(RADIATOR) keeping a copy of accounting for AuthBy Radius...

Hugh Irvine hugh at open.com.au
Fri Sep 13 19:08:10 CDT 2002


Hello Brian -

You will need to add an AuthByPolicy to your configuration:

	<AuthBy GROUP>
		AuthByPolicy ContinueAlways
		<AuthBy SQL>
			.....
		.....
	</AuthBy>

regards

Hugh


On Saturday, September 14, 2002, at 06:56 AM, Brian Sullivan wrote:

> Hi,
>
> I'd love to keep a copy of the radius accounting for a realm that we 
> proxy to another location.  After reading in Section 6.17 in the Ref 
> manual, "For example, it is useful to have an AuthBy SQL followed by 
> an AuthBy RADIUS, which will cause all authentication and accounting 
> requests to be forwarded, and also all accounting requests will be 
> recorded in SQL."  I figured the following would work.  Can anyone 
> offer some advice?
>
> Here's what I tried:
>
> <Handler Realm=domain.com, Client-Identifier=haha>
>        <AuthBy Group>
>                <AuthBy SQL>
>                        DBSource        dbi:mysql:radiator
>                        DBUsername      *****
>                        DBAuth          *****
>
>                        AuthSelect
>
>                        # store accounting records in ACCOUNTING table
>                        AccountingTable ACCOUNTING
>
>                        AcctColumnDef   USERNAME,User-Name
>                        AcctColumnDef   TIME_STAMP,Timestamp,integer
>                        AcctColumnDef   ACCTSTATUSTYPE,Acct-Status-Type
>                        AcctColumnDef   
> ACCTDELAYTIME,Acct-Delay-Time,integer
>                        AcctColumnDef 
> ACCTINPUTOCTETS,Acct-Input-Octets,integer
>                        AcctColumnDef 
> ACCTOUTPUTOCTETS,Acct-Output-Octets,integer
>                        AcctColumnDef   ACCTSESSIONID,Acct-Session-Id
>                        AcctColumnDef 
> ACCTSESSIONTIME,Acct-Session-Time,integer
>                        AcctColumnDef   
> ACCTTERMINATECAUSE,Acct-Terminate-Cause
>                        AcctColumnDef   NASIDENTIFIER,NAS-Identifier
>                        AcctColumnDef   NASPORT,NAS-Port,integer
>                        AcctColumnDef   
> FRAMEDIPADDRESS,Framed-IP-Address
>                        AcctColumnDef   NETWORK,Network
>                </AuthBy>
>                 <AuthBy RADIUS>
>                         Host ***.***.***.***, ***.***.***.***
>                         Secret *********
>                         AuthPort 1812
>                         AcctPort 1813
>                         Retries 2
>                         RetryTimeout 5
>                         FailureBackoffTime 5
>                 </AuthBy>
>        </AuthBy>
>         AcctLogFileName %L/domain.com/detail
>         <AuthLog FILE>
>                 Filename %L/domain.com/auth.log
>                 LogSuccess 1
>                 LogFailure 1
>         </AuthLog>
> </Handler>
>
> Thanks a ton!
>
> Brian
> brian at 711.net
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>
>

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list