Hi All,
I am new to using freeradius. I am in the process of integrating freeradius
with "ipoque", which is a bandwidth control device. IPOQUE expects to see an
accounting request from the radius server with specific attributes embedded, in
order to control the bandwidth of the logged-in user. The scenario I am trying
to realize is as follows:
1.. For each user wishing to authenticate with freeradius, I have added two
attributes in "users.conf" file. The first attribute is "Framed-IP-Address",
while the second is a VSA "ipoque-class".
2.. When the user successfully authenticate with the freeradius, and after
the freeradius sends Access-Accept, I want the radclient.exe to automatically
send Accounting request to ipoque, including the following: User-Name,
Framed-IP-Address, Accounting-Status-Type= Start and ipoque-class as configured
in users.conf file. This should inform ipoque device about the user IP and the
class of that user in order to apply th proper bandwidth rules for that user
category.
I have started by creating a test user in users.conf as follows:
shafzeen Auth-Type := Local, User-Password == "1234"
Framed-IP-Address = "192.168.1.12",
ipoque-class = "raduser"
then I created a text file named "ipoquestart.txt" with the following content:
User-Name = "%{User-Name}",
Framed-IP-Address = "%{reply:Framed-IP-Address}",
Acct-Status-Type = Start,
ipoque-class = "%{reply:ipoque-class}"
Then in the radiusd.conf, in the modules section I have defined the following
(The ipoque device IP is 192.168.0.1, secret "prx"):
exec Start {
wait = yes
program = "${bindir}/radclient.exe -d ${raddbdir} -f
${bindir}/ipoquestart.txt -x -s 192.168.1 acct prx"
input_pairs = reply
output_pairs = reply
packet_type = Access-Accept
}
and in the instantiate section I have added Start. Also, in the post-auth I
have put Start trying to send the radclient acct request towards ipoque.
I have started freeradius in debug mode, and I noticed that the radclient is
sending Framed-IP-Address as "0.0.0.0", and "ipoque-class"= "",
and after that it is sending the reply with the needed values of
Framed-IP-Address and "ipoque-class". I know there is some where something
wrong I am doing, but I need someone to analyse what is happening and tell me
how to correct it! Thanks-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
