Re: Accounting packets not received

2013-08-01 Thread Arran Cudbard-Bell
On 1 Aug 2013, at 11:21, Phil Mayers wrote: > On 01/08/13 10:02, Gab Quidilla wrote: >> Hi, >> >> I ran radsniff. I had someone at our branch login to the switches, and >> still no accounting packets, while when I log into our switches, the >> accounting packet is received. This is somewhat net

Re: Accounting packets not received

2013-08-01 Thread Phil Mayers
On 01/08/13 10:02, Gab Quidilla wrote: Hi, I ran radsniff. I had someone at our branch login to the switches, and still no accounting packets, while when I log into our switches, the accounting packet is received. This is somewhat network-related yes? Entirely. If the accounting packets don't

Re: Accounting packets not received

2013-08-01 Thread Gab Quidilla
Hi, I ran radsniff. I had someone at our branch login to the switches, and still no accounting packets, while when I log into our switches, the accounting packet is received. This is somewhat network-related yes? If it helps, here's the pic of the radsniff's output: http://i41.tinypic.com/2zp5g78

Re: Accounting packets not received

2013-08-01 Thread Phil Mayers
On 08/01/2013 09:35 AM, Gab Quidilla wrote: office, it would not pass through the firewall. Accessing the branches passess through the firewall, but the fw WAN link is configured for accepting all packets Yeah... sorry, but we hear that a lot on this mailing list, and quite often the firewall

Re: Accounting packets not received

2013-08-01 Thread Arran Cudbard-Bell
On 1 Aug 2013, at 09:35, Gab Quidilla wrote: > Hi, thanks for the reply. > > I'm pretty sure that every NAS is sending accounting packets, because I am > using the same config on the switches here and for other branches, the only > difference is the shared secret used. > > On the first post

Re: Accounting packets not received

2013-08-01 Thread Gab Quidilla
Hi, thanks for the reply. I'm pretty sure that every NAS is sending accounting packets, because I am using the same config on the switches here and for other branches, the only difference is the shared secret used. On the first post is Pastebin links, with the accounting packet received after aut

Re: Accounting packets not received

2013-08-01 Thread Phil Mayers
On 08/01/2013 08:51 AM, Gab Quidilla wrote: Good day, We have several branches configured for RADIUS. We are using freeradius 2.1.12 from CentOS 6.4 repo, plus daloradius 0.9.9, and MySQL. The problem is that accounting packets are not received here in our head office when accessing other branch

Re: Accounting: visualize login, logout and commands

2013-06-03 Thread Alan Buxey
For switches, ensure that your are sending accounting and ensure on the radius server that you are recording sick packets. ... but what switches are you running as eg Cisco switches use Tacacs+ for sending details of all commands run. .. alan - List info/subscribe/unsubscribe? See http://www.

Re: Accounting: visualize login, logout and commands

2013-06-03 Thread Alan DeKok
Roberto Carna wrote: > Dear, and what can I do to accont jus login, logout and sesson times fr > swithes and Linux boxes ??? As I said, see the switch documentation. FreeRADIUS *receives* accounting packets. It doesn't *create* them. if you want to receive data in an accounting packet, lo

Re: Accounting: visualize login, logout and commands

2013-06-03 Thread Roberto Carna
Dear, and what can I do to accont jus login, logout and sesson times fr swithes and Linux boxes ??? Because by default I can see any accounting event. Thanks again. Roberto 2013/6/3 Alan DeKok > Roberto Carna wrote: > > Dear, I've implemented a Freeradius server for SSH Linux and Telnet > >

Re: Accounting: visualize login, logout and commands

2013-06-03 Thread Alan DeKok
Roberto Carna wrote: > Dear, I've implemented a Freeradius server for SSH Linux and Telnet > Switch authentication. > > How can I do in order to get accounting of logins, logouts and -if > possible- the commands executed by the users authenticated ??? See the switch documentation. If it can lo

Re: accounting question

2013-01-22 Thread Phil Mayers
On 01/21/2013 06:47 AM, Tzvika Gelber wrote: i'm looking to focus a problem i have - i think the main issue is not freeradius but it's a good place to ask. I have a server that's do both Radius and accounting for Wifi random users (web redirected system). now i just discovered that to authentic

Re: accounting data

2012-11-14 Thread Periko Support
On Mon, Nov 12, 2012 at 2:25 AM, Fajar A. Nugraha wrote: > On Mon, Nov 12, 2012 at 2:29 PM, Dirk van der Walt > wrote: >> Although rlm_counter is primarily used as an introduction here to >> better understand the counter modules, the next section covers the >> rlm_sqlcounter module. This module i

