it and it works well now :) Thanks!
Soujanya
From: "Alan DeKok" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: freeradius mysql simultaneous-use question URGENT=20 Date: Tue, 16 Dec 2003 16:33:11 -0500 Reply-To: [EMAIL PROTECTED]=20 Soujanya Rao [EMAIL PROTECTED] wrote: Can anyone tell me
Hi,
I am new to freeradius. I need some help in using simultaneous-use for detecting double logins using mysql only. Here is my current set up:
select * from radgroup check
++--- +---++---+| id | GroupName | Attribute | op | Value
Soujanya Rao [EMAIL PROTECTED] wrote:
Can anyone tell me where I am going wrong? This is urgent and I am
clueless as to what else needs to be done.
Ensure that 'sql' is listed in the 'accounting' section.
Run: radiusd -X
Alan DeKok.
-
List info/subscribe/unsubscribe? See
If I use freeradius with portsale check mulltiple logins (Simultaneous-Use) works only
with finger?
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Why if I use:
qwerty Auth-Type = Crypt-Local, Crypt-Password ==
$1$PkxbkAzR$byaCpj1GQOL0HxbxhJHRb0, Simultaneous-Use := 0
Exec-Program-Wait = /usr/local/billing/start %u,
Service-Type = Framed-User,
Framed-Protocol = PPP
I have freeradius 0.9 with mysql module working, but simultaneous use is
not working well.
I want that all users to have only active session at a time.
This is an example of my database configuration:
-
mysql select * from radcheck where username='demo
How is the session configuration at radiusd.conf ?
Are you check with sql session or radutmp ?
If sql, check if simultaneous-use sql line is enabled at the end of sql.conf
file.
Sergio Jose Ferreira
WGO Internet
-Mensagem original-
De: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] nome
On Mon, 2003-10-27 at 13:22, Sergio Jose Ferreira wrote:
How is the session configuration at radiusd.conf ?
check with sql session or radutmp ?
I suppose both of them. In my radius.conf:
session {
radutmp
sql
}
Should I leave sql only?
If sql, check if simultaneous-use
outubro de 2003 17:53
Para: [EMAIL PROTECTED]
Assunto: Re: RES: simultaneous use not working in mysql
On Mon, 2003-10-27 at 13:22, Sergio Jose Ferreira wrote:
How is the session configuration at radiusd.conf ?
check with sql session or radutmp ?
I suppose both of them. In my radius.conf:
session
I've run into an interesting dilemma. We've been using Simultaneous-Use
checking on our users, and it's worked great. Unfortunately, we're now
also offering dialup in other cities through MegaPOP, and since those
aren't our servers, obviously we can't snmp or finger-check to see if
users
On Fri, 19 Sep 2003 11:8:55 +0800
[EMAIL PROTECTED] wrote:
test Auth-Type = Crypt-Local, Crypt-Password == $1$YoWRpiSV$QsHmtOSFoOGEw4i7LjaLV/,
Simultaneous-Use := 1
Hi all!
How to configure some accounts be limited to only one login at a time and some
see /doc/Simultaneous-Use
Am Fre, 2003-09-19 um 05.08 schrieb :
Hi all!
How to configure some accounts be limited to only one login at a time and some
not?
EMAIL:[EMAIL PROTECTED]
TEL:020-87114020 020-87114021
2003-09-19
Hi all!
How to configure some accounts be limited to only one login at a time and some not?
