I am having some trouble moving from FR2 to FR3. I did a fresh install recently on FR3. Authentication part is working correctly. However I noticed that most of the time the Framed IP address and FramedProtocol are not written correctly into the mysql database. I am sure I have incorrectly setup something but since I don't understand how I can go ahead and trouble shoot this matter. Here are the logs use freeradius -X BlastRADIUS check: Received packet without Message-Authenticator. YOU MUST SET "require_message_authenticator = true", or YOU MUST SET "limit_proxy_state = true" for client pubip !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! The packet does not contain Message-Authenticator, which is a security issue UPGRADE THE CLIENT AS YOUR NETWORK IS VULNERABLE TO THE BLASTRADIUS ATTACK. Once the client is upgraded, set "require_message_authenticator = true" for client pubip !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! (0) Received Access-Request Id 91 from 143.198.146.8:56216 to 67.205.156.27:1812 length 186 (0) Service-Type = Framed-User (0) Framed-Protocol = PPP (0) NAS-Port = 15728640 (0) NAS-Port-Type = Ethernet (0) User-Name = "saied" (0) Calling-Station-Id = "0C:DC:B7:B1:00:00" (0) NAS-Port-Id = "ether2" (0) Acct-Session-Id = "81b00000" (0) MS-CHAP-Challenge = 0x1e86ccb35ca835cd91f0010ed05ef9f8 (0) MS-CHAP2-Response = 0x0100b82b5ae17cd5f3d5c529bd97d16f686d0000000000000000d6856ebb6089ace13cb4d8e5dccdb75bc2ab423d994b19d8 (0) NAS-Identifier = "MikroTik" (0) NAS-IP-Address = 192.168.122.30 (0) # Executing section authorize from file /etc/freeradius/sites-enabled/default (0) authorize { (0) policy filter_username { (0) if (&User-Name) { (0) if (&User-Name) -> TRUE (0) if (&User-Name) { (0) if (&User-Name =~ / /) { (0) if (&User-Name =~ / /) -> FALSE (0) if (&User-Name =~ /@[^@]*@/ ) { (0) if (&User-Name =~ /@[^@]*@/ ) -> FALSE (0) if (&User-Name =~ /\.\./ ) { (0) if (&User-Name =~ /\.\./ ) -> FALSE (0) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) { (0) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE (0) if (&User-Name =~ /\.$/) { (0) if (&User-Name =~ /\.$/) -> FALSE (0) if (&User-Name =~ /@\./) { (0) if (&User-Name =~ /@\./) -> FALSE (0) } # if (&User-Name) = notfound (0) } # policy filter_username = notfound (0) [preprocess] = ok (0) [chap] = noop (0) mschap: Found MS-CHAP attributes. Setting 'Auth-Type = mschap' (0) [mschap] = ok (0) [digest] = noop (0) suffix: Checking for suffix after "@" (0) suffix: No '@' in User-Name = "saied", looking up realm NULL (0) suffix: No such realm "NULL" (0) [suffix] = noop (0) eap: No EAP-Message, not doing EAP (0) [eap] = noop (0) files: sql_groupcmp (0) files: EXPAND %{User-Name} (0) files: --> saied (0) files: SQL-User-Name set to 'saied' rlm_sql (sql): Reserved connection (1) (0) files: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority (0) files: --> SELECT groupname FROM radusergroup WHERE username = 'saied' ORDER BY priority (0) files: Executing select query: SELECT groupname FROM radusergroup WHERE username = 'saied' ORDER BY priority rlm_sql (sql): Released connection (1) Need more connections to reach 10 spares rlm_sql (sql): Opening additional connection (6), 1 of 26 pending slots used rlm_sql_mysql: Starting connect to MySQL server WARNING: MYSQL_OPT_RECONNECT is deprecated and will be removed in a future version. rlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 5.5.5-10.3.39-MariaDB-0ubuntu0.20.04.2, protocol version 10 rlm_sql (sql): Closing expired connection (5) - Hit idle_timeout limit rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql): Closing expired connection (4) - Hit idle_timeout limit rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql): Closing expired