Radius copy accounting
BELLIERE Eric
Eric.BELLIERE at mail.mobistar.be
Wed Aug 8 10:19:59 CEST 2012
Thanks but with sql I can send the attribute to Oracle DB without any
problem? So can you please help me with this unlang command to add? And
where?
In preacct section of my virtual sites?
Eric B.
-----Original Message-----
From:
freeradius-users-bounces+eric.belliere=mail.mobistar.be at lists.freeradius
.org
[mailto:freeradius-users-bounces+eric.belliere=mail.mobistar.be at lists.fr
eeradius.org] On Behalf Of freeradius-users-request at lists.freeradius.org
Sent: Monday 6 August 2012 15:34
To: freeradius-users at lists.freeradius.org
Subject: Freeradius-Users Digest, Vol 88, Issue 24
Send Freeradius-Users mailing list submissions to
freeradius-users at lists.freeradius.org
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.freeradius.org/mailman/listinfo/freeradius-users
or, via email, send a message with subject or body 'help' to
freeradius-users-request at lists.freeradius.org
You can reach the person managing the list at
freeradius-users-owner at lists.freeradius.org
When replying, please edit your Subject line so it is more specific than
"Re: Contents of Freeradius-Users digest..."
Today's Topics:
1. Re: Radius copy accounting (Matthew Newton)
2. Re: Radius copy accounting (alan buxey)
3. Re: RES: FR 3 Event-Timestamp wrong format and Mysql
FROM_UNIXTIME error (Alan DeKok)
4. Duplicate Radius Accounting (Christopher Manigan)
5. Re: Duplicate Radius Accounting (Alan DeKok)
6. Freeradius Accounting (Robert Souter)
----------------------------------------------------------------------
Message: 1
Date: Mon, 6 Aug 2012 13:39:06 +0100
From: Matthew Newton <mcn4 at leicester.ac.uk>
To: FreeRadius users mailing list
<freeradius-users at lists.freeradius.org>
Subject: Re: Radius copy accounting
Message-ID: <20120806123906.GB15604 at rootmail.cc.le.ac.uk>
Content-Type: text/plain; charset=us-ascii
On Mon, Aug 06, 2012 at 02:30:14PM +0200, BELLIERE Eric wrote:
> As you can see this schema is working well except that the attribute
REALM is not include in the packet?
>
> We can see it in the detail file but when FR proxy the packet this
attribute is missing?
Realm is an internal attribute (see dictionary.freeradius.internal) and
as such doesn't appear in any packets in transit.
Matthew
--
Matthew Newton, Ph.D. <mcn4 at le.ac.uk>
Systems Architect (UNIX and Networks), Network Services, I.T. Services,
University of Leicester, Leicester LE1 7RH, United Kingdom
For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>
------------------------------
Message: 2
Date: Mon, 6 Aug 2012 13:49:08 +0100
From: alan buxey <A.L.M.Buxey at lboro.ac.uk>
To: FreeRadius users mailing list
<freeradius-users at lists.freeradius.org>
Subject: Re: Radius copy accounting
Message-ID: <20120806124908.GA15665 at lboro.ac.uk>
Content-Type: text/plain; charset=us-ascii
Hi,
> As you can see this schema is working well except that the
attribute REALM
> is not include in the packet?
as already said this is an internal engine attribute. if you want this
to be exposed in other systems, you will need to use eg 'unlang' to
populate a suitable attribute with this value
alan
------------------------------
Message: 3
Date: Mon, 06 Aug 2012 14:59:34 +0200
From: Alan DeKok <aland at deployingradius.com>
To: FreeRadius users mailing list
<freeradius-users at lists.freeradius.org>
Subject: Re: RES: FR 3 Event-Timestamp wrong format and Mysql
FROM_UNIXTIME error
Message-ID: <501FBFB6.7080409 at deployingradius.com>
Content-Type: text/plain; charset=ISO-8859-1
lscrlstld wrote:
> '%{NAS-Port-Type}', FROM_UNIXTIME(%{Event-Timestamp}),
Well, that's wrong. That was fixed ~2 weeks ago. I also said it
should be %{integer:Event-Timestamp}
Please grab an updated copy of the dialup.conf file.
Alan DeKok.
------------------------------
Message: 4
Date: Mon, 6 Aug 2012 13:13:44 +0000
From: Christopher Manigan <cmanigan at towerstream.com>
To: "freeradius-users at lists.freeradius.org"
<freeradius-users at lists.freeradius.org>
Subject: Duplicate Radius Accounting
Message-ID:
<72D41B40EE32E749AE3AE3B7190AA7CE1E142B97 at MAIL01.corp.towerstream.com>
Content-Type: text/plain; charset="us-ascii"
In my logs I see many entries like the following:
Info: WARNING: Child is hung for request 51651 in component <core>
module <queue>.3
Error: Dropping request (2049 is too many): from client myhost.mysite
port 32869 - ID: 239
In the last ~10 hours, the status server reports the following for
accounting:
Responses 0
Duplicate 954442
Malformed 115045
Invalid 564029
Dropped 0
Unknown 0
Radius will hang and start to time out and eventually die. It looks
like the duplicate count gets extremely high very quickly. Could it be
the NAS that are pointing to it? Or could it be my radius configs
somehow causing this? I am not really sure how to prove it out or
troubleshoot. I can increase the max requests but I don't think that is
the right solution.
Chris
------------------------------
Message: 5
Date: Mon, 06 Aug 2012 15:19:52 +0200
From: Alan DeKok <aland at deployingradius.com>
To: FreeRadius users mailing list
<freeradius-users at lists.freeradius.org>
Subject: Re: Duplicate Radius Accounting
Message-ID: <501FC478.1000604 at deployingradius.com>
Content-Type: text/plain; charset=ISO-8859-1
Christopher Manigan wrote:
> In my logs I see many entries like the following:
>
> Info: WARNING: Child is hung for request 51651 in component <core>
> module <queue>.3
> Error: Dropping request (2049 is too many): from client myhost.mysite
> port 32869 - ID: 239
Something is blocking the server. This is usually a slow database.
