Accounting requests and LDAP relation
amr.elsaeed at tedata.net
Wed Oct 24 12:40:10 CEST 2007
can i just drop the Interim-Update packet from the RADIUS server ??
Amr el-Saeed wrote:
> i just noticed that this happens in the Interim-Update packet only
> not the Start or the Stop !!
> Alan DeKok wrote:
>> Amr el-Saeed wrote:
>>> Is there any relation between the accounting requests and the LDAP, in
>>> case i'm using LDAP for authentication and MySql for accounting.
>>> Now i have many accounting requests and my DB machine is loaded , but
>>> what i can't understand is why my LDAP machine is loaded too.
>>> i make a debug on the RADIUS and found that when handling the
>>> request the RADIUS contacts the sql and ldap to check GroupMember,
>> It only does that if you configured the server to look for LDAP groups
>> as part of your local policy. i.e. "LDAP-Group == ...".
>>> sql.conf i commented the group member query and nothing happens against
>>> the MySql , but still happens against the LDAP .
>> If you want to use LDAP groups, then understand that doing so will
>> involve using the LDAP server. If you don't want to use LDAP groups,
>> then remove that configuration from your system.
>> The default configuration does NOT do LDAP group matching on
>> accounting requests. So it's definitely something you added locally to
>> your system.
>> Alan DeKok.
>> List info/subscribe/unsubscribe? See
> List info/subscribe/unsubscribe? See
More information about the Freeradius-Users