radgroupcheck attributes and test client
All, I'm a newbie in radius. I've setup freeradius with mySQL and max-daily-session. When I set max-daily-session := 10 in radgroupcheck table, a user of this group can login (accept packet after authentication), even if he already has been logged in for 10 seconds before. I'm using NTRadPing and Radius Test Rig Utily as a client. I've sent accounting packages. Radacct table got populated (beginning and end of session, no octets). Is it a client issue? Must NTRadPing send any additional parameters? Any help is appreciated. Chris
FR should be able to know if the allowed time used / consumed before it can deny request. have you setup rlm_sqlcounter ? Thanks RM -- On Fri, May 3, 2013 at 7:49 AM, <ch2009@arcor.de> wrote:
All,
I'm a newbie in radius.
I've setup freeradius with mySQL and max-daily-session. When I set max-daily-session := 10 in radgroupcheck table, a user of this group can login (accept packet after authentication), even if he already has been logged in for 10 seconds before. I'm using NTRadPing and Radius Test Rig Utily as a client. I've sent accounting packages. Radacct table got populated (beginning and end of session, no octets).
Is it a client issue? Must NTRadPing send any additional parameters?
Any help is appreciated.
Chris - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi, Von: Russell Mike <radius.sir@gmail.com>
FR should be able to know if the allowed time used / consumed before it can deny request. have you setup rlm_sqlcounter ?
Yes. The same setup is working with a Coova Chilli WLAN Router, so I guess it is a client issue. Chris
You said same setup is working with Coovachilli, same groups / profiles? Else cross chech your reply & check items, if in place. If FR groups are same check NAS side. Thanks On Friday, May 3, 2013, wrote:
Hi,
Von: Russell Mike <radius.sir@gmail.com <javascript:;>>
FR should be able to know if the allowed time used / consumed before it can deny request. have you setup rlm_sqlcounter ?
Yes. The same setup is working with a Coova Chilli WLAN Router, so I guess it is a client issue.
Chris - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Von: Russell Mike <radius.sir@gmail.com>
You said same setup is working with Coovachilli, same groups / profiles? Else cross chech your reply & check items, if in place. If FR groups are same check NAS side. Thanks
I'll check reply and check items when I'm in office again, but I'm quite sure they are the same. How can I check NAS side? One is Coovachilli, the other is a radius test client (NTRadPing and Radius Test Rig Utily) Thank you! Chris
On Sun, May 5, 2013 at 6:51 PM, <ch2009@arcor.de> wrote:
Von: Russell Mike <radius.sir@gmail.com>
You said same setup is working with Coovachilli, same groups / profiles? Else cross chech your reply & check items, if in place. If FR groups are same check NAS side. Thanks
I'll check reply and check items when I'm in office again, but I'm quite sure they are the same.
How can I check NAS side?
Documentation will tell
One is Coovachilli, the other is a radius test client (NTRadPing and Radius Test Rig Utily)
you need to create NAS entry in MySQL or File for the ip address of the machine. The machine from where you would run NTRadping.
Thank you!
Chris - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi Mike, Now, I've compared the mySQL tables and started freeradius in debugging mode. When Coova Chilli is used, acctsessiontime is filled in the mySQL table. When NTRadping Test Utility is used, acctstarttime and acctstoptime is set correctly, but acctsessiontime is always zero in mySQL. I've found a detail-log from a portmaster [1]. I didn't know, that the NAS has to send the Acct-Session-Time with the stop-request (Newbie!). When I set Acct-Session-Time in NTRadping Test Utility it's working as expected. Is it true, that Acct-Session-Time has to be set by NAS or is it possible to calculate it by the difference between acctstarttime and acctstoptime (and write it to mySQL)? Some counters are using acctstarttime and acctstoptime directly and calculate the difference in the SQL-query when checking if time is left. Chris [1] http://www.stat.ufl.edu/system/man/portmaster/RADIUS/guide/7account.html
Chris wrote:
When NTRadping Test Utility is used, acctstarttime and acctstoptime is set correctly, but acctsessiontime is always zero in mySQL.
Because ntradping doesn't send it.
I've found a detail-log from a portmaster [1]. I didn't know, that the NAS has to send the Acct-Session-Time with the stop-request (Newbie!). When I set Acct-Session-Time in NTRadping Test Utility it's working as expected.
Exactly.
Is it true, that Acct-Session-Time has to be set by NAS or is it possible to calculate it by the difference between acctstarttime and acctstoptime (and write it to mySQL)?
It's possible. It requires a custom SQL query. Alan DeKok.
participants (4)
-
Alan DeKok -
ch2009＠arcor.de -
Chris
-
Russell Mike