Hi Alan, Thanks a lot for your help to explain this to me.
> oh. generally you do all the accounting and pre-paid > stuff and timing of sessions etc on the SERVER. all > the > required bits are already there. various rlm_* > modules > that can interface nicely to a database backend etc. > But I still have this puzzle inside my head :) My scenario is that the client will do some meassurement after it receive access_accept from server. I think I can trigger this by writing shell script when the packet access_accept received. (am i right?) Second question : How do I learn to use the command line to run client? I just using this command to send access_request for user name Maria, # echo "User-Name = Maria, User-Password = testing" | radclient 10.1.0.76 auth testing123 How do I find other command to start and stop accounting? I think I can use the same command like above just change the auth become acct. But the problem is how do i tell the server that I want to stop the acct session? > > And for the process interaction that i want to see > > (between client and server) is for example the > case of > > session timeout. > > How do i see if the client sending the message to > the > > server.How do I make untill all of these > information > > show in let say tcpdump. > > you can see the stuff with tcpdump (in the usual > way) but there > are special filters for RADIUS in ethereal package - > which some > people prefer to use when looking at the network > stuff. you > could look at the server end still - since you can > see all the > into that the server sends and that the server > receives. if > you have a problem with the network so that packets > dont arrive > than thats another issue altogether. > > > In the debug out (when i run radiusd -X) it only > > written > > > > "Nothing to do. Sleeping until we see a request." > > ah. if you are ONLY seeing this and yet you are > trying to run the radclient > on another box...then the packets arent arriving to > the server. in this > case perhaps there is a firewall in the way (usual > suspect and reason). > if you have misconfigured the client/server > relationship (wrong passphrase > etc) then you would see info...and it would tell > you! > > alan I finally make progres so the server send this access-Accept to the client. Sending Access-Accept of id 131 to 10.1.0.15:32768 Framed-Protocol = PPP Session-Timeout = 600 Login-Service = Telnet Idle-Timeout = 360 But why the session-TImeout is not working? I already set this attributes in users file. seems no sign that it works. How do I see if the time already passed, the client will be disconnected from server? Sorry for long questions. I really apreciate if you want to answer them. Have a great weekend San __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html