AW: (RADIATOR) Accounting on proxyed requests

Hugh Irvine hugh at open.com.au
Tue Feb 19 19:53:19 CST 2008


Hello Martin, Hello Patrick -

When doing this sort of thing, the AuthBy RADIUS clause should be last:


<Handler ...>

    AuthByPolicy ContinueAlways

    <AuthBy SQL>
      ...
      ...
      ...
      AuthSelect [empty]
      AcctColumnDef  ... as many as you need
    </AuthBy>

    <AuthBy Radius>
       # we are using AccountingHandled, so ignore the response from  
the proxy
       IgnoreAccountingResponse
      ...
      ...
      ...
    </AuthBy>

    # AccountingHandled replies to the NAS immediately without  
waiting for the proxy response

    AccountingHandled   (this is to finish the request towards the  
NAS as fast as possible)

</Handler>


Notice also the use of AccountingHandled together with  
IgnoreAccountingResponse.

hope that helps

regards

Hugh


On 19 Feb 2008, at 22:21, Wallner Martin wrote:

> Hi Patrik,
>
> if you want it in a file simply put a 'AccountingLogFile' clause in  
> the handler/realm. if you want it in a database, just do
>
> <handler ...>
> ContinueAlways
>
>    <AuthBy Radius>
>      ...
>      ...
>      ...
>    </AuthBy>
>    <AuthBy SQL>
>      ...
>      ...
>      ...
>      AuthSelect [empty]
>      AcctColumnDef  ... as many as you need
>    </AuthBy>
> AccountingHandled   (this is to finish the request towards the NAS  
> as fast as possible)
> </handler>
>
> Where the empty 'AuthSelect' says that this AuthBy is in reality  
> only a 'AcctBy', and you can make double or triple accounting  
> without getting messy with hooks or other nasty stuff :-)
>
> =mw=
>
>
> -----Ursprüngliche Nachricht-----
> Von: owner-radiator at open.com.au [mailto:owner-radiator at open.com.au]  
> Im Auftrag von Patrik Forsberg
> Gesendet: Dienstag, 19. Februar 2008 11:37
> An: radiator at open.com.au
> Betreff: (RADIATOR) Accounting on proxyed requests
>
> Hi,
>
> Is there any way to get Radiator to send accounting information two  
> ways when using the <AuthBy Radius> clause ? both successful and  
> non-successful.
>
> It looks like it's only sending accounting to the radius server it  
> is proxying to and not sending it down to a local accounting log ?
> For various reasons I need to get the accounting records both local  
> and sent to the radius server I'm proxying to.
>
> I hope I won't have to construct some kind of Hook for this ;)
>
> Any response welcome :)
>
> ---
> Regards,
> Patrik
> Dataphone
>
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au To unsubscribe,  
> email 'majordomo at open.com.au' with 'unsubscribe radiator' in the  
> body of the message.
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.



NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/ 
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
Have you checked the RadiusExpert wiki:
http://www.open.com.au/wiki/index.php/Main_Page

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.



--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list