Re: RADIUS accounting
On 18/7/09 18:43, Mohammed Hagag wrote: what's the meaning of accounting in radius aaa ? is it means measuring of consumed resources only or users' activities like executed commands for example on an ssh service is being logged ? http://www.ietf.org/rfc/rfc2866.txt http://en.wikipedia.org/wiki/RADIUS#Accounting -- Steven Carr Systems Development Officer SLS/ITS/Systems - (0191) 515 3953 signature.asc Description: OpenPGP digital signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RADIUS accounting
I,m sorry but i did read the RFC and the wikipedia article, still it's not clear for me :( , i'm so sorry, if any one can clarify it for me, his is very apriticated. Thanks Best Regards. On Sat, Jul 18, 2009 at 9:27 PM, Steven Carr steven.c...@sunderland.ac.ukwrote: On 18/7/09 18:43, Mohammed Hagag wrote: what's the meaning of accounting in radius aaa ? is it means measuring of consumed resources only or users' activities like executed commands for example on an ssh service is being logged ? http://www.ietf.org/rfc/rfc2866.txt http://en.wikipedia.org/wiki/RADIUS#Accounting -- Steven Carr Systems Development Officer SLS/ITS/Systems - (0191) 515 3953 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Mohamed M. Hagag محمد محمود حجاج http://www.linkedin.com/in/mohamedhagag http://bintoo.sf.net/drpl/ http://mohamedhagag.wordpress.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radius accounting problem on Wintendo
Peder Bach wrote: Freeradius on wintendo, seems to have problem with accounting. It send the accounting data as hex values. No. It's *printing* them as hex, because it doesn't know what they are. Bay-Networks-Attr-196 = 0x73686f77206c6f672066696c65207461696c Bay-Networks-Attr-196 = 0x65786974 The strange is that this works on Linux and Sun. And the dictionary.bay doesn't contain Attr-196 nor on Linux and Windows. See? It doesn't know what attribute 196 is. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Radius accounting
[EMAIL PROTECTED] wrote:
So i put this to acct_users:
DEFAULT Acct-Session-Id =~ ^.*(NC|JSAM|WSAM).*
My-ST == `%{1}`
Please read man users. You are putting the attribute in the reply
list. You are using ==, which is a comparison operator, rather than ='.
i see that rad_xlat gives the correct value to My-ST but i cant use it
in the sql statement.
Its empty.
acct_users: Matched entry DEFAULT at line 23
radius_xlat: 'WSAM'
How can i define new Attributes? And use them in sql.conf
Read doc/variables.txt
If you fix the operator to '=', you can probably reference it in the
SQL statement as %{reply:My-ST}.
Alan DeKok.
--
http://deployingradius.com - The web site of the book
http://deployingradius.com/blog/ - The blog
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radius accounting and syslog
On Mon 02 Apr 2007, Archie Holland wrote: I'm preparing to transition from NavisRadius to FreeRadius. NavisRadius allowed me to log stop/start events via syslog. Is there any _EASY_ way to emulate this behavior in FreeRadius? rlm_acctlog in cvs head... -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radius accounting and syslog
Archie Holland wrote: I'm preparing to transition from NavisRadius to FreeRadius. NavisRadius allowed me to log stop/start events via syslog. Is there any _EASY_ way to emulate this behavior in FreeRadius? Run a Perl script, and have it write to syslog. There is a syslog module for the server on bugs.freeradius.org, but last time I looked at it, I decided not to add it in... Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Radius accounting file scanning and upload to database
Actually I was told by the development of such thing ( ie decoupled SQL logging ) in the radius server some time ago, that is a good thing but I am currently using my own relay logging and it is already very stable and very fast ( using bulk insert ), it just suffers the limitation that it is one day late, and thus I have these questions :- The radius server method, I believe is also based on scanning a directory of files, how does it handle files which are still growing ( ie unfinished files ) ? Or it is assuming that the files have been completed ( ie there are no files which are still active ! ) ? Cheers - Original Message - From: Alan DeKok [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Saturday, December 24, 2005 1:38 AM Subject: Re: Radius accounting file scanning and upload to database Ming-Ching Tiew [EMAIL PROTECTED] wrote: I am logging to MSSQL and I have tried in the past to do it directly, I find that the stability is POOR and reliability is NOT ACCEPTABLE. For example, the sql driver does not reconnect upon failure. I tried fixing it myself but I also faced other weird problems which are difficult to troubleshoot. See rlm_sql_log in the 1.1.0-pre0 image. It should help. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Radius accounting file scanning and upload to database
