On 08/28/2012 05:26 PM, Matthias Nagel wrote:
is incomplete, i.e. it only has as start time. The latter never will
be completed, because the stop message has already been processed and
acknowledged to the authenticator.
Aside from anything else - you need to handle this case. Accounting is
UD
Matthias Nagel wrote:
> This is correct, if one has some kind of key to identify a session that could
> be used as a database index. But unfortunately there are a lot of
> authenticators out there, that do not correctly generate radius accounting
> session ids. Basicly I see three different type
On 28 Aug 2012, at 23:05, Matthias Nagel wrote:
> Hello,
>
> Am Dienstag 28 August 2012, 23:11:57 schrieb Alan DeKok:
>> Matthias Nagel wrote:
>>> if two accounting messages for the same session are sent by the
>>> authenticator very quickly, the messages may be processed by the radius
>>> se
Yes yes RADIUS vendors should go die in a big fiery pit somewhere.
1) Verify your NAS supports the Class attribute correctly
(http://www.ietf.org/rfc/rfc2865.txt 5.25)
2) Implement the policies in raddb/policy.d/accounting (master:HEAD)
3) Submit patch to add unique index constraint on acctunique
Hello,
Am Dienstag 28 August 2012, 23:11:57 schrieb Alan DeKok:
> Matthias Nagel wrote:
> > if two accounting messages for the same session are sent by the
> > authenticator very quickly, the messages may be processed by the radius
> > server in the wrong order. This results into two sessions be
On Wed, Aug 29, 2012 at 4:11 AM, Alan DeKok wrote:
> Matthias Nagel wrote:
>> 5) Thread #2 terminates first and the accounting stop message is written to
>> the PostgreSQL database. The SQL UPDATE statement fails, because there is no
>> entry for this session that could be updated, as the start
Matthias Nagel wrote:
> if two accounting messages for the same session are sent by the authenticator
> very quickly, the messages may be processed by the radius server in the wrong
> order. This results into two sessions being accounted instead of one. The
> second "phantom" session stays open
Hello everybody,
if two accounting messages for the same session are sent by the authenticator
very quickly, the messages may be processed by the radius server in the wrong
order. This results into two sessions being accounted instead of one. The
second "phantom" session stays open for ever, be
Hi,
I installed freeradius and configured it with LDAP and installed pptp also
in debian lenny. I can login to radius server from windows and I have VPN
connection and internet.
Now I want to restrict my VPN users' bandwidth and internet charge(for
example 4G charge for each user), but I don't kno
--
>
> Message: 7
> Date: Thu, 12 Mar 2009 12:17:56 +
> From: a.l.m.bu...@lboro.ac.uk
> Subject: Re: Re: No accounting Freeradius + EAP/PEAP/TLS
> To: FreeRadius users mailing list
>
> Message-ID: <20090312121756.gd28...@lboro.ac.uk&
>The Zinwell manual didn't say anything about enabling account.
Well, there is nothing you can do on the radius server to make AP send
accounting.
>My Freeradius is configured with default values, only things I changed was to
>use EAP/PEAP and freeradius, at radius database I configured tables N
Leonardo Mártyres wrote:
> The Zinwell manual didn't say anything about enabling account.
Then it doesn't do accounting. Nothing you do to FreeRADIUS will make
the Zinwell machine send accounting packets.
Throw the Zinwell box in the garbage, and buy an access point that has
the features you
Hi,
> The Zinwell manual didn't say anything about enabling account. My Freeradius
> is configured with default values, only things I changed was to use EAP/PEAP
> and freeradius, at radius database I configured tables NAS, Usergroup,
> radcheck ang groupreply(Auth-Type:=EAP).
if it doesnt men
d you tell me thar have to be another think at GroupReply and suggest some
nas devices?
Thanks.
> Date: Thu, 12 Mar 2009 00:11:44 +0100
> From:
> Subject: Re: Re: No accounting Freeradius + EAP/PEAP/TLS
> To: "FreeRadius users mailing list"
>
> Message
>I used wireshark and didn't see anything referred about Account Packages. Only
>thing I see is Radius-Access Resquest, Access Challenges and Access Accept.
>
So read Zinwell documentation about enabling accounting.
Ivan Kalik
Kalik Informatika ISP
-
List info/subscribe/unsubscribe? See http://
Hi Ivan,
I used wireshark and didn't see anything referred about Account Packages. Only
thing I see is Radius-Access Resquest, Access Challenges and Access Accept.
Below are informations from my Zinwell G220 Plus, but away, o receibe an error
as you see. Do you know what mean?
Jan 1 18:55:1
>So, I'm very newer with linux also freeradius. If you permit, how can I see if
>the NAS send the account package? I'm using a ZINWELL G220 Plus and TP LInk
>WA501G.
First run freeradius in debug mode (radiusd -X). If you don't see
accounting packets use wireshark. If wireshark can't see them ch
>Is your NAS sending them? If it is, there is a firewall stopping them.
>Ivan Kalik
>Kalik Informatika ISP
Thanks Ivan for fast reply,
So, I'm very newer with linux also freeradius. If you permit, how can I see if
the NAS send the account package? I'm using a ZINWELL G220 Plus and TP LInk
>I get a little problem with Ubuntu 8.04 + freeradius + EAP/TLS/PEAP + mysql,
>'couse I don't receive an Accounting package even response. In Ubuntu is
>installed freeradius, mysql and open ssl.
>
Is your NAS sending them? If it is, there is a firewall stopping them.
Ivan Kalik
Kalik Informatik
Hi there,
I get a little problem with Ubuntu 8.04 + freeradius + EAP/TLS/PEAP + mysql,
'couse I don't receive an Accounting package even response. In Ubuntu is
installed freeradius, mysql and open ssl.
Could someone help me with this?
Thanks
_
Hello,
freeradius 1.0.1 is fine working. Authentifikation is over winbind to a M$
Domain.
With Radiusreport i see Logon and Logoff times and total times for any
Users.
But i will the accounting for traffic off all users.
any help, for settings in radius.conf or must i installed any other
packages
21 matches
Mail list logo
