FR Developer for hire: Adding Accounting support to the rlm_ldap module?
Alister Winfield
alister at ticklers.org
Thu May 3 18:10:11 CEST 2012
Writing accounting to LDAP is nasty I understand why it sounds a good idea. But most LDAP implementations are v-slow on write (hundreds to thousands per second) compared to read (tens of thousands to hundreds of thousands per second).
Alister
On 3 May 2012, at 10:47, Alan DeKok wrote:
> Peter Lambrechtsen wrote:
>> I was wanting to know if someone would be interested in being paid to
>> add "accounting" support into the RLM_LDAP module.
>
> Just a note: I've been re-writing the LDAP module. The code is *much*
> better. I should be able to make it public in a week or two.
>
> Adding accounting support to the existing module is something I'd
> avoid. The code has large amounts of duplication (e.g. eDir support).
> Adding more code to that mess is a big problem.
>
>> For this I am wanting when calling the ldap module during the
>> "accounting" section so it can update/delete records in the LDAP
>> directory based on the Acct-Status-Type and using a new field type into
>> the ldap.attrmap. Ideally I would be looking for when you get an
>> accounting Start it adds or updates an attribute, for an Interim-Update
>> also add/update and for a Stop then removes the attribute.
>
> That's probably not too hard.
>
>> I've written this in Perl and it works reasonably well but it would be
>> ideal to have this working inside ldap as then the custom perl code I
>> wrote wouldn't be needed. Below is the perl i've written.
>
> If it works in Perl, that's a good start. I'm not sure adding it to
> the LDAP module would make much difference in speed or flexibility.
>
>> To get someone who is familiar with the freeradius code base and can
>> write code which would be acceptable to be committed back into the
>> mainline FR codebase as this should be code contributed back to the
>> community.
>
> That's always nice to hear. :)
>
>> How much development effort would be required (x days?) and who would be
>> interested in being paid (and how much) to do the work?
>
> If you can wait a bit, the new code base should make this work MUCH
> easier to do.
>
> Alan DeKok.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
More information about the Freeradius-Devel
mailing list