Re: accounting data

2012-11-12 Thread Fajar A. Nugraha
On Mon, Nov 12, 2012 at 2:29 PM, Dirk van der Walt wrote: > Although rlm_counter is primarily used as an introduction here to > better understand the counter modules, the next section covers the > rlm_sqlcounter module. This module is more flexible and preferred. If it were me I'd jump directly t

Re: accounting data

2012-11-11 Thread Periko Support
On Sun, Nov 11, 2012 at 5:45 AM, Alan DeKok wrote: > Periko Support wrote: >> On Sat, Nov 10, 2012 at 6:27 AM, Alan DeKok >> wrote: >>> What does the debug output say? > .. >> This is the output: > > You've given a lot of information, which is nice But please don't > send the output of "ra

Re: accounting data

2012-11-11 Thread Alan DeKok
Periko Support wrote: > On Sat, Nov 10, 2012 at 6:27 AM, Alan DeKok wrote: >> What does the debug output say? .. > This is the output: You've given a lot of information, which is nice But please don't send the output of "radtest". I didn't ask for it. It's not necessary. And you've del

Re: accounting data

2012-11-10 Thread Periko Support
On Sat, Nov 10, 2012 at 6:27 AM, Alan DeKok wrote: > Periko Support wrote: >> This works, but I would like to understand, I can try that steps a >> lot times and every time it give me the same result: 1770, doesn't >> suppose that every time I run the same steps the counter must be >> lower? > >

Re: accounting data

2012-11-10 Thread Alan DeKok
Periko Support wrote: > This works, but I would like to understand, I can try that steps a > lot times and every time it give me the same result: 1770, doesn't > suppose that every time I run the same steps the counter must be > lower? Only if the NAS is sending accounting packets. What does

Re: accounting data

2012-11-09 Thread Periko Support
My Fault, this message wasn't finish, I will continue here.: On Fri, Nov 9, 2012 at 1:09 PM, Periko Support wrote: > Hi. > > Centos 5.x > FreeRadius 2.1.1. > > I'm reading the book freeradius beginners Guide chapter 6: accounting. > > Page 139. > > Amount of Time. > > I have follow the book

Re: Accounting and DialupAdmin

2012-11-08 Thread Erich Titl
Hi Alan on 08.11.2012 21:06, Alan DeKok wrote: > Erich Titl wrote: >> Yes, I know if I also change the attribute to Cleartext-Password. Any >> plans to support NT-Password hashes? > > In dialup_admin? Send a patch. This works for me diff -urN freeradius-server-2.2.0.orig/dialup_admin/conf/ad

Re: Accounting and DialupAdmin

2012-11-08 Thread Alan DeKok
Erich Titl wrote: > Yes, I know if I also change the attribute to Cleartext-Password. Any > plans to support NT-Password hashes? In dialup_admin? Send a patch. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Accounting and DialupAdmin

2012-11-08 Thread Erich Titl
Alan on 08.11.2012 19:10, Alan DeKok wrote: > Erich Titl wrote: >> # >> # can be one of crypt,md5,clear >> # >> general_encryption_method: crypt >> >> this appears to be used by the GUI >> >> Now with MSCHAP this appears not to work simply out of the box. Does one >> need to hack that code or is t

Re: Accounting and DialupAdmin

2012-11-08 Thread Alan DeKok
Erich Titl wrote: > # > # can be one of crypt,md5,clear > # > general_encryption_method: crypt > > this appears to be used by the GUI > > Now with MSCHAP this appears not to work simply out of the box. Does one > need to hack that code or is there a canonical way to be used for M$ W7 > (P)EAP aut

Re: Accounting Start Request error

2012-10-23 Thread Arran Cudbard-Bell
On 23 Oct 2012, at 05:21, QASIM RAO wrote: > Hi, > > I am facing this problem that radius giving me return code 1. as for as i > think this is because Acct-Session-Id is missing in request... > > how can i solve this problem because session id is set by session counter i > can not set it m

Re: Accounting Start Request error

2012-10-23 Thread alan buxey
Hi, >I am facing this problem that radius giving me return code 1. as for as i >think this is because Acct-Session-Id is missing in request...  ..did you read the output, think this is the only issue? >rlm_acct_unique: WARNING: Attribute NAS-Port was not found in request, >u

