Weird behaviour of sqlcounter / dailycounter

Alan DeKok aland at deployingradius.com
Wed May 31 21:32:31 UTC 2023


On May 31, 2023, at 12:43 PM, Robert Senger <robert.senger at lists.microscopium.de> wrote:
> okay, I assumed that if I have enabled the inner-tunnel to copy
> attributes to the outer reply (by setting "if (0)" to "if(1)" as
> documented), the attribute will be available as it is sent to the nas.
> That was a misunderstanding. Now, as I added the code to the inner-
> tunnel file, it works.

  That's good

> However, I discovered that neither logintime nor dailycounter get
> checked if a station uses EAP-TLS. So, I've enabled the check-eap-tls
> module, activated it in mods-enabled/eap file, added "sql" (to get the
> Login-Time and Max-Daily-Session attributes), added "logintime" and
> "dailycounter" in the mods-enables/check-eap-tls file, and as far as
> I've tested this by now it seems to work. Is that a correct way to
> enable logintime and dailycounter for EAP-TLS?

  If it works...

  Alan DeKok.



More information about the Freeradius-Users mailing list