Re: (RADIATOR) Associating Auth and accounting
Hello Mark - On Wed, 08 Mar 2000, you wrote: > Whenever I get an auth request, I want to look back at the SQL database the > accounting-start packet was written to, to look at a few fields that are not > available in the auth request packet (namely called_station-id). We use > AS5300 and SQL auth and accounting and whenever people call in on 1 of the > 4e1's they need to be treated and authed differently. The SQL procedure > called by auth works great so does the accounting but is there any way to > associate the following stream : > > acct-start > auth > acct_stop > > How do I tie the acct-start to the auth ??? > I must confess to being confused by your question. The normal sequence of events is this: 1. user dials NAS 2. NAS answers call 3. NAS initiates PPP authentication 4. NAS sends Radius authentication request (including Called-Station-Id, Calling-Station-Id, etc.) 5. Radiator processes the authentication request (Access-Request) 6. if Access-Accept, NAS starts PPP 7. NAS sends Accounting-Request - Start 8. Radiator processes Accounting-Start 9. when session ends, NAS sends Accounting-Request - Stop 10. Radiator processes Accounting-Stop If you want to tie accounting requests to a particular Access-Request, the usual practice is to send a "Class" attribute in the Access-Accept. hth Hugh -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc. Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X. === Archive at http://www.starport.net/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Associating Auth and accounting
Whenever I get an auth request, I want to look back at the SQL database the accounting-start packet was written to, to look at a few fields that are not available in the auth request packet (namely called_station-id). We use AS5300 and SQL auth and accounting and whenever people call in on 1 of the 4e1's they need to be treated and authed differently. The SQL procedure called by auth works great so does the accounting but is there any way to associate the following stream : acct-start auth acct_stop How do I tie the acct-start to the auth ??? === Archive at http://www.starport.net/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Cisco As5300 and VOIP and Debit card
Thank you Vincent for the information.
We have made a new dictionary including the h3232 attributes available in the
2.15 patches area, and added an entry to the FAQ.
Thanks again for that.
Cheers.
On Mar 7, 10:11am, Vincent Torres wrote:
> Subject: RE: (RADIATOR) Cisco As5300 and VOIP and Debit card
> Hi All,
>
> I got this to work yesterday and have shared it with Mark and he seems to
> have gotten it to work too, so I thought to share it with you all. I know
> for a fact that the handling of h323 VSAs for the Cisco access servers is
> not supported by many Radius servers, including Livingston and CAR (Cisco
> !), so this maybe a good feature for Radiator developers to look into. Cisco
> says Merit already supports it.
>
> Anyway, aside from the dictionary, you will have to tweak the h323 AV pair
> you gave the Cisco VoIP server. As an example, if you define a user in a
> flat file the reply items should look like this:
>
> 1234 User-Password = "567899"
> h323-credit-amount = "h323-credit-amount=123.45"
> h323-credit-time = "h323-credit-time=900"
>
> basically the ascii value that you send back has to be prepended with the
> attribute so in the perspective of radiator it sends back attribute =
> "attribute=value". but the 5300 will be able to recognize this...as long as
> it's the correct h323 attribute prepended.
>
> so far this is the only value the Router/IVR will recognize. And according
> to Cisco it isnt going to change soon ("It's a feature, not a bug"). In any
> case it worked and the IVR was able to break down those values into
> appropriate audio prompts...
>
> Hope this helps some of you in you IVR implementations...