connection (3) - Hit idle_timeout limit rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql): Closing expired connection (2) - Hit idle_timeout limit rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql): You probably need to lower "min" rlm_sql (sql): Closing expired connection (0) - Hit idle_timeout limit rlm_sql_mysql: Socket destructor called, closing socket (0) files: sql_groupcmp finished: User is NOT a member of group inactive-user (0) files: sql_groupcmp (0) files: EXPAND %{User-Name} (0) files: --> saied (0) files: SQL-User-Name set to 'saied' rlm_sql (sql): Reserved connection (1) (0) files: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority (0) files: --> SELECT groupname FROM radusergroup WHERE username = 'saied' ORDER BY priority (0) files: Executing select query: SELECT groupname FROM radusergroup WHERE username = 'saied' ORDER BY priority rlm_sql (sql): Released connection (1) (0) files: sql_groupcmp finished: User is NOT a member of group multilink-active-user (0) files: users: Matched entry DEFAULT at line 84 (0) files: users: Matched entry DEFAULT at line 186 (0) [files] = ok (0) sql: EXPAND %{User-Name} (0) sql: --> saied (0) sql: SQL-User-Name set to 'saied' rlm_sql (sql): Reserved connection (6) (0) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id (0) sql: --> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'saied' ORDER BY id (0) sql: Executing select query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'saied' ORDER BY id (0) sql: User found in radcheck table (0) sql: Conditional check items matched, merging assignment check items (0) sql: Cleartext-Password := "saied" (0) sql: EXPAND SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id (0) sql: --> SELECT id, username, attribute, value, op FROM radreply WHERE username = 'saied' ORDER BY id (0) sql: Executing select query: SELECT id, username, attribute, value, op FROM radreply WHERE username = 'saied' ORDER BY id (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority (0) sql: --> SELECT groupname FROM radusergroup WHERE username = 'saied' ORDER BY priority (0) sql: Executing select query: SELECT groupname FROM radusergroup WHERE username = 'saied' ORDER BY priority (0) sql: User not found in any groups rlm_sql (sql): Released connection (6) (0) [sql] = ok (0) [expiration] = noop (0) [logintime] = noop (0) [pap] = noop (0) if (User-Name){ (0) if (User-Name) -> TRUE (0) if (User-Name) { (0) if ("%{sql:UPDATE radacct set AcctStopTime=ADDDATE(AcctStartTime,INTERVAL AcctSessionTime SECOND), AcctTerminateCause='Clear-Stale Session' WHERE UserName='%{User-Name}' and CallingStationId='%{Calling-Station-Id}' and AcctStopTime is NULL}"){ rlm_sql (sql): Reserved connection (1) rlm_sql (sql): Released connection (1) rlm_sql (sql): Reserved connection (6) rlm_sql (sql): Released connection (6) (0) EXPAND %{User-Name} (0) --> saied (0) SQL-User-Name set to 'saied' rlm_sql (sql): Reserved connection (1) (0) Executing query: UPDATE radacct set AcctStopTime=ADDDATE(AcctStartTime,INTERVAL AcctSessionTime SECOND), AcctTerminateCause='Clear-Stale Session' WHERE UserName='saied' and CallingStationId='0C:DC:B7:B1:00:00' and AcctStopTime is NULL rlm_sql_mysql: Rows matched: 0 Changed: 0 Warnings: 0 (0) SQL query affected no rows rlm_sql (sql): Released connection (1) (0) EXPAND %{sql:UPDATE radacct set AcctStopTime=ADDDATE(AcctStartTime,INTERVAL AcctSessionTime SECOND), AcctTerminateCause='Clear-Stale Session' WHERE UserName='%{User-Name}' and CallingStationId='%{Calling-Station-Id}' and AcctStopTime is NULL} (0) --> (0) if ("%{sql:UPDATE radacct set AcctStopTime=ADDDATE(AcctStartTime,INTERVAL AcctSessionTime SECOND), AcctTerminateCause='Clear-Stale Session' WHERE UserName='%{User-Name}' and