Ming-Ching Tiew [EMAIL PROTECTED] wrote: The radius server method, I believe is also based on scanning a directory No. of files, how does it handle files which are still growing ( ie unfinished files ) ? Or it is assuming that the files have been completed ( ie there are no files which are still active ! ) ? No. The server radsqlrelay program co-operate with locking to ensure that growing files are handled. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Radius accounting file scanning and upload to database
From: Lewis Bergman [EMAIL PROTECTED] This is probably a stupid question but whay not log the accounting directly to the sql via the sql module? Reasons :- I am logging to MSSQL and I have tried in the past to do it directly, I find that the stability is POOR and reliability is NOT ACCEPTABLE. For example, the sql driver does not reconnect upon failure. I tried fixing it myself but I also faced other weird problems which are difficult to troubleshoot. Also per record logging is way too slow to cope with the speed I am looking for. I am in fact using the TDS BULK INSERT mechanism for insertion. It is much much faster than per record logging. All in all, I find that logging to database via radius server directly is a bad design, more so for a heavy radius server with lots of traffic, and worse if it is across the network (WAN!) , due to network instablity, database server load conditions etc etc etc. Cheers - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Radius accounting file scanning and upload to database
Ming-Ching Tiew [EMAIL PROTECTED] wrote: I am logging to MSSQL and I have tried in the past to do it directly, I find that the stability is POOR and reliability is NOT ACCEPTABLE. For example, the sql driver does not reconnect upon failure. I tried fixing it myself but I also faced other weird problems which are difficult to troubleshoot. See rlm_sql_log in the 1.1.0-pre0 image. It should help. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Radius accounting file scanning and upload to database
Ming-Ching Tiew wrote: I have implemented a file scanning mechanism to scan the radius accounting detail file and subsequently upload to database server but at the time of scanning, I detect the presence of a yesterday file ( ie a completed file). This will mean that my accounting record inside the database is one day late. Now I understand there is a way to instruct radius server to change the file name hourly, so theoretically I should be able to scan the presence of last hour completed file, and then upload to database server. However, assumming the scanning, processing, and subsequent uploading to database server is very slow, it could mean that from the start of one scan to the next scan, if more than one hour has passed, I would have missed one of the last hour file. Anyone has a better idea of how to process an hourly file more gracefully ? This is probably a stupid question but whay not log the accounting directly to the sql via the sql module? -- Lewis Bergman Texas Communications 4309 Maple St. Abilene, TX 79602-8044 Off. 325-691-1301 Cell 325-439-0533 fax 325-695-6841 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: RADIUS Accounting
It should be sent everytime they connect/disconnect. Don't think you can change it David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bernell Williams Sent: 09 December 2005 04:16 To: FreeRadius users mailing list Subject: Re: RADIUS Accounting Madhuraka Godahewa wrote: Hi All, I have installed freeRADIUS 1.0.5 recently and configured it. It works perfectly for authenticating users connecting through WLAN AP. I have a little problem with RADIUS accounting. I understand that the accounting requests should be sent by the NAS to the RADIUS server. My problem is how can we set the frequency of sending these accounting requests. That is how often the NAS will send accounting requests to the RADIUS server? Can we configure that setting (frequency of sending the accounting requests) through freeRADIUS conf files or do we need to configure it throough the configuration interface of the NAS? Thanking You., Madhuraka Godahewa Telecommunications Engineer Research and Development Unit Electroteks Global Networks (Pvt.) Ltd. Mobile: + 94-777-647055 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html I use freeradius MySQL. I am able to set frequency of acct update by setting attribute Acct-Interim-Interval in rad[group]reply table to number of seconds between updates. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RADIUS Accounting
