'Idle-Timeout' and the 'Acct-Session-Time' argument
Hello, I use : -Ubuntu-server 7.10 -Freeradius 1.1.3 -Chillispot 1.0 -mysql 14.12 I have fixed an 'Idle-Timeout' argument into the "radgroupreply" MySQL table. This works fine with the users in the group but the problem is that "Idle-Timeout" doesn't report the logged out to "Acct-Session-Time". So, in the "radacct" table, I can't see the user session is terminated. What is the solution to close automatically the session in the "radacct" table when there is an "Idle-Timeout" report? Thanx a lot. -- Samson PIERRE http://yugiohjcj.free.fr/ [Licence Pro] Réseaux & Télécommunications [Diplôme Universitaire Technologique] Services et Réseaux de Communication
GNULinuxSlackware wrote:
I have fixed an 'Idle-Timeout' argument into the "radgroupreply" MySQL table. This works fine with the users in the group but the problem is that "Idle-Timeout" doesn't report the logged out to "Acct-Session-Time".
I have no idea what that means.
So, in the "radacct" table, I can't see the user session is terminated.
What is the solution to close automatically the session in the "radacct" table when there is an "Idle-Timeout" report?
Huh? Idle-Timeout is not a report. If the access point does not log the user out after an Idle-Timeout, then it does not support that feature. If you need that feature, you should use an access point which supports it. Alan DeKok.
2008/2/23, Alan DeKok <aland@deployingradius.com>:
GNULinuxSlackware wrote:
I have fixed an 'Idle-Timeout' argument into the "radgroupreply" MySQL table. This works fine with the users in the group but the problem is that "Idle-Timeout" doesn't report the logged out to "Acct-Session-Time".
I have no idea what that means. OK. So I have a Chillispot Access Point (http://www.chillispot.info/) which use Freeradius. Freeradius use MySQL to store users accounts. There is a radius database with a lot of tables : -radgroupreply I can insert into the 'Idle-Timeout' argument. -radacct I can read the 'Acct-Session-Time' argument which give me the session time for each user who is logged out.
So, in the "radacct" table, I can't see the user session is terminated.
What is the solution to close automatically the session in the "radacct" table when there is an "Idle-Timeout" report?
Huh? Idle-Timeout is not a report.
No Idle-Timeout is only an argument for Freeradius in my MySQL radius database.
If the access point does not log the user out after an Idle-Timeout, then it does not support that feature. If you need that feature, you should use an access point which supports it.
Alan DeKok.
How to update automatically the 'Acct-Session-Time' argument when there is an 'Idle-Timeout'? Thank you a lot.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Samson PIERRE http://yugiohjcj.free.fr/ [Licence Pro] Réseaux & Télécommunications [Diplôme Universitaire Technologique] Services et Réseaux de Communication
GNULinuxSlackware wrote:
There is a radius database with a lot of tables : -radgroupreply I can insert into the 'Idle-Timeout' argument.
Do you know what that does?
-radacct I can read the 'Acct-Session-Time' argument which give me the session time for each user who is logged out.
Yes. And this has little or nothing to do with Idle-Timeout.
How to update automatically the 'Acct-Session-Time' argument when there is an 'Idle-Timeout'?
That question makes no sense. What do you think Idle-Timeout means? What do you think it does? What do you think Acct-Session-Timeout means? What do you think it does? Alan DeKok.
2008/2/23, Alan DeKok <aland@deployingradius.com>:
GNULinuxSlackware wrote:
There is a radius database with a lot of tables : -radgroupreply I can insert into the 'Idle-Timeout' argument.
Do you know what that does?
Yes when I set the 'Idle-Timeout' to a value (in seconds) the user will be automatically disconnected after the time if he doesn't use the Internet connection. I have tried and it works perfectly.
-radacct I can read the 'Acct-Session-Time' argument which give me the session time for each user who is logged out.
Yes. And this has little or nothing to do with Idle-Timeout.
