(RADIATOR) Proxying accounting requests.

[Sysadmin]

I can't do it with sql, because I'm still trying to get that to work 
between the two servers :(  That was the part that was getting me.  Is 
there a way to do it with AuthBy Proxy or something that does not have to 
interface with a db directly.  If I succeed with freetds or DBD-Proxy, 
then I'll be in good shape (your example makes perfect sense), but so far 
it is failing.  

Comments on my other post:
   I did a truss again radiusd while doing authby platypus and found that 
freetds is dumping on the debug file for some reason.  Still trying to 
figure out why.

Thanks for all your help.



On Sat, 25 May 2002, Hugh Irvine wrote:

> 
> Hello -
> 
> As mentioned in my previous mail, the example I provided does exactly what 
> you require. Is there something that is not clear that I can clarify for you?
> 
> regards
> 
> Hugh
> 
> 
> On Fri, 24 May 2002 23:19, Sysadmin wrote:
> > Hi,
> > This is kind of weird, but here goes.
> >   I have a NAS that is under the control of a partner company.  They
> > forward all authentication to my radius servers. I now have a customer
> > that is user their NAS, but did not want to move his radius username/passwd
> > db to my server, so I have to proxy all the requests to his radius server. 
> > I'm interested in monitoring their usage and so are they.
> >   So I need to be able to log the start/stop accounting packet for their
> > realm to my accounting database and also fwd it onto their accounting
> > database.  Both accounting servers are running cisco's ACS radius, so they
> > accept the stop/start packets on port 1646 and then store them in sql.
> >  The reason for not just doing the one central server is because the
> > partner company wants to make sure we are not over billing them.  :(
> >
> > Thanks for you help.
> >
> > On Fri, 24 May 2002, Hugh Irvine wrote:
> > > Hello -
> > >
> > > I don't understand your question, sorry.
> > >
> > > Could you explain the requirement in a bit more detail?
> > >
> > > thanks
> > >
> > > Hugh
> > >
> > > On Fri, 24 May 2002 00:53, Sysadmin wrote:
> > > > Hi,
> > > >  In this case I am not using sql at the central accounting server or at
> > > > the host I am proxying to.  So is there a way for me to fwd accounting
> > > > request to both hosts on port 1646?
> > > >
> > > > Thanks
> > > >
> > > > -----Original Message-----
> > > > From: Hugh Irvine [mailto:hugh at open.com.au]
> > > > Sent: Monday, May 13, 2002 7:09 PM
> > > > To: sysadmin at bigbrain.net; radiator at open.com.au
> > > > Subject: Re: (RADIATOR) Proxying accounting requests.
> > > >
> > > >
> > > >
> > > > Hello -
> > > >
> > > > You will need to add an AuthBy SQL clause to your configuration file.
> > > >
> > > > Something like this:
> > > >
> > > > # define AuthBy SQL clause for accounting
> > > >
> > > > <AuthBy SQL>
> > > > 	Identifier SQLAccounting
> > > > 	......
> > > > 	# empty AuthSelect to disable authentication
> > > > 	AuthSelect
> > > >
> > > > 	# define accounting
> > > > 	AccountingTable ACCOUNTING
> > > > 	AcctColumnDef .....
> > > > 	.....
> > > > </AuthBy>
> > > >
> > > > # define Realms
> > > >
> > > > <Realm some.realm>
> > > > 	AuthByPolicy ContinueAlways
> > > > 	AuthBy SQLAccounting
> > > > 	<AuthBy ....>
> > > > 		....
> > > > 	</AuthBy>
> > > > 	.....
> > > > </Realm>
> > > >
> > > > <Realm another.realm>
> > > > 	AuthByPolicy ContinueAlways
> > > > 	AuthBy SQLAccounting
> > > > 	<AuthBy ....>
> > > > 		....
> > > > 	</AuthBy>
> > > > 	.....
> > > > </Realm>
> > > >
> > > > .....
> > > >
> > > >
> > > > regards
> > > >
> > > > Hugh
> > > >
> > > > On Tue, 14 May 2002 01:02, sysadmin at bigbrain.net wrote:
> > > > > I want to put in a central radius accountinng server and was
> > > >
> > > > wondering how
> > > >
> > > > > to configure my realms.  I have some realms that I proxy for
> > > >
> > > > and some I do
> > > >
> > > > > not.  Right now I have all the realms going to a file.  Is
> > > >
> > > > there a way I
> > > >
> > > > > can tell the realms to fwd to a central server?  Right now I am just
> > > > > saving them to files.
> > > > >   If I do this, will it also still fwd the start/stop packets to the
> > > > > radius servers I am proxying to?
> > > > >
> > > > >
> > > > >
> > > > > Thanks
> > > > >
> > > > > ===
> > > > > Archive at http://www.open.com.au/archives/radiator/
> > > > > Announcements on radiator-announce at open.com.au
> > > > > To unsubscribe, email 'majordomo at open.com.au' with
> > > > > 'unsubscribe radiator' in the body of the message.
> >
> > ===
> > Archive at http://www.open.com.au/archives/radiator/
> > Announcements on radiator-announce at open.com.au
> > To unsubscribe, email 'majordomo at open.com.au' with
> > 'unsubscribe radiator' in the body of the message.
> 
> 

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.