racct and radpostauth

Alan DeKok aland at deployingradius.com
Fri Sep 9 10:51:09 CEST 2011


andreapepa wrote:
> Ok, but that field is not present in radpostauth too...and i mean
> ...correlate between tables

  As Arran said, you can't.  This is RADIUS.  It's not perfect.

>>  How do you know?
> 
> doing the tests with jradius i've noticed that if you send an auth + start
> request without a stop you can create this situation, would be the case when
> the nas reboot  or power down  in the middle of the auth phase, and so you
> have this kind of entry in DB.

  I understand that.  What I meant was how does the RADIUS server know
when a particular user is not online?

  The answer is "It doesn't".

> Yes  reject auth are not stored but  replies are, if configured to log them,
> would be helpful to modify the postauth query to insert the "unique session
> ID" in  a new radpostauth field?

  This is RADIUS.  It can't be done in any reliable way.

> Finally.. i also can check fro time to time the packets or byte fields to
> see if the sessios is still alive...but this metod would not be better than
> matching with replies in radpostauth , ...i believe.

  Ask the NAS is the session is still alive.

  This is RADIUS.  The RADIUS server has no idea what the user session
is doing.

  Alan DeKok.




More information about the Freeradius-Users mailing list