Hi Alan Thank you for you helping on accounting response i got the advice for freeradius list use the unlang to modify the Accep Reject i read the man unlang but cannot figure out how to use it this is the whole call the call flow : NAS ----> Access-Request -------> FreeRadius Freeradius ------>Access Accept(if the password is matched) ----> NAS NAS ----> Accounting-Request -------> FreeRadius(Accounting start) Freeradius -----> Acounting Response------> NAS NAS ----> Access-Request -------> FreeRadius (Reauthorize to check account balance) Freeradius ------>Access Accept(if the password is matched) ----> NAS Freeradius ------>Access Reject(if the password isnot matched) ----> NAS at the line 529 + 530, i should to send back to NAS server with the Acces Reject with attribute h323-return-code == "h323-return-code=2" not 0 Thank you Ha` 1 rad_recv: Access-Request packet from host 172.26.0.8 port 1645, id=200, length=165 2 User-Name = "0873000001" 3 User-Password = "Servicecisco" 4 NAS-IP-Address = 0.0.0.0 5 NAS-Port = 0 6 Service-Type = Dialout-Framed-User 7 h323-call-type = "h323-call-type=VOIP" 8 Called-Station-Id = "0873001163" 9 Calling-Station-Id = "0873000001" 10 Acct-Session-Id = "e727dc68 ca4d11dd 812dd127 98296413 " 11 Event-Timestamp = "Dec 16 2008 09:13:03 ICT" 12 NAS-Port-Type = Ethernet 13 +- entering group authorize {...} 14 ++[preprocess] returns ok 15 [auth_log] expand: /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/radius/radacct/172.26.0.8/auth-detail-20081216 16 [auth_log] /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/radius/radacct/172.26.0.8/auth-detail-20081216 17 [auth_log] expand: %t -> Tue Dec 16 09:13:03 2008 18 ++[auth_log] returns ok 19 ++[digest] returns noop 20 [suffix] No '@' in User-Name = "0873000001", looking up realm NULL 21 [suffix] No such realm "NULL" 22 ++[suffix] returns noop 23 ++[unix] returns notfound 24 [pgsql-voip] expand: %{User-Name} -> 0873000001 25 [pgsql-voip] sql_set_user escaped user --> '0873000001' 26 rlm_sql (pgsql-voip): Reserving sql socket id: 19 27 [pgsql-voip] expand: SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE Username = '0873000001' ORDER BY id 28 rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE Username = '0873000001' ORDER BY id 29 rlm_sql_postgresql: Status: PGRES_TUPLES_OK 30 rlm_sql_postgresql: query affected rows = 1 , fields = 5 31 [pgsql-voip] User found in radcheck table 32 [pgsql-voip] expand: SELECT id, UserName, Attribute, Value, Op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, UserName, Attribute, Value, Op FROM radreply WHERE Username = '0873000001' ORDER BY id 33 rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op FROM radreply WHERE Username = '0873000001' ORDER BY id 34 rlm_sql_postgresql: Status: PGRES_TUPLES_OK 35 rlm_sql_postgresql: query affected rows = 7 , fields = 5 36 rlm_sql (pgsql-voip): Released sql socket id: 19 37 ++[pgsql-voip] returns ok 38 rlm_counter: Entering module authorize code 39 rlm_counter: Could not find Check item value pair 40 ++[daily] returns noop 41 ++[expiration] returns noop 42 ++[logintime] returns noop 43 ++[pap] returns updated 44 Found Auth-Type = PAP 45 +- entering group PAP {...} 46 [pap] login attempt with password "Servicecisco" 47 [pap] Using clear text password "Servicecisco" 48 [pap] User authenticated successfully 49 ++[pap] returns ok 50 +- entering group post-auth {...} 51 [reply_log] expand: /var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/radius/radacct/172.26.0.8/reply-detail-20081216 52 [reply_log] /var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/radius/radacct/172.26.0.8/reply-detail-20081216 53 [reply_log] expand: %t -> Tue Dec 16 09:13:03 2008 54 ++[reply_log] returns ok 55 [pgsql-voip] expand: %{User-Name} -> 0873000001 56 [pgsql-voip] sql_set_user escaped user --> '0873000001' 57 [pgsql-voip] expand: %{User-Password} -> Servicecisco 58 [pgsql-voip] expand: INSERT INTO radpostauth (username, pass, reply, authdate, calledstationid, callingstationid) VALUES ('%{User-Name}', '%{%{User-Password}:-Chap-Password}', '%{reply:Packet-Type}', NOW(), '%{Called-Station-Id}', '%{Calling-Station-Id}') -> INSERT INTO radpostauth (username, pass, reply, authdate, calledstationid, callingstationid) VALUES ('0873000001', 'Servicecisco', 'Access-Accept', NOW(), '0873001163', '0873000001') 59 [pgsql-voip] expand: /var/log/radius/sqltrace.sql -> /var/log/radius/sqltrace.sql 60 rlm_sql (pgsql-voip) in sql_postauth: query is INSERT INTO radpostauth (username, pass, reply, authdate, calledstationid, callingstationid) VALUES ('0873000001', 'Servicecisco', 'Access-Accept', NOW(), '0873001163', '0873000001') 61 rlm_sql (pgsql-voip): Reserving sql socket id: 18 62 rlm_sql_postgresql: query: INSERT INTO radpostauth (username, pass, reply, authdate, calledstationid, callingstationid) VALUES ('0873000001', 'Servicecisco', 'Access-Accept', NOW(), '0873001163', '0873000001') 63 rlm_sql_postgresql: Status: PGRES_COMMAND_OK 64 rlm_sql_postgresql: query affected rows = 1 65 rlm_sql (pgsql-voip): Released sql socket id: 18 66 ++[pgsql-voip] returns ok 67 ++[exec] returns noop 68 Sending Access-Accept of id 200 to 172.26.0.8 port 1645 69 Class == 0x436c6173733d333030 70 h323-credit-amount == "h323-credit-amount=1000" 71 h323-return-code == "h323-return-code=0" 72 h323-preferred-lang == "hh323-preferred-lang=VN" 73 h323-billing-model == "h323-billing-model=2" 74 h323-currency == "h323-currency=USD" 75 h323-credit-time == "h323-credit-time=10" 76 Finished request 3. 77 Going to the next request 78 Waking up in 4.9 seconds. 79 rad_recv: Accounting-Request packet from host 172.26.0.8 port 1645, id=201, length=399 80 User-Name = "0873000001" 81 NAS-IP-Address = 0.0.0.0 82 Service-Type = Dialout-Framed-User 83 Class = 0x436c6173733d333030 84 Cisco-AVPair = "h323-incoming-conf-id=e727dc68 ca4d11dd 812dd127 98296413 " 85 h323-conf-id = "h323-conf-id=e727dc68 ca4d11dd 812dd127 98296413 " 86 h323-setup-time = "h323-setup-time= 2:13:03.000 UTC Tue Dec 16 2008" 87 h323-connect-time = "h323-connect-time= 2:13:05.000 UTC Tue Dec 16 2008" 88 h323-call-type = "h323-call-type=VOIP" 89 Called-Station-Id = "0873001163" 90 Calling-Station-Id = "0873000001" 91 Acct-Status-Type = Start 92 Acct-Session-Id = "e727dc68 ca4d11dd 812dd127 98296413 " 93 Event-Timestamp = "Dec 16 2008 09:13:05 ICT" 94 NAS-Port-Type = Ethernet 95 +- entering group preacct {...} 96 ++[preprocess] returns ok 97 [acct_unique] Hashing 'NAS-Port-Type = Ethernet,Client-IP-Address = 172.26.0.8,NAS-IP-Address = 0.0.0.0,Acct-Session-Id = "e727dc68 ca4d11dd 812dd127 98296413 ",User-Name = "0873000001"' 98 [acct_unique] Acct-Unique-Session-ID = "bf9a06b98413c5d2". 99 ++[acct_unique] returns ok 100 [suffix] No '@' in User-Name = "0873000001", looking up realm NULL 101 [suffix] No such realm "NULL" 102 ++[suffix] returns noop 103 [files] acct_users: Matched entry DEFAULT at line 22 104 [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details 105 [files] expand: %{Stripped-User-Name:-%{User-Name}} -> 0873000001 106 ++[files] returns ok 107 +- entering group accounting {...} 108 [detail] expand: /var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/radius/radacct/172.26.0.8/detail-20081216 109 [detail] /var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/radius/radacct/172.26.0.8/detail-20081216 110 [detail] expand: %t -> Tue Dec 16 09:13:05 2008 111 ++[detail] returns ok 112 ++[unix] returns noop 113 [radutmp] expand: /var/log/radius/radutmp -> /var/log/radius/radutmp 114 [radutmp] expand: %{User-Name} -> 0873000001 115 rlm_radutmp: No NAS-Port seen. Cannot do anything. 