Re: Need help in double logins in radacct
Hi All, I have seen this on one of my servers and now i am seeing it on another server, UniqueID is in place but that is not helping the system, when my accounting package is working out the hours loged in basicaly it is doubling the hours for the user. 311197281c153fe dd510bfa724ddcdc 14607 XX.XX.XXX.10 94025Ethernet 2007-08-10 10:31:57 -00-00 00:00:00 0 RADIUS 0 0 PPPoE 00:15:E9:BA:09:B5 Framed-User PPP 10.10.12.52 0 0 311197381c153fe dd510bfa724ddcdc 14607 XX.XX.XXX.10 94025Ethernet 2007-08-10 10:31:58 -00-00 00:00:00 0 RADIUS 0 0 PPPoE 00:15:E9:BA:09:B5 Framed-User PPP 10.10.12.52 1 0 >From what i notice that when a user Logs on, they create 2 sessions in the >database, with 2nd session being +1second as can see above. When the user logs off there AcctStopTime is the same for both sessions. Hope that helps and hope to hear some more solutions on this issue. Sarky -- Original Message --- From: <[EMAIL PROTECTED]> To: "FreeRadius users mailing list" Sent: Fri, 10 Aug 2007 09:30:58 +0100 Subject: Re: Need help in double logins in radacct > It look like the accounting update query that should update the entry is > failing and an alternative one which inserts a new row is executed. > First check that the update query in sql.conf is not broken and then run > the server in debug mode and see why is that query failing. > > Ivan Kalik > Kalik Informatika ISP > > Dana 10/8/2007, "Nelson Serafica" <[EMAIL PROTECTED]> pi¹e: > > >Hi Claudiu, > > > >Thanks for the reply. With regards to your questions: > > > >1. I'm sure there is only one request as I see in the logs. It has only one > >request and authentication. When I check the livingston portmaster using snmp, it shows the login users and there is no duplicate or simultaneous users login. > > > >However, i will try to research how can I decrease database response time > >and increase radius timeout. I will check it out in the radius conf. Could you tell me what config file where i can increase/decrease those timeout? > > > >2. AcctStopTime is different. The difference is not more than 4 mins. > >Sometime seconds or 2 mins. Here is the sample. > > > >+---+---+--+-+-+ > >| RadAcctId | AcctSessionId | UserName | AcctStartTime | AcctStopTime > > | > >+---+---+--+-+-+ > >|517544 | E10007F4 | foo| 2007-08-09 23:33:44 | > >2007-08-10 00:13:25 | > >|517561 | E10007F4 | foo| 2007-08-09 23:33:44 | > >2007-08-10 00:14:25 | > > > > > > > > > >- Original Message > >From: Claudiu Filip <[EMAIL PROTECTED]> > >To: FreeRadius users mailing list > >Sent: Thursday, August 9, 2007 5:51:54 PM > >Subject: Re: Need help in double logins in radacct > > > >Thursday, August 9, 2007, 10:38:27 AM, you wrote: > >> could help me distinguish why it has double record in mysql. But > >> when in radius logs,it has one request only. > >> | RadAcctId | AcctSessionId | UserName | > >> |517069 | 3C001FC0 | foo| > >> |517071 | 3C001FC0 | foo| > >> |517075 | 3C001FC0 | foo| > > > >Hi Nelson, > > > >RadAcctId is an autoincrement field, so it will be different for sure. > >There is no reason to have those dups unless the INSERT query is run > >multiple times. > > > >1) Are you sure that you have only one request coming to fr? > > If no, the duplicates can be generated by the radius client if it > > doesnt get a reply quick enough. Decreasing database response time > > and increasing radius timeout on client can help. > > > >2) AcctStopTime is different? > > If no, check 1) again :D > > If yes, maybe the radius client sends a weak AcctSessionId (you can > > create one using the acct_unique) > > > >Best regards, > > > >Claudiu Filip > >@: [EMAIL PROTECTED] > >Http://www.globtel.ro > >T:+40344880100 > >F:+40344880113 > > > > > > > >- > >List info/subscribe/unsubscribe? See > >http://www.freeradius.org/list/users.html > > > > > > > > > > > > > > > > > > > >Tired of spam? Yahoo! Mail has the best spam protection around > >http://ph.mail.yahoo.com > > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html --- End of Original Message --- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Need help in double logins in radacct
