Hi, Can you please give advice in next situation: mysql> SELECT * FROM `radpostauth` WHERE `username` LIKE '{E6395348-49C3-C12A-2998-B60329D0CA5C}'; +-------+----------------------------------------+------+---------------+---------------------+ | id | username | pass | reply | authdate | +-------+----------------------------------------+------+---------------+---------------------+ | 24825 | {E6395348-49C3-C12A-2998-B60329D0CA5C} | | Access-Accept | 2012-12-16 04:20:59 | +-------+----------------------------------------+------+---------------+---------------------+ 1 row in set (0.00 sec) mysql> SELECT * FROM `radacct` WHERE `username` LIKE '{E6395348-49C3-C12A-2998-B60329D0CA5C}'; Empty set (0.00 sec) mysql> I have user in table radpostauth, but i can't find same user in table radacct. How could it be? http://dpaste.com/852738/ Nothing in logs: grep -r "{E6395348-49C3-C12A-2998-B60329D0CA5C}" /var/log/freeradius/ Best Regards, Dmitry --- Dmitry KORZHEVIN System Administrator STIDIA S.A. - Luxembourg e: dmitry.korzhevin@stidia.com m: +38 093 874 5453 w: http://www.stidia.com
Hi, Alan Currently, i found only one such user. On NAS i use pptp, ipsec (strongswan), L2TP/ipsec - all services use radius as auth server. 26.12.2012 14:58, Alan DeKok пишет:
Dmitry Korzhevin wrote:
I have user in table radpostauth, but i can't find same user in table radacct. How could it be?
The NAS isn't sending accounting packets?
Alan DeKok.
Best Regards, Dmitry --- Dmitry KORZHEVIN System Administrator STIDIA S.A. - Luxembourg e: dmitry.korzhevin@stidia.com m: +38 093 874 5453 w: http://www.stidia.com
Am Mittwoch, 26. Dezember 2012, 15:31:18 schrieb Dmitry Korzhevin:
Hi, Alan
Currently, i found only one such user. On NAS i use pptp, ipsec (strongswan), L2TP/ipsec - all services use radius as auth server.
Do these applications send RADIUS accounting information? How did you set it up? Did you follow the accounting packets with tcpdump on the line? did you try to run your radius server in debug mode? -- Dr. Michael Schwartzkopff Guardinistr. 63 81375 München Tel: (0163) 172 50 98 Fax: (089) 620 304 13
Yes, I use strongswan ipsec implementation with freeradius. strongswan support accounting: http://wiki.strongswan.org/projects/strongswan/wiki/EapRadius All stuff works, but i want to find, except this mysql radpostauth/radacct problem. 26.12.2012 15:38, Michael Schwartzkopff пишет:
Am Mittwoch, 26. Dezember 2012, 15:31:18 schrieb Dmitry Korzhevin:
Hi, Alan
Currently, i found only one such user. On NAS i use pptp, ipsec
(strongswan), L2TP/ipsec - all services use radius as auth server.
Do these applications send RADIUS accounting information? How did you set it up? Did you follow the accounting packets with tcpdump on the line? did you try to run your radius server in debug mode?
--
Dr. Michael Schwartzkopff
Guardinistr. 63
81375 München
Tel: (0163) 172 50 98
Fax: (089) 620 304 13
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Best Regards, Dmitry --- Dmitry KORZHEVIN System Administrator STIDIA S.A. - Luxembourg e: dmitry.korzhevin@stidia.com m: +38 093 874 5453 w: http://www.stidia.com
Dmitry Korzhevin wrote:
Yes, I use strongswan ipsec implementation with freeradius. strongswan support accounting:
http://wiki.strongswan.org/projects/strongswan/wiki/EapRadius
All stuff works, but i want to find, except this mysql radpostauth/radacct problem.
You're not listening. This is a question in the FAQ. The NAS needs to send accounting packets. Have you checked? Have you bothered to run the server in debugging mode? Alan DeKok.
Alan DeKok wrote:
Dmitry Korzhevin wrote:
Yes, I use strongswan ipsec implementation with freeradius. strongswan support accounting:
http://wiki.strongswan.org/projects/strongswan/wiki/EapRadius
All stuff works, but i want to find, except this mysql radpostauth/radacct problem.
You're not listening. This is a question in the FAQ.
The NAS needs to send accounting packets. Have you checked? Have you bothered to run the server in debugging mode?
Anyway it is possible that NAS has received Access-Accept but was unable to proceed with session setup. For example, because vpn client interrupt session setup process right before Access-Accept is arrived to NAS.
participants (4)
-
Alan DeKok -
Dmitry Korzhevin -
Iliya Peregoudov -
Michael Schwartzkopff