rlm_sqlcounter and something else than Session-Timeout

Seferovic Edvin edvin.seferovic at kolp.at
Tue Dec 20 22:40:10 CET 2005


OK, now I've understood that it's a NAS "problem". ( Maybe my bad knowledge
of english language is guilty for that - sorry ). 

Lewis suggested that I sponsor your project... well I would if I really
needed this feature so badly ;) and since I am just only a student, I might
try hacking the freeradius code.

In my scenario, I use Poptop and RP-PPPoE server as NAS ( by the way ). 

Alan should I write a patch for 1.0.5 or should I wait for 1.1.0, or just
take the daily from CVS?

Regards,

Edvin Seferovic

-----Original Message-----
From: freeradius-users-bounces at lists.freeradius.org
[mailto:freeradius-users-bounces at lists.freeradius.org] On Behalf Of Alan
DeKok
Sent: Dienstag, 20. Dezember 2005 19:53
To: freeradius-users at lists.freeradius.org
Subject: Re: rlm_sqlcounter and something else than Session-Timeout 

"Seferovic Edvin" <edvin.seferovic at kolp.at> wrote:
> I do NOT want to limit or change the limit during a session. I just want
to
> limit it for a session

  As I was trying to say that in general, you CANNOT do this.  You can
check if they're over the limit at the START of a session.  The NAS
will *not* check the limit during a session, and the server can't
check the limit during a session.

  So if they're under the limit at the start of the session, they can
go over during the session, and no one will notice.  This has NOTHING
to do with changing the limits during a session.

> 3. freeradius returns Session-Octets-Limit with the value from sqlcounter
> which is the actual limitation.

  If the NAS supports this, it may work.  But 99.9999% of the NASes do
NOT support this.  It's not a standard, and it's not a common vendor
extension to RADIUS.

> Alan, I think you are far more better programmer then I am. It shouldn't
be
> a big trouble to allow another config parameter for sqlcounter. This one
> could be named "Reply-Attribute" and people could use to enter
> "Session-Timeout" or "Session-Octets-Limit" depending on their need and
> usage of freeradius.

  I can't test that, sorry.  I'd rather see a patch that works.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html




More information about the Freeradius-Users mailing list