[RADIATOR] AcctInsertQuery for Authby RADIUS

Michael ringo at vianet.ca
Sun Feb 20 00:52:40 CST 2011


your handler has a policy of:
AuthByPolicy ContinueWhileIgnore

so, when authentication comes through, your <AuthBy SQL> replies with a 
Ignore since you have:
IgnoreAuthentication
and it continues....

But, when an accounting packet comes in, your <AuthBy SQL> replies with a ACCEPT 
since it excepted the accounting packet, and since the policy is 
ContinueWhileIgnore, it doesn't continue.

Your Policy is very important here because you use 1 handler for both 
authentication and accounting.  This is why i choose to use 2 handlers.  1 for 
each authentication, and one for accounting.

But, up to you i guess.



On Sun, 20 Feb 2011, Jeffrey Lee wrote:

> Michael, you're right... the accounting insert query executed after i included
>
> 		AccountingTable accounting #accounting table name
> 		AcctColumnDef invalid,invalid
>
> ... but i did not comment out "HandleAcctStatusTypes Start,Stop,Alive"
>
> but there's a problem... the accounting info does not get
> proxy-forwarded to the RADIUS server i specified how do i enable local
> RADIUS accounting logging (using SQL, which works now) and
> proxy-forward all accounting info?
>
>
>
> On Sat, Feb 19, 2011 at 3:13 PM, Michael <ringo at vianet.ca> wrote:
>>
>> also, you should be able to use radpwtst -user jeff at abc -noauth -nostop so
>> that it only sends a start packet into your radius server just to lesson the
>> debug output and narrow things down.
>>
>> Maybe remove the HandleAcctStatusTypes configuration since maybe it's
>> wrongly determining the accounting type.
>>
>> As per the radiator docs:
>> "If HandleAcctStatusTypes is specified and an Accounting request has an
>> Acct-Status-Type not mentioned in HandleAcctStatusTypes, then the request
>> will be ACCEPTed but not inserted or handled with AcctSQLStatement. The
>> default is to handle all Acct-Status-Types."
>>
>> so, if wrongly determining the type, it will ACCEPT but do nothing.  default
>> is handle all accounting, so just take out the config option for now.
>>
>>
>> Michael
>>
>>
>>
>>
>>
>>
>>
>> On Sat, 19 Feb 2011, Jeffrey Lee wrote:
>>
>>> here's the debug log...  i execute radpwtst -user jeff at abc -password ****
>>>
>>>
>>>
>>> Sat Feb 19 11:09:47 2011: DEBUG: Packet dump:
>>> *** Received from 127.0.0.1 port 56818 ....
>>
>


More information about the radiator mailing list