(RADIATOR) Radonline question
Huaikun Lin
lin at actrix.co.nz
Mon Jun 9 21:38:31 CDT 2003
Hi
We are using SQL database and Radonline table to record customers online
information.
Also we set up our radius servers as a proxy for another Realm as well(for
example abc.co.nz).
All works fine except our Radonline table records not only our customers
online info
but also the proxied Realm customers online info.
Can I set up our Radonline only record our customers online info?
Here is part of my radius.cfg:
...
<Handler Realm=abc.co.nz>
RewriteUsername s/^([^@]+).*/$1/
<AuthBy RADIUS>
Host xxx.xxx.xxx.xxx
Secret xxxxxxx
RetryTimeout 15
</AuthBy>
</Handler>
<Handler Request-Type = Accounting-Request>
RewriteUsername s/^([^@]+).*/$1/
<AuthBy EMERALD>
# You can use this to force Radiator to limit
# maximum session times to how many minutes
# are left in subaccounts.timeleft
DefaultSimultaneousUse 1
TimeBanking
# Change DBSource, DBUsername, DBAuth for your database
# See the reference manual
DBSource dbi:xxx:server=xxx;database=xxx
DBUsername xxxxxx
DBAuth xxxxxxx
# You can add to or change these if you want.
AccountingTable Calls
AcctColumnDef UserName,User-Name
AcctColumnDef CallDate,Timestamp,integer-date
#AcctColumnDef
CallDate,Timestamp,formatted-date,convert(datetime,'%b %e %Y %H:%M:%S',109)
AcctColumnDef AcctStatusType,Acct-Status-Type,integer
AcctColumnDef AcctDelayTime,Acct-Delay-Time,integer
AcctColumnDef AcctInputOctets,Acct-Input-Octets,integer
AcctColumnDef AcctOutputOctets,Acct-Output-Octets,integer
AcctColumnDef AcctSessionId,Acct-Session-Id
AcctColumnDef AcctSessionTime,Acct-Session-Time,integer
AcctColumnDef
AcctTerminateCause,Ascend-Disconnect-Cause,integer
# AcctColumnDef AcctTerminateCause,Acct-Terminate-Cause,integer
# AcctColumnDef NASIdentifier,NAS-Identifier
AcctColumnDef NASIdentifier,NAS-IP-Address
AcctColumnDef NASPort,NAS-Port,integer
AddATDefaults
AuthSelect ,sa.LoginLimit
AuthColumnDef 0,Simultaneous-Use,check
</AuthBy>
# Log all accounting into daily log files
AcctLogFileName /var/log/radius/log/%Y%m%d.act
</Handler>
<Handler>
RewriteUsername s/^([^@]+).*/$1/
# If Platypus rejects the login, forward it to From owner-radiator at open.com.au Mon Jun 9 21:43:54 2003
Received: (from majordomo at localhost)
by server1.open.com.au (8.11.6/8.11.0) id h5A2hs419574
for radiatorzz-list; Mon, 9 Jun 2003 21:43:54 -0500
X-Authentication-Warning: server1.open.com.au: majordomo set sender to owner-radiator at open.com.au using -f
Received: from smtp2.skyinet.net (smtp2.skyinet.net [202.78.97.7])
by server1.open.com.au (8.11.6/8.11.0) with ESMTP id h5A2hr819571
for <radiator at open.com.au>; Mon, 9 Jun 2003 21:43:53 -0500
Received: from skyinet.net (unknown [202.78.98.98])
by smtp2.skyinet.net (Postfix) with ESMTP
id 8F9115BACB; Tue, 10 Jun 2003 10:42:16 +0800 (PHT)
Message-ID: <3EE54484.9030301 at skyinet.net>
Date: Tue, 10 Jun 2003 10:37:56 +0800
From: jaws <jaws at skyinet.net>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.0.2) Gecko/20030208 Netscape/7.02
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Jeremy Hinton <jgh at visi.net>
Cc: radiator at open.com.au
Subject: Re: (RADIATOR) multiple radius process
References: <200306051620.37032.mikem at open.com.au> <5.2.0.9.0.20030609100432.041d1cf8 at imap.visi.net>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Sender: owner-radiator at open.com.au
Precedence: bulk
List-Id: <radiator.list-id.open.com.au>
I will work on this jeremey. THanks.
Jeremy Hinton wrote:
>
> When i played around with this setup, and i needed to run a
> few instances with identical configs but on different IPs, i found
> using a GlobalVar to be very useful. set the IP or port in each radius
> by passing it via a GlobalVar on the command line, then you can use it
> to set various items that can't be shared between instances, like
> PidFile and Logs. I'm not doing it that way anymore, but i think it
> went something like this:
>
> /usr/local/sbin/radius IpAddress=10.1.1.2
>
> config file:
> BindAddress %{GlobalVar:IpAddress}
> PidFile /var/run/radius.%{GlobalVar:IpAddress}
> LogFile /var/log/radius/logfile.%{GlobalVar:IpAddress}
>
> and so on.
>
> - jeremy
>
> At 10:56 AM 6/5/2003, you wrote:
>
>> On 6/5/03 2:20 AM, "Mike McCauley" <mikem at open.com.au> wrote:
>>
>> > On Thu, 5 Jun 2003 03:58 pm, jaws wrote:
>> >> Got it. That means i can also use the same config file?
>> >
>> > Yes, if you use the -auth_port and -acct_port command linet flags.
>> >
>> > Cheers.
>>
>> Be careful on this. If you have entries in the config that use files
>> for
>> logs, etc, the two processes could step on each other causing a major
>> problem.
>>
>> --
>> Robert Blayzor, BOFH
>> INOC, LLC
>> rblayzor at inoc.net
>> PGP: http://www.inoc.net/~dev/
>> Key fingerprint = A445 7D1E 3D4F A4EF 6875 21BB 1BAA 10FE 5748 CFE9
>>
>> Hackers have kernel knowledge.
>>
>> ===
>> Archive at http://www.open.com.au/archives/radiator/
>> Announcements on radiator-announce at open.com.au
>> To unsubscribe, email 'majordomo at open.com.au' with
>> 'unsubscribe radiator' in the body of the message.
>
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>
>
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
the old Radius server
# AuthByPolicy ContinueUntilAccept
ExcludeFromPasswordLog cisco root hal sritchie cbegg john jjcv
PasswordLogFileName %L/password.log
<AuthBy EMERALD>
# You can use this to force Radiator to limit
# maximum session times to how many minutes
# are left in subaccounts.timeleft
DefaultSimultaneousUse 1
TimeBanking
# Change DBSource, DBUsername, DBAuth for your database
# See the reference manual
DBSource dbi:xxx:server=xxx;database=xxx
DBUsername xxx
DBAuth xxx
AddATDefaults
AuthSelect ,sa.LoginLimit
AuthColumnDef 0,Simultaneous-Use,check
</AuthBy>
<AuthBy DBFILE>
Filename %D/users
</AuthBy>
<AuthBy FILE>
Filename %D/users
</AuthBy>
</Handler>
Lin
-------------- next part --------------
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.487 / Virus Database: 286 - Release Date: 6/1/2003
More information about the radiator
mailing list