Re: Radius & Logoff

Chris B. Wilson, VectorNet (cbw@vector.net)
Wed, 5 Jun 1996 11:28:29 -0400 (EDT)

On Wed, 5 Jun 1996, ywliu wrote:

> While I was hacking the RADIUS daemons (1.16 or Merit 2.23) to meet our
> customized needs, I found that , unlike TACACS or ERPCD, RADIUS doesn't seem
> to support user logout authentication, i.e. when a user logs out from the
> terminal server, the terminal server doesn't send logout request to the
> RADIUS server. But for TACACS or ERPCD, the terminal server would send a l
> ogout request to the daemons.

Logout request? What would be the purpose of that? What are you going to
do, say no you can't logoff?

> Is my observation correct ? Also, is this a design flow ? Is it possible
> to know the user logs out from the terminal server ? I need this or I don't
> know how I would know if a user is logout or not.

Perhaps you're looking only at the authentification side. Sounds like the
information you want is in the whole other side of the game, on the
accounting side. Authentification requests are made upon login. However,
an accounting start message is sent out when a user logs in, and then a
stop message is sent when the session terminates.

Chris

// Chris Wilson, Gateway Telecommunications, Inc. | Ofc: 352.375.8658 //
// Chief Technical Officer, Senior Network Engineer | Pgr: 352.412.4341 //
// VectorNet - Quality Internet in Gainesville, Florida | Fax: 352.376.8353 //