Hello all I come back with the same problem.... I don't want to annoy anybody but I'm still clueless. I use the fresh freeradius 2.0.2 as an accounting server (to a mysql database) but I have other server that must host accounting informations too (1 billing server and 2 for a content filtering product). I have tried to replicate my accouting data using copy-acct-to-home-server virtualhost: server copy-acct-to-home-server { listen { type = detail filename = ${radacctdir}/detail load_factor = 10 } preacct { suffix } while prior sql accouting is done by another virtual server that writes too the detail file (with the option locking = yes) used by copy-acct-to-home-server: server local_acct { accounting { detail_replic sql } } I have noticed that the detail file never gets read totaly (usually only one request) and so only few (most of the time one) requests get effectively proxied to the home server. I can't understand why... is it something contained in the request/response... I'm really clueless and would greatly appreciate any help. I have an addditionnal question.... will it be possible to copy accounting to 3 servers, and how? Thx
If it helps: while compiling freeradius 2.0.2 for my debian (using dpkg suite) I had to undefine the CISCO_ACCOUNTING_HACK to avoid accouting problem with rlm_sql. I'm not sure its related with my problem but I prefer to say it. P.S: its compiled for amd64 arch Alexandre Chapellon a écrit :
Hello all
I come back with the same problem.... I don't want to annoy anybody but I'm still clueless.
I use the fresh freeradius 2.0.2 as an accounting server (to a mysql database) but I have other server that must host accounting informations too (1 billing server and 2 for a content filtering product). I have tried to replicate my accouting data using copy-acct-to-home-server virtualhost:
server copy-acct-to-home-server { listen { type = detail filename = ${radacctdir}/detail load_factor = 10 } preacct { suffix } while prior sql accouting is done by another virtual server that writes too the detail file (with the option locking = yes) used by copy-acct-to-home-server:
server local_acct { accounting { detail_replic sql } }
I have noticed that the detail file never gets read totaly (usually only one request) and so only few (most of the time one) requests get effectively proxied to the home server. I can't understand why... is it something contained in the request/response...
I'm really clueless and would greatly appreciate any help.
I have an addditionnal question.... will it be possible to copy accounting to 3 servers, and how?
Thx - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I am wondering if i really use the bug fix for reading detail file... how can i make sure it's compiled with the bug fix? Alexandre Chapellon a écrit :
If it helps: while compiling freeradius 2.0.2 for my debian (using dpkg suite) I had to undefine the CISCO_ACCOUNTING_HACK to avoid accouting problem with rlm_sql. I'm not sure its related with my problem but I prefer to say it.
P.S: its compiled for amd64 arch
Alexandre Chapellon a écrit :
Hello all
I come back with the same problem.... I don't want to annoy anybody but I'm still clueless.
I use the fresh freeradius 2.0.2 as an accounting server (to a mysql database) but I have other server that must host accounting informations too (1 billing server and 2 for a content filtering product). I have tried to replicate my accouting data using copy-acct-to-home-server virtualhost:
server copy-acct-to-home-server { listen { type = detail filename = ${radacctdir}/detail load_factor = 10 } preacct { suffix } while prior sql accouting is done by another virtual server that writes too the detail file (with the option locking = yes) used by copy-acct-to-home-server:
server local_acct { accounting { detail_replic sql } }
I have noticed that the detail file never gets read totaly (usually only one request) and so only few (most of the time one) requests get effectively proxied to the home server. I can't understand why... is it something contained in the request/response...
I'm really clueless and would greatly appreciate any help.
I have an addditionnal question.... will it be possible to copy accounting to 3 servers, and how?
