Accounting info when using the internal hostapd's RADIUS functionality

Dennis Borgmann dennis.borgmann at googlemail.com
Thu Dec 2 11:32:29 EST 2010


Hi Panagiotis,

I wouldn't want to say, that you shall avoid using hostapd's internal
RADIUS, but since I had problems with EAP-TLS and certificate management
within hostapd and solved it easily by using freeradius, I ended up not
really trusting hostapd's RADIUS functions and therefore stick to
freeradius since then.

And the other way around - why should it bother you having to install
the "big" freeradius? If you enough of space, just take it and you're
fine ;-)

Just my thoughts on it, I don't want to blame hostapd, but it's my
experience.

Dennis Borgmann

Panagiotis Georgopoulos schrieb:
> Hello Dennis,
>
> 	Thanks for your reply! 
>
> 	I am also using freeRadius in my testbed but was thinking of getting a more lightweight authentication and accounting implementation on the access point (hostapd), when it looses its connection to the Internet (thus freeRadius).
>
> 	The other alternative would be to use freeRadius as proxy (with robust-proxy-accounting) on the access point (as you suggested), but I was looking for something much more lightweight. I thought that since we are able to do authentication with hostapd's internal Radius server, we could easily store accounting information (after all, all these packets go through the AP) and process these stored accounting logs at a much latter stage. 
>
> 	I would really have hoped that a simple solution would exist and avoid the overkill to run FR on the AP...
>
> 	Best Regards,
> 	Panos
>
>
>
>   
>> -----Original Message-----
>> From: Dennis Borgmann [mailto:dennis.borgmann at googlemail.com]
>> Sent: 02 December 2010 13:07
>> To: Panagiotis Georgopoulos
>> Cc: hostap at lists.shmoo.com
>> Subject: Re: Accounting info when using the internal hostapd's RADIUS
>> functionality
>>
>> Hi Panagiotis!
>>
>> Just a few words on this - I use freeradius, since I've had problems
>> with hostapd's RADIUS implementation before. Maybe it is a bit
>> overloaded, but it works :-)
>>
>> Kind regards,
>> Dennis Borgmann
>>
>> Panagiotis Georgopoulos schrieb:
>>     
>>> Hello all,
>>>
>>>
>>>
>>>                 When I use hostapds internal RADIUS server
>>> functionality, is there any way to do accounting?
>>>
>>>
>>>
>>> As far as I can tell from the archives of the list, hostapd does not
>>> store accounting information. Is there any add-on or other
>>>       
>> application
>>     
>>> that could store those? If not, what would be the easiest way to
>>> implement that (code-wise), ie. what source files should I start
>>> looking into ?
>>>
>>>
>>>
>>>                 Thanks a lot in advance,
>>>
>>>                 Panos
>>>
>>> ---------------------------------------------------------------------
>>>       
>> ---
>>     
>>> _______________________________________________
>>> HostAP mailing list
>>> HostAP at lists.shmoo.com
>>> http://lists.shmoo.com/mailman/listinfo/hostap
>>>
>>>       
>
>
>   



More information about the HostAP mailing list