Timeout and Cisco 3640.Please help!
Hi, I am using radius version 0.7 (stable) with mysql and a CISCO 3640 as NAS. The configuration work fine but I deal with a problem lately with Timeout attributes. Here is an examples: Radius Access-Accept packet attributes: Port-Limit = 1 Framed-Protocol = PPP Framed-Pool = 255.255.255.254 Framed-MTU = 576 Service-Type = Framed-User Idle-Timeout = 300 Session-Timeout = 14400 Cisco 3640 log: AAA/AUTHOR/LCP: Processing AV service=ppp AAA/AUTHOR/LCP: Processing AV idletime=300 AAA/AUTHOR/LCP: idletime failed AAA/AUTHOR/LCP: Denied AAA/AUTHOR/: Duplicate per-user event LCP_DOWN ignored AAA/MEMORY: free_user (0x61544CD8) user=xxx ruser=NULL port=Serial12/0:7 rem_addr= . Authen_type=PAP service=PPP priv=1 AAA/AUTHOR/FSM: LCP succeds trivially When I put only the Session-Timeout the (same) following error occurs: AAA/AUTHOR/LCP: Processing AV timeout=14400 AAA/AUTHOR/LCP: Denied .. after that the call lasted for 7 seconds. I dont think that the problem is from radius server. Thank you in advanced. Andrew Kelaidis _ STOP MORE SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
IP pool problem, please help
I have installed the freeRADIUS server and I 'm using the rlm_ippool module. Everything works fine until one account-stop packet had been lost. The user was log out but the dialup admin interface shows him as online and active in finger page. I remove the correct record from the radacct table so the user went offline. The problem is that the server had assigned him an ip address and when the user is trying to login again, the following error message appears: "The server did not assign an IP Address, error 738" I know that the ippool module keeps two files (not text files) with information about used IP addresses. I think that the "stacked" user can't login because the server has already assign him an ipaddress. Is there any ways to solve this problem? Please help... Andrew Kelaidis _ MSN Photos is the easiest way to share and print your photos: http://photos.msn.com/support/worldwide.aspx - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
rlm_ippool
Hi, I want to use ippool module (freeradius version 0.7 stable). I have tried the following configure commands but unfortunately didn't work: ./configure . --with-rlm_ippool ./configure . --enable-rlm_ippool I looked in configure, make messages but I didn't see anything wrong. Are there any dependencies for this module??? What I did wrong?? Please help. _ Send and receive Hotmail on your mobile device: http://mobile.msn.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Passwd expiration
>Hi- > >We are experiencing problems configuring the "Password-Expiration" >attribute using freeradius 0.6 >communicating with an Ascend MAX2012, TAOS 7.2.4. > >Is the "Password-Expiration" item supposed to be set >as a check or reply item / Which device is validating >the expiration, the radiusd or the nas? The attribute is "Expiration" and is a check item. > >What operand should be used? > >Thanks a bunch in advance. _ MSN Photos is the easiest way to share and print your photos: http://photos.msn.com/support/worldwide.aspx - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Limiting the user's time online
You can use the counter module to do that. There is an example in radiusd.conf. Andrew Kelaidis --- Network Operation Center T.E.I. of Athens >From: Erich Zigler <[EMAIL PROTECTED]> >Reply-To: [EMAIL PROTECTED] >To: [EMAIL PROTECTED] >Subject: Limiting the user's time online >Date: Sun, 28 Apr 2002 13:18:44 -0500 > >I've been playing with Freeradius for the last couple hours and I have >found >it very robust and a very well written package. However I've trudged >through >the documentation and was unable to find my answer to a specific question. > >Is it possible to limit the total number of hours a user uses online? Such >as >specify 150 hours a user may use a month. If they pass 150 hours, it will >no >longer allow them to login. > >I've read about the Login-Time attribute where you can specify what times >they >can login, but it doesn't allow you to specify a Total Time. > >Any ideas? > >-- >How many people here have ever wanted to be able to tell a luser '"The >customer is always right" is fine when the issue is whether you wanted >extra mustard or no mustard, but does not apply when the customer in >question just took a bulk magnet to his hard drive'? -- Cat > > >- >List info/subscribe/unsubscribe? See >http://www.freeradius.org/list/users.html _ Join the worlds largest e-mail service with MSN Hotmail. http://www.hotmail.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Simultaneous-Use
Try the following:
1. Add "Fall-Through = 1" in reply items.
2. Check if you have SNMP access rights to the NAS.
3. Read Simultaneous-Use document.
4. Check if there is the following section in radius.conf
session {
radutmp
}
5. Run checkrad script manual to see if it works.
I Hope this help you.
