Accounting for nonexistent users / NAS ?

[Fajar A. Nugraha]

On Wed, Feb 15, 2012 at 2:47 PM,  <justin76 at mac.com> wrote:
> Any suggestions?

If you didn't get any response, it's usually either:
(1) the answer was already given, OR
(2) your question was not clear, or you're asking something that
doesn't make sense, OR
(3) you were given sugesstions, but choose to ignore it

> On Feb 14, 2012, at 3:47 PM, justin76 at mac.com wrote:
>
> Can this be achived for only accounting start requests? So the check would be only when a new accounting session starts, ongoing sessions shouldn't be checked.

Quoting Phil's mail:
"
Freeradius can perform arbitrary processing, to ignore or accept
packets. You need to:

 1. Write down a policy showing which requests you want to permit,
based on which attributes

 2. Translate that policy into a FreeRADIUS config. See the "man
unlang" page, and doc/* for info on all this.
"

As long as you can defince the policy, the rest should be easy. If you
want to filter accounting start only, look at the attribute
Acct-Status-Type (see dictionary.rfc2866).

IMHO it would be useless though. If an acct-stop arrive without any
previous record, FR by default will just insert a new record to
radacct using whatever limited info available on that acct-stop
packet. You CAN change this behavior though. Again, the key point is
whether you're able to define a clear policy or not.

-- 
Fajar