> In the last ~10 hours, the status server reports the following for
accounting:
>
> Responses 0
> Duplicate 954442
> Malformed 115045
> Invalid 564029
That is *terrible*. Zero responses? It indicates a catastrophic
failure in the system.
And *malformed* packets? Something is sending NON RADIUS packets to
the RADIUS port. Go fix that.
And "invalid" packets? Something is sending non-accounting packets to
the accounting port.
> Dropped 0
> Unknown 0
>
> Radius will hang and start to time out and eventually die. It looks
like the duplicate count gets extremely high very quickly. Could it be
the NAS that are pointing to it? Or could it be my radius configs
somehow causing this? I am not really sure how to prove it out or
troubleshoot. I can increase the max requests but I don't think that is
the right solution.
Your RADIUS system is horribly slow, and isn't finishing any requests.
Go fix that. The default configuration *works*.
And your NAS is broken. Something is very, very, wrong in your
network. Find out what it is. Ensure that only RADIUS accounting
packets go to the RADIUS accounting port.
Alan DeKok.
------------------------------
Message: 6
Date: Mon, 6 Aug 2012 13:35:17 +0000
From: Robert Souter <robertsouter at highnet.com>
To: "freeradius-users at lists.freeradius.org"
<freeradius-users at lists.freeradius.org>
Subject: Freeradius Accounting
Message-ID:
<35997DFB4CC3444CB74F176D4FBEAFBCCF92FC at HIGHNETDC2.Highnet.local>
Content-Type: text/plain; charset="us-ascii"
Afternoon All
I apologies if I am sending detail the wrong way or the wrong format.
But a newbie to this and also new to working with freeradius so I do
apologies in advance if I have done something wrong.
My issue with freeradius is Accounting
The issue been I took over looking after the freeradius server when
someone left, and he dealt with it himself up to then.
What I am trying to figure out is that up to the day he left the server
was doing accounting in the following directory Var/log/radius/radacct
then below that was a folder for each server that was allowed to
authenticate in the /clients.conf/ file
I have checked the radius server and it is still using ports 1646 and
1645 have also check our cisco NAS router and it is pointing to our
radius server with the secret password, which I have checked and are the
same along with the same ports 1646 and 1645.
If you can help it would be much appreciated.
I am sorry if I have not put in the correct data but if you let me know
I will try and put it right and adhere to your rules.
Thanks very much for your assistance.
Kind Regards
Robert
Robert Souter
Network Engineer
Office:
0345 450 4502
Fax:
0345 450 4503
[Description:
C:\Users\roberts\AppData\Roaming\Microsoft\Signatures\signature
logo.jpg]
www.highnet.com<http://www.highnet.com> | connecting your business
[Description:
C:\Users\roberts\AppData\Roaming\Microsoft\Signatures\Twitter
Icon.jpg]<http://twitter.com/HighNetTelecoms> [Description:
C:\Users\roberts\AppData\Roaming\Microsoft\Signatures\LinkedIn Icon.jpg]
<http://www.linkedin.com/company/highnet> [Description:
C:\Users\roberts\AppData\Roaming\Microsoft\Signatures\Facebook Icon.jpg]
<http://www.facebook.com/pages/HighNet-Telecoms/151941874838133>
Please consider the environment before printing this e-mail. Why not
further your environmental commitments with HighNet's Green Telecoms?
Disclaimer: Any opinions expressed in this e-mail are those of the
individual and not necessarily the Company. This e-mail and any files
transmitted with it, including replies and forwarded copies (which may
contain alterations) subsequently transmitted from the Company, are
confidential and solely for the use of the intended recipient. If you
are not the intended recipient of this transmission, please be advised
that you have received it in error and that any use is strictly
prohibited. If you have received this e-mail in error please notify the
sender.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.freeradius.org/pipermail/freeradius-users/attachments/2012
0806/5984d69f/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 20063 bytes
Desc: image001.jpg
URL:
<http://lists.freeradius.org/pipermail/freeradius-users/attachments/2012
0806/5984d69f/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 1437 bytes
Desc: image003.jpg
URL:
<http://lists.freeradius.org/pipermail/freeradius-users/attachments/2012
0806/5984d69f/attachment-0001.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.jpg
Type: image/jpeg
Size: 1504 bytes
Desc: image005.jpg
URL:
<http://lists.freeradius.org/pipermail/freeradius-users/attachments/2012
0806/5984d69f/attachment-0002.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image007.jpg
Type: image/jpeg
Size: 1467 bytes
Desc: image007.jpg
URL:
<http://lists.freeradius.org/pipermail/freeradius-users/attachments/2012
0806/5984d69f/attachment-0003.jpg>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: radiusd -X debug..txt
URL:
<http://lists.freeradius.org/pipermail/freeradius-users/attachments/2012
0806/5984d69f/attachment.txt>
------------------------------
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
End of Freeradius-Users Digest, Vol 88, Issue 24
************************************************
*****DISCLAIMER*****
This electronic transmission (and any attached document) is intended
exclusively for the person or entity to whom it is addressed and may
contain confidential and/or privileged material.
Any disclosure, copying, distribution or other action based upon
the information by persons or entities other than the intended recipient
is prohibited. If you receive this message in error, please contact the
sender and delete the material from any and all computers.
Mobistar does not warrant a proper and complete transmission of this
information, nor does it accept liability for any delays.
*****END OF DISCLAIMER*****
More information about the Freeradius-Users
mailing list