Thanks but with sql I can send the attribute to Oracle DB without any problem? So can you please help me with this unlang command to add? And where? In preacct section of my virtual sites? Eric B. -----Original Message----- From: freeradius-users-bounces+eric.belliere=mail.mobistar.be@lists.freeradius .org [mailto:freeradius-users-bounces+eric.belliere=mail.mobistar.be@lists.fr eeradius.org] On Behalf Of freeradius-users-request@lists.freeradius.org Sent: Monday 6 August 2012 15:34 To: freeradius-users@lists.freeradius.org Subject: Freeradius-Users Digest, Vol 88, Issue 24 Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. Re: Radius copy accounting (Matthew Newton) 2. Re: Radius copy accounting (alan buxey) 3. Re: RES: FR 3 Event-Timestamp wrong format and Mysql FROM_UNIXTIME error (Alan DeKok) 4. Duplicate Radius Accounting (Christopher Manigan) 5. Re: Duplicate Radius Accounting (Alan DeKok) 6. Freeradius Accounting (Robert Souter) ---------------------------------------------------------------------- Message: 1 Date: Mon, 6 Aug 2012 13:39:06 +0100 From: Matthew Newton <mcn4@leicester.ac.uk> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Radius copy accounting Message-ID: <20120806123906.GB15604@rootmail.cc.le.ac.uk> Content-Type: text/plain; charset=us-ascii On Mon, Aug 06, 2012 at 02:30:14PM +0200, BELLIERE Eric wrote:
As you can see this schema is working well except that the attribute REALM is not include in the packet?
We can see it in the detail file but when FR proxy the packet this attribute is missing?
Realm is an internal attribute (see dictionary.freeradius.internal) and as such doesn't appear in any packets in transit. Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Architect (UNIX and Networks), Network Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk> ------------------------------ Message: 2 Date: Mon, 6 Aug 2012 13:49:08 +0100 From: alan buxey <A.L.M.Buxey@lboro.ac.uk> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Radius copy accounting Message-ID: <20120806124908.GA15665@lboro.ac.uk> Content-Type: text/plain; charset=us-ascii Hi,
As you can see this schema is working well except that the attribute REALM is not include in the packet?
as already said this is an internal engine attribute. if you want this to be exposed in other systems, you will need to use eg 'unlang' to populate a suitable attribute with this value alan ------------------------------ Message: 3 Date: Mon, 06 Aug 2012 14:59:34 +0200 From: Alan DeKok <aland@deployingradius.com> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: RES: FR 3 Event-Timestamp wrong format and Mysql FROM_UNIXTIME error Message-ID: <501FBFB6.7080409@deployingradius.com> Content-Type: text/plain; charset=ISO-8859-1 lscrlstld wrote:
'%{NAS-Port-Type}', FROM_UNIXTIME(%{Event-Timestamp}),
Well, that's wrong. That was fixed ~2 weeks ago. I also said it should be %{integer:Event-Timestamp} Please grab an updated copy of the dialup.conf file. Alan DeKok. ------------------------------ Message: 4 Date: Mon, 6 Aug 2012 13:13:44 +0000 From: Christopher Manigan <cmanigan@towerstream.com> To: "freeradius-users@lists.freeradius.org" <freeradius-users@lists.freeradius.org> Subject: Duplicate Radius Accounting Message-ID: <72D41B40EE32E749AE3AE3B7190AA7CE1E142B97@MAIL01.corp.towerstream.com> Content-Type: text/plain; charset="us-ascii" In my logs I see many entries like the following: Info: WARNING: Child is hung for request 51651 in component <core> module <queue>.3 Error: Dropping request (2049 is too many): from client myhost.mysite port 32869 - ID: 239 In the last ~10 hours, the status server reports the following for accounting: Responses 0 Duplicate 954442 Malformed 115045 Invalid 564029 Dropped 0 Unknown 0 Radius will hang and start to time out and eventually die. It looks like the duplicate count gets extremely high very quickly. Could it be the NAS that are pointing to it? Or could it be my radius configs somehow causing this? I am not really sure how to prove it out or troubleshoot. I can increase the max requests but I don't think that is the right solution. Chris ------------------------------ Message: 5 Date: Mon, 06 Aug 2012 15:19:52 +0200 From: Alan DeKok <aland@deployingradius.com> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Duplicate Radius Accounting Message-ID: <501FC478.1000604@deployingradius.com> Content-Type: text/plain; charset=ISO-8859-1 Christopher Manigan wrote:
In my logs I see many entries like the following:
Info: WARNING: Child is hung for request 51651 in component <core> module <queue>.3 Error: Dropping request (2049 is too many): from client myhost.mysite port 32869 - ID: 239
Something is blocking the server. This is usually a slow database.
