problem with username renamed in radacct table
Hi, For some reasons i don't understand, somtimes when accounting in radacct mysql table the username is renamed in "web-portal-ssid" where ssid is the SSID Web-Portal based. here is an extract from the radacct table. +------------------+-----------------------+------------------------------+ | AcctUniqueId | UserName | CalledStationId | +------------------+-----------------------+------------------------------+ | 1ca29251b4aee1d6 | web-portal-Externes | 00-0B-0E-D4-45-C3:Externes | | 1ca29251b4aee1d6 | pierre.ext | 00-0B-0E-D4-45-C3:Externes | | 0472c6df49eb047b | alain.ext | 00-0B-0E-A9-0D-C2:Externes | | 41cce9d4da272c19 | james.ext | 00-26-3E-6F-91-42:Externes | | 41cce9d4da272c19 | web-portal-Externes | 00-26-3E-6F-91-42:Externes | | 5d505c20bb72a584 | jean.inv | 00-0B-0E-D2-AB-44:Invites | | 5d505c20bb72a584 | Philippe.inv | 00-0B-0E-D2-AB-44:Invites | | 3387e6f980e673e8 | web-portal-Invites | 00-0B-0E-D2-73-84:Invites | +------------------+-----------------------+------------------------------+ i use WLC800 controler from juniper (old MX-800 from trapeze) and AP models WLA522, WLA432 and WLA422A. Any idea?
Hocine M wrote:
For some reasons i don't understand, somtimes when accounting in radacct mysql table the username is renamed in "web-portal-ssid" where ssid is the SSID Web-Portal based.
It's because the NAS is sending "web-portal-ssid" in the Accounting-Request. Or, your local configuration is updating the User-Name to be "web-portal-ssid". There are no other options. Alan DeKok.
Le 31/01/2013 16:07, Alan DeKok a écrit :
Hocine M wrote:
For some reasons i don't understand, somtimes when accounting in radacct mysql table the username is renamed in "web-portal-ssid" where ssid is the SSID Web-Portal based. It's because the NAS is sending "web-portal-ssid" in the Accounting-Request. Or, your local configuration is updating the User-Name to be "web-portal-ssid".
There are no other options.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thanks, My local configuration does not update the User-Name. I noticed in detail file, username changed appear only in stop and Interim-Update accounting packet, and nothing in start accounting packet. But in radacct table for the same username (renamed) the acctstarttime is filled. Thu Jan 31 13:53:55 2013 Acct-Status-Type = Interim-Update Acct-Multi-Session-Id = "SESS-4883-54b78e-636521-e703" Acct-Session-Id = "SESS-4883-54b78e-636521-e703" User-Name = "web-portal-Invites" Event-Timestamp = "Jan 31 2013 13:53:55 CET" Trapeze-VLAN-Name = "Invites" Calling-Station-Id = "9C-04-EB-85-F4-70" NAS-Port-Id = "AP84/1" Called-Station-Id = "00-0B-0E-D2-AB-44:Invites" NAS-Port = 57930 Framed-IP-Address = 10.53.1.152 Acct-Session-Time = 23 Acct-Output-Octets = 196179 Acct-Input-Octets = 111779 Acct-Output-Packets = 761 Acct-Input-Packets = 2370 NAS-Port-Type = Wireless-802.11 NAS-IP-Address = 192.168.58.5 NAS-Identifier = "Trapeze" Acct-Delay-Time = 0 Acct-Unique-Session-Id = "5d505c20bb72a584" Stripped-User-Name = "web-portal-Invites" Realm = "NULL" Timestamp = 1359636835 Thu Jan 31 13:53:55 2013 Acct-Status-Type = Stop Acct-Multi-Session-Id = "SESS-4883-54b78e-636521-e703" Acct-Session-Id = "SESS-4883-54b78e-636521-e703" User-Name = "web-portal-L3Invites" Event-Timestamp = "Jan 31 2013 13:53:55 CET" Trapeze-VLAN-Name = "Invites" Calling-Station-Id = "9C-04-EB-85-F4-70" NAS-Port-Id = "AP84/1" Called-Station-Id = "00-0B-0E-D2-AB-44:L3Invites" NAS-Port = 57930 Framed-IP-Address = 10.53.1.152 Acct-Session-Time = 23 Acct-Output-Octets = 196179 Acct-Input-Octets = 111779 Acct-Output-Packets = 761 Acct-Input-Packets = 2370 NAS-Port-Type = Wireless-802.11 NAS-IP-Address = 192.168.58.5 NAS-Identifier = "Trapeze" Acct-Delay-Time = 0 Acct-Unique-Session-Id = "5d505c20bb72a584" Stripped-User-Name = "web-portal-L3Invites" Realm = "NULL" Timestamp = 1359636835 Is it possibe that the start accounting request is sent to another radius server?
Hocine M wrote:
My local configuration does not update the User-Name.
Then as I said, the NAS is sending the User-Name. Go fix the NAS. This isn't a FreeRADIUS problem. If you don't want that entry in the SQL database, you can write a FreeRADIUS policy to skip SQL for that User-Name. See "man unlang" for information.
I noticed in detail file, username changed appear only in stop and Interim-Update accounting packet, and nothing in start accounting packet. But in radacct table for the same username (renamed) the acctstarttime is filled.
You've already said that.
Is it possibe that the start accounting request is sent to another radius server?
I have no idea. It's your NAS. Go look at the NAS configuration. Alan DeKok.
Yes probably buggy nas changing username in logout acct packet. Seen this a lot on multiple vendors, seems lightweight wireless controllers often erroneously expose internal state to their radius servers :o( I nobbled our SQL queries to avoid the loss of data. Alan DeKok <aland@deployingradius.com> wrote:
Hocine M wrote:
For some reasons i don't understand, somtimes when accounting in radacct mysql table the username is renamed in "web-portal-ssid" where ssid is the SSID Web-Portal based.
It's because the NAS is sending "web-portal-ssid" in the Accounting-Request. Or, your local configuration is updating the User-Name to be "web-portal-ssid".
There are no other options.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Sent from my mobile device, please excuse brevity and typos.
participants (3)
-
Alan DeKok -
Hocine M -
Phil Mayers