Re: empty preacct and accounting section

2013-09-25 Thread WorkingMan
Signup_mail2002 yahoo.com> writes: > > I will double check them when I get back to my machine. I think I know what you mean. Will report back. > > > On Sep 25, 2013, at 4:38 PM, Alan Buxey lboro.ac.uk> wrote: > > > > As the msg says. Your preacct {} a

Re: empty preacct and accounting section

2013-09-25 Thread Arran Cudbard-Bell
> Are you saying my default file has these sections as empty? Or that the vpn > clients are sending empty data? Sections. As the Warning clearly states, sections. Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: empty preacct and accounting section

2013-09-25 Thread Signup_mail2002
I will double check them when I get back to my machine. I think I know what you mean. Will report back. > On Sep 25, 2013, at 4:38 PM, Alan Buxey wrote: > > As the msg says. Your preacct {} and accounting {} sections in your server > are not configured to do anything. Add activ

Re: empty preacct and accounting section

2013-09-25 Thread Signup_mail2002
> On Sep 25, 2013, at 4:33 PM, Arran Cudbard-Bell > wrote: > > >> On 25 Sep 2013, at 21:20, WorkingMan wrote: >> >> I have been seen this weird message for two days now. I setup PPTP and IPSec >> (ikev1) with freeradius + mysql. >> >> In b

Re: empty preacct and accounting section

2013-09-25 Thread Alan Buxey
As the msg says.  Your preacct {} and accounting {} sections in your server are not configured to do anything. Add active modules to them eg a database call and things will be different.  alan- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: empty preacct and accounting section

2013-09-25 Thread Arran Cudbard-Bell
On 25 Sep 2013, at 21:20, WorkingMan wrote: > I have been seen this weird message for two days now. I setup PPTP and IPSec > (ikev1) with freeradius + mysql. > > In both cases I see Access-Acccept and in Accounting-Request I see these two > message: > > WARNING: Empty p

empty preacct and accounting section

2013-09-25 Thread WorkingMan
I have been seen this weird message for two days now. I setup PPTP and IPSec (ikev1) with freeradius + mysql. In both cases I see Access-Acccept and in Accounting-Request I see these two message: WARNING: Empty preacct section. Using default return values. WARNING: Empty accounting section

Re: FreeRADIUS Accounting Logging to Two Separate Locations Simultaneously

2013-09-05 Thread Chris Decker
> > > > Thanks, > Chris > > > P.s. My apologies for replying via the digest - you replied before I had time > to switch off of digests. > > > >> Date: Thu, 5 Sep 2013 19:11:35 +0100 >> From: Arran Cudbard-Bell >> To: FreeRadius users mailin

Re: FreeRADIUS Accounting Logging to Two Separate Locations Simultaneously

2013-09-05 Thread Chris Decker
dis module description in the 2.1.1 changelog? Thanks, Chris P.s. My apologies for replying via the digest - you replied before I had time to switch off of digests. > Date: Thu, 5 Sep 2013 19:11:35 +0100 > From: Arran Cudbard-Bell > To: FreeRadius users mailing list > >

FreeRADIUS Accounting Logging to Two Separate Locations Simultaneously

2013-09-05 Thread Chris Decker
All, I could use some help in understanding my options for the following scenario: In our environment, FreeRADIUS currently writes its Accounting logs to the local drive - one file per authorized client. In addition to the local logging, the Security group wants the Accounting logs sent to

Re: FreeRADIUS Accounting Logging to Two Separate Locations Simultaneously

2013-09-05 Thread Alan Buxey
The default install comes with a few accounting virtual servers that you can use. I'd strongly advise one of the or of band asynchronous ones. If you use UDP syslog is not blocking. .. it is fire and forget. .. so if you might lose packets if you have congested links or a disruption be

Re: FreeRADIUS Accounting Logging to Two Separate Locations Simultaneously

2013-09-05 Thread CHRISTOPHER SHELDON DECKER
Alan, Thanks for responding. I'm from the Security group so I'm not intimately familiar with FreeRADIUS - can you please elaborate on how it would work off we set up a Virtual Accounting server? Sent from my iPhone > On Sep 5, 2013, at 5:53 PM, Alan Buxey wrote: > >

