From 160be29a0dc62e79a4fb95d2ab8c0c7e5996760e Mon Sep 17 00:00:00 2001 From: cvs2git Date: Mon, 12 Aug 2002 06:17:10 +0000 Subject: This commit was manufactured by cvs2svn to create branch 'BESTPRACTICAL'. --- httemplate/docs/session.html | 54 -------------------------------------------- 1 file changed, 54 deletions(-) delete mode 100644 httemplate/docs/session.html (limited to 'httemplate/docs/session.html') diff --git a/httemplate/docs/session.html b/httemplate/docs/session.html deleted file mode 100644 index 7dac5fdf7..000000000 --- a/httemplate/docs/session.html +++ /dev/null @@ -1,54 +0,0 @@ - - Session monitor - - -

Session monitor

Installation

-For security reasons, the client portion of the session montior may run on one -or more external public machine(s). On these machines, install: -

Perl (at l -east 5.004_05 for the 5.004 series or 5.005_03 for the 5.005 series. Don't enable experimental features like threads or the PerlIO abstraction layer.) -
FS::SessionClient (copy the fs_session/FS-SessionClient directory to the external machine, then: perl Makefile.PL; make; make install) -

-Then: -

Add the user `freeside' to the the external machine. -
Create the /usr/local/freeside directory on the external machine (owned by the freeside user). -
touch /usr/local/freeside/fs_sessiond_socket; chown freeside /usr/local/freeside/fs_sessiond_socket; chmod 600 /usr/local/freeside/fs_sessiond_socket -
Append the identity.pub from the freeside user on your freeside machine to the authorized_keys file of the newly created freeside user on the external machine(s). -
Run
```
fs_session_server user machine
```
on the Freeside machine. -
- user is a user from the mapsecrets file. -
- machine is the name of the external machine. -
-

Usage

Web -
- Copy FS-SessionClient/cgi/login.cgi and logout.cgi to your web - server's document space. -
- Use suEXEC or setuid (see install.html for details) to run login.cgi and logout.cgi as the freeside user. -
-
Command-line -
```
freeside-login username ( portnum | ip | nasnum nasport )
-freeside-logout username ( portnum | ip | nasnum nasport )
```
-
- username is a customer username from the svc_acct table -
- portnum, ip or nasport and nasnum uniquely identify a port in the port database table. -
-
RADIUS -
- Configure your RADIUS server's login and logout callbacks to use the command-line freeside-login and freeside-logout utilites. -
-

Callbacks

Sesstion start - The command(s) specified in the session-start configuration file are executed on the Freeside machine. The contents of the file are treated as a double-quoted perl string, with the following variables available: $ip, $nasip and $nasfqdn, which are the IP address of the starting session, and the IP address and fully-qualified domain name of the NAS this session is on. -
Session end - The command(s) specified in the session-stop configuration file are executed on the Freeside machine. The contents of the file are treated as a double-quoted perl string, with the following variables available: $ip, $nasip and $nasfqdn, which are the IP address of the starting session, and the IP address and fully-qualified domain name of the NAS this session is on. -

Dropping expired users

-Run

bin/freeside-session-kill username

periodically from cron. - - -- cgit v1.2.1