Andrew Kelaidis
Network Operation Center, TEI of Athens
>From: Mike <[EMAIL PROTECTED]>
>Reply-To: [EMAIL PROTECTED]
>To: [EMAIL PROTECTED]
>Subject: Simultaneous-Use
>Date: Sat, 27 Apr 2002 15:59:05 +0600
>
>Hi,
>
>I have a problem with Simultaneous-Use on Cisco with FreeRadius 0.5
>It doesn't work :(
>Radius doesn't prevent double logins. The users are still able to
>login twice with just one account, I can see that by running "radwho"
>program. What may be wrong?
>Have a such entry:
>
>myuser Auth-Type := Local, User-Password == "mypassword", Simultaneous-Use
>:= 1
> Service-Type = Framed-User,
> Framed-Protocol = PPP,
> Framed-Compression = None
>
>I have correct entries in raddb/naslist and raddb/naspasswd files.
>Cisco:
>snmp-server community public RO 97
>access-list 97 permit myipaddr
>
>Please help.
>
>
>-
>List info/subscribe/unsubscribe? See
>http://www.freeradius.org/list/users.html
_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Expiration ok, Activation?
I am using freeRADIUS version 0.5 (stable). I have noticed that there is an Expiration attribute which I can use. I want to know if there is any Activate date (like Criston Radius) attribute Thanx a lot. Kelaidis Andrew N.O.C. TEI of Athens, Greece _ Send and receive Hotmail on your mobile device: http://mobile.msn.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: (no subject)
You need to have the mysql source code or the mysql_devel RPM package installed.Then run configure with --with-mysql-include-dir= [devel file or source code path] >From: Aqeel Anwar <[EMAIL PROTECTED]> >Reply-To: [EMAIL PROTECTED] >To: [EMAIL PROTECTED] >Subject: (no subject) >Date: Tue, 2 Apr 2002 02:24:45 -0800 (PST) > >HI all >I am trying to run radius with mysql. when i start >radius the following error message is shown. > >Starting - reading configuration files ... >Module: Loaded SQL >rlm_sql: Could not link driver rlm_sql_mysql: file not >found >rlm_sql: Make sure it (and all its dependent >libraries!) are in the search path >of your system's ld. >radiusd.conf[4]: sql: Module instantiation failed. > >what should i do in this case. > >Thanks for your help. >Aqeel > > > >__ >Do You Yahoo!? >Yahoo! Tax Center - online filing with TurboTax >http://http://taxes.yahoo.com/ > >- >List info/subscribe/unsubscribe? See >http://www.freeradius.org/list/users.html _ Join the worlds largest e-mail service with MSN Hotmail. http://www.hotmail.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
checkrad script
I need to customise checkrad script output messages. Can I use freeRADIUS variables such as $i, in checkrad code? Thanks. Andrew Kelaidis N.O.C. TEI of Athens _ Send and receive Hotmail on your mobile device: http://mobile.msn.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Unknown error
Hi When i try to start radius server (in debbug mode) i get the following message: "Can't connect to SNMP agent with SMUX: Connection refused" I can't understand the meaning of this message. I had compiled freeRADIUS server ver. 0.5 (stable) without SNMP support. Though it's shows this message, the freeRADIUS server works fine. Please help. _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: simultaneous-use & mysql
I don't see something bad in sql tables. Some ideas:
Check the radiusd.conf, must inlude the following:
session {
radutmp
}
Read Simultaneous-use documentation.
Start the server in debbuging mode (radiusd -X).
