FreeRadius and Interim Packets
Does anyone have experience with FreeRadius and Interim packets? Does it work ok? Any problems? How do you enable it?
When I run radwho -r to get all the information of a login. rod,Rodney Rumley,PPP,S406,Tue 17:46,63.215.26.177,4.240.144.66 I need to clean this one out of the list. I get all this below and have tried several commands but it keeps returning me to this with no real reason why it didn't work. Usage: radzap [options] server[:port] secret -d raddb_directory: directory where radiusd.conf is located -N nas_ip_address: IP address of the NAS to zap. -P nas_port: NAS port that the user is logged into. -u username: Name of user to zap (case insensitive). -U username: like -u, but case-sensitive. -x : more debugging output I have in the radius.conf to remove stale connections, but they seem to always remain and these peopel are not conencted. Thanks
"Radius" <radius@kingmanaz.net> wrote:
I get all this below and have tried several commands but it keeps returning me to this with no real reason why it didn't work.
You didn't say what you typed in as the command-line for radzap. Try reading the "man" pages for radzap && radwho. Alan DeKok.
When radhow -r reads rod,Rodney Rumley,PPP,S406,Tue 17:46,63.215.26.177,4.240.144.66 I would type radzap -N 63.215.26.177 S406 secret I also tried radzap -N 4.240.144.66 S406 secret It keeps telling me it can't locate that IP address. Tried the man page, that's why I sent the request, it was about 47 lines long and had about the same information in it that the help of radzap. ----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Thursday, December 01, 2005 12:30 PM Subject: Re: RadZap
"Radius" <radius@kingmanaz.net> wrote:
I get all this below and have tried several commands but it keeps returning me to this with no real reason why it didn't work.
You didn't say what you typed in as the command-line for radzap.
Try reading the "man" pages for radzap && radwho.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
"Radius" <radius@kingmanaz.net> wrote:
I would type radzap -N 63.215.26.177 S406 secret
Which is wrong. Please READ the help && the "man" page.
It keeps telling me it can't locate that IP address.
Yes, you're using the command incorrectly. "S406" is NOT the IP address of the RADIUS server. Alan DeKok.
I know Don't think I'm that stupid about an IP address. That was the port. I also tried radzap -N 63.215.26.177 -P S406 -U rod secret This only gives the help again. The man file does not give an example of the command line. I guess I'l have to google for someones example. ----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Thursday, December 01, 2005 1:06 PM Subject: Re: RadZap
"Radius" <radius@kingmanaz.net> wrote:
I would type radzap -N 63.215.26.177 S406 secret
Which is wrong. Please READ the help && the "man" page.
It keeps telling me it can't locate that IP address.
Yes, you're using the command incorrectly. "S406" is NOT the IP address of the RADIUS server.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
"Radius" <radius@kingmanaz.net> wrote:
Don't think I'm that stupid about an IP address. That was the port.
So... where did you type in the IP address of the RADIUS server? The answer is "nowhere", which is your mistake.
I guess I'l have to google for someones example.
Uh... right. Alan DeKok.
It was in the command line I sent. 63.215.26.177 is an IP address.
I would type radzap -N 63.215.26.177 S406 secret
----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Thursday, December 01, 2005 2:19 PM Subject: Re: RadZap
"Radius" <radius@kingmanaz.net> wrote:
Don't think I'm that stupid about an IP address. That was the port.
So... where did you type in the IP address of the RADIUS server?
The answer is "nowhere", which is your mistake.
I guess I'l have to google for someones example.
Uh... right.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Your man says this. radzap [-d raddb_directory] [-N nas_ip_address] [-P nas_port] [-u user] [-U user] server[:port] secret radzap -d /usr/local/etc/raddb -N 63.215.26.177 -P S406 -u rod 1645 secret Still brings me back to the help screen. ----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Thursday, December 01, 2005 1:06 PM Subject: Re: RadZap
"Radius" <radius@kingmanaz.net> wrote:
I would type radzap -N 63.215.26.177 S406 secret
Which is wrong. Please READ the help && the "man" page.
It keeps telling me it can't locate that IP address.
Yes, you're using the command incorrectly. "S406" is NOT the IP address of the RADIUS server.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
You're not typing in the IP address of the server; 1645 is not the IP address of the server! -N 63.215.26.177 is the IP address of the NAS. On 12/1/05, Radius <radius@kingmanaz.net> wrote:
Your man says this.
radzap [-d raddb_directory] [-N nas_ip_address] [-P nas_port] [-u user] [-U user] server[:port] secret
radzap -d /usr/local/etc/raddb -N 63.215.26.177 -P S406 -u rod 1645 secret
Still brings me back to the help screen.
