Re: Stale sessions problem
Alan DeKok wrote: Georgi Alexandrov [EMAIL PROTECTED] wrote: If a user that somehow failed network connectivity and failed to tell the server account stop tries to reconnect back it won't let him because his previous session is stalled. I need a mechanism that will do a check upon connection if the session is stalled, delete it and let the user in or if there is already a real user logged in deny the connecting one. I read from the mailing lists that radzap should do the job but i can't seem to figure out how to integrate it in that setup (the man page explains only the syntax). radzap calls radwho to query radutmp and generates an accounting stop message. You can query your SQL database and generate accounting stop messages, too. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Ehlo Alan, how could one know from the database (radacct i suppose) if a user session i stalled or he's actually online? -- regards, Georgi Alexandrov Key Server = http://pgp.mit.edu/ :: KeyID = 37B4B3EE Key Fingerprint = E429 BF93 FA67 44E9 B7D4 F89E F990 01C1 37B4 B3EE signature.asc Description: OpenPGP digital signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Stale sessions problem
Kinda depends on what he is connected to. If you get a START record and a STOP record after the authentication from the device they are connected to you can check there. If you use sql for accounting, there will be a record created with a unique session id for the customer, and it will have a start time, but the stop time will be blank. This only is valid if the device they are connecting to supplies stop and start records when they logon and off or timeout. Gerry At 02:40 AM 2/25/2006, you wrote: Alan DeKok wrote: Georgi Alexandrov [EMAIL PROTECTED] wrote: If a user that somehow failed network connectivity and failed to tell the server account stop tries to reconnect back it won't let him because his previous session is stalled. I need a mechanism that will do a check upon connection if the session is stalled, delete it and let the user in or if there is already a real user logged in deny the connecting one. I read from the mailing lists that radzap should do the job but i can't seem to figure out how to integrate it in that setup (the man page explains only the syntax). radzap calls radwho to query radutmp and generates an accounting stop message. You can query your SQL database and generate accounting stop messages, too. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Ehlo Alan, how could one know from the database (radacct i suppose) if a user session i stalled or he's actually online? -- regards, Georgi Alexandrov Key Server = http://pgp.mit.edu/ :: KeyID = 37B4B3EE Key Fingerprint = E429 BF93 FA67 44E9 B7D4 F89E F990 01C1 37B4 B3EE - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Stale sessions problem
Georgi Alexandrov [EMAIL PROTECTED] wrote: how could one know from the database (radacct i suppose) if a user session i stalled or he's actually online? The SQL module is supposed to do this by calling checkrad. Have you listed sql in the session section? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Stale sessions problem
Alan DeKok wrote: Georgi Alexandrov [EMAIL PROTECTED] wrote: how could one know from the database (radacct i suppose) if a user session i stalled or he's actually online? The SQL module is supposed to do this by calling checkrad. Have you listed sql in the session section? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html sql is listed in the session section, yes. -- regards, Georgi Alexandrov Key Server = http://pgp.mit.edu/ :: KeyID = 37B4B3EE Key Fingerprint = E429 BF93 FA67 44E9 B7D4 F89E F990 01C1 37B4 B3EE signature.asc Description: OpenPGP digital signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Stale sessions problem
Gerry Dalton wrote: Kinda depends on what he is connected to. If you get a START record and a STOP record after the authentication from the device they are connected to you can check there. If you use sql for accounting, there will be a record created with a unique session id for the customer, and it will have a start time, but the stop time will be blank. This only is valid if the device they are connecting to supplies stop and start records when they logon and off or timeout. it's rp-pppoe linux server on the same machine. -- regards, Georgi Alexandrov Key Server = http://pgp.mit.edu/ :: KeyID = 37B4B3EE Key Fingerprint = E429 BF93 FA67 44E9 B7D4 F89E F990 01C1 37B4 B3EE signature.asc Description: OpenPGP digital signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Stale sessions problem
Georgi Alexandrov [EMAIL PROTECTED] wrote: sql is listed in the session section, yes. Then it should clean up stale sessions when the user logs in the second time, if the first session doesn't exist on the NAS. IF... checkrad can talk to the NAS. If not, you have to clean them up by hand. And the server has NO way of knowing if the session is still alive or not, so it's very difficult for the server to do this cleanup automatically. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Stale sessions problem
Georgi Alexandrov [EMAIL PROTECTED] wrote: If a user that somehow failed network connectivity and failed to tell the server account stop tries to reconnect back it won't let him because his previous session is stalled. I need a mechanism that will do a check upon connection if the session is stalled, delete it and let the user in or if there is already a real user logged in deny the connecting one. I read from the mailing lists that radzap should do the job but i can't seem to figure out how to integrate it in that setup (the man page explains only the syntax). radzap calls radwho to query radutmp and generates an accounting stop message. You can query your SQL database and generate accounting stop messages, too. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Stale sessions problem
On 2/17/06, Georgi Alexandrov [EMAIL PROTECTED] wrote: Hello,I'm running freeradius 1.1.0 + mysql + dialupadmin on a linux 2.6 boxwith a pppoe-server runing on the same machine as nas.It works great ;-)But i have a problem with stalled sessions.I have set simultaneous use :=1. I have set sql in the session section in radiusd.conf.If a user that somehow failed network connectivity and failed to tellthe server account stop tries to reconnect back it won't let him because his previous session is stalled. I need a mechanism that will doa check upon connection if the session is stalled, delete it and let theuser in or if there is already a real user logged in deny the connecting one.I read from the mailing lists that radzap should do the job but i can'tseem to figure out how to integrate it in that setup (the man pageexplains only the syntax).I also use the ippool module to give (and it should return back too) ip addresses from a given pool range. I need to be sure that it will returnan ip to the pool if there's a stalled session detected by the neededmechanism.At the moment radwho and rlm_ippool_tool show about twice or more entries than the number actually used.Please advice ;-)--regards,Georgi AlexandrovKey Server = http://pgp.mit.edu/ :: KeyID = 37B4B3EEKey Fingerprint = E429 BF93 FA67 44E9 B7D4F89E F990 01C1 37B4 B3EE Alan? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Stale sessions problem
Hello, I'm running freeradius 1.1.0 + mysql + dialupadmin on a linux 2.6 box with a pppoe-server runing on the same machine as nas. It works great ;-) But i have a problem with stalled sessions. I have set simultaneous use :=1. I have set sql in the session section in radiusd.conf. If a user that somehow failed network connectivity and failed to tell the server account stop tries to reconnect back it won't let him because his previous session is stalled. I need a mechanism that will do a check upon connection if the session is stalled, delete it and let the user in or if there is already a real user logged in deny the connecting one. I read from the mailing lists that radzap should do the job but i can't seem to figure out how to integrate it in that setup (the man page explains only the syntax). I also use the ippool module to give (and it should return back too) ip addresses from a given pool range. I need to be sure that it will return an ip to the pool if there's a stalled session detected by the needed mechanism. At the moment radwho and rlm_ippool_tool show about twice or more entries than the number actually used. Please advice ;-) -- regards, Georgi Alexandrov Key Server = http://pgp.mit.edu/ :: KeyID = 37B4B3EE Key Fingerprint = E429 BF93 FA67 44E9 B7D4 F89E F990 01C1 37B4 B3EE signature.asc Description: OpenPGP digital signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
