Hello Dave -
On Tue, 25 Apr 2000, Dave Kitabjian wrote:
> What is the proper or best way to handle Accounting for Realms?
>
> It appears that, by default, regardless of whether the Username is
> rewritten, the Realm is just tagged onto the Username for Accounting:
>
> [EMAIL PROTECTED]
>
> and that's what gets exported to the Accounting record (and inserted
> into our database) as Username. This raises a few questions for me:
>
> 1) Since I'm performing RewriteUserName in the GLOBAL section, shouldn't
> this affect what is saved as the Accounting record's Username attribute,
> so that only "joe" gets logged, rather than "[EMAIL PROTECTED]"?
>
> 2) How does the "rest of the world" log realm info? I could have sworn
> that at one point earlier in my development, that I saw this info broken
> down into "User-Id" and "User-Realm". It seems more logical to me to
> store this info into two db columns:
>
> UserName Realm
> ---------- ----------------
>
> but that's not practical unless the Accounting record breaks it up
> accordingly. If I strip off the Realm with:
>
> # Strip off the realm:
> RewriteUsername s/^([^@]+).*/$1/
>
> can I add it to the Accounting attribute list somehow?
>
If you are using an SQL database, you can write whatever AcctSQLStatements are
appropriate for your installation. If you would rather log UserName and Realm
as you show above, that's fine.
hth
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
