Freeradius acct_unique module unavailable in OpenWrt
Hi, I'm running Openwrt CHAOS CALMER (15.05.1, r48532) on my linksys WRT1900AC V1 (mamba - mvebu platform). I have installed freeradius server version 2.2.8, i'm facing troubles with the acct unique session id which is all the time empty: rlm_sql_mysql: MYSQL check_error: 1062 received [sql] Couldn't insert SQL accounting STOP record - Duplicate entry '' for key 'acctuniqueid' rlm_sql_mysql: MYSQL check_error: 1062 received rlm_sql_mysql: Cannot store result rlm_sql_mysql: MySQL error 'Duplicate entry '' for key 'acctuniqueid'' rlm_sql (sql): Released sql socket id: 9 ++[sql] = fail +} # group accounting = fail Finished request 21. Cleaning up request 21 ID 5 with timestamp +1271 Going to the next request Ready to process requests. Reading the freeradius mailing list it seems that the only solution is to use the "acct_unique" module which is not available for download using the opkg install tool from OpenWrt console. I beg any one who have this package (ipk already compiled for the mvebu platform) or he have the OpenWrt build system and he can cross compile this module to help me sort my issue by helping me to get this module for my platform. Any other alternative solutions to sort out this problem using shell scripting call from the freeradius daemon are welcome Kind regards
On Jun 20, 2017, at 9:16 AM, Boudraa Cheikh via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Reading the freeradius mailing list it seems that the only solution is to use the "acct_unique" module which is not available for download using the opkg install tool from OpenWrt console. I beg any one who have this package (ipk already compiled for the mvebu platform) or he have the OpenWrt build system and he can cross compile this module to help me sort my issue by helping me to get this module for my platform.
You can use this instead of acct_unique: update request { &Acct-Unique-Session-Id := "%{md5:%{User-Name},%{Acct-Multi-Session-ID},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}" } That's what v3 does. Alan DeKok.
On Jun 20, 2017, at 9:21 AM, Alan DeKok <aland@deployingradius.com> wrote:
On Jun 20, 2017, at 9:16 AM, Boudraa Cheikh via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Reading the freeradius mailing list it seems that the only solution is to use the "acct_unique" module which is not available for download using the opkg install tool from OpenWrt console. I beg any one who have this package (ipk already compiled for the mvebu platform) or he have the OpenWrt build system and he can cross compile this module to help me sort my issue by helping me to get this module for my platform.
You can use this instead of acct_unique:
update request { &Acct-Unique-Session-Id := "%{md5:%{User-Name},%{Acct-Multi-Session-ID},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}" }
Except you probably need to remove the & from Acct-Unique-Session-ID, and I honestly can't remember if IPV6 attributes were supported in v3. Arran Cudbard-Bell FreeRADIUS Core Developer FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
I was going to say md5 rather than sha-1 ? but then realised 2.2.8 - i dont think that got given sha-1 xlat support... On 20 June 2017 at 16:13, Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:
On Jun 20, 2017, at 9:21 AM, Alan DeKok <aland@deployingradius.com> wrote:
On Jun 20, 2017, at 9:16 AM, Boudraa Cheikh via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Reading the freeradius mailing list it seems that the only solution is to use the "acct_unique" module which is not available for download using the opkg install tool from OpenWrt console. I beg any one who have this package (ipk already compiled for the mvebu platform) or he have the OpenWrt build system and he can cross compile this module to help me sort my issue by helping me to get this module for my platform.
You can use this instead of acct_unique:
update request { &Acct-Unique-Session-Id := "%{md5:%{User-Name},%{Acct-Multi-Session-ID},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}" }
Except you probably need to remove the & from Acct-Unique-Session-ID, and I honestly can't remember if IPV6 attributes were supported in v3.
Arran Cudbard-Bell FreeRADIUS Core Developer
FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Alan Buxey -
Alan DeKok -
Arran Cudbard-Bell -
Boudraa Cheikh