Re: FreeRADIUS Accounting Logging to Two Separate Locations Simultaneously

2013-09-05 Thread Arran Cudbard-Bell
On 5 Sep 2013, at 18:29, Chris Decker wrote: > All, > > I could use some help in understanding my options for the following scenario: > In our environment, FreeRADIUS currently writes its Accounting logs to the > local drive - one file per authorized client. In additi

Re: Accounting packets not received

2013-08-01 Thread Arran Cudbard-Bell
On 1 Aug 2013, at 11:21, Phil Mayers wrote: > On 01/08/13 10:02, Gab Quidilla wrote: >> Hi, >> >> I ran radsniff. I had someone at our branch login to the switches, and >> still no accounting packets, while when I log into our switches, the >> accounting pac

Re: Accounting packets not received

2013-08-01 Thread Phil Mayers
On 01/08/13 10:02, Gab Quidilla wrote: Hi, I ran radsniff. I had someone at our branch login to the switches, and still no accounting packets, while when I log into our switches, the accounting packet is received. This is somewhat network-related yes? Entirely. If the accounting packets don&#

Re: Accounting packets not received

2013-08-01 Thread Gab Quidilla
Hi, I ran radsniff. I had someone at our branch login to the switches, and still no accounting packets, while when I log into our switches, the accounting packet is received. This is somewhat network-related yes? If it helps, here's the pic of the radsniff's output: http://i41.t

Re: Accounting packets not received

2013-08-01 Thread Phil Mayers
firewall was not, in fact, configured to "permit all" Authentication and authorization works fine, but accounting packets are not received. Is there any setting in the config files that I should check/modify? Like I said, use tcpdump to *confirm* the accounting packets are actually arriv

Re: Accounting packets not received

2013-08-01 Thread Arran Cudbard-Bell
On 1 Aug 2013, at 09:35, Gab Quidilla wrote: > Hi, thanks for the reply. > > I'm pretty sure that every NAS is sending accounting packets, because I am > using the same config on the switches here and for other branches, the only > difference is the shared secret used. &g

Re: Accounting packets not received

2013-08-01 Thread Gab Quidilla
Hi, thanks for the reply. I'm pretty sure that every NAS is sending accounting packets, because I am using the same config on the switches here and for other branches, the only difference is the shared secret used. On the first post is Pastebin links, with the accounting packet received

Re: Accounting packets not received

2013-08-01 Thread Phil Mayers
On 08/01/2013 08:51 AM, Gab Quidilla wrote: Good day, We have several branches configured for RADIUS. We are using freeradius 2.1.12 from CentOS 6.4 repo, plus daloradius 0.9.9, and MySQL. The problem is that accounting packets are not received here in our head office when accessing other

Accounting packets not received

2013-08-01 Thread Gab Quidilla
Good day, We have several branches configured for RADIUS. We are using freeradius 2.1.12 from CentOS 6.4 repo, plus daloradius 0.9.9, and MySQL. The problem is that accounting packets are not received here in our head office when accessing other branches' switches. When we access our own swi

Re: Accounting: visualize login, logout and commands

2013-06-03 Thread Alan Buxey
For switches, ensure that your are sending accounting and ensure on the radius server that you are recording sick packets. ... but what switches are you running as eg Cisco switches use Tacacs+ for sending details of all commands run. .. alan - List info/subscribe/unsubscribe? See http

Re: Accounting: visualize login, logout and commands

2013-06-03 Thread Alan DeKok
Roberto Carna wrote: > Dear, and what can I do to accont jus login, logout and sesson times fr > swithes and Linux boxes ??? As I said, see the switch documentation. FreeRADIUS *receives* accounting packets. It doesn't *create* them. if you want to receive data in an accoun

Re: Accounting: visualize login, logout and commands

2013-06-03 Thread Roberto Carna
Dear, and what can I do to accont jus login, logout and sesson times fr swithes and Linux boxes ??? Because by default I can see any accounting event. Thanks again. Roberto 2013/6/3 Alan DeKok > Roberto Carna wrote: > > Dear, I've implemented a Freeradius server for SSH Li

Re: Accounting: visualize login, logout and commands

2013-06-03 Thread Alan DeKok
Roberto Carna wrote: > Dear, I've implemented a Freeradius server for SSH Linux and Telnet > Switch authentication. > > How can I do in order to get accounting of logins, logouts and -if > possible- the commands executed by the users authenticated ??? See the switch docum

