AuthByPolicy is only for what to do when you have multiple authby's.
you only have 1 per handler here so it's irrelevant.
Best to show some debug log of this in action with a start packet to
figure out what's going on. the config looks like it should at least
handle the start packet.
On 27/03/13 03:32 PM, Thomas Kurian wrote:
Hi Mike,
Thanks for your email. Can you please tell me where exactly i have to
add "AuthByPolicy ContinueWhileIgnore"? Should it go under each
handler clause inside Authby sql?
_My old config (which didnt work ,Start packets were never getting
processed) (this was the config i had problem a long time ago.. which
lead me to ask this question)_
AcctPort 1813
AuthPort 1812
BindAddress 0.0.0.0
LogDir /var/log/radius
DbDir /etc/radiator
# Use a low trace level in production systems. Increase
# it to 4 or 5 for debugging, or use the -trace flag to radiusd
Trace 4
# You will probably want to add other Clients to suit your work site,
# one for each NAS you want to work with
<Client DEFAULT>
Secret xxxx
DupInterval 0
</Client>
<Client 10.50.1.4>
Secret xxx
DupInterval 0
NasType Cisco
IgnoreAcctSignature
</Client>
#For strictly processing with Accounting Stop packets
<Handler Acct-Status-Type = Stop>
<AuthBy SQL>
Identifier Block-Quota-SQL
DBSource dbi:mysql:radius
DBUsername xxxx
DBAuth xxxxx
AccountingStopsOnly
AccountingTable quotacouunter
AuthColumnDef username,User-Name,check
AuthSelect select monthlycounter from quotacounter \
where username='%n' \
And type = 'Q'
#AuthColumnDef 0, Session-Timeout, reply
AcctSQLStatement update quotacounter set \
monthlycounter=monthlycounter+%{Acct-Input-Octets} \
where username='%n' \
And Type = 'Q'
AuthSelect select totalcounter from quotacounter \
where username='%n' \
And Type = 'Q'
AcctSQLStatement update quotacounter set \
totalcounter=totalcounter+%{Acct-Input-Octets} \
where username='%n' \
And Type = 'Q'
PostAuthHook file:"%D/thomas.pl";
</AuthBy>
</Handler>
# Accept processing of other accounting requests of the genre start
and interim
<Handler Request-Type = Accounting-Request>
<Realm DEFAULT>
<AuthBy SQL>
DBSource dbi:mysql:radius
DBUsername xxxx
DBAuth xxxx
AccountingTable ACCOUNTING
AcctColumnDef USERNAME, User-Name
AcctColumnDef ACCTSTATUSTYPE,Acct-Status-Type
AcctColumnDef FRAMEDIPADDRESS,Framed-IP-Address
AcctColumnDef ACCTINPUTOCTETS,Acct-Input-Octets
AcctColumnDef ACCTOUTPUTOCTETS,Acct-Output-Octets
AcctColumnDef TIME_STAMP,Event-Timestamp
AcctColumnDef ACCTSESSIONTIME,Acct-Session-Time
AcctColumnDef ACCTDELAYTIME,Acct-Delay-Time
AcctColumnDef ACCTSESSIONID,Acct-Session-Id
AcctColumnDef ACCTTERMINATECAUSE,Acct-Terminate-Cause
AcctColumnDef NASIDENTIFIER,NAS-Identifier
AcctColumnDef NASPORT,NAS-Port
AcctColumnDef ACCTSESSIONID,Acct-Session-Id
</AuthBy>
# Log accounting to a detail file
AcctLogFileName %L/detail
</Realm>
</Handler>
Requesting your kind help, Thomas Kurian IT Security Engineer (B.Tech.
-- Electrical) Kuwaiti Canadian Consulting Group (www.kccg.com) T:
+965 22435566 F: +965 22415149 E: tho...@kccg.com
On 3/27/2013 8:00 PM, radiator-requ...@open.com.au wrote:
Send radiator mailing list submissions to radiator@open.com.au To
subscribe or unsubscribe via the World Wide Web, visit
http://www.open.com.au/mailman/listinfo/radiator or, via email, send
a message with subject or body 'help' to radiator-requ...@open.com.au
You can reach the person managing the list at
radiator-ow...@open.com.au When replying, please edit your Subject
line so it is more specific than "Re: Contents of radiator digest..."
Today's Topics: 1. Re: Handler type Stop/Alive distinguished
processing (Michael Newton)
---------------------------------------------------------------------- Message:
1 Date: Wed, 27 Mar 2013 09:41:40 -0700 From: Michael Newton
<mnew...@pofp.com> Subject: Re: [RADIATOR] Handler type Stop/Alive
distinguished processing To: radiator@open.com.au Message-ID:
<CADEoLhCoJHu0vQChsC5-czmG24k+kwsSnw=fzydovji-bh-...@mail.gmail.com>
Content-Type: text/plain; charset="utf-8" On 27 March 2013 09:29,
<radiator-requ...@open.com.au> wrote:
My requirement is to process and handle ,Alive and Stop packet
separately and the configuration must be called/processed separately
,each time the radiator receives it based on the Acct Status type as
described above. Please help me out , i could not find an
explanation for this anywhere and i am confused. Please let me know,
if you need any more specifics to help me out.
There shouldn't be any problem with using <Handler
Acct-Status-Type=Start>, <Handler Acct-Status-Type=Alive>, or
<Handler Acct-Status-Type=Stop>, it is how we do accounting on our
server. Maybe make sure you you are using "AuthByPolicy
ContinueWhileIgnore" if you have problems with subsequent handlers
not getting called? If that doesn't help, I'd suggest posting the
config that doesn't work instead of the one that does; other people
may be able to provide more suggestions. Mike -------------- next
part -------------- An HTML attachment was scrubbed... URL:
http://www.open.com.au/pipermail/radiator/attachments/20130327/ab98603b/attachment-0001.html
------------------------------
_______________________________________________ radiator mailing list
radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator
End of radiator Digest, Vol 46, Issue 24
****************************************
_______________________________________________ radiator mailing list
radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator
_______________________________________________
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator
