On 10/05/2011 09:26 AM, Alan DeKok wrote:
Phil Mayers wrote:
I guess that's ok, in that it stops an unresponsive realm blocking other
realms, but wouldn't another solution be to add a config item to the
detail reader to drop packets which are>X seconds old?

   if (Acct-Delay-Time>  3600) {
        ok
   } else {
        ... do proxy ....
   }


Ah ha! Clever. I had forgotten the detail reader created/updated that attribute. Yay FreeRADIUS!



Or, modify the detail reader to write a "done" marker byte into records
which it has processed.

   That's a bit harder.

Tell me about it... we've got a home-grown system for logging DHCP requests via pcap (because ISC dhcpd can't do decent logging) and, along with a whole bunch of other crap, the process has to write to a logfile in chunks, with the ability to do this (mark one "row" as written)

It was amazingly unreliable... I eventually resorted to writing them to an sqlite database as a "spool", on the grounds that "marking" them done/ignored was easier that way.

One of these days I'll get the time to investigate FR DHCP...
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to