RE: Advantages of Using SQL ?
DB backends are good, and save alot of admin, but don't expect them to be faster than a memory scan :-) I haven't done any tests, but I would presume an SQL backend would be more 'robust' than freeradius. The way I see it, having 1 request a minute is definitely faster with a users file in memory, but when the load hits and you have 10,000 hits per minute, freeradius would grind to a halt having to look up the credentials and handling all NAS comms simultaneously, while freeradius + sql would just continue doing their respective jobs as normal. Andrea Coppini +356 79 ANDREA (263732) [EMAIL PROTECTED] EMPOWER PEOPLE - THE WORLD IN YOUR HAND iWG (iWORLD GROUP) is a global e-mobile company creating, building and growing new businesses. iWG founders are pioneers in creating multi-billion dollar mobile and Internet businesses in Europe, Asia and the US. The Global Partners include the shareholders Bank of America, Deutsche Bank, Hikari Tsushin, McCaw, PaineWebber/UBS, The Dolphins' Trust, Perikles Trust and the iAA Advisory Network. www.iWG.info www.countryprofiler.com/iWG Privileged/Confidential Information may be contained in this message. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Accumulated time limit
Hi, I just downloaded the new .9 version and installed it, but I still can't get freeradius to keep the accumulated time between restarts. btw, how do I check which version i am running (RH 9), I want to make sure i'm actually running freeradius v.0.9... my linux skills are limited regards a -Original Message- From: Tom Emerson [mailto:[EMAIL PROTECTED] Sent: Sat 21/06/2003 18:09 To: [EMAIL PROTECTED] Cc: Subject: Re: Accumulated time limit Andrea Coppini +356 79 ANDREA (263732) [EMAIL PROTECTED] EMPOWER PEOPLE - THE WORLD IN YOUR HAND iWG (iWORLD GROUP) is a global e-mobile company creating, building and growing new businesses. iWG founders are pioneers in creating multi-billion dollar mobile and Internet businesses in Europe, Asia and the US. The Global Partners include the shareholders Bank of America, Deutsche Bank, Hikari Tsushin, McCaw, PaineWebber/UBS, The Dolphins' Trust, Perikles Trust and the iAA Advisory Network. www.iWG.info www.countryprofiler.com/iWG Privileged/Confidential Information may be contained in this message. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email. winmail.dat
0.9
any news about 0.9? a couple of weeks ago it was 'anytime soon' Andrea Coppini +356 79 ANDREA (263732) [EMAIL PROTECTED] EMPOWER PEOPLE - THE WORLD IN YOUR HAND iWG (iWORLD GROUP) is a global e-mobile company creating, building and growing new businesses. iWG founders are pioneers in creating multi-billion dollar mobile and Internet businesses in Europe, Asia and the US. The Global Partners include the shareholders Bank of America, Deutsche Bank, Hikari Tsushin, McCaw, PaineWebber/UBS, The Dolphins' Trust, Perikles Trust and the iAA Advisory Network. www.iWG.info www.countryprofiler.com/iWG Privileged/Confidential Information may be contained in this message. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Accounting and Session-Timeout
Title: Message
this
seems to be an extremely popular question (I joined this list to ask this same
question).
Tom
Emerson had replied with an excellent step-by-step procedure, and here it is
(hope you don't mind Tom):
[TOM START]the solution is to
set up a "counter" with "reset=never". I'm doing the same thing
[wireless hotspot, pre-paid "one hour" cards, etc.] and for the most part
the following seems to work for me:
[in
modules] counter lifetime
{
filename =
${raddbdir}/db.lifetime
key =
User-Name
count-attribute =
Acct-Session-Time
reset =
never
counter-name =
lifetime-session-counter
check-name =
lifetime-limit
cache-size =
5000 }
[in
instantiation]
lifetime
[in
authorize]
..
sql
lifetime ..
[in
accounting]
lifetime
[in the SQL database --
radgroupcheck] groupname:
onehour attribute:
lifetime-limit op:
:= value: 3600
[if you are using a "user file"
instead of an SQL database, you would include "lifetime-limit = 3600" in the
check items part of an entry, i.e., the first line of the
entry]
users are associated with the
"onehour" group via an entry in usergroup table, though for a one-element
group check item, you could simply put that item into the radcheck table and
not bother with a group...