116 rlm_radumtp: WARNING: checkrad will probably not work! 117 ++[radutmp] returns noop 118 [pgsql-voip] expand: %{User-Name} -> 0873000001 119 [pgsql-voip] sql_set_user escaped user --> '0873000001' 120 [pgsql-voip] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details 121 [pgsql-voip] expand: INSERT into startvoip (RadiusServerName, UserName, NASIPAddress, AcctTime, CalledStationId, CallingStationId, AcctDelayTime, h323gwid, h323callorigin, h323setuptime, H323ConnectTime, callid) values('210.245.126.131', '%{SQL-User-Name}', '%{NAS-IP-Address}', now(), '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Acct-Delay-Time:-0}', '%{h323-gw-id}', '%{h323-call-origin}', strip_dot('%{h323-setup-time}'), strip_dot('%{h323-connect-time}'), pick_id('%{h323-conf-id}', '%{call-id}')) -> INSERT into startvoip (RadiusServerName, UserName, NASIPAddress, AcctTime, CalledStationId, CallingStationId, AcctDelayTime, h323gwid, h323callorigin, h323setuptime, H323ConnectTime, callid) values('210.245.126.131', '0873000001', '0.0.0.0', now(), '0873001163', '0873000001', '0', '', '', strip_dot(' 2:13:03.000 UTC Tue Dec 16 2008'), strip_dot(' 2:13:05.000 UTC Tue Dec 16 2008'), pick_id('e727dc68 ca4d11dd 812dd127 98296413 ', '')) 122 [pgsql-voip] expand: /var/log/radius/sqltrace.sql -> /var/log/radius/sqltrace.sql 123 rlm_sql (pgsql-voip): Reserving sql socket id: 17 124 rlm_sql_postgresql: query: INSERT into startvoip (RadiusServerName, UserName, NASIPAddress, AcctTime, CalledStationId, CallingStationId, AcctDelayTime, h323gwid, h323callorigin, h323setuptime, H323ConnectTime, callid) values('210.245.126.131', '0873000001', '0.0.0.0', now(), '0873001163', '0873000001', '0', '', '', strip_dot(' 2:13:03.000 UTC Tue Dec 16 2008'), strip_dot(' 2:13:05.000 UTC Tue Dec 16 2008'), pick_id('e727dc68 ca4d11dd 812dd127 98296413 ', '')) 125 rlm_sql_postgresql: Status: PGRES_COMMAND_OK 126 rlm_sql_postgresql: query affected rows = 1 127 rlm_sql (pgsql-voip): Released sql socket id: 17 128 ++[pgsql-voip] returns ok 129 Sending Accounting-Response of id 201 to 172.26.0.8 port 1645 130 User-Name := "0873000001" 131 h323-return-code := "h323-return-code=0" 132 h323-billing-model := "h323-billing-model=2" 133 Finished request 4. 134 Cleaning up request 4 ID 201 with timestamp +124 135 Going to the next request 136 Waking up in 2.8 seconds. 137 Cleaning up request 3 ID 200 with timestamp +122 138 Ready to process requests. 139 rad_recv: Access-Request packet from host 172.26.0.8 port 1645, id=202, length=202 140 User-Name = "0873000001" 141 User-Password = "Servicecisco" 142 NAS-IP-Address = 0.0.0.0 143 NAS-Port = 0 144 Service-Type = Dialout-Framed-User 145 Class = 0x436c6173733d333030 146 h323-call-type = "h323-call-type=VOIP" 147 h323-credit-time = "h323-credit-time=9" 148 Called-Station-Id = "0873001163" 149 Calling-Station-Id = "0873000001" 150 Acct-Session-Id = "e727dc68 ca4d11dd 812dd127 98296413 " 151 Event-Timestamp = "Dec 16 2008 09:13:14 ICT" 152 NAS-Port-Type = Ethernet 153 +- entering group authorize {...} 154 ++[preprocess] returns ok 155 [auth_log] expand: /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/radius/radacct/172.26.0.8/auth-detail-20081216 156 [auth_log] /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/radius/radacct/172.26.0.8/auth-detail-20081216 157 [auth_log] expand: %t -> Tue Dec 16 09:13:14 2008 158 ++[auth_log] returns ok 159 ++[digest] returns noop 160 [suffix] No '@' in User-Name = "0873000001", looking up realm NULL 161 [suffix] No such realm "NULL" 162 ++[suffix] returns noop 163 ++[unix] returns notfound 164 [pgsql-voip] expand: %{User-Name} -> 0873000001 165 [pgsql-voip] sql_set_user escaped user --> '0873000001' ........... 171 [pgsql-voip] User found in radcheck table 172 [pgsql-voip] expand: SELECT id, UserName, Attribute, Value, Op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, UserName, Attribute, Value, Op FROM radreply WHERE Username = '0873000001' ORDER BY id 173 rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op FROM radreply WHERE Username = '0873000001' ORDER BY id 174 rlm_sql_postgresql: Status: PGRES_TUPLES_OK 175 rlm_sql_postgresql: query affected rows = 7 , fields = 5 176 rlm_sql (pgsql-voip): Released sql socket id: 16 177 ++[pgsql-voip] returns ok 178 rlm_counter: Entering module authorize code 179 rlm_counter: Could not find Check item value pair 180 ++[daily] returns noop 181 ++[expiration] returns noop 182 ++[logintime] returns noop 183 ++[pap] returns updated 184 Found Auth-Type = PAP 185 +- entering group PAP {...