How to update automatically the 'Acct-Session-Time' argument when there is an 'Idle-Timeout'?
That question makes no sense.
Sorry I thought my question was good.
What do you think Idle-Timeout means? What do you think it does?
The 'Idle-Timeout' allow me to set a value (in seconds), the user will be automatically disconnected after the time if he doesn't use the Internet connection.
What do you think Acct-Session-Timeout means? What do you think it does?
This is the time between the session start and the session stop for each user. When there is a log off, the session timeout is updated because we have the 2 values : -start connexion -stop connexion
Alan DeKok.
You can learn more about these 2 arguments in : http://www.chillispot.info/features.html#mozTocId254514 Can you explain me why chen a user is disconnected automatically by the 'Idle-Timeout' value, the ' Acct-Session-Timeout' isn't updated?
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Samson PIERRE http://yugiohjcj.free.fr/ [Licence Pro] Réseaux & Télécommunications [Diplôme Universitaire Technologique] Services et Réseaux de Communication
This is nothing to do with Freeradius. Chillispot enforces Idle-Timeout. If it "thinks" the users is active it will not disconnect the session. There is nothing radius server can do about it. This is a Chillispot problem. Ivan Kalik Kalik Informatika ISP Dana 23/2/2008, "GNULinuxSlackware" <gnulinuxslackware@free.fr> piše:
2008/2/23, Alan DeKok <aland@deployingradius.com>:
GNULinuxSlackware wrote:
I have fixed an 'Idle-Timeout' argument into the "radgroupreply" MySQL table. This works fine with the users in the group but the problem is that "Idle-Timeout" doesn't report the logged out to "Acct-Session-Time".
I have no idea what that means. OK. So I have a Chillispot Access Point (http://www.chillispot.info/) which use Freeradius. Freeradius use MySQL to store users accounts. There is a radius database with a lot of tables : -radgroupreply I can insert into the 'Idle-Timeout' argument. -radacct I can read the 'Acct-Session-Time' argument which give me the session time for each user who is logged out.
So, in the "radacct" table, I can't see the user session is terminated.
What is the solution to close automatically the session in the "radacct" table when there is an "Idle-Timeout" report?
Huh? Idle-Timeout is not a report.
No Idle-Timeout is only an argument for Freeradius in my MySQL radius database.
If the access point does not log the user out after an Idle-Timeout, then it does not support that feature. If you need that feature, you should use an access point which supports it.
Alan DeKok.
How to update automatically the 'Acct-Session-Time' argument when there is an 'Idle-Timeout'?
Thank you a lot.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/usershtml
-- Samson PIERRE http://yugiohjcj.free.fr/
[Licence Pro] Réseaux & Télécommunications [Diplôme Universitaire Technologique] Services et Réseaux de Communication
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
2008/2/23, Ivan Kalik <tnt@kalik.net>:
This is nothing to do with Freeradius. Chillispot enforces Idle-Timeout. If it "thinks" the users is active it will not disconnect the session. There is nothing radius server can do about it. This is a Chillispot problem.
'Idle-Timeout' timeout is an argument in Radius. Chillispot use this radius argument. I think freeradius configuration can update automatically the Acct-Session-Time argument if it see a user is IDLE. What do you think about this?
Ivan Kalik Kalik Informatika ISP
Dana 23/2/2008, "GNULinuxSlackware" <gnulinuxslackware@free.fr> piše:
2008/2/23, Alan DeKok <aland@deployingradius.com>:
GNULinuxSlackware wrote:
I have fixed an 'Idle-Timeout' argument into the "radgroupreply" MySQL table. This works fine with the users in the group but the problem is that "Idle-Timeout" doesn't report the logged out to "Acct-Session-Time".
I have no idea what that means. OK. So I have a Chillispot Access Point (http://www.chillispot.info/) which use Freeradius. Freeradius use MySQL to store users accounts. There is a radius database with a lot of tables : -radgroupreply I can insert into the 'Idle-Timeout' argument. -radacct I can read the 'Acct-Session-Time' argument which give me the session time for each user who is logged out.