Accounting: visualize login, logout and commands

2013-06-03 Thread Roberto Carna
Dear, I've implemented a Freeradius server for SSH Linux and Telnet Switch authentication. How can I do in order to get accounting of logins, logouts and -if possible- the commands executed by the users authenticated ??? I'm using Daloradius to have a friendly graphical mode. Th

Re: Issue with radius accounting

2013-05-26 Thread Alan DeKok
Arvind Bahuguni wrote: > I am not interested in any argument, i wanted to check what may be the > problem with my radius server as accounting is successful with free > radius on other server. You were given an answer. You could have believed it, or asked a clarifying question. Ins

Re: Issue with radius accounting

2013-05-26 Thread A . L . M . Buxey
Hi, >I am not interested in any argument, i wanted to check what may be the >problem with my radius server as accounting is successful with free radius >on other server. ..and as per response to emails you are sending me directly, this is nothing to do with the RADIUS serv

Re: Issue with radius accounting

2013-05-25 Thread Arvind Bahuguni
I am not interested in any argument, i wanted to check what may be the problem with my radius server as accounting is successful with free radius on other server. On May 26, 2013 6:51 AM, wrote: > Send Freeradius-Users mailing list submissions to > freeradius-users@lists.freeradi

Re: Issue with radius accounting

2013-05-25 Thread Alan DeKok
On 2013-05-25, at 12:39 PM, Arvind Bahuguni wrote: > Hi Alan, > I am suspecting some radius setting on my server because free radius on other > server is responding and authentication and accounting is successful > For one, you need to edit your posts. It's ridiculous to

Re: Issue with radius accounting

2013-05-25 Thread Arvind Bahuguni
Hi Alan, I am suspecting some radius setting on my server because free radius on other server is responding and authentication and accounting is successful. On May 24, 2013 7:56 PM, wrote: > Send Freeradius-Users mailing list submissions to > freeradius-users@lists.freeradius.org

Re: issue with radius accounting

2013-05-24 Thread Alan DeKok
Arvind Bahuguni wrote: > Hi, > Need help in resolving radius issues. My radius server is not > processing accounting packets, radius server is sending access-accept > but not proceeding further with accounting, it will send access-accept > and start waiting for another request.

issue with radius accounting

2013-05-23 Thread Arvind Bahuguni
Hi, Need help in resolving radius issues. My radius server is not processing accounting packets, radius server is sending access-accept but not proceeding further with accounting, it will send access-accept and start waiting for another request. Looks like some radius server setting issues

Re: AAA Accounting Relay

2013-05-08 Thread Fajar A. Nugraha
On Wed, May 8, 2013 at 3:23 PM, wrote: > Hi, > >>What we would like to do is to send both Auth and Accounting requests to a >>AAA server and then forward just the accounting records to another AAA >>server that is back-ended to MySQL. > > yes, just

Re: AAA Accounting Relay

2013-05-08 Thread A . L . M . Buxey
Hi, >What we would like to do is to send both Auth and Accounting requests to a >AAA server and then forward just the accounting records to another AAA >server that is back-ended to MySQL. yes, just proxy the accounting - either using some unlang and proxy.conf or by using

AAA Accounting Relay

2013-05-08 Thread Raithatha, Divyesh
Newbie question for the group. Has anyone successfully set up a Radius Relay for Accounting as this older article for LDAP lists? http://freeradius.org/radiusd/doc/ldap_howto.txt What we would like to do is to send both Auth and Accounting requests to a AAA server and then forward just the

Re: Not processing accounting packet

2013-05-01 Thread Alan DeKok
Tyller D wrote: > The process I'm using is as follows. User connects to landing page, > landing page sends access-request to server with users details. > FreeRADIUS then sends a COA to the NAS to change the state and apply > attributes. However when FreeRADIUS gets the accounting

Re: Not processing accounting packet

2013-05-01 Thread Tyller D
Ok, so the problem lies somewhere in the originate-coa file. If I remove that file from the sites-enable accounting-messages are handled fine. But if I don't have that defined I get this error when trying to send CoA Wed May 1 12:39:03 2013 : Info: WARNING: Unknown destination 172.16.2