} 186 [pap] login attempt with password "Servicecisco" 187 [pap] Using clear text password "Servicecisco" 188 [pap] User authenticated successfully 189 ++[pap] returns ok 190 +- entering group post-auth {...} 191 [reply_log] expand: /var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/radius/radacct/172.26.0.8/reply-detail-20081216 192 [reply_log] /var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/radius/radacct/172.26.0.8/reply-detail-20081216 193 [reply_log] expand: %t -> Tue Dec 16 09:13:14 2008 194 ++[reply_log] returns ok 195 [pgsql-voip] expand: %{User-Name} -> 0873000001 196 [pgsql-voip] sql_set_user escaped user --> '0873000001' 197 [pgsql-voip] expand: %{User-Password} -> Servicecisco 198 [pgsql-voip] expand: INSERT INTO radpostauth (username, pass, reply, authdate, calledstationid, callingstationid) VALUES ('%{User-Name}', '%{%{User-Password}:-Chap-Password}', '%{reply:Packet-Type}', NOW(), '%{Called-Station-Id}', '%{Calling-Station-Id}') -> INSERT INTO radpostauth (username, pass, reply, authdate, calledstationid, callingstationid) VALUES ('0873000001', 'Servicecisco', 'Access-Accept', NOW(), '0873001163', '0873000001') 199 [pgsql-voip] expand: /var/log/radius/sqltrace.sql -> /var/log/radius/sqltrace.sql 200 rlm_sql (pgsql-voip) in sql_postauth: query is INSERT INTO radpostauth (username, pass, reply, authdate, calledstationid, callingstationid) VALUES ('0873000001', 'Servicecisco', 'Access-Accept', NOW(), '0873001163', '0873000001') 201 rlm_sql (pgsql-voip): Reserving sql socket id: 15 202 rlm_sql_postgresql: query: INSERT INTO radpostauth (username, pass, reply, authdate, calledstationid, callingstationid) VALUES ('0873000001', 'Servicecisco', 'Access-Accept', NOW(), '0873001163', '0873000001') 203 rlm_sql_postgresql: Status: PGRES_COMMAND_OK 204 rlm_sql_postgresql: query affected rows = 1 205 rlm_sql (pgsql-voip): Released sql socket id: 15 206 ++[pgsql-voip] returns ok 207 ++[exec] returns noop 208 Sending Access-Accept of id 202 to 172.26.0.8 port 1645 209 Class == 0x436c6173733d333030 210 h323-credit-amount == "h323-credit-amount=1000" 211 h323-return-code == "h323-return-code=0" 212 h323-preferred-lang == "hh323-preferred-lang=VN" 213 h323-billing-model == "h323-billing-model=2" 214 h323-currency == "h323-currency=USD" 215 h323-credit-time == "h323-credit-time=10" 216 Finished request 5. 217 Going to the next request 218 Waking up in 4.9 seconds. 219 Cleaning up request 5 ID 202 with timestamp +133 220 Ready to process requests. 221 rad_recv: Access-Request packet from host 172.26.0.8 port 1645, id=203, length=203 222 User-Name = "0873000001" 223 User-Password = "Servicecisco" 224 NAS-IP-Address = 0.0.0.0 225 NAS-Port = 0 226 Service-Type = Dialout-Framed-User 227 Class = 0x436c6173733d333030 228 h323-call-type = "h323-call-type=VOIP" 229 h323-credit-time = "h323-credit-time=19" 230 Called-Station-Id = "0873001163" 231 Calling-Station-Id = "0873000001" 232 Acct-Session-Id = "e727dc68 ca4d11dd 812dd127 98296413 " 233 Event-Timestamp = "Dec 16 2008 09:13:24 ICT" 234 NAS-Port-Type = Ethernet 235 +- entering group authorize {...} 236 ++[preprocess] returns ok 237 [auth_log] expand: /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/radius/radacct/172.26.0.8/auth-detail-20081216 238 [auth_log] /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/radius/radacct/172.26.0.8/auth-detail-20081216 239 [auth_log] expand: %t -> Tue Dec 16 09:13:24 2008 240 ++[auth_log] returns ok 241 ++[digest] returns noop 242 [suffix] No '@' in User-Name = "0873000001", looking up realm NULL 243 [suffix] No such realm "NULL" 244 ++[suffix] returns noop 245 ++[unix] returns notfound 246 [pgsql-voip] expand: %{User-Name} -> 0873000001 247 [pgsql-voip] sql_set_user escaped user --> '0873000001' 248 rlm_sql (pgsql-voip): Reserving sql socket id: 14 249 [pgsql-voip] expand: SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE