RE: (RADIATOR) Access Rejected for Simultaneous-Use
Hugh, it seems the defaults are basically what I currently have. I don't understand how that would repress the INFO message when the password is incorrect. tia, William -Original Message- From: Hugh Irvine [mailto:[EMAIL PROTECTED]] Sent: Monday, December 04, 2000 9:57 AM To: William Hernandez; Radiator Subject: RE: (RADIATOR) Access Rejected for Simultaneous-Use Hello William - At 9:26 -0400 4/12/00, William Hernandez wrote: >Thanks Hugh, this worked fine. > >However, I have Trace set to 3 so that I can see the INFO >messages and now if a user enters an incorrect password and is >over the user count we see an > > INFO: Access rejected for ticket:Simultaneous-Use of 2 exceeded > >but we no longer see the log for > > Login incorrect > >I would like to see both. And if I had to choose I would prefer >the Login incorrect if that occurred first. Is there another >parameter for this or is the only solution to set Trace to 2, but >then I wouldn't see the INFO messages at all? > You can also use the new AuthLog clause(s) in Radiator 2.17.1. hth Hugh -- NB: I am travelling this week, so there may be delays in our correspondence. Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc. Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X. === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
RE: (RADIATOR) Access Rejected for Simultaneous-Use
Hello William - At 9:26 -0400 4/12/00, William Hernandez wrote: >Thanks Hugh, this worked fine. > >However, I have Trace set to 3 so that I can see the INFO >messages and now if a user enters an incorrect password and is >over the user count we see an > > INFO: Access rejected for ticket:Simultaneous-Use of 2 exceeded > >but we no longer see the log for > > Login incorrect > >I would like to see both. And if I had to choose I would prefer >the Login incorrect if that occurred first. Is there another >parameter for this or is the only solution to set Trace to 2, but >then I wouldn't see the INFO messages at all? > You can also use the new AuthLog clause(s) in Radiator 2.17.1. hth Hugh -- NB: I am travelling this week, so there may be delays in our correspondence. Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc. Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X. === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
RE: (RADIATOR) Access Rejected for Simultaneous-Use
Thanks Hugh, this worked fine. However, I have Trace set to 3 so that I can see the INFO messages and now if a user enters an incorrect password and is over the user count we see an INFO: Access rejected for ticket:Simultaneous-Use of 2 exceeded but we no longer see the log for Login incorrect I would like to see both. And if I had to choose I would prefer the Login incorrect if that occurred first. Is there another parameter for this or is the only solution to set Trace to 2, but then I wouldn't see the INFO messages at all? Thanks in advance, William -Original Message- From: Hugh Irvine [mailto:[EMAIL PROTECTED]] Sent: Saturday, December 02, 2000 7:06 AM To: William Hernandez Subject: RE: (RADIATOR) Access Rejected for Simultaneous-Use Hello William - At 17:31 -0400 1/12/00, William Hernandez wrote: >Does the NoDefaultIfFound parameter go in the block >or the block or in both blocks? > In every block in which you want an explicit reject to override a DEFAULT entry. hth Hugh -- NB: I am travelling this week, so there may be delays in our correspondence. -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc. Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X. === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
FW: (RADIATOR) Access Rejected for Simultaneous-Use
Does the NoDefaultIfFound parameter go in the block or the block or in both blocks? Thanks in advance. William -Original Message- From: Hugh Irvine [mailto:[EMAIL PROTECTED]] Sent: Friday, November 17, 2000 7:25 PM To: William Hernandez; Radiator Subject: Re: (RADIATOR) Access Rejected for Simultaneous-Use Hello William - On Sat, 18 Nov 2000, William Hernandez wrote: > > Our user "ticket" has Simultaneous-Use set to 5. Yesterday > afternoon "ticket" tried to login but entered his password > incorrectly. The access request was denied because of Login > incorrect. > > However, an INFO statement was also created in radius.log > referring to "Simultaneous-Use of 1 exceeded". > > Thu Nov 16 19:09:46 2000: Login incorrect: [ticket/center] > (max1) > Thu Nov 16 19:09:46 2000: INFO: Access rejected for > ticket:Simultaneous-Use of 1 exceeded > > I would expect Radiator to stop authenticating when a "Login > incorrect" was detected. But regardless it appears that the INFO > statement is incorrect since user "ticket" has a > Simultaneous-Use=5. > > Is there something in my radius.cfg that's causing this? > I suspect this is because you have DEFAULT users configured. The trace file shows that the password check failed, then you went on to check two DEFAULT users, the second of which was accepted. If you want to alter this behaviour, you should use the NoDefaultIfFound parameter in the AuthBy. hth Hugh -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc. Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X. t.log
Re: (RADIATOR) Access Rejected for Simultaneous-Use
Hello William - On Sat, 18 Nov 2000, William Hernandez wrote: > > Our user "ticket" has Simultaneous-Use set to 5. Yesterday > afternoon "ticket" tried to login but entered his password > incorrectly. The access request was denied because of Login > incorrect. > > However, an INFO statement was also created in radius.log > referring to "Simultaneous-Use of 1 exceeded". > > Thu Nov 16 19:09:46 2000: Login incorrect: [ticket/center] > (max1) > Thu Nov 16 19:09:46 2000: INFO: Access rejected for > ticket:Simultaneous-Use of 1 exceeded > > I would expect Radiator to stop authenticating when a "Login > incorrect" was detected. But regardless it appears that the INFO > statement is incorrect since user "ticket" has a > Simultaneous-Use=5. > > Is there something in my radius.cfg that's causing this? > I suspect this is because you have DEFAULT users configured. The trace file shows that the password check failed, then you went on to check two DEFAULT users, the second of which was accepted. If you want to alter this behaviour, you should use the NoDefaultIfFound parameter in the AuthBy. hth Hugh -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc. Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X. === Archive at http://www.starport.net/~radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Access Rejected for Simultaneous-Use
Our user "ticket" has Simultaneous-Use set to 5. Yesterday afternoon "ticket" tried to login but entered his password incorrectly. The access request was denied because of Login incorrect. However, an INFO statement was also created in radius.log referring to "Simultaneous-Use of 1 exceeded". Thu Nov 16 19:09:46 2000: Login incorrect: [ticket/center] (max1) Thu Nov 16 19:09:46 2000: INFO: Access rejected for ticket:Simultaneous-Use of 1 exceeded I would expect Radiator to stop authenticating when a "Login incorrect" was detected. But regardless it appears that the INFO statement is incorrect since user "ticket" has a Simultaneous-Use=5. Is there something in my radius.cfg that's causing this? Thanks in advance. William t.log