It look like the accounting update query that should update the entry is failing and an alternative one which inserts a new row is executed. First check that the update query in sql.conf is not broken and then run the server in debug mode and see why is that query failing. Ivan Kalik Kalik Informatika ISP Dana 10/8/2007, "Nelson Serafica" <[EMAIL PROTECTED]> piše: >Hi Claudiu, > >Thanks for the reply. With regards to your questions: > >1. I'm sure there is only one request as I see in the logs. It has only one >request and authentication. When I check the livingston portmaster using snmp, >it shows the login users and there is no duplicate or simultaneous users login. > >However, i will try to research how can I decrease database response time and >increase radius timeout. I will check it out in the radius conf. Could you >tell me what config file where i can increase/decrease those timeout? > >2. AcctStopTime is different. The difference is not more than 4 mins. Sometime >seconds or 2 mins. Here is the sample. > >+---+---+--+-+-+ >| RadAcctId | AcctSessionId | UserName | AcctStartTime | AcctStopTime >| >+---+---+--+-+-+ >|517544 | E10007F4 | foo| 2007-08-09 23:33:44 | >2007-08-10 00:13:25 | >|517561 | E10007F4 | foo| 2007-08-09 23:33:44 | >2007-08-10 00:14:25 | > > > > >- Original Message >From: Claudiu Filip <[EMAIL PROTECTED]> >To: FreeRadius users mailing list >Sent: Thursday, August 9, 2007 5:51:54 PM >Subject: Re: Need help in double logins in radacct > >Thursday, August 9, 2007, 10:38:27 AM, you wrote: >> could help me distinguish why it has double record in mysql. But >> when in radius logs,it has one request only. >> | RadAcctId | AcctSessionId | UserName | >> |517069 | 3C001FC0 | foo| >> |517071 | 3C001FC0 | foo| >> |517075 | 3C001FC0 | foo| > >Hi Nelson, > >RadAcctId is an autoincrement field, so it will be different for sure. >There is no reason to have those dups unless the INSERT query is run >multiple times. > >1) Are you sure that you have only one request coming to fr? > If no, the duplicates can be generated by the radius client if it > doesnt get a reply quick enough. Decreasing database response time > and increasing radius timeout on client can help. > >2) AcctStopTime is different? > If no, check 1) again :D > If yes, maybe the radius client sends a weak AcctSessionId (you can > create one using the acct_unique) > >Best regards, > >Claudiu Filip >@: [EMAIL PROTECTED] >Http://www.globtel.ro >T:+40344880100 >F:+40344880113 > > > >- >List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > > > > > > > > >Tired of spam? Yahoo! Mail has the best spam protection around >http://ph.mail.yahoo.com > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Need help in double logins in radacct
Hi Claudiu, Thanks for the reply. With regards to your questions: 1. I'm sure there is only one request as I see in the logs. It has only one request and authentication. When I check the livingston portmaster using snmp, it shows the login users and there is no duplicate or simultaneous users login. However, i will try to research how can I decrease database response time and increase radius timeout. I will check it out in the radius conf. Could you tell me what config file where i can increase/decrease those timeout? 2. AcctStopTime is different. The difference is not more than 4 mins. Sometime seconds or 2 mins. Here is the sample. +---+---+--+-+-+ | RadAcctId | AcctSessionId | UserName | AcctStartTime | AcctStopTime | +---+---+--+-+-+ |517544 | E10007F4 | foo| 2007-08-09 23:33:44 | 2007-08-10 00:13:25 | |517561 | E10007F4 | foo| 2007-08-09 23:33:44 | 2007-08-10 00:14:25 | - Original Message From: Claudiu Filip <[EMAIL PROTECTED]> To: FreeRadius users mailing list Sent: Thursday, August 9, 2007 5:51:54 PM Subject: Re: Need help in double logins in radacct Thursday, August 9, 2007, 10:38:27 AM, you wrote: > could help me distinguish why it has double record in mysql. But > when in radius logs,it has one request only. > | RadAcctId | AcctSessionId | UserName | > |517069 | 3C001FC0 | foo| > |517071 | 3C001FC0 | foo| > |517075 | 3C001FC0 | foo| Hi Nelson, RadAcctId is an autoincrement field, so it will be different for sure. There is no reason to have those dups unless the INSERT query is run multiple times. 