0.0.1,NAS-IP-Address = 192.168.0.1,Acct-Session-Id = "4fe17cf300000001",User-Name = "test2"' [acct_unique] Acct-Unique-Session-ID = "c1e09879cf7f6028". ++[acct_unique] returns ok [suffix] No '@' in User-Name = "test2", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop ++[files] returns noop # Executing section accounting from file /etc/freeradius/sites-enabled/default +- entering group accounting {...} [detail] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/127.0.0.1/detail-20120620 [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/127.0.0.1/detail-20120620 [detail] expand: %t -> Wed Jun 20 09:40:28 2012 ++[detail] returns ok ++[unix] returns noop [radutmp] expand: /var/log/freeradius/radutmp -> /var/log/freeradius/radutmp [radutmp] expand: %{User-Name} -> test2 ++[radutmp] returns ok [sql] expand: %{User-Name} -> test2 [sql] sql_set_user escaped user --> 'test2' [sql] expand: %{Acct-Input-Gigawords} -> 0 [sql] expand: %{Acct-Input-Octets} -> 27489042 [sql] expand: %{Acct-Output-Gigawords} -> 0 [sql] expand: %{Acct-Output-Octets} -> 831241 [sql] expand: UPDATE radacct SET framedipaddress = '%{Framed-IP-Address}', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}' -> UPDATE radacct SET framedipaddress = '192.168.0.2', acctsessiontime = '300', acctinputoctets = '0' << 32 | '27489042', acctoutputoctets = '0' << 32 | '831241' WHERE acctsessionid = '4fe17cf300000001' AND username = 'test2' rlm_sql (sql): Reserving sql socket id: 0 rlm_sql (sql): Released sql socket id: 0 ++[sql] returns ok ++[exec] returns noop [attr_filter.accounting_response] expand: %{User-Name} -> test2 attr_filter: Matched entry DEFAULT at line 12 ++[attr_filter.accounting_response] returns updated Sending Accounting-Response of id 2 to 127.0.0.1 port 56322 Finished request 2. Cleaning up request 2 ID 2 with timestamp +347 Going to the next request Ready to process requests. ^@^@^@^@rad_recv: Accounting-Request packet from host 127.0.0.1 port 56322, id=3, length=264 ChilliSpot-Version = "1.2.6" ChilliSpot-Attr-10 = 0x00000002 Event-Timestamp = "Jun 20 2012 09:42:20 CEST" Acct-Status-Type = Stop User-Name = "test2" Acct-Input-Octets = 35006456 Acct-Output-Octets = 1011120 Acct-Input-Gigawords = 0 Acct-Output-Gigawords = 0 Acct-Input-Packets = 24145 Acct-Output-Packets = 14989 Acct-Session-Time = 412 Acct-Terminate-Cause = User-Request Acct-Session-Id = "4fe17cf300000001" Framed-IP-Address = 192.168.0.2 NAS-Port-Type = Wireless-802.11 NAS-Port = 1 NAS-Port-Id = "00000001" Calling-Station-Id = "00-19-D2-6C-9A-EB" Called-Station-Id = "00-20-A6-61-3A-31" NAS-IP-Address = 192.168.0.1 NAS-Identifier = "nas01" WISPr-Location-ID = "isocc=,cc=,ac=,network=Coova," WISPr-Location-Name = "My_HotSpot" # Executing section preacct from file /etc/freeradius/sites-enabled/default +- entering group preacct {...} ++[preprocess] returns ok [acct_unique] Hashing 'NAS-Port = 1,Client-IP-Address = 127.0.0.1,NAS-IP-Address = 192.168.0.1,Acct-Session-Id = "4fe17cf300000001",User-Name = "test2"' [acct_unique] Acct-Unique-Session-ID = "c1e09879cf7f6028". ++[acct_unique] returns ok [suffix] No '@' in User-Name = "test2", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop ++[files] returns noop # Executing section accounting from file /etc/freeradius/sites-enabled/default +- entering group accounting {...} [detail] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/127.0.0.1/detail-20120620 [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/127.0.0.1/detail-20120620 [detail] expand: %t -> Wed Jun 20 09:42:20 2012 ++[detail] returns ok ++[unix] returns ok [radutmp] expand: /var/log/freeradius/radutmp -> /var/log/freeradius/radutmp [radutmp] expand: %{User-Name} -> test2 ++[radutmp] returns ok [sql] expand: %{User-Name} -> test2 [sql] sql_set_user escaped user --> 'test2' [sql] expand: %{Acct-Input-Gigawords} -> 0 [sql] expand: %{Acct-Input-Octets} -> 35006456 [sql] expand: %{Acct-Output-Gigawords} -> 0 [sql] expand: %{Acct-Output-Octets} -> 1011120 [sql] expand: %{Acct-Delay-Time} -> [sql] ... expanding second conditional [sql] expand: UPDATE radacct SET acctstoptime = '%S', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', acctstopdelay = '%{%{Acct-Delay-Time}:-0}', connectinfo_stop = '%{Connect-Info}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}' -> UPDATE radacct SET acctstoptime = '2012-06-20 09:42:20', acctsessiontime = '412', acctinputoctets = '0' << 32 | '35006456', acctoutputoctets = '0' << 3 rlm_sql (sql): Reserving sql socket id: 4 rlm_sql (sql): Released sql socket id: 4 ++[sql] returns ok ++[exec] returns noop [attr_filter.accounting_response] expand: %{User-Name} -> test2 attr_filter: Matched entry DEFAULT at line 12 ++[attr_filter.accounting_response] returns updated Sending Accounting-Response of id 3 to 127.0.0.1 port 56322 Finished request 3. Cleaning up request 3 ID 3 with timestamp +459 Going to the next request Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 37672, id=54, length=272 ChilliSpot-Version = "1.2.6" User-Name = "test2" User-Password = "tstg" Service-Type = Login-User Acct-Session-Id = "4fe17edc00000001" Framed-IP-Address = 192.168.0.2 NAS-Port-Type = Wireless-802.11 NAS-Port = 1 NAS-Port-Id = "00000001" Calling-Station-Id = "00-19-D2-6C-9A-EB" Called-Station-Id = "00-20-A6-61-3A-31" NAS-IP-Address = 192.168.0.1 NAS-Identifier = "nas01" WISPr-Location-ID = "isocc=,cc=,ac=,network=Coova," WISPr-Location-Name = "My_HotSpot" WISPr-Logoff-URL = "http://192.168.0.1:3990/logoff" Message-Authenticator = 0x75d58376cd792bab2c1b6fc5cdcc8b40 # Executing section authorize from file /etc/freeradius/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop ++[digest] returns noop [suffix] No '@' in User-Name = "test2", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop [sql] expand: %{User-Name} -> test2 [sql] sql_set_user escaped user --> 'test2' rlm_sql (sql): Reserving sql socket id: 3 [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'test2' ORDER BY id [sql] User found in radcheck table [sql] expand: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radreply WHERE username = 'test2' ORDER BY id [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'test2' ORDER BY priority rlm_sql (sql): Released sql socket id: 3 ++[sql] returns ok rlm_sqlcounter: Entering module authorize code rlm_sqlcounter: Could not find Check item value pair ++[noresetcounter] returns noop rlm_sqlcounter: Entering module authorize code sqlcounter_expand: 'SELECT SUM(AcctSessionTime - GREATEST((1340143200 - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='%{User-Name}' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '1340143200'' [dailycounter] expand: SELECT SUM(AcctSessionTime - GREATEST((1340143200 - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='%{User-Name}' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '1340143200' -> SELECT SUM(AcctSessionTime - GREATEST((1340143200 - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='test2' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '1340143200' sqlcounter_expand: '%{sql:SELECT SUM(AcctSessionTime - GREATEST((1340143200 - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='test2' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '1340143200'}' [dailycounter] sql_xlat [dailycounter] expand: %{User-Name} -> test2 [dailycounter] sql_set_user escaped user --> 'test2' [dailycounter] expand: SELECT SUM(AcctSessionTime - GREATEST((1340143200 - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='test2' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '1340143200' -> SELECT SUM(AcctSessionTime - GREATEST((1340143200 - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='test2' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '1340143200' rlm_sql (sql): Reserving sql socket id: 2 [dailycounter] sql_xlat finished rlm_sql (sql): Released sql socket id: 2 [dailycounter] expand: %{sql:SELECT SUM(AcctSessionTime - GREATEST((1340143200 - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='test2' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '1340143200'} -> 412 rlm_sqlcounter: (Check item - counter) is less than zero rlm_sqlcounter: Rejected user test2, check_item=300, counter=412 ++[dailycounter] returns reject Using Post-Auth-Type Reject # Executing group from file /etc/freeradius/sites-enabled/default +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> test2 attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 4 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 4 Sending Access-Reject of id 54 to 127.0.0.1 port 37672 Reply-Message = "Your maximum daily usage time has been reached" Waking up in 4.9 seconds. Cleaning up request 4 ID 54 with timestamp +471 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 53093, id=55, length=272 ChilliSpot-Version = "1.2.6" User-Name = "test2" User-Password = "tstg" Service-Type = Login-User Acct-Session-Id = "4fe17ee900000001" Framed-IP-Address = 192.168.0.2 NAS-Port-Type = Wireless-802.11 NAS-Port = 1 NAS-Port-Id = "00000001" Calling-Station-Id = "00-19-D2-6C-9A-EB" Called-Station-Id = "00-20-A6-61-3A-31" NAS-IP-Address = 192.168.0.1 NAS-Identifier = "nas01" WISPr-Location-ID = "isocc=,cc=,ac=,network=Coova," WISPr-Location-Name = "My_HotSpot" WISPr-Logoff-URL = "http://192.168.0.1:3990/logoff" Message-Authenticator = 0xfd8ce9c58d310d5621bac685da38fd28 # Executing section authorize from file /etc/freeradius/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop ++[digest] returns noop [suffix] No '@' in User-Name = "test2", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop [sql] expand: %{User-Name} -> test2 [sql] sql_set_user escaped user --> 'test2' rlm_sql (sql): Reserving sql socket id: 1 [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'test2' ORDER BY id [sql] User found in radcheck table [sql] expand: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radreply WHERE username = 'test2' ORDER BY id [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'test2' ORDER BY priority rlm_sql (sql): Released sql socket id: 1 ++[sql] returns ok rlm_sqlcounter: Entering module authorize code rlm_sqlcounter: Could not find Check item value pair ++[noresetcounter] returns noop rlm_sqlcounter: Entering module authorize code sqlcounter_expand: 'SELECT SUM(AcctSessionTime - GREATEST((1340143200 - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='%{User-Name}' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '1340143200'' [dailycounter] expand: SELECT SUM(AcctSessionTime - GREATEST((1340143200 - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='%{User-Name}' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '1340143200' -> SELECT SUM(AcctSessionTime - GREATEST((1340143200 - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='test2' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '1340143200' sqlcounter_expand: '%{sql:SELECT SUM(AcctSessionTime - GREATEST((1340143200 - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='test2' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '1340143200'}' [dailycounter] sql_xlat [dailycounter] expand: %{User-Name} -> test2 [dailycounter] sql_set_user escaped user --> 'test2' [dailycounter] expand: SELECT SUM(AcctSessionTime - GREATEST((1340143200 - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='test2' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '1340143200' -> SELECT SUM(AcctSessionTime - GREATEST((1340143200 - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='test2' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '1340143200' rlm_sql (sql): Reserving sql socket id: 0 [dailycounter] sql_xlat finished rlm_sql (sql): Released sql socket id: 0 [dailycounter] expand: %{sql:SELECT SUM(AcctSessionTime - GREATEST((1340143200 - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='test2' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '1340143200'} -> 412 rlm_sqlcounter: (Check item - counter) is less than zero rlm_sqlcounter: Rejected user test2, check_item=300, counter=412 ++[dailycounter] returns reject Using Post-Auth-Type Reject # Executing group from file /etc/freeradius/sites-enabled/default +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> test2 attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 5 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 5 Sending Access-Reject of id 55 to 127.0.0.1 port 53093 Reply-Message = "Your maximum daily usage time has been reached" Waking up in 4.9 seconds. Cleaning up request 5 ID 55 with timestamp +483 Ready to process requests.