"Mike Spenard" <[EMAIL PROTECTED]> wrote:
> Is it possible to have a NAS client update data in a sql DB backend on
> the radius server by pushing data to it using accounting packets.

  Sure.  Just update the SQL queries used by the server.

  Alan DeKok.
> The backend DB contains TimeRemaining for a client end node.
> The client end node connects and the NAS reads how much TimeRemaining to
> allow the node.
> The NAS deducts var TimeUsed from TimeRemaining and pushes it to the
> backend  radius server DB using an accounting packet.

  I don't see why you would want to do it that way.  The RADIUS
protocol already supports the Acct-Session-Time attribute, and the
server has an "sqlcounter" module, which does exactly what you want,
without modifying the NAS.

  I would suggest using the existing solution rather than writing your
own.  Having the NAS update "TimeRemaining" is a bad design, and means
that an attack on the NAS may result in users gaining access when you
don't want them to have access.

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to