Re: Accounting help please

2009-07-02 Thread David Hobley
That would be it. Sorry to waste your time - I have asked our Cisco guy to set 
this up for us. 

Cheers, 
David 
- Original Message - 
From: "Chris"  

Still don't see any accounting packets. Did you configure a RADIUS 
accounting server in your NAS? You usually have to set both 
authentication and accounting servers. 

RADIUS Servers (including FreeRADIUS) do not generate accounting 
records based on authentication attempts. They act on accounting 
packets sent by the NAS. 




-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Accounting help please

2009-06-30 Thread Chris

On Jun 30, 2009, at 10:43 PM, David Hobley wrote:


Chris,

When you put it like that, it does make rather a large amount of  
sense. Sorry about that. Login details attached.


Cheers,
David


Still don't see any accounting packets.  Did you configure a RADIUS  
accounting server in your NAS?  You usually have to set both  
authentication and accounting servers.


RADIUS Servers (including FreeRADIUS) do not generate accounting  
records based on authentication attempts.  They act on accounting  
packets sent by the NAS.





-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Accounting help please

2009-06-30 Thread David Hobley
Chris, 

When you put it like that, it does make rather a large amount of sense. Sorry 
about that. Login details attached. 

Cheers, 
David 
- Original Message - 
From: "Chris"  

On Jun 30, 2009, at 3:29 PM, David Hobley wrote: 
> I have freeradius2 configured and authenticating properly. I would 
> like to be able to get radwho and radlast working properly, but for 
> some reason the files do not get created (permission are correct in 
> that directory). I thought I have set up accounting correctly, but 
> obviously haven't. I have attached the output from radiusd -X, any 
> pointers anyone could give me, I would appreciate. 

Might help if you included debug output which included processing of 
an accounting packet. Preferably a start and a stop. 

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html 


FreeRADIUS Version 2.1.6, for host i386-redhat-linux-gnu, built on Jun  2 2009 
at 17:33:54
Copyright (C) 1999-2009 The FreeRADIUS server project and contributors. 
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A 
PARTICULAR PURPOSE. 
You may redistribute copies of FreeRADIUS under the terms of the 
GNU General Public License v2. 
Starting - reading configuration files ...
including configuration file /etc/raddb/radiusd.conf
including configuration file /etc/raddb/proxy.conf
including configuration file /etc/raddb/clients.conf
including files in directory /etc/raddb/modules/
including configuration file /etc/raddb/modules/pap
including configuration file /etc/raddb/modules/smbpasswd
including configuration file /etc/raddb/modules/acct_unique
including configuration file /etc/raddb/modules/perl
including configuration file /etc/raddb/modules/pam
including configuration file /etc/raddb/modules/expr
including configuration file /etc/raddb/modules/counter
including configuration file /etc/raddb/modules/radutmp
including configuration file /etc/raddb/modules/otp
including configuration file /etc/raddb/modules/linelog
including configuration file /etc/raddb/modules/sql_log
including configuration file /etc/raddb/modules/mschap
including configuration file /etc/raddb/modules/detail.log
including configuration file /etc/raddb/modules/smsotp
including configuration file /etc/raddb/modules/ldap
including configuration file /etc/raddb/modules/passwd
including configuration file /etc/raddb/modules/attr_filter
including configuration file /etc/raddb/modules/files
including configuration file /etc/raddb/modules/checkval
including configuration file /etc/raddb/modules/exec
including configuration file /etc/raddb/modules/detail.example.com
including configuration file /etc/raddb/modules/expiration
including configuration file /etc/raddb/modules/echo
including configuration file /etc/raddb/modules/wimax
including configuration file /etc/raddb/modules/unix
including configuration file /etc/raddb/modules/mac2vlan
including configuration file /etc/raddb/modules/ippool
including configuration file /etc/raddb/modules/inner-eap
including configuration file /etc/raddb/modules/logintime
including configuration file /etc/raddb/modules/digest
including configuration file /etc/raddb/modules/detail
including configuration file /etc/raddb/modules/realm
including configuration file /etc/raddb/modules/policy
including configuration file /etc/raddb/modules/mac2ip
including configuration file /etc/raddb/modules/etc_group
including configuration file /etc/raddb/modules/attr_rewrite
including configuration file /etc/raddb/modules/sqlcounter_expire_on_login
including configuration file /etc/raddb/modules/preprocess
including configuration file /etc/raddb/policy.conf
including files in directory /etc/raddb/sites-enabled/
including configuration file /etc/raddb/sites-enabled/default
group = radiusd
user = radiusd
including dictionary file /etc/raddb/dictionary
main {
prefix = "/usr"
localstatedir = "/var"
logdir = "/var/log/radius"
libdir = "/usr/lib/freeradius"
radacctdir = "/var/log/radius/radacct"
hostname_lookups = no
max_request_time = 30
cleanup_delay = 5
max_requests = 1024
allow_core_dumps = no
pidfile = "/var/run/radiusd/radiusd.pid"
checkrad = "/usr/sbin/checkrad"
debug_level = 0
proxy_requests = yes
 log {
stripped_names = no
auth = no
auth_badpass = no
auth_goodpass = no
 }
 security {
max_attributes = 200
reject_delay = 1
status_server = yes
 }
}
radiusd:  Loading Realms and Home Servers 
 proxy server {
retry_delay = 5
retry_count = 3
default_fallback = no
dead_time = 120
wake_all_if_all_dead = no
 }
 home_server localhost {
ipaddr = 127.0.0.1
port = 1812
type = "auth"
secret = "testing123"
response_window = 20
max_outstanding = 65536
require_message_authenticator = no
zombie_period = 40
s

Re: Accounting help please

2009-06-30 Thread Chris


On Jun 30, 2009, at 3:29 PM, David Hobley wrote:


Hello,

I have freeradius2 configured and authenticating properly. I would  
like to be able to get radwho and radlast working properly, but for  
some reason the files do not get created (permission are correct in  
that directory). I thought I have set up accounting correctly, but  
obviously haven't. I have attached the output from radiusd -X, any  
pointers anyone could give me, I would appreciate.


The output I get from radwho and radlast is:

[r...@samba raddb]# radwho
radwho: Error reading /var/log/radius/radutmp: No such file or  
directory

[r...@samba raddb]# radlast
last: /var/log/radius/radwtmp: No such file or directory


Might help if you included debug output which included processing of  
an accounting packet.  Preferably a start and a stop.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html