Thx - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
here follow an output of freeradius -XXX, sorry it's quite verbose... but as you can see, there's no error neither a warning whereas the detail.work contains (a lot of) remainings accounting queries to proceed.... I'm lost! Waking up in 0.9 seconds. Fri Feb 15 10:02:19 2008 : Debug: Polling for detail file /var/log/freeradius/radacct/replic/detail detail_recv: Read packet from /var/log/freeradius/radacct/replic/detail User-Name = "tQ@mana" Acct-Status-Type = Start Acct-Session-Id = "0000003F28001065-47B5EBC2" Service-Type = Framed-User Framed-Protocol = PPP Acct-Update-Reason = AAA_LOAD_ACCT_SESSION_UP NAS-Identifier = "bas3_SE" NAS-Port = 285542111 NAS-Real-Port = 285542111 NAS-Port-Type = Virtual NAS-Port-Id = "1/1 vpi-vci 5 1759 pppoe 333" Medium-Type = DSL Mac-Addr = "00-18-39-23-09-f7" Connect-Info = "ADSL_LIGHT" Calling-Station-Id = "bas3_SE/1/1/5/1759" Platform-Type = 3 OS-Version = "4.0.7.2p4" Acct-Authentic = RADIUS Class = 0x5342522d434c20444e3d227451464b57406d616e61222041543d22323030222055533d22222053493d2234353633323431302200 Qos-Policy-Metering = "QOS_128" Ip-Address-Pool-Name = "POOL_LIGHT" Session-Timeout = 43200 Client-DNS-Pri = X.X.X.X Client-DNS-Sec = X.X.X.X Framed-IP-Address = X.X.X.X Event-Timestamp = "Feb 15 2008 09:45:07 TAHT" NAS-IP-Address = X.X.X.X Acct-Unique-Session-Id = "577ea883a9d4a42b" Acct-Delay-Time = 1032 Fri Feb 15 10:02:19 2008 : Debug: server copy-acct-to-home-server { Fri Feb 15 10:02:19 2008 : Debug: +- entering group preacct Fri Feb 15 10:02:19 2008 : Debug: modsingle[preacct]: calling suffix (rlm_realm) for request 0 Fri Feb 15 10:02:19 2008 : Debug: rlm_realm: Looking up realm "mana" for User-Name = "tQFKW@mana" Fri Feb 15 10:02:19 2008 : Debug: rlm_realm: Found realm "mana" Fri Feb 15 10:02:19 2008 : Debug: rlm_realm: Proxying request from user tQFKW to realm mana Fri Feb 15 10:02:19 2008 : Debug: rlm_realm: Adding Realm = "mana" Fri Feb 15 10:02:19 2008 : Debug: rlm_realm: Preparing to proxy accounting request to realm "mana" Fri Feb 15 10:02:19 2008 : Debug: modsingle[preacct]: returned from suffix (rlm_realm) for request 0 Fri Feb 15 10:02:19 2008 : Debug: ++[suffix] returns updated Fri Feb 15 10:02:19 2008 : Debug: +- entering group accounting Fri Feb 15 10:02:19 2008 : Debug: modsingle[accounting]: calling ok (rlm_always) for request 0 Fri Feb 15 10:02:19 2008 : Debug: modsingle[accounting]: returned from ok (rlm_always) for request 0 Fri Feb 15 10:02:19 2008 : Debug: ++[ok] returns ok Fri Feb 15 10:02:19 2008 : Debug: } # server copy-acct-to-home-server Fri Feb 15 10:02:19 2008 : Debug: proxy: allocating destination 202.3.227.58 port 1813 - Id 38 Sending Accounting-Request of id 38 to 202.3.227.58 port 1813 User-Name = "tQ@mana" Acct-Status-Type = Start Acct-Session-Id = "0000003F28001065-47B5EBC2" Service-Type = Framed-User Framed-Protocol = PPP Acct-Update-Reason = AAA_LOAD_ACCT_SESSION_UP NAS-Identifier = "bas3_SE" NAS-Port = 285542111 NAS-Real-Port = 285542111 NAS-Port-Type = Virtual NAS-Port-Id = "1/1 vpi-vci 5 1759 pppoe 333" Medium-Type = DSL Mac-Addr = "00-18-39-23-09-f7" Connect-Info = "ADSL_LIGHT" Calling-Station-Id = "bas3_SE/1/1/5/1759" Platform-Type = 3 OS-Version = "4.0.7.2p4" Acct-Authentic = RADIUS Class = 0x5342522d434c20444e3d227451464b57406d616e61222041543d22323030222055533d22222053493d2234353633323431302200 Qos-Policy-Metering = "QOS_128" Ip-Address-Pool-Name = "POOL_LIGHT" Session-Timeout = 43200 Client-DNS-Pri = X.X.X.X Client-DNS-Sec = X.X.X.X Framed-IP-Address = X.X.X.X Event-Timestamp = "Feb 15 2008 09:45:07 TAHT" NAS-IP-Address = X.X.X.X Acct-Delay-Time = 1032 Proxy-State = 0x3238393236 Fri Feb 15 10:02:19 2008 : Debug: Proxying request 0 to home server 202.3.227.58 port 1813 Sending Accounting-Request of id 38 to 202.3.227.58 port 1813 User-Name = "tQ@mana" Acct-Status-Type = Start Acct-Session-Id = "0000003F28001065-47B5EBC2" Service-Type = Framed-User Framed-Protocol = PPP Acct-Update-Reason = AAA_LOAD_ACCT_SESSION_UP NAS-Identifier = "bas3_SE" NAS-Port = 285542111 NAS-Real-Port = 285542111 NAS-Port-Type = Virtual NAS-Port-Id = "1/1 vpi-vci 5 1759 pppoe 333" Medium-Type = DSL Mac-Addr = "00-18-39-23-09-f7" Connect-Info = "ADSL_LIGHT" Calling-Station-Id = "bas3_SE/1/1/5/1759" Platform-Type = 3 OS-Version = "4.0.7.2p4" Acct-Authentic = RADIUS Class = 0x5342522d434c20444e3d227451464b57406d616e61222041543d22323030222055533d22222053493d2234353633323431302200 Qos-Policy-Metering = "QOS_128" Ip-Address-Pool-Name = "POOL_LIGHT" Session-Timeout = 43200 Client-DNS-Pri = X.X.X.X Client-DNS-Sec = X.X.X.X Framed-IP-Address = X.X.X.X Event-Timestamp = "Feb 15 2008 09:45:07 TAHT" NAS-IP-Address = X.X.X.X Acct-Delay-Time = 1032 Proxy-State = 0x3238393236 Fri Feb 15 10:02:19 2008 : Debug: Going to the next request Fri Feb 15 10:02:19 2008 : Debug: Waking up in 0.9 seconds. rad_recv: Accounting-Response packet from host 202.3.227.58 port 1813, id=38, length=27 Proxy-State = 0x3238393236 Fri Feb 15 10:02:19 2008 : Debug: server copy-acct-to-home-server { Fri Feb 15 10:02:19 2008 : Debug: } # server copy-acct-to-home-server Fri Feb 15 10:02:19 2008 : Debug: Finished request 0. Fri Feb 15 10:02:19 2008 : Debug: Going to the next request Fri Feb 15 10:02:19 2008 : Debug: Waking up in 0.9 seconds. Fri Feb 15 10:02:20 2008 : Debug: Cleaning up request 0 ID 28926 with timestamp +1 Fri Feb 15 10:02:20 2008 : Debug: Ready to process requests. Alexandre Chapellon a écrit :
I am wondering if i really use the bug fix for reading detail file... how can i make sure it's compiled with the bug fix?
Alexandre Chapellon a écrit :
If it helps: while compiling freeradius 2.0.2 for my debian (using dpkg suite) I had to undefine the CISCO_ACCOUNTING_HACK to avoid accouting problem with rlm_sql. I'm not sure its related with my problem but I prefer to say it.
P.S: its compiled for amd64 arch
Alexandre Chapellon a écrit :
Hello all
I come back with the same problem.... I don't want to annoy anybody but I'm still clueless.