Madhuraka Godahewa wrote: Hi All, I have installed freeRADIUS 1.0.5 recently and configured it. It works perfectly for authenticating users connecting through WLAN AP. I have a little problem with RADIUS accounting. I understand that the accounting requests should be sent by the NAS to the RADIUS server. My problem is how can we set the frequency of sending these accounting requests. That is how often the NAS will send accounting requests to the RADIUS server? Can we configure that setting (frequency of sending the accounting requests) through freeRADIUS conf files or do we need to configure it throough the configuration interface of the NAS? Thanking You., Madhuraka Godahewa Telecommunications Engineer Research and Development Unit Electroteks Global Networks (Pvt.) Ltd. Mobile: + 94-777-647055 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html I use freeradius MySQL. I am able to set frequency of acct update by setting attribute Acct-Interim-Interval in rad[group]reply table to number of seconds between updates. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Radius accounting problem for SER
yy [EMAIL PROTECTED] wrote: I'm new to freeradius and SER, hence I'm having some problem in accounting calls from my sip phone. My configuration file (ser.cfg) for my SER is as follows, Please ask SER questions on the SER list. This is the FreeRADIUS list. The accounting log details that I'm getting from freeradius is as follows - note that I do not get any start or stop auth-type! That makes no sense. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Radius accounting issue
Russell Premont [EMAIL PROTECTED] wrote: Then I see the following: rad_recv: Accounting-Request packet from host 192.168.1.14:1027, id=176, length=210 Ignoring request from unknown home server 192.168.1.14:1027 Why do you have the client sending packets to port 1027? The debug log of the server, and /etc/services, shows that accounting packets should be sent to port 1646. What do I need to do to get accounting to start working? What RADIUS client are you using? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radius accounting
Maybe the RFCs would be a good place to start? Start with 2865 and 2866 --- On Saturday 04 September 2004 04:13, jassim El-mansori wrote: hello I'm using NTRadping as test utility and it works like a charm I'm wondering guys about why radius sends the accounting * Accounting-response unlike the when doing authentication it sends * Access-Accept what does it mean i cant get it really is just an initial response and there is another action has to come afterward any advice thank vary much indeed ___ Do you Yahoo!? Win 1 of 4,000 free domain names from Yahoo! Enter now. http://promotions.yahoo.com/goldrush - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radius accounting
Try with the accounting RFC http://www.freeradius.org/rfc/rfc2866.html You also have the related RFCs http://www.freeradius.org/rfc/ Greetings, Rodrigo On Friday 03 September 2004 23:13, jassim El-mansori wrote: hello I'm using NTRadping as test utility and it works like a charm I'm wondering guys about why radius sends the accounting * Accounting-response unlike the when doing authentication it sends * Access-Accept what does it mean i cant get it really is just an initial response and there is another action has to come afterward any advice thank vary much indeed ___ Do you Yahoo!? Win 1 of 4,000 free domain names from Yahoo! Enter now. http://promotions.yahoo.com/goldrush - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: [Fwd: RE: Radius Accounting]