EMAIL:[EMAIL PROTECTED]
TEL:020-87114020 020-87114021
2003-09-19
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
why if I use Simultaneous-Use :
testAuth-Type := Crypt-Local, Crypt-Password ==
$1$0MrvlCBQ$udnwuVmMLsn8GphGQQugF1 Simultaneous-Use = 1
Exec-Program-Wait = /usr/local/bin/start %u,
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-Routing = Broadcast
: Problem with Simultaneous-Use
why if I use Simultaneous-Use :
testAuth-Type := Crypt-Local, Crypt-Password ==
$1$0MrvlCBQ$udnwuVmMLsn8GphGQQugF1 Simultaneous-Use = 1
Exec-Program-Wait = /usr/local/bin/start %u,
Service-Type = Framed-User,
Framed-Protocol = PPP
]
[mailto:[EMAIL PROTECTED] nome de Double
Enviada em: quarta-feira, 17 de setembro de 2003 10:11
Para: [EMAIL PROTECTED]
Assunto: Problem with Simultaneous-Use
why if I use Simultaneous-Use :
testAuth-Type := Crypt-Local, Crypt-Password ==
$1$0MrvlCBQ$udnwuVmMLsn8GphGQQugF1 Simultaneous
why if I use Simultaneous-Use :
testAuth-Type := Crypt-Local, Crypt-Password ==
$1$0MrvlCBQ$udnwuVmMLsn8GphGQQugF1, Simultaneous-Use = 1
Exec-Program-Wait = /usr/local/bin/start %u,
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-Routing
why if I use Simultaneous-Use :
testAuth-Type := Crypt-Local, Crypt-Password ==
$1$0MrvlCBQ$udnwuVmMLsn8GphGQQugF1, Simultaneous-Use = 1
Exec-Program-Wait = /usr/local/bin/start %u,
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-Routing
On Wed, 17 Sep 2003 18:25:56 +0400 (MSD)
Double [EMAIL PROTECTED] wrote:
I I understand my mistake %)
Simultaneous-Use = 1 fail
Simultaneous-Use := 1 ok
why if I use Simultaneous-Use :
testAuth-Type := Crypt-Local, Crypt-Password ==
$1$0MrvlCBQ$udnwuVmMLsn8GphGQQugF1, Simultaneous
You should read the man page for users regarding the usage of =,:=, +=, etc...
You usually need to use := with Simul-Use
Nick
On Wednesday 17 September 2003 09:25, Double wrote:
why if I use Simultaneous-Use :
testAuth-Type := Crypt-Local, Crypt-Password ==
$1$0MrvlCBQ
Double [EMAIL PROTECTED] wrote:
why if I use Simultaneous-Use :
...
Posting the same message multiple times won't endear you to people.
Here's a hint: You didn't read 'doc/Simultaneous-Use'. And if you
did, you didn't read it carefully enough, because you're not doing
what it says
as Simultaneous-Use limit. So
everybody use the same user/pass combination. Now I am sure, most
probably you already thought of this :) but you cant use.
Well, it also shouldnt be very difficult to add a groupwise simultaneous
use attribute to freeradius since it already has simultaneous use
attribute
Hi,
I want to have a simultaneous-use limit for groups. E.g., I have, say,
50 users in group1 and I want to set limit for group1 to, say, 20... If
there are already 20 online dialup users at any given time, 21st users
will be denied access.
(user-group relation is already set up in database
ThanX
On Wed, Aug 13, 2003 at 02:33:57PM +0200, Ulrich Walcher wrote:
Is there any reason why the Simultaneous Use Checking Queries that are
present in sql.conf and oraclesql.conf do not appear in postgresql.conf?
They are in 0.9 and current CVS. Please check it.
-
List info/subscribe
On Wed, Aug 13, 2003 at 02:33:57PM +0200, Ulrich Walcher wrote:
Is there any reason why the Simultaneous Use Checking Queries that are
present in sql.conf and oraclesql.conf do not appear in postgresql.conf?
They are in 0.9 and current CVS. Please check it.
--
Fduch M. Pravking
-
List info
Hi all!
I've been trying to get simultaneous-use work with Cisco VoIP calls. After
looking through this list and doing some test over a freeradius-0.9.0 on
BSDi4.3 I found that it's not posible, so I only want to confirm this.
During accounting session radutmp module stores some information about
Is there any reason why the Simultaneous Use Checking Queries that are
present in sql.conf and oraclesql.conf do not appear in postgresql.conf?
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Guillermo Delmastro [EMAIL PROTECTED] wrote:
The problem is that for a voip call (i am using it throgh an IVR) the
nas-port is always 0, so for the same user (called PIN) calling from the
same nas, we are only able to see one entry in radutmp file. For this
reason, simultaneous-use doesn't
Is there another possibility I've overlooked? Conditional check-items?
It's very good idea - Conditional check-items. I just want to show
another real-life example where it can be very helpful feature.
We sale different internet services, including dialup and campus
(ethnernet clients get
arrangement?
Simultaneous-use without the ability to contact the NAS is not
recommended, but I do understand that it is being used successfully in
this configuration. Does anyone have any tips or tricks to reduce false
positives? There was some mention or adding a one minute cache of auth
records
Hi,
I want to log start/stop packets in postgresql and use DB2 for
authentication information.