----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Thursday, December 01, 2005 1:06 PM Subject: Re: RadZap
"Radius" <radius@kingmanaz.net> wrote:
I would type radzap -N 63.215.26.177 S406 secret
Which is wrong. Please READ the help && the "man" page.
It keeps telling me it can't locate that IP address.
Yes, you're using the command incorrectly. "S406" is NOT the IP address of the RADIUS server.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-----Original Message----- From: freeradius-users-bounces@lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Radius Sent: Thursday, December 01, 2005 1:44 PM To: FreeRadius users mailing list Subject: Re: RadZap
Your man says this.
radzap [-d raddb_directory] [-N nas_ip_address] [-P nas_port] [-u user] [-U user] server[:port] secret
radzap -d /usr/local/etc/raddb -N 63.215.26.177 -P S406 -u ^
Isn't that an "S" instead of "5"?
rod 1645 secret
Still brings me back to the help screen.
----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Thursday, December 01, 2005 1:06 PM Subject: Re: RadZap
"Radius" <radius@kingmanaz.net> wrote:
I would type radzap -N 63.215.26.177 S406 secret
Which is wrong. Please READ the help && the "man" page.
It keeps telling me it can't locate that IP address.
Yes, you're using the command incorrectly. "S406" is NOT the IP address of the RADIUS server.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
User-Name = "rod" Acct-Session-Id = "04036884" NAS-IP-Address = 63.215.26.177 NAS-Port = 406 Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = 4.240.144.66 Acct-Session-Time = 766846 radzap -N 63.215.26.177 -P S406 -u rod (server:port) 1646 secret ----- Original Message ----- From: "Scott O'Connell" <scotto@sds.com> To: "'FreeRadius users mailing list'" <freeradius-users@lists.freeradius.org> Sent: Thursday, December 01, 2005 2:56 PM Subject: RE: RadZap
-----Original Message----- From: freeradius-users-bounces@lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Radius Sent: Thursday, December 01, 2005 1:44 PM To: FreeRadius users mailing list Subject: Re: RadZap
Your man says this.
radzap [-d raddb_directory] [-N nas_ip_address] [-P nas_port] [-u user] [-U user] server[:port] secret
radzap -d /usr/local/etc/raddb -N 63.215.26.177 -P S406 -u ^
Isn't that an "S" instead of "5"?
rod 1645 secret
Still brings me back to the help screen.
----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Thursday, December 01, 2005 1:06 PM Subject: Re: RadZap
"Radius" <radius@kingmanaz.net> wrote:
I would type radzap -N 63.215.26.177 S406 secret
Which is wrong. Please READ the help && the "man" page.
It keeps telling me it can't locate that IP address.
Yes, you're using the command incorrectly. "S406" is NOT the IP address of the RADIUS server.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
S406 is an "S" and not a "5" -N is for the Nas IP (according to the man.) ----- Original Message ----- From: "Scott O'Connell" <scotto@sds.com> To: "'FreeRadius users mailing list'" <freeradius-users@lists.freeradius.org> Sent: Thursday, December 01, 2005 2:56 PM Subject: RE: RadZap
-----Original Message----- From: freeradius-users-bounces@lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Radius Sent: Thursday, December 01, 2005 1:44 PM To: FreeRadius users mailing list Subject: Re: RadZap
Your man says this.
radzap [-d raddb_directory] [-N nas_ip_address] [-P nas_port] [-u user] [-U user] server[:port] secret
radzap -d /usr/local/etc/raddb -N 63.215.26.177 -P S406 -u ^
Isn't that an "S" instead of "5"?
rod 1645 secret
Still brings me back to the help screen.
----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Thursday, December 01, 2005 1:06 PM Subject: Re: RadZap
"Radius" <radius@kingmanaz.net> wrote:
I would type radzap -N 63.215.26.177 S406 secret
Which is wrong. Please READ the help && the "man" page.
It keeps telling me it can't locate that IP address.
Yes, you're using the command incorrectly. "S406" is NOT the IP address of the RADIUS server.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Yikes :) Lookee here... radzap -N 63.215.26.177 -P S406 -u rod XXX.XXX.XXX.XXX:1646 secret XXX.XXX.XXX.XXX should be your *RADIUS* server IP. Not NAS, not client and, FWIW, "secret" should be the secret configured in your clients.conf. And I definitely think that -P S406 should just be -P 406 Laker --- Radius <radius@kingmanaz.net> wrote:
S406 is an "S" and not a "5"
-N is for the Nas IP (according to the man.)