Username = '0873000001' ORDER BY id 250 rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE Username = '0873000001' ORDER BY id 251 rlm_sql_postgresql: Status: PGRES_TUPLES_OK 252 rlm_sql_postgresql: query affected rows = 1 , fields = 5 253 [pgsql-voip] User found in radcheck table 254 [pgsql-voip] expand: SELECT id, UserName, Attribute, Value, Op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, UserName, Attribute, Value, Op FROM radreply WHERE Username = '0873000001' ORDER BY id 255 rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op FROM radreply WHERE Username = '0873000001' ORDER BY id 256 rlm_sql_postgresql: Status: PGRES_TUPLES_OK 257 rlm_sql_postgresql: query affected rows = 7 , fields = 5 258 rlm_sql (pgsql-voip): Released sql socket id: 14 259 ++[pgsql-voip] returns ok 260 rlm_counter: Entering module authorize code 261 rlm_counter: Could not find Check item value pair 262 ++[daily] returns noop 263 ++[expiration] returns noop 264 ++[logintime] returns noop 265 ++[pap] returns updated 266 Found Auth-Type = PAP 267 +- entering group PAP {...} 268 [pap] login attempt with password "Servicecisco" 269 [pap] Using clear text password "Servicecisco" 270 [pap] User authenticated successfully 271 ++[pap] returns ok 272 +- entering group post-auth {...} 273 [reply_log] expand: /var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/radius/radacct/172.26.0.8/reply-detail-20081216 274 [reply_log] /var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/radius/radacct/172.26.0.8/reply-detail-20081216 275 [reply_log] expand: %t -> Tue Dec 16 09:13:24 2008 276 ++[reply_log] returns ok 277 [pgsql-voip] expand: %{User-Name} -> 0873000001 278 [pgsql-voip] sql_set_user escaped user --> '0873000001' 279 [pgsql-voip] expand: %{User-Password} -> Servicecisco 280 [pgsql-voip] expand: INSERT INTO radpostauth (username, pass, reply, authdate, calledstationid, callingstationid) VALUES ('%{User-Name}', '%{%{User-Password}:-Chap-Password}', '%{reply:Packet-Type}', NOW(), '%{Called-Station-Id}', '%{Calling-Station-Id}') -> INSERT INTO radpostauth (username, pass, reply, authdate, calledstationid, callingstationid) VALUES ('0873000001', 'Servicecisco', 'Access-Accept', NOW(), '0873001163', '0873000001') 281 [pgsql-voip] expand: /var/log/radius/sqltrace.sql -> /var/log/radius/sqltrace.sql 282 rlm_sql (pgsql-voip) in sql_postauth: query is INSERT INTO radpostauth (username, pass, reply, authdate, calledstationid, callingstationid) VALUES ('0873000001', 'Servicecisco', 'Access-Accept', NOW(), '0873001163', '0873000001') 283 rlm_sql (pgsql-voip): Reserving sql socket id: 13 284 rlm_sql_postgresql: query: INSERT INTO radpostauth (username, pass, reply, authdate, calledstationid, callingstationid) VALUES ('0873000001', 'Servicecisco', 'Access-Accept', NOW(), '0873001163', '0873000001') 285 rlm_sql_postgresql: Status: PGRES_COMMAND_OK 286 rlm_sql_postgresql: query affected rows = 1 287 rlm_sql (pgsql-voip): Released sql socket id: 13 288 ++[pgsql-voip] returns ok 289 ++[exec] returns noop 290 Sending Access-Accept of id 203 to 172.26.0.8 port 1645 291 Class == 0x436c6173733d333030 292 h323-credit-amount == "h323-credit-amount=1000" 293 h323-return-code == "h323-return-code=0" 294 h323-preferred-lang == "hh323-preferred-lang=VN" 295 h323-billing-model == "h323-billing-model=2" 296 h323-currency == "h323-currency=USD" 297 h323-credit-time == "h323-credit-time=10" 298 Finished request 6. 299 Going to the next request 300 Waking up in 4.9 seconds. 301 Cleaning up request 6 ID 203 with timestamp +143 302 Ready to process requests. 303 rad_recv: Access-Request packet from host 172.26.0.8 port 1645, id=204, length=203 304 User-Name = "0873000001" 305 User-Password = "Servicecisco" 306 NAS-IP-Address = 0.0.0.0 307 NAS-Port = 0 308 Service-Type = Dialout-Framed-User 309 Class = 0x436c6173733d333030 310 h323-call-type = "h323-call-type=VOIP" 311 h323-credit-time = "h323-credit-time=29" 312 Called-Station-Id = "0873001163" 313 Calling-Station-Id = "0873000001" 314 Acct-Session-Id = "e727dc68 ca4d11dd 812dd127 98296413 " 315 Event-Timestamp = "Dec 16 2008 09:13:34 ICT" 316 NAS-Port-Type = Ethernet 317 +- entering group authorize {...