Thanks for the help Alan, I see what you mean now. I guess I assumed that the radacct database was more than a recording of session start and end times. Is there another table that I should be seeing user activity in? In other words I was thinking that user activity (ie. the commands they entered) would be logged somewhere in the sql tables vice in the /var/log/radius/radacct/IP_ADDR/detail_`date` file. Can I simply create a new table called for instance Acct_activity and modify the dialup.conf file to dump that data in that table keying on session-id and time for instance? I'm sure that's not supposed to be in the radacct table. btw: where do I comment out radutmp? N On Mon, Jun 7, 2010 at 11:56 AM, Alan Buxey <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
rad_recv: Accounting-Request packet from host x.x.x.120 port 51637,
id=50, length=95
Acct-Status-Type = Interim-Update Acct-Session-Id = "C2594B9A71DB" Acct-Delay-Time = 0 User-Name = "joe.bobuser" NAS-Identifier = "M20" Juniper-Interactive-Command = "run start shell " NAS-IP-Address = x.x.x.120 +- entering group preacct {...} ++[preprocess] returns ok [acct_unique] WARNING: Attribute NAS-Port was not found in request,
unique ID MAY be inconsistent
your NAS is doing all sorts of things wrong really. its supposed to supply a NAS-Port and that value is supposed to change for each session. oh well. edit your modules/acct_unique to put something else into the hashing function
[radutmp] expand: /var/log/radius/radutmp -> /var/log/radius/radutmp [radutmp] expand: %{User-Name} -> joe.bobuser rlm_radutmp: No NAS-Port seen. Cannot do anything. rlm_radumtp: WARNING: checkrad will probably not work!
are you using radutmp? if not, comment it out.
As can be seen above the rad_recv: section is sending back a few items that I am interested in having logged. For instance the Juniper-Interactive-Command.
Thanks if you can help or point me in the right direction.
simply add those attributes (if present!) into the SQL that create the accounting INSERT/UPDATE commands - sql/mysql/dialup.conf - and ensure the table is ready for them! :-)
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html