Not processing accounting packet

2013-05-01 Thread Tyller D
s. However when FreeRADIUS gets the accounting-start packet, it does nothing with it. Can someone please tell me how I can log this normally in radacct table? In my accounting section i have accounting { sql } sql_xlat finished rlm_sql (sql): Released sql socket id: 4 expand: %{sql:SELECT IF

Re: Cellular Roaming Accounting

2013-04-09 Thread Alan DeKok
Gerry Gasca wrote: > I have recently inherited working on a freeRadius on openSUSE server on > a cellular implementation. I'll be upfront that my Linux skills are > minimal and I know nothing about freeRadius. Posting here is a good start. > I don't know what version of freeRadius we are runni

Cellular Roaming Accounting

2013-04-09 Thread Gerry Gasca
I have recently inherited working on a freeRadius on openSUSE server on a cellular implementation. I'll be upfront that my Linux skills are minimal and I know nothing about freeRadius. I don't know what version of freeRadius we are running I was afraid to run radiusd -v because the man page said

Re: Get Stop in accounting do some action

2013-03-06 Thread Mehdi Ravanbakhsh
{ if (Acct-Status-Type == 'Stop') { } } LOG file : [] # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default rlm_sql (sql): Reserving sql so

Re: Replicate accounting packets to multiple servers

2013-03-04 Thread Alan DeKok
Shreya Shah wrote: > How can I replicate accounting packets to multiple servers when I have > only one realm ? Read raddb/modules/replicate > I have setup replicate and replicate-to realm in > accounting section and also home_server and pool in proxy.conf but > replication onl

Replicate accounting packets to multiple servers

2013-03-04 Thread Shreya Shah
Hi, How can I replicate accounting packets to multiple servers when I have only one realm ? I have setup replicate and replicate-to realm in accounting section and also home_server and pool in proxy.conf but replication only works for the first home server. It wouldn't replicate accounting t

Re: Get Stop in accounting do some action

2013-03-03 Thread Mehdi Ravanbakhsh
13, at 11:32, Mehdi Ravanbakhsh wrote: > > > Hello everyone > > > > I need to update some check and replay attribute in database when get > stop in accounting and the session is finish > > > > i need to know in which section of virtual server file ( > site

Re: Get Stop in accounting do some action

2013-03-03 Thread Arran Cudbard-Bell
On 3 Mar 2013, at 11:32, Mehdi Ravanbakhsh wrote: > Hello everyone > > I need to update some check and replay attribute in database when get stop > in accounting and the session is finish > > i need to know in which section of virtual server file ( > sites-enabl

Get Stop in accounting do some action

2013-03-03 Thread Mehdi Ravanbakhsh
Hello everyone I need to update some check and replay attribute in database when get stop in accounting and the session is finish i need to know in which section of virtual server file ( sites-enabled/default) i need to put unlang script (and/or perl script) ? and how i can check in

Re: few accounting records with same radacctid

2013-02-08 Thread A . L . M . Buxey
Hi, >In ma accounting table there are many records with the same radacctid for >one username. as Phil says - and can be seen, different called-station-id - and different (NAS id) IP address - what are your accounting statements ? alan - List info/subscribe/unsubscribe? Se

Re: few accounting records with same radacctid

2013-02-08 Thread Phil Mayers
On 02/08/2013 09:04 AM, Hocine M wrote: nobody? The only thing that stands out is the Called-Station-Id is different. This suggests to me that something about the accounting packets changes as the client moves around (associates to different APs) and that the accounting SQL queries you are

Re: few accounting records with same radacctid

2013-02-08 Thread Hocine M
nobody? Le 07/02/2013 13:25, Hocine M a écrit : hello, In ma accounting table there are many records with the same radacctid for one username. In this case | 23547 | SESS-50639-54b752-237134-642 | t...@univ-rouen.fr | univ-rouen.fr| 2013-02-07 12:38:54 | NULL

Re: freeradius accounting of cdr and quotes for string attributes

2013-02-07 Thread Kelly Roestel
Alan, Thank you for the info. Kelly 206.331.3525o 425.270.8481c On Wed 06 Feb 2013 11:41:42 AM PST, Alan DeKok wrote: - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

few accounting records with same radacctid

2013-02-07 Thread Hocine M
hello, In ma accounting table there are many records with the same radacctid for one username. In this case | 23547 | SESS-50639-54b752-237134-642 | t...@univ-rouen.fr | univ-rouen.fr| 2013-02-07 12:38:54 | NULL| 192.168.58.5 | 00-26-3E-70-99-C0:eduroam | 10.54.1.19