CallingStationId='%{Calling-Station-Id}' and AcctStopTime is NULL}") -> FALSE (0) } # if (User-Name) = ok (0) } # authorize = ok (0) Found Auth-Type = mschap (0) # Executing group from file /etc/freeradius/sites-enabled/default (0) authenticate { (0) mschap: Found Cleartext-Password, hashing to create NT-Password (0) mschap: Creating challenge hash with username: saied (0) mschap: Client is using MS-CHAPv2 (0) mschap: Adding MS-CHAPv2 MPPE keys (0) [mschap] = ok (0) } # authenticate = ok (0) # Executing section session from file /etc/freeradius/sites-enabled/default (0) session { (0) sql: EXPAND %{User-Name} (0) sql: --> saied (0) sql: SQL-User-Name set to 'saied' rlm_sql (sql): Reserved connection (6) (0) sql: EXPAND SELECT COUNT(*) FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL (0) sql: --> SELECT COUNT(*) FROM radacct WHERE username = 'saied' AND acctstoptime IS NULL (0) sql: Executing select query: SELECT COUNT(*) FROM radacct WHERE username = 'saied' AND acctstoptime IS NULL rlm_sql (sql): Released connection (6) (0) [sql] = ok (0) } # session = ok (0) # Executing section post-auth from file /etc/freeradius/sites-enabled/default (0) post-auth { (0) if (session-state:User-Name && reply:User-Name && request:User-Name && (reply:User-Name == request:User-Name)) { (0) if (session-state:User-Name && reply:User-Name && request:User-Name && (reply:User-Name == request:User-Name)) -> FALSE (0) update { (0) No attributes updated for RHS &session-state: (0) } # update = noop (0) policy sql_session_start.post-auth { (0) policy acct_unique { (0) update request { (0) &Tmp-String-9 := "ai:" (0) } # update request = noop (0) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) { (0) EXPAND %{hex:&Class} (0) --> (0) EXPAND ^%{hex:&Tmp-String-9} (0) --> ^61693a (0) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) -> FALSE (0) else { (0) update request { (0) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}} (0) --> c8cfd558bded834454aa713d62999e75 (0) &Acct-Unique-Session-Id := c8cfd558bded834454aa713d62999e75 (0) } # update request = noop (0) } # else = noop (0) update request { (0) &Tmp-String-9 !* ANY (0) } # update request = noop (0) } # policy acct_unique = noop (0) sql: EXPAND %{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query} (0) sql: --> type.post-auth.query (0) sql: Using query template 'query' rlm_sql (sql): Reserved connection (1) (0) sql: EXPAND %{User-Name} (0) sql: --> saied (0) sql: SQL-User-Name set to 'saied' (0) sql: EXPAND INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, framedipv6address, framedipv6prefix, framedinterfaceid, delegatedipv6prefix ) VALUES('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}}', NULLIF('%{%{NAS-Port-ID}:-%{NAS-Port}}', ''), '%{NAS-Port-Type}', FROM_UNIXTIME(%{%{integer:Event-Timestamp}:-%l}), NULL, NULL, 0, '', '%{Connect-Info}', NULL, 0, 0, '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', NULL, '', '', '', '', '' ) detail (/var/log/freeradius/radacct/detail_coa): Polling for detail file detail (/var/log/freeradius/radacct/detail_coa): Detail listener state unopened waiting 1.181563 sec (0) sql: --> INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, framedipv6address, framedipv6prefix, framedinterfaceid, delegatedipv6prefix ) VALUES('81b00000', 'c8cfd558bded834454aa713d62999e75', 'saied', '', '192.168.122.30', NULLIF('ether2', ''), 'Ethernet', FROM_UNIXTIME(1729070924), NULL, NULL, 0, '', '', NULL, 0, 0, '', '0C:DC:B7:B1:00:00', '', 'Framed-User', NULL, '', '', '', '', '' ) (0) sql: Executing query: INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, framedipv6address, framedipv6prefix, framedinterfaceid, delegatedipv6prefix ) VALUES('81b00000', 'c8cfd558bded834454aa713d62999e75', 