On Thu, Oct 19, 2000 at 08:51:01PM +1100, Hugh Irvine wrote:
> Hello Ricardo -
>
> On Thu, 19 Oct 2000, Ricardo Sousa wrote:
> > On Thu, Oct 19, 2000 at 07:57:22PM +1100, Hugh Irvine wrote:
> > >
>
> In that case, you would do this:
>
> # configure AuthBy RADIUS for remote
> # use Class attribute for accounting
>
> <AuthBy RADIUS>
> Identifier remote
> Host ....
> Secret ....
> .....
> AddToReply Class = remote
> </AuthBy>
>
> <Handler Request-Type = Accounting-Request, Class = remote>
> AuthBy remote
> </Handler>
>
> <Handler Request-Type = Accounting-Request >
> AuthBy SQLAccounting
> </Handler>
>
> <Handler>
> AuthByPolicy ContinueWhileReject
> AuthBy LDAPAuthentication
> AuthBy remote
> </Handler>
Okay I put that in place, but it didn't help much. I'm attaching the Trace 4 log.
In summary, what is happening is that the Accounting-Request doesn't have the Class
attribute, so, it isn't handled by <Handler Request-Type = Accounting-Request, Class =
remote>.
Regards
--
"Liberty is the Mother, not the Daughter of Order" - Proudhon
Sys. Adm. DDE/GIP -- Comnexo, SA
PGP Fingerprint: 5C 53 4B CC 90 6D 2E E7 60 54 6B 39 35 E9 28 C5
Key available in a pgp key server near you
971968121.377271: DEBUG: Packet dump:
*** Received from 194.38.128.40 port 1645 ....
Code: Access-Request
Identifier: 59
Authentic: <234><5>3E<168><139><190><184>Q<204>*cq<7><228><200>
Attributes:
NAS-IP-Address = 194.38.128.40
NAS-Port = 7
NAS-Port-Type = Async
User-Name = "528mcf"
Called-Station-Id = "950000"
Calling-Station-Id = "213570866"
CHAP-Password = "<15>c<164><240>#%<251> <254><218><5>r<215><238>.<233><"
Service-Type = Framed
Framed-Protocol = PPP
971968121.379752: DEBUG: Check if Handler Realm=roamingtest.oni.pt should be used to
handle this request
971968121.381181: DEBUG: Check if Handler Request-Type = Accounting-Request, Class =
oninet should be used to handle this request
971968121.382561: DEBUG: Check if Handler Request-Type = Accounting-Request should be
used to handle this request
971968121.383934: DEBUG: Check if Handler should be used to handle this
request971968121.385303: DEBUG: Handling request with Handler ''
971968121.3872: DEBUG: SDS Deleting session for 528mcf, 194.38.128.40, 7
971968121.38905: DEBUG: do query is: delete from RADONLINE where
NASIDENTIFIER='194.38.128.40' and NASPORT=07
971968121.434103: DEBUG: Handling with Radius::AuthLDAP2
971968121.460932: ERR: No entries for 528mcf found in LDAP database
971968121.462286: DEBUG: Radius::AuthLDAP2 looks for match with 528mcf
971968121.489021: ERR: No entries for DEFAULT found in LDAP database
971968121.490483: DEBUG: Handling with Radius::AuthRADIUS
971968121.497602: DEBUG: Packet dump:
*** Sending to 195.245.135.91 port 2045 ....
Code: Access-Request
Identifier: 1
Authentic: <234><5>3E<168><139><190><184>Q<204>*cq<7><228><200>
Attributes:
NAS-IP-Address = 194.38.128.40
NAS-Port = 7
NAS-Port-Type = Async
User-Name = "528mcf"
Called-Station-Id = "950000"
Calling-Station-Id = "213570866"
CHAP-Password = "<15>c<164><240>#%<251> <254><218><5>r<215><238>.<233><"
Service-Type = Framed
Framed-Protocol = PPP
971968121.518794: DEBUG: Packet dump:
*** Received from 195.245.135.91 port 2045 ....
Code: Access-Reject
Identifier: 1
Authentic: <211><199><1><131><156>]f<137><196><158>~!<250><161><233>H
Attributes:
Reply-Message = "Authentication - Maximum sessions exceeded"
971968121.520143: DEBUG: Received reply in AuthRADIUS for req 1 from
195.245.135.91:2045
971968121.52404: DEBUG: Packet dump:
*** Sending to 194.38.128.40 port 1645 ....
Code: Access-Reject
Identifier: 59
Authentic: <234><5>3E<168><139><190><184>Q<204>*cq<7><228><200>
Attributes:
Reply-Message = "Authentication - Maximum sessions exceeded"
Class = "oninet"
971968121.542865: DEBUG: Packet dump:
*** Received from 194.38.128.40 port 1646 ....
Code: Accounting-Request
Identifier: 60
Authentic: <191><151>'cN<160>3<188>s<4><239>8<169><198><147><157>
Attributes:
NAS-IP-Address = 194.38.128.40
NAS-Port = 7
NAS-Port-Type = Async
User-Name = "528mcf"
Called-Station-Id = "950000"
Calling-Station-Id = "213570866"
Acct-Status-Type = Stop
Acct-Authentic = RADIUS
Service-Type = Framed
Acct-Session-Id = "0001CB77"
Acct-Input-Packets = 0
Acct-Output-Packets = 0
Acct-Session-Time = 0
Acct-Delay-Time = 0
971968121.545605: DEBUG: Check if Handler Realm=roamingtest.oni.pt should be used to
handle this request
971968121.547063: DEBUG: Check if Handler Request-Type = Accounting-Request, Class =
oninet should be used to handle this request
971968121.54872: DEBUG: Check if Handler Request-Type = Accounting-Request should be
used to handle this request
971968121.550204: DEBUG: Handling request with Handler 'Request-Type =
Accounting-Request'
971968121.552739: DEBUG: SDS Deleting session for 528mcf, 194.38.128.40, 7
971968121.554649: DEBUG: do query is: delete from RADONLINE where
NASIDENTIFIER='194.38.128.40' and NASPORT=07
971968121.576821: DEBUG: Handling with Radius::AuthSQL
971968121.578186: DEBUG: Handling accounting with Radius::AuthSQL
971968121.581968: DEBUG: do query is: insert into ACCOUNTING
(USERNAME, TIME_STAMP, ACCTSTATUSTYPE, ACCTDELAYTIME, ACCTSESSIONID,
ACCTSESSIONTIME, NASPORTtype)
values
('528mcf', 971968121, 'Stop', 0, '0001CB77', 0, 7)
971968121.733965: DEBUG: Accounting accepted
971968121.736525: DEBUG: Packet dump:
*** Sending to 194.38.128.40 port 1646 ....
Code: Accounting-Response
Identifier: 60
Authentic: <191><151>'cN<160>3<188>s<4><239>8<169><198><147><157>
Attributes:
