rlm_sqlcounter and something else than Session-Timeout

Alan DeKok aland at ox.org
Tue Dec 20 19:53:10 CET 2005


"Seferovic Edvin" <edvin.seferovic at kolp.at> wrote:
> I do NOT want to limit or change the limit during a session. I just want to
> limit it for a session

  As I was trying to say that in general, you CANNOT do this.  You can
check if they're over the limit at the START of a session.  The NAS
will *not* check the limit during a session, and the server can't
check the limit during a session.

  So if they're under the limit at the start of the session, they can
go over during the session, and no one will notice.  This has NOTHING
to do with changing the limits during a session.

> 3. freeradius returns Session-Octets-Limit with the value from sqlcounter
> which is the actual limitation.

  If the NAS supports this, it may work.  But 99.9999% of the NASes do
NOT support this.  It's not a standard, and it's not a common vendor
extension to RADIUS.

> Alan, I think you are far more better programmer then I am. It shouldn't be
> a big trouble to allow another config parameter for sqlcounter. This one
> could be named "Reply-Attribute" and people could use to enter
> "Session-Timeout" or "Session-Octets-Limit" depending on their need and
> usage of freeradius.

  I can't test that, sorry.  I'd rather see a patch that works.

  Alan DeKok.




More information about the Freeradius-Users mailing list