SonicOS 8 Users
- SonicOS 8
- About SonicOS
- About User Management
- Using Local Users and Groups for Authentication
- Using RADIUS for Authentication
- Using LDAP/Active Directory/eDirectory Authentication
- Using RADIUS
- Using TACACS+
- Using Single Sign-On
- What is Single Sign-On?
- Benefits of SonicWall SSO
- Platforms and Supported Standards
- How Does Single Sign-On Work?
- How Does SSO Agent Work?
- How Does Terminal Services Agent Work?
- How Does Browser NTLM Authentication Work?
- How Does RADIUS Accounting for Single-Sign-On Work?
- Installing the Single Sign-On Agent and/or Terminal Services Agent
- Single Sign-On Advanced Features
- Configuring Access Rules
- Managing SonicOS with HTTP Login from a Terminal Server
- Viewing and Managing SSO User Sessions
- Multiple Administrator Support
- Configuring Users Status
- Configuring User Settings
- User Login Settings
- Setting the Authentication Method for Login
- Configuring RADIUS Authentication
- Configuring LDAP
- Configuring TACACS+
- Requiring User Names be Treated as Case-Sensitive
- Preventing Users From Logging in from More than One Location
- Forcing Users to Log In Immediately After Changing Their Passwords
- Displaying User Login Information Since the Last Login
- Setting the Single-Sign-On Methods
- One-Time Password Settings
- Configuring the User Web Login Settings
- Adding URLs to Authentication Bypass
- User Session Settings
- Accounting
- [[[Missing Linked File System.LinkedTitle]]]
- User Login Settings
- Configuring Local Users and Groups
- Configuring Guest Services
- Configuring Guest Accounts
- Managing Guest Status
- SonicWall Support
RADIUS Accounting Messages
RADIUS accounting uses two types of accounting messages:
- Accounting-Request
- Accounting-Response
An Accounting-Request can send one of three request types specified by the Status-Type attribute:
| This request | Is sent |
|---|---|
| Start | When a user logs in. |
| Stop | When a user logs out. |
| Interim-Update | Periodically during a user login session. |
Accounting messages follow the RADIUS standard specified by RFC 2866. Each message contains a list of attributes and an authenticator that is validated by a shared secret.
These SSO-relevant attributes are set in Accounting-Requests:
| Status-Type | Type of accounting request (Start, Stop, or Interim-Update) |
| User-Name | User’s login name. The format is not specified by the RFC and can be a simple login name or a string with various values such as login name, domain, or distinguished name (DN). |
| Framed-IP-Address | User's IP address. If NAT is used, this must be the user’s internal IP address. |
| Calling-Station-ID | String representation of the user's IP address, used by some appliances such as SMA. |
| Proxy-State | Pass-though state used for forwarding requests to another RADIUS accounting server. |
Was This Article Helpful?
Help us to improve our support portal