MPD : mpd-drop-user

cktan cktan at ocesb.com.my
Tue Dec 1 05:58:10 CET 2009


Dear Ivan,

I read some of the information saying it is possible to insert attribute 
in Accounting Response Packet but RFC said almost no attribute will 
inject into response packet. There is also user ( @ year 2005) change 
some coding in rpm_sql to do query during the accounting update as well 
to check the termination status and response back to NAS for session 
termination.

For MPD, as long as it received a radius reply and noted mpd-drop-user 
attribute the value is non-zero, it will just disconnect the user 
session. Any better suggestion from you?

Thanks in advance.

cktan wrote:
> Ok, I noted there are ext-accounting script support in MDP and it 
> should do some checking against mpd-drop-user information and action 
> taken accordingly. trying to locate the sample of script now.
>
> CK
> tnt at kalik.net wrote:
>> If what you have wrote is correct (and it does make sense) - to
>> Accounting-Response packet.
>>
>> Ivan Kalik
>>
>>   
>>> This is what I though as well. However, I read somewhere MPD was support
>>> this option but no details on where to put this attribute in.
>>>
>>> Regards
>>>
>>> tnt at kalik.net wrote:
>>>     
>>>>> Is anyone try this attribute /*mpd-drop-user*/ in freeradius with
>>>>> Mysql?
>>>>> MPD support this attribute to check the status of account during it
>>>>> update the accounting and if the value for this attribute become
>>>>> non-zero, it will disconnect the session for the user.
>>>>>
>>>>> We use MPD to setup a PPPoE server with freeradius to provide
>>>>> authentication to users and we have come across to drop the session if
>>>>> the user's account suspended but we have no luck to make it work.
>>>>> Currently we try to put this attribute in radreply table and it doesn't
>>>>> work for us. Looking for your kind information in this matter.
>>>>>
>>>>>         
>>>> Read what you wrote in the first paragraph. Attribute works when sent in
>>>> accounting reply to update packet. radreply table is used for
>>>> authentication not accounting. You will have to figure out a way of
>>>> adding
>>>> this to the accounting reply using unlang or perl (if conditions are
>>>> more
>>>> complicated).
>>>>
>>>> Ivan Kalik
>>>>
>>>> -
>>>> List info/subscribe/unsubscribe? See
>>>> http://www.freeradius.org/list/users.html
>>>>
>>>>
>>>>       
>>> --
>>> This message has been scanned for viruses and
>>> dangerous content by MailScanner, and is
>>> believed to be clean.
>>>
>>> -
>>> List info/subscribe/unsubscribe? See
>>> http://www.freeradius.org/list/users.html
>>>     
>>
>>
>> -
>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>>
>>   
>
> -- 
> This message has been scanned for viruses and
> dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is
> believed to be clean.
> ------------------------------------------------------------------------
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20091201/1d9506dd/attachment.html>


More information about the Freeradius-Users mailing list