'saied', '', '192.168.122.30', NULLIF('ether2', ''), 'Ethernet', FROM_UNIXTIME(1729070924), NULL, NULL, 0, '', '', NULL, 0, 0, '', '0C:DC:B7:B1:00:00', '', 'Framed-User', NULL, '', '', '', '', '' ) (0) sql: SQL query returned: success (0) sql: 1 record(s) updated rlm_sql (sql): Released connection (1) (0) [sql.accounting] = ok (0) } # policy sql_session_start.post-auth = ok (0) sql: EXPAND .query (0) sql: --> .query (0) sql: Using query template 'query' rlm_sql (sql): Reserved connection (6) (0) sql: EXPAND %{User-Name} (0) sql: --> saied (0) sql: SQL-User-Name set to 'saied' (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate ) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S.%M' ) (0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate ) VALUES ( 'saied', '', 'Access-Accept', '2024-10-16 09:28:44.887811' ) (0) sql: Executing query: INSERT INTO radpostauth (username, pass, reply, authdate ) VALUES ( 'saied', '', 'Access-Accept', '2024-10-16 09:28:44.887811' ) (0) sql: SQL query returned: success (0) sql: 1 record(s) updated rlm_sql (sql): Released connection (6) (0) [sql] = ok (0) [exec] = noop (0) policy remove_reply_message_if_eap { (0) if (&reply:EAP-Message && &reply:Reply-Message) { (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (0) else { (0) [noop] = noop (0) } # else = noop (0) } # policy remove_reply_message_if_eap = noop (0) if (EAP-Key-Name && &reply:EAP-Session-Id) { (0) if (EAP-Key-Name && &reply:EAP-Session-Id) -> FALSE (0) } # post-auth = ok (0) Sent Access-Accept Id 91 from 67.205.156.27:1812 to 143.198.146.8:56216 length 209 (0) Framed-Protocol = PPP (0) Framed-Compression = Van-Jacobson-TCP-IP (0) MS-CHAP2-Success = 0x01533d36324342373731454439304334353137333343393345453730334233374442323343463941304441 (0) MS-MPPE-Recv-Key = 0x86232b7b39c9e6b140d6daaf2bcc09ac (0) MS-MPPE-Send-Key = 0x93f5635e2e62404b6a8b28415c685ebc (0) MS-MPPE-Encryption-Policy = Encryption-Allowed (0) MS-MPPE-Encryption-Types = RC4-40or128-bit-Allowed (0) Finished request (1) Received Accounting-Request Id 92 from 143.198.146.8:53796 to 67.205.156.27:1813 length 134 (1) Service-Type = Framed-User (1) Framed-Protocol = PPP (1) NAS-Port = 15728640 (1) NAS-Port-Type = Ethernet (1) User-Name = "saied" (1) Calling-Station-Id = "0C:DC:B7:B1:00:00" (1) NAS-Port-Id = "ether2" (1) Acct-Session-Id = "81b00000" (1) Framed-IP-Address = 10.10.10.254 (1) Acct-Authentic = RADIUS (1) Event-Timestamp = "Oct 16 2024 09:28:44 UTC" (1) Acct-Status-Type = Start (1) NAS-Identifier = "MikroTik" (1) Acct-Delay-Time = 0 (1) NAS-IP-Address = 192.168.122.30 (1) # Executing section preacct from file /etc/freeradius/sites-enabled/default (1) preacct { (1) [preprocess] = ok (1) policy acct_unique { (1) update request { (1) &Tmp-String-9 := "ai:" (1) } # update request = noop (1) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) { (1) EXPAND %{hex:&Class} (1) --> (1) EXPAND ^%{hex:&Tmp-String-9} (1) --> ^61693a (1) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) -> FALSE (1) else { (1) update request { (1) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}} (1) --> c8cfd558bded834454aa713d62999e75 (1) &Acct-Unique-Session-Id := c8cfd558bded834454aa713d62999e75 (1) } # update request = noop (1) } # else = noop (1) update request { (1) &Tmp-String-9 !