So, in the "radacct" table, I can't see the user session is terminated.
What is the solution to close automatically the session in the "radacct" table when there is an "Idle-Timeout" report?
Huh? Idle-Timeout is not a report.
No Idle-Timeout is only an argument for Freeradius in my MySQL radius database.
If the access point does not log the user out after an Idle-Timeout, then it does not support that feature. If you need that feature, you should use an access point which supports it.
Alan DeKok.
How to update automatically the 'Acct-Session-Time' argument when there is an 'Idle-Timeout'?
Thank you a lot.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/usershtml
-- Samson PIERRE http://yugiohjcj.free.fr/
[Licence Pro] Réseaux & Télécommunications [Diplôme Universitaire Technologique] Services et Réseaux de Communication
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Samson PIERRE http://yugiohjcj.free.fr/ [Licence Pro] Réseaux & Télécommunications [Diplôme Universitaire Technologique] Services et Réseaux de Communication
'Idle-Timeout' timeout is an argument in Radius. Chillispot use this radius argument.
Yes.
I think freeradius configuration can update automatically the Acct-Session-Time argument if it see a user is IDLE. What do you think about this?
No. Chillispot does the accounting and sends data to freeradius. Radius server has no idea about whether the user is connected or not. It is up to the NAS to send that information to it. If Chillispot disconnects the user and doesn't send accounting Stop packet to freeradius the session in radius database will remain open. As far as I can see that's how you set up the Chillispot - disconnect the session only on clicking the logout link. Set up Chillispot properly. Ivan Kalik Kalik Informatika ISP
On Sun, Feb 24, 2008 at 2:59 PM, Ivan Kalik <tnt@kalik.net> wrote:
'Idle-Timeout' timeout is an argument in Radius. Chillispot use this radius argument.
Yes.
I think freeradius configuration can update automatically the Acct-Session-Time argument if it see a user is IDLE. What do you think about this?
No. Chillispot does the accounting and sends data to freeradius. Radius server has no idea about whether the user is connected or not. It is up to the NAS to send that information to it. If Chillispot disconnects the user and doesn't send accounting Stop packet to freeradius the session in radius database will remain open. As far as I can see that's how you set up the Chillispot - disconnect the session only on clicking the logout link. Set up Chillispot properly.
Ivan Kalik Kalik Informatika ISP
Yes, and a correct functioning chillispot definitely sends an accounting stop packet when idle-timeout is reached and user gets logged out. I got idle-timeout in radgroupreply too, and as soon as chillispot reaches the idle-timeout for a user the user gets disconnected (by chillispot) and the accounting session is closed in radacct. In acctTerminateCause you should find idle-timeout as termination cause in this scenario. This is standard behaviour for chillispot in a correct setup. So I don't understand why this isn't working for the OP. Sniff your network and see if an acctstop packet is sent by your chillispot when idle timeout is reached. Kind regards Y.
2008/2/24, YvesDM <ydmlog@gmail.com>:
On Sun, Feb 24, 2008 at 2:59 PM, Ivan Kalik <tnt@kalik.net> wrote:
'Idle-Timeout' timeout is an argument in Radius. Chillispot use this radius argument.
Yes.
I think freeradius configuration can update automatically the Acct-Session-Time argument if it see a user is IDLE. What do you think about this?
No. Chillispot does the accounting and sends data to freeradius. Radius server has no idea about whether the user is connected or not. It is up to the NAS to send that information to it. If Chillispot disconnects the user and doesn't send accounting Stop packet to freeradius the session in radius database will remain open. As far as I can see that's how you set up the Chillispot - disconnect the session only on clicking the logout link. Set up Chillispot properly.