In radacct table, radius write start,stop time,upload,download data rate,and amount of time that userlogin in a certain session. This is done automatically by radius, and these data is sent to radius by router. You can use sql query to sum the customer usage. You can use phpPgAdmin to view your database (if you use postgresql) or phpMyAdmin (for MySQL) Have fun. Manh Cuong. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 18, 2004 3:44 PM To: [EMAIL PROTECTED] Subject: [Fwd: RE: Radius Accounting] Hi Truong, I am really appreciated you can reply me. I am a beginer in radius. I still have some questions regarding the radius, as I start doing the radius login authentication and usage metter. If possible, could you please replay to me. Do you know how radius record customer usage in radacct table. When some one login to radius network, is download usage automatically recorded in this radacct table? Thanks for your reply. Regards, Raymond - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Radius Accounting
Well the attributes mentioned AcctInputOctets AcctOutputOctets can have upto 2GByte info, beyond that new attributes are introduced that ill store the GigaBytes information. Now how to get these new attributes into the database ? Regards Ayman Alashquar -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Truong Manh Cuong Sent: 18/02/2004 09:26 To: [EMAIL PROTECTED] Subject: RE: Radius Accounting Hi, AcctInputOctets bigint(12) default NULL, AcctOutputOctets bigint(12) default NULL, Is download and upload rate . Have fun. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, February 18, 2004 12:09 PM To: [EMAIL PROTECTED] Subject: Radius Accounting I am beginer of radius. How does radius record user download usage. In radius accounting table, which field does record user download usage. CREATE TABLE radacct ( RadAcctId bigint(21) NOT NULL auto_increment, AcctSessionId varchar(32) NOT NULL default '', AcctUniqueId varchar(32) NOT NULL default '', UserName varchar(64) NOT NULL default '', Realm varchar(64) default '', NASIPAddress varchar(15) NOT NULL default '', NASPortId int(12) default NULL, NASPortType varchar(32) default NULL, AcctStartTime datetime NOT NULL default '-00-00 00:00:00', AcctStopTime datetime NOT NULL default '-00-00 00:00:00', AcctSessionTime int(12) default NULL, AcctAuthentic varchar(32) default NULL, ConnectInfo_start varchar(32) default NULL, ConnectInfo_stop varchar(32) default NULL, AcctInputOctets bigint(12) default NULL, AcctOutputOctets bigint(12) default NULL, CalledStationId varchar(50) NOT NULL default '', CallingStationId varchar(50) NOT NULL default '', AcctTerminateCause varchar(32) NOT NULL default '', ServiceType varchar(32) default NULL, FramedProtocol varchar(32) default NULL, FramedIPAddress varchar(15) NOT NULL default '', AcctStartDelay int(12) default NULL, AcctStopDelay int(12) default NULL, PRIMARY KEY (RadAcctId), KEY UserName (UserName), KEY FramedIPAddress (FramedIPAddress), KEY AcctSessionId (AcctSessionId), KEY AcctUniqueId (AcctUniqueId), KEY AcctStartTime (AcctStartTime), KEY AcctStopTime (AcctStopTime), KEY NASIPAddress (NASIPAddress) ) ; - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Radius Accounting
Hi, AcctInputOctets bigint(12) default NULL, AcctOutputOctets bigint(12) default NULL, Is download and upload rate . Have fun. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, February 18, 2004 12:09 PM To: [EMAIL PROTECTED] Subject: Radius Accounting I am beginer of radius. How does radius record user download usage. In radius accounting table, which field does record user download usage. CREATE TABLE radacct ( RadAcctId bigint(21) NOT NULL auto_increment, AcctSessionId varchar(32) NOT NULL default '', AcctUniqueId varchar(32) NOT NULL default '', UserName varchar(64) NOT NULL default '', Realm varchar(64) default '', NASIPAddress varchar(15) NOT NULL default '', NASPortId int(12) default NULL, NASPortType varchar(32) default NULL, AcctStartTime datetime NOT NULL default '-00-00 00:00:00', AcctStopTime datetime NOT NULL default '-00-00 00:00:00', AcctSessionTime int(12) default NULL, AcctAuthentic varchar(32) default NULL, ConnectInfo_start varchar(32) default NULL, ConnectInfo_stop varchar(32) default NULL, AcctInputOctets bigint(12) default NULL, AcctOutputOctets bigint(12) default NULL, CalledStationId varchar(50) NOT NULL default '', CallingStationId varchar(50) NOT NULL default '', AcctTerminateCause varchar(32) NOT NULL default '', ServiceType varchar(32) default NULL, FramedProtocol varchar(32) default NULL, FramedIPAddress varchar(15) NOT NULL default '', AcctStartDelay int(12) default NULL, AcctStopDelay int(12) default NULL, PRIMARY KEY (RadAcctId), KEY UserName (UserName), KEY FramedIPAddress (FramedIPAddress), KEY AcctSessionId (AcctSessionId), KEY AcctUniqueId (AcctUniqueId), KEY AcctStartTime (AcctStartTime), KEY AcctStopTime (AcctStopTime), KEY NASIPAddress (NASIPAddress) ) ; - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