* ANY (1) } # update request = noop (1) } # policy acct_unique = noop (1) suffix: Checking for suffix after "@" (1) suffix: No '@' in User-Name = "saied", looking up realm NULL (1) suffix: No such realm "NULL" (1) [suffix] = noop (1) [files] = noop (1) } # preacct = ok (1) # Executing section accounting from file /etc/freeradius/sites-enabled/default (1) accounting { (1) detail: EXPAND /var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d (1) detail: --> /var/log/freeradius/radacct/143.198.146.8/detail-20241016 (1) detail: /var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/freeradius/radacct/143.198.146.8/detail-20241016 (1) detail: EXPAND %t (1) detail: --> Wed Oct 16 09:28:44 2024 (1) [detail] = ok (1) [unix] = ok (1) sql: EXPAND %{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query} (1) sql: --> type.start.query (1) sql: Using query template 'query' rlm_sql (sql): Reserved connection (1) (1) sql: EXPAND %{User-Name} (1) sql: --> saied (1) sql: SQL-User-Name set to 'saied' (1) sql: EXPAND INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, framedipv6address, framedipv6prefix, framedinterfaceid, delegatedipv6prefix ) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{%{NAS-Port-ID}:-%{NAS-Port}}', '%{NAS-Port-Type}', FROM_UNIXTIME(%{%{integer:Event-Timestamp}:-%l}), FROM_UNIXTIME(%{%{integer:Event-Timestamp}:-%l}), NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{Framed-IPv6-Address}', '%{Framed-IPv6-Prefix}', '%{Framed-Interface-Id}', '%{Delegated-IPv6-Prefix}' ) (1) sql: --> INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, framedipv6address, framedipv6prefix, framedinterfaceid, delegatedipv6prefix ) VALUES ('81b00000', 'c8cfd558bded834454aa713d62999e75', 'saied', '', '192.168.122.30', 'ether2', 'Ethernet', FROM_UNIXTIME(1729070924), FROM_UNIXTIME(1729070924), NULL, '0', 'RADIUS', '', '', '0', '0', '', '0C:DC:B7:B1:00:00', '', 'Framed-User', 'PPP', '10.10.10.254', '', '', '', '' ) (1) sql: Executing query: INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, framedipv6address, framedipv6prefix, framedinterfaceid, delegatedipv6prefix ) VALUES ('81b00000', 'c8cfd558bded834454aa713d62999e75', 'saied', '', '192.168.122.30', 'ether2', 'Ethernet', FROM_UNIXTIME(1729070924), FROM_UNIXTIME(1729070924), NULL, '0', 'RADIUS', '', '', '0', '0', '', '0C:DC:B7:B1:00:00', '', 'Framed-User', 'PPP', '10.10.10.254', '', '', '', '' ) (1) sql: rlm_sql_mysql: ERROR 1062 (Duplicate entry 'c8cfd558bded834454aa713d62999e75' for key 'acctuniqueid'): 23000 (1) sql: SQL query returned: need alt query (1) sql: Trying next query... (1) sql: EXPAND UPDATE radacct SET acctstarttime = FROM_UNIXTIME(%{%{integer:Event-Timestamp}:-%l}), acctupdatetime = FROM_UNIXTIME(%{%{integer:Event-Timestamp}:-%l}), connectinfo_start = '%{Connect-Info}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}' (1) sql: --> UPDATE radacct SET acctstarttime = FROM_UNIXTIME(1729070924), acctupdatetime = FROM_UNIXTIME(1729070924), connectinfo_start = '' WHERE AcctUniqueId = 'c8cfd558bded834454aa713d62999e75' (1) sql: Executing query: UPDATE radacct SET acctstarttime = FROM_UNIXTIME(1729070924), acctupdatetime = FROM_UNIXTIME(1729070924), connectinfo_start = '' WHERE AcctUniqueId = 'c8cfd558bded834454aa713d62999e75' rlm_sql_mysql: Rows matched: 1 Changed: 1 Warnings: 0 (1) sql: SQL query returned: success (1) sql: 1 record(s) updated rlm_sql (sql): Released connection (1) (1) [sql] = ok (1) [exec] = noop (1) attr_filter.accounting_response: EXPAND %{User-Name} (1) attr_filter.accounting_response: --> saied (1) attr_filter.accounting_response: Matched entry DEFAULT at line 12 (1) [attr_filter.accounting_response] = updated (1) } # accounting = updated (1) Sent Accounting-Response Id 92 from 67.205.156.27:1813 to 143.198.146.8:53796 length 20 (1) Finished request (1) Cleaning up request packet ID 92 with timestamp +91 due to done Waking up in 4.9 seconds. Here is what sql shows when I look in the Database. Database changed MariaDB [radius]> select * from