(RADIATOR) Authentication to one DB, Accounting to another

Frank Danielson fdanielson at csky.com
Fri Sep 26 07:18:01 CDT 2003


The only catch is that AuthBy SQL will open a connection to the database
when it starts up and keep that connection up unless there is a problem with
it so your round robin DNS will not do much. AuthBY SQL supports declaring a
database to use as a backup which may be a better scheme for reliability. If
you are looking to load balance among your databases I would run a Radiator
instance for each database instance and then proxy requests to them using a
main instance with AuthBy ROUNDROBIN or AuthBy LOADBALANCE.

-Frank

-----Original Message-----
From: Derek Buttineau [mailto:derek at csolve.net]
Sent: Friday, September 26, 2003 6:20 AM
To: radiator at open.com.au
Subject: (RADIATOR) Authentication to one DB, Accounting to another


Just want to make sure I'm not totally out in left field on how to 
accomplish this, I thought I'd ask.  We just recently setup MySQL 
Replication.. and I'd like to make our Radiator software use the master 
and slaves for authentication (just using DNS round robin atm).. but 
since only the master can receive updates, I'd like to make sure the 
accounting packets only go to the master.

I'm thinking I need to make the configuration look like this, but please 
let me know if I'm totally off base:

    AuthByPolicy ContinueAlways

    <AuthBy SQL>
        DBSource        dbi:mysql:radius:<<Slave Hostname>
        DBUsername        username
        DBAuth            password

        # Setup Authentication
        AuthSelect        select ENCRYPTEDPASSWORD, REPLYATTR from 
AUTHENTICATIONTABLE where USERNAME='%U'
        AuthColumnDef    0, Encrypted-Password, check
        AuthColumnDef    1, GENERIC, reply

        # Disable Accounting
        AccountingTable
    </AuthBy>

    <AuthBy SQL>
        DBSource        dbi:mysql:radius:<<Master Database>>
        DBUsername        radius
        DBAuth            csrox

        # Disable Authentication
        AuthSelect

        # Setup Accounting
        AccountingTable ACCOUNTINGTABLE
        AcctColumnDef   USERNAME,User-Name
        AcctColumnDef   TIME_STAMP,Timestamp,formatted-date,'%Y%m%d 
%H:%M:%S'
        AcctColumnDef   ACCTSTATUSTYPE,Acct-Status-Type
        AcctColumnDef   ACCTDELAYTIME,Acct-Delay-Time,integer
        AcctColumnDef   ACCTINPUTOCTETS,Acct-Input-Octets,integer
        AcctColumnDef   ACCTOUTPUTOCTETS,Acct-Output-Octets,integer
        AcctColumnDef   ACCTSESSIONID,Acct-Session-Id
        AcctColumnDef   ACCTSESSIONTIME,Acct-Session-Time,integer
        AcctColumnDef   ACCTTERMINATECAUSE,Acct-Terminate-Cause
        AcctColumnDef   NASIDENTIFIER,NAS-IP-Address
        AcctColumnDef   NASPORT,NAS-Port,integer
        AcctColumnDef   FRAMEDIPADDRESS,Framed-IP-Address
        AcctColumnDef   CONNECTSPEED,Connect-Speed
    </AuthBy>

Thanks a bunch in advance.  Sorry if this has already been covered on 
the list, took a look but perhaps my search techniques are in need of 
improvement :)

-- 
Regards,

Derek Buttineau
Internet Systems Administrator
Compu-SOLVE Internet Services


===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list