Re: Accounting pakets on layer 2

2012-08-24 Thread Andreas Meyer
Hello! Michael Schwartzkopff wrote: > > Hello! > > > > Excuse me please, if this is the wrong list for my question! If I have > > an AccessPoint working on layer 2 like the ALL0278, how are accounting > > pakets generated and sent to the radius-server on port 1813. Which > > application is resp

Re: Accounting pakets on layer 2

2012-08-24 Thread Michael Schwartzkopff
> Hello! > > Excuse me please, if this is the wrong list for my question! If I have > an AccessPoint working on layer 2 like the ALL0278, how are accounting > pakets generated and sent to the radius-server on port 1813. Which > application is responsible for generating those pakets? > > Thank you

Re: Accounting pakets on layer 2

2012-08-24 Thread Omri Bahumi
Hi, Usually, the same interface you're using for management is used for sending accounting packets, just like SNMP management. On Cisco IOS this is configurable with the "ip radius source-interface" command. When unspecified, the gateway interface's IP address is being used instead. Regarding "Whi

Re: accounting in syslog

2012-06-05 Thread Matthew Newton
On Mon, Jun 04, 2012 at 10:02:01AM -0400, Luo, Frank Y.F. Mr. wrote: > Also about the username, you are right on the Mac address - I > misread it - but I do see unreadable accounting log like this > one in the packet. Is this something fixable at NAS? Nothing looks wrong with the packet below. Aga

Re: accounting in syslog

2012-06-04 Thread Luo, Frank Y.F. Mr.
oops, yes it is described in the config file - thanks anyway On Jun 4, 2012, at 10:10 AM, Jens Weibler wrote: > On 06/04/2012 04:02 PM, Luo, Frank Y.F. Mr. wrote: >> thanks. will do some research. But I guess I can not send this as syslog >> entry to a syslog server, right? > > yes, you can - j

Re: accounting in syslog

2012-06-04 Thread Jens Weibler
On 06/04/2012 04:02 PM, Luo, Frank Y.F. Mr. wrote: thanks. will do some research. But I guess I can not send this as syslog entry to a syslog server, right? yes, you can - just configure linelog to send the wanted variables to syslog.. -- Jens Weibler IT-Services Hochschule Darmstadt www.h

Re: accounting in syslog

2012-06-04 Thread Luo, Frank Y.F. Mr.
thanks. will do some research. But I guess I can not send this as syslog entry to a syslog server, right? Also about the username, you are right on the Mac address - I misread it - but I do see unreadable accounting log like this one in the packet. Is this something fixable at NAS? Frank rad_

Re: accounting in syslog

2012-05-30 Thread Phil Mayers
On 30/05/12 18:00, Luo, Frank Y.F. Mr. wrote: Is there a way to send accounting log to syslog instead of detail file in radacct? See "linelog" Also instead of sending it to sql db, i tried to use sql-file but it results in a lot of sql command (we really don't want to run the sql command lat

Re: Accounting-Response disable

2012-05-12 Thread peterpz
Alan - now it's working really great! Thank you very much, you saved me from a lot of work! Best regards, Peter -- View this message in context: http://freeradius.1045715.n5.nabble.com/Accounting-Response-disable-tp5706964p5706988.html Sent from the FreeRadius - User mailing list archive at Nabb

Re: Accounting-Response disable

2012-05-12 Thread Alan DeKok
peterpz wrote: > But I cannot configure FreeRadius to not send that packets. When in the > radiusd.conf I will comment "detail" line from "accounting" module the > Accounting-Responses are not send (super!), but also logging is disabled > (sic!). How to disable reponses but without disabling loggin

Re: Accounting-Request with invalid signature

2012-03-19 Thread Alan DeKok
Shurbann Martes wrote: > Are there any limitation to the secret key? I.e. some special characters > not allowed or length? All characters are allowed. HOWEVER, some characters, like "$" and "\" require escaping. Put single quotes around the secret, and it could work, too. See "man unlang" f

Re: Accounting-Request with invalid signature

2012-03-18 Thread Shurbann Martes
One more question: Are there any limitation to the secret key? I.e. some special characters not allowed or length? I'm asking this because I can not believe this problem is caused by to this person giving me the wrong secret-key. Regards, Shurbann Martes On Sun, Mar 18, 2012 at 5:15 PM, Shurba

