Accounting requests and LDAP relation

Amr el-Saeed amr.elsaeed at tedata.net
Wed Oct 24 12:40:10 CEST 2007


can i just drop the Interim-Update packet  from the RADIUS server  ??

Amr el-Saeed wrote:
> i just noticed that this happens in the Interim-Update  packet  only
> not the Start or the Stop !!
>
> Alan DeKok wrote:
>> Amr el-Saeed wrote:
>>  
>>> Is there any relation between the accounting requests and the LDAP, in
>>> case i'm using LDAP for authentication and MySql for accounting.
>>>     
>>
>>   No.
>>
>>  
>>> Now i have many accounting requests and my DB machine is loaded , but
>>> what i can't understand is why my LDAP machine is loaded too.
>>> i make a debug on the RADIUS and found that when handling the 
>>> accounting
>>> request the RADIUS contacts the sql and ldap to check GroupMember,
>>>     
>>
>>   It only does that if you configured the server to look for LDAP groups
>> as part of your local policy.  i.e. "LDAP-Group == ...".
>>
>>  
>>> in
>>> sql.conf i commented the group member query and nothing happens against
>>> the MySql , but still happens against the LDAP .
>>>     
>>
>>   If you want to use LDAP groups, then understand that doing so will
>> involve using the LDAP server.  If you don't want to use LDAP groups,
>> then remove that configuration from your system.
>>
>>   The default configuration does NOT do LDAP group matching on
>> accounting requests.  So it's definitely something you added locally to
>> your system.
>>
>>   Alan DeKok.
>>
>>
>> -
>> List info/subscribe/unsubscribe? See 
>> http://www.freeradius.org/list/users.html
>>   
> -
> List info/subscribe/unsubscribe? See 
> http://www.freeradius.org/list/users.html



More information about the Freeradius-Users mailing list