All my user information resides in DB2.. I cannot migrate it to
postgresql.
I couldn't figure out how I could do this in sql.conf..
Anyone has any suggestions or documents about this?
Thanks
Ali
: Thursday, July 17, 2003 8:25 AM
To: [EMAIL PROTECTED]
Subject: Simultaneous use of two DBs
Hi,
I want to log start/stop packets in postgresql and use DB2 for
authentication information.
All my user information resides in DB2.. I cannot migrate it to
postgresql.
I couldn't figure out how
DB) for logging purposes..
Any more suggestions? :)
Thanks
Ali
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Tim McCracken
Sent: Thursday, July 17, 2003 16:51
To: [EMAIL PROTECTED]
Subject: RE: Simultaneous use of two DBs
I don't know
Define 2 db instances.
Use one for autentication and the other for accounting.
Joao Frade
-Original Message-
From: Ali Gunduz [mailto:[EMAIL PROTECTED]
Sent: quinta-feira, 17 de Julho de 2003 14:59
To: [EMAIL PROTECTED]
Subject: RE: Simultaneous use of two DBs
Well, I'm sure
I found the source of my problem but I don't how to fix it:
in radiusd.conf
session {
# radutmp
sql
}
If I set it to radutmp, it works, simultaneous-use works.
If I set to sql, simultaneous-use does not work. Authentication passes all
the time.
Can anyone tell me what I am doing
(dialup, Simultaneous-Use, :=, 1);
(Of course I have a group dialin)
when I run checkrad manually, I see in /var/log/freeradius/checkrad.log:
snmpget: /usr/bin/snmpget -r 1 -t 5 1.2.3.4 snmppassword
.iso.org.dod.internet.private.enterprises.9.2.9.2.1.18.66
user at port S66: user
Returning 1
Dear list,
I am using (v0.8.1)
simultaneous-use attribute with Bay RAC 8000 without problems.
Users also get and see the You are already logged in - access denied
message through NAS-Prompt when they are trying to connect beyond the
limit. To make life easier for hot-line staff, we should have
On Fri, Jun 20, 2003 at 11:57:46AM +0300, gunce ciftci wrote:
Dear list,
I am using (v0.8.1)
simultaneous-use attribute with Bay RAC 8000 without problems.
Users also get and see the You are already logged in - access denied
message through NAS-Prompt when they are trying to connect beyond
wrote:
Dear list,
I am using (v0.8.1)
simultaneous-use attribute with Bay RAC 8000 without problems.
Users also get and see the You are already logged in - access denied
message through NAS-Prompt when they are trying to connect beyond the
limit. To make life easier for hot-line staff
Q: I have 4 usrhipers setup for dial in. If customer A dials into arc 1
and then dials in again and gets a modem on arc 2, will they be denied
access if the Simultaneous-Use is set to 1. Or will it only check if
they are attempting to connect to the same arc as the original
connection?
Jeff
If configured correctly the Simultaneous-Use =1 parameter will limit
simultaneous logins into THAT RADIUS server to 1. If you have 1 or
fifty NAS devices pointed at the same RADIUS server with
Simultaneous-Use = 1 set for a user, that user will only be allowed to
login once no matter which
Hello,
does anybody know how to get radcheck to work with a Colubris NAS ?
I need to enforce the Simultaneous-Use check.
The NAS does support SNMP but I don't see any reference to this product
in the supported devices list from radcheck.
Maybe somebody knows how to get this to work? :)
Navid
Hello
Here's what I have done
I inserted (dialup, Simultaneous-Use, :=, 1) into radgroupcheck.
And I uncommented simul_count_query and simul_verify_query on sql.conf.
After I done that I when I looked at the radius.log.And it seemed that it's
catching multiple logins.
But it turns out
Ross Reed [EMAIL PROTECTED] wrote:
We are currently doing national dialup(freeradius 0.8.1 w/ mysql for
auth/acct) , but with no access to the national NAS's. Since radwho seems to
be flaky at times (radutmp seems to get dupes in it) Is there anyone out
there doing Simultaneous-Use another way
Simultaneous-Use := 1 must be in the radcheck or radgroupcheck tables, not
the radreply or radgroupreply tables.
Ed
From: Travis Best [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Previnting Simultaneous-Use
Date: Fri, 21 Mar 2003 16:02:10 -0500
I am
of the records for that username will
be ended with the same AcctStopTime entered into the MySQL database, and
every entry for that username has been stopped.
