copy acct to home server
Hello, I want to use freeradius 2.0.1 to do accouting for my DSL users. I would like to acheive the following setup: NASes send request to the first radius (SunOS radius) which only handles authentication request and proxies accouting request to Freeradius (v2.0.1). I'd like freeradius to do several things: 1 - Do accounting to a mysql database 2 - Send accounting responses to the first radius 3 - proxy/copy accouting data to severals home server (3 servers: 1 billing server and 2 content filtering servers) To do this I setup freeradius 2.0.1 with 1 default virtual server writing accouting to mysql and to a detail file and one other virtual server which listen the detail file ( listen { type = detail....} ) and proxies request The problem is that the proxying is done for one request and stops when the response has been received.... so others request that are in the detail file are not proxied! does anybody have an idea / use this kind of setup? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I upgraded to 2.0.2 but still have a problem with reading detail (to do copy-acct-to-home-server ): It only processes the first request of the detail file and stops after receiving the accouting response. Alexandre Chapellon a écrit :
Hello, I want to use freeradius 2.0.1 to do accouting for my DSL users.
I would like to acheive the following setup:
NASes send request to the first radius (SunOS radius) which only handles authentication request and proxies accouting request to Freeradius (v2.0.1). I'd like freeradius to do several things:
1 - Do accounting to a mysql database 2 - Send accounting responses to the first radius 3 - proxy/copy accouting data to severals home server (3 servers: 1 billing server and 2 content filtering servers)
To do this I setup freeradius 2.0.1 with 1 default virtual server writing accouting to mysql and to a detail file and one other virtual server which listen the detail file ( listen { type = detail....} ) and proxies request The problem is that the proxying is done for one request and stops when the response has been received.... so others request that are in the detail file are not proxied!
does anybody have an idea / use this kind of setup? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi, I've installed 2.0.2 version and run with debug mode. I've got username, password and MAC address in mysql radcheck table. But it didn't check MAC address. but in my radiusd.conf, there is checkval : checkval { item-name = Calling-Station-Id check-name = Calling-Station-Id data-type = string #notfound-reject = no } I've also enabled 'checkval' in authorize section from sites-enabled/default. in 2.0.1, it was working. Here is the log with debug mode: on authentication address * port 1645 Listening on accounting address * port 1646 Ready to process requests. rad_recv: Access-Request packet from host 203.34.37.117 port 1218, id=9, length=45 User-Name = "steve" User-Password = "testing" +- entering group authorize ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop rlm_realm: No '@' in User-Name = "steve", looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix] returns noop rlm_eap: No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound users: Matched entry steve at line 76 ++[files] returns ok expand: %{User-Name} -> steve rlm_sql (sql): sql_set_user escaped user --> 'steve' rlm_sql (sql): Reserving sql socket id: 4 expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'steve' ORDER BY id expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'steve' ORDER BY priority rlm_sql (sql): Released sql socket id: 4 rlm_sql (sql): User steve not found ++[sql] returns notfound rlm_checkval: Could not find item named Calling-Station-Id in request rlm_checkval: Could not find attribute named Calling-Station-Id in check pairs ++[checkval] returns notfound ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns updated rad_check_password: Found Auth-Type auth: type "PAP" +- entering group PAP rlm_pap: login attempt with password "testing" rlm_pap: Using clear text password "testing" rlm_pap: User authenticated successfully ++[pap] returns ok Login OK: [steve/testing] (from client real-networks port 0) Sending Access-Accept of id 9 to 203.34.37.117 port 1218 Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = 172.16.3.33 Framed-IP-Netmask = 255.255.255.0 Framed-Routing = Broadcast-Listen Framed-Filter-Id = "std.ppp" Framed-MTU = 1500 Framed-Compression = Van-Jacobson-TCP-IP Finished request 0. Going to the next request Waking up in 0.9 seconds. Waking up in 4.0 seconds. Cleaning up request 0 ID 9 with timestamp +6 Ready to process requests. Whats the problem
javkhlanbaatar@newcomsystems.mn wrote:
I've installed 2.0.2 version and run with debug mode. I've got username, password and MAC address in mysql radcheck table. But it didn't check MAC address. but in my radiusd.conf, there is checkval :
You sent it an Access-Request that doesn't contain a Calling-Station-Id attribute. What do you expect it to do? Alan DeKok.
Hi, Ok Alan. I get it. My fault. Thanks. I want to ask how can I manage two different authorization? I mean, I have 2 radcheck and radreply tablesin mysql. (radcheck1, radcheck2, radreply1 and radreply2). When User1 authenticates, mysql checks in radcheck1 table and replies from radreply1 table. As for User2, it is same as above, checks radcheck2 and reply from radreply2. How can I manage two different users' logins check according to their related tables?
javkhlanbaatar@newcomsystems.mn wrote:
I've installed 2.0.2 version and run with debug mode. I've got username, password and MAC address in mysql radcheck table. But it didn't check MAC address. but in my radiusd.conf, there is checkval :
You sent it an Access-Request that doesn't contain a Calling-Station-Id attribute. What do you expect it to do?
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
javkhlanbaatar@newcomsystems.mn wrote:
I want to ask how can I manage two different authorization? I mean, I have 2 radcheck and radreply tablesin mysql. (radcheck1, radcheck2, radreply1 and radreply2). When User1 authenticates, mysql checks in radcheck1 table and replies from radreply1 table. As for User2, it is same as above, checks radcheck2 and reply from radreply2. How can I manage two different users' logins check according to their related tables?
You will need 2 instances of the SQL module, and associated configuration. The documentation covers such situations. Alan DeKok.
hi Alan, where is the db_mysql.sql file in 2.0.2? i've searched whole, but found nothing.
Hi,
hi Alan,
where is the db_mysql.sql file in 2.0.2? i've searched whole, but found nothing.
freeradius-server-2.0.2/raddb/sql/mysql/nas.sql freeradius-server-2.0.2/raddb/sql/mysql/schema.sql freeradius-server-2.0.2/raddb/sql/mysql/ippool.sql alan
participants (4)
-
A.L.M.Buxey@lboro.ac.uk -
Alan DeKok -
Alexandre Chapellon -
javkhlanbaatar@newcomsystems.mn