Re: Accounting-Request with invalid signature

2012-03-18 Thread Shurbann Martes
Hi Alan, Ok I understand what you're saying. I'm just copy-pasting the secret-key to the clients.conf: client x.x.x.x/16 { secret = shortname = private-network-2 } You're saying that the only reason for this failure is wrong secret key? In other words they gave m

Re: Accounting-Request with invalid signature

2012-03-18 Thread Alan DeKok
Shurbann Martes wrote: > The problem is when FreeRADIUS receives a Accounting-Request it drops > the packet without response due to a problem with the signature: > > rad_recv: Accounting-Request packet from host x.x.x.x port 64514, id=1, > length=287 > Received Accounting-Request packet from x.x.x

Re: Accounting for nonexistent users / NAS ?

2012-02-15 Thread Fajar A. Nugraha
On Wed, Feb 15, 2012 at 2:47 PM, wrote: > Any suggestions? If you didn't get any response, it's usually either: (1) the answer was already given, OR (2) your question was not clear, or you're asking something that doesn't make sense, OR (3) you were given sugesstions, but choose to ignore it >

Re: Accounting for nonexistent users / NAS ?

2012-02-14 Thread justin76
Any suggestions? Thank you! On Feb 14, 2012, at 3:47 PM, justi...@mac.com wrote: Can this be achived for only accounting start requests? So the check would be only when a new accounting session starts, ongoing sessions shouldn't be checked. preacct { update control { Tmp-Integer-0 := %{sql

Re: Accounting for nonexistent users / NAS ?

2012-02-14 Thread justin76
Can this be achived for only accounting start requests? So the check would be only when a new accounting session starts, ongoing sessions shouldn't be checked. preacct { update control { Tmp-Integer-0 := %{sql:select 1 from radcheck where username='%{User-Name}'} } } accounting { if (con

Re: Accounting for nonexistent users / NAS ?

2012-02-14 Thread Fajar A. Nugraha
On Tue, Feb 14, 2012 at 6:31 PM, Phil Mayers wrote: > On 14/02/12 11:18, justi...@mac.com wrote: >> >> NAS are set up by partner companies all around the world. We can tell >> them to fix the NAS but maybe it can take weeks and we don't want to >> allow misconfigured NAS in the accounting at all.

Re: Accounting for nonexistent users / NAS ?

2012-02-14 Thread Phil Mayers
On 14/02/12 11:18, justi...@mac.com wrote: NAS are set up by partner companies all around the world. We can tell them to fix the NAS but maybe it can take weeks and we don't want to allow misconfigured NAS in the accounting at all. Freeradius can perform arbitrary processing, to ignore or accep

Re: Accounting for nonexistent users / NAS ?

2012-02-14 Thread justin76
NAS are set up by partner companies all around the world. We can tell them to fix the NAS but maybe it can take weeks and we don't want to allow misconfigured NAS in the accounting at all. On Feb 14, 2012, at 12:08 PM, Phil Mayers wrote: On 14/02/12 10:59, justi...@mac.com wrote: > Thanks, i ha

Re: Accounting for nonexistent users / NAS ?

2012-02-14 Thread Phil Mayers
On 14/02/12 10:59, justi...@mac.com wrote: Thanks, i haven't used preacct before, in what module is this, can you send detailed solution? Sorry, i am only a beginner in writing customized things for freeradius. This is a section in the standard virtual server config. If you look in sites-enabl

Re: Accounting for nonexistent users / NAS ?

2012-02-14 Thread justin76
Thanks, i haven't used preacct before, in what module is this, can you send detailed solution? Sorry, i am only a beginner in writing customized things for freeradius. About the NAS: in our case, the client is in posession of the shared secret, but the NAS is set incorrectly. Also, we are using

Re: Accounting for nonexistent users / NAS ?

2012-02-14 Thread Phil Mayers
On 14/02/12 10:27, justi...@mac.com wrote: Hi all, we are using freeradius with mysql. Accounting works fine, but we discovered that the server is doing accounting for users which don't exist at all in our system. They are probably local users but accounting information is sent to our servers.

