Re: Radius & Logoff

Peter Mak (unet@hkstar.com)
Thu, 6 Jun 1996 03:45:00 +0800 (HKT)

Radius does not have logout notification. It has accounting instead. You
should turn on Radius accounting on your terminal server. The terminal
server will then send accounting start and accounting stop messages to the
RADIUS daemon telling it when users log in and out.

>While I was hacking the RADIUS daemons (1.16 or Merit 2.23) to meet our
>customized needs, I found that , unlike TACACS or ERPCD, RADIUS doesn't seem
>to support user logout authentication, i.e. when a user logs out from the
>terminal server, the terminal server doesn't send logout request to the
>RADIUS server. But for TACACS or ERPCD, the terminal server would send a l
>ogout request to the daemons.
>
>Is my observation correct ? Also, is this a design flow ? Is it possible
>to know the user logs out from the terminal server ? I need this or I don't
>know how I would know if a user is logout or not.
>
>Thanks for your help.
>
>Yen-Wei Liu
>

Regards

+-----------------------------------------------------------+
+ Developer of Windows based Security Server +
+ +
+ TACACS, XTACACS, TACACS+ and Radius +
+ +
+ Peter Mak +
+ Universal Networks Company Limited +
+ unet@mailhub.hkstar.com +
+ http://www.hkstar.com/~unet/ +
+-----------------------------------------------------------+