Re: freeradius accounting of cdr and quotes for string attributes

2013-02-06 Thread Alan DeKok
Kelly Roestel wrote: > Yes that works. However, if the attribute is empty there will still be > quotes in the csv file. If you want generic string manipulation code, use a real programming language. Or, write a "csv" module to do what you want. The linelog module is intended to write *line

Re: freeradius accounting of cdr and quotes for string attributes

2013-02-06 Thread Kelly Roestel
Matthew, Yes that works. However, if the attribute is empty there will still be quotes in the csv file. Example. using format = "\"%{Client-IP-Address}\",\"%{Calling-Station-Id}\",\"%{User-Name}\"" would yield, "x.x.x.x","station-x","Kelly" if %{Calling-Station-Id} was null this format woul

Re: freeradius accounting of cdr and quotes for string attributes

2013-02-06 Thread Matthew Newton
On Tue, Feb 05, 2013 at 05:18:13PM +, Kelly Roestel wrote: > If you look at the detailed format, these string attributes are > enclosed. But there seems to be no option in linelog module. linelog { ... format = "\"%{Client-IP-Address}\",\"%{Calling-Station-Id}\",\"%{User-Name}\"" ... }

freeradius accounting of cdr and quotes for string attributes

2013-02-05 Thread Kelly Roestel
My question is this, I need to write CDR information out using the linelog module in csv format. The requirement is that all string attributes need to be enclosed in double quotes. How does one go about doing this? If you look at the detailed format, these string attributes are enclosed. Bu

Re: user session & accounting mgmt

2013-02-05 Thread Alan DeKok
for the user to the NAS. No. RADIUS doesn't do that. The NAS maintains the timer. The NAS disconnects the user after one hour. The RADIUS server does nothing. > 2) where freeradius logs the accounting information? I have not > configured the mysql. Does freeradius supports f

user session & accounting mgmt

2013-02-05 Thread Suresh Kumar Subramanian
essage? Please help. 2) where freeradius logs the accounting information? I have not configured the mysql. Does freeradius supports flat file for storing accounting records.? Thanks Suresh. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Configuring accounting on Freeradius server

2013-02-04 Thread Deepti kulkarni
So my radius client was missing some configuration. Now the client sends accounting packets to the server. Thanks for the help on that. Deepti On Sun, Feb 3, 2013 at 7:56 PM, Alan DeKok wrote: > Deepti kulkarni wrote: > > No, my "production" client is not sending any accou

Re: Error syntax in sql accounting.

2013-02-04 Thread Alan DeKok
Hocine M wrote: > Hi everybody, > > I always have an error in radius.log file : > > Mon Feb 4 16:16:52 2013 : Error: [sql_acct] Couldn't insert SQL > accounting START record - Erreur de syntaxe pr�s de '' � la ligne 1 Don't edit the configuration file

Error syntax in sql accounting.

2013-02-04 Thread Hocine M
Hi everybody, I always have an error in radius.log file : Mon Feb 4 16:16:52 2013 : Error: [sql_acct] Couldn't insert SQL accounting START record - Erreur de syntaxe pr?s de '' ? la ligne 1 Mon Feb 4 16:17:01 2013 : Error: [sql_acct] Couldn't insert SQL accounting STAR

Re: Configuring accounting on Freeradius server

2013-02-03 Thread Alan DeKok
Deepti kulkarni wrote: > No, my "production" client is not sending any accounting packets. I am > completely not sure how that can be set. If the NAS documentation doesn't say how to configure accounting, then it doesn't do accounting. Alan DeKok. - List info/subsc

Re: Configuring accounting on Freeradius server

2013-02-03 Thread Deepti kulkarni
On Fri, Feb 1, 2013 at 5:50 PM, Alan DeKok wrote: > Deepti kulkarni wrote: > > Thank you the answers. I see that my freeradius server is receiving > > accounting request when I use "radclient" and it logs it as well. > > That's really not the point, is

