Login or Register to Ask a Question and Join Our Community

Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

radrelay(8) [debian man page]

RADRELAY(8)							 FreeRADIUS Daemon						       RADRELAY(8)

NAME

       radrelay -- Deprecated command.

DESCRIPTION

       The  functions  of  radrelay have been added to radiusd.  One benefit is that one instance of radiusd can read multiple detail files, among
       others.

       The rlm_sql_log module does something similar, but for SQL queries.  See it's man page for details.

REPLICATION FOR BACKUPS

       Many sites run multiple radius servers; at least one primary and one backup server. When the primary goes down, most NASes detect that  and
       switch to the backup server.

       That  will  cause your accounting packets to go the the backup server - and some NASes don't even switch back to the primary server when it
       comes back up.

       The result is that accounting records are missed, and/or the administrator must jump through hoops in order to combine the different detail
       files  from  multiple servers. It also means that the session database ("radutmp", used for radwho and simultaneous use detection) gets out
       of sync.

       We solve this issue by "relaying" packets from one server to another, so they both have the same set of accounting data.

       See raddb/sites-available/buffered-sql for more information.

BUFFERING FOR HIGH-LOAD SERVERS
       If the RADIUS server suddenly receives a many accounting packets, there may be insufficient CPU power to process them all in a timely  man-
       ner.  This problem is especially noticable when the accounting packets are going to a back-end database.

       Similarly,  you	may  have  one	database  that	tracks "live" sessions, and another that tracks historical accounting data.  In that case,
       accessing the first database is fast, as it is small.  Accessing the second database many be slower, as it may contain  multiple  gigabytes
       of data.  In addition, writing to the first database in a timely manner is important, while data may be written to the second database with
       a few minutes delay, without any harm being done.

       See raddb/sites-available/copy-to-home-server for more information.

SEE ALSO

       radiusd(8), rlm_sql_log(5)

AUTHOR

       The FreeRADIUS Server Project

								  23 October 2007						       RADRELAY(8)

Check Out this Related Man Page

rlm_acct_unique(5)						 FreeRADIUS Module						rlm_acct_unique(5)

NAME

       rlm_acct_unique - FreeRADIUS Module

DESCRIPTION

       The rlm_acct_unique module creates a unique accounting session Id.

       Many  NAS  vendors have their equipment supply an Acct-Session-Id attribute which is not unique over reboots.  This makes accounting diffi-
       cult, as there will be many independent sessions with the same Acct-Session-Id attribute.  This module uses the Acct-Session-Id	attribute,
       along with other attributes in the request, to create a more unique session ID, called Acct-Unique-Session-Id.

       The main configuration items to be aware of are:

       key    A list of the attributes used in calculating an MD5 hash which is used as the value for the unique session id.

CONFIGURATION

       modules {
	 ...
	 acct_unique {
	    key = "User-Name, Acct-Session-Id, NAS-IP-Address, NAS-Port"
	 }
	 ...
       }
	...
       preacct {
	 ...
	 acct_unique
	 ...
       }

       After  generating  the MD5 hash, the module adds it to the accounting request packet received from the client.  It will look something like
       this in your detail file:

	    Acct-Unique-Session-Id = "c66ef57e480b9d26"

       NOTE:  Any attribute you specify that is not found in the 'dictionary' file will cause the server to fail and exit with an error.

       NOTE:  If you want the Acct-Unique-Session-Id of the Start and the Stop packet of a particular session to match, you must  use  values  for
       the key that will stay the same for the Start and Stop.	The above example is a good start.  Adding 'Acct-Session-Time', for example, would
       cause a mismatch because that value is not the same on the Start and Stop accounting packets.

SECTIONS

       authorization, pre-accounting, accounting

FILES

       /etc/raddb/radiusd.conf

SEE ALSO

       radiusd(8), radiusd.conf(5)

AUTHORS

       Chris Parker, cparker@segv.org

								  3 February 2004						rlm_acct_unique(5)
Man Page