Ed
From: Scott Bartlett [EMAIL PROTECTED]
To: Ed H [EMAIL PROTECTED]
Subject: RE: Simultaneous-Use + MySQL + NTRadPing
Date: Tue, 18 Mar
Ed H [EMAIL PROTECTED] wrote:
I am sending accounting (start/stop). But what happens is the same username
will be recorded multiple times in the MySQL database with a new
AcctStartTime for each entry. I can do this multiple times with the
Accounting Start packet sent from NTRadPing
I
Hello,
I am using MySQL with FreeRadius 0.8.1, and RedHat 8.2, and testing with
NTRadPing. I also have SNMP_Session and BER installed.
I have put Simultaneous-Use := 1 into my radgroupcheck table. However, I
can still login the same user multiple times and it shows up into the
radacct table
Okay, this is really bizarre. After awhile, Simultaneous-Use just stops
working and lets people log on more than once. (I haven't figured out how
long awhile is at the moment. Definitely overnight, possibly a couple of
hours.) At that point, it seems to stop running checkrad -- at least,
there's
actually happen because all of
an upstream radius server/proxy. I know that checkrad is
supposed to verify if the session is there or not but I
don't have access to the NAS servers and cannot directly
verify the login.
It may be useful to add an option to Simultaneous-Use where
the module would
On Fri, 14 Mar 2003, Kristina Pfaff-Harris wrote:
Okay, this is really bizarre. After awhile, Simultaneous-Use just stops
working and lets people log on more than once. (I haven't figured out how
long awhile is at the moment. Definitely overnight, possibly a couple of
hours.) At that point
Josh Kleensang [EMAIL PROTECTED] wrote:
Is there any way (don't you love it when emails start
out that way...) to have freeradius arbitrarily kill a
session (record a session stop time and forget about it)
when another session is started with the same username?
Write an external script to
I'm using mysql authentication scheme.
As shown in documentation i'm set in radgroupcheck table such row:
groupname | parameter| op | value|
-
test|Simultaneous-Use| := | 1 |
But I still have double
At 03:54 PM 3/11/2003 +0500, Eric wrote:
I'm using mysql authentication scheme.
As shown in documentation i'm set in radgroupcheck table such row:
groupname | parameter | op| value|
-
test|Simultaneous-Use
If checkrad is run, and returns that the user is *not* online, does it
automatically zap them from radutmp?
Thanks,
Justin Wheeler
[EMAIL PROTECTED]
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Justin Wheeler [EMAIL PROTECTED] wrote:
If checkrad is run, and returns that the user is *not* online, does it
automatically zap them from radutmp?
Yes.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hello,
I am trying to get our radius servers to authenticate a virtual ISP request.
When we have the Simultaneous-Use attribute in radcheck it ALWAYS fails with
a Multiple login error, no matter how may Simultaneous-Use I give it. It
always says there are more logins then the number I have. I
Well, this is quite bizarre. I have Ascend Maxen, Livingston Portmaster
III's, and a couple of Ciscoes as dialup servers. With Simultaneous-Use
set to 1, if I dial into a Max when the account is already logged on, I
get dropped to the internal ascend% prompt.
I know this is likely an Ascend
I've set a test user with a Simultaneous-Use value of 1.
The server is automatically disallowing any attempt to duplicate usage,
but it's basing its result SOLELY on radutmp. It doesn't use checkrad.
Logs show nothing. No attempt, no failure, nothing.
checkrad exists as configured
On Thu, 20 Feb 2003, Justin Wheeler wrote:
my naslist has the nas that the first connection is connected to in it,
and it is listed as livingston.
In clients.conf, do you have
nastype = livingston
for that nas entry?
Kristina
-
List info/subscribe/unsubscribe? See
Justin Wheeler [EMAIL PROTECTED] wrote:
Instead of spending all that time with the checklogin.pl script, I'm
wondering if there's any issue with finding duplicate logins via the
following:
A user attempts to login -- but there's already a record of login for that
user.
I grab that IP
Am I missing anything?
IMHO, I wouldn't introduce the combined latency and fallability of ICMP
request/response packet processing and SNMP query/response handling into the
authentication/authorization process. It seems vulnerable to failure and lacking in
scalability.