Re: Configuring accounting on Freeradius server

2013-02-01 Thread Alan DeKok
Deepti kulkarni wrote: > Thank you the answers. I see that my freeradius server is receiving > accounting request when I use "radclient" and it logs it as well. That's really not the point, is it? The point is whether or not the *production* client sends accounting packets

Re: Configuring accounting on Freeradius server

2013-02-01 Thread Deepti kulkarni
Thank you the answers. I see that my freeradius server is receiving accounting request when I use "radclient" and it logs it as well. As you said that the client is responsible for sending accounting requests to the server, I am new to radius server and PAM, so not sure how this is d

Re: Configuring accounting on Freeradius server

2013-02-01 Thread Alan DeKok
Deepti kulkarni wrote: > The FAQ I looked at doesnt mention how-to configure accounting. Maybe I > am looking at wrong place? http://wiki.freeradius.org/Home Does that look like the FAQ? There *IS* a FAQ link on that page. Read it. The FAQ describes what to do when you don

Re: Configuring accounting on Freeradius server

2013-01-31 Thread Deepti kulkarni
On Thu, Jan 31, 2013 at 1:43 PM, Alan DeKok wrote: > Deepti kulkarni wrote: > > I am running Freeradius Server version 2.1.10 on a debian machine (64 > > bit). I have a debian client (using pam_radius_auth) for authentication > > and accounting. My client can authenticat

Re: Configuring accounting on Freeradius server

2013-01-31 Thread Alan DeKok
Deepti kulkarni wrote: > I am running Freeradius Server version 2.1.10 on a debian machine (64 > bit). I have a debian client (using pam_radius_auth) for authentication > and accounting. My client can authenticate into the the radius server, > however, I dont see any accounting being d

Configuring accounting on Freeradius server

2013-01-31 Thread Deepti kulkarni
Hello, I am running Freeradius Server version 2.1.10 on a debian machine (64 bit). I have a debian client (using pam_radius_auth) for authentication and accounting. My client can authenticate into the the radius server, however, I dont see any accounting being done. Attached is the radiusd -X

Re: Usage Limit and Accounting Plan

2013-01-22 Thread Russell Mike
On Tue, Jan 22, 2013 at 10:17 AM, Sokphak TOUCH wrote: > Thanks Russell for your respond. It would more appreciate if you can share > some document. At the mean time I will doing research about it. > > Regards, > Sokphak > > Understand the concept here, it is very easy with FreeRadius http://wiki.

Re: Usage Limit and Accounting Plan

2013-01-22 Thread Russell Mike
1. I need to limit the user monthly usage, for example bandwidth 2Mbps with 5GB monthly usage. 1a.) You would not need script, you need "RLM SQLCOUNTER" to limit daily/weekly/monthly traffic quota 1b.) you need to control the bandwidth using radius and radius client attributes, such as WISPr-Band

Re: Usage Limit and Accounting Plan

2013-01-22 Thread Sokphak TOUCH
Thanks Russell for your respond. It would more appreciate if you can share some document. At the mean time I will doing research about it. Regards, Sokphak On Tue, Jan 22, 2013 at 4:52 PM, Russell Mike wrote: > > > > 1. I need to limit the user monthly usage, for example bandwidth 2Mbps > with

Re: accounting question

2013-01-22 Thread Phil Mayers
On 01/21/2013 06:47 AM, Tzvika Gelber wrote: i'm looking to focus a problem i have - i think the main issue is not freeradius but it's a good place to ask. I have a server that's do both Radius and accounting for Wifi random users (web redirected system). now i just dis

accounting question

2013-01-20 Thread Tzvika Gelber
i'm looking to focus a problem i have - i think the main issue is not freeradius but it's a good place to ask. I have a server that's do both Radius and accounting for Wifi random users (web redirected system). now i just discovered that to authenticate the users i have to use the

Usage Limit and Accounting Plan

2013-01-20 Thread Sokphak TOUCH
Dear Team, I just done installation and configure FreeRadius for PPPoE users. And I need more feature to meet user requirement. Currently, it already work for bandwidth limit by use CISCO-AVpair attr to return to CISCO LNS. 1. I need to limit the user monthly usage, for example bandwidth 2Mbps wit

Accounting with Freeradius.

