Radius check time - possible to specify?

Derek C derekchilli at hssl.ie
Fri Jan 9 21:20:08 UTC 2009


Hi Henk,

I'll give that directive a try.

Actually I am accounting [or, rather, it does accounting by default - at
least data is being written into the radacct table although the write
interval is whatever default coova chilli is going for].

Out of interest I've just checked the table now:  It looks like for a
given user [MAC addr] I can see that the radacct records are being written
every 70 minutes (funny figure isn't it?).

I'll see what happens if I can adjust the radius accounting times

thanks,

Derek


On Fri, January 9, 2009 4:42 pm, Henk Kleynhans wrote:
> Hi Derek,
> Normally when accounting for usage, you set an Acct-Update-Interval
> variable. Not sure if this applies though in your setup, as you're not
> doing accounting. But it's the first place I'd look. henk
>
>
> On Fri, Jan 9, 2009 at 6:11 PM, Derek C <derekchilli at hssl.ie> wrote:
>
>
>> Hi all,
>>
>>
>> I've found that Coova Chilli works excellently with OpenWRT based APs
>> and freeradius on a central (Internet) server:
>>
>> I'm easily able to add a user's MAC address into the radcheck and
>> usergroup tables and after this the user can get past my "splash screen"
>> -
>> super.
>>
>> BUT, and this is the reason for my post today, what I haven't worked
>> out is how to tell Coova Chilli to do a frequent check against the free
>> radius server to see if the user (by MAC) is still in there.
>>
>> I'm automatically removing the user from the tables with a script that
>> runs on the [same server as] freeradius server.
>>
>> Example: When a user tries to access the web on my Coova Chilli enabled
>> AP
>> they are redirected to my splash page (because their MAC is NOT in the
>> free radius tables). Then they accept that they want free access and I
>> add them in to the free radius tables and then I send them on to their
>> requested Internet page. Because they [MAC] are now in the free radius
>> tables they ARE allowed Internet access. After 5 minutes I erase their
>> MAC
>> entry from the free radius tables. HERE IS THE CRUNCH: I notice that you
>>  may still have, say, 1 hour on the Internet even though their MAC is
>> no longer in the free radius tables.
>>
>> I'm guessing that this is because Coova Chilli is just not often
>> re-checking against the free radius server that the user should still
>> get access?
>>
>> Does anyone know how to tune this in Coova Chilli?
>>
>>
>>
>> thanks very much!!!
>>
>>
>> Derek
>>
>>
>>
>>
>> --
>> Derek C
>> In Ireland
>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: chilli-unsubscribe at coova.org
>> For additional commands, e-mail: chilli-help at coova.org
>> Wiki: http://coova.org/wiki/index.php/CoovaChilli
>> Forum: http://coova.org/phpBB3/viewforum.php?f=4
>>
>>
>
> Henk Kleynhans
> CTO & Founder
> Skyrove (Pty) Ltd
> Technology Top 100 - Most Promising Emerging Enterprise 2006
> Tel: +27 (21) 4488843
> Cell: +27 (84) 3073451
> Fax: +27 (86) 6204077
> henk at skyrove.com blog: www.geekrebel.com
>
>
> ------
>
>
> "A person with ubuntu is open and available to others, affirming of
> others, does not feel threatened that others are able and good, for he or
> she has a proper self-assurance that comes from knowing that he or she
> belongs in a greater whole and is diminished when others are humiliated or
> diminished, when others are tortured or oppressed." - Desmond Tutu
>


-- 
Derek C
In Ireland




More information about the Chilli mailing list