1rlm_acct_unique(5) FreeRADIUS Module rlm_acct_unique(5)
2
3
4
6 rlm_acct_unique - FreeRADIUS Module
7
9 The rlm_acct_unique module creates a unique accounting session Id.
10
11 Many NAS vendors have their equipment supply an Acct-Session-Id
12 attribute which is not unique over reboots. This makes accounting dif‐
13 ficult, as there will be many independent sessions with the same Acct-
14 Session-Id attribute. This module uses the Acct-Session-Id attribute,
15 along with other attributes in the request, to create a more unique
16 session ID, called Acct-Unique-Session-Id.
17
18 The main configuration items to be aware of are:
19
20 key A list of the attributes used in calculating an MD5 hash which
21 is used as the value for the unique session id.
22
24 modules {
25 ...
26 acct_unique {
27 key = "User-Name, Acct-Session-Id, NAS-IP-Address, NAS-Port"
28 }
29 ...
30 }
31 ...
32 preacct {
33 ...
34 acct_unique
35 ...
36 }
37
38 After generating the MD5 hash, the module adds it to the accounting
39 request packet received from the client. It will look something like
40 this in your detail file:
41
42 Acct-Unique-Session-Id = "c66ef57e480b9d26"
43
44 NOTE: Any attribute you specify that is not found in the 'dictionary'
45 file will cause the server to fail and exit with an error.
46
47 NOTE: If you want the Acct-Unique-Session-Id of the Start and the Stop
48 packet of a particular session to match, you must use values for the
49 key that will stay the same for the Start and Stop. The above example
50 is a good start. Adding 'Acct-Session-Time', for example, would cause
51 a mismatch because that value is not the same on the Start and Stop
52 accounting packets.
53
55 authorization, pre-accounting, accounting
56
58 /etc/raddb/radiusd.conf
59
61 radiusd(8), radiusd.conf(5)
62
64 Chris Parker, cparker@segv.org
65
66
67
68 3 February 2004 rlm_acct_unique(5)