(RADIATOR) Incorrect timestamp with portmasters
Hugh Irvine
hugh at open.com.au
Wed May 1 03:36:49 CDT 2002
Hello Daniel -
In the accounting request from the Portmaster, you have this:
> Acct-Delay-Time = 17230
This attribute is usually used to show the delay between the NAS event
occurring and the time the packet was sent. If this is really a normal
accounting request, there is something seriously wrong with the Portmaster
software. You should check with your vendor to see if there are any relevant
bug fixes.
BTW - the radius protocol itself has no notion of clock time - it only
understands delta times. It is Radiator that uses the time on the host it is
running on together with the Acct-Delay-Time to figure out when an accounting
event occurred.
regards
Hugh
On Wed, 1 May 2002 17:44, Daniel Lowe wrote:
> Hello all,
>
> This question has been asked before here, but I could not find an answer;
> http://www.open.com.au/archives/radiator/2000-01/msg00093.html
>
> We have a radiator server that handles requests for our own portmasters, as
> well as comindicos. The requests from the comindico servers are handled
> fine, but with our portmasters, the calldate never changes. It appears to
> be set to whatever time the portmaster was booted. As mentioned in the
> above message, there does not seem to be a clock of any sort in the
> portmaster, so we would like to set it to whatever the time is on the
> radiator server.
>
> This is the config file;
>
> #plat.cfg
>
> Foreground
> LogStdout
> Trace 4
> AuthPort 1645
> AcctPort 1646
> LogDir /etc/radiator/logs
> LogFile %L/logfile.%y-%m-%d
>
> DbDir /etc/radiator
>
>
> <Log EMERALD>
> DBSource dbi:Sybase:Platypus
> DBUsername platuser
> DBAuth xxxxxxx
> </Log>
>
> <ClientListSQL>
> DBSource dbi:Sybase:Platypus
> DBUsername platuser
> DBAuth xxxxxxxxx
> GetClientQuery select IPAddress,secret from Servers
> </ClientListSQL>
>
> <Client DEFAULT>
> Secret xxxxxxx
> DupInterval 5
> </Client>
>
> <Realm DEFAULT>
> RejectHasReason
> <AuthBy EMERALD>
> DBSource dbi:Sybase:Platypus
> DBUsername platuser
> DBAuth xxxxxxxx
>
> # You can add to or change these if you want.
> AccountingTable Calls
> AcctColumnDef UserName,User-Name
> AcctColumnDef CallDate,Timestamp,integer-date
> AcctColumnDef AcctStatusType,Acct-Status-Type,integer
> AcctColumnDef AcctDelayTime,Acct-Delay-Time,integer
> AcctColumnDef AcctInputOctets,Acct-Input-Octets,integer
> AcctColumnDef AcctOutputOctets,Acct-Output-Octets,integer
> AcctColumnDef AcctSessionId,Acct-Session-Id
> AcctColumnDef AcctSessionTime,Acct-Session-Time,integer
> AcctColumnDef
> AcctTerminateCause,Acct-Terminate-Cause,integer # AcctColumnDef
> NASIdentifier,NAS-Identifier
> AcctColumnDef NASIdentifier,NAS-IP-Address
> AcctColumnDef NASPort,NAS-Port,integer
> AcctColumnDef CallerID,Calling-Station-Id
> AcctColumnDef ConnectInfo,Called-Station-Id
> AcctColumnDef FramedAddress,Framed-IP-Address
>
> # You can use this to force Radiator to limit
> # maximum session times to how many minutes
> # are left in subaccounts.timeleft
>
> TimeBanking
>
> # Platypus will check DNIS settings for dial-ins
> # HonourDNISGroups
>
> # You can optionally honour the LoginLimit
> # column in the emerald database
> # or any other column like this:
> # AuthSelect ,sa.LoginLimit
> # AuthColumnDef 0,Simultaneous-Use,check
> # Therefore you can add support for any number
> # of additional columns, if you wish.
> # Note that Platypus fixes LoginLimit at 1, so
> # if you enable this with Platypus, all your
> # users will be forced to a Sumultaneous-Use limit
> # of 1
>
> </AuthBy>
> </Realm>
>
> This is from the logfile, first is from a commindico request;
>
> Wed May 1 17:35:30 2002: DEBUG: Packet dump:
> *** Received from 203.194.59.121 port 1813 ....