>
> Vincent
>
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On
> Behalf Of Matthew Nichols
> Sent: Tuesday, March 07, 2000 5:24 AM
> To: [EMAIL PROTECTED]
> Subject: Re: (RADIATOR) Cisco As5300 and VOIP and Debit card
>
>
> Mark,
> Make sure these are in your dictionary
>
> VENDORATTR 9 cisco-h323-remote-address 23
> string
> VENDORATTR 9 cisco-h323-conf-id 24 string
> VENDORATTR 9 cisco-h323-setup-time 25 string
> VENDORATTR 9 cisco-h323-call-origin 26 string
> VENDORATTR 9 cisco-h323-call-type27 string
> VENDORATTR 9 cisco-h323-connect-time 28 string
> VENDORATTR 9 cisco-h323-disconnect-time 29
> string
> VENDORATTR 9 cisco-h323-disconnect-cause 30
> string
> VENDORATTR 9 cisco-h323-voice-quality31
> string
> VENDORATTR 9 cisco-h323-ivr-out 32 string
> VENDORATTR 9 cisco-h323-gw-id33 string
> VENDORATTR 9 cisco-h323-call-treatment 34
> string
> VENDORATTR 9 cisco-h323-ivr-in 100 string
> VENDORATTR 9 cisco-h323-credit-amount101
> string
> VENDORATTR 9 cisco-h323-credit-time 102 string
> VENDORATTR 9 cisco-h323-return-code 103 string
> VENDORATTR 9 cisco-h323-prompt-id104 string
> VENDORATTR 9 cisco-h323-time-and-day 105 string
> VENDORATTR 9 cisco-h323-redirect-number 106
> string
> VENDORATTR 9 cisco-h323-preferred-lang 107
> string
> VENDORATTR 9 cisco-h323-redirect-ip-addr 108
> string
> VENDORATTR 9 cisco-h323-billing-model109
> string
> VENDORATTR 9 cisco-h323-currency-type110
> string
>
> Regards,
>
> Matt
>
> At 03:43 PM 7/03/00 +1300, you wrote:
> >Has anyone used Radiator to send back the credit amount and credit time and
> >return code in vsa's for the Cisco debit card platform ? We use an As5300
> >and are currently authing using radiator 2.15. The Cisco radius debug says
> >the pair is an invalid format for type 26, 26 referring to vendor specof
> >attribute I presume.
> >
> >We send and have defined in our dictionary :
> >
> >vendorattr 9 Credit_Amount 101 string
> >
> >Radius handles it OK, the AS5300 does not.
> >
> >Help
> >
> >===
> >Archive at http://www.starport.net/~radiator/
> >To unsubscribe, email '[EMAIL PROTECTED]' with
> >'unsubscribe radiator' in the body of the message.
>
> ---
> Matthew Nichols - Network/Systems Engineer
> CCNA
> HunterLink Pty Ltd
> Newcastle NSW Australia
> Phone: +61 2 4969 0122 Fax: +61 2 4969 0133
> PGP Public Key: http://moonah.hunterlink.net.au/~matt/pgp/pgpkey.html
> HunterLink Web Site: http://www.hunterlink.net.au
>
>
> ===
> Archive at http://www.starport.net/~radiator/
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
>
>
> ===
> Archive at http://www.starport.net/~radiator/
> To unsubscribe, email '[EMAIL PROTECTED]' with
> '
Re: (RADIATOR) Radiator & MAX TNT
Hi Juan, thanks for the info. We have added it to the FAQ. Cheers. On Mar 7, 10:24am, ARG-MENENDEZ, JUAN wrote: > Subject: RE: (RADIATOR) Radiator & MAX TNT > > Just in case, I found the option in the MAX TNT to disable it: > > read EXTERNAL-AUTH > set rad-auth-client allow-auth-config-rqsts = no > > Juan. > > > -Original Message- > > From: Hugh Irvine [SMTP:[EMAIL PROTECTED]] > > Sent: Lunes 6 de Marzo de 2000 18:17 > > To: ARG-MENENDEZ, JUAN; '[EMAIL PROTECTED]' > > Subject:Re: (RADIATOR) Radiator & MAX TNT > > > > > > Hello Juan - > > > > On Tue, 07 Mar 2000, ARG-MENENDEZ, JUAN wrote: > > > I been doing some tests with Radiator Demo Version 2.15 & some > > > Ciscos 2511/5300 and everything went allright. > > > > > > We also have some MAX TNTs here and I noticed the MAX TNT unit is > > > sending ´garbage´ to the radius server (I can only see it if I configure > > > loglevel to trace 4), although it does work ok when sending/receiving > > > authentication requests. > > > > > > Do I need to care about this ? It looks like Radiator takes those > > > bad packets as authentication requests. Maybe I need to configure > > anything > > > else in radiator config ? > > > > > > > The MAX is not sending "garbage" to the Radius server - it is trying to > > configure itself. MAXen have a "feature" that allows them to download > > additional configuration information from a Radius server and that is why > > you > > are seeing these