Re: Accounting not working

2012-01-04 Thread John Corps
Issue has been fixed. Not to sure why, but reconfiguring the clients to do accounting has solved itvery strange. On Wed, Jan 4, 2012 at 11:18 AM, John Corps wrote: > Yes clients are configured properly, they are working fine to > authorize correctly, its just not showing anything in debug abo

Re: Accounting not working

2012-01-04 Thread John Corps
Yes clients are configured properly, they are working fine to authorize correctly, its just not showing anything in debug about accounting requests. I am stumped. On Tue, Jan 3, 2012 at 4:32 PM, Christ Schlacta wrote: > are the clients also properly configured? > > > On 1/3/2012 11:18, John Corps

Re: Accounting not working

2012-01-03 Thread Christ Schlacta
are the clients also properly configured? On 1/3/2012 11:18, John Corps wrote: Doing an nmap scan on the server it does show both 1812 and 1813 open UDP. The auth is working fine on 1812 so i don't understand why accounting isn't working. On Tue, Jan 3, 2012 at 2:09 PM, YvesDM wrote: On Tue,

Re: Accounting not working

2012-01-03 Thread John Corps
Doing an nmap scan on the server it does show both 1812 and 1813 open UDP. The auth is working fine on 1812 so i don't understand why accounting isn't working. On Tue, Jan 3, 2012 at 2:09 PM, YvesDM wrote: > > On Tue, Jan 3, 2012 at 4:44 PM, John Corps wrote: >> >> Hello All, >> >> I have 4 serv

Re: Accounting not working

2012-01-03 Thread YvesDM
On Tue, Jan 3, 2012 at 4:44 PM, John Corps wrote: > Hello All, > > I have 4 servers setup exactly the same at 4 different locations. Each > server is using the exact same configs and is working perfectly well > doing what I want it to do. The only issue I have is at the 1 > location, I am not get

Re: Accounting-Response dependence

2011-12-14 Thread Alan Buxey
So what us your decoupled accounting using? alan -- Message may be brief as it has been sent from my mobile - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Accounting-Response dependence

2011-12-14 Thread a...@netconnect.ro
Alan DeKok-2 wrote > > Because you only have one server. Split the server into two > processes. One listens on network sockets and writes to the detail > file. It shouldn't do anything else. Another reads from the detail > file and writes to SQL. > I think this might just work will try it

Re: Accounting-Response dependence

2011-12-14 Thread Alan DeKok
a...@netconnect.ro wrote: > All is well when there's no load but at certain times it > happens that one of the tables must be locked for 2 or 3 seconds One response is to use a real database. Something as critical as a database shouldn't lock for 2-3 seconds. > (snapshot > and purge on a memor

Re: Accounting-Response dependence

2011-12-13 Thread Fajar A. Nugraha
On Wed, Dec 14, 2011 at 7:03 AM, a...@netconnect.ro wrote: > > Alan Buxey wrote >> >> have you tried the buffered_sql virtual-server instead? >> > > I don't use any sql in freeradius. I store the packet directly from > rlm_python. I only use freeradius for its decoupled accounting. Is the sql ser

Re: Accounting-Response dependence

2011-12-13 Thread a...@netconnect.ro
Alan Buxey wrote > > have you tried the buffered_sql virtual-server instead? > I don't use any sql in freeradius. I store the packet directly from rlm_python. I only use freeradius for its decoupled accounting. -- View this message in context: http://freeradius.1045715.n5.nabble.com/Accounti

Re: Accounting-Response dependence

2011-12-13 Thread Alan Buxey
Hi, > I have 4 gateways bombing thousands of packets/s at my freeradius server. I > have it configured such that "default" writes packets in a detail file. > "decoupled_accounting" site configuration tells it to read packets from > detail file at load_factor = 100 (tests showed this value works be

Re: Accounting-Response dependence

2011-12-13 Thread a...@netconnect.ro
Hi, I have a similar problem but the other way around. I have 4 gateways bombing thousands of packets/s at my freeradius server. I have it configured such that "default" writes packets in a detail file. "decoupled_accounting" site configuration tells it to read packets from detail file at load_fa

Re: Accounting-Response dependence

2011-12-01 Thread RudolfSusnik
Effective solutions are usualy simple ;) Tnx Alan! Regards, Rudolf. -- View this message in context: http://freeradius.1045715.n5.nabble.com/Accounting-Response-dependence-tp5038687p5038812.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe

Re: Accounting-Response dependence

2011-12-01 Thread Alan DeKok
RudolfSusnik wrote: > When execution of mysql procedure takes a while, accounting-response is > delayed to accounting-request according to the procedure execution delay. That's how accounting works. > When MySQL goes down, accounting-response is sent immediately. Is it > possible to configure a

Re: Accounting Forwarding

2011-09-15 Thread Alan DeKok
dbeutler wrote: > When I run in debug mode, I get the following: > Starting - reading configuration files ... > reread_config: reading radiusd.conf > Config: including file: ../etc/raddb/proxy.conf > Config: including file: ../etc/raddb/clients.conf > Config: including file: ../etc/raddb/snm

Re: Accounting Forwarding

2011-09-15 Thread dbeutler
I thought I would first work on setting up the proxy and then focus on the picking of certain attribute pairs to forward. I put the following in the proxy.conf file: realm fakecompany.com { type= radius authhost= 192.41.31.4:1812 accthost= 192.41.