----- Original Message ----- From: "Scott O'Connell" <scotto@sds.com> To: "'FreeRadius users mailing list'" <freeradius-users@lists.freeradius.org> Sent: Thursday, December 01, 2005 2:56 PM Subject: RE: RadZap
-----Original Message----- From: freeradius-users-bounces@lists.freeradius.org
[mailto:freeradius-users-bounces@lists.freeradius.org]
On
Behalf Of Radius Sent: Thursday, December 01, 2005 1:44 PM To: FreeRadius users mailing list Subject: Re: RadZap
Your man says this.
radzap [-d raddb_directory] [-N nas_ip_address] [-P nas_port] [-u user] [-U user] server[:port] secret
radzap -d /usr/local/etc/raddb -N 63.215.26.177 -P S406 -u
^
Isn't that an "S" instead of "5"?
rod 1645 secret
Still brings me back to the help screen.
----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Thursday, December 01, 2005 1:06 PM Subject: Re: RadZap
"Radius" <radius@kingmanaz.net> wrote:
I would type radzap -N 63.215.26.177 S406 secret
Which is wrong. Please READ the help && the
"man" page.
It keeps telling me it can't locate that IP
address.
Yes, you're using the command incorrectly.
"S406" is NOT the IP
address of the RADIUS server.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________ Start your day with Yahoo! - Make it your home page! http://www.yahoo.com/r/hs
But his man said [-N nas_ip_address], so the man is wrong? I have the secret right. I just put it that way so I didn't broadcast it. User-Name = "rod" Acct-Session-Id = "04036884" NAS-IP-Address = 63.215.26.177 NAS-Port = 406 Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = 4.240.144.66 Acct-Session-Time = 766846 I'll give it a try. Thanks ----- Original Message ----- From: "Laker Netman" <laker_netman@yahoo.com> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Thursday, December 01, 2005 4:00 PM Subject: Re: RadZap
Yikes :)
Lookee here...
radzap -N 63.215.26.177 -P S406 -u rod XXX.XXX.XXX.XXX:1646 secret
XXX.XXX.XXX.XXX should be your *RADIUS* server IP. Not NAS, not client and, FWIW, "secret" should be the secret configured in your clients.conf.
And I definitely think that -P S406 should just be -P 406
Laker
--- Radius <radius@kingmanaz.net> wrote:
S406 is an "S" and not a "5"
-N is for the Nas IP (according to the man.)
----- Original Message ----- From: "Scott O'Connell" <scotto@sds.com> To: "'FreeRadius users mailing list'" <freeradius-users@lists.freeradius.org> Sent: Thursday, December 01, 2005 2:56 PM Subject: RE: RadZap
-----Original Message----- From: freeradius-users-bounces@lists.freeradius.org
[mailto:freeradius-users-bounces@lists.freeradius.org]
On
Behalf Of Radius Sent: Thursday, December 01, 2005 1:44 PM To: FreeRadius users mailing list Subject: Re: RadZap
Your man says this.
radzap [-d raddb_directory] [-N nas_ip_address] [-P nas_port] [-u user] [-U user] server[:port] secret
radzap -d /usr/local/etc/raddb -N 63.215.26.177 -P S406 -u
^
Isn't that an "S" instead of "5"?
rod 1645 secret
Still brings me back to the help screen.
----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Thursday, December 01, 2005 1:06 PM Subject: Re: RadZap
"Radius" <radius@kingmanaz.net> wrote:
I would type radzap -N 63.215.26.177 S406 secret
Which is wrong. Please READ the help && the
"man" page.
It keeps telling me it can't locate that IP
address.
Yes, you're using the command incorrectly.
"S406" is NOT the IP
address of the RADIUS server.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________ Start your day with Yahoo! - Make it your home page! http://www.yahoo.com/r/hs - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
OK, thank you. That worked. ----- Original Message ----- From: "Laker Netman" <laker_netman@yahoo.com> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Thursday, December 01, 2005 4:00 PM Subject: Re: RadZap
Yikes :)
Lookee here...
radzap -N 63.215.26.177 -P S406 -u rod XXX.XXX.XXX.XXX:1646 secret
XXX.XXX.XXX.XXX should be your *RADIUS* server IP. Not NAS, not client and, FWIW, "secret" should be the secret configured in your clients.conf.
And I definitely think that -P S406 should just be -P 406
Laker
--- Radius <radius@kingmanaz.net> wrote:
S406 is an "S" and not a "5"
-N is for the Nas IP (according to the man.)
----- Original Message ----- From: "Scott O'Connell" <scotto@sds.com> To: "'FreeRadius users mailing list'" <freeradius-users@lists.freeradius.org> Sent: Thursday, December 01, 2005 2:56 PM Subject: RE: RadZap
-----Original Message----- From: freeradius-users-bounces@lists.freeradius.org
[mailto:freeradius-users-bounces@lists.freeradius.org]
On
Behalf Of Radius Sent: Thursday, December 01, 2005 1:44 PM To: FreeRadius users mailing list Subject: Re: RadZap
Your man says this.
radzap [-d raddb_directory] [-N nas_ip_address] [-P nas_port] [-u user] [-U user] server[:port] secret
radzap -d /usr/local/etc/raddb -N 63.215.26.177 -P S406 -u
^
Isn't that an "S" instead of "5"?
rod 1645 secret
Still brings me back to the help screen.
