freeRadius instance without Authentication for Accounting
Hi, I am interested in setting up an instance of freeRadius that will receive cloned data from a Radius Server in a telco operator environment. The purpose of the server is for us to be able to collect usage data and load it into our Datastore for analysis and BI. can anyone assist me in how I would set up the server once installed to prevent the server from performing authentication ,and accepting all messages. In addition we need to load the usage data info received initially into csv files that can then be loaded in to both a relational database (Oracle) and a NoSql (MongoDB) environment? Lastly is there a way to configure filtering of what messages are saved and logged? filtering would be needed to be performed by certain fields in the message , Thanks in advance to everyones time and help. Liran Kessel
On 5 Apr 2016, at 16:12, liran kessel <lirankessel@gmail.com> wrote:
Hi,
I am interested in setting up an instance of freeRadius that will receive cloned data from a Radius Server in a telco operator environment. The purpose of the server is for us to be able to collect usage data and load it into our Datastore for analysis and BI. can anyone assist me in how I would set up the server once installed to prevent the server from performing authentication ,and accepting all messages.
Assuming these are Access-Requests (and not accounting requests). authorize { <database module> do_not_respond } If they're Accounting-Requests you can use the same policy (do_not_respond).
In addition we need to load the usage data info received initially into csv files that can then be loaded in to both a relational database (Oracle) and a NoSql (MongoDB) environment?
You mean write the usage data to csv files? See the linelog module.
Lastly is there a way to configure filtering of what messages are saved and logged? filtering would be needed to be performed by certain fields in the message ,
man unlang -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Hi , Thanks for the quick answer. we are interested only in Accounting-Requests in order to count how many sessions and data consumed by the different subscribers, and not in Access Requests and their results. So you are suggesting to use the linelog to create a csv file from the data than a sql and then use unlang for the parsing and filtering to get only the messages we really require? Thanks Again Liran
On 5 Apr 2016, at 11:36 PM, Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:
On 5 Apr 2016, at 16:12, liran kessel <lirankessel@gmail.com> wrote:
Hi,
I am interested in setting up an instance of freeRadius that will receive cloned data from a Radius Server in a telco operator environment. The purpose of the server is for us to be able to collect usage data and load it into our Datastore for analysis and BI. can anyone assist me in how I would set up the server once installed to prevent the server from performing authentication ,and accepting all messages.
Assuming these are Access-Requests (and not accounting requests).
authorize { <database module>
do_not_respond }
If they're Accounting-Requests you can use the same policy (do_not_respond).
In addition we need to load the usage data info received initially into csv files that can then be loaded in to both a relational database (Oracle) and a NoSql (MongoDB) environment?
You mean write the usage data to csv files? See the linelog module.
Lastly is there a way to configure filtering of what messages are saved and logged? filtering would be needed to be performed by certain fields in the message ,
man unlang
-Arran
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 5 Apr 2016, at 16:54, liran kessel <lirankessel@gmail.com> wrote:
Hi ,
Thanks for the quick answer. we are interested only in Accounting-Requests in order to count how many sessions and data consumed by the different subscribers, and not in Access Requests and their results. So you are suggesting to use the linelog to create a csv file from the data
That seemed to be a requirement? You can just use SQL, there's no need for CSV. If you want to ingest CSV files, then you'll need to write your own scripts.
use unlang for the parsing and filtering to get only the messages we really require?
Yes, use unlang for filtering. -Arran
Hi, I have set up the server and am able to connect with the user/password I placed in the mysql DB, however I would like to receive accounting data without the sending server needing to give any credentials. This is needed as I want to just collect the data sent for further analysis. In addition I don’t see the requests being stored in the DB, is there a setting I need to configure? Thanks Liran
On 5 Apr 2016, at 11:36 PM, Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:
On 5 Apr 2016, at 16:12, liran kessel <lirankessel@gmail.com> wrote:
Hi,
I am interested in setting up an instance of freeRadius that will receive cloned data from a Radius Server in a telco operator environment. The purpose of the server is for us to be able to collect usage data and load it into our Datastore for analysis and BI. can anyone assist me in how I would set up the server once installed to prevent the server from performing authentication ,and accepting all messages.