strange usernames. There is an option on the MAX to turn > > this > > behaviour off. This has been discussed on the list before, so have a look > > at: > > > > http://www.thesite.com.au/~radiator > > > > and do a search. > > > > hth > > > > Hugh > > > > -- > > Radiator: the most portable, flexible and configurable RADIUS server > > anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, > > Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc. > > Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X. > > > > > Archive at http://www.starport.net/~radiator/ > To unsubscribe, email '[EMAIL PROTECTED]' with > 'unsubscribe radiator' in the body of the message. >-- End of excerpt from ARG-MENENDEZ, JUAN -- Mike McCauley [EMAIL PROTECTED] Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW 24 Bateman St Hampton, VIC 3188 Australia http://www.open.com.au Phone +61 3 9598-0985 Fax +61 3 9598-0955 Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, 2000, NT, MacOS X ÿ Archive at http://www.starport.net/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
RE: (RADIATOR) Cisco As5300 and VOIP and Debit card
Hi All,
I got this to work yesterday and have shared it with Mark and he seems to
have gotten it to work too, so I thought to share it with you all. I know
for a fact that the handling of h323 VSAs for the Cisco access servers is
not supported by many Radius servers, including Livingston and CAR (Cisco
!), so this maybe a good feature for Radiator developers to look into. Cisco
says Merit already supports it.
Anyway, aside from the dictionary, you will have to tweak the h323 AV pair
you gave the Cisco VoIP server. As an example, if you define a user in a
flat file the reply items should look like this:
1234User-Password = "567899"
h323-credit-amount = "h323-credit-amount=123.45"
h323-credit-time = "h323-credit-time=900"
basically the ascii value that you send back has to be prepended with the
attribute so in the perspective of radiator it sends back attribute =
"attribute=value". but the 5300 will be able to recognize this...as long as
it's the correct h323 attribute prepended.
so far this is the only value the Router/IVR will recognize. And according
to Cisco it isnt going to change soon ("It's a feature, not a bug"). In any
case it worked and the IVR was able to break down those values into
appropriate audio prompts...
Hope this helps some of you in you IVR implementations...
Vincent
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On
Behalf Of Matthew Nichols
Sent: Tuesday, March 07, 2000 5:24 AM
To: [EMAIL PROTECTED]
Subject: Re: (RADIATOR) Cisco As5300 and VOIP and Debit card
Mark,
Make sure these are in your dictionary
VENDORATTR 9 cisco-h323-remote-address 23
string
VENDORATTR 9 cisco-h323-conf-id 24 string
VENDORATTR 9 cisco-h323-setup-time 25 string
VENDORATTR 9 cisco-h323-call-origin 26 string
VENDORATTR 9 cisco-h323-call-type27 string
VENDORATTR 9 cisco-h323-connect-time 28 string
VENDORATTR 9 cisco-h323-disconnect-time 29
string
VENDORATTR 9 cisco-h323-disconnect-cause 30
string
VENDORATTR 9 cisco-h323-voice-quality31
string
VENDORATTR 9 cisco-h323-ivr-out 32 string
VENDORATTR 9 cisco-h323-gw-id33 string
VENDORATTR 9 cisco-h323-call-treatment 34
string
VENDORATTR 9 cisco-h323-ivr-in 100 string
VENDORATTR 9 cisco-h323-credit-amount101
string
VENDORATTR 9 cisco-h323-credit-time 102 string
VENDORATTR 9 cisco-h323-return-code 103 string
VENDORATTR 9 cisco-h323-prompt-id104 string
VENDORATTR 9 cisco-h323-time-and-day 105 string
VENDORATTR 9 cisco-h323-redirect-number 106
string
VENDORATTR 9 cisco-h323-preferred-lang 107
string
VENDORATTR 9 cisco-h323-redirect-ip-addr 108
string
VENDORATTR 9 cisco-h323-billing-model109
string
VENDORATTR 9 cisco-h323-currency-type110
string
Regards,
Matt
At 03:43 PM 7/03/00 +1300, you wrote:
>Has anyone used Radiator to send back the credit amount and credit time and
>return code in vsa's for the Cisco debit card platform ? We use an As5300
>and are currently authing using radiator 2.15. The Cisco radius debug says
>the pair is an invalid format for type 26, 26 referring to vendor specof
>attribute I presume.