2012-12-05 Thread Tzvika Gelber
I have one Freeradius server that i need to give to an outsource client of mine, the problem is that he is not a very Linux oriented (to put it gently) and have even less skills in any form of SQL. he is going to cover some of our tests and some of them are the accounting side of connected

Re: accounting data

2012-11-14 Thread Periko Support
nter module. This module is more flexible and preferred. > > If it were me I'd jump directly to rlm_sqlcounter. Among other things, > it uses data stored by sql accounting, where the query is fully > customizable. So you can (for example) change it to "if two acct-stop > pa

Re: accounting data

2012-11-12 Thread Fajar A. Nugraha
jump directly to rlm_sqlcounter. Among other things, it uses data stored by sql accounting, where the query is fully customizable. So you can (for example) change it to "if two acct-stop packets arrive with the same Acct-Unique-Session-ID, update the record to use whicever is higher"

Re: accounting data

2012-11-11 Thread Periko Support
nice But please don't > send the output of "radtest". I didn't ask for it. It's not necessary. > > And you've deleted big chunks of the debug output. That *might* have > helped. > > What does the "counter" module configuration look

Re: accounting data

2012-11-11 Thread Alan DeKok
t. It's not necessary. And you've deleted big chunks of the debug output. That *might* have helped. What does the "counter" module configuration look like? Have you edited it? If so, why? The default configuration works. > Nos a accounting stop: ... > rlm_counter:

Re: accounting data

2012-11-10 Thread Periko Support
e counter must be >> lower? > > Only if the NAS is sending accounting packets. > > What does the debug output say? > > Alan DeKok. > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html This is the output: radtest alice test 127

Re: accounting data

2012-11-10 Thread Alan DeKok
Periko Support wrote: > This works, but I would like to understand, I can try that steps a > lot times and every time it give me the same result: 1770, doesn't > suppose that every time I run the same steps the counter must be > lower? Only if the NAS is sending accounting

Re: accounting data

2012-11-09 Thread Periko Support
My Fault, this message wasn't finish, I will continue here.: On Fri, Nov 9, 2012 at 1:09 PM, Periko Support wrote: > Hi. > > Centos 5.x > FreeRadius 2.1.1. > > I'm reading the book freeradius beginners Guide chapter 6: accounting. > > Page 139. > >

Re: Accounting and DialupAdmin

2012-11-08 Thread Erich Titl
Hi Alan on 08.11.2012 21:06, Alan DeKok wrote: > Erich Titl wrote: >> Yes, I know if I also change the attribute to Cleartext-Password. Any >> plans to support NT-Password hashes? > > In dialup_admin? Send a patch. This works for me diff -urN freeradius-server-2.2.0.orig/dialup_admin/conf/ad

Re: Accounting and DialupAdmin

2012-11-08 Thread Alan DeKok
Erich Titl wrote: > Yes, I know if I also change the attribute to Cleartext-Password. Any > plans to support NT-Password hashes? In dialup_admin? Send a patch. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Accounting and DialupAdmin

2012-11-08 Thread Erich Titl
Alan on 08.11.2012 19:10, Alan DeKok wrote: > Erich Titl wrote: >> # >> # can be one of crypt,md5,clear >> # >> general_encryption_method: crypt >> >> this appears to be used by the GUI >> >> Now with MSCHAP this appears not to work simply out of the box. Does one >> need to hack that code or is t

Re: Accounting and DialupAdmin

2012-11-08 Thread Alan DeKok
Erich Titl wrote: > # > # can be one of crypt,md5,clear > # > general_encryption_method: crypt > > this appears to be used by the GUI > > Now with MSCHAP this appears not to work simply out of the box. Does one > need to hack that code or is there a canonical way to be used for M$ W7 > (P)EAP aut

Accounting and DialupAdmin

2012-11-08 Thread Erich Titl
Hi gents FR 2.0 I added a user to my datebase using the dialup_admin interface. The radcheck table shows the following mysql> select * from radcheck -> ; ++--+---+++ | id | username | attribute | op | value

Re: Mysql, Accounting and DialupAdmin

2012-11-08 Thread Fajar A. Nugraha
On Thu, Nov 8, 2012 at 4:27 PM, Erich Titl wrote: > I _guess_ it shows some accounting > > rad_recv: Accounting-Request packet from host 194.124.158.62 port 47037, > id=165, length=135 > Acct-Session-Id = "509ACAB9-000F" > Acct-Status-Type = Start