Ivan Kalik Kalik Informatika ISP
Yes, and a correct functioning chillispot definitely sends an accounting stop packet when idle-timeout is reached and user gets logged out. I got idle-timeout in radgroupreply too, and as soon as chillispot reaches the idle-timeout for a user the user gets disconnected (by chillispot) and the accounting session is closed in radacct. In acctTerminateCause you should find idle-timeout as termination cause in this scenario. This is standard behaviour for chillispot in a correct setup. So I don't understand why this isn't working for the OP. Sniff your network and see if an acctstop packet is sent by your chillispot when idle timeout is reached.
Kind regards
Y. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Yes finally it works. I reinstall Chillispot + Freeradius and now when a user is disconnected automatically, the session-time is updated. Maybe an error in a config file. Thank you all. -- Samson PIERRE http://yugiohjcj.free.fr/ [Licence Pro] Réseaux & Télécommunications [Diplôme Universitaire Technologique] Services et Réseaux de Communication
Hey Pierre, Chillispot will disconnect the user but the problem you're facing is that it isn't actually idle (can happen because of many reasons that you didn't take in consideration). So instead of idle-timeout use the session-timeout attribute and give it a try. Regards, Liran Tal. On Sat, Feb 23, 2008 at 6:09 PM, GNULinuxSlackware < gnulinuxslackware@free.fr> wrote:
2008/2/23, Alan DeKok <aland@deployingradius.com>:
GNULinuxSlackware wrote:
I have fixed an 'Idle-Timeout' argument into the "radgroupreply" MySQL table. This works fine with the users in the group but the problem is that "Idle-Timeout" doesn't report the logged out to "Acct-Session-Time".
I have no idea what that means. OK. So I have a Chillispot Access Point (http://www.chillispot.info/) which use Freeradius. Freeradius use MySQL to store users accounts. There is a radius database with a lot of tables : -radgroupreply I can insert into the 'Idle-Timeout' argument. -radacct I can read the 'Acct-Session-Time' argument which give me the session time for each user who is logged out.
So, in the "radacct" table, I can't see the user session is
terminated.
What is the solution to close automatically the session in the "radacct" table when there is an "Idle-Timeout" report?
Huh? Idle-Timeout is not a report. No Idle-Timeout is only an argument for Freeradius in my MySQL radius database.
If the access point does not log the user out after an Idle-Timeout, then it does not support that feature. If you need that feature, you should use an access point which supports it.
Alan DeKok.
How to update automatically the 'Acct-Session-Time' argument when there is an 'Idle-Timeout'?
Thank you a lot.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Samson PIERRE http://yugiohjcj.free.fr/
[Licence Pro] Réseaux & Télécommunications [Diplôme Universitaire Technologique] Services et Réseaux de Communication
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
2008/2/24, Liran Tal <liran@enginx.com>:
Hey Pierre,
Chillispot will disconnect the user but the problem you're facing is that it isn't actually idle (can happen because of many reasons that you didn't take in consideration).
So instead of idle-timeout use the session-timeout attribute and give it a try.
Yes but the 'session-timeout' argument disconnect the user after a time. And I would like the user is disconnected after an IDLE time. Do you have an other idea?
Regards, Liran Tal.
On Sat, Feb 23, 2008 at 6:09 PM, GNULinuxSlackware <gnulinuxslackware@free.fr> wrote:
2008/2/23, Alan DeKok <aland@deployingradius.com>:
GNULinuxSlackware wrote:
I have fixed an 'Idle-Timeout' argument into the "radgroupreply" MySQL table. This works fine with the users in the group but the problem is that "Idle-Timeout" doesn't report the logged out to "Acct-Session-Time".
I have no idea what that means. OK. So I have a Chillispot Access Point (http://www.chillispot.info/) which use Freeradius. Freeradius use MySQL to store users accounts. There is a radius database with a lot of tables : -radgroupreply I can insert into the 'Idle-Timeout' argument. -radacct I can read the 'Acct-Session-Time' argument which give me the session time for each user who is logged out.
So, in the "radacct" table, I can't see the user session is
terminated.
What is the solution to close automatically the session in the "radacct" table when there is an "Idle-Timeout" report?