} 318 ++[preprocess] returns ok 319 [auth_log] expand: /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/radius/radacct/172.26.0.8/auth-detail-20081216 320 [auth_log] /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/radius/radacct/172.26.0.8/auth-detail-20081216 321 [auth_log] expand: %t -> Tue Dec 16 09:13:34 2008 322 ++[auth_log] returns ok 323 ++[digest] returns noop 324 [suffix] No '@' in User-Name = "0873000001", looking up realm NULL 325 [suffix] No such realm "NULL" 326 ++[suffix] returns noop 327 ++[unix] returns notfound 328 [pgsql-voip] expand: %{User-Name} -> 0873000001 329 [pgsql-voip] sql_set_user escaped user --> '0873000001' 330 rlm_sql (pgsql-voip): Reserving sql socket id: 12 331 [pgsql-voip] expand: SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE Username = '0873000001' ORDER BY id 332 rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE Username = '0873000001' ORDER BY id 333 rlm_sql_postgresql: Status: PGRES_TUPLES_OK 334 rlm_sql_postgresql: query affected rows = 1 , fields = 5 335 [pgsql-voip] User found in radcheck table 336 [pgsql-voip] expand: SELECT id, UserName, Attribute, Value, Op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, UserName, Attribute, Value, Op FROM radreply WHERE Username = '0873000001' ORDER BY id 337 rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op FROM radreply WHERE Username = '0873000001' ORDER BY id 338 rlm_sql_postgresql: Status: PGRES_TUPLES_OK 339 rlm_sql_postgresql: query affected rows = 7 , fields = 5 340 rlm_sql (pgsql-voip): Released sql socket id: 12 341 ++[pgsql-voip] returns ok 342 rlm_counter: Entering module authorize code 343 rlm_counter: Could not find Check item value pair 344 ++[daily] returns noop 345 ++[expiration] returns noop 346 ++[logintime] returns noop 347 ++[pap] returns updated 348 Found Auth-Type = PAP 349 +- entering group PAP {...} 350 [pap] login attempt with password "Servicecisco" 351 [pap] Using clear text password "Servicecisco" 352 [pap] User authenticated successfully 353 ++[pap] returns ok 354 +- entering group post-auth {...} 355 [reply_log] expand: /var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/radius/radacct/172.26.0.8/reply-detail-20081216 356 [reply_log] /var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/radius/radacct/172.26.0.8/reply-detail-20081216 357 [reply_log] expand: %t -> Tue Dec 16 09:13:34 2008 358 ++[reply_log] returns ok 359 [pgsql-voip] expand: %{User-Name} -> 0873000001 360 [pgsql-voip] sql_set_user escaped user --> '0873000001' 361 [pgsql-voip] expand: %{User-Password} -> Servicecisco 362 [pgsql-voip] expand: INSERT INTO radpostauth (username, pass, reply, authdate, calledstationid, callingstationid) VALUES ('%{User-Name}', '%{%{User-Password}:-Chap-Password}', '%{reply:Packet-Type}', NOW(), '%{Called-Station-Id}', '%{Calling-Station-Id}') -> INSERT INTO radpostauth (username, pass, reply, authdate, calledstationid, callingstationid) VALUES ('0873000001', 'Servicecisco', 'Access-Accept', NOW(), '0873001163', '0873000001') 363 [pgsql-voip] expand: /var/log/radius/sqltrace.sql -> /var/log/radius/sqltrace.sql 364 rlm_sql (pgsql-voip) in sql_postauth: query is INSERT INTO radpostauth (username, pass, reply, authdate, calledstationid, callingstationid) VALUES ('0873000001', 'Servicecisco', 'Access-Accept', NOW(), '0873001163', '0873000001') 365 rlm_sql (pgsql-voip): Reserving sql socket id: 11 366 rlm_sql_postgresql: query: INSERT INTO radpostauth (username, pass, reply, authdate, calledstationid, callingstationid) VALUES ('0873000001', 'Servicecisco', 'Access-Accept', NOW(), '0873001163', '0873000001') 367 rlm_sql_postgresql: Status: PGRES_COMMAND_OK 368 rlm_sql_postgresql: query affected rows = 1 369 rlm_sql (pgsql-voip): Released sql socket id: 11 370 ++[pgsql-voip] returns ok 371 ++[exec] returns noop 372 Sending Access-Accept of id 204 to 172.26.0.8 port 1645 373 Class == 0x436c6173733d333030 374 h323-credit-amount == "h323-credit-amount=1000" 375 h323-return-code == "h323-return-code=0" 376 h323-preferred-lang == "hh323-preferred-lang=VN" 377 h323-billing-model == "h323-billing-model=2" 378 h323-currency == "h323-currency=USD" 379 h323-credit-time == "h323-credit-time=10" 380 Finished request 7. 