Hi all!
I have latest freeradius snapshot (23.06.2003) and mysql as backend.
At start i had problem with limiting the time of dialup users.
After few changes in sql.conf and cisco configuration everything seems fine and user
cannot login when AcctSessionTime in radacct is more then i defined in radgroupcheck
(Max-All-Session := 120).
BUT user is not disconnecting when the time for him is over :)
Cisco some config:
aaa accounting update periodic 1
sql.conf:
sqlcounter noresetcounter {
counter-name = Max-All-Session-Time
check-name = Max-All-Session
sqlmod-inst = sql
key = User-Name
reset = never
reply = "The limit of your prepaid account has been reached!"
query = "SELECT SUM(AcctSessionTime) FROM radacct WHERE UserName='%{%k}'"
}
Looked for debug output of freeradius (./radiusd -X) and noticed that
packets from cisco arived and they are have being checked by sql module in accounting
{} session.
If I include noresetcounter in accounting session then i recieve error:
"SQL Counter" modules aren't allowed in 'accounting' sections -- they have no such
method.
And by my thoughts i have only two ways after that error:
1. Using rlm_perl or rlm_python and disconnecting users via snmp
2. Looking in sql module and righting some stored procedures?
Any opinions?
Cheers, SaLiK.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