Huh? Idle-Timeout is not a report. No Idle-Timeout is only an argument for Freeradius in my MySQL radius database.
If the access point does not log the user out after an Idle-Timeout, then it does not support that feature. If you need that feature, you should use an access point which supports it.
Alan DeKok.
How to update automatically the 'Acct-Session-Time' argument when there is an 'Idle-Timeout'?
Thank you a lot.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Samson PIERRE http://yugiohjcj.free.fr/
[Licence Pro] Réseaux & Télécommunications [Diplôme Universitaire Technologique] Services et Réseaux de Communication
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Samson PIERRE http://yugiohjcj.free.fr/ [Licence Pro] Réseaux & Télécommunications [Diplôme Universitaire Technologique] Services et Réseaux de Communication
Pierre, So you are indeed looking for an Idle-Timeout, in this case how do you know that it doesn't work? how can you be sure that your NAS is supposed to send the Idle-Timeout at all? I am talking about tests that you should do. Taking the basic scenario - you authenticate and surf to google.com, you then don't do anything for the 60 seconds time period which you defined for Idle-Timeout and expect to be disconnected, right? But the fact that you haven't touched your computer doesn't mean it's been idle. It is possible that your browser refreshes the page automatically every 30 seconds, maybe some windows update software is running in the background, maybe some DNS records are resolving, maybe you have an IM software in the background doing it's stuff... Get my point? Regards, Liran Tal. On Sun, Feb 24, 2008 at 11:31 AM, GNULinuxSlackware < gnulinuxslackware@free.fr> wrote:
2008/2/24, Liran Tal <liran@enginx.com>:
Hey Pierre,
Chillispot will disconnect the user but the problem you're facing is that it isn't actually idle (can happen because of many reasons that you didn't take in consideration).
So instead of idle-timeout use the session-timeout attribute and give it a try.
Yes but the 'session-timeout' argument disconnect the user after a time. And I would like the user is disconnected after an IDLE time. Do you have an other idea?
Regards, Liran Tal.
On Sat, Feb 23, 2008 at 6:09 PM, GNULinuxSlackware <gnulinuxslackware@free.fr> wrote:
2008/2/23, Alan DeKok <aland@deployingradius.com>:
GNULinuxSlackware wrote:
I have fixed an 'Idle-Timeout' argument into the "radgroupreply" MySQL table. This works fine with the users in the group but the problem is
that
"Idle-Timeout" doesn't report the logged out to "Acct-Session-Time".
I have no idea what that means. OK. So I have a Chillispot Access Point (http://www.chillispot.info/) which use Freeradius. Freeradius use MySQL to store users accounts. There is a radius database with a lot of tables : -radgroupreply I can insert into the 'Idle-Timeout' argument. -radacct I can read the 'Acct-Session-Time' argument which give me the session time for each user who is logged out.
So, in the "radacct" table, I can't see the user session is
terminated.
What is the solution to close automatically the session in the "radacct" table when there is an "Idle-Timeout" report?
Huh? Idle-Timeout is not a report. No Idle-Timeout is only an argument for Freeradius in my MySQL radius database.
If the access point does not log the user out after an
Idle-Timeout,
then it does not support that feature. If you need that feature, you should use an access point which supports it.
Alan DeKok.
How to update automatically the 'Acct-Session-Time' argument when there is an 'Idle-Timeout'?
Thank you a lot.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Samson PIERRE http://yugiohjcj.free.fr/
[Licence Pro] Réseaux & Télécommunications [Diplôme Universitaire Technologique] Services et Réseaux de Communication
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Samson PIERRE http://yugiohjcj.free.fr/
[Licence Pro] Réseaux & Télécommunications [Diplôme Universitaire Technologique] Services et Réseaux de Communication
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
2008/2/24, Liran Tal <liran@enginx.com>:
Pierre,
So you are indeed looking for an Idle-Timeout, in this case how do you know that it doesn't work? how can you be sure that your NAS is supposed to send the Idle-Timeout at all?