381 Going to the next request 382 Waking up in 4.9 seconds. 383 Cleaning up request 7 ID 204 with timestamp +153 384 Ready to process requests. ...... 465 Cleaning up request 8 ID 205 with timestamp +163 466 Ready to process requests. 467 rad_recv: Access-Request packet from host 172.26.0.8 port 1645, id=206, length=203 468 User-Name = "0873000001" 469 User-Password = "\037_Ø\346" 470 NAS-IP-Address = 0.0.0.0 471 NAS-Port = 0 472 Service-Type = Dialout-Framed-User 473 Class = 0x436c6173733d333030 474 h323-call-type = "h323-call-type=VOIP" 475 h323-credit-time = "h323-credit-time=49" 476 Called-Station-Id = "0873001163" 477 Calling-Station-Id = "0873000001" 478 Acct-Session-Id = "e727dc68 ca4d11dd 812dd127 98296413 " 479 Event-Timestamp = "Dec 16 2008 09:13:54 ICT" 480 NAS-Port-Type = Ethernet 481 +- entering group authorize {...} 482 ++[preprocess] returns ok 483 [auth_log] expand: /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/radius/radacct/172.26.0.8/auth-detail-20081216 484 [auth_log] /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/radius/radacct/172.26.0.8/auth-detail-20081216 485 [auth_log] expand: %t -> Tue Dec 16 09:13:54 2008 486 ++[auth_log] returns ok 487 ++[digest] returns noop 488 [suffix] No '@' in User-Name = "0873000001", looking up realm NULL 489 [suffix] No such realm "NULL" 490 ++[suffix] returns noop 491 ++[unix] returns notfound 492 [pgsql-voip] expand: %{User-Name} -> 0873000001 493 [pgsql-voip] sql_set_user escaped user --> '0873000001' 494 rlm_sql (pgsql-voip): Reserving sql socket id: 8 495 [pgsql-voip] expand: SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE Username = '0873000001' ORDER BY id 496 rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE Username = '0873000001' ORDER BY id 497 rlm_sql_postgresql: Status: PGRES_TUPLES_OK 498 rlm_sql_postgresql: query affected rows = 1 , fields = 5 499 [pgsql-voip] User found in radcheck table 500 [pgsql-voip] expand: SELECT id, UserName, Attribute, Value, Op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, UserName, Attribute, Value, Op FROM radreply WHERE Username = '0873000001' ORDER BY id 501 rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op FROM radreply WHERE Username = '0873000001' ORDER BY id 502 rlm_sql_postgresql: Status: PGRES_TUPLES_OK 503 rlm_sql_postgresql: query affected rows = 7 , fields = 5 504 rlm_sql (pgsql-voip): Released sql socket id: 8 505 ++[pgsql-voip] returns ok 506 rlm_counter: Entering module authorize code 507 rlm_counter: Could not find Check item value pair 508 ++[daily] returns noop 509 ++[expiration] returns noop 510 ++[logintime] returns noop 511 ++[pap] returns updated 512 Found Auth-Type = PAP 513 +- entering group PAP {...} 514 [pap] login attempt with password "?_Ø?æ" 515 [pap] Using clear text password "Servicecisco" 516 [pap] Passwords don't match 517 ++[pap] returns reject 518 Failed to authenticate the user. 519 WARNING: Unprintable characters in the password. Double-check the shared secret on the server and the NAS! 520 Using Post-Auth-Type Reject 521 +- entering group REJECT {...} 522 [attr_filter.access_reject] expand: %{User-Name} -> 0873000001 523 attr_filter: Matched entry DEFAULT at line 11 524 ++[attr_filter.access_reject] returns updated 525 Delaying reject of request 9 for 1 seconds 526 Going to the next request 527 Waking up in 0.9 seconds. 528 Sending delayed reject for request 9 529 Sending Access-Reject of id 206 to 172.26.0.8 port 1645 530 h323-return-code == "h323-return-code=0" 531 Waking up in 4.9 seconds. 532 Cleaning up request 9 ID 206 with timestamp +173 533 Ready to process requests. 