we have freeradius for accounting of dialup and vpn users. sometimes users have been stoped but they are online in mysql table . what's wrong? is there any log of commmands exchange between freeardius and mysql?
Zahra Bahar wrote:
we have freeradius for accounting of dialup and vpn users. sometimes users have been stoped but they are online in mysql table . what's wrong? is there any log of commmands exchange between freeardius and mysql?
What's wrong is that the NAS isn't telling FreeRADIUS that the users have logged off. There's very little you can do except fix the NAS. Alan DeKok.
I considerd row fields in radacct table. all the fields even duration time is correct but stop field is zero for some users that we know they are disconnected so they cann't to be conected until passing random time that thay go to be stoped but the stop-time field is the same as start-time.
Zahra Bahar wrote:
I considerd row fields in radacct table. all the fields even duration time is correct but stop field is zero for some users that we know they are disconnected so they cann't to be conected until passing random time that thay go to be stoped but the stop-time field is the same as start-time.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
As Alan said, it's a problem with your NAS. It's failing to send an Accounting-Request with an Acct-Status-Type attribute of 'Stop'. Unless your NAS tells FreeRADIUS to close the session, the session will stay open in the database. FreeRADIUS does not keep track of accounting session state internally. Arran -- Arran Cudbard-Bell (A.Cudbard-Bell@sussex.ac.uk) Authentication, Authorisation and Accounting Officer Infrastructure Services (IT Services) E1-1-08, Engineering 1, University Of Sussex, Brighton EXT: +44 1273 873900 | INT: 3900
but another fields are true. could radius have true session-duration but didn't receive stop time?
Zahra Bahar wrote:
but another fields are true. could radius have true session-duration but didn't receive stop time?
The server has session duration until the NAS stops sending packets. The session MAY continue for a short time after the last packet. In short, we've been doing this for 10 years. If the server isn't getting a stop packet, then it's the fault of the NAS. Don't try to fix the server. You can't. The server isn't broken. Alan DeKok.
@Zahra Check the connection between NAS and your radius server. Problem can be caused if your connection is unstable and sometimes radius server didn't receive stop packages. So, just like Alan said.. RS server works fine and you don't need to fix it :) On Tue, May 20, 2008 at 1:09 PM, Alan DeKok <aland@deployingradius.com> wrote:
Zahra Bahar wrote:
but another fields are true. could radius have true session-duration but didn't receive stop time?
The server has session duration until the NAS stops sending packets. The session MAY continue for a short time after the last packet.
In short, we've been doing this for 10 years. If the server isn't getting a stop packet, then it's the fault of the NAS. Don't try to fix the server. You can't. The server isn't broken.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Alan DeKok -
Arran Cudbard-Bell -
Marinko Tarlac -
Zahra Bahar