Sending Accounting Response

Padam J Singh padam.singh at inventum.cc
Sat Dec 13 09:58:17 CET 2008


Hello Alan,

>From the RFC 2866:

4.2.  Accounting-Response

    0                   1                   2                   3
    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |     Code      |  Identifier   |            Length             |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |                                                               |
   |                     Response Authenticator                    |
   |                                                               |
   |                                                               |
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |  Attributes ...
   +-+-+-+-+-+-+-+-+-+-+-+-+-

The RFC doesn't categorically say that an accounting response packet SHOULD NOT have attributes.

The NAS is an application I have written - so I will be able to parse attributes in an accounting response.

If the standard postgres module cannot be used to send back attributes in an accounting-response packet, 
can I do the same using any other module like JRadius? I have gone through the rlm_jradius source code, 
and it looks like it doesn't differentiate between accounting and authorization responses when reading value pairs.

Thanks,
Padam









Alan DeKok wrote:
> Padam J Singh wrote:
>   
>> According to the RFC 2866, it is possible to send back attributes to an
>> accounting update packet sent from a NAS.
>>     
>
>   *Please* use the correct terminology.  It makes it easier for us to
> understand your question.
>
>   If I read what I *think* you mean, then no, RFC 2866 does not allow
> attributes in an Accounting-Response.
>
>   
>> What I have done is this: The authorization and authentication queries
>> are basically calls to a stored procedure in postgres that returns a set
>> of table type which contains the attribute, operator and value.
>> I can write a stored procedure to return a set of attributes to send
>> back in an accounting start/update/stop, but all the queries given as
>> examples in the default dialup.conf are update queries that do not
>> return any attribute.
>>
>> How do I configure the postgres module to return the attributes to the NAS?
>>     
>
>   You don't.
>
>   Please explain why you think this is necessary.  Also be aware that
> any attributes you send in an Accounting-Response will be ignored by
> *every* NAS that anyone has ever made.
>
>   Alan DeKok.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>   

-- 
PGP Id 9EED2E09




More information about the Freeradius-Users mailing list