Dear all, Is anyone try this attribute /*mpd-drop-user*/ in freeradius with Mysql? MPD support this attribute to check the status of account during it update the accounting and if the value for this attribute become non-zero, it will disconnect the session for the user. We use MPD to setup a PPPoE server with freeradius to provide authentication to users and we have come across to drop the session if the user's account suspended but we have no luck to make it work. Currently we try to put this attribute in radreply table and it doesn't work for us. Looking for your kind information in this matter. Thanks in advance. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
Hi cktan, Was looking for a similar solution and never made it work. Basically, in my setup i have users buy airtime for using the internet. I also sell access to video clips, when user downloads the video clip, an entry is made in radacct table. What I wanted to is for the NAS to re-authenticate every minute to check if more entries were added to radacct table. My solution was to us M0n0wall as my NAS, it has an option in the captive portal where you set it to re-authenticate every minute and to disconnect if user has no more credit left. I hope this helps. Charles ----- Original Message ----- From: cktan To: FreeRadius users mailing list Sent: Monday, November 30, 2009 11:51 AM Subject: MPD : mpd-drop-user Dear all, Is anyone try this attribute mpd-drop-user in freeradius with Mysql? MPD support this attribute to check the status of account during it update the accounting and if the value for this attribute become non-zero, it will disconnect the session for the user. We use MPD to setup a PPPoE server with freeradius to provide authentication to users and we have come across to drop the session if the user's account suspended but we have no luck to make it work. Currently we try to put this attribute in radreply table and it doesn't work for us. Looking for your kind information in this matter. Thanks in advance. ________________________________________________________________ 5 free Domains with Select Hosting Plans. Get yours! com net org info us name biz cc tv ws mobi -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ------------------------------------------------------------------------------ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __________________________________________________ Buy a domain : http://www.1and1.com/?k_id=25085883
Dear Charles, Thank for your suggestion and in fact I've my last option whereby I will write a simple telnet session to terminate the session if the usage is over. However, I'm looking to have this option work if possible. cheers Charles wrote:
Hi cktan,
Was looking for a similar solution and never made it work.
Basically, in my setup i have users buy airtime for using the internet. I also sell access to video clips, when user downloads the video clip, an entry is made in radacct table. What I wanted to is for the NAS to re-authenticate every minute to check if more entries were added to radacct table.
My solution was to us M0n0wall as my NAS, it has an option in the captive portal where you set it to re-authenticate every minute and to disconnect if user has no more credit left.
I hope this helps.
Charles
----- Original Message ----- *From:* cktan <mailto:cktan@ocesb.com.my> *To:* FreeRadius users mailing list <mailto:freeradius-users@lists.freeradius.org> *Sent:* Monday, November 30, 2009 11:51 AM *Subject:* MPD : mpd-drop-user
Dear all,
Is anyone try this attribute /*mpd-drop-user*/ in freeradius with Mysql? MPD support this attribute to check the status of account during it update the accounting and if the value for this attribute become non-zero, it will disconnect the session for the user.
We use MPD to setup a PPPoE server with freeradius to provide authentication to users and we have come across to drop the session if the user's account suspended but we have no luck to make it work. Currently we try to put this attribute in radreply table and it doesn't work for us. Looking for your kind information in this matter.
Thanks in advance.
________________________________________________________________
5 free Domains with Select Hosting Plans. Get yours!
-- This message has been scanned for viruses and dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is believed to be clean.
------------------------------------------------------------------------ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
________________________________________________________________
5 free Domains with Select Hosting Plans. Get yours!
-- This message has been scanned for viruses and dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is believed to be clean. ------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
Is anyone try this attribute /*mpd-drop-user*/ in freeradius with Mysql? MPD support this attribute to check the status of account during it update the accounting and if the value for this attribute become non-zero, it will disconnect the session for the user.
We use MPD to setup a PPPoE server with freeradius to provide authentication to users and we have come across to drop the session if the user's account suspended but we have no luck to make it work. Currently we try to put this attribute in radreply table and it doesn't work for us. Looking for your kind information in this matter.
Read what you wrote in the first paragraph. Attribute works when sent in accounting reply to update packet. radreply table is used for authentication not accounting. You will have to figure out a way of adding this to the accounting reply using unlang or perl (if conditions are more complicated). Ivan Kalik
Dear Ivan Kalik, This is what I though as well. However, I read somewhere MPD was support this option but no details on where to put this attribute in. Regards tnt@kalik.net wrote:
Is anyone try this attribute /*mpd-drop-user*/ in freeradius with Mysql? MPD support this attribute to check the status of account during it update the accounting and if the value for this attribute become non-zero, it will disconnect the session for the user.
We use MPD to setup a PPPoE server with freeradius to provide authentication to users and we have come across to drop the session if the user's account suspended but we have no luck to make it work. Currently we try to put this attribute in radreply table and it doesn't work for us. Looking for your kind information in this matter.
Read what you wrote in the first paragraph. Attribute works when sent in accounting reply to update packet. radreply table is used for authentication not accounting. You will have to figure out a way of adding this to the accounting reply using unlang or perl (if conditions are more complicated).
Ivan Kalik
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
If what you have wrote is correct (and it does make sense) - to Accounting-Response packet. Ivan Kalik
This is what I though as well. However, I read somewhere MPD was support this option but no details on where to put this attribute in.
