Re: (RADIATOR) Simultaneous-Use Broken?

2000-01-08 Thread Hugh Irvine


Hello John -

On Sat, 08 Jan 2000, [EMAIL PROTECTED] wrote:
 I'm having a problem with the new version of radiator
 such that it is rejecting more than one usage of the same
 username in a handler even though there are no limits
 on how many of this particular username can login.  I have
 had this configuration working for over a year now, but
 the new version of radiator seems to have broken my
 configuration allowing this username to login more than
 one time.  Below is the trace4 output as well as a snipping
 of my config file that deals with this handler.  I may have
 missed a new option that I need to put in, but it sure feels
 like a bug.

Could you please send me your complete configuration file (no secrets) and by
the new version do you mean Radiator 2.14.1?

thanks

Hugh


-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
NT, Rhapsody

===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



RE: (RADIATOR) Simultaneous-Use Broken?

2000-01-08 Thread Yen Choi


I am having the similar problem, Is there a way to check/flush the contents
of the internal sessions list which stores all the current calls online?
Radiator says that the that the Simultaneous-Use=1 has been exceeded, but in
fact there are no logins for that user on our NAS.  



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On
Behalf Of [EMAIL PROTECTED]
Sent: Friday, January 07, 2000 6:33 PM
To: [EMAIL PROTECTED]
Subject: (RADIATOR) Simultaneous-Use Broken?


I'm having a problem with the new version of radiator
such that it is rejecting more than one usage of the same
username in a handler even though there are no limits
on how many of this particular username can login.  I have
had this configuration working for over a year now, but
the new version of radiator seems to have broken my
configuration allowing this username to login more than
one time.  Below is the trace4 output as well as a snipping
of my config file that deals with this handler.  I may have
missed a new option that I need to put in, but it sure feels
like a bug.

Thanks,
John Kicklighter
Internet 2xtreme
http://www.2xtreme.net/


*** Received from 127.0.0.1 port 1452    
Code:   Access-Request
Identifier: 30
Authentic:  1234567890123456
Attributes:
User-Name = "test"
User-Service = Framed-User
Client-Id = 203.63.154.1  
NAS-Port = 1234
NAS-Port-Type = Async
User-Password =
"c1922315.21018012817826,214133234170157"

Fri Jan  7 18:03:00 2000: DEBUG: Rewrote user name to test
Fri Jan  7 18:03:00 2000: DEBUG: Rewrote user name to test
Fri Jan  7 18:03:00 2000: DEBUG: Check if Handler Realm=interx.net should be
used to handle this request
Fri Jan  7 18:03:00 2000: DEBUG: Check if Handler User-Name=test should be
used to handle this request  
Fri Jan  7 18:03:00 2000: DEBUG: Handling request with Handler
'User-Name=test'
Fri Jan  7 18:03:00 2000: DEBUG:  Deleting session for test, 203.63.154.1,
1234
Fri Jan  7 18:03:00 2000: DEBUG: do query is: delete from RADONLINE where
NASIDENTIFIER='203.63.154.1' and NASPORT=1234

Fri Jan  7 18:03:00 2000: DEBUG: Handling with Radius::AuthEMERALD
Fri Jan  7 18:03:00 2000: DEBUG: Handling with Radius::AuthEMERALD
Fri Jan  7 18:03:00 2000: DEBUG: Query is: select DateAdd(Day, ma.extension,
maExpireDate),
DateAdd(Day, sa.extension, saExpireDate), sa.AccountID, sa.AccountType,
sa.password, sa.login, sa.shell, sa.TimeLeft, sa.LoginLimit  
from masteraccounts ma, subaccounts sa 
where (sa.login = 'test' or sa.shell = 'test')
and ma.customerid = sa.customerid 
and sa.active  0 and ma.active  0

Fri Jan  7 18:03:00 2000: DEBUG: Select results: Dec 31 2030 12:00:00:000AM,
Jan  1 2037 12:00:00:000AM, 5784, PPP, dilbert, test,  , ,
Fri Jan  7 18:03:00 2000: DEBUG: Query is: select ra.RadAttributeID, Data,
Value, Type 
from RadConfigs rc, RadAttributes ra
where ra.RadAttributeID = rc.RadAttributeID and rc.AccountID=5784

