How to implement Disconnect Request on Freeradius.
Hi, Could some body help me to know whether Radius disconnect and Ack messages are supported in freeradius as defined in RFC 2822 ? If it's supported how can i implement it on my freeradius ? Thanks, piero
Piero Santi wrote: http://wiki.freeradius.org/DM
Could some body help me to know whether Radius disconnect and Ack messages are supported in freeradius as defined in RFC 2822 ? If it's supported how can i implement it on my freeradius ?
-- With best regards, Evgeniy Kozhuhovskiy, Leader of Services team, Minsk State Phony Network, RUE Beltelecom.
Hi Evgeniy, so are you saying i have to use radclient ? Putting it in a shell script and executing it when i need ? There is another way to implement the Disconnect Request ? Thanks, Piero 2008/10/7 Evgeniy Kozhuhovskiy <ugenk@mgts.by>
Piero Santi wrote:
Could some body help me to know whether Radius disconnect and Ack messages are supported in freeradius as defined in RFC 2822 ? If it's supported how can i implement it on my freeradius ?
-- With best regards, Evgeniy Kozhuhovskiy, Leader of Services team, Minsk State Phony Network, RUE Beltelecom. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Piero,
so are you saying i have to use radclient ? Putting it in a shell script and executing it when i need ?
Yes
There is another way to implement the Disconnect Request ?
The standard 802.1X MIB supports forced re-authentication. There is no advantage to using a DM over SNMP in a local environment. The FreeRADIUS server itself cannot send Disconnect or CoA messages. Regards Arran - -- Arran Cudbard-Bell (A.Cudbard-Bell@sussex.ac.uk), Authentication, Authorisation and Accounting Officer, Infrastructure Services (IT Services), E1-1-08, Engineering 1, University Of Sussex, Brighton, BN1 9QT DDI+FAX: +44 1273 873900 | INT: 3900 GPG: 86FF A285 1AA1 EE40 D228 7C2E 71A9 25BB 1E68 54A2 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkjrXNMACgkQcaklux5oVKISsQCfcQUo4CAd++O+H2W6HsqqaS3z /REAn3OAXDQnnncAfM+tz38KqT6UjpSq =TFkO -----END PGP SIGNATURE-----
OK Thanks a lot! piero 2008/10/7 Arran Cudbard-Bell <A.Cudbard-Bell@sussex.ac.uk>:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hi Piero,
so are you saying i have to use radclient ? Putting it in a shell script and executing it when i need ?
Yes
There is another way to implement the Disconnect Request ?
The standard 802.1X MIB supports forced re-authentication. There is no advantage to using a DM over SNMP in a local environment. The FreeRADIUS server itself cannot send Disconnect or CoA messages.
Regards Arran
- -- Arran Cudbard-Bell (A.Cudbard-Bell@sussex.ac.uk), Authentication, Authorisation and Accounting Officer, Infrastructure Services (IT Services), E1-1-08, Engineering 1, University Of Sussex, Brighton, BN1 9QT DDI+FAX: +44 1273 873900 | INT: 3900 GPG: 86FF A285 1AA1 EE40 D228 7C2E 71A9 25BB 1E68 54A2 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEARECAAYFAkjrXNMACgkQcaklux5oVKISsQCfcQUo4CAd++O+H2W6HsqqaS3z /REAn3OAXDQnnncAfM+tz38KqT6UjpSq =TFkO -----END PGP SIGNATURE----- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Piero Santi wrote:
Hi Evgeniy,
so are you saying i have to use radclient ? Putting it in a shell script and executing it when i need ?
There is another way to implement the Disconnect Request ?
Yes. Write patch to freeradius and send it to Alan. Btw, how do you want to use them from radius? -- With best regards, Evgeniy Kozhuhovskiy, Leader of Services team, Minsk State Phony Network, RUE Beltelecom.
Hi, the idea is to use radius + jradius and jradius, in some situations, should send a Disconnect Request to the NAS IP. This is the idea....but i have to talk with other developer guys to understand how this system has to work. Thanks, Piero 2008/10/7 Evgeniy Kozhuhovskiy <ugenk@mgts.by>:
Piero Santi wrote:
Hi Evgeniy,
so are you saying i have to use radclient ? Putting it in a shell script and executing it when i need ?
There is another way to implement the Disconnect Request ?
Yes. Write patch to freeradius and send it to Alan.
Btw, how do you want to use them from radius?
-- With best regards, Evgeniy Kozhuhovskiy, Leader of Services team, Minsk State Phony Network, RUE Beltelecom. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Arran Cudbard-Bell -
Evgeniy Kozhuhovskiy -
Piero Santi