534 rad_recv: Accounting-Request packet from host 172.26.0.8 port 1645, id=207, length=498 535 User-Name = "0873000001" 536 NAS-IP-Address = 0.0.0.0 537 Service-Type = Dialout-Framed-User 538 Class = 0x436c6173733d333030 539 Cisco-AVPair = "h323-incoming-conf-id=e727dc68 ca4d11dd 812dd127 98296413 " 540 h323-conf-id = "h323-conf-id=e727dc68 ca4d11dd 812dd127 98296413 " 541 h323-setup-time = "h323-setup-time= 2:13:54.000 UTC Tue Dec 16 2008" 542 h323-connect-time = "h323-connect-time= 2:13:05.000 UTC Tue Dec 16 2008" 543 h323-call-type = "h323-call-type=VOIP" 544 h323-disconnect-time = "h323-disconnect-time= 2:14:08.000 UTC Tue Dec 16 2008" 545 h323-disconnect-cause = "h323-disconnect-cause=10" 546 Called-Station-Id = "0873001163" 547 Calling-Station-Id = "0873000001" 548 Acct-Status-Type = Stop 549 Acct-Session-Id = "e727dc68 ca4d11dd 812dd127 98296413 " 550 Acct-Authentic = RADIUS 551 Event-Timestamp = "Dec 16 2008 09:14:08 ICT" 552 NAS-Port-Type = Ethernet 553 +- entering group preacct {...} 554 ++[preprocess] returns ok 555 [acct_unique] Hashing 'NAS-Port-Type = Ethernet,Client-IP-Address = 172.26.0.8,NAS-IP-Address = 0.0.0.0,Acct-Session-Id = "e727dc68 ca4d11dd 812dd127 98296413 ",User-Name = "0873000001"' 556 [acct_unique] Acct-Unique-Session-ID = "bf9a06b98413c5d2". 557 ++[acct_unique] returns ok 558 [suffix] No '@' in User-Name = "0873000001", looking up realm NULL 559 [suffix] No such realm "NULL" 560 ++[suffix] returns noop 561 [files] acct_users: Matched entry DEFAULT at line 22 562 [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details 563 [files] expand: %{Stripped-User-Name:-%{User-Name}} -> 0873000001 564 ++[files] returns ok 565 +- entering group accounting {...} 566 [detail] expand: /var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/radius/radacct/172.26.0.8/detail-20081216 567 [detail] /var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/radius/radacct/172.26.0.8/detail-20081216 568 [detail] expand: %t -> Tue Dec 16 09:14:09 2008 569 ++[detail] returns ok 570 ++[unix] returns noop 571 [radutmp] expand: /var/log/radius/radutmp -> /var/log/radius/radutmp 572 [radutmp] expand: %{User-Name} -> 0873000001 573 rlm_radutmp: No NAS-Port seen. Cannot do anything. 574 rlm_radumtp: WARNING: checkrad will probably not work! 575 ++[radutmp] returns noop 576 [pgsql-voip] expand: %{User-Name} -> 0873000001 577 [pgsql-voip] sql_set_user escaped user --> '0873000001' 578 [pgsql-voip] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details 579 [pgsql-voip] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details 580 [pgsql-voip] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details 581 [pgsql-voip] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details 586 rlm_sql_postgresql: Status: PGRES_COMMAND_OK 587 rlm_sql_postgresql: query affected rows = 1 588 rlm_sql (pgsql-voip): Released sql socket id: 7 589 ++[pgsql-voip] returns ok 590 Sending Accounting-Response of id 207 to 172.26.0.8 port 1645 591 User-Name := "0873000001" 592 h323-return-code := "h323-return-code=0" 593 h323-billing-model := "h323-billing-model=2" 594 Finished request 10. 595 Cleaning up request 10 ID 207 with timestamp +188 596 Going to the next request 597 Ready to process requests.
at the line 529 + 530, i should to send back to NAS server with the Acces Reject with attribute h323-return-code == "h323-return-code=2" not 0
..
520 Using Post-Auth-Type Reject 521 +- entering group REJECT {...} 522 [attr_filter.access_reject] expand: %{User-Name} -> 0873000001 523 attr_filter: Matched entry DEFAULT at line 11 524 ++[attr_filter.access_reject] returns updated 525 Delaying reject of request 9 for 1 seconds 526 Going to the next request 527 Waking up in 0.9 seconds. 528 Sending delayed reject for request 9 529 Sending Access-Reject of id 206 to 172.26.0.8 port 1645 530 h323-return-code == "h323-return-code=0"
Use unlang in Post-Auth-Type REJECT to change it. Ivan Kalik Kalik Informatika ISP
participants (2)
-
Do Nguyen Ha -
tnt＠kalik.net