FreeRADIUS: Drop a session ?

Posted on 2005-04-28
Last Modified: 2010-05-18
with freeradius i can authentify, authorify and do accounting. All fine. Regarding accounting i cannot figure out to do some accounting dynamically: If the user prepaid some time-limit connection how can i drop the users connection from the server where freeradius lives to the radius client.

And must comply the radius client any "special" protocol to be able to drop the user session by request from the radius server ?

Many thanks in advance, peter.
Question by:adminpeter
    LVL 16

    Accepted Solution

    What's the server?

    We use FreeRadius to authenticate our ADSL customers. BUT we have no way to kill a session that's already established, all we can do if a customer forgets to pay his bill is disable his a/c so he can't log in again if he logs off. And of cousre with ADSL, some usres don't log off for months at a time :-)

    But it can be configured differently, you can create a "session time" in the Radios account but the server has to expect to be told that data and know what to do with it.

    Even this won't work if you suddently decide out of the blue to log the user off, but if you know how much time the user has left on his account when he logs *in* you can set the session lifetime at the point he logs in to be "no longer than X minutes".


    Author Comment

    Hi ccomley,

    yes i read a little bit more about this issue and it seems there are some extensions (rfc2869) to the RADIUS protocol that may allow all this controls.

    Anyway you got the points...

    Thank you, bye ...

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Highfive + Dolby Voice = No More Audio Complaints!

    Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

    I have seen several blogs and forum entries elsewhere state that because NTFS volumes do not support linux ownership or permissions, they cannot be used for anonymous ftp upload through the vsftpd program.   IT can be done and here's how to get i…
    Note: for this to work properly you need to use a Cross-Over network cable. 1. Connect both servers S1 and S2 on the second network slots respectively. Note that you can use the 1st slots but usually these would be occupied by the Service Provide…
    This video is in connection to the article "The case of a missing mobile phone (". It will help one to understand clearly the steps to track a lost android phone.
    In this sixth video of the Xpdf series, we discuss and demonstrate the PDFtoPNG utility, which converts a multi-page PDF file to separate color, grayscale, or monochrome PNG files, creating one PNG file for each page in the PDF. It does this via a c…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now