Hello Rohan -
On 3 Nov 2012, at 09:39, <[email protected]> wrote:
> Hugh,
>
> So does it mean that I wouldn't need to process the Start record as defined
> by: HandleAcctStatusTypes Start,Stop?
>
Yes - you would just use
HandleAcctStatusTypes Stop
> And in this way a session only gets inserted into the database only if the
> Stop record is processed?
>
Correct.
regards
Hugh
> On Sat, 3 Nov 2012 09:06:44 +1100
> Hugh Irvine <[email protected]> wrote:
>>
>> Hello Rohan -
>>
>> The easiest way to do this is to store only the Stop records, and calculate
>> the start time from the attributes present in the accounting stop request.
>>
>> Something like this (the value is in epoch seconds):
>>
>> Timestamp - Acct-Session-Time - Acct-Delay-Time
>>
>> For the crash I will need to see the logfile that immediately precedes it
>> together with the configuration file you are using.
>>
>> regards
>>
>> Hugh
>>
>>
>> On 3 Nov 2012, at 02:24, <[email protected]> wrote:
>>
>>> Hugh,
>>>
>>> Now that records are being written to the database, I want a single record
>>> per session that includes both Stop and Start times like below.
>>>
>>> User_Name, NAS_IP_Address, NAS_Port, Framed_IP_Address, Acct_Start_Time,
>>> Acct_Stop_Time, Acct_Session_ID
>>> jwilliams12 208.138.43.123 805306450 72.27.33.224 Nov 2, 2012 12:21:04 AM
>>> Nov 2, 2012 1:21:16 AM, erx TenGigabitEthernet 3/0/0.37:123-82:1830880926
>>>
>>> So the record is added to the accounting database at the end of a session
>>> and includes both Stop and Start times.
>>>
>>> Added to that is the issue I have where Radiator crashes when I try to use
>>> the Simultaneous-Use features.
>>>
>>> Thanks.
>>>
>>> On Fri, 2 Nov 2012 17:46:58 +1100
>>> Hugh Irvine <[email protected]> wrote:
>>>>
>>>> Hello Rohan -
>>>>
>>>> Can you please explain exactly what you are trying to do?
>>>>
>>>> It is normal for you to get two records in your accounting table, as that
>>>> is what you have configured.
>>>>
>>>> If you can tell us what you are trying to achieve we will be able to make
>>>> sensible suggestions.
>>>>
>>>> regards
>>>>
>>>> Hugh
>>>>
>>>>
>>>> On 2 Nov 2012, at 09:38, <[email protected]> wrote:
>>>>
>>>>> Thanks Michael,
>>>>>
>>>>>
>>>>>
>>>>> I was able to go further with the advice using the AuthByPolicy and
>>>>> AuthBy GROUP under the existing Handler. Only that two records are added
>>>>> to my accounting database for a single session - one at Start and one at
>>>>> Stop.
>>>>>
>>>>> <Handler NAS-Identifier="Juniper_E320_2">
>>>>> AddToRequest SERVICESTATUS = ACTIVE
>>>>> SessionDatabase SQLSDB
>>>>> # MaxSessions 1
>>>>> RejectHasReason
>>>>>
>>>>> AuthByPolicy ContinueAlways
>>>>> AuthBy SQLAccounting
>>>>> <AuthBy GROUP>
>>>>> AuthByPolicy ContinueWhileIgnore
>>>>> AuthBy xDSL
>>>>> </AuthBy>
>>>>>
>>>>>
>>>>> Regards,
>>>>>
>>>>> Rohan
>>>>>
>>>>>
>>>>>
>>>>> On Thu, 01 Nov 2012 17:45:18 -0400
>>>>>
>>>>> Michael wrote:
>>>>>
>>>>>> Looks like your "AuthBy xDSL" is accepting, therefore since the default
>>>>>> AuthByPolicy is ContinueWhileIgnore, it will stop at the xDSL authby and
>>>>>> the "AuthBy SQLAccounting" is not processed.
>>>>>
>>>>>>
>>>>>
>>>>>> I personally handle accounting in a separate handler. To me, handling
>>>>>> accounting and authorization in the same handler is tricky.