----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Thursday, December 01, 2005 1:06 PM Subject: Re: RadZap
"Radius" <radius@kingmanaz.net> wrote:
I would type radzap -N 63.215.26.177 S406 secret
Which is wrong. Please READ the help && the
"man" page.
It keeps telling me it can't locate that IP
address.
Yes, you're using the command incorrectly.
"S406" is NOT the IP
address of the RADIUS server.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________ Start your day with Yahoo! - Make it your home page! http://www.yahoo.com/r/hs - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I have the server installed.... I haven't yet tried it. Ok that's what I was looking for. On 12/1/05, Alan DeKok <aland@ox.org> wrote:
Matt <mhoppes@gmail.com> wrote:
Does anyone have experience with FreeRadius and Interim packets? Does it work ok? Any problems? How do you enable it?
Yes. It works. You enable it by installing the server.
Did you *try* it?
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Ok, well now hold on a second. It's not simply the sending/receiving/logging of interim packets that determines whether or not the RADIUS server has "interim packet support." For a RADIUS server to fully support interim packets, it needs to monitor each session for the receipt of interim packets. If a specified period of time elapses in an open session with no receipt of an interim packet, then the RADIUS server will assume that the session is closed and create a STOP packet from the last received interim packet. Does the FREERADIUS server function in that manner? On 12/1/05, Alan DeKok <aland@ox.org> wrote:
Matt <mhoppes@gmail.com> wrote:
Does anyone have experience with FreeRadius and Interim packets? Does it work ok? Any problems? How do you enable it?
Yes. It works. You enable it by installing the server.
Did you *try* it?
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Matt wrote:
Ok, well now hold on a second. It's not simply the sending/receiving/logging of interim packets that determines whether or not the RADIUS server has "interim packet support." For a RADIUS
Like the man said
Yes. It works. You enable it by installing the server.
Did you *try* it?
Alan DeKok. -
Ok, I'm just checking because I've received different answers from different people. So the radius server will A) track sessions and will B) send a stop packet if no interim packet is received for the radius interim packet responce or what? I'm finding very little information googeling for it, that's why I'm asking these questions. On 12/5/05, Joe Maimon <jmaimon@ttec.com> wrote:
Matt wrote:
Ok, well now hold on a second. It's not simply the sending/receiving/logging of interim packets that determines whether or not the RADIUS server has "interim packet support." For a RADIUS
Like the man said
Yes. It works. You enable it by installing the server.
Did you *try* it?
Alan DeKok. -
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Matt wrote:
Ok, I'm just checking because I've received different answers from different people. So the radius server will
A) track sessions and will B) send a stop packet if no interim packet is received for the radius interim packet responce or what? I'm finding very little information googeling for it, that's why I'm asking these questions.
On 12/5/05, Joe Maimon <jmaimon@ttec.com> wrote:
Matt wrote:
You mean you want "sessions" that do not receive an interim packet to be expired? Sessions are tracked by the basis of the Acct-Session-Id which can sometimes have a non-uniqueness problem -- see rlm_acct_unique Tis means nothing for the detail file which will write each packet it receives. It means something for the radutmp file. It means something for the sql logging modules which will do UPDATE queries instead of INSERT queries, by default. The radius server doesnt send a stop packet to the NAS. The nas is supposed to send the stop packet to the radius server. A stop packet is an accounting packet with a status of "Stop". If you were doing sql accounting logging, you could modify the db to contain a timestamp field, updated by each insert/update. Then a query that selects those records with a stop time of 0 and a non-updating timestamp field can be used along with radzap. There may be more elegant and smarter ways to go about this.
Matt <mhoppes@gmail.com> wrote:
Ok, well now hold on a second. It's not simply the sending/receiving/logging of interim packets that determines whether or not the RADIUS server has "interim packet support." For a RADIUS server to fully support interim packets, it needs to monitor each session for the receipt of interim packets.
Really?
If a specified period of time elapses in an open session with no receipt of an interim packet, then the RADIUS server will assume that the session is closed and create a STOP packet from the last received interim packet. Does the FREERADIUS server function in that manner?
Have you tried it? Or, reading the documentation about session handling? Why are you asking questions here when the documentation answers your questions? Are you more likely to believe information posted here than what's in the docs? Alan DeKok.
participants (7)
-
Alan DeKok -
Joe Maimon -
Laker Netman -
Matt -
Radius -
Scott O'Connell -
Walter Goulet