On Thu, 27 May 2004, Jean-Marie GUILLEMOT wrote:
> Hello everybody,
>
> I'm using Freeradius 0.9.3 on a RedHat 7.3.
>
> I'm trying to make a kind of "hot spot" thanks to the counter module of
> freeradius.
>
> I want people to authenticate one time for a defined amount of seconds (120
> in
> my example). Once their credit time has expired, they would be logged off
> and
> their account would be definitively blocked (as I never reset the counter).
>
> I configured my radius and network (my NAS is an access-controller HP 760),
> the user correctly logs in.
> After 2 minutes, he is kicked out, that's great.
>
> My problem is that he can log in again with the same account.
>
> I hope that's clear enough.
> Thanks in advance for telling me what I'm doing wrong or for any tips that
> could help me.
>
> Jean-Marie
>
> Here is the configuration of radiusd.conf I made:
> ######################
> radiusd.conf
> ######################
> counter daily {
> filename = ${raddbdir}/db.daily
> key = User-Name
> count-attribute = Acct-Session-Time
> # reset = daily
> reset = never
> counter-name = Daily-Session-Time
> check-name = Max-Daily-Session
> # allowed-servicetype = Framed-User
> allowed-servicetype = Login-User
You 've set allowed-servicetype to be Login-User
> cache-size = 5000
> }
>
> ....
> Here is the debug of radiusd -X for the logging out:
> ####################################################################"
>
> rad_recv: Accounting-Request packet from host 172.16.1.2:1061, id=71,
> length=136
> User-Name = "user"
> NAS-IP-Address = 172.16.1.2
> NAS-Identifier = "00e081526836"
> Acct-Status-Type = Stop
> Calling-Station-Id = "00-0c-f1-13-7a-43"
> Called-Station-Id = "00-e0-81-52-68-36"
> Acct-Session-Id = "1-000cf1137a43-1085667568-413-3KviFEgY"
> Acct-Session-Time = 126
> modcall: entering group preacct for request 3
> modcall[preacct]: module "preprocess" returns noop for request 3
> rlm_counter: Packet Unique ID = '0d62303b8e51c196'
> rlm_counter: Could not find Service-Type attribute in the request. Returning
> NOOP.
But rlm_counter cannot find it, since it's not included in the accounting stop
packet. So try commenting out the allowed-servicetype directive.
--
Kostas Kalevras Network Operations Center
[EMAIL PROTECTED] National Technical University of Athens, Greece
Work Phone: +30 210 7721861
'Go back to the shadow' Gandalf
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