I am talking about tests that you should do. Taking the basic scenario - you authenticate and surf to google.com, you then don't do anything for the 60 seconds time period which you defined for Idle-Timeout and expect to be disconnected, right? But the fact that you haven't touched your computer doesn't mean it's been idle. It is possible that your browser refreshes the page automatically every 30 seconds, maybe some windows update software is running in the background, maybe some DNS records are resolving, maybe you have an IM software in the background doing it's stuff...
Get my point?
Yes I understand. Maybe it check only if new HTTP request are done. But the problem isn't here because it works fine. After the Idle-Timeout I need to be relogged to access to the Internet. I just want tu update the session time value when there is an Idle-Timeout for the user. The session has an infinite time because the user need to log out using the Chillispot "log out" link on the pop-up. I would like the user doesn't need to clic on the link. Can we do this?
Regards, Liran Tal.
On Sun, Feb 24, 2008 at 11:31 AM, GNULinuxSlackware <gnulinuxslackware@free.fr> wrote:
2008/2/24, Liran Tal <liran@enginx.com>:
Hey Pierre,
Chillispot will disconnect the user but the problem you're facing is that it isn't actually idle (can happen because of many reasons that you didn't take in consideration).
So instead of idle-timeout use the session-timeout attribute and give it a try.
Yes but the 'session-timeout' argument disconnect the user after a time. And I would like the user is disconnected after an IDLE time. Do you have an other idea?
Regards, Liran Tal.
On Sat, Feb 23, 2008 at 6:09 PM, GNULinuxSlackware <gnulinuxslackware@free.fr> wrote:
2008/2/23, Alan DeKok <aland@deployingradius.com>:
GNULinuxSlackware wrote:
I have fixed an 'Idle-Timeout' argument into the "radgroupreply" MySQL table. This works fine with the users in the group but the problem is
that
"Idle-Timeout" doesn't report the logged out to "Acct-Session-Time".
I have no idea what that means. OK. So I have a Chillispot Access Point (http://www.chillispot.info/) which use Freeradius. Freeradius use MySQL to store users accounts. There is a radius database with a lot of tables : -radgroupreply I can insert into the 'Idle-Timeout' argument. -radacct I can read the 'Acct-Session-Time' argument which give me the session time for each user who is logged out.
So, in the "radacct" table, I can't see the user session is
terminated.
What is the solution to close automatically the session in the "radacct" table when there is an "Idle-Timeout" report?
Huh? Idle-Timeout is not a report. No Idle-Timeout is only an argument for Freeradius in my MySQL radius database.
If the access point does not log the user out after an
Idle-Timeout,
then it does not support that feature. If you need that feature, you should use an access point which supports it.
Alan DeKok.
How to update automatically the 'Acct-Session-Time' argument when there is an 'Idle-Timeout'?
Thank you a lot.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Samson PIERRE http://yugiohjcj.free.fr/
[Licence Pro] Réseaux & Télécommunications [Diplôme Universitaire Technologique] Services et Réseaux de Communication
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Samson PIERRE http://yugiohjcj.free.fr/
[Licence Pro] Réseaux & Télécommunications [Diplôme Universitaire Technologique] Services et Réseaux de Communication
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Samson PIERRE http://yugiohjcj.free.fr/ [Licence Pro] Réseaux & Télécommunications [Diplôme Universitaire Technologique] Services et Réseaux de Communication
GNULinuxSlackware wrote:
After the Idle-Timeout I need to be relogged to access to the Internet. I just want tu update the session time value when there is an Idle-Timeout for the user.
Update the session time to... what? Why?
The session has an infinite time because the user need to log out using the Chillispot "log out" link on the pop-up. I would like the user doesn't need to clic on the link. Can we do this?
It's up to Chillispot to log out the user after an Idle-Timeout or a Session-Timeout. Alan DeKok.
participants (5)
-
Alan DeKok -
GNULinuxSlackware -
Ivan Kalik -
Liran Tal -
YvesDM