Hello,

I have a radius server running freeradius 1.1.7 under FC8, I would like to know will there be any problem in terms of database update (accounting aspect) when I issue a command 'service radiusd restart' while there are users who have been successfully authorized and browsing the Internet.

Should I disconnect all of them first then restart the service?  If so, please kindly let me know the command that I can use.  My network connection is below:

internet ------ radius server ------ chillispot server ------ wireless users

If I want to disconnect users, should I issue the disconnect command in the chillispot server or at the radius server? what command should I use?

Thanks very much in advance for all comments and suggestions.

2

(7 replies, posted in Radius Configuration)

Thanks very much kmkhn,  I have fixed the problem by removing the '\' of the query and make it in a whole one line.

It works now.

Thanks so much.

3

(7 replies, posted in Radius Configuration)

Hi dmkhn,

The line 1563 of the radius.conf is the query line 'query = "SELECT UNIX_TIMESTAMP() - UNIX_TIMESTAMP(AcctStartTime) FROM radacct \

WHERE UserName = '%{%k}' LIMIT 1"   <-----this line.

4

(7 replies, posted in Radius Configuration)

I'm using freeradius version 1.1.7 under FC8 with phpmyprepaid.  I also would like to have 3-day accounts expire exactly 3 days after the first login.  I follow the instruction found at http://www.warungdigital.com/freeradius-limit-user-access-by-period-started-from-activation-time.htm, but after I restart the server (using service radiusd restart) I have the following error:

Fri May 22 23:10:48 2009 : Error: /etc/raddb/radiusd.conf[1563]: Line is not in 'attribute = value' format
Fri May 22 23:10:48 2009 : Error: Errors reading radiusd.conf

What should I do?

Please see the related part of my radius.conf below:

in the module part:
------------
       sqlcounter accessperiod {
               counter-name = Max-Access-Period-Time
               check-name = Access-Period
               sqlmod-inst = sql
               key = User-Name
               reset = never
               query = "SELECT UNIX_TIMESTAMP() - UNIX_TIMESTAMP(AcctStartTime) FROM radacct \
               WHERE UserName = '%{%k}' LIMIT 1"
       }
-----------

in the authorization part:
-----------
        #
        # As of 1.1.4, you should list "pap" last in this section.
        # See "man rlm_pap" for more information.
        pap
noresetcounter
dailycounter
monthlycounter
accessperiod
}
----------

I have also added the following in the /etc/raddb/dictionary

ATTRIBUTE Access-Period 3000 integer



in radcheck table of mySQL database:

id          |  UserName   |  Attribute          |op |     Value
28003    |    3d               |  Access-Period   |:=  |    259200
28004    |    3d               |  User-Password  |:=  |    3d

5

(5 replies, posted in Debian)

Hi benoman,

Can you post the iptable command that solved your problem, I am having the same problem.  My connection diagram is as follow:

Internet----RAIDUS server-------Hub------eth1-Chilli-eth0/tun0------Linksys AP--------wireless clients

Thanks very much