Run checkrad script manualy
My tables are :
radgroupcheck:
++---+--+---+--+
| id | GroupName | Attribute| Value | op |
++---+--+---+--+
| 1 | group1| Simultaneous-Use | 1 | := |
++---+--+---+--+
radgroupreply:
++---++-+--+
| id | GroupName | Attribute | Value | op |
++---++-+--+
| 1 | group1| Framed-IP-Address | 255.255.255.254 | = |
| 2 | group1| Framed-Protocol| PPP | = |
| 3 | group1| Service-Type | Framed-User | = |
| 4 | group1| Fall-Through | 1 | = |
| 5 | group1| Framed-MTU | 576| = |
++---++-+--+
>From: "yoav" <[EMAIL PROTECTED]>
>Reply-To: [EMAIL PROTECTED]
>To: [EMAIL PROTECTED]
>CC: [EMAIL PROTECTED]
>Subject: Re: simultaneous-use & mysql
>Date: Sat, 30 Mar 2002 19:12:35 +0300 (IDT)
>
>still no go :)
>i'm attaching the radgroupreply and radgroupcheck tables again.
>radgroupreply is:
>++---++-+--+--+
>| id | GroupName | Attribute | Value | op | prio |
>++---++-+--+--+
>| 3 | dynamic | Framed-Compression | Van-Jacobsen-TCP-IP | NULL |0 |
>| 4 | dynamic | Framed-Protocol| PPP | NULL |0 |
>| 5 | dynamic | Service-Type | Framed-User | NULL |0 |
>| 6 | dynamic | Auth-Type | Local | NULL |0 |
>| 7 | dynamic | Framed-MTU | 1500| NULL |0 |
>| 27 | dynamic | Fall-Through | 1 | =|0 |
>++---++-+--+--+
>
>radgroupcheck is:
>++---+--+---+--+
>| id | GroupName | Attribute| Value | op |
>++---+--+---+--+
>| 1 | dynamic | Simultaneous-Use | 1 | := |
>++---+--+---+--+
>
>thanks :)
_
Send and receive Hotmail on your mobile device: http://mobile.msn.com
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: simultaneous-use & mysql
Try this one. Insert the following record in radgroupreply table: ++---+--+---+--+ | id | GroupName | Attribute| Value | op | ++---+--+---+--+ | x | dynamic | Fall-Through | 1 | = | ++---+--+---+--+ >From: "yoav" <[EMAIL PROTECTED]> >Reply-To: [EMAIL PROTECTED] >To: [EMAIL PROTECTED] >CC: [EMAIL PROTECTED] >Subject: Re: simultaneous-use & mysql >Date: Sat, 30 Mar 2002 13:54:34 +0300 (IDT) > >hey >still doesn't work for me. >checkrad reports that double detected, so it works. but still users are >able >to connect more than once. here is the radgroupcheck table: >++---+--+---+--+ >| id | GroupName | Attribute| Value | op | >++---+--+---+--+ >| 1 | dynamic | Simultaneous-Use | 1 | := | >++---+--+---+--+ >should this be in the radgroupcheck or radgroupreply table? anyway,i tried >both and still doesn't work. >any thoughts? >thanks :) _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Running radiusd problem
As the debuggin messages said you must specify a shadow password file or to disable hash tables (in unix module set "cache = no") in radius.conf file. >From: Sally Fetouh <[EMAIL PROTECTED]> >Reply-To: [EMAIL PROTECTED] >To: [EMAIL PROTECTED] >Subject: Running radiusd problem >Date: Mon, 25 Mar 2002 14:21:27 +0400 > >Hi, > >I recently downloaded the latest 0.5 version of freeradius on Solaris 8 and >managed to configure and compile it successfully. When I came to run it in >debug mode though, I got the following messages. Am I missing something >anywhere? I'd appreciate it if someone could point out what could be wrong >here. > >Thanks, >Sally Fetouh > >Starting - reading configuration files ... >reread_config: reading radiusd.conf >Config: including file: /usr/local/etc/raddb/proxy.conf >Config: including file: /usr/local/etc/raddb/clients.conf >Config: including file: /usr/local/etc/raddb/snmp.conf >Config: including file: /usr/local/etc/raddb/sql.conf > main: prefix = "/usr/local" > main: localstatedir = "/usr/local/var" > main: logdir = "/usr/local/var/log/radius" > main: libdir = "/usr/local/lib" > main: radacctdir = "/usr/local/var/log/radius/radacct" > main: hostname_lookups = no >read_config_files: reading dictionary >read_config_files: reading clients >read_config_files: reading realms >read_config_files: reading naslist > main: max_request_time = 30 > main: cleanup_delay = 5 > main: max_requests = 1024 > main: delete_blocked_requests = 0 > main: port = 0 > main: allow_core_dumps = no > main: log_stripped_names = no > main: log_auth = no > main: log_auth_badpass = no > main: log_auth_goodpass = no > main: pidfile = "/usr/local/var/run/radiusd.pid" > main: user = "root" > main: group = "root" > main: usercollide = no > main: lower_user = "no" > main: lower_pass = "no" > main: nospace_user = "no" > main: nospace_pass = "no" > main: proxy_requests = yes > proxy: retry_delay = 5 > proxy: retry_count = 3 > proxy: synchronous = no > proxy: default_fallback = yes > proxy: dead_time = 120 > security: max_attributes = 200 > security: reject_delay = 1 > main: debug_level = 0 >read_config_files: entering modules setup >Module: Library search path is /usr/local/lib >Module: Loaded System > unix: cache = yes > unix: passwd = "/etc/passwd" > unix: shadow = "(null)" > unix: group = "/etc/group" > unix: radwtmp = "/usr/local/var/log/radius/radwtmp" > unix: usegroup = no > unix: cache_reload = 600 >HASH: Reinitializing hash structures and lists for caching... >rlm_unix: You MUST specify a shadow password file! >HASH: unable to create user hash table. disable caching and run debugs >radiusd.conf[426]: unix: Module instantiation failed. > > >- >List info/subscribe/unsubscribe? See >http://www.freeradius.org/list/users.html _ Chat with friends online, try MSN Messenger: http://messenger.msn.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius 0.5 and mysql
I had the same problem. This problem solved when I removed the "sql" option from authenticate section. I don't know how, but radiusd use the "sql" module in authenticate process. I 'm using mySQL for AAA. >hey >i can' seem to get the sql module working again. >i moved all the data to the new table structure but when i try to run >radiusd i get an error saying: >radiusd: radiusd.conf: "SQL" modules aren't allowed in 'authenticate' >sections -- they have no such method. > >i loaded the module in authorize, but how do i tell radiusd to use it? >thanks :) _ Join the worlds largest e-mail service with MSN Hotmail. http://www.hotmail.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Simultaneous-Login??
The check item is the Simultaneous-Use >From: Eduardo Roldan <[EMAIL PROTECTED]> >Reply-To: [EMAIL PROTECTED] >To: [EMAIL PROTECTED] >Subject: Simultaneous-Login?? >Date: 06 Mar 2002 16:01:41 -0300 > >The file ./doc/Simultaneous-Use in the chapter 4 says: > > >4. IF IT DOESN'T WORK > > Note that you need to add the Simultaneous-Login parameter to the > check item (first line), not the reply item. > > >What is "Simultaneous-Login"?, the documents refer to Simultaneous-Use >all time. This is a error? > > > >- >List info/subscribe/unsubscribe? See >http://www.freeradius.org/list/users.html _ Send and receive Hotmail on your mobile device: http://mobile.msn.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: compile errors due to rlm_counter.c?