radacct; +-----------+---------------+----------------------------------+----------+-------+----------------+-----------+-------------+---------------------+---------------------+---------------------+--------------+-----------------+---------------+-------------------+------------------+-----------------+------------------+-----------------+-------------------+---------------------+-------------+----------------+-----------------+-------------------+------------------+-------------------+---------------------+-------+ | radacctid | acctsessionid | acctuniqueid | username | realm | nasipaddress | nasportid | nasporttype | acctstarttime | acctupdatetime | acctstoptime | acctinterval | acctsessiontime | acctauthentic | connectinfo_start | connectinfo_stop | acctinputoctets | acctoutputoctets | calledstationid | callingstationid | acctterminatecause | servicetype | framedprotocol | framedipaddress | framedipv6address | framedipv6prefix | framedinterfaceid | delegatedipv6prefix | class | +-----------+---------------+----------------------------------+----------+-------+----------------+-----------+-------------+---------------------+---------------------+---------------------+--------------+-----------------+---------------+-------------------+------------------+-----------------+------------------+-----------------+-------------------+---------------------+-------------+----------------+-----------------+-------------------+------------------+-------------------+---------------------+-------+ | 1 | 81b00001 | c5b520f5f99234b6ed61f3b91a217a49 | saied | | 192.168.122.30 | ether2 | Ethernet | 2024-10-16 09:34:03 | 2024-10-16 12:01:17 | 2024-10-16 12:01:17 | NULL | 8834 | RADIUS | | | 19722 | 38 | | 0C:DC:B7:B1:00:00 | NAS-Request | Framed-User | PPP | 10.10.10.254 | | | | | NULL | | 2 | 81b00002 | a36501de59fc00c13cfe1a011de4fd1c | saied | | 192.168.122.30 | ether2 | Ethernet | 2024-10-16 12:01:17 | 2024-10-16 12:01:17 | 2024-10-16 12:02:16 | NULL | 59 | | | | 304 | 38 | | 0C:DC:B7:B1:00:00 | NAS-Request | Framed-User | NULL | | | | | | NULL | | 4 | 81b00003 | b7c690ca4602a8df92e3c1d2472eedea | saied | | 192.168.122.30 | ether2 | Ethernet | 2024-10-16 12:02:16 | 2024-10-16 12:02:16 | 2024-10-16 12:02:16 | NULL | 0 | | | NULL | 0 | 0 | | 0C:DC:B7:B1:00:00 | Clear-Stale Session | Framed-User | NULL | | | | | | NULL | | 6 | 81b00008 | eb0f29a1415fe5bdfa7acbcb7b4101c5 | saied | | 192.168.122.30 | ether2 | Ethernet | 2024-10-16 12:04:12 | 2024-10-16 12:04:12 | 2024-10-16 12:05:29 | NULL | 77 | | | | 304 | 38 | | 0C:DC:B7:B1:00:00 | User-Request | Framed-User | NULL | | | | | | NULL | | 8 | 81b00009 | 14647eb912c0c8314f7061cfae10bb30 | saied | | 192.168.122.30 | ether2 | Ethernet | 2024-10-16 12:05:30 | 2024-10-16 12:05:30 | 2024-10-16 12:10:34 | NULL | 305 | | | | 836 | 38 | service1 | 0C:DC:B7:B1:00:00 | User-Request | Framed-User | NULL | | | | | | NULL | | 10 | 81b0000a | 6e08adb4e8f5983f43c6bd20e3df5009 | saied | | 192.168.122.30 | ether2 | Ethernet | 2024-10-16 12:10:46 | 2024-10-16 12:10:46 | 2024-10-16 12:11:20 | NULL | 34 | | | | 304 | 38 | service1 | 0C:DC:B7:B1:00:00 | NAS-Request | Framed-User | NULL | | | | | | NULL | | 12 | 81b0000b | 7499c503b3b2bc4c69f3dec28fe60f86 | saied | | 192.168.122.30 | ether2 | Ethernet | 2024-10-16 12:11:20 | 2024-10-16 12:11:20 | NULL | NULL | 0 | | | NULL | 0 | 0 | service1 | 0C:DC:B7:B1:00:00 | | Framed-User | NULL | | | | | | NULL | +-----------+---------------+----------------------------------+----------+-------+----------------+-----------+-------------+---------------------+---------------------+---------------------+--------------+-----------------+---------------+-------------------+------------------+-----------------+------------------+-----------------+-------------------+---------------------+-------------+----------------+-----------------+-------------------+------------------+-------------------+---------------------+-------+