>
>We send and have defined in our dictionary :
>
>vendorattr 9 Credit_Amount 101 string
>
>Radius handles it OK, the AS5300 does not.
>
>Help
>
>===
>Archive at http://www.starport.net/~radiator/
>To unsubscribe, email '[EMAIL PROTECTED]' with
>'unsubscribe radiator' in the body of the message.
---
Matthew Nichols - Network/Systems Engineer
CCNA
HunterLink Pty Ltd
Newcastle NSW Australia
Phone: +61 2 4969 0122 Fax: +61 2 4969 0133
PGP Public Key: http://moonah.hunterlink.net.au/~matt/pgp/pgpkey.html
HunterLink Web Site: http://www.hunterlink.net.au
===
Archive at http://www.starport.net/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
===
Archive at http://www.starport.net/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Cisco As5300 and VOIP and Debit card
Mark, Make sure these are in your dictionary VENDORATTR 9 cisco-h323-remote-address 23 string VENDORATTR 9 cisco-h323-conf-id 24 string VENDORATTR 9 cisco-h323-setup-time 25 string VENDORATTR 9 cisco-h323-call-origin 26 string VENDORATTR 9 cisco-h323-call-type27 string VENDORATTR 9 cisco-h323-connect-time 28 string VENDORATTR 9 cisco-h323-disconnect-time 29 string VENDORATTR 9 cisco-h323-disconnect-cause 30 string VENDORATTR 9 cisco-h323-voice-quality31 string VENDORATTR 9 cisco-h323-ivr-out 32 string VENDORATTR 9 cisco-h323-gw-id33 string VENDORATTR 9 cisco-h323-call-treatment 34 string VENDORATTR 9 cisco-h323-ivr-in 100 string VENDORATTR 9 cisco-h323-credit-amount101 string VENDORATTR 9 cisco-h323-credit-time 102 string VENDORATTR 9 cisco-h323-return-code 103 string VENDORATTR 9 cisco-h323-prompt-id104 string VENDORATTR 9 cisco-h323-time-and-day 105 string VENDORATTR 9 cisco-h323-redirect-number 106 string VENDORATTR 9 cisco-h323-preferred-lang 107 string VENDORATTR 9 cisco-h323-redirect-ip-addr 108 string VENDORATTR 9 cisco-h323-billing-model109 string VENDORATTR 9 cisco-h323-currency-type110 string Regards, Matt At 03:43 PM 7/03/00 +1300, you wrote: >Has anyone used Radiator to send back the credit amount and credit time and >return code in vsa's for the Cisco debit card platform ? We use an As5300 >and are currently authing using radiator 2.15. The Cisco radius debug says >the pair is an invalid format for type 26, 26 referring to vendor specof >attribute I presume. > >We send and have defined in our dictionary : > >vendorattr 9 Credit_Amount 101 string > >Radius handles it OK, the AS5300 does not. > >Help > >=== >Archive at http://www.starport.net/~radiator/ >To unsubscribe, email '[EMAIL PROTECTED]' with >'unsubscribe radiator' in the body of the message. --- Matthew Nichols - Network/Systems Engineer CCNA HunterLink Pty Ltd Newcastle NSW Australia Phone: +61 2 4969 0122 Fax: +61 2 4969 0133 PGP Public Key: http://moonah.hunterlink.net.au/~matt/pgp/pgpkey.html HunterLink Web Site: http://www.hunterlink.net.au === Archive at http://www.starport.net/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
RE: (RADIATOR) Radiator & MAX TNT
Just in case, I found the option in the MAX TNT to disable it: read EXTERNAL-AUTH set rad-auth-client allow-auth-config-rqsts = no Juan. > -Original Message- > From: Hugh Irvine [SMTP:[EMAIL PROTECTED]] > Sent: Lunes 6 de Marzo de 2000 18:17 > To: ARG-MENENDEZ, JUAN; '[EMAIL PROTECTED]' > Subject: Re: (RADIATOR) Radiator & MAX TNT > > > Hello Juan - > > On Tue, 07 Mar 2000, ARG-MENENDEZ, JUAN wrote: > > I been doing some tests with Radiator Demo Version 2.15 & some > > Ciscos 2511/5300 and everything went allright. > > > > We also have some MAX TNTs here and I noticed the MAX TNT unit is > > sending ´garbage´ to the radius server (I can only see it if I configure > > loglevel