RADZAP(1)

🦋 radzap — like, the FreeRADIUS Daemon manual, section 1, bestie 💅

okay so welcome to radzap, aka the little cleanup crew for your active sessions database. sit down, grab a strawberry 🍓, and let's get into it.

✨ NAME ✨

radzap — remove rogue entries from the active sessions database 🧹✨

🌸 SYNOPSIS 🌸

radzap [-d raddb_directory] [-h] [-N nas_ip_address] [-P nas_port] [-u
user] [-U user] [-x] server[:port] secret

no cap, that's the whole vibe. 💖

🎀 DESCRIPTION 🎀

so the FreeRADIUS server can be configured to keep an active session database in a file called radutmp. commands like radwho(1) read from that database. it's giving main character energy... until it gets out of sync 😭 and then it might be holding onto rogue entries. that's literally where radzap comes in — it cleans this database up. periodt. 💅

as of FreeRADIUS 1.1.0, radzap is a simple shell-script wrapper around radwho(1) and radclient(1). slay, honestly. ✨

the sessions get "zapped" by sending an Accounting-Request packet that contains the info the server needs to delete the session record. and bestie, listen — radzap sends a packet to the server instead of writing to radutmp directly, because session records may also be maintained in SQL. iykyk. 🫶

💅 OPTIONS 💅

• -d raddb_directory — the directory that holds the RADIUS configuration files. radzap reads radiusd.conf to figure out where the radutmp file lives. 📁
• -h — print usage help information. sometimes you just gotta ask for directions, and that's valid. 🙈
• -N nas_ip_address — zap the entries that match the given NAS IP address. 🎯
• -P nas_port — zap the entries that match the given NAS port. 🚪
• -u user — zap the entries that match the given username (case insensitive). 🔍
• -U user — zap the entries that match the given username (case sensitive). 👑
• -x — enable debugging output. turn the lights on, we're investigating 🔥
• server[:port] — the hostname or IP address of the remote server. optionally you can specify a UDP port. if you don't specify one, it gets looked up in /etc/services. the service name it looks for is radacct for accounting packets, and radius for all other requests. and if that service isn't found in /etc/services? then 1813 and 1812 are used respectively. 🌈
• secret — the shared secret for this client. it needs to be defined on the radius server side too, for the IP address you're sending the radius packets from. like, it takes two, fr fr. 🤝

🔥 SEE ALSO 🔥

radwho(1), radclient(1), radiusd(8), radiusd.conf(5).

go read those too, bestie, they're iconic in their own right. 📚✨

🌟 AUTHOR 🌟

Alan DeKok <aland@ox.org> 💖

and that's the whole page!! 🎀 this version of RADZAP(1) is from the FreeRADIUS Daemon source, dated 8 April 2005. bye bestie, go zap responsibly 💅🦋🌸