How to enable the "Session-Timeout" attribute?

[Alan DeKok]

On Feb 25, 2016, at 1:56 AM, zhengfish <zhengfish at gmail.com> wrote:
> I want to enable the Session-Timeout attribute, and add it into
> /etc/freeradius/users as below:
> 
> friends Cleartext-Password := "12343333"
>        Service-Type = Framed-User,
>        Session-timeout = 80,
>        Reply-Message = "Welcome, %{User-Name}"
> 
> Then I can test it with radeapclient and got a result with
> Session-Timeout value.

  That's good.

> Next I want to connect hostapd to freeradius as a radius client,
> however I cannot get a result with Session-Timeout value.
> I do some tcpdump to parse the RADIUS udp packet, I found that there
> is a Session-Timeout attribute in early "Access-Challenge" packets,
> however in later "Access-Challenge" packets and the last
> "Access-Accept", the Session-Timeout attribute disappear.
> 
> Why?
> I want to know how to enable  Session-Timeout attribute in last
> "Access-Accept" packet.

  In v3, update session-state with Session-Timeout, and then the post-auth section will automatically add it to the reply.

> ------------------------------------ Here is the decoded UDP-1812
> packets -----------------------------------------------------

  That doesn't help.  Please don't post that to the list.

  Alan DeKok.