acct-session-start attribute ?

Jeremy Ravel Jeremy.Ravel at etu.univ-savoie.fr
Thu May 28 16:51:19 CEST 2015


Hi guys, I am beginner in FR. 
I want to be able to delay the activation of the login. For example i can create an user monday, but i just want allow him to connect only from friday to logon on my network. 
I tried to use the attribute acct-session-start on the user, but when i use it one user, the user can never log. 
I get this from the log: 

Thu May 28 16:18:16 2015 : Info: Ready to process requests. 
rad_recv: Access-Request packet from host 127.0.0.1 port 39465, id=155, length=277 
ChilliSpot-Version = "1.3.0" 
User-Name = "day2" 
User-Password = "day2" 
Service-Type = Login-User 
Acct-Session-Id = "5567077800000003" 
Framed-IP-Address = 10.10.4.200 
NAS-Port-Type = Wireless-802.11 
NAS-Port = 3 
NAS-Port-Id = "00000003" 
Calling-Station-Id = "00-1B-77-16-34-1A" 
Called-Station-Id = "00-50-56-B2-BF-8D" 
NAS-IP-Address = 10.10.4.254 
NAS-Identifier = "vlan4" 
WISPr-Location-ID = "isocc=,cc=,ac=,network=Coova,Vlan4_ssid" 
WISPr-Location-Name = "Vlan_4" 
WISPr-Logoff-URL = " http://10.10.4.254:3990/logoff " 
Message-Authenticator = 0xee48deacd07a8f3d13df74480fa48198 
Thu May 28 16:19:09 2015 : Info: # Executing section authorize from file /etc/freeradius/sites-enabled/default 
Thu May 28 16:19:09 2015 : Info: +- entering group authorize {...} 
Thu May 28 16:19:09 2015 : Info: ++? if (!NAS-IP-Address) 
Thu May 28 16:19:09 2015 : Info: ? Evaluating !(NAS-IP-Address) -> FALSE 
Thu May 28 16:19:09 2015 : Info: ++? if (!NAS-IP-Address) -> FALSE 
Thu May 28 16:19:09 2015 : Info: ++[preprocess] returns ok 
Thu May 28 16:19:09 2015 : Info: ++[chap] returns noop 
Thu May 28 16:19:09 2015 : Info: ++[mschap] returns noop 
Thu May 28 16:19:09 2015 : Info: ++[digest] returns noop 
Thu May 28 16:19:09 2015 : Info: [suffix] No '@' in User-Name = "day2", looking up realm NULL 
Thu May 28 16:19:09 2015 : Info: [suffix] No such realm "NULL" 
Thu May 28 16:19:09 2015 : Info: ++[suffix] returns noop 
Thu May 28 16:19:09 2015 : Info: [eap] No EAP-Message, not doing EAP 
Thu May 28 16:19:09 2015 : Info: ++[eap] returns noop 
Thu May 28 16:19:09 2015 : Info: [sql] expand: %{User-Name} -> day2 
Thu May 28 16:19:09 2015 : Info: [sql] sql_set_user escaped user --> 'day2' 
Thu May 28 16:19:09 2015 : Debug: rlm_sql (sql): Reserving sql socket id: 3 
Thu May 28 16:19:09 2015 : Info: [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'day2' ORDER BY id 
Thu May 28 16:19:09 2015 : Info: [sql] expand: SELECT groupname FROM usergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM usergroup WHERE username = 'day2' ORDER BY priority 
Thu May 28 16:19:09 2015 : Info: [sql] expand: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'vlan_4' ORDER BY id 
Thu May 28 16:19:09 2015 : Debug: rlm_sql (sql): Released sql socket id: 3 
Thu May 28 16:19:09 2015 : Info: [sql] User day2 not found 
Thu May 28 16:19:09 2015 : Info: ++[sql] returns notfound 
Thu May 28 16:19:09 2015 : Debug: rlm_sqlcounter: Entering module authorize code 
Thu May 28 16:19:09 2015 : Debug: rlm_sqlcounter: Could not find Check item value pair 
Thu May 28 16:19:09 2015 : Info: ++[chillispot_max_bytes] returns noop 
Thu May 28 16:19:09 2015 : Debug: rlm_sqlcounter: Entering module authorize code 
Thu May 28 16:19:09 2015 : Debug: rlm_sqlcounter: Could not find Check item value pair 
Thu May 28 16:19:09 2015 : Info: ++[noresetcounter] returns noop 
Thu May 28 16:19:09 2015 : Debug: rlm_sqlcounter: Entering module authorize code 
Thu May 28 16:19:09 2015 : Debug: rlm_sqlcounter: Could not find Check item value pair 
Thu May 28 16:19:09 2015 : Info: ++[dailycounter] returns noop 
Thu May 28 16:19:09 2015 : Info: ++[expiration] returns noop 
Thu May 28 16:19:09 2015 : Info: ++[logintime] returns noop 
Thu May 28 16:19:09 2015 : Info: [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. 
Thu May 28 16:19:09 2015 : Info: ++[pap] returns noop 
Thu May 28 16:19:09 2015 : Info: ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user 
Thu May 28 16:19:09 2015 : Info: Failed to authenticate the user. 
Thu May 28 16:19:09 2015 : Info: Using Post-Auth-Type Reject 
Thu May 28 16:19:09 2015 : Info: # Executing group from file /etc/freeradius/sites-enabled/default 
Thu May 28 16:19:09 2015 : Info: +- entering group REJECT {...} 
Thu May 28 16:19:09 2015 : Info: [sql] expand: %{User-Name} -> day2 
Thu May 28 16:19:09 2015 : Info: [sql] sql_set_user escaped user --> 'day2' 
Thu May 28 16:19:09 2015 : Info: [sql] expand: %{User-Password} -> day2 
Thu May 28 16:19:09 2015 : Info: [sql] expand: INSERT INTO radpostauth (user, pass, reply, date) VALUES ( '%{User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply acket-Type}', '%S') -> INSERT INTO radpostauth (user, pass, reply, date) VALUES ( 'day2', 'day2', 'Access-Reject', ' 2015-05-28 16 :19:09') 
Thu May 28 16:19:09 2015 : Debug: rlm_sql (sql) in sql_postauth: query is INSERT INTO radpostauth (user, pass, reply, date) VALUES ( 'day2', 'day2', 'Access-Reject', ' 2015-05-28 16 :19:09') 
Thu May 28 16:19:09 2015 : Debug: rlm_sql (sql): Reserving sql socket id: 2 
Thu May 28 16:19:09 2015 : Debug: rlm_sql (sql): Released sql socket id: 2 
Thu May 28 16:19:09 2015 : Info: ++[sql] returns ok 
Thu May 28 16:19:09 2015 : Info: [attr_filter.access_reject] expand: %{User-Name} -> day2 
Thu May 28 16:19:09 2015 : Debug: attr_filter: Matched entry DEFAULT at line 11 

But if i dont give him, the attribute he can logon. 

If somone has any clue ? 
Thanks 


More information about the Freeradius-Users mailing list