tygozwolle/radius
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: implement background account enforcement service and RADIUS management service for guest access control
Build and Push Docker Image to Gitea Container Registry / build-and-push (push) Successful in 1m3s
Details

Browse Source
This commit is contained in:
Tygozwolle
2026-07-24 18:47:45 +02:00
parent 63082d0791
commit 926d2a1fc5
2 changed files with 14 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
radiuscontroller/Services/AccountEnforcementService.cs
+7 -7
View File
@@ -107,24 +107,24 @@ public class AccountEnforcementService : BackgroundService
// Find active sessions to disconnect them instantly via RADIUS CoA (PoD)
var activeSessions = await db.RadAcct
.Where(ra => ra.Username == profile.Username && ra.AcctStopTime == null)
.Select(ra => ra.NasIpAddress)
.Distinct()
.Select(ra => new { ra.NasIpAddress, ra.CallingStationId, ra.AcctSessionId })
.ToListAsync(ct);
var radiusSecret = Environment.GetEnvironmentVariable("RADIUS_SECRET") ?? "radpass";
foreach (var nasIp in activeSessions)
foreach (var session in activeSessions)
{
if (string.IsNullOrWhiteSpace(nasIp)) continue;
if (string.IsNullOrWhiteSpace(session.NasIpAddress)) continue;
try
{
var payload = $"User-Name=\\\"{profile.Username}\\\"\\nCalling-Station-Id=\\\"{session.CallingStationId}\\\"\\nAcct-Session-Id=\\\"{session.AcctSessionId}\\\"\\n";
var process = new System.Diagnostics.Process
{
StartInfo = new System.Diagnostics.ProcessStartInfo
{
FileName = "sh",
Arguments = $"-c \"echo 'User-Name={profile.Username}' | radclient -x {nasIp}:3799 disconnect '{radiusSecret}'\"",
Arguments = $"-c \"printf '{payload}' | radclient -x {session.NasIpAddress}:3799 disconnect '{radiusSecret}'\"",
RedirectStandardOutput = true,
RedirectStandardError = true,
UseShellExecute = false,
@@ -133,11 +133,11 @@ public class AccountEnforcementService : BackgroundService
};
process.Start();
await process.WaitForExitAsync(ct);
_logger.LogInformation("Sent RADIUS Disconnect-Request to NAS {NasIp} for user {Username}", nasIp, profile.Username);
_logger.LogInformation("Sent RADIUS Disconnect-Request to NAS {NasIp} for user {Username} (MAC: {Mac})", session.NasIpAddress, profile.Username, session.CallingStationId);
}
catch (Exception ex)
{
_logger.LogError(ex, "Failed to send RADIUS Disconnect-Request to NAS {NasIp}", nasIp);
_logger.LogError(ex, "Failed to send RADIUS Disconnect-Request to NAS {NasIp}", session.NasIpAddress);
}
}
radiuscontroller/Services/RadiusService.cs
+7 -7
View File
@@ -379,24 +379,24 @@ public class RadiusService : IRadiusService
{
var activeSessions = await _db.RadAcct
.Where(ra => ra.Username == username && ra.AcctStopTime == null)
.Select(ra => ra.NasIpAddress)
.Distinct()
.Select(ra => new { ra.NasIpAddress, ra.CallingStationId, ra.AcctSessionId })
.ToListAsync();
var radiusSecret = Environment.GetEnvironmentVariable("RADIUS_SECRET") ?? "radpass";
foreach (var nasIp in activeSessions)
foreach (var session in activeSessions)
{
if (string.IsNullOrWhiteSpace(nasIp)) continue;
if (string.IsNullOrWhiteSpace(session.NasIpAddress)) continue;
try
{
var payload = $"User-Name=\\\"{username}\\\"\\nCalling-Station-Id=\\\"{session.CallingStationId}\\\"\\nAcct-Session-Id=\\\"{session.AcctSessionId}\\\"\\n";
var process = new System.Diagnostics.Process
{
StartInfo = new System.Diagnostics.ProcessStartInfo
{
FileName = "sh",
Arguments = $"-c \"echo 'User-Name={username}' | radclient -x {nasIp}:3799 disconnect '{radiusSecret}'\"",
Arguments = $"-c \"printf '{payload}' | radclient -x {session.NasIpAddress}:3799 disconnect '{radiusSecret}'\"",
RedirectStandardOutput = true,
RedirectStandardError = true,
UseShellExecute = false,
@@ -405,11 +405,11 @@ public class RadiusService : IRadiusService
};
process.Start();
await process.WaitForExitAsync();
_logger.LogInformation("Sent manual RADIUS Disconnect-Request to NAS {NasIp} for user {Username}", nasIp, username);
_logger.LogInformation("Sent manual RADIUS Disconnect-Request to NAS {NasIp} for user {Username} (MAC: {Mac})", session.NasIpAddress, username, session.CallingStationId);
}
catch (Exception ex)
{
_logger.LogError(ex, "Failed to send manual RADIUS Disconnect-Request to NAS {NasIp}", nasIp);
_logger.LogError(ex, "Failed to send manual RADIUS Disconnect-Request to NAS {NasIp}", session.NasIpAddress);
}
}
}