On Sat, Nov 16, 2024 at 7:23 PM Alan DeKok <aland@deployingradius.com> wrote:
On Nov 16, 2024, at 4:51 AM, Abraham Jacob <abrahamj@gmail.com> wrote:
It is working as expected if I set the radgroupcheck op to ':='.
From the Operator wiki page I understand that for matching as a check item, the operator has to be :=.
Why are you matching it as a check item? You're trying to send it as a reply.
Sorry, I missed to mention that I am using the sqlcounter module with the following configuration. sqlcounter dailycounter { sql_module_instance = sql dialect = mysql counter_name = Daily-Session-Time check_name = Session-Timeout reply_name = Session-Timeout key = User-Name reset = daily $INCLUDE ${modconfdir}/sql/counter/${dialect}/${.:instance}.conf } mods-config/sql/counter/mysql/dailycounter.conf: query = "\ SELECT SUM(acctsessiontime - GREATEST((%%b - UNIX_TIMESTAMP(acctstarttime)), 0)) \ FROM radacct \ WHERE username = '%{${key}}' \ AND UNIX_TIMESTAMP(acctstarttime) + acctsessiontime > '%%b'" This way I achieve 2 things. 1. Limit daily session time to Session-Timeout set, even if user is reconnecting 2. Give Access-Reject once the limit is crossed. Thanks, Abraham
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html