I have similars problems with counter module. When I try to run configure I got the following message: counter module require gdbm I have already installed the latest version of gdbm from RPM (RedHat 7.2). I tried and the stable version (0.4) but I got the same message. What's wrong? Is the RPM fake? Please help. >From: "Alan DeKok" <[EMAIL PROTECTED]> >Reply-To: [EMAIL PROTECTED] >To: [EMAIL PROTECTED] >Subject: Re: compile errors due to rlm_counter.c? >Date: Mon, 25 Feb 2002 13:31:34 -0500 > >Nick Davis <[EMAIL PROTECTED]> wrote: > > the configure went perfectly. The problems came when I started the make. > > > > Here are the errors that it reported: > > > > rlm_counter.c: In function `counter_instantiate': > > rlm_counter.c:330: `GDBM_NOLOCK' undeclared (first use in this function) > > rlm_counter.c:330: (Each undeclared identifier is reported only once > > rlm_counter.c:330: for each function it appears in.) > > rlm_counter.c:336: warning: implicit declaration of function >`gdbm_fdesc' > > It's obviously too much for me to expect that gdbm >doesn't have massive variations between versions. > > Upgrade your gdbm libraries && header files. The latest version is >1.8 > > The alternative is to go back to the previous version of the >'counter' module. > > I'll try to put an update in tonight. > > Alan DeKok. > >- >List info/subscribe/unsubscribe? See >http://www.freeradius.org/list/users.html _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: multiple stop records for same Acct-Session-Id
Run the freeRADIUS in debugging mode "radiusd -X" to see how many stop accounting requests are coming from NAS. >From: Alecio Maduro <[EMAIL PROTECTED]> >Reply-To: [EMAIL PROTECTED] >To: [EMAIL PROTECTED] >Subject: Re: multiple stop records for same Acct-Session-Id >Date: Fri, 22 Feb 2002 11:47:26 -0400 > >Seems like a difficult question. >Any candidates ? >Thanks > >Alecio > >At 06:13 2/20/2002 -0400, you wrote: >>When preparing the billing of last month, we discovered that for various >>accounts there are multiple at time more then 10 instances, of stop >>records for the same Acct-Session-Id of which the time differs. >>What can the possible cause(s) be for this. NAS used is a PortMaster 3. >>This is the first time we experience this. >>Is there any utility to get rind of the superfluous (extra) records ? >>Thanks. >>Alecio >> >> >> >>- List info/subscribe/unsubscribe? See >>http://www.freeradius.org/list/users.html > > >- >List info/subscribe/unsubscribe? See >http://www.freeradius.org/list/users.html _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: All sockets are being used!
icrease the value of "num_sql_socks" variable in sql.conf file. >From: "Tim Monaghan" <[EMAIL PROTECTED]> >Reply-To: [EMAIL PROTECTED] >To: "FREE RADIUS" <[EMAIL PROTECTED]> >Subject: All sockets are being used! >Date: Fri, 15 Feb 2002 13:05:08 -0600 > >Fri Feb 15 07:08:45 2002 : Error: rlm_sql: All sockets are being used! >Please increase the maximum number of sockets! > > >Any ideas on this one? Its not refering to unix sockets is it? > >Thanks alot! > >Tim > > >. > >- >List info/subscribe/unsubscribe? See >http://www.freeradius.org/list/users.html _ Send and receive Hotmail on your mobile device: http://mobile.msn.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Counter module doesn't work
I have installed the latest snapshot of freeRadius and I am using mySQL for
AAA. I would also like to limit the online time for all users. Here is a
part of my radiusd.conf file:
counter {
filename = ${raddbdir}/db.counter
key = User-Name
count-attribute = Acct-Session-Time
reset = daily
counter-name = Daily-Session-Time
check-name = Max-Daily-Session-Time
allowed-servicetype = Framed-User
cache-size = 5000
}
I have also inserted a "counter" into Authorization, Accounting parts of the
file. In radius database I have these records for the counter:
Username Attribute Value op
UserName Daily-Session-Time120 >
UserName Auth-Type Reject =
I start radius with "-X" and when a user calls in I receive these messages
about counter:
modcall: entering group authorize
rlm_counter: Entering module authorize code
rlm_counter: Could not find Check item value pair
modcall[authorize]: module "counter" returns noop
The Accounting procedure returns ok. I can't understand what I do wrong.
Please help
_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Counter module doesn't work
Thanks!!! Now I have only this record in radcheck table:
Username Attribute Value op
-
UserName Max-Daily-Session-Time7200 :=
..
