Hello, We use freeradius for our clients. Clients have a username with a realm, like user@domain. Proxy radius and radius server are on the same machine, and my proxy.conf looks like this: realm domain { type = radius authhost = localhost:1812 accthost = localhost:1813 secret = secret } Users can log in, but accounting seems to have problems: on accounting start: Wed Jun 18 11:43:30 2008 : Info: rlm_radutmp: Login entry for NAS nas port 167 duplicate on accounting stop: Wed Jun 18 11:42:05 2008 : Error: rlm_radutmp: Logout for NAS nas port 20, but no Login record Accounting is logged in a mysql database, but appears twice: once with the realm (user@domain), and once without (user). What can I do for proxied requests not to be logged ? Pre-proxy logs seems to be disabled in the radiusd.conf: # detail pre_proxy_log { # detailfile = ${radacctdir}/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d # # This MUST be 0600, otherwise anyone can read # the users passwords! # detailperm = 0600 # } Could a use attr_rewrite in this case, with something like this : attr_rewrite sanecallerid { attribute = UserName # may be "packet", "reply", "proxy", "proxy_reply" or "config" searchin = packet searchfor = "domain" replacewith = "" ignore_case = no new_attribute = no max_matches = 10 ## If set to yes then the replace string will be appended to the original string append = no } Thanks for tour answers, Mathieu
Upgrade. In 2.0.5 every virtual server has it's own AAA configuration. Ivan Kalik Kalik Informatika ISP Dana 18/6/2008, "Mathieu Lemaitre" <mlemaitre@walan.biz> piše:
Hello,
We use freeradius for our clients. Clients have a username with a realm, like user@domain. Proxy radius and radius server are on the same machine, and my proxy.conf looks like this:
realm domain { type = radius authhost = localhost:1812 accthost = localhost:1813 secret = secret }
Users can log in, but accounting seems to have problems:
on accounting start:
Wed Jun 18 11:43:30 2008 : Info: rlm_radutmp: Login entry for NAS nas port 167 duplicate
on accounting stop:
Wed Jun 18 11:42:05 2008 : Error: rlm_radutmp: Logout for NAS nas port 20, but no Login record
Accounting is logged in a mysql database, but appears twice: once with the realm (user@domain), and once without (user).
What can I do for proxied requests not to be logged ?
Pre-proxy logs seems to be disabled in the radiusd.conf:
# detail pre_proxy_log { # detailfile = ${radacctdir}/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d
# # This MUST be 0600, otherwise anyone can read # the users passwords! # detailperm = 0600 # }
Could a use attr_rewrite in this case, with something like this :
attr_rewrite sanecallerid { attribute = UserName # may be "packet", "reply", "proxy", "proxy_reply" or "config" searchin = packet searchfor = "domain" replacewith = "" ignore_case = no new_attribute = no max_matches = 10 ## If set to yes then the replace string will be appended to the original string append = no }
Thanks for tour answers,
Mathieu
participants (2)
-
Ivan Kalik -
Mathieu Lemaitre