Another simple one (hopefully)... this server is running on FreeRadius 0.9.0
(new server coming in 3 weeks will have newest version of FreeRadius, for
now this version is what I have to work with).
To summarize what I am trying to accomplish...
- When an accounting start packet is received I need to pass that username
and user's IP address to the "startscript"
- When an accounting stop packet is received I need to pass that username
and user's IP address to the "stopscript"
With the goal of allowing the IP address (and user) access to certain
resources only when they are logged in (so I will have to pass that info to
the script eventually... baby steps... get freeradius to call the scripts
first, then worry about perfecting them :-) ...
for testing purposes, based on some vague examples I found whilst Googling,
I have tried the following in the users file (below my outright deny access
lines but above everything else of substance in the file). Users are able
to log on and off as normal, but the scripts don't seem to trigger (running
with -xx I get no errors, nor any reference to either script mentioned).
DEFAULT Acct-Status-Type == "Start"
Exec-Program = "/usr/local/bin/stopscript"
DEFAULT Acct-Status-Type == "Stop"
Exec-Program = "/usr/local/bin/startscript"
The scripts are both owner/group to the radius user, have read/execute
permissions, and otherwise work when executed manually when su'd to the
radius user.
Is there something that needs to be configured in radiusd.conf in addition
for this to work, perhaps some compile-time option?
I get the impression that the above method may have been superceded by doing
such things via exec stanzas in radiusd.conf, but I wasn't able to Google up
any examples of that particular scenario that were a close enough fit to
what I am trying to do.
Any examples, pointers to docs, hints or other means to that end, in
whatever manner is currently accepted as being preferred are appreciated.
Thanks,
>>>>> Mike <<<<<
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