-
but I had to change the Authorization section of the radius.conf to:
authorize {
sql
counter
}
I hope that this will help someone.
>From: Kostas Kalevras <[EMAIL PROTECTED]>
>Reply-To: [EMAIL PROTECTED]
>To: [EMAIL PROTECTED]
>Subject: Re: Counter module doesn't work
>Date: Mon, 11 Feb 2002 14:52:42 +0200 (EET)
>
>On Mon, 11 Feb 2002, Andrew Kelaidis wrote:
>
> > I have installed the latest snapshot of freeRadius and I am using mySQL
>for
> > AAA. I would also like to limit the online time for all users. Here is a
> > part of my radiusd.conf file:
> >
> > counter {
> > filename = ${raddbdir}/db.counter
> > key = User-Name
> > count-attribute = Acct-Session-Time
> > reset = daily
> > counter-name = Daily-Session-Time
> > check-name = Max-Daily-Session-Time
> > allowed-servicetype = Framed-User
> > cache-size = 5000
> > }
> > I have also inserted a "counter" into Authorization, Accounting parts of
>the
> > file. In radius database I have these records for the counter:
> > Username Attribute Value op
> >
> > UserName Daily-Session-Time120 >
> > UserName Auth-Type Reject =
> >
> > I start radius with "-X" and when a user calls in I receive these
>messages
> > about counter:
> >modcall: entering group authorize
> >rlm_counter: Entering module authorize code
> >rlm_counter: Could not find Check item value pair
> >modcall[authorize]: module "counter" returns noop
> > The Accounting procedure returns ok. I can't understand what I do wrong.
> > Please help
>
>You can do one of the following:
>
>1. Remove the counter from the authorize section and leave it in the
>accounting
>section. The check for the Daily-Session-Time is based on a compare
>function
>registered from the counter module and not on the authorize function
>provided by
>the module.
>
>2. Add a Max-Daily-Session-Time check item in the db like this:
>
>UserName Max-Daily-Session-Time120 = (you could also use the :=
>operator)
>
>and leave the counter in the authorize section.
>
>--
>Kostas Kalevras Network Operations Center
>[EMAIL PROTECTED] National Technical University of Athens, Greece
>Work Phone: +30 10 7721861
>'Go back to the shadow' Gandalf
>
>
>-
>List info/subscribe/unsubscribe? See
>http://www.freeradius.org/list/users.html
_
Chat with friends online, try MSN Messenger: http://messenger.msn.com
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Accounting using mySQL
I am using freeRADIUS snapshot-20020128 and mySQL module for the accounting. The module stores only the start/stop requests. I want to store bad password attempts or double logins also. Any ideas? Thanks for your time. _ Send and receive Hotmail on your mobile device: http://mobile.msn.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Counter module doesn't work
I have installed the latest snapshot of freeRadius and I am using mySQL for
AAA. I would also like to limit the online time for all users. Here is a
part of my radiusd.conf file:
counter {
filename = ${raddbdir}/db.counter
key = User-Name
count-attribute = Acct-Session-Time
reset = daily
counter-name = Daily-Session-Time
check-name = Max-Daily-Session-Time
allowed-servicetype = Framed-User
cache-size = 5000
}
I have also inserted a "counter" into Authorization, Accounting parts of the
file. In radius database I have these records for the counter:
Username Attribute Value op
UserName Daily-Session-Time120 >
UserName Auth-Type Reject =
I start radius with "-X" and when a user calls in I receive these messages
about counter:
modcall: entering group authorize
rlm_counter: Entering module authorize code
rlm_counter: Could not find Check item value pair
modcall[authorize]: module "counter" returns noop
The Accounting procedure returns ok. I can't understand what I do wrong.
Please help
_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Accounting using mySQL
I am using freeRADIUS snapshot-20020128 and mySQL module for the accounting. The module stores only the start/stop requests. I want to store bad password attempts or double logins also. Any ideas? Thanks for your time. _ Send and receive Hotmail on your mobile device: http://mobile.msn.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