Re: Accounting Forwarding

2011-09-15 Thread Alan DeKok
dbeutler wrote: > I have recently setup FreeRadius on a test machine and loaded (via a > dictionary file) the VSA's for a NAS in our network. The Radius messages we > are receiving are purely accounting messages. > I am trying to accomplish the following: I would like to forward accounting > mess

Re: Accounting - limits

2011-07-25 Thread Evgeny Yurchenko
>Rizky Marunda Dinata >Mon, 25 Jul 2011 06:34:04 -0700 > >Dear Evgeny, > >Yes, freeradius is able to monitor and limit usage, for example will reject >login after 1 GB of sum ( download+upload), please read info about >sql-counter (http://wiki.freeradius.org/Rlm_sqlcounter) Thank you very much R

Re: Accounting - limits

2011-07-25 Thread Rizky Marunda Dinata
ounting - limits (Evgeny Yurchenko) > 5. How to allow a user login in a certain time? (Lingfeng Xiong) > 6. RE: Accounting - limits (Ryan Williams) > 7. Download/Upload Calculation (radiusus) > 8. counter daily (Angus JIANG Jian) > > > -

Re: Accounting - limits

2011-07-25 Thread Evgeny Yurchenko
Sun, 24 Jul 2011 23:42:19 -0700, Ryan Williams wrote: >Hello anonymous! >You can write a custom SQL query and include it when authenticating the user >to determine if the user has or has not downloaded in excess of 1GB. >Assuming of course that you're storing the accounting data in an SQL >databa

RE: Accounting - limits

2011-07-24 Thread Ryan Williams
Hello anonymous! You can write a custom SQL query and include it when authenticating the user to determine if the user has or has not downloaded in excess of 1GB. Assuming of course that you're storing the accounting data in an SQL database. Regards, Ryan Williams - List info/subscribe/unsubscri

Re: Accounting log issue

2011-06-28 Thread Tseveendorj
On 11.06.28 13:44, Fajar A. Nugraha wrote: On Tue, Jun 28, 2011 at 12:27 PM, Tseveendorj wrote: Hello, The accounting information not logged in /var/log/freeradius/radacct/IPADDRESS/detail-x.log and also in MySQL table radacct. How to solve this ? Does your NAS send accounting packets? Se

Re: Accounting log issue

2011-06-27 Thread Tseveendorj
On 11.06.28 13:44, Fajar A. Nugraha wrote: On Tue, Jun 28, 2011 at 12:27 PM, Tseveendorj wrote: Hello, The accounting information not logged in /var/log/freeradius/radacct/IPADDRESS/detail-x.log and also in MySQL table radacct. How to solve this ? Does your NAS send accounting packets? Se

Re: Accounting log issue

2011-06-27 Thread Fajar A. Nugraha
On Tue, Jun 28, 2011 at 12:27 PM, Tseveendorj wrote: > Hello, > > The accounting information not logged in > /var/log/freeradius/radacct/IPADDRESS/detail-x.log and also in MySQL > table radacct. How to solve this ? Does your NAS send accounting packets? See your NAS documentation for details.

Re: accounting RADIUS module PAM

2011-05-27 Thread Alan DeKok
Igor Pinotti wrote: > But there is a function called "pam_private_session" ... does this > function do the cisco's "accounting" stuff?? ... > As you've discovered, the PAM module doesn't do accounting. > > Alan Dekok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/

Re: accounting RADIUS module PAM

2011-05-27 Thread Igor Pinotti
But there is a function called "pam_private_session" ... does this function do the cisco's "accounting" stuff?? Thanks in advance On Fri, May 27, 2011 at 6:18 PM, Alan DeKok wrote: > Igor Pinotti wrote: > > I'm using the Linux-PAM (1.1.3) with the RADIUS module (1.3.17) in an > > embeddded syste

