Thanks Hugh. It's working now! The Socket6.pm module needed to be installed.
Tue Nov 6 09:28:28 2012: DEBUG: Handling request with Handler 'NAS-Identifier="Juniper_E320_2"' Tue Nov 6 09:28:28 2012: DEBUG: SQLSDB Deleting session for fritzsamuels1, 208.138.43.125, 805307373 Tue Nov 6 09:28:28 2012: DEBUG: do query is: 'delete from ACTIVE_SESSIONS where USER_NAME='fritzsamuels1' and NAS_IP_ADDRESS='208.138.43.125' and NAS_PORT_ID='TenGigabitEthernet 3/0/0.941005:94-1005'': Tue Nov 6 09:28:28 2012: DEBUG: Query is: 'select NAS_IP_ADDRESS='208.138.43.125',NAS_PORT_ID='TenGigabitEthernet 3/0/0.941005:94-1005',ACCT_SESSION_ID='erx TenGigabitEthernet 3/0/0.941005:94-1005:1831600483' from ACTIVE_SESSIONS where USER_NAME='fritzsamuels1'': Tue Nov 6 09:28:28 2012: WARNING: SQLSDB Could not find a Client for NAS 1 to double-check Simultaneous-Use. Perhaps you do not have a reverse DNS for that NAS? Tue Nov 6 09:28:28 2012: INFO: Access rejected for fritzsamuels1: MaxSessions exceeded The CounQuery is like that since I expect only a single entry per user. Simultaneous-Use should be one (1). Rohan On Tue, 6 Nov 2012 16:28:01 +1100 Hugh Irvine <h...@open.com.au> wrote: > >Hello Rohan - > >To see what is happening with the crash you should run radiusd from the >command line so you can see the relevant Perl messages. > >Something like this (with your local pathnames): > > > /usr/bin/perl /usr/local/bin/radiusd -foreground -log_stdout -trace 4 > -config_file /etc/radiator/radius.cfg > > >BTW - I don't think your CountQuery is correct as it will never find all >existing sessions for that particular user. > >regards > >Hugh > > >On 6 Nov 2012, at 09:30, <rohan.he...@cwjamaica.com> wrote: > >> Hugh, >> >> re: server crash see config and log files attached. >> >> Rohan >> >> On Sat, 3 Nov 2012 09:06:44 +1100 >> Hugh Irvine <h...@open.com.au> wrote: >>> >>> Hello Rohan - >>> >>> The easiest way to do this is to store only the Stop records, and calculate >>> the start time from the attributes present in the accounting stop request. >>> >>> Something like this (the value is in epoch seconds): >>> >>> Timestamp - Acct-Session-Time - Acct-Delay-Time >>> >>> For the crash I will need to see the logfile that immediately precedes it >>> together with the configuration file you are using. >>> >>> regards >>> >>> Hugh >>> >>> >>> On 3 Nov 2012, at 02:24, <rohan.he...@cwjamaica.com> wrote: >>> >>>> Hugh, >>>> >>>> Now that records are being written to the database, I want a single record >>>> per session that includes both Stop and Start times like below. >>>> >>>> User_Name, NAS_IP_Address, NAS_Port, Framed_IP_Address, Acct_Start_Time, >>>> Acct_Stop_Time, Acct_Session_ID >>>> jwilliams12 208.138.43.123 805306450 72.27.33.224 Nov 2, 2012 12:21:04 AM >>>> Nov 2, 2012 1:21:16 AM, erx TenGigabitEthernet 3/0/0.37:123-82:1830880926 >>>> >>>> So the record is added to the accounting database at the end of a session >>>> and includes both Stop and Start times. >>>> >>>> Added to that is the issue I have where Radiator crashes when I try to use >>>> the Simultaneous-Use features. >>>> >>>> Thanks. >>>> >>>> On Fri, 2 Nov 2012 17:46:58 +1100 >>>> Hugh Irvine <h...@open.com.au> wrote: >>>>> >>>>> Hello Rohan - >>>>> >>>>> Can you please explain exactly what you are trying to do? >>>>> >>>>> It is normal for you to get two records in your accounting table, as that >>>>> is what you have configured. >>>>> >>>>> If you can tell us what you are trying to achieve we will be able to make >>>>> sensible suggestions. >>>>> >>>>> regards >>>>> >>>>> Hugh >>>>> >>>>> >>>>> On 2 Nov 2012, at 09:38, <rohan.he...