> Code: Accounting-Request
> Identifier: 137
> Authentic: <27>O<208>\?"4D<226>k<195><254><21>Do<148>
> Attributes:
> NAS-IP-Address = 203.220.248.113
> NAS-Port = 6347
> NAS-Port-Type = Async
> Called-Station-Id = "142330749085202"
> Calling-Station-Id = "749464616"
> Acct-Status-Type = Alive
> Acct-Authentic = RADIUS
> Service-Type = Framed-User
> Acct-Session-Id = "0002F9D4"
> Framed-Protocol = PPP
> Framed-IP-Address = 203.220.195.170
> Ascend-PreSession-Time = 27
> Ascend-Pre-Input-Octets = 92
> Ascend-Pre-Output-Octets = 114
> Ascend-Pre-Input-Packets = 4
> Ascend-Pre-Output-Packets = 5
> Acct-Input-Octets = 127812
> Acct-Output-Octets = 1111177
> Acct-Input-Packets = 2208
> Acct-Output-Packets = 2765
> Acct-Session-Time = 890
> Acct-Delay-Time = 0
> User-Name = "french"
> Proxy-State =
> BSP2ims01-syd/EF28020971314DFF2230B22F264ED73F1189967F844273F99B2E3B299C83E
>E9E2D460FBE844273CA50F2C3CD9AEDF657
> E69ACC7484507586AA5D4FD3FABABE026A777CAAEB244ACECC695DCEF9ED953D
>
> Wed May 1 17:35:30 2002: DEBUG: Handling request with Handler
> 'Realm=DEFAULT' Wed May 1 17:35:30 2002: DEBUG: Adding session for
> french, 203.220.248.113, 6347 Wed May 1 17:35:30 2002: DEBUG: Handling
> with Radius::AuthEMERALD Wed May 1 17:35:30 2002: DEBUG: Handling
> accounting with Radius::AuthEMERALD Wed May 1 17:35:30 2002: DEBUG: do
> query is: insert into Calls
> (UserName, CallDate, AcctStatusType, AcctDelayTime,
> AcctInputOctets, AcctOutputOctets, AcctSessionId, AcctSessionTim e,
> NASIdentifier, NASPort, CallerID, ConnectInfo, FramedAddress)
> values
> ('french', 'May 1, 2002 17:35', 3, 0, 127812, 1111177,
> '0002F9D4', 890, '203.220.248.113', 6347, '749464616', '1423 30749085202',
> '203.220.195.170')
>
> This is one from our local portmaster;
>
> Wed May 1 17:34:58 2002: DEBUG: Packet dump:
> *** Received from 210.8.26.5 port 1026 ....
> Code: Accounting-Request
> Identifier: 125
> Authentic: <27><156>u8<153>=<10><217><136><28><160><6>2,<132>F
> Attributes:
> Acct-Session-Id = "150000DF"
> User-Name = "wells"
> NAS-IP-Address = 210.8.26.5
> NAS-Port = 37
> NAS-Port-Type = Async
> Acct-Status-Type = Start
> Acct-Authentic = RADIUS
> Connect-Info = "48000 LAPM/V42BIS"
> Called-Station-Id = "49691000"
> Service-Type = Framed-User
> Framed-Protocol = PPP
> Framed-IP-Address = 210.8.27.27
> Acct-Delay-Time = 17230
>
> Wed May 1 17:34:58 2002: DEBUG: Handling request with Handler
> 'Realm=DEFAULT' Wed May 1 17:34:58 2002: DEBUG: Adding session for wells,
> 210.8.26.5, 37 Wed May 1 17:34:58 2002: DEBUG: Handling with
> Radius::AuthEMERALD Wed May 1 17:34:58 2002: DEBUG: Handling accounting
> with Radius::AuthEMERALD Wed May 1 17:34:58 2002: DEBUG: do query is:
> insert into Calls
> (UserName, CallDate, AcctStatusType, AcctDelayTime,
> AcctSessionId, NASIdentifier, NASPort, ConnectInfo, FramedAddres s)
> values
> ('wells', 'May 1, 2002 12:47', 1, 17230, '150000DF',
> '210.8.26.5', 37, '49691000', '210.8.27.27')
>
> Wed May 1 17:34:58 2002: DEBUG: Accounting accepted
> Wed May 1 17:34:58 2002: DEBUG: Packet dump:
>
>
> 12:47 is when we rebooted the portmaster.
>
>
> Regards
> --------------------------
> Daniel Lowe
> Service Engineer
> Mackay Computer Services
> --------------------------
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
More information about the radiator
mailing list