Re: Stale Session and Simultaneous-Use Question
3) acctterminatecause - What are the possible values here? In my table, I can see User-Request and Session-Timeout. In the link I mentioned in my previous post uses User-Reset. This is the part I am not sure on what is the appropriate value to use in this field. Found in http://freeradius.org/rfc/rfc2866.html#Acct-Terminate-Cause. My bad I have overlook this :-) Thanks anyway -- == Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3 == - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Stale Session and Simultaneous-Use Question
Hi All, I have following setup and need to configure the setup as per following requirements. BRAS (7206) - Radius (Free radius) - Proxy Radius (Third party radius) BRAS will send accounting and auth request to free radius server and free radius server will forward this to proxy radius. Is it possible to configure free radius server to do the following thing. 1) Forward the acc/auth request to proxy radius server and wait for acknowledgement. 2) If proxy radius server send the acknowledgement then allow the user session 3) If proxy radius does not send the acknowledgement then disconnect the session or do not allow the user session 4) If the session is on going and if proxy radius is sending the stop session message because of user account modification or some other reason to free radius then free radius should inform the BRAS to stop current session. 5) Free radius should forward the entire attribute to proxy radius which is forwarded by BRAS. 6) BRAS are configuring to send periodic accounting update request for every five minutes. Does free radius forward the periodic accounting request to proxy radius server? Your help on this will be highly appreciable. BR Ganesh --- On Tue, 8/18/09, Deepak d88...@gmail.com wrote: From: Deepak d88...@gmail.com Subject: Re: Stale Session and Simultaneous-Use Question To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Date: Tuesday, August 18, 2009, 12:15 PM 3) acctterminatecause - What are the possible values here? In my table, I can see User-Request and Session-Timeout. In the link I mentioned in my previous post uses User-Reset. This is the part I am not sure on what is the appropriate value to use in this field. Found in http://freeradius.org/rfc/rfc2866.html#Acct-Terminate-Cause. My bad I have overlook this :-) Thanks anyway -- == Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3 == - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Stale Session and Simultaneous-Use Question
ganesh nagpure wrote: BRAS will send accounting and auth request to free radius server and free radius server will forward this to proxy radius. Is it possible to configure free radius server to do the following thing. 1)Forward the acc/auth request to proxy radius server and wait for acknowledgement. 2)If proxy radius server send the acknowledgement then allow the user session 3)If proxy radius does not send the acknowledgement then disconnect the session or do not allow the user session All of this happens by default. 4)If the session is on going and if proxy radius is sending the stop session message because of user account modification or some other reason to free radius then free radius should inform the BRAS to stop current session. The proxy never sends a stop session message. 5)Free radius should forward the entire attribute to proxy radius which is forwarded by BRAS. This is what happens by default. 6)BRAS are configuring to send periodic accounting update request for every five minutes. Does free radius forward the periodic accounting request to proxy radius server? Yes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Stale Session and Simultaneous-Use Question
On Sat, Aug 15, 2009 at 4:26 PM, Marinko Tarlacmangi...@gmail.com wrote: Just like I said... I already posted one solution on this list. In the same mail you will find 3 php lines for cron script and instructions for adding one column to radacct table... I won't be at home next 10 days so I'll post it again later if you can't find it... Best regards Thanks for that. I have searched and followed previous discussions regarding this issues, which were quite old but no conclusion regarding the solution. I guess there is no single solution which fits all problem (as kind of problem is determined by the business logic). At least I have general idea now. In my case, I am trying to implement in (only) prepaid scenario. I guess when AP is down and unique Session ID is lost, there is no way to automatically detect the stale session from checking radacct table only. In my case (only prepaid) I can check (and detect) if user session time is way far beyond his allowed time and do necessary adjustment. There is still one flaw left in this logic as I have no way to find out how much time user have consumed before the AP went down. If I simply remove the entry from radacct table (which is equivalent to rolling back his/her time) may solve the problem but with one flaw again. If user have 30 mins left in his/her prepaid account and the AP went down at his 25th minute session, he/she will get back all his 30 mins again (this can be one solution if acceptable). Instead I plan to do this adjustment by hand (custom SQL) if user ever complains. My Logic: == User have to bear some time loss too. Some allocated time (about 15 mins) will be removed from his account when this happens. He/she can use the account if there are still some time left after this action. = So acctstoptime = acctstarttime + 900 (15 mins) acctsessiontime = 900 But before doing this, I am not sure about some fields in radacct table and their possible values 1) nasportid - What is this? sometimes I see it set as 1 and in other entries it is set to 0 2) Can I leave the acctinputoctets and acctoutputoctets as it is (even if there is 0)? Since I don't plan to restrict the user on bandwidth I don't need accurate data transfer accounting. 3) acctterminatecause - What are the possible values here? In my table, I can see User-Request and Session-Timeout. In the link I mentioned in my previous post uses User-Reset. This is the part I am not sure on what is the appropriate value to use in this field. Some suggestion is greatly appreciated. Also I would like to see your cron script. Probably I can customize to my own solution. Thanks again -- == Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3 == - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Stale Session and Simultaneous-Use Question
