freeradius+openvpn disconnect user from radius

Azfar Hashmi azfar.hashmi at cloudways.com
Thu Jan 5 07:17:19 CET 2012


I am gonna try it now.

On 1/4/2012 5:49 PM, Alexandre Chapellon wrote:
> pptp does it very well (at least poptop does). Never tried with L2TP
> itself but I know ppp sessions inside L2TP tunnels works as
> expected... but that inly pppd works ok with session-timeout.
>
> Regards.
>
> Le 04/01/2012 12:19, Azfar Hashmi a écrit :
>> One more related question. I have to test this with pptp and lt2p also,
>> do they support it?
>>
>> On 1/4/2012 4:14 PM, Azfar Hashmi wrote:
>>> Hi Alexandre,
>>>
>>> Thanks for sharing your experience.
>>>
>>> On 1/4/2012 4:02 PM, Alexandre Chapellon wrote:
>>>> I tried to setup exactly the same things a while ago using the
>>>> radiusplugin for openvpn.
>>>> It just don't work! Looking at the code of the radiusplugin I could
>>>> not find anything that handle Sessiontimeout attribute (I didn't tried
>>>> with Acc-Session-Timeout but didn't see anything either).
>>>> Even if You try to ack the plugin (which look quite simple), I'm not
>>>> sure openvpn have anymecanism that would allow it to termitate a
>>>> connection after a specified duration (except monitoring connecting
>>>> duration with the telent interface.... a real pain).
>>>> I asked on the mailing list of radiusplugin which is even lower
>>>> traffic and gave up. Maybe asking about openvpn being able to
>>>> disconnect based on time  could be a question for start a thread in
>>>> openvpn general ML.
>>>>
>>>> regards.
>>>>
>>>> P.S: I'd be glad to hear about if you succeed in doing that! ;)
>>>>
>>>> Le 04/01/2012 10:41, Azfar Hashmi a écrit :
>>>>> I did but the list has very low activity. Only few posts in numerous
>>>>> days there.
>>>>>
>>>>> On 1/4/2012 1:32 PM, Fajar A. Nugraha wrote:
>>>>>> On Wed, Jan 4, 2012 at 3:18 PM, Azfar
>>>>>> Hashmi<azfar.hashmi at cloudways.com>   wrote:
>>>>>>> Anyone confirm me that openvpn support
>>>>>>> session-timout/acct-session-timeout, i want radius to tell my
>>>>>>> NAS to
>>>>>>> disconnect users if they reached their expiration. Currently its
>>>>>>> not
>>>>>>> working.
>>>>>> Did you ask in openvpn list? It should be a more suitable place for
>>>>>> this question, and AFAIK the answer is no.
>>>>>>
>>>>> -
>>>>> List info/subscribe/unsubscribe? See
>>>>> http://www.freeradius.org/list/users.html
>>> -
>>> List info/subscribe/unsubscribe? See
>>> http://www.freeradius.org/list/users.html
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>




More information about the Freeradius-Users mailing list