Accounting-Request/Accounting-Response question
Hi, This isn't specific to FreeRadius, so if its not for this group, please let me know. I'm looking into the Accounting-Request packet for the following : *** DUMP OF RADIUS PACKET (Net::Radius::Packet=HASH(0x834ac1c)) Code: Accounting-Request Identifier: 1 Authentic: \x{0}\x{0}\x{0}\x{0}\x{0}\x{0}\x{0}\x{0}\x{0}\x{0}\x{0}\x{0}\x{0}\x{0}\x{0}\x{0} Attributes: Acct-Status-Type: Accounting-On NAS-IP-Address: 192.168.3.100 Called-Station-Id: 00-BD-5D-FD-4D-38 NAS-Identifier: nas01 Acct-Terminate-Cause: NAS-Reboot When I get it back, I get : Code: Accounting-Response Identifier: 1 Authentic: \x{a}\x{da}\%\x{1f}\x{ff}o\`\x{bf}\(\x{b0}V\x{aa}\x{ba}J;\x{99} Attributes: Is there anything that would make this NOT come back like that? (Except maybe the secret being incorrect). When I send it, I set : $req->set_code('Accounting-Request'); $req->set_attr('Acct-Status-Type' => 'Accounting-On'); $req->set_attr('NAS-IP-Address' => '192.168.3.100'); $req->set_attr('Called-Station-Id' => '00-BD-5D-FD-4D-38'); $req->set_attr('NAS-Identifier' => 'nas01'); $req->set_attr('Acct-Terminate-Cause' => 'NAS-Reboot'); $req->set_identifier($ident); $req->set_authenticator(""); # random authenticator required though I see from the UPDATE statement: accounting_onoff_query = "\ UPDATE ${acct_table1} \ SET \ acctstoptime = '%S', \ acctsessiontime = unix_timestamp('%S') - \ unix_timestamp(acctstarttime), \ acctterminatecause = '%{Acct-Terminate-Cause}', \ acctstopdelay = %{%{Acct-Delay-Time}:-0} \ WHERE acctstoptime = NULL \ AND nasipaddress = '%{NAS-IP-Address}' \ AND acctstarttime <= '%S'" it seems to only really need Acct-Terminate-Cause and NAS-IP-Address . Thanks, Tuc
Tuc at T-B-O-H.NET wrote:
I'm looking into the Accounting-Request packet for the following :
*** DUMP OF RADIUS PACKET (Net::Radius::Packet=HASH(0x834ac1c)) Code: Accounting-Request Identifier: 1 Authentic: \x{0}\x{0}\x{0}\x{0}\x{0}\x{0}\x{0}\x{0}\x{0}\x{0}\x{0}\x{0}\x{0}\x{0}\x{0}\x{0}
That's wrong. It should be signed by the shared secret.
When I get it back, I get :
Code: Accounting-Response Identifier: 1 Authentic: \x{a}\x{da}\%\x{1f}\x{ff}o\`\x{bf}\(\x{b0}V\x{aa}\x{ba}J;\x{99} Attributes:
Is there anything that would make this NOT come back like that?
What do you mean? Alan DeKok.
participants (2)
-
Alan DeKok -
Tuc at T-B-O-H.NET