accouting log twice
Hello,
We use freeradius for our clients. Clients have a username with a realm,
like [EMAIL PROTECTED] Proxy radius and radius server are on the same
machine, and my proxy.conf looks like this:
realm domain {
type= radius
authhost= localhost:1812
accthost= localhost:1813
secret = secret
}
Users can log in, but accounting seems to have problems:
on accounting start:
Wed Jun 18 11:43:30 2008 : Info: rlm_radutmp: Login entry for NAS nas
port 167 duplicate
on accounting stop:
Wed Jun 18 11:42:05 2008 : Error: rlm_radutmp: Logout for NAS nas port
20, but no Login record
Accounting is logged in a mysql database, but appears twice: once with
the realm ([EMAIL PROTECTED]), and once without (user).
What can I do for proxied requests not to be logged ?
Pre-proxy logs seems to be disabled in the radiusd.conf:
# detail pre_proxy_log {
# detailfile =
${radacctdir}/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d
#
# This MUST be 0600, otherwise anyone can read
# the users passwords!
# detailperm = 0600
# }
Could a use attr_rewrite in this case, with something like this :
attr_rewrite sanecallerid {
attribute = UserName
# may be packet, reply, proxy, proxy_reply or
config
searchin = packet
searchfor = domain
replacewith =
ignore_case = no
new_attribute = no
max_matches = 10
## If set to yes then the replace string will be appended
to the original string
append = no
}
Thanks for tour answers,
Mathieu
begin:vcard
fn:Mathieu Lemaitre
n:Lemaitre;Mathieu
org:Walan
adr:;;46 rue Jean Sans Peur;Lille;;59000;France
email;internet:[EMAIL PROTECTED]
title;quoted-printable:Ing=C3=A9nieur
tel;work:03 20 78 24 23
tel;fax:03 20 77 58 11
x-mozilla-html:FALSE
url:https://www.walan.fr
version:2.1
end:vcard
smime.p7s
Description: S/MIME Cryptographic Signature
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
bandwidth and volume limit
HI all, I'm running freeradius 1.0.2 on a debian stable. For new clients, I need to implement 2 functions: * a bandwidth limit on a per-user basis. I mean, I need to be able to set, for a user, a value for his upstream and downstream bw, which is sent by the radius as a reply attribute. Are they predefined attributes to do this? * a volume limit: I'd like to be able to set a maximum amount of data monthly downloadable for each user. I tried with rlm_slqcounter, changing the sql request to check AcctInputOctet instead of SessionTime, but the problem is that radius always reply an attribute called MaxSessionTime (or sthg like that), containing the remaining data volume for the user... is there as way to change the name of the attribute answered by freeradius?? Many thaks, Mathieu - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
problem with rlm_sql or mysql-server ?
Hi everybody, I have a problem with freeradius 1.0.2 and mysql 4.0.24, on a debian stable, used for about 1700 clients. I often have (about 10 times an hour) errors like these: Tue Mar 20 12:21:29 2007 : Auth: Login incorrect: [/Y] (from client port 0) Tue Mar 20 12:21:40 2007 : Info: rlm_sql (sql): No matching entry in the database for request from user [X] Tue Mar 20 12:21:40 2007 : Auth: Login incorrect: [X/Y] (from client port 0) Tue Mar 20 12:22:00 2007 : Info: rlm_sql (sql): No matching entry in the database for request from user [X] Tue Mar 20 12:22:00 2007 : Auth: Login incorrect: [X/Y] (from client port 0) Tue Mar 20 12:22:21 2007 : Auth: Login OK: [X/Y] (from client port 0) whereas, of course, the username exists, and the pass didn't change... is this a problem with the freeradius config, or is the mysqlserver too busy? thanks for your answers, Mathieu begin:vcard fn:Mathieu Lemaitre n:Lemaitre;Mathieu org:Walan adr:;;46 rue Jean Sans Peur;Lille;;59000;France email;internet:[EMAIL PROTECTED] title;quoted-printable:Ing=C3=A9nieur tel;work:03 20 78 24 23 tel;fax:03 20 77 58 11 x-mozilla-html:FALSE url:https://www.walan.fr version:2.1 end:vcard smime.p7s Description: S/MIME Cryptographic Signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