ICMP packets dropped
freeradius 0.8.1 on a new Redhat 7.3 server and it appears to
be authenticating users properly. I am authenticating via unix
passwd/shadow files and have restricted simultaneous use to one. Detail
logging is enabled and I have enabled suffix stripping so that users are
authenticated if they include
, and the suffixes should be stripped.
The only issue is that Simultaneous-Use may not work properly, due
to the mixup between 'user@domain' and 'users'.
* When I run radwho, the Login column includes the suffix for those
users logged in using their suffix. Is there a way to strip the suffix
On Wednesday, December 11, 2002, at 03:42 PM, Dan wrote:
Well I got our AS5200s simultaneous use to work finally.
congratulations
Now the problem is the cisco 7500 we have for DSL.
checkrad (running full debug mode on radius) shows
no response
The world is not perfect. :-)))
What cause
Well I got our AS5200s simultaneous use to work finally.
Now the problem is the cisco 7500 we have for DSL.
checkrad (running full debug mode on radius) shows
no response
it looks like the MIBs are wrong.
so in this case I have two questions:
1. how do I find the correct MIBs? (yes, I could run
I'm trying to use FreeRADIUS simultaneous use control. All requests are
proxied to another RADIUS server. However, I wanted FreeRADIUS to control
this.
From debug (radiusd -X) it looks to me that FreeRADIUS sends the request to
the other server before checking.
It worked once but I had to remove
Hello,
I am trying to use Simultaneous-Use for group users through mysql with
freeradius-snapshot-20021101.
radiusd.conf:
==
# Session database, used for checking Simultaneous-Use. The radutmp module
# handles this
session {
# radutmp
sql
}
sql.conf
chosen wrong form for my question. And at this point
I thing that we can stop our non-productive flg.
At now I'm trying to find the solution. On success I'll post it to
-devel list.
A bit about docs. I think that minor comment is needed in
Simultaneous-Use at line 32: You need to set the correct
there is no solution at this time.
A bit about docs. I think that minor comment is needed in
Simultaneous-Use at line 32: You need to set the correct type in the
file /etc/raddb/naslist must become You need to set the correct type in the
file /etc/raddb/naslist (${sysconfdir}/raddb/clients.conf for newest
Hi!
Accordingly to 'doc/Simultaneous-Use' this feature works in this way:
if someone tries to ask for authentication, radiusd first search
radutmp file (or 'sql') and (only) if there is an open session for that
user server uses checkrad script to query NAS. Record in radutmp
appears only after
and will
successfully authenticate the user. So we have simultaneous use
(consequences of such behaviour is another story).
Yes... this is what section 5 of the Simultaneous-Use document
says. I don't understand why you're telling us what we already know.
It would have been sufficient to simply
Yes... this is what section 5 of the Simultaneous-Use document
says. I don't understand why you're telling us what we already know.
It would have been sufficient to simply reference the document.
Yes...my post was _only_ (another) real-world example about what
section 5 says. Do you think
NOT interested in are complaints that the server is
broken. Yes, we already know Simultaneous-Use has problems. So?
You're upset that I asked you for solutions, and you're threatening to
go away, come up with a solution, and then punish me by not sharing
it. That's a classic case of... it should
for Simultaneous-Use at
connection ?
usage: myscript.pl username Simultaneous-Use limit
response: integer 0 or 1 (as 1 means Simultaneous-Use limit reached and 0
means Simultaneous-Use limit not reached)
Regards,
P.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Joshua Corbin [EMAIL PROTECTED] wrote:
I got Simultaneous-Use working with a MySQL setup and though I would
tell you all how I got it to work in case anyone has any questions:
That's good to hear.
Just make sure that checkrad works with your setup; I had to change my
SNMP read community
Hi all !,
Joshua, I tried that, it works OK !.
Thank you,
Jorge.
JC Greetings,
JC I got Simultaneous-Use working with a MySQL setup and though I would
JC tell you all how I got it to work in case anyone has any questions:
JC Read http://www.freeradius.org/radiusd/doc/Simultaneous-Use
JC I
not forget to add a line like the following in
your users file
DEFAULTService-Type == Framed-User, Simultaneous-Use := 1
Framed-Protocol = PPP,
Framed-Compression = Van-Jacobson-TCP-IP,
Framed-MTU = 1500
If none of the above helps .. go back to step 1
Jorge Minassian
Hi all !,
Would some one give me some help about using simutaneous-use
feature ?. I can not get this work at all ...
