Accounting requests and LDAP relation
Amr el-Saeed
amr.elsaeed at tedata.net
Wed Oct 24 12:37:33 CEST 2007
i just noticed that this happens in the Interim-Update packet only
not the Start or the Stop !!
Alan DeKok wrote:
> Amr el-Saeed wrote:
>
>> Is there any relation between the accounting requests and the LDAP, in
>> case i'm using LDAP for authentication and MySql for accounting.
>>
>
> No.
>
>
>> Now i have many accounting requests and my DB machine is loaded , but
>> what i can't understand is why my LDAP machine is loaded too.
>> i make a debug on the RADIUS and found that when handling the accounting
>> request the RADIUS contacts the sql and ldap to check GroupMember,
>>
>
> It only does that if you configured the server to look for LDAP groups
> as part of your local policy. i.e. "LDAP-Group == ...".
>
>
>> in
>> sql.conf i commented the group member query and nothing happens against
>> the MySql , but still happens against the LDAP .
>>
>
> If you want to use LDAP groups, then understand that doing so will
> involve using the LDAP server. If you don't want to use LDAP groups,
> then remove that configuration from your system.
>
> The default configuration does NOT do LDAP group matching on
> accounting requests. So it's definitely something you added locally to
> your system.
>
> Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
More information about the Freeradius-Users
mailing list