acct_postgresql+auth_ldap
Hi all, I d like to know if someone has already tried to do the accounting (only accounting) thing with postgres and authentication with OpenLdap? There is nothing on wiki ... I am wondering if I have to write some scripts to save the user id, his connection duration ect ...in postgres database.I want to implement the following situation: I don't care what my ldap_server ll return when a user sends a access request packet, but I want to save the name, passwd, the connection duration(so at this time I initialize the connection time which will be incremented until the disconnection time ). Your opinions will be very useful for me. -- JJohnny R Phone: +212663682554, +212533158575 National School of Applied Sciences ZIP 1818 TANGIER 90000 ---------Morocco ---------------
10/09/2009 01:58 PM, José Johnny RANDRIAMAMPIONONA::
Hi all, I d like to know if someone has already tried to do the accounting (only accounting) thing with postgres and authentication with OpenLdap?
I am going to try that. Not yet, but I will. and I think it's globally about: auth { ldap } accouting { sql } Authenticating and Accounting are independant. For example, using "radclient", I can directly "account" without "auth"-ing. It's up to the NAS (RADIUS client) to send the User-Name to the RADIUS when Start/Stopping accounting, so that you _always_ know what User-Name is concerned by the accounting packet. PS: that is just my understanding of the thing, I really expect people to kindly correct if I am wrong. -- Architecte Informatique chez Blueline/Gulfsat: Administration Systeme, Recherche & Developpement +261 34 29 155 34
I am wondering if I have to write some scripts to save the user id, his connection duration ect ...in postgres database.
No. Just configure postgre in sql.conf and uncoment sql entries in radiusd.conf and accounting section of default virtual server. Schema for the database is provided.
I want to implement the following situation: I don't care what my ldap_server ll return when a user sends a access request packet, but I want to save the name, passwd,
That goes into radacct by default.
the connection duration(so at this time I initialize the connection time which will be incremented until the disconnection time ).
For that you will need to enable accounting updates on your NAS. If your NAS supports Acct-Interim-Interval you can send it in the Access-Accept. Ivan Kalik Kalik Informatika ISP
Thank u guys! 2009/10/9 Ivan Kalik <tnt@kalik.net>
I am wondering if I have to write some scripts to save the user id, his connection duration ect ...in postgres database.
No. Just configure postgre in sql.conf and uncoment sql entries in radiusd.conf and accounting section of default virtual server. Schema for the database is provided.
I want to implement the following situation: I don't care what my ldap_server ll return when a user sends a access request packet, but I want to save the name, passwd,
That goes into radacct by default.
the connection duration(so at this time I initialize the connection time which will be incremented until the disconnection time ).
For that you will need to enable accounting updates on your NAS. If your NAS supports Acct-Interim-Interval you can send it in the Access-Accept.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- JJohnny RANDRIAMAMPIONONA Phone: +212663682554, +212533158575 National School of Applied Sciences ZIP 1818 TANGIER 90000 ---------Morocco ---------------
10/09/2009 04:05 PM, José Johnny RANDRIAMAMPIONONA::
Thank u guys!
Please keep us in touch. and if you kept some history of what you've done, I am interested in. -- Architecte Informatique chez Blueline/Gulfsat: Administration Systeme, Recherche & Developpement +261 34 29 155 34
understood 2009/10/13 Rakotomandimby Mihamina <mihamina@gulfsat.mg>
10/09/2009 04:05 PM, José Johnny RANDRIAMAMPIONONA::
Thank u guys!
Please keep us in touch. and if you kept some history of what you've done, I am interested in.
-- Architecte Informatique chez Blueline/Gulfsat: Administration Systeme, Recherche & Developpement +261 34 29 155 34 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- JJohnny RANDRIAMAMPIONONA Phone: +212663682554, +212533158575 National School of Applied Sciences ZIP 1818 TANGIER 90000 ---------Morocco ---------------
José Johnny RANDRIAMAMPIONONA wrote:
I d like to know if someone has already tried to do the accounting (only accounting) thing with postgres and authentication with OpenLdap?
Yes. Configure SQL and LDPA. Uncomment "ldap" in authorize && authenticate. Uncomment "sql" in accounting.
There is nothing on wiki ...
How about the comments in theconfig file? I am wondering if I have to write some scripts to
save the user id, his connection duration ect ...in postgres database.
Yes... see the sample queries and schema. This *is* documented.
I want to implement the following situation: I don't care what my ldap_server ll return when a user sends a access request packet, but I want to save the name, passwd, the connection duration(so at this time I initialize the connection time which will be incremented until the disconnection time ).
I'm not sure what this means. Alan DeKok.
participants (4)
-
Alan DeKok -
Ivan Kalik -
José Johnny RANDRIAMAMPIONONA -
Rakotomandimby Mihamina