Radius check time - possible to specify?

[wlanmac]

If you are provisioning access with a time limit, you should be setting
the Session-Timeout attribute in your Access-Accept. It should be the
"time remaining" - a dynamic variable based on time allowed minus time
consumed (take from radacct). 

David

On Fri, 2009-01-09 at 21:20 +0000, Derek C wrote:
> Hi Henk,
> 
> I'll give that directive a try.
> 
> Actually I am accounting [or, rather, it does accounting by default - at
> least data is being written into the radacct table although the write
> interval is whatever default coova chilli is going for].
> 
> Out of interest I've just checked the table now:  It looks like for a
> given user [MAC addr] I can see that the radacct records are being written
> every 70 minutes (funny figure isn't it?).
> 
> I'll see what happens if I can adjust the radius accounting times
> 
> thanks,
> 
> Derek
> 
> 
> On Fri, January 9, 2009 4:42 pm, Henk Kleynhans wrote:
> > Hi Derek,
> > Normally when accounting for usage, you set an Acct-Update-Interval
> > variable. Not sure if this applies though in your setup, as you're not
> > doing accounting. But it's the first place I'd look. henk
> >
> >
> > On Fri, Jan 9, 2009 at 6:11 PM, Derek C <derekchilli at hssl.ie> wrote:
> >
> >
> >> Hi all,
> >>
> >>
> >> I've found that Coova Chilli works excellently with OpenWRT based APs
> >> and freeradius on a central (Internet) server:
> >>
> >> I'm easily able to add a user's MAC address into the radcheck and
> >> usergroup tables and after this the user can get past my "splash screen"
> >> -
> >> super.
> >>
> >> BUT, and this is the reason for my post today, what I haven't worked
> >> out is how to tell Coova Chilli to do a frequent check against the free
> >> radius server to see if the user (by MAC) is still in there.
> >>
> >> I'm automatically removing the user from the tables with a script that
> >> runs on the [same server as] freeradius server.
> >>
> >> Example: When a user tries to access the web on my Coova Chilli enabled
> >> AP
> >> they are redirected to my splash page (because their MAC is NOT in the
> >> free radius tables). Then they accept that they want free access and I
> >> add them in to the free radius tables and then I send them on to their
> >> requested Internet page. Because they [MAC] are now in the free radius
> >> tables they ARE allowed Internet access. After 5 minutes I erase their
> >> MAC
> >> entry from the free radius tables. HERE IS THE CRUNCH: I notice that you
> >>  may still have, say, 1 hour on the Internet even though their MAC is
> >> no longer in the free radius tables.
> >>
> >> I'm guessing that this is because Coova Chilli is just not often
> >> re-checking against the free radius server that the user should still
> >> get access?
> >>
> >> Does anyone know how to tune this in Coova Chilli?
> >>
> >>
> >>
> >> thanks very much!!!
> >>
> >>
> >> Derek
> >>
> >>
> >>
> >>
> >> --
> >> Derek C
> >> In Ireland
> >>
> >>
> >>
> >> ---------------------------------------------------------------------
> >> To unsubscribe, e-mail: chilli-unsubscribe at coova.org
> >> For additional commands, e-mail: chilli-help at coova.org
> >> Wiki: http://coova.org/wiki/index.php/CoovaChilli
> >> Forum: http://coova.org/phpBB3/viewforum.php?f=4
> >>
> >>
> >
> > Henk Kleynhans
> > CTO & Founder
> > Skyrove (Pty) Ltd
> > Technology Top 100 - Most Promising Emerging Enterprise 2006
> > Tel: +27 (21) 4488843
> > Cell: +27 (84) 3073451
> > Fax: +27 (86) 6204077
> > henk at skyrove.com blog: www.geekrebel.com
> >
> >
> > ------
> >
> >
> > "A person with ubuntu is open and available to others, affirming of
> > others, does not feel threatened that others are able and good, for he or
> > she has a proper self-assurance that comes from knowing that he or she
> > belongs in a greater whole and is diminished when others are humiliated or
> > diminished, when others are tortured or oppressed." - Desmond Tutu
> >
> 
>