Re: accounting RADIUS module PAM

2011-05-27 Thread Alan DeKok
Igor Pinotti wrote: > I'm using the Linux-PAM (1.1.3) with the RADIUS module (1.3.17) in an > embeddded system, running linux. I'm trying to set the RADIUS accounting > on it, enabling the accounting commands. But I can't find where I can do > this, even in the src code of the Radius module, the fu

Re: Accounting - Acct-Interim-Interval

2011-03-16 Thread Alan DeKok
Phil Mayers wrote: >> * The reporting back (accounting packets), is that the responsibility og >> the NAS / RADIUS / Client ? > > The NAS. Blame the NAS for *everything*. :) Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Accounting - Acct-Interim-Interval

2011-03-16 Thread Phil Mayers
On 16/03/11 11:15, Wynand Meijer wrote: Greetings, * We have added the attribute "Acct-Interim-Interval = 150" to the radgroupreply Ok. That's a lot shorter than most people set (300 is common, 1800 in some cases) but it's legal. It MUST NOT be <60. * However we are not getting accounting

Re: Accounting and Acct-Delay-Time in MySQL

2010-12-02 Thread Phil Mayers
On 18/11/10 07:58, Stefan Winter wrote: Hi, I'd re-visit the entire accounting table&& queries. Create a *new* table, so that people don't have surprises when they upgrade. Ideally, it should be robust in the face of duplicate packets, and packets forwarded via 2 different paths

Re: Accounting and Acct-Delay-Time in MySQL

2010-12-02 Thread Alan DeKok
Stefan Winter wrote: > Okay, I'll see what I can do. One thing I noticed is that the default > schema has a column > > xascendsessionsvrkey varchar(10) default NULL, > > A VSA, of a vendor that's long dead? This is one column that I would > wipe out. If some people find they need it, they can alw

Re: Accounting data and NULL sessions

2010-11-18 Thread Alan DeKok
Natr Brazell wrote: > 1. I am using mysql for radacct data to keep track of sessions. The > accounting data is going into flat files on each radius server. Is > there a way to get the accounting data to go directly to into a mysql > table? I don't want the accounting data in radacct. That qu

Re: Accounting and Acct-Delay-Time in MySQL

2010-11-18 Thread Stefan Winter
Hi, I'd re-visit the entire accounting table&& queries. Create a *new* table, so that people don't have surprises when they upgrade. Ideally, it should be robust in the face of duplicate packets, and packets forwarded via 2 different paths (think radrelay + delays) Okay, I'll see wha

Re: Accounting and Acct-Delay-Time in MySQL

2010-11-17 Thread Alan DeKok
Stefan Winter wrote: > the default queries for mysql log Acct-Delay-Time into the columns > acctstartdelay and acctstopdelay, respectively. They leave the > timestamps for acctstarttime and acctstoptime at %S. For a non-zero > delay, this means that a database reader needs to do math to get the >

Re: Accounting Log

2010-11-09 Thread Alan DeKok
Breuer Nicolas wrote: > I know that this is the correct behaviour concerning redundant groups but > for me a Stop with zero session length isn't a SQL issue that needs to go > on secondary SQL servers. The SQL module did not write the record to the database. This means that the record was *

Re: (Fwd) (Fwd) Re: Accounting Log

2010-11-08 Thread Alexandre Chapellon
r revelant attribute. Regards. > > > > > > --- Forwarded message follows --- > From:Breuer Nicolas > > To:freeRadius users mailing list > > Subject: (Fwd) Re: Accounting Log > S

(Fwd) (Fwd) Re: Accounting Log

2010-11-08 Thread Breuer Nicolas
) Re: Accounting Log Send reply to: nicolas.bre...@belcenter.biz Date sent: Mon, 08 Nov 2010 23:00:40 +0100 From: Alexandre Chapellon I have the very same behaviour here on my FR2.1.6 setup with PGSQL accoutning. It produce noisy logs but nothing unacceptable. You can change this by not

(Fwd) Re: Accounting Log

2010-11-08 Thread Breuer Nicolas
From: Alexandre Chapellon I have the very same behaviour here on my FR2.1.6 setup with PGSQL accoutning. It produce noisy logs but nothing unacceptable. You can change this by not doing accouting for Stop Accounting packet that show up null session-time: in your acccouting section: if (Acc

Re: Accounting Log

2010-11-08 Thread Breuer Nicolas
Breuer Nicolas wrote: > > Accounting-01 thinks that stop packet with zero session length is an error > and tried to connect to Accounting-02 sql server. > > Is it the correct behaviour ? Yes. see doc/configurable_failover for how to change redundant groups. Alan DeKok. Alan, I

