Hi, I am using Freeradius with a MySQL backend and the users log in through Chillispot running on Buffalo and Linksys routers running DD-WRT. The problem is that randomly users are recorded up to five times in radacct with one login. This is not a problem for users with expiration acccounts but users with max-all-session accounts are thrown out before they have really used up their time. Has anyone come accross this before? I'd appreiate any help. Sean ----- Original Message ----- From: <freeradius-users-request@lists.freeradius.org> To: <freeradius-users@lists.freeradius.org> Sent: Tuesday, August 21, 2007 4:28 PM Subject: Freeradius-Users Digest, Vol 28, Issue 73
Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org
To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org
You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org
When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..."
Today's Topics:
1. RE: PAM Radius (Sayan S) 2. customise dialup admin (Carl aniams) 3. I am a first timer ! (Joshua Mashiane) 4. Database Population problem with mysql (ram) 5. RE: Database Population problem with mysql (Josh Howlett) 6. Re: I am a first timer ! (Alan DeKok) 7. Re: Database Population problem with mysql (ram)
----------------------------------------------------------------------
Message: 1 Date: Tue, 21 Aug 2007 04:22:20 -0700 (PDT) From: Sayan S <sayann_u@yahoo.com> Subject: RE: PAM Radius To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Cc: Josh Howlett <Josh.Howlett@ja.net> Message-ID: <445430.39719.qm@web63910.mail.re1.yahoo.com> Content-Type: text/plain; charset="iso-8859-1"
yes josh, as you guessed it, it doesn't work with HP-UX and Solaris (to some extent, as it provides a warning during useradd command with '@' in the username). We don't plan to use LDAP for NSS immediately.
thanks to all.
sayan
Josh Howlett <Josh.Howlett@ja.net> wrote: Hi Sayan,
I think I have tried this previously, and it was possible (on Linux/glibc anyway - YMMV with other unices).
TBH, I don't really see the point in using RADIUS when you'll (probably) want to use LDAP anyway for nss resolution, so you might as well just use LDAP for PAM.
josh.
-----Original Message----- From: freeradius-users-bounces+josh.howlett=ja.net@lists.freeradius. org [mailto:freeradius-users-bounces+josh.howlett=ja.net@lists.fre eradius.org] On Behalf Of Sayan S Sent: 20 August 2007 14:04 To: FreeRadius users mailing list Subject: Re: PAM Radius
Thanks Alan for the quick response. I am referring to realm here, as RADIUS support realms, and we are using RADIUS to authenticate the users to Linux, so seems like we need to have all users contained in the same realm.
Is having username in user@realm form a valid unix format? I was thinking the first part of the user@realm should be the unix username though the radius request is sent as user@realm. Otherwise we need to have a comprehensive RADIUS-username@realm to Unix-userid mapping.
regards, sayan
Alan DeKok wrote:
Sayan S wrote:
Greetings, I am very new to RADIUS and PAM RADIUS. I am trying to configure PAM Radius to authenticate users on a Linux host. I would like to know, how to configure PAM Radius to authenticate users from different realms, as the current configuration doesn't seem to take realm.
You don't use realms in Unix logins.
please help me with this as I have configured users to be part of different realms on radius server and now want to authenticate all those users to the same Linux host.
You just login as "user@realm". That might work.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
________________________________
Park yourself in front of a world of choices in alternative vehicles. Visit the Yahoo! Auto Green Center. n_center/;> _ylc=X3oDMTE5cDF2bXZzBF9TAzk3MTA3MDc2BHNlYwNtYWlsdGFncwRzbGsDZ 3JlZW4tY2VudGVy>
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--------------------------------- Take the Internet to Go: Yahoo!Go puts the Internet in your pocket: mail, news, photos & more.
Sean Bracken wrote:
Hi, I am using Freeradius with a MySQL backend and the users log in through Chillispot running on Buffalo and Linksys routers running DD-WRT. The problem is that randomly users are recorded up to five times in radacct with one login. This is not a problem for users with expiration acccounts but users with max-all-session accounts are thrown out before they have really used up their time. Has anyone come accross this before? I'd appreiate any help.
Accounting packets may be re-transmitted by the NAS. They may be received multiple times by the server, and recorded multiple times. The default configuration *should* catch most of these cases, and record only one set of information for a session. But some NAS equipment tries hard to send broken accounting requests to the server. Look at the "detail" logs to see which packets get recorded multiple times. Alan DeKok.
participants (2)
-
Alan DeKok -
Sean Bracken