to trace 4), although it does work ok when sending/receiving > > authentication requests. > > > > Do I need to care about this ? It looks like Radiator takes those > > bad packets as authentication requests. Maybe I need to configure > anything > > else in radiator config ? > > > > The MAX is not sending "garbage" to the Radius server - it is trying to > configure itself. MAXen have a "feature" that allows them to download > additional configuration information from a Radius server and that is why > you > are seeing these strange usernames. There is an option on the MAX to turn > this > behaviour off. This has been discussed on the list before, so have a look > at: > > http://www.thesite.com.au/~radiator > > and do a search. > > hth > > Hugh > > -- > Radiator: the most portable, flexible and configurable RADIUS server > anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, > Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc. > Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X. > ÿ Archive at http://www.starport.net/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Fwd: Re: (RADIATOR) Cisco As5300 and VOIP and Debit card (fwd)
Hello all - Here are some useful Cisco attributes for VOIP. cheers Hugh -- Forwarded Message -- Subject: Re: (RADIATOR) Cisco As5300 and VOIP and Debit card (fwd) Date: Tue, 7 Mar 2000 09:59:46 +0100 (CET) From: Rustam Povarov <[EMAIL PROTECTED]> Hello! I post this to list, but can't see result. Repost this please, if my message not delivered. Sorry for my english. Best regards, Rustam Povarov -- Forwarded message -- Date: Tue, 7 Mar 2000 09:36:15 +0100 (CET) From: Rustam Povarov <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Re: (RADIATOR) Cisco As5300 and VOIP and Debit card On Tue, 7 Mar 2000, Mark Jenks wrote: > Has anyone used Radiator to send back the credit amount and credit time and > return code in vsa's for the Cisco debit card platform ? We use an As5300 > and are currently authing using radiator 2.15. The Cisco radius debug says > the pair is an invalid format for type 26, 26 referring to vendor specof > attribute I presume. > > We send and have defined in our dictionary : > > vendorattr 9 Credit_Amount 101 string > > Radius handles it OK, the AS5300 does not. > > Help > dictionary # Cisco Voice Extensions # NAS to RAS VENDORATTR 9Cisco-Voice-RemoteGatewayID 23 string VENDORATTR 9Cisco-Voice-ConnectionID24 string VENDORATTR 9Cisco-Voice-SetupTime 25 string VENDORATTR 9Cisco-Voice-CallDirection 26 string VENDORATTR 9Cisco-Voice-CallType27 string VENDORATTR 9Cisco-Voice-ConnectTime 28 string VENDORATTR 9Cisco-Voice-DisconnectTime 29 string VENDORATTR 9Cisco-Voice-DisconnectCause 30 string VENDORATTR 9Cisco-Voice-VoiceQuality31 string VENDORATTR 9Cisco-Voice-IVROutAVpair32 string VENDORATTR 9Cisco-Voice-GatewayName 33 string VENDORATTR 9Cisco-Voice-CallTreatment 34 string # RAS to NAS VENDORATTR 9Cisco-Voice-IVRInAVpair 100 string VENDORATTR 9Cisco-Voice-CreditAmount101 string VENDORATTR 9Cisco-Voice-CreditTime 102 string VENDORATTR 9Cisco-Voice-ReturnCode 103 string VENDORATTR 9Cisco-Voice-PromptID104 string VENDORATTR 9Cisco-Voice-TimeOfDay 105 string VENDORATTR 9Cisco-Voice-RedirectNumber 106 string VENDORATTR 9Cisco-Voice-PreferredLanguage 107 string VENDORATTR 9Cisco-Voice-RedirectIPAddress 108 string VENDORATTR 9Cisco-Voice-BillingMode 109 string VENDORATTR 9Cisco-Voice-CurrencyType110 string users - 1122334455Password = "6677" Service-Type= Login, Cisco-Voice-CreditAmount= "h323-credit-amount=10.00", Cisco-Voice-CreditTime = "h323-credit-time=600" - Best Regards Archer --- -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc. Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X. === Archive at http://www.starport.net/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) test, please ignore
test Best regards, Rustam Povarov === Archive at http://www.starport.net/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Accounting Table Problem
Hello Okan - On Tue, 07 Mar 2000, OKAN ARISU wrote: > Hi everbody, > We use Cisco 5300 and Radiator 2.14.1. Users are able to authenticate. Radiator also >writes the accounting information to Radonline table. But i have a problem > with ACCOUNTING table, radiator is not send to any insert information statement. And >i can't see any accounting information in the accounting table. Should i do > some change on the .cfg file or someting else? > > > ** > Foreground > LogStdout > Trace 4 > LogDir /software/Radiator-2.14.1/Logfiles/ > LogFile %L/%d-%m-%Y-logfile > DbDir . > > > Secret mysecret > # Her bir RAS client icin baska bir havuz yapilabilir > FramedGroupBaseAddress xx.xx.xx.xx > FramedGroupBaseAddress xx.xx.xx.xx > > NasType Cisco > DupInterval 2 > > > > > DBSource dbi:Oracle:basari.world > DBUsername gizli > DBAuth gizli123 > > > > DBSource dbi:Oracle:basari.world > DBUsername > DBAuth > > > > > PasswordLogFileName %L/%d-%m-%Y-password.log >AuthByPolicy ContinueWhileReject > > > FramedGroup 0 > Filename ./userlistbasar > DefaultSimultaneousUse 3 > > > > AddToReply Service-Type = Framed-User, > DefaultSimultaneousUse 1 > FramedGroup 0 > > # Adjust DBSource, DBUsername, DBAuth to suit your DB > DBSource dbi:Oracle:basari.world > DBUsername > DBAuth > # You may want to tailor these for your ACCOUNTING table > AccountingTable ACCOUNTING > AcctColumnDef USERNAME,User-Name > AcctColumnDef TIME_STAMP,Timestamp,integer > AcctColumnDef ACCTSTATUSTYPE,Acct-Status-Type > AcctColumnDef ACCTDELAYTIME,Acct-Delay-Time,integer > AcctColumnDef ACCTINPUTOCTETS,Acct-Input-Octets,integer > AcctColumnDef ACCTOUTPUTOCTETS,Acct-Output-Octets,integer > AcctColumnDef ACCTSESSIONID,Acct-Session-Id > AcctColumnDef ACCTSESSIONTIME,Acct-Session-Time,integer > AcctColumnDef ACCTTERMINATECAUSE,Acct-Terminate-Cause > AcctColumnDef NASIDENTIFIER,NAS-Identifier > AcctColumnDef NASPORT,NAS-Port,integer > AcctColumnDef FRAMEDIPADDRESS,Framed-IP-Address > > The reason this is happening is because the AuthBy FILE accepts the accounting request so the AuthBy SQL never sees it. Try changing to this: AuthByPolicy ContinueAlways hth Hugh -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc. Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X. === Archive at http://www.starport.net/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Forwarding accounting only
Hello > Is there a way to ask Radiator to forward only accounting requests from > the authentication server to the accounting server? Obviously, I don't > want to forward authentication requests. As far as I learned you should not user these Realms but two "Handlers", one for Authentification-Request and one for Accounting-Requests. Search the archive, there was several similar requests (one from me) in the last days. bye, -christian- -- Christian HammersWESTEND GmbH - Aachen und Dueren Tel 0241/701333-0 [EMAIL PROTECTED] Internet & Security for ProfessionalsFax 0241/911879 === Archive at http://www.starport.net/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Cisco As5300 and VOIP and Debit card