BIG HUGE CAVEAT: the current
production version (0.8.1) has a bug with "reset=never" -- it resets when
the program restarts. This is fixed in the CVS/development sources, so
it should be in 0.9 [due to be released in like a couple weeks or less, from
what I hear...]
[TOM
END]
-Original Message-From: Igor Maciel Macaubas
[mailto:[EMAIL PROTECTED] Sent: June 26, 2003 11:10
PMTo: [EMAIL PROTECTED]Subject: Accounting
and Session-Timeout
Hello everybody,
I have here, up and running, a FreeRadius 0.8.1 server
accessing a MySQL database to authenticate my users.
I have a table 'radreply', where I can define a custom
radreply for each user. I'm using this for a quite easy thing: I'm replying with
the default data a Session-Timeout, which is defined for each user.
What's going on: I have an user with the login 'igor', for
example, and I've configured a Session-Timeout of 60 seconds (1 minute). After 1
minute, my RAS disconnects the user 'igor'. But if 'igor' authenticates again,
he'll have 1 minute more.
I guess that I have to launch a database stored procedure or
something like on the STOP event, to calculate the remaining time and write the
right values on the right places.
Does anybody here have another way to do it? Have someone here
ever did that?
Suggestions are welcome.
Regards,Igor--[EMAIL PROTECTED]Andrea Coppini+356 79 ANDREA (263732)[EMAIL PROTECTED]EMPOWER PEOPLE - THE WORLD IN YOUR HANDiWG (iWORLD GROUP) is a global e-mobile company creating, building and growing new businesses. iWG founders are pioneers in creating multi-billion dollar mobile and Internet businesses in Europe, Asia and the US.The Global Partners include the shareholders Bank of America, Deutsche Bank, Hikari Tsushin, McCaw, PaineWebber/UBS, The Dolphins' Trust, Perikles Trust and the iAA Advisory Network.www.iWG.infowww.countryprofiler.com/iWGPrivileged/Confidential Information may be contained in this message. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email.
RE: Accumulated time limit
Thanks Tom, worked perfectly first time! pity it doesn't keep the accumulated time between restarts, I guess I'll have to wait a little more. Thanks again A -Original Message- From: Tom Emerson [mailto:[EMAIL PROTECTED] Sent: Sat 21/06/2003 18:09 To: [EMAIL PROTECTED] Cc: Subject: Re: Accumulated time limit Andrea Coppini +356 79 ANDREA (263732) [EMAIL PROTECTED] EMPOWER PEOPLE - THE WORLD IN YOUR HAND iWG (iWORLD GROUP) is a global e-mobile company creating, building and growing new businesses. iWG founders are pioneers in creating multi-billion dollar mobile and Internet businesses in Europe, Asia and the US. The Global Partners include the shareholders Bank of America, Deutsche Bank, Hikari Tsushin, McCaw, PaineWebber/UBS, The Dolphins' Trust, Perikles Trust and the iAA Advisory Network. www.iWG.info www.countryprofiler.com/iWG Privileged/Confidential Information may be contained in this message. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email. winmail.dat
Accumulated time limit
Hi all, I'm using a Mikrotik NAS (for wireless hotspot) and FreeRADIUS 0.8.1 (MySQL db) on RH9. I want to sell an amount of time (eg. 10 hours) which the users can use as much as they want from it whenever they want. This is similar to the 'pre-paid' cell phone payment systems used throughout Europe (don't know about the US). I've tried using 'session-limit', which is correctly identified by the NAS and the client can see the time counting down correctly, but when he/she logs out and logs back in, the time is reset to the original, as if he/she has never logged in. Mikrotik is set to send Accounting information back to the RADIUS, which it is doing, but I guess I have to integrate Radius accounting with the authorization. How do I do that? Andrea Coppini +356 79 ANDREA (263732) [EMAIL PROTECTED] EMPOWER PEOPLE - THE WORLD IN YOUR HAND iWG (iWORLD GROUP) is a global e-mobile company creating, building and growing new businesses. iWG founders are pioneers in creating multi-billion dollar mobile and Internet businesses in Europe, Asia and the US. The Global Partners include the shareholders Bank of America, Deutsche Bank, Hikari Tsushin, McCaw, PaineWebber/UBS, The Dolphins' Trust, Perikles Trust and the iAA Advisory Network. www.iWG.info www.countryprofiler.com/iWG Privileged/Confidential Information may be contained in this message. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