1) Are you sure that you have only one request coming to fr? If no, the duplicates can be generated by the radius client if it doesnt get a reply quick enough. Decreasing database response time and increasing radius timeout on client can help. 2) AcctStopTime is different? If no, check 1) again :D If yes, maybe the radius client sends a weak AcctSessionId (you can create one using the acct_unique) Best regards, Claudiu Filip @: [EMAIL PROTECTED] Http://www.globtel.ro T:+40344880100 F:+40344880113 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Tired of spam? Yahoo! Mail has the best spam protection around http://ph.mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Need help in double logins in radacct
Nachiketa Rajpurohit wrote: > I observed the same double or multiple inserts. with same AcctSessionID > and same Start time for some users. This happens with Interim update > too. I later changed radius.conf to calculate AcctUniqueID and do > updates based on that in sql.conf but this random occurrence did not go > away. May be it is because of the delay. Still not sure why multiple > inserts. The server can receive multiple accounting "start" messages, for a number of reasons outside of its control. The AcctUniqueId field should help catch duplicates, so they're not inserted twice. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Need help in double logins in radacct
I observed the same double or multiple inserts. with same AcctSessionID and same Start time for some users. This happens with Interim update too. I later changed radius.conf to calculate AcctUniqueID and do updates based on that in sql.conf but this random occurrence did not go away. May be it is because of the delay. Still not sure why multiple inserts. On 8/9/07, [EMAIL PROTECTED] < [EMAIL PROTECTED]> wrote: > > Send Freeradius-Users mailing list submissions to > freeradius-users@lists.freeradius.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.freeradius.org/mailman/listinfo/freeradius-users > or, via email, send a message with subject or body 'help' to > [EMAIL PROTECTED] > > You can reach the person managing the list at > [EMAIL PROTECTED] > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Freeradius-Users digest..." > > > Today's Topics: > > 1. Re : Converting PAP to MS-CHAPV2 (Eshun Benjamin) >2. Re: Need help in double logins in radacct (Claudiu Filip) > > > -- > > Message: 1 > Date: Thu, 9 Aug 2007 09:02:22 + (GMT) > From: Eshun Benjamin <[EMAIL PROTECTED]> > Subject: Re : Converting PAP to MS-CHAPV2 > To: FreeRadius users mailing list > > Message-ID: <[EMAIL PROTECTED]> > Content-Type: text/plain; charset="iso-8859-1" > > Freeradius can dynamically authenticate against PAP or MSCHAP. You > would have to have 2 password db. ( eg. unix passwd and smbpasswd). You can > not use one db for both. It does it like magic :-) if you have to db. > > == > Benjamin K. Eshun > > - Message d'origine > De : Arran Cudbard-Bell <[EMAIL PROTECTED]> > ? : FreeRadius users mailing list > Envoy? le : Mercredi, 8 Ao?t 2007, 23h46mn 13s > Objet : Re: Converting PAP to MS-CHAPV2 > > Jo?o Mendes wrote: > > HI, > > I was wondering if freeradius could do the following: > > - I have a radius client that needs to talk MS-Chapv2 and a Radius > > server that only talks PAP. > > Can freeradius convert and proxy the request to the server than > > answer to the client?? > > > No, > Amongst other things In order for PAP (Plaintext Authentication > Protocol) to work, the supplicant needs to provide it's