In the last ~10 hours, the status server reports the following for accounting:
Responses 0 Duplicate 954442 Malformed 115045 Invalid 564029
That is *terrible*. Zero responses? It indicates a catastrophic failure in the system. And *malformed* packets? Something is sending NON RADIUS packets to the RADIUS port. Go fix that. And "invalid" packets? Something is sending non-accounting packets to the accounting port.
Dropped 0 Unknown 0
Radius will hang and start to time out and eventually die. It looks like the duplicate count gets extremely high very quickly. Could it be the NAS that are pointing to it? Or could it be my radius configs somehow causing this? I am not really sure how to prove it out or troubleshoot. I can increase the max requests but I don't think that is the right solution.
Your RADIUS system is horribly slow, and isn't finishing any requests. Go fix that. The default configuration *works*. And your NAS is broken. Something is very, very, wrong in your network. Find out what it is. Ensure that only RADIUS accounting packets go to the RADIUS accounting port. Alan DeKok. ------------------------------ Message: 6 Date: Mon, 6 Aug 2012 13:35:17 +0000 From: Robert Souter <robertsouter@highnet.com> To: "freeradius-users@lists.freeradius.org" <freeradius-users@lists.freeradius.org> Subject: Freeradius Accounting Message-ID: <35997DFB4CC3444CB74F176D4FBEAFBCCF92FC@HIGHNETDC2.Highnet.local> Content-Type: text/plain; charset="us-ascii" Afternoon All I apologies if I am sending detail the wrong way or the wrong format. But a newbie to this and also new to working with freeradius so I do apologies in advance if I have done something wrong. My issue with freeradius is Accounting The issue been I took over looking after the freeradius server when someone left, and he dealt with it himself up to then. What I am trying to figure out is that up to the day he left the server was doing accounting in the following directory Var/log/radius/radacct then below that was a folder for each server that was allowed to authenticate in the /clients.conf/ file I have checked the radius server and it is still using ports 1646 and 1645 have also check our cisco NAS router and it is pointing to our radius server with the secret password, which I have checked and are the same along with the same ports 1646 and 1645. If you can help it would be much appreciated. I am sorry if I have not put in the correct data but if you let me know I will try and put it right and adhere to your rules. Thanks very much for your assistance. Kind Regards Robert Robert Souter Network Engineer Office: 0345 450 4502 Fax: 0345 450 4503 [Description: C:\Users\roberts\AppData\Roaming\Microsoft\Signatures\signature logo.jpg] www.highnet.com<http://www.highnet.com> | connecting your business [Description: C:\Users\roberts\AppData\Roaming\Microsoft\Signatures\Twitter Icon.jpg]<http://twitter.com/HighNetTelecoms> [Description: C:\Users\roberts\AppData\Roaming\Microsoft\Signatures\LinkedIn Icon.jpg] <http://www.linkedin.com/company/highnet> [Description: C:\Users\roberts\AppData\Roaming\Microsoft\Signatures\Facebook Icon.jpg] <http://www.facebook.com/pages/HighNet-Telecoms/151941874838133> Please consider the environment before printing this e-mail. Why not further your environmental commitments with HighNet's Green Telecoms? Disclaimer: Any opinions expressed in this e-mail are those of the individual and not necessarily the Company. This e-mail and any files transmitted with it, including replies and forwarded copies (which may contain alterations) subsequently transmitted from the Company, are confidential and solely for the use of the intended recipient. If you are not the intended recipient of this transmission, please be advised that you have received it in error and that any use is strictly prohibited. If you have received this e-mail in error please notify the sender.