I use the fresh freeradius 2.0.2 as an accounting server (to a mysql database) but I have other server that must host accounting informations too (1 billing server and 2 for a content filtering product). I have tried to replicate my accouting data using copy-acct-to-home-server virtualhost:
server copy-acct-to-home-server { listen { type = detail filename = ${radacctdir}/detail load_factor = 10 } preacct { suffix } while prior sql accouting is done by another virtual server that writes too the detail file (with the option locking = yes) used by copy-acct-to-home-server:
server local_acct { accounting { detail_replic sql } }
I have noticed that the detail file never gets read totaly (usually only one request) and so only few (most of the time one) requests get effectively proxied to the home server. I can't understand why... is it something contained in the request/response...
I'm really clueless and would greatly appreciate any help.
I have an addditionnal question.... will it be possible to copy accounting to 3 servers, and how?
Thx - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Alexandre Chapellon wrote:
here follow an output of freeradius -XXX, sorry it's quite verbose... but as you can see, there's no error neither a warning whereas the detail.work contains (a lot of) remainings accounting queries to proceed....
Hmmm... it's due to an interaction between reading files normally, and reading them buffered... Ugh. I'll see if I can come up with something. Alan DeKok.
Thx for that answer Alan... Right now I have others problems that threaten me, so my freeradius setup is actually in stand by (I'll just put one or too to log in mysql db for them moment). Anyway If you can come up with something about that problem, be sure I'll be glad to start over my test and complete my setup... and lastly replace my old funk with brand new freeradiuses. thx Alan DeKok a écrit :
Alexandre Chapellon wrote:
here follow an output of freeradius -XXX, sorry it's quite verbose... but as you can see, there's no error neither a warning whereas the detail.work contains (a lot of) remainings accounting queries to proceed....
Hmmm... it's due to an interaction between reading files normally, and reading them buffered... Ugh.
I'll see if I can come up with something.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi. I know I asked this question. I want to filter users depending on their status. I mean active users can login (authenticate) to internet and rest are able to login but only to the local (or certain) websites. If I add a field named Status in the radcheck table and it only takes yes/no values. Username Attribute Op Value *Status* and I tried to insert in checkval section as follows: checkval mac { item-name = Calling-Station-Id check-name = Calling-Station-Id data-type = string } checkval status { item-name = Status check-name = Status data-type = string } and in the authorize section: authorize { .. mac status .. } It doesn't get Status (there is not Status Attribute). All I tried is if Status is yes then user authenticates and uses internet. If Status is no, also user authenticates but unable to access internet only for certain sites. Also, I read templates.conf and proxy,conf. I think my answer is in there but lack of my English, I cannot understand clearly. 2. I've tried also create 2 sql instances. But after that how the radius differs the users according to their connection. I mean when user1 connects then it checked from sql1 instances etc. But in the debugging mode, radius checks from both 2 instances. How can I manage this? Sorry for my English. Maybe I chose wrong words so you may misunderstand.
javkhlanbaatar@newcomsystems.mn wrote:
I want to filter users depending on their status. I mean active users can login (authenticate) to internet and rest are able to login but only to the local (or certain) websites. If I add a field named Status in the radcheck table and it only takes yes/no values.
Username Attribute Op Value *Status*
I'm not sure what that means...
and I tried to insert in checkval section as follows:
Why are you using checkval? In 2.x, just use "unlang". It's much easier.
Also, I read templates.conf and proxy,conf. I think my answer is in there but lack of my English, I cannot understand clearly.
Read "man unlang".
2. I've tried also create 2 sql instances. But after that how the radius differs the users according to their connection. I mean when user1 connects then it checked from sql1 instances etc.
But in the debugging mode, radius checks from both 2 instances. How can I manage this?
Read "man unlang" and "man radiusd.conf". Alan DeKok.
participants (3)
-
Alan DeKok -
Alexandre Chapellon -
javkhlanbaatar＠newcomsystems.mn