Re: Radius & Logoff

ywliu (team_fbf@asiaonline.net.tw)
Thu, 6 Jun 1996 12:09:58 +0000 ()

>
> > While I was hacking the RADIUS daemons (1.16 or Merit 2.23) to meet our
> > customized needs, I found that , unlike TACACS or ERPCD, RADIUS doesn't seem
> > to support user logout authentication, i.e. when a user logs out from the
> > terminal server, the terminal server doesn't send logout request to the
> > RADIUS server. But for TACACS or ERPCD, the terminal server would send a l
> > ogout request to the daemons.
>
> Logout request? What would be the purpose of that? What are you going to
> do, say no you can't logoff?

I don't know; maybe. 8-) Anyway, what we need is to add a customized service
to our business, and it requires the modification of RADIUS daemon. TACACS
and ERPC treat a logout, like login, as an auth request, rather than an
accounting request.

>
> > Is my observation correct ? Also, is this a design flow ? Is it possible
> > to know the user logs out from the terminal server ? I need this or I don't
> > know how I would know if a user is logout or not.
>
> Perhaps you're looking only at the authentification side. Sounds like the
> information you want is in the whole other side of the game, on the
> accounting side. Authentification requests are made upon login. However,
> an accounting start message is sent out when a user logs in, and then a
> stop message is sent when the session terminates.

Yes I guess your are right. I will look at this part more. Thanks for your,
as well as others', help.

Yen-Wei Liu