>>>>>
>>>>>>
>>>>>
>>>>>>
>>>>>
>>>>>>
>>>>>
>>>>>> Michael
>>>>>
>>>>>>
>>>>>
>>>>>>
>>>>>
>>>>>>
>>>>>
>>>>>>
>>>>>
>>>>>> On 01/11/12 05:07 PM, [email protected] wrote:
>>>>>
>>>>>>> Hugh,
>>>>>
>>>>>>>
>>>>>
>>>>>>> Config and logs attached.
>>>>>
>>>>>>>
>>>>>
>>>>>>>
>>>>>
>>>>>>> And the application crashed when testing Simultaneous-Use for both
>>>>>>> configurations below.
>>>>>
>>>>>>>
>>>>>
>>>>>>> In my AuthBy config:
>>>>>
>>>>>>> "DefaultSimultaneousUse 1" With "AuthAttrDef
>>>>>>> Simultaneous-Use,Simultaneous-Use,check"
>>>>>
>>>>>>>
>>>>>
>>>>>>> Or
>>>>>
>>>>>>>
>>>>>
>>>>>>> In my Handler:
>>>>>
>>>>>>> MaxSessions 1
>>>>>
>>>>>>>
>>>>>
>>>>>>>
>>>>>
>>>>>>>
>>>>>
>>>>>>> On Fri, 2 Nov 2012 07:19:09 +1100
>>>>>
>>>>>>> Hugh Irvine wrote:
>>>>>
>>>>>>>> Hello Rohan -
>>>>>
>>>>>>>>
>>>>>
>>>>>>>> We will need to see the configuration file (no secrets) together with
>>>>>>>> a trace 4 debug showing what is happening.
>>>>>
>>>>>>>>
>>>>>
>>>>>>>> regards
>>>>>
>>>>>>>>
>>>>>
>>>>>>>> Hugh
>>>>>
>>>>>>>>
>>>>>
>>>>>>>>
>>>>>
>>>>>>>> On 2 Nov 2012, at 05:53, wrote:
>>>>>
>>>>>>>>
>>>>>
>>>>>>>>> Hello,
>>>>>
>>>>>>>>>
>>>>>
>>>>>>>>> Why doesn't the following work?
>>>>>
>>>>>>>>>
>>>>>
>>>>>>>>>
>>>>>
>>>>>>>>> Identifier SQLAccounting
>>>>>
>>>>>>>>> DBSource dbi:mysql:inetdb_test
>>>>>
>>>>>>>>> DBUsername inet
>>>>>
>>>>>>>>> DBAuth inet@inetdb
>>>>>
>>>>>>>>> #Disable SQL authentication
>>>>>
>>>>>>>>> AuthSelect
>>>>>
>>>>>>>>> HandleAcctStatusTypes Start,Stop
>>>>>
>>>>>>>>> AccountingTable ARCH_ACCOUNTING
>>>>>
>>>>>>>>> AcctColumnDef USER_NAME,User-Name
>>>>>
>>>>>>>>> AcctColumnDef ACCT_START_TIME,Timestamp,integer
>>>>>
>>>>>>>>> AcctColumnDef ACCT_STOP_TIME,Timestamp,integer
>>>>>
>>>>>>>>> AcctColumnDef ACCT_STATUS_TYPE,Acct-Status-Type,integer
>>>>>
>>>>>>>>> AcctColumnDef ACCT_DELAY_TIME,Acct-Delay-Time,integer
>>>>>
>>>>>>>>> AcctColumnDef ACCT_INPUT_OCTETS,Acct-Input-Octets,integer
>>>>>
>>>>>>>>> AcctColumnDef ACCT_OUTPUT_OCTETS,Acct-Output-Octets,integer
>>>>>
>>>>>>>>> AcctColumnDef ACCT_SESSION_ID,Acct-Session-Id
>>>>>
>>>>>>>>> AcctColumnDef ACCT_SESSION_TIME,Acct-Session-Time,integer
>>>>>
>>>>>>>>> AcctColumnDef ACCT_TERMINATE_CAUSE,Acct-Terminate-Cause,integer
>>>>>
>>>>>>>>> AcctColumnDef FRAMED_IP_ADDRESS,Framed-IP-Address
>>>>>
>>>>>>>>> AcctColumnDef NAS_IDENTIFIER,NAS-Identifier
>>>>>
>>>>>>>>> AcctColumnDef NAS_PORT,NAS-Port,integer
>>>>>
>>>>>>>>> AcctColumnDef CALLED_STATION_ID,Called-Station-Id
>>>>>
>>>>>>>>> AcctColumnDef CALLING_STATION_ID,Calling-Station-Id
>>>>>
>>>>>>>>> SQLRecoveryFile %L/sqlaccounting.sql
>>>>>
>>>>>>>>>
>>>>>
>>>>>>>>>
>>>>>
>>>>>>>>> Specifying the following in my Handler does not work. I don't even
>>>>>>>>> see any trace in my logs set at level 4 or 5.