Re: Mysql, Accounting and DialupAdmin

2012-11-08 Thread Erich Titl
on 08.11.2012 09:01, Fajar A. Nugraha wrote: ... >> >> It is a ZyXEL, so basically a black box, even to the local vendor. > > > Just to be sure, you HAVE enabled sql in accounting section, right? I guess the fact that I have entries in the radacct table which correspond

Re: Mysql, Accounting and DialupAdmin

2012-11-08 Thread Fajar A. Nugraha
On Thu, Nov 8, 2012 at 2:08 PM, Erich Titl wrote: >>> 2) I could see login and logout information, but no data usage, e.g. >>> dowload and upload sizes appear to be zeroes. >> >> Some NAS (e.g. AP's flashed with dd-wrt) simply doesn't send >> accoun

Re: Mysql, Accounting and DialupAdmin

2012-11-08 Thread Fajar A. Nugraha
On Thu, Nov 8, 2012 at 2:43 PM, Erich Titl wrote: > Hi Fajar > > on 08.11.2012 08:16, Fajar A. Nugraha wrote: > ... > >> >> IIRC only one of them will be used. I suggest you dop MD5 (since it's >> useless for your purpose) and Cleartext (you don't want that, right?) >> and verify you use the corre

Re: Mysql, Accounting and DialupAdmin

2012-11-07 Thread Erich Titl
Hi Fajar on 08.11.2012 08:16, Fajar A. Nugraha wrote: ... > > IIRC only one of them will be used. I suggest you dop MD5 (since it's > useless for your purpose) and Cleartext (you don't want that, right?) > and verify you use the correct NT-Password (use "smbencrypt" if you > haven't already done

Re: Mysql, Accounting and DialupAdmin

2012-11-07 Thread Fajar A. Nugraha
purpose) and Cleartext (you don't want that, right?) and verify you use the correct NT-Password (use "smbencrypt" if you haven't already done so) >>> 2) I could see login and logout information, but no data usage, e.g. >>> dowload and upload sizes appear t

Re: Mysql, Accounting and DialupAdmin

2012-11-07 Thread Erich Titl
NT-Password| := | 7CE21F17C0AEE7FB9CEBA532D0546AD6 | | 3 | test | Cleartext-Password | := | 1234 | ++--+++--+ > >> >> 2) I could see login and logout information, but no data usage, e.g. >> dowload and upload sizes appear to be zeroes. > > Some NAS (e.g. AP's flashed w

Re: Mysql, Accounting and DialupAdmin

2012-11-07 Thread Fajar A. Nugraha
no data usage, e.g. > dowload and upload sizes appear to be zeroes. Some NAS (e.g. AP's flashed with dd-wrt) simply doesn't send accounting packets. Blame your NAS :P ... or to be more acccurate, look at your NAS documentation (or ask the vendor) how to get it to send accounting packets. --

Mysql, Accounting and DialupAdmin

2012-11-07 Thread Erich Titl
Hi Folks I succeeded to get my set up running with FR 2.2.0 and Mysql, e.g. I can connect through a ZyXEL NWA 3160 using credentials in the MySQL database using a M$ Windows 7 client. Everything is still quite raw and blurry to me. Could someone point me to the right dos for the following? 1) I

Re: Ignoring too-frequent accounting packets from buggy NAS

2012-10-26 Thread Phil Mayers
. *twilight zone music* Ha spooky! N.B. I note the module comments might confuse people, since it doesn't mention being run in "accounting" but seems to support it. Ah yes, fixed the examples. I was about to say "that worked like a charm" then radiusd segfaulted :o( I'll

Re: Ignoring too-frequent accounting packets from buggy NAS

2012-10-26 Thread Arran Cudbard-Bell
everything. *twilight zone music* > > Ha spooky! > > N.B. I note the module comments might confuse people, since it doesn't > mention being run in "accounting" but seems to support it. Ah yes, fixed the examples. -Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Ignoring too-frequent accounting packets from buggy NAS

2012-10-26 Thread Phil Mayers
doesn't mention being run in "accounting" but seems to support it. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

  1   2   3   4   5   6   7   8   9   10   >