RE: (RADIATOR) Access Rejected for Simultaneous-Use

2000-12-04 Thread William Hernandez

Thanks Hugh, this worked fine.

However, I have Trace set to 3 so that I can see the INFO
messages and now if a user enters an incorrect password and is
over the user count we see an

INFO: Access rejected for ticket:Simultaneous-Use of 2 exceeded

but we no longer see the log for

Login incorrect

I would like to see both. And if I had to choose I would prefer
the Login incorrect if that occurred first. Is there another
parameter for this or is the only solution to set Trace to 2, but
then I wouldn't see the INFO messages at all?

Thanks in advance,
William

-Original Message-
From: Hugh Irvine [mailto:[EMAIL PROTECTED]]
Sent: Saturday, December 02, 2000 7:06 AM
To: William Hernandez
Subject: RE: (RADIATOR) Access Rejected for Simultaneous-Use



Hello William -

At 17:31 -0400 1/12/00, William Hernandez wrote:
Does the NoDefaultIfFound parameter go in the AuthBy FILE
block
or the AuthBY UNIX block or in both blocks?


In every block in which you want an explicit reject to override a
DEFAULT entry.

hth

Hugh
--

NB: I am travelling this week, so there may be delays in our
correspondence.

--
Radiator: the most portable, flexible and configurable RADIUS
server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT,
Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc,
etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS
X.


===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



RE: (RADIATOR) Access Rejected for Simultaneous-Use

2000-12-04 Thread Hugh Irvine


Hello William -

At 9:26 -0400 4/12/00, William Hernandez wrote:
Thanks Hugh, this worked fine.

However, I have Trace set to 3 so that I can see the INFO
messages and now if a user enters an incorrect password and is
over the user count we see an

   INFO: Access rejected for ticket:Simultaneous-Use of 2 exceeded

but we no longer see the log for

   Login incorrect

I would like to see both. And if I had to choose I would prefer
the Login incorrect if that occurred first. Is there another
parameter for this or is the only solution to set Trace to 2, but
then I wouldn't see the INFO messages at all?


You can also use the new AuthLog clause(s) in Radiator 2.17.1.

hth

Hugh
-- 

NB: I am travelling this week, so there may be delays in our correspondence.

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.

===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



RE: (RADIATOR) Access Rejected for Simultaneous-Use

2000-12-04 Thread William Hernandez

Hugh, it seems the defaults are basically what I currently have.
I don't understand how that would repress the INFO message when
the password is incorrect.

tia,
William

-Original Message-
From: Hugh Irvine [mailto:[EMAIL PROTECTED]]
Sent: Monday, December 04, 2000 9:57 AM
To: William Hernandez; Radiator
Subject: RE: (RADIATOR) Access Rejected for Simultaneous-Use



Hello William -

At 9:26 -0400 4/12/00, William Hernandez wrote:
Thanks Hugh, this worked fine.

However, I have Trace set to 3 so that I can see the INFO
messages and now if a user enters an incorrect password and is
over the user count we see an

   INFO: Access rejected for ticket:Simultaneous-Use of 2 exceeded

but we no longer see the log for

   Login incorrect

I would like to see both. And if I had to choose I would prefer
the Login incorrect if that occurred first. Is there another
parameter for this or is the only solution to set Trace to 2,
but
then I wouldn't see the INFO messages at all?


You can also use the new AuthLog clause(s) in Radiator 2.17.1.

hth

Hugh
--

NB: I am travelling this week, so there may be delays in our
correspondence.

Radiator: the most portable, flexible and configurable RADIUS
server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT,
Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc,
etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS
X.


===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Access Rejected for Simultaneous-Use

2000-11-17 Thread Hugh Irvine


Hello William -

On Sat, 18 Nov 2000, William Hernandez wrote:
 
 Our user "ticket" has Simultaneous-Use set to 5. Yesterday
 afternoon "ticket" tried to login but entered his password
 incorrectly. The access request was denied because of Login
 incorrect.
 
 However, an INFO statement was also created in radius.log
 referring to "Simultaneous-Use of 1 exceeded".
 
 Thu Nov 16 19:09:46 2000: Login incorrect: [ticket/center]
 (max1)
 Thu Nov 16 19:09:46 2000: INFO: Access rejected for
 ticket:Simultaneous-Use of 1 exceeded
 
 I would expect Radiator to stop authenticating when a "Login
 incorrect" was detected. But regardless it appears that the INFO
 statement is incorrect since user "ticket" has a
 Simultaneous-Use=5.
 
 Is there something in my radius.cfg that's causing this?
 

I suspect this is because you have DEFAULT users configured. The trace file
shows that the password check failed, then you went on to check two DEFAULT
users, the second of which was accepted. If you want to alter this behaviour,
you should use the NoDefaultIfFound parameter in the AuthBy.

hth

Hugh

-- 
Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.



===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.