[RADIATOR] Radius Feed to third party Billing Vendor
Hi List I have a number of radiator servers (radiator 4.9) handling auth+acct and storing radius accounting data in local postgresql databases. At the same time I need to "feed" all the radius accounting data I'm receiving to a third party's data processing server using RADIUS protocol, so that it can be analysed independently from our own billing operations. As a feed mechanism, I'm thinking of somehow proxying all accounting requests (in addition to handling them locally) but I can see a number of problems with that. My question is: Is there a means of getting radiator to feed (using radius protocol) a copy of accounting requests to another radius system, while performing all necessary auth and accounting operations localy as normal ? Thanks in Advance! Traiano Welcome ___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator
Re: [RADIATOR] Radius Feed to third party Billing Vendor
On 01/24/2012 04:20 PM, Traiano Welcome wrote: > I have a number of radiator servers (radiator 4.9) handling auth+acct and > storing radius accounting data in local postgresql databases. At the same > time I need to "feed" all the radius accounting data I'm receiving to a > third party's data processing server using RADIUS protocol, so that it can > be analysed independently from our own billing operations. > > As a feed mechanism, I'm thinking of somehow proxying all accounting > requests (in addition to handling them locally) but I can see a number of > problems with that. My question is: > > Is there a means of getting radiator to feed (using radius protocol) a > copy of accounting requests to another radius system, while performing > all necessary auth and accounting operations localy as normal ? You can use AuthBy RADIUS for this. A couple of notes: - Use NoForwardAuthentication or IgnoreAuthentication if you handle both authentication and accounting with the same Handler. This will keep authentication requests from getting proxied. See the manual for the differences of the two options - Note that when AuthBy RADIUS forwards the accounting request it will return IGNORE. Depending on what other AuthBys you have and how your AuthByPolicy has been set (defaults to ContinueWhileIgnore), you may need to do accounting forwarding with the last AuthBy Thanks! Heikki -- Heikki Vatiainen Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP, DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS, NetWare etc. ___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator
[RADIATOR] Using Storable in a hook
I'm seeing some weird errors and behavior trying to use the freeze method from Storable. Is there a special trick to making it work in hook code? I saw a reference on the cpan page for special handling when used in a 'Safe' compartment.. is that what's happening here? For reference.. for development/debugging I'm attempting to serialize and store (in db field) a hash I'm creating with all the per packet name-value pairs. Thanks, J ___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator
Re: [RADIATOR] Using Storable in a hook
On 01/24/2012 10:44 PM, Jared Watkins wrote: > I'm seeing some weird errors and behavior trying to use the freeze method > from Storable. Is there a special trick to making it work in hook code? I have not used Storable myself, but if you could reply with some examples I can take a a look. Note that some of the data structures, such as radius requests ($p usually) are very large. You could see e.g. with Data::Dumper to see what they look like. > I saw a reference on the cpan page for special handling when used in a 'Safe' > compartment.. is that what's happening here? For reference.. for > development/debugging I'm attempting to serialize and store (in db field) a > hash I'm creating with all the per packet name-value pairs. Hard to tell. Examples would be useful :) Thanks! Heikki -- Heikki Vatiainen Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP, DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS, NetWare etc. ___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator
Re: [RADIATOR] Radius Feed to third party Billing Vendor
Hello Triano - The way I generally do this sort of thing is with Handlers (not Realms): ….. # accounting AuthByPolicy ContinueAlways # proxy to remote ….. # normal local processing ….. # authentication # normal local processing ….. ….. hope that helps regards Hugh On 25 Jan 2012, at 07:30, Heikki Vatiainen wrote: > On 01/24/2012 04:20 PM, Traiano Welcome wrote: > >> I have a number of radiator servers (radiator 4.9) handling auth+acct and >> storing radius accounting data in local postgresql databases. At the same >> time I need to "feed" all the radius accounting data I'm receiving to a >> third party's data processing server using RADIUS protocol, so that it can >> be analysed independently from our own billing operations. >> >> As a feed mechanism, I'm thinking of somehow proxying all accounting >> requests (in addition to handling them locally) but I can see a number of >> problems with that. My question is: >> >> Is there a means of getting radiator to feed (using radius protocol) a >> copy of accounting requests to another radius system, while performing >> all necessary auth and accounting operations localy as normal ? > > You can use AuthBy RADIUS for this. A couple of notes: > - Use NoForwardAuthentication or IgnoreAuthentication if you handle both > authentication and accounting with the same Handler. This will keep > authentication requests from getting proxied. See the manual for the > differences of the two options > - Note that when AuthBy RADIUS forwards the accounting request it will > return IGNORE. Depending on what other AuthBys you have and how your > AuthByPolicy has been set (defaults to ContinueWhileIgnore), you may > need to do accounting forwarding with the last AuthBy > > Thanks! > Heikki > > -- > Heikki Vatiainen > > Radiator: the most portable, flexible and configurable RADIUS server > anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, > Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, > TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP, > DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS, > NetWare etc. > ___ > radiator mailing list > radiator@open.com.au > http://www.open.com.au/mailman/listinfo/radiator -- Hugh Irvine h...@open.com.au Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP, DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS, NetWare etc. ___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator
Re: [RADIATOR] Using Storable in a hook
I figured out that I have to call it directly like Storable::nfreeze(\%x) but the error I was getting for other way was: Bizarre copy of HASH in refgen at Now.. I'm passing the value in as a bound parameter in the hook and according to a length call on the variable.. it's going in with an average length of 1450 bytes. However.. when I fetch it from the database (postgres) I'm only getting back 3 bytes. I'm using just the attributes list out of the $p variable by $p->{'Attributes'}. I've done binary data through DBI before (to mysql) without a problem.. so I'm not sure where it might be getting lost here. Thanks, Jared On Jan 24, 2012, at 5:59 PM, Heikki Vatiainen wrote: > On 01/24/2012 10:44 PM, Jared Watkins wrote: > >> I'm seeing some weird errors and behavior trying to use the freeze method >> from Storable. Is there a special trick to making it work in hook code? > > I have not used Storable myself, but if you could reply with some > examples I can take a a look. > > Note that some of the data structures, such as radius requests ($p > usually) are very large. You could see e.g. with Data::Dumper to see > what they look like. > >> I saw a reference on the cpan page for special handling when used in a >> 'Safe' compartment.. is that what's happening here? For reference.. for >> development/debugging I'm attempting to serialize and store (in db field) a >> hash I'm creating with all the per packet name-value pairs. > > Hard to tell. Examples would be useful :) > > Thanks! > Heikki > > -- > Heikki Vatiainen > > Radiator: the most portable, flexible and configurable RADIUS server > anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, > Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, > TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP, > DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS, > NetWare etc. ___ radiator mailing list radiator@open.com.au http://www.open.com.au/mailman/listinfo/radiator