Re: Accounting Log

2010-11-08 Thread Alan Buxey
Hi, >in your acccouting section: > >if (Acct-Status-Type == Stop && Session-Time != 0) { >    sql_accounting_module_name >} we do a similar thing - except that we do this around a call to the 'detail' virtual-server system instead. doing live SQL inserts/updates of accounting is

Re: Accounting Log

2010-11-08 Thread Alexandre Chapellon
I have the very same behaviour here on my FR2.1.6 setup with PGSQL accoutning. It produce noisy logs but nothing unacceptable. You can change this by not doing accouting for Stop Accounting packet that show up null session-time: in your acccouting section: if (Acct-Status-Type == Stop && Session-

Re: Accounting Log

2010-11-08 Thread Alan DeKok
Breuer Nicolas wrote: > > Accounting-01 thinks that stop packet with zero session length is an error > and tried to connect to Accounting-02 sql server. > > Is it the correct behaviour ? Yes. see doc/configurable_failover for how to change redundant groups. Alan DeKok. - List info/sub

Re: Accounting info

2010-08-10 Thread JOE
Currently I use 2.1.4. This functionality is supported in 2.14 release?. Regards On Tue, Aug 10, 2010 at 6:54 PM, Tim Sylvester wrote: >> Does  freeradius support receiving Interim-Update with the accounting >> info? meaning updating the radacct table with user usage / session >> time at regula

RE: Accounting info

2010-08-10 Thread Tim Sylvester
> Does freeradius support receiving Interim-Update with the accounting > info? meaning updating the radacct table with user usage / session > time at regular intervals? Yes. You need to make sure that your NAS is configured to send the updates. Tim - List info/subscribe/unsubscribe? See http:/

RE: Accounting and SQL

2010-07-09 Thread David Peterson
@lists.freeradiu s.org] On Behalf Of Ben Wiechman Sent: Friday, July 09, 2010 5:56 PM To: FreeRadius users mailing list Subject: RE: Accounting and SQL Are you by chance testing the FreeRADIUS ready version of Alvarion's BTS firmware? > -Original Message- > From: freeradius-users

RE: Accounting and SQL

2010-07-09 Thread Ben Wiechman
us.org] On Behalf Of > David Peterson > Sent: Friday, July 09, 2010 1:14 PM > To: 'FreeRadius users mailing list' > Subject: RE: Accounting and SQL > > To answer my question, the NAS was not sending any data and is now > fixed and > sending accounting. > > Davi

RE: Accounting and SQL

2010-07-09 Thread David Peterson
To answer my question, the NAS was not sending any data and is now fixed and sending accounting. David -Original Message- From: freeradius-users-bounces+david.peterson=acc-corp@lists.freeradius.org [mailto:freeradius-users-bounces+david.peterson=acc-corp@lists.freeradiu s.org] On

RE: accounting without auth

2010-06-14 Thread Stefan A.
> Is it possible to configure freeradius for accounting only without > authorization/authentication? As FR handles Auth and Accounting independently, just do it. Stefan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: accounting without auth

2010-06-14 Thread Tim Sylvester
> Is it possible to configure freeradius for accounting only without > authorization/authentication? Yes. Tim - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: log loading of configuration files [was Re: Accounting to MySQL not working]

2010-06-07 Thread Josip Rodin
On Mon, Jun 07, 2010 at 10:49:01AM +0200, Alan DeKok wrote: > Josip Rodin wrote: > > Then again, there is no clear indication to users which part of the large > > debug output is important and which part is ignorable, so even if they don't > > ignore it, it may still actually be too complicated for

Re: log loading of configuration files [was Re: Accounting to MySQL not working]

2010-06-07 Thread Alan DeKok
Josip Rodin wrote: > Then again, there is no clear indication to users which part of the large > debug output is important and which part is ignorable, so even if they don't > ignore it, it may still actually be too complicated for them to handle. The alternative is to run a system that you don'

Re: log loading of configuration files [was Re: Accounting to MySQL not working]

2010-06-06 Thread Josip Rodin
On Wed, Jun 02, 2010 at 01:46:02PM +0200, Alan DeKok wrote: > > When they run it with -X, they'll see the packets as they come in and > > that's good for the debugging of the per-request logic, but a lot of > > this initial text will scroll down the screen as if everything in it is > > all right, a

  1   2   3   4   5   >