credentials in > Plaintext. > MSCHAPv2 only provides hashes on the users credentials. > > Thanks > > Jo?o Mendes > > > > > > > > > > > > > > > > > > - > > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > > > > > > > > > > _ > Ne gardez plus qu'une seule adresse mail ! Copiez vos mails vers Yahoo! > Mail > -- next part -- > An HTML attachment was scrubbed... > URL: < > https://lists.freeradius.org/pipermail/freeradius-users/attachments/20070809/c129902e/attachment-0001.html > > > > -- > > Message: 2 > Date: Thu, 9 Aug 2007 12:51:54 +0300 > From: Claudiu Filip <[EMAIL PROTECTED]> > Subject: Re: Need help in double logins in radacct > To: FreeRadius users mailing list > > Message-ID: <[EMAIL PROTECTED]> > Content-Type: text/plain; charset=us-ascii > > Thursday, August 9, 2007, 10:38:27 AM, you wrote: > > could help me distinguish why it has double record in mysql. But > > when in radius logs,it has one request only. > > | RadAcctId | AcctSessionId | UserName | > > |517069 | 3C001FC0 | foo| > > |517071 | 3C001FC0 | foo| > > |517075 | 3C001FC0 | foo| > > Hi Nelson, > > RadAcctId is an autoincrement field, so it will be different for sure. > There is no reason to have those dups unless the INSERT query is run > multiple times. > > 1) Are you sure that you have only one request coming to fr? >If no, the duplicates can be generated by the radius client if it >doesnt get a reply quick enough. Decreasing database response time >and increasing radius timeout on client can help. > > 2) AcctStopTime is different? >If no, check 1) again :D >If yes, maybe the radius client sends a weak AcctSessionId (you can >create one using the acct_unique) > > Best regards, > > Claudiu Filip > @: [EMAIL PROTECTED] > Http://www.globtel.ro > T:+40344880100 > F:+40344880113 > > > > > > -- > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > > End of Freeradius-Users Digest, Vol 28, Issue 30 > > -- Nachiketa Rajpurohit - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Need help in double logins in radacct
Thursday, August 9, 2007, 10:38:27 AM, you wrote: > could help me distinguish why it has double record in mysql. But > when in radius logs,it has one request only. > | RadAcctId | AcctSessionId | UserName | > |517069 | 3C001FC0 | foo| > |517071 | 3C001FC0 | foo| > |517075 | 3C001FC0 | foo| Hi Nelson, RadAcctId is an autoincrement field, so it will be different for sure. There is no reason to have those dups unless the INSERT query is run multiple times. 1) Are you sure that you have only one request coming to fr? If no, the duplicates can be generated by the radius client if it doesnt get a reply quick enough. Decreasing database response time and increasing radius timeout on client can help. 2) AcctStopTime is different? If no, check 1) again :D If yes, maybe the radius client sends a weak AcctSessionId (you can create one using the acct_unique) Best regards, Claudiu Filip @: [EMAIL PROTECTED] Http://www.globtel.ro T:+40344880100 F:+40344880113 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Need help in double logins in radacct
Need help! I maintained a dial-up ISP. I'm new to this company and I'm not the one who setup the server. With all 4 freeradius server, one has a problem. It has double logs in mysql (radacct). Meaning two different RadAcctId but with the same AcctSessionId. Is there anyone could help me distinguish why it has double record in mysql. But when in radius logs,it has one request only. Here is the sample: | RadAcctId | AcctSessionId | UserName | |517069 | 3C001FC0 | foo| |517071 | 3C001FC0 | foo| |517075 | 3C001FC0 | foo| Server has 192MB memory and running in 300Mhz processor with kernel version 2.4. I already upgrade to the latest freeradius version but still no luck. Anyone already experienced this kind of problem? Please show me the link or at least the possible solution. Tired of spam? Yahoo! Mail has the best spam protection around http://ph.mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