Fri Jan  7 18:03:00 2000: DEBUG: Query is: select ra.RadAttributeID, Data,
Value, Type
from RadATConfigs rc, RadAttributes ra
where ra.RadAttributeID = rc.RadAttributeID
and rc.AccountType='PPP'

Fri Jan  7 18:03:00 2000: DEBUG: Radius::AuthEMERALD looks for match with
test
Fri Jan  7 18:03:00 2000: DEBUG: Expiration date converted to: 1924934400
Fri Jan  7 18:03:00 2000: DEBUG: Expiration date converted to: 2114409600
Fri Jan  7 18:03:00 2000: DEBUG: Query is: select NASIDENTIFIER, NASPORT,
ACCTSESSIONID from RADONLINE where USERNAME='test'

Fri Jan  7 18:03:00 2000: DEBUG: Checking if user is still online: unknown,
test, 209.63.222.36, 8, 01030646
Fri Jan  7 18:03:00 2000: DEBUG: Radius::AuthEMERALD REJECT:
Simultaneous-Use of 1 exceeded
Fri Jan  7 18:03:00 2000: DEBUG: Query is: select DateAdd(Day, ma.extension,
maExpireDate),
DateAdd(Day, sa.extension, saExpireDate), sa.AccountID, sa.AccountType,
sa.password, sa.login, sa.shell, sa.TimeLeft, sa.LoginLimit  
from masteraccounts ma, subaccounts sa 
where (sa.login = 'DEFAULT' or sa.shell = 'DEFAULT')
and ma.customerid = sa.customerid 
and sa.active  0 and ma.active  0

Fri Jan  7 18:03:00 2000: INFO: Access rejected for test: Simultaneous-Use
of 1 exceeded
Fri Jan  7 18:03:00 2000: DEBUG: Packet dump:
*** Sending to 127.0.0.1 port 1452 
Code:   Access-Reject
Identifier: 30
Authentic:  1234567890123456
Attributes:
Port-Message = "Request Denied"


==

# Allow Multiple Logins for the Test account
Handler User-Name=test
PasswordLogFileName /var/log/radiusd/logins/%m%d%Y-password.log

AuthBy EMERALD
DBSourcedbi:Sybase:dbaseiface
DBUsername  dblogin
DBAuth  dbpassword

AccountingTable Calls
AcctColumnDef   UserName,User-Name
AcctColumnDef   CallDate,Timestamp,integer-date
AcctColumnDef   AcctStatu

(RADIATOR) Simultaneous-Use Broken?

2000-01-07 Thread admin

I'm having a problem with the new version of radiator
such that it is rejecting more than one usage of the same
username in a handler even though there are no limits
on how many of this particular username can login.  I have
had this configuration working for over a year now, but
the new version of radiator seems to have broken my
configuration allowing this username to login more than
one time.  Below is the trace4 output as well as a snipping
of my config file that deals with this handler.  I may have
missed a new option that I need to put in, but it sure feels
like a bug.

Thanks,
John Kicklighter
Internet 2xtreme
http://www.2xtreme.net/


*** Received from 127.0.0.1 port 1452    
Code:   Access-Request
Identifier: 30
Authentic:  1234567890123456
Attributes:
User-Name = "test"
User-Service = Framed-User
Client-Id = 203.63.154.1  
NAS-Port = 1234
NAS-Port-Type = Async
User-Password = 
"c1922315.21018012817826,214133234170157"

Fri Jan  7 18:03:00 2000: DEBUG: Rewrote user name to test
Fri Jan  7 18:03:00 2000: DEBUG: Rewrote user name to test
Fri Jan  7 18:03:00 2000: DEBUG: Check if Handler Realm=interx.net should be used to 
handle this request
Fri Jan  7 18:03:00 2000: DEBUG: Check if Handler User-Name=test should be used to 
handle this request  
Fri Jan  7 18:03:00 2000: DEBUG: Handling request with Handler 'User-Name=test'
Fri Jan  7 18:03:00 2000: DEBUG:  Deleting session for test, 203.63.154.1, 1234
Fri Jan  7 18:03:00 2000: DEBUG: do query is: delete from RADONLINE where 
NASIDENTIFIER='203.63.154.1' and NASPORT=1234