On Tue, 7 Mar 2000, Mark Jenks wrote: > Has anyone used Radiator to send back the credit amount and credit time and > return code in vsa's for the Cisco debit card platform ? We use an As5300 > and are currently authing using radiator 2.15. The Cisco radius debug says > the pair is an invalid format for type 26, 26 referring to vendor specof > attribute I presume. > > We send and have defined in our dictionary : > > vendorattr 9 Credit_Amount 101 string > > Radius handles it OK, the AS5300 does not. > > Help > dictionary # Cisco Voice Extensions # NAS to RAS VENDORATTR 9Cisco-Voice-RemoteGatewayID 23 string VENDORATTR 9Cisco-Voice-ConnectionID24 string VENDORATTR 9Cisco-Voice-SetupTime 25 string VENDORATTR 9Cisco-Voice-CallDirection 26 string VENDORATTR 9Cisco-Voice-CallType27 string VENDORATTR 9Cisco-Voice-ConnectTime 28 string VENDORATTR 9Cisco-Voice-DisconnectTime 29 string VENDORATTR 9Cisco-Voice-DisconnectCause 30 string VENDORATTR 9Cisco-Voice-VoiceQuality31 string VENDORATTR 9Cisco-Voice-IVROutAVpair32 string VENDORATTR 9Cisco-Voice-GatewayName 33 string VENDORATTR 9Cisco-Voice-CallTreatment 34 string # RAS to NAS VENDORATTR 9Cisco-Voice-IVRInAVpair 100 string VENDORATTR 9Cisco-Voice-CreditAmount101 string VENDORATTR 9Cisco-Voice-CreditTime 102 string VENDORATTR 9Cisco-Voice-ReturnCode 103 string VENDORATTR 9Cisco-Voice-PromptID104 string VENDORATTR 9Cisco-Voice-TimeOfDay 105 string VENDORATTR 9Cisco-Voice-RedirectNumber 106 string VENDORATTR 9Cisco-Voice-PreferredLanguage 107 string VENDORATTR 9Cisco-Voice-RedirectIPAddress 108 string VENDORATTR 9Cisco-Voice-BillingMode 109 string VENDORATTR 9Cisco-Voice-CurrencyType110 string users - 1122334455Password = "6677" Service-Type= Login, Cisco-Voice-CreditAmount= "h323-credit-amount=10.00", Cisco-Voice-CreditTime = "h323-credit-time=600" - Best Regards Archer === Archive at http://www.starport.net/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Accounting Table Problem
Hi everbody, We use Cisco 5300 and Radiator 2.14.1. Users are able to authenticate. Radiator also writes the accounting information to Radonline table. But i have a problem with ACCOUNTING table, radiator is not send to any insert information statement. And i can't see any accounting information in the accounting table. Should i do some change on the .cfg file or someting else? Thanks a lot... Okan Arisu Basari Telekom-Turkey Network Specialist ** Foreground LogStdout Trace 4 LogDir /software/Radiator-2.14.1/Logfiles/ LogFile %L/%d-%m-%Y-logfile DbDir . Secret mysecret # Her bir RAS client icin baska bir havuz yapilabilir FramedGroupBaseAddress xx.xx.xx.xx FramedGroupBaseAddress xx.xx.xx.xx NasType Cisco DupInterval 2 DBSource dbi:Oracle:basari.world DBUsername gizli DBAuth gizli123 DBSource dbi:Oracle:basari.world DBUsername DBAuth PasswordLogFileName %L/%d-%m-%Y-password.log AuthByPolicy ContinueWhileReject FramedGroup 0 Filename ./userlistbasar DefaultSimultaneousUse 3 AddToReply Service-Type = Framed-User, DefaultSimultaneousUse 1 FramedGroup 0 # Adjust DBSource, DBUsername, DBAuth to suit your DB DBSource dbi:Oracle:basari.world DBUsername DBAuth # You may want to tailor these for your ACCOUNTING table AccountingTable ACCOUNTING AcctColumnDef USERNAME,User-Name AcctColumnDef TIME_STAMP,Timestamp,integer AcctColumnDef ACCTSTATUSTYPE,Acct-Status-Type AcctColumnDef ACCTDELAYTIME,Acct-Delay-Time,integer AcctColumnDef ACCTINPUTOCTETS,Acct-Input-Octets,integer AcctColumnDef ACCTOUTPUTOCTETS,Acct-Output-Octets,integer AcctColumnDef ACCTSESSIONID,Acct-Session-Id AcctColumnDef ACCTSESSIONTIME,Acct-Session-Time,integer AcctColumnDef ACCTTERMINATECAUSE,Acct-Terminate-Cause AcctColumnDef NASIDENTIFIER,NAS-Identifier AcctColumnDef NASPORT,NAS-Port,integer AcctColumnDef FRAMEDIPADDRESS,Framed-IP-Address * ÿ Archive at http://www.starport.net/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