Just like I said... I already posted one solution on this list. In the same mail you will find 3 php lines for cron script and instructions for adding one column to radacct table... I won't be at home next 10 days so I'll post it again later if you can't find it... Best regards Nizar Zulmi wrote: me either, i am use simulatineous-use attribute and got same problem like u, but i disconnect user that using simultaneous-use attribut manually from radius server using this command radview this command will show connected user. the user using simultaneous-use attribut that forget to log off will still listed as connected user and will be printed by radview command. select one of the user that failed to loggin, because RADIUS recognize that it is still connected, and then run this command echo user1 I radclient -x (i forgot the command, just google it.) --- On *Fri, 8/14/09, Deepak /d88...@gmail.com/* wrote: From: Deepak d88...@gmail.com Subject: Stale Session and Simultaneous-Use Question To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Date: Friday, August 14, 2009, 1:50 PM Hi, I am simulating the problem on what if the AP goes down (due to various reasons). I observed that user is not properly disconnected and result is stale session. When the AP is up and when the previous user tries to log in he/she gets login failed message because Simultaneous-Use is in effect while previous session is still ticking. I am trying to find how to detect this problem automatically. Did some google and found this http://bisagunsara.blogspot.com/2007/03/stale-wifi-sessions-and-simultaneous.html http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Stale Session and Simultaneous-Use Question
Hi, I am simulating the problem on what if the AP goes down (due to various reasons). I observed that user is not properly disconnected and result is stale session. When the AP is up and when the previous user tries to log in he/she gets login failed message because Simultaneous-Use is in effect while previous session is still ticking. I am trying to find how to detect this problem automatically. Did some google and found this http://bisagunsara.blogspot.com/2007/03/stale-wifi-sessions-and-simultaneous.html Before getting my hands dirty, I want to know if this is the correct way to solve this problem in freeradius2 since the article is quite old. Or I am just missing something that needs to tweak few configs and is supported out of the box in freeradius2. It is suggested in the article that it will not work together with Simultaneous-Use enabled. I want to know how others have solved this problem. Need some suggestions Thanks -- == Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3 == - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Stale Session and Simultaneous-Use Question
Search this list.. We already discuss about simultaneous use and closing connections. Deepak wrote: Hi, I am simulating the problem on what if the AP goes down (due to various reasons). I observed that user is not properly disconnected and result is stale session. When the AP is up and when the previous user tries to log in he/she gets login failed message because Simultaneous-Use is in effect while previous session is still ticking. I am trying to find how to detect this problem automatically. Did some google and found this http://bisagunsara.blogspot.com/2007/03/stale-wifi-sessions-and-simultaneous.html Before getting my hands dirty, I want to know if this is the correct way to solve this problem in freeradius2 since the article is quite old. Or I am just missing something that needs to tweak few configs and is supported out of the box in freeradius2. It is suggested in the article that it will not work together with Simultaneous-Use enabled. I want to know how others have solved this problem. Need some suggestions Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Stale Session and Simultaneous-Use Question
me either, i am use simulatineous-use attribute and got same problem like u, but i disconnect user that using simultaneous-use attribut manually from radius server using this command radview this command will show connected user. the user using simultaneous-use attribut that forget to log off will still listed as connected user and will be printed by radview command. select one of the user that failed to loggin, because RADIUS recognize that it is still connected, and then run this command echo user1 I radclient -x (i forgot the command, just google it.) --- On Fri, 8/14/09, Deepak d88...@gmail.com wrote: From: Deepak d88...@gmail.com Subject: Stale Session and Simultaneous-Use Question To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Date: Friday, August 14, 2009, 1:50 PM Hi, I am simulating the problem on what if the AP goes down (due to various reasons). I observed that user is not properly disconnected and result is stale session. When the AP is up and when the previous user tries to log in he/she gets login failed message because Simultaneous-Use is in effect while previous session is still ticking. I am trying to find how to detect this problem automatically. Did some google and found this http://bisagunsara.blogspot.com/2007/03/stale-wifi-sessions-and-simultaneous.html Before getting my hands dirty, I want to know if this is the correct way to solve this problem in freeradius2 since the article is quite old. Or I am just missing something that needs to tweak few configs and is supported out of the box in freeradius2. It is suggested in the article that it will not work together with Simultaneous-Use enabled. I want to know how others have solved this problem. Need some suggestions Thanks -- == Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3 == - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