Assuming these are Access-Requests (and not accounting requests).
authorize { <database module>
do_not_respond }
If they're Accounting-Requests you can use the same policy (do_not_respond).
In addition we need to load the usage data info received initially into csv files that can then be loaded in to both a relational database (Oracle) and a NoSql (MongoDB) environment?
You mean write the usage data to csv files? See the linelog module.
Lastly is there a way to configure filtering of what messages are saved and logged? filtering would be needed to be performed by certain fields in the message ,
man unlang
-Arran
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Apr 11, 2016, at 5:06 AM, liran kessel <lirankessel@gmail.com> wrote:
I have set up the server and am able to connect with the user/password I placed in the mysql DB, however I would like to receive accounting data without the sending server needing to give any credentials. This is needed as I want to just collect the data sent for further analysis.
You need to configure the NAS to send accounting packets to the server.
In addition I don’t see the requests being stored in the DB, is there a setting I need to configure?
Read raddb/sites-enabled/default. Look for "sql". Alan DeKok.
Hi Alan, regarding setting the NAS to send accounting, if its only accounting will my radius accept the messages without any authentication check first? regarding sql, I have unhashed all instances of sql in the default file, should I do it also for sql-log? will the accounting data be inserted into radius db tables? or do I need to install and configure additional tables? Thanks Liran
On 11 Apr 2016, at 1:57 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Apr 11, 2016, at 5:06 AM, liran kessel <lirankessel@gmail.com> wrote:
I have set up the server and am able to connect with the user/password I placed in the mysql DB, however I would like to receive accounting data without the sending server needing to give any credentials. This is needed as I want to just collect the data sent for further analysis.
You need to configure the NAS to send accounting packets to the server.
In addition I don’t see the requests being stored in the DB, is there a setting I need to configure?
Read raddb/sites-enabled/default. Look for "sql".
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Apr 11, 2016, at 7:10 AM, liran kessel <lirankessel@gmail.com> wrote:
regarding setting the NAS to send accounting, if its only accounting will my radius accept the messages without any authentication check first?
Yes.
regarding sql, I have unhashed all instances of sql in the default file, should I do it also for sql-log?
Only if you want the sql-log functionality. It helps to understand what the server is doing.
will the accounting data be inserted into radius db tables?
That's what the SQL module does.
or do I need to install and configure additional tables?
No. Alan DeKok.
Hi I have configured the radius server and run it to collect accounting data, but am receiving this error Ignoring request to accounting address * port 1813 from unknown client 172.28.42.136 port 58599 Ready to process requests. Ignoring request to accounting address * port 1813 from unknown client 172.28.42.136 port 58599 Ready to process requests. Ignoring request to accounting address * port 1813 from unknown client 172.28.42.136 port 58599 Ready to process requests. where do I place the IP address for accepting accounting data? and if I have activated SQL and sql-log in which tables will the accounting be stored? Thanks liran
On 11 Apr 2016, at 4:07 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Apr 11, 2016, at 7:10 AM, liran kessel <lirankessel@gmail.com> wrote:
regarding setting the NAS to send accounting, if its only accounting will my radius accept the messages without any authentication check first?
Yes.
regarding sql, I have unhashed all instances of sql in the default file, should I do it also for sql-log?
Only if you want the sql-log functionality.
It helps to understand what the server is doing.
will the accounting data be inserted into radius db tables?
That's what the SQL module does.
or do I need to install and configure additional tables?
No.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On May 10, 2016, at 9:05 AM, liran kessel <lirankessel@gmail.com> wrote:
I have configured the radius server and run it to collect accounting data, but am receiving this error
Ignoring request to accounting address * port 1813 from unknown client 172.28.42.136 port 58599 Ready to process requests. Ignoring request to accounting address * port 1813 from unknown client 172.28.42.136 port 58599 Ready to process requests. Ignoring request to accounting address * port 1813 from unknown client 172.28.42.136 port 58599 Ready to process requests.
where do I place the IP address for accepting accounting data?
raddb/clients.conf
and if I have activated SQL and sql-log in which tables will the accounting be stored?
In the "radacct" table. All of this is documented in raddb/mods-available/sql Alan DeKok.
participants (3)
-
Alan DeKok -
Arran Cudbard-Bell -
liran kessel