Hi, I'm having to write my own validation and accounting for a device, and I need to understand a little about the flow. Is there a good reference for this? I don't have to support much, basically user/pass authentication, updating accounting, timeout, logoff. I understand that I send it an "Access-Request" packet, and I get back either Access-Accept with potentially some Attributes, or an Access-Reject if it failed. I believe I next need to send an accounting_start packet. Some of the items I'm not sure where they come from (Acct-Session-Id, Acct-Unique-Session-Id) or how they might be generated. During the course of the user being on, I believe you send accounting_updates and at the end send an accounting_stop. One thing I really don't know is where does Max-All-Session come in? In my initial testing, it didn't come back as an attribute. (Maybe incorrectly). Thanks, Tuc
Tuc at T-B-O-H.NET wrote:
I'm having to write my own validation and accounting for a device,
Don't. Please. There are a number of RADIUS libraries available, including freeradius-client, on freeradius.org. It's supported, it works, and it's in use by a number of products.
and I need to understand a little about the flow. Is there a good reference for this? I don't have to support much, basically user/pass authentication, updating accounting, timeout, logoff.
See the RFC's.
I believe I next need to send an accounting_start packet. Some of the items I'm not sure where they come from (Acct-Session-Id, Acct-Unique-Session-Id) or how they might be generated.
This is not a mailing list for general RADIUS questions. The RFC's exist. Please read them. If you're doing this for a customer, you're getting paid. Don't expect anyone here to help you (for free) to create your product that has nothing to do with FreeRADIUS. Alan DeKok.
I'm having to write my own validation and accounting for a device,
Don't. Please. There are a number of RADIUS libraries available, including freeradius-client, on freeradius.org. It's supported, it works, and it's in use by a number of products.
I have no issue using a library. Right now I'm working with Net::Radius. But to use it I need to understand the flow since it only seems to be able to assemble and disassemble the packets, not tell me how to do it.
and I need to understand a little about the flow. Is there a good reference for this? I don't have to support much, basically user/pass authentication, updating accounting, timeout, logoff.
See the RFC's.
Ok. I was hoping for something more than RFC's, but if thats the starting point, off I'll go.
I believe I next need to send an accounting_start packet. Some of the items I'm not sure where they come from (Acct-Session-Id, Acct-Unique-Session-Id) or how they might be generated.
This is not a mailing list for general RADIUS questions. The RFC's exist. Please read them.
Jawol.
If you're doing this for a customer, you're getting paid. Don't expect anyone here to help you (for free) to create your product that has nothing to do with FreeRADIUS.
Actually, no, I'm not doing this for a customer. I'm doing it for an OpenSource/Sourceforge project, but I really appreciate your support in it all. Tuc
participants (2)
-
Alan DeKok -
Tuc at T-B-O-H.NET