Radius Accountng



  • It's been a while but im back because Mono doesnt have features i need.
    But when I left pfSense it had problem with radius accounting, due to the fact that pf uses diferent webserver so not all counting info was send  to Radius.

    Was that fixed? If yes, does any one has a dev image?

    Thanks!



  • Please retest with the 1.0-RELEASE Version. We resynced the captive portal with m0n0s SVN Version which even should fix some things that are in the latest official m0n0 release.



  • ok, ill do that and post results here…
    hm, i need another wrap box.



  • Ok I did my testings  :)
    And as i see you did fix the acounting problem :-) (although for some reason im getting double requests to my radius, maybe it usese both primary and secondaru Radius at the same time… well will look in to the code)

    So just to those ho had same problam as i did, now pfSense exactly the same accounting records as mono wall does.

    Aditional thoughts: add Captive portal statius the part whiich shows the username, caz i doubght some one can remember MAC addreses...

    So, im gonna try to add Radius server auto discovery and gatway status chek script that i wrote hope that will work.



  • Thanks for the feedback  :D



  • No probem



  • although for some reason im getting double requests to my radius, maybe it usese both primary and secondaru Radius at the same time… well will look in to the code

    Hi, did you manage to find out why there is double radius accouting log? I have same problem, trying to look into m0n0wall mailing list, yet to read any info about this. I am using pfsense + freeradius.



  • there is no such problem im mono, and I dint find any error in synked code on pfSense either

    Our company planning to give the reward to those who can fix that + some other bugs, but I have to write up the proposal



  • @alexus:

    there is no such problem im mono, and I dint find any error in synked code on pfSense either

    Which version of m0n0 did you test?



  • tested mono on 1.22 and 1.23b2

    Well if I recall long time ago i found bug in pf and the problem was that not all acoounting info was send to server, them I stiked with mono for about a year and then came back to pf found that now all required info is send to the server but it being send twise. I looked at the code and I dont see anything calling accounting function twise but since mono and pf has lots of include() I couldof miss some function that loop back



  • Just starting testing radius + mysql to be use with pfsense. I did find out there are 2 accounting record in mysql after login.

    After do through the code, I found RADIUS_ACCOUNTING_START been calling twice.

    First one in /usr/local/captiveportal/index.php and another one in /etc/inc/captiveportal.inc

    I just comment calling line in index.php and now login will only send 1 accounting start to radius server. Just testing for a few minutes. Hopefully someone can confirm which one is better to comment out.



  • That is not the correct fix.  I have synced the code with m0n0wall.  Please test a snapshot about 1 hour from now.



  • using snapshot.. no more double accounting..

    Anyone know whether it possible to use freeradius checkrad to check for current session still active or not?



  • Im glad that problem is soved

    @aneip:

    Anyone know whether it possible to use freeradius checkrad to for current session still active or not?

    Dont think that was implemented, to what I remember mono does not accept any incomming connections from the radius server besides RADREPLY, but even that one never worked out for me.



  • um, i was very fast on testing it out,… well im back at pf.
    I'm sure lots of things have changed. Can some one point me out to the latest snapshot for embeded? THANKS,
    Im always forgeting how to access it.





  • thanks bro


Log in to reply