>>>>>
>>>>>>>>> AuthBy SQLAccounting
>>>>>
>>>>>>>>>
>>>>>
>>>>>>>>> However my sessions database work with the following.
>>>>>
>>>>>>>>> SessionDatabase SQLSDB
>>>>>
>>>>>>>>>
>>>>>
>>>>>>>>> Thanks much.
>>>>>
>>>>>>>>>
>>>>>
>>>>>>>>> Regards,
>>>>>
>>>>>>>>> Rohan
>>>>>
>>>>>>>>> _______________________________________________
>>>>>
>>>>>>>>> radiator mailing list
>>>>>
>>>>>>>>> [email protected]
>>>>>
>>>>>>>>> http://www.open.com.au/mailman/listinfo/radiator
>>>>>
>>>>>>>>
>>>>>
>>>>>>>> --
>>>>>
>>>>>>>>
>>>>>
>>>>>>>> Hugh Irvine
>>>>>
>>>>>>>> [email protected]
>>>>>
>>>>>>>>
>>>>>
>>>>>>>> Radiator: the most portable, flexible and configurable RADIUS server
>>>>>
>>>>>>>> anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
>>>>>
>>>>>>>> Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
>>>>>
>>>>>>>> TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
>>>>>
>>>>>>>> DIAMETER etc.
>>>>>
>>>>>>>> Full source on Unix, Windows, MacOSX, Solaris, VMS, NetWare etc.
>>>>>
>>>>>>>>
>>>>>
>>>>>>> Rohan Henry
>>>>>
>>>>>>> Server Administrator
>>>>>
>>>>>>> LIME
>>>>>
>>>>>>> Phone (876) 936-4819
>>>>>
>>>>>>> Mobile (876) 997-0729
>>>>>
>>>>>>>
>>>>>
>>>>>>>
>>>>>
>>>>>>> _______________________________________________
>>>>>
>>>>>>> radiator mailing list
>>>>>
>>>>>>> [email protected]
>>>>>
>>>>>>> http://www.open.com.au/mailman/listinfo/radiator
>>>>>
>>>>>
>>>>>
>>>>> Rohan Henry
>>>>>
>>>>> Server Administrator
>>>>>
>>>>> LIME
>>>>>
>>>>> Phone (876) 936-4819
>>>>>
>>>>> Mobile (876) 997-0729
>>>>>
>>>>> _______________________________________________
>>>>> radiator mailing list
>>>>> [email protected]
>>>>> http://www.open.com.au/mailman/listinfo/radiator
>>>>
>>>>
>>>> --
>>>>
>>>> Hugh Irvine
>>>> [email protected]
>>>>
>>>> Radiator: the most portable, flexible and configurable RADIUS server
>>>> anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
>>>> Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
>>>> TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
>>>> DIAMETER etc.
>>>> Full source on Unix, Windows, MacOSX, Solaris, VMS, NetWare etc.
>>>>
>>>
>>> Rohan Henry
>>> Server Administrator
>>> LIME
>>> Phone (876) 936-4819
>>> Mobile (876) 997-0729
>>> _______________________________________________
>>> radiator mailing list
>>> [email protected]
>>> http://www.open.com.au/mailman/listinfo/radiator
>>
>>
>> --
>>
>> Hugh Irvine
>> [email protected]
>>
>> Radiator: the most portable, flexible and configurable RADIUS server
>> anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
>> Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
>> TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
>> DIAMETER etc.
>> Full source on Unix, Windows, MacOSX, Solaris, VMS, NetWare etc.
>>
>
> Rohan Henry
> Server Administrator
> LIME
> Phone (876) 936-4819
> Mobile (876) 997-0729
> _______________________________________________
> radiator mailing list
> [email protected]
> http://www.open.com.au/mailman/listinfo/radiator
--
Hugh Irvine
[email protected]
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER etc.
Full source on Unix, Windows, MacOSX, Solaris, VMS, NetWare etc.
_______________________________________________
radiator mailing list
[email protected]
http://www.open.com.au/mailman/listinfo/radiator
