(RADIATOR) Radonline question

Hugh Irvine hugh at open.com.au
Mon Jun 9 23:13:36 CDT 2003


Hello Lin -

You can use different Session Databases for the different Handlers:

<SessionDatabase NULL>
	Identifier NULLSDB
</SessionDatabase>

<SessionDatabase SQL>
	Identifier SQLSDB
	....
</SessionDatabase>

<Handler Realm = abc.co.nz>
	SessionDatabase NULLSDB
	....
</Handler>

<Handler ....>
	SessionDatabase SQLSDB
	....
</Handler>

.....

regards

Hugh


On Tuesday, Jun 10, 2003, at 12:38 Australia/Melbourne, Huaikun Lin 
wrote:

> Hi
>
> We are using SQL database and Radonline table to record customers 
> online information.
>
> Also we set up our radius servers as a proxy for another Realm as 
> well(for example abc.co.nz).
>
> All works fine except our Radonline table records not only our 
> customers online info
> but also the proxied  Realm customers online info.
>
> Can I set up our Radonline only record our customers online info?
>
>  Here is part of my radius.cfg:
> ...
> <Handler Realm=abc.co.nz>
>         RewriteUsername s/^([^@]+).*/$1/
>         <AuthBy RADIUS>
>                 Host xxx.xxx.xxx.xxx
>                 Secret xxxxxxx
>                 RetryTimeout 15
>         </AuthBy>
> </Handler>
>
> <Handler Request-Type = Accounting-Request>
>         RewriteUsername s/^([^@]+).*/$1/
>
>         <AuthBy EMERALD>
>                 # You can use this to force Radiator to limit
>                 # maximum session times to how many minutes
>                 # are left in subaccounts.timeleft
>                 DefaultSimultaneousUse 1
>                 TimeBanking
>                 # Change DBSource, DBUsername, DBAuth for your database
>                 # See the reference manual
>                 DBSource        dbi:xxx:server=xxx;database=xxx
>                 DBUsername      xxxxxx
>                 DBAuth          xxxxxxx
>
>                 # You can add to or change these if you want.
>                 AccountingTable Calls
>                 AcctColumnDef   UserName,User-Name
>                 AcctColumnDef   CallDate,Timestamp,integer-date
>                 #AcctColumnDef 
> CallDate,Timestamp,formatted-date,convert(datetime,'%b %e %Y 
> %H:%M:%S',109)
>                 AcctColumnDef   AcctStatusType,Acct-Status-Type,integer
>                 AcctColumnDef   AcctDelayTime,Acct-Delay-Time,integer
>                 AcctColumnDef   
> AcctInputOctets,Acct-Input-Octets,integer
>                 AcctColumnDef   
> AcctOutputOctets,Acct-Output-Octets,integer
>                 AcctColumnDef   AcctSessionId,Acct-Session-Id
>                 AcctColumnDef   
> AcctSessionTime,Acct-Session-Time,integer
>                 AcctColumnDef 
> AcctTerminateCause,Ascend-Disconnect-Cause,integer
> #               AcctColumnDef   
> AcctTerminateCause,Acct-Terminate-Cause,integer
> #               AcctColumnDef   NASIdentifier,NAS-Identifier
>                 AcctColumnDef   NASIdentifier,NAS-IP-Address
>                 AcctColumnDef   NASPort,NAS-Port,integer
>
>                 AddATDefaults
>                 AuthSelect ,sa.LoginLimit
>                 AuthColumnDef 0,Simultaneous-Use,check
>         </AuthBy>
>
> # Log all accounting into daily log files
> AcctLogFileName /var/log/radius/log/%Y%m%d.act
>
> </Handler>
>
> <Handler>
>         RewriteUsername s/^([^@]+).*/$1/
>         # If Platypus rejects the login, forward it to the old Radius 
> server
>         # AuthByPolicy ContinueUntilAccept
>         ExcludeFromPasswordLog cisco root hal sritchie cbegg john jjcv
>         PasswordLogFileName %L/password.log
>
>         <AuthBy EMERALD>
>                 # You can use this to force Radiator to limit
>                 # maximum session times to how many minutes
>                 # are left in subaccounts.timeleft
>                 DefaultSimultaneousUse 1
>                 TimeBanking
>                 # Change DBSource, DBUsername, DBAuth for your database
>                 # See the reference manual
>                 DBSource        dbi:xxx:server=xxx;database=xxx
>                 DBUsername      xxx
>                 DBAuth          xxx
>                 AddATDefaults
>                 AuthSelect ,sa.LoginLimit
>                 AuthColumnDef 0,Simultaneous-Use,check
>         </AuthBy>
>
>         <AuthBy DBFILE>
>                 Filename %D/users
>         </AuthBy>
>
>
>         <AuthBy FILE>
>                 Filename %D/users
>         </AuthBy>
>
> </Handler>
>
>
> Lin
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.487 / Virus Database: 286 - Release Date: 6/1/2003
>

NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list