Fri Jan  7 18:03:00 2000: DEBUG: Handling with Radius::AuthEMERALD
Fri Jan  7 18:03:00 2000: DEBUG: Handling with Radius::AuthEMERALD
Fri Jan  7 18:03:00 2000: DEBUG: Query is: select DateAdd(Day, ma.extension, 
maExpireDate),
DateAdd(Day, sa.extension, saExpireDate), sa.AccountID, sa.AccountType,
sa.password, sa.login, sa.shell, sa.TimeLeft, sa.LoginLimit  
from masteraccounts ma, subaccounts sa 
where (sa.login = 'test' or sa.shell = 'test')
and ma.customerid = sa.customerid 
and sa.active  0 and ma.active  0

Fri Jan  7 18:03:00 2000: DEBUG: Select results: Dec 31 2030 12:00:00:000AM, Jan  1 
2037 12:00:00:000AM, 5784, PPP, dilbert, test,  , ,
Fri Jan  7 18:03:00 2000: DEBUG: Query is: select ra.RadAttributeID, Data, Value, Type 
from RadConfigs rc, RadAttributes ra
where ra.RadAttributeID = rc.RadAttributeID and rc.AccountID=5784

Fri Jan  7 18:03:00 2000: DEBUG: Query is: select ra.RadAttributeID, Data, Value, Type
from RadATConfigs rc, RadAttributes ra
where ra.RadAttributeID = rc.RadAttributeID
and rc.AccountType='PPP'

Fri Jan  7 18:03:00 2000: DEBUG: Radius::AuthEMERALD looks for match with test
Fri Jan  7 18:03:00 2000: DEBUG: Expiration date converted to: 1924934400
Fri Jan  7 18:03:00 2000: DEBUG: Expiration date converted to: 2114409600
Fri Jan  7 18:03:00 2000: DEBUG: Query is: select NASIDENTIFIER, NASPORT, 
ACCTSESSIONID from RADONLINE where USERNAME='test'

Fri Jan  7 18:03:00 2000: DEBUG: Checking if user is still online: unknown, test, 
209.63.222.36, 8, 01030646
Fri Jan  7 18:03:00 2000: DEBUG: Radius::AuthEMERALD REJECT: Simultaneous-Use of 1 
exceeded
Fri Jan  7 18:03:00 2000: DEBUG: Query is: select DateAdd(Day, ma.extension, 
maExpireDate),
DateAdd(Day, sa.extension, saExpireDate), sa.AccountID, sa.AccountType,
sa.password, sa.login, sa.shell, sa.TimeLeft, sa.LoginLimit  
from masteraccounts ma, subaccounts sa 
where (sa.login = 'DEFAULT' or sa.shell = 'DEFAULT')
and ma.customerid = sa.customerid 
and sa.active  0 and ma.active  0

Fri Jan  7 18:03:00 2000: INFO: Access rejected for test: Simultaneous-Use of 1 
exceeded
Fri Jan  7 18:03:00 2000: DEBUG: Packet dump:
*** Sending to 127.0.0.1 port 1452 
Code:   Access-Reject
Identifier: 30
Authentic:  1234567890123456
Attributes:
Port-Message = "Request Denied"


==

# Allow Multiple Logins for the Test account
Handler User-Name=test
PasswordLogFileName /var/log/radiusd/logins/%m%d%Y-password.log

AuthBy EMERALD
DBSourcedbi:Sybase:dbaseiface
DBUsername  dblogin
DBAuth  dbpassword

AccountingTable Calls
AcctColumnDef   UserName,User-Name
AcctColumnDef   CallDate,Timestamp,integer-date
AcctColumnDef   AcctStatusType,Acct-Status-Type,integer
AcctColumnDef   AcctDelayTime,Acct-Delay-Time,integer
AcctColumnDef   AcctInputOctets,Acct-Input-Octets,integer
AcctColumnDef   AcctOutputOctets,Acct-Output-Octets,integer
AcctColumnDef   AcctSessionId,Acct-Session-Id
AcctColumnDef   AcctSessionTime,Acct-Session-Time,integer  
AcctColumnDef   NASIdentifier,Client-Id
AcctColumnDef   NASPort,NAS-Port,integer
AcctColumnDef