> It appears that there is no way to track which dynamic address was
> assigned to which user/port. There doesn't appear to be anything in the
> RADIUS accounting record (at least, according to the IETF RADIUS
> Accounting Draft 5) that would record which dynamic IP address was
> assigned to the user/port.
Not sure what you are talking about. Here is an example detail file entry
Sun Dec 22 00:15:46 1996
Acct-Session-Id = "03000106"
User-Name = "testuser" This is which user
Client-Id = 205.252.72.31 This is which portmaster
Client-Port-Id = 3 This is which port (S3)
Acct-Status-Type = Start
Acct-Authentic = RADIUS
User-Service-Type = Framed-User
Framed-Protocol = PPP This is protocol assigned
Framed-Address = 205.252.73.46 This is dynamic IP # assigned
Acct-Delay-Time = 0
> I can see a problem also if the Auth-Type is Local (ie DEFAULT entries
> won't work), which would require user-specific static addresses (or is
> there a way to tell RADIUS to use a password file other than /etc/passwd
> for System authentication?). It seems that it would be appropriate to have
> the PM return the "Framed-IP-Address" (and maybe "Framed-Protocol" as
> well) in the accounting Start record when the IP address is assigned
> dynamically (or anytime it's a Framed session). Similar information is
> returned for Login sessions.
> Is the IP assignment information available via some PM "show" command? If
> so, I guess I could have some other process running that periodically ran
> that command on each active port, then parsed the output and stored it in
> a log file.
Yes, show sessions shows IP assignment if you assign the DNS entries
cleverly enough. Ie. ppp-1-21.xyz.net is first portmaster (within first
30 machine subnet) and given ip xxx.yyy.zzz.21.
> My application is two-fold: (1) be able to determine who was the culprit
> if some kind of unethical/illegal activity happens on a dial-up session
> and (2) authenticate to other services (ie Web-based accounting interface)
> using a combination of the in-coming IP address and knowing who the PM
> assigned that address to.
Assign DNS names as above and you know immediately which portmaster detail
file to go to. Then you grep for IP number within the specified time
frame and you will get username.