@cwjamaica.com> wrote: >>>>> >>>>>> Thanks Michael, >>>>>> >>>>>> >>>>>> >>>>>> I was able to go further with the advice using the AuthByPolicy and >>>>>> AuthBy GROUP under the existing Handler. Only that two records are added >>>>>> to my accounting database for a single session - one at Start and one at >>>>>> Stop. >>>>>> >>>>>> <Handler NAS-Identifier="Juniper_E320_2"> >>>>>> AddToRequest SERVICESTATUS = ACTIVE >>>>>> SessionDatabase SQLSDB >>>>>> # MaxSessions 1 >>>>>> RejectHasReason >>>>>> >>>>>> AuthByPolicy ContinueAlways >>>>>> AuthBy SQLAccounting >>>>>> <AuthBy GROUP> >>>>>> AuthByPolicy ContinueWhileIgnore >>>>>> AuthBy xDSL >>>>>> </AuthBy> >>>>>> >>>>>> >>>>>> Regards, >>>>>> >>>>>> Rohan >>>>>> >>>>>> >>>>>> >>>>>> On Thu, 01 Nov 2012 17:45:18 -0400 >>>>>> >>>>>> Michael wrote: >>>>>> >>>>>>> Looks like your "AuthBy xDSL" is accepting, therefore since the default >>>>>>> AuthByPolicy is ContinueWhileIgnore, it will stop at the xDSL authby >>>>>>> and the "AuthBy SQLAccounting" is not processed. >>>>>> >>>>>>> >>>>>> >>>>>>> I personally handle accounting in a separate handler. To me, handling >>>>>>> accounting and authorization in the same handler is tricky. >>>>>> >>>>>>> >>>>>> >>>>>>> >>>>>> >>>>>>> >>>>>> >>>>>>> Michael >>>>>> >>>>>>> >>>>>> >>>>>>> >>>>>> >>>>>>> >>>>>> >>>>>>> >>>>>> >>>>>>> On 01/11/12 05:07 PM, rohan.he...@cwjamaica.com wrote: >>>>>> >>>>>>>> Hugh, >>>>>> >>>>>>>> >>>>>> >>>>>>>> Config and logs attached. >>>>>> >>>>>>>> >>>>>> >>>>>>>> >>>>>> >>>>>>>> And the application crashed when testing Simultaneous-Use for both >>>>>>>> configurations below. >>>>>> >>>>>>>> >>>>>> >>>>>>>> In my AuthBy config: >>>>>> >>>>>>>> "DefaultSimultaneousUse 1" With "AuthAttrDef >>>>>>>> Simultaneous-Use,Simultaneous-Use,check" >>>>>> >>>>>>>> >>>>>> >>>>>>>> Or >>>>>> >>>>>>>> >>>>>> >>>>>>>> In my Handler: >>>>>> >>>>>>>> MaxSessions 1 >>>>>> >>>>>>>> >>>>>> >>>>>>>> >>>>>> >>>>>>>> >>>>>> >>>>>>>> On Fri, 2 Nov 2012 07:19:09 +1100 >>>>>> >>>>>>>> Hugh Irvine wrote: >>>>>> >>>>>>>>> Hello Rohan - >>>>>> >>>>>>>>> >>>>>> >>>>>>>>> We will need to see the configuration file (no secrets) together with >>>>>>>>> a trace 4 debug showing what is happening. >>>>>> >>>>>>>>> >>>>>> >>>>>>>>> regards >>>>>> >>>>>>>>> >>>>>> >>>>>>>>> Hugh >>>>>> >>>>>>>>> >>>>>> >>>>>>>>> >>>>>> >>>>>>>>> On 2 Nov 2012, at 05:53, wrote: >>>>>> >>>>>>>>> >>>>>> >>>>>>>>>> Hello, >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> Why doesn't the following work? >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> Identifier SQLAccounting >>>>>> >>>>>>>>>> DBSource dbi:mysql:inetdb_test >>>>>> >>>>>>>>>> DBUsername inet >>>>>> >>>>>>>>>> DBAuth inet@inetdb >>>>>> >>>>>>>>>> #Disable SQL authentication >>>>>> >>>>>>>>>> AuthSelect >>>>>> >>>>>>>>>> HandleAcctStatusTypes Start,Stop >>>>>> >>>>>>>>>> AccountingTable ARCH_ACCOUNTING >>>>>> >>>>>>>>>> AcctColumnDef USER_NAME,User-Name >>>>>> >>>>>>>>>> AcctColumnDef ACCT_START_TIME,Timestamp,integer >>>>>> >>>>>>>>>> AcctColumnDef ACCT_STOP_TIME,Timestamp,integer >>>>>> >>>>>>>>>> AcctColumnDef ACCT_STATUS_TYPE,Acct-Status-Type,integer >>>>>> >>>>>>>>>> AcctColumnDef ACCT_DELAY_TIME,Acct-Delay-Time,integer >>>>>> >>>>>>>>>> AcctColumnDef ACCT_INPUT_OCTETS,Acct-Input-Octets,integer >>>>>> >>>>>>>>>> AcctColumnDef ACCT_OUTPUT_OCTETS,Acct-Output-Octets,integer >>>>>> >>>>>>>>>> AcctColumnDef ACCT_SESSION_ID,Acct-Session-Id >>>>>> >>>>>>>>>> AcctColumnDef ACCT_SESSION_TIME,Acct-Session-Time,integer >>>>>> >>>>>>>>>> AcctColumnDef ACCT_TERMINATE_CAUSE,Acct-Terminate-Cause,integer >>>>>> >>>>>>>>>> AcctColumnDef FRAMED_IP_ADDRESS,Framed-IP-Address >>>>>> >>>>>>>>>> AcctColumnDef NAS_IDENTIFIER,NAS-Identifier >>>>>> >>>>>>>>>> AcctColumnDef NAS_PORT,NAS-Port,integer >>>>>> >>>>>>>>>> AcctColumnDef CALLED_STATION_ID,Called-Station-Id >>>>>> >>>>>>>>>> AcctColumnDef CALLING_STATION_ID,Calling-Station-Id >>>>>> >>>>>>>>>> SQLRecoveryFile %L/sqlaccounting.sql >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> Specifying the following in my Handler does not work. I don't even >>>>>>>>>> see any trace in my logs set at level 4 or 5. >>>>>> >>>>>>>>>> AuthBy SQLAccounting >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> However my sessions database work with the following. >>>>>> >>>>>>>>>> SessionDatabase SQLSDB >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> Thanks much. >>>>>> >>>>>>>>>> >>>>>> >>>>>>>>>> Regards, >>>>>> >>>>>>>>>> Rohan >>>>>> >>>>>>>>>> _______________________________________________ >>>>>> >>>>>>>>>> radiator mailing list >>>>>> >>>>>>>>>> radiator@open.com.au >>>>>> >>>>>>>>>> http://www.open.com.au/mailman/listinfo/radiator >>>>>> >>>>>>>>> >>>>>> >>>>>>>>> -- >>>>>> >>>>>>>>> >>>>>> >>>>>>>>> Hugh Irvine >>>>>> >>>>>>>>> h...@open.com.au >>>>>> >>>>>>>>> >>>>>> >>>>>>>>> Radiator: the most portable, flexible and configurable RADIUS server >>>>>> >>>>>>>>> anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, >>>>>> >>>>>>>>> Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, >>>>>>>>> TLS, >>>>>> >>>>>>>>> TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP, >>>>>> >>>>>>>>> DIAMETER etc. >>>>>> >>>>>>>>> Full source on Unix, Windows, MacOSX, Solaris, VMS, NetWare etc. >>>>>> >>>>>>>>> >>>>>> >>>>>>>> Rohan Henry >>>>>> >>>>>>>> Server Administrator >>>>>> >>>>>>>> LIME >>>>>> >>>>>>>> Phone (876) 936-4819 >>>>>> >>>>>>>> Mobile (876) 997-0729 >>>>>> >>>>>>>> >>>>>> >>>>>>>> >>>>>> >>>>>>>> _______________________________________________ >>>>>> >>>>>>>> radiator mailing list >>>>>> >>>>>>>> radiator@open.com.au >>>>>> >>>>>>>> http://www.open.com.au/mailman/listinfo/radiator >>>>>> >>>>>> >>>>>> >>>>>> Rohan Henry >>>>>> >>>>>> Server Administrator >>>>>> >>>>>> LIME >>>>>> >>>>>> Phone (876) 936-4819 >>>>>> >>>>>> Mobile (876) 997-0729 >>>>>> >>>>>> _______________________________________________ >>>>>> radiator mailing list >>>>>> radiator@open.com.au >>>>>> http://www.open.com.au/mailman/listinfo/radiator >>>>> >>>>> >>>>> -- >>>>> >>>>> Hugh Irvine >>>>> h...@open.com.au >>>>> >>>>> Radiator: the most portable, flexible and configurable RADIUS server >>>>> anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, >>>>> Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, >>>>> TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP, >>>>> DIAMETER etc. >>>>> Full source on Unix, Windows, MacOSX, Solaris, VMS, NetWare etc. >>>>> >>>> >>>> Rohan Henry >>>> Server Administrator >>>> LIME >>>> Phone (876) 936-4819 >>>> Mobile (876) 997-0729 >>>> _______________________________________________ >>>> radiator mailing list >>>> radiator@open.com.au >>>> http://www.open.com.au/mailman/listinfo/radiator >>> >>> >>> -- >>> >>> Hugh Irvine >>> h...@open.com.au >>> >>> Radiator: the most portable, flexible and configurable RADIUS server >>> anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, >>> Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, >>> TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP, >>> DIAMETER etc. >>> Full source on Unix, Windows, MacOSX, Solaris, VMS, NetWare etc. >>> >> >> Rohan Henry >> Server Administrator >> LIME >> Phone (876) 936-4819 >> Mobile (876) 997-0729 >> <radius.cfg.txt><radius >> log.txt>_______________________________________________ >> radiator mailing list >> radiator@open.com.au >> http://www.open.com.au/mailman/listinfo/radiator > > >-- > >Hugh Irvine >h...@open.com.au > >Radiator: the most portable, flexible and configurable RADIUS server >anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, >Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, >TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP, >DIAMETER etc. >Full source on Unix, Windows, MacOSX, Solaris, VMS, NetWare etc. > Rohan Henry Server Administrator LIME Phone (876) 936-4819 Mobile (876) 997-0729 _______________________________________________ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator
