radrelay(8) [centos man page]

RADRELAY(8)							 FreeRADIUS Daemon						       RADRELAY(8)

NAME

       radrelay -- Deprecated command.

DESCRIPTION

       The  functions  of  radrelay have been added to radiusd.  One benefit is that one instance of radiusd can read multiple detail files, among
       others.

       The rlm_sql_log module does something similar, but for SQL queries.  See it's man page for details.

REPLICATION FOR BACKUPS

       Many sites run multiple radius servers; at least one primary and one backup server. When the primary goes down, most NASes detect that  and
       switch to the backup server.

       That  will  cause your accounting packets to go the the backup server - and some NASes don't even switch back to the primary server when it
       comes back up.

       The result is that accounting records are missed, and/or the administrator must jump through hoops in order to combine the different detail
       files  from  multiple servers. It also means that the session database ("radutmp", used for radwho and simultaneous use detection) gets out
       of sync.

       We solve this issue by "relaying" packets from one server to another, so they both have the same set of accounting data.

       See raddb/sites-available/buffered-sql for more information.

BUFFERING FOR HIGH-LOAD SERVERS
       If the RADIUS server suddenly receives a many accounting packets, there may be insufficient CPU power to process them all in a timely  man-
       ner.  This problem is especially noticable when the accounting packets are going to a back-end database.

       Similarly,  you	may  have  one	database  that	tracks "live" sessions, and another that tracks historical accounting data.  In that case,
       accessing the first database is fast, as it is small.  Accessing the second database many be slower, as it may contain  multiple  gigabytes
       of data.  In addition, writing to the first database in a timely manner is important, while data may be written to the second database with
       a few minutes delay, without any harm being done.

       See raddb/sites-available/copy-to-home-server for more information.

SEE ALSO

       radiusd(8), rlm_sql_log(5)

AUTHOR

       The FreeRADIUS Server Project

								  23 October 2007						       RADRELAY(8)

RADWHO(1)							 FreeRADIUS Daemon							 RADWHO(1)

NAME

       radwho - show online users

SYNOPSIS

       radwho [-c] [-d raddb_directory] [-F radutmp_file] [-i] [-n] [-N nas_ip_address] [-p] [-P nas_port] [-r] [-R] [-s] [-S] [-u user] [-U user]
       [-Z]

DESCRIPTION

       The FreeRADIUS server can be configured to maintain an active session database in a file called radutmp. This utility shows the content	of
       that session database.

OPTIONS

       -c     Shows caller ID (if available) instead of the full name.

       -d raddb_directory
	      The directory that contains the RADIUS configuration files. Defaults to /etc/raddb.

       -F radutmp_file
	      The file that contains the radutmp file.	If this is specified, -d is not necessary.

       -i     Shows the session ID instead of the full name.

       -n     Normally radwho looks up the username in the systems password file, and shows the full username as well. The -n flags prevents this.

       -N nas_ip_address
	      Show only those entries which match the given NAS IP address.

       -p     Adds an extra column for the port type - I for ISDN, A for Analog.

       -P nas_port
	      Show only those entries which match the given NAS port.

       -r     Outputs all data in raw format - no headers, no formatting, fields are comma-separated.

       -R     Output all data in RADIUS attribute format.  All fields are printed.

       -s     Show full name.

       -S     Hide shell users. Doesn't show the entries for users that do not have a SLIP or PPP session.

       -u user
	      Show only those entries which match the given username (case insensitive).

       -U user
	      Show only those entries which match the given username (case sensitive).

       -Z     When  combined  with -R, prints out the contents of an Accounting-Request packet which can be passed to radclient, in order to "zap"
	      that users session from radutmp.

       For example,

	      $ radwho -ZRN 10.0.0.1 | radclient -f - radius.example.net acct testing123

       will result in all an Accounting-Request packet being sent to the RADIUS server, which tells the server that the  NAS  rebooted.   i.e.	It
       "zaps" all of the users on that NAS.

       To "zap" one user, specifiy NAS, username, and NAS port:

	      $ radwho -ZRN 10.0.0.1 -u user -P 10 | radclient -f - radius.example.net acct testing123

       Other combinations are also possible.

SEE ALSO

       radiusd(8), radclient(1), radiusd.conf(5).

AUTHOR

       Miquel van Smoorenburg, miquels@cistron.nl.

								    17 Feb 2013 							 RADWHO(1)