Regards
tnt@kalik.net wrote:
Is anyone try this attribute /*mpd-drop-user*/ in freeradius with Mysql? MPD support this attribute to check the status of account during it update the accounting and if the value for this attribute become non-zero, it will disconnect the session for the user.
We use MPD to setup a PPPoE server with freeradius to provide authentication to users and we have come across to drop the session if the user's account suspended but we have no luck to make it work. Currently we try to put this attribute in radreply table and it doesn't work for us. Looking for your kind information in this matter.
Read what you wrote in the first paragraph. Attribute works when sent in accounting reply to update packet. radreply table is used for authentication not accounting. You will have to figure out a way of adding this to the accounting reply using unlang or perl (if conditions are more complicated).
Ivan Kalik
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Ok, I noted there are ext-accounting script support in MDP and it should do some checking against mpd-drop-user information and action taken accordingly. trying to locate the sample of script now. CK tnt@kalik.net wrote:
If what you have wrote is correct (and it does make sense) - to Accounting-Response packet.
Ivan Kalik
This is what I though as well. However, I read somewhere MPD was support this option but no details on where to put this attribute in.
Regards
tnt@kalik.net wrote:
Is anyone try this attribute /*mpd-drop-user*/ in freeradius with Mysql? MPD support this attribute to check the status of account during it update the accounting and if the value for this attribute become non-zero, it will disconnect the session for the user.
We use MPD to setup a PPPoE server with freeradius to provide authentication to users and we have come across to drop the session if the user's account suspended but we have no luck to make it work. Currently we try to put this attribute in radreply table and it doesn't work for us. Looking for your kind information in this matter.
Read what you wrote in the first paragraph. Attribute works when sent in accounting reply to update packet. radreply table is used for authentication not accounting. You will have to figure out a way of adding this to the accounting reply using unlang or perl (if conditions are more complicated).
Ivan Kalik
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
Dear Ivan, I read some of the information saying it is possible to insert attribute in Accounting Response Packet but RFC said almost no attribute will inject into response packet. There is also user ( @ year 2005) change some coding in rpm_sql to do query during the accounting update as well to check the termination status and response back to NAS for session termination. For MPD, as long as it received a radius reply and noted mpd-drop-user attribute the value is non-zero, it will just disconnect the user session. Any better suggestion from you? Thanks in advance. cktan wrote:
Ok, I noted there are ext-accounting script support in MDP and it should do some checking against mpd-drop-user information and action taken accordingly. trying to locate the sample of script now.
CK tnt@kalik.net wrote:
If what you have wrote is correct (and it does make sense) - to Accounting-Response packet.
Ivan Kalik
This is what I though as well. However, I read somewhere MPD was support this option but no details on where to put this attribute in.
Regards
tnt@kalik.net wrote:
Is anyone try this attribute /*mpd-drop-user*/ in freeradius with Mysql? MPD support this attribute to check the status of account during it update the accounting and if the value for this attribute become non-zero, it will disconnect the session for the user.
We use MPD to setup a PPPoE server with freeradius to provide authentication to users and we have come across to drop the session if the user's account suspended but we have no luck to make it work. Currently we try to put this attribute in radreply table and it doesn't work for us. Looking for your kind information in this matter.
Read what you wrote in the first paragraph. Attribute works when sent in accounting reply to update packet. radreply table is used for authentication not accounting. You will have to figure out a way of adding this to the accounting reply using unlang or perl (if conditions are more complicated).
Ivan Kalik
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- This message has been scanned for viruses and dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is believed to be clean. ------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
I read some of the information saying it is possible to insert attribute in Accounting Response Packet but RFC said almost no attribute will inject into response packet.
No, it says that there is no need for any attribute in it. You can add vendor specific attributes. Ivan Kalik
Dear Ivan Kalik, Can you share with me how to add vendor attributes in Acct Response Packet? Regards tnt@kalik.net wrote:
I read some of the information saying it is possible to insert attribute in Accounting Response Packet but RFC said almost no attribute will inject into response packet.
No, it says that there is no need for any attribute in it. You can add vendor specific attributes.
Ivan Kalik
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
Hi Mike, Do you mind to share with us how it work and where do you get the python middleware? Thanks in advance. Mike Tkachuk wrote:
Hello cktan,
I use 'mpd-drop-user' and it working ok, but I have a python middleware that actually add this in accounting response, not using freeradius SQL.
Monday, November 30, 2009 11:51:46 AM, you wrote:
Dear all,
Is anyone try this attribute mpd-drop-user in freeradius with Mysql? MPD support this attribute to check the status of account during it update the accounting and if the value for this attribute become non-zero, it will disconnect the session for the user.
We use MPD to setup a PPPoE server with freeradius to provide authentication to users and we have come across to drop the session if the user's account suspended but we have no luck to make it work. Currently we try to put this attribute in radreply table and it doesn't work for us. Looking for your kind information in this matter.
Thanks in advance.
--
Mike Tkachuk
-- This message has been scanned for viruses and dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is believed to be clean. ------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
participants (4)
-
Charles -
cktan -
Mike Tkachuk -
tnt＠kalik.net