2. Tehnična dokumentacija
3. Beleženje dostopov - Baza MySQL

Beleženje dostopov - Baza MySQL

• Strežnik naj posluša le na localhost
  

  V datoteki /etc/my.cnf mora biti nastavljeno:

  [mysqld]
        bind=127.0.0.1
        skip-innodb
  

Uredimo privzeti zagon in zaženemo MySQL ter ustrezno zavarujemo postavitev.

• chkconfig mysqld on
  service mylsqd start
  
  /usr/bin/mysql_secure_installation
  

• Uredimo bazo ter dodamo uporabnika ter pravice

  
  CREATE DATABASE radius;
  
  USE radius;
  CREATE TABLE ACCOUNTING (
    `User-Name` varchar(100) NOT NULL default '',
    `Calling-Station-Id` varchar(100) NOT NULL default '',
    `Client-IP-Address` varchar(100) NOT NULL default '',
    `Called-Station-Id` varchar(100) NOT NULL default '',
    `NAS-IP-Address` varchar(100) NOT NULL default '',
    `NAS-Port` int(10) unsigned NOT NULL default '0',
    `Timestamp Start` datetime NOT NULL default '1970-01-01 01:00:00',
    `Timestamp Dhcp` datetime NOT NULL default '1970-01-01 01:00:00',
    `Timestamp Stop` datetime NOT NULL default '1970-01-01 01:00:00',
    `Acct-Unique-Session-Id` varchar(100) NOT NULL default '',
    `Acct-Session-Time` int(10) unsigned NOT NULL default '0',
    `Acct-Input-Octets` bigint(20) unsigned NOT NULL default '0',
    `Acct-Output-Octets` bigint(20) unsigned NOT NULL default '0',
    `Acct-Input-Packets` bigint(20) unsigned NOT NULL default '0',
    `Acct-Output-Packets` bigint(20) unsigned NOT NULL default '0',
    `Acct-Terminate-Cause` varchar(100) NOT NULL default ''
  ) TYPE=MyISAM;
  
  CREATE INDEX accounting_id ON ACCOUNTING(`Acct-Unique-Session-Id`);
  
  create table access_points (
      `IP address` varchar(100) PRIMARY KEY NOT NULL,
      `snmp secret` varchar(100) NOT NULL default '',
      `radius secret` varchar(100) NOT NULL default '',
      `root username` varchar(100) NOT NULL default '',
      `root password` varchar(100) NOT NULL default ''
  ) TYPE=MyISAM;
  
  CREATE TABLE denied (
    `User-Name` varchar(100) NOT NULL default '',
    `Calling-Station-Id` varchar(100) NOT NULL default '',
    `NAS-Shortname` varchar(100) NOT NULL default '',
    `NAS-Port` int(10) unsigned NOT NULL default '0',
    `Timestamp` datetime NOT NULL default '1970-01-01 01:00:00',
    `Cause` varchar(100) NOT NULL default ''
  ) TYPE=MyISAM;
  
  GRANT ALL PRIVILEGES ON radius.* TO 'radiusd' IDENTIFIED BY '<RADIUSD_PASSWORD>';
  
  FLUSH PRIVILEGES;
  

• Nadgradnja obstoječe strukture baze V primeru, da že imate postavljeno bazo za beleženje dostopov, lahko s spodnjimi ukazi spremenite njeno strukturo tako, da bo podpirala tudi števce prometa z vrednostmi nad 4 GB (t.i. gigawords).

  USE radius;
  ALTER TABLE ACCOUNTING MODIFY `Acct-Input-Octets`   bigint(20) unsigned NOT NULL default '0';
  ALTER TABLE ACCOUNTING MODIFY `Acct-Output-Octets`  bigint(20) unsigned NOT NULL default '0';
  ALTER TABLE ACCOUNTING MODIFY `Acct-Input-Packets`  bigint(20) unsigned NOT NULL default '0';
  ALTER TABLE ACCOUNTING MODIFY `Acct-Output-Packets` bigint(20) unsigned NOT NULL default '0';