Thank you,
Jorge.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi again, I need to have some solution about this, Chris can you
helpme ?, any one on the list please ?
Thank you very much.
JM Chris,
JM thank for your answer,
JM I put radius on debug mode, then called nas (Total Control
JM w/HiperArc) as a user that where connected, but I
Chris,
thank for your answer,
I put radius on debug mode, then called nas (Total Control
w/HiperArc) as a user that where connected, but I don't see any error
and the request have not been rejected.
Below is the result of debug mode.
After that you have again radiusd.conf.
Hi all !,
I am having some trouble about simultaneous connnection.
I can not see where would be the error on configuration, if any, and did
not get nothing browsing docs, faqs, etc, that were applicable to my config.
Can some one give some idea about this ?.
My radiusd.conf is like what is
At 09:07 AM 10/17/2002 -0300, Jorge Minassian wrote:
Hi all !,
I am having some trouble about simultaneous connnection.
I can not see where would be the error on configuration, if any, and did
not get nothing browsing docs, faqs, etc, that were applicable to my config.
Can some one give some
, like
Simultaneous-Use :=1
Here's what I have in users
DEFAULT Service-Type == Framed-User
Framed-IP-Address = 255.255.255.254,
Simultaneous-Use := 1,
Framed-MTU = 576,
Service-Type = Framed-User,
Fall-Through = Yes,
Port-Limit = 1
If one
Funk, Michael [EMAIL PROTECTED] wrote:
I am unable to make the attributes in the users file take affect, like
Simultaneous-Use :=1
Here's what I have in users
DEFAULT Service-Type == Framed-User
Framed-IP-Address = 255.255.255.254,
Simultaneous-Use := 1,
Run
the attributes in the users file take affect, like
Simultaneous-Use :=1
Here's what I have in users
DEFAULT Service-Type == Framed-User
Framed-IP-Address = 255.255.255.254,
Simultaneous-Use := 1,
Simultaneous use is a check item, similar to how you are using Service-Type
Forgive me, but I left something out.
My radius boxes are at the end of a proxy So, I get all of my requests
to my servers by proxy.
I'm being told by other sources that you must have SNMP access to the NAS in
order for Simultaneous-Use and Port-Limit to work.
How would I be able to work
are at the end of a proxy So, I get all of my requests
to my servers by proxy.
I'm being told by other sources that you must have SNMP access to the NAS in
order for Simultaneous-Use and Port-Limit to work.
How would I be able to work around this limitation by using the accounting
flat
Forgive me, but I left something out.
My radius boxes are at the end of a proxy So, I get all of my requests
to my servers by proxy.
I'm being told by other sources that you must have SNMP access to the NAS in
order for Simultaneous-Use and Port-Limit to work.
How would I be able to work
Funk, Michael [EMAIL PROTECTED] wrote:
I'm being told by other sources that you must have SNMP access to the NAS in
order for Simultaneous-Use and Port-Limit to work.
No. Port-Limit is an attribute that the RADIUS server sends to the
NAS. If the NAS ignores it, there's nothing
for Simultaneous-Use
On Mon, 26 Aug 2002, Chris A. Kalin wrote:
OK, I'll buy that. :)
The problem is when it calls rad_check_ts, _that_ function seems to be
checking a radutmp file - whether or not I'm using radutmp or not for
session checking - and several variables come back undefined
I've discovered a few little quirks in rlm_sql.c and sql.c that prevent
Simultaneous-Use from starting radcheck in a standard FreeRADIUS install.
Without these fixes, Simultaneous-Use will still work in a trust the SQL
server context, but it's unable to verify the information using radcheck
At 03:51 PM 8/26/2002 -0500, Chris A. Kalin wrote:
I've discovered a few little quirks in rlm_sql.c and sql.c that prevent
Simultaneous-Use from starting radcheck in a standard FreeRADIUS install.
Without these fixes, Simultaneous-Use will still work in a trust the SQL
server context, but it's
Chris Parker wrote:
At 03:51 PM 8/26/2002 -0500, Chris A. Kalin wrote:
I've discovered a few little quirks in rlm_sql.c and sql.c that prevent
Simultaneous-Use from starting radcheck in a standard FreeRADIUS
install.
Without these fixes, Simultaneous-Use will still work in a trust the SQL
Chris A. Kalin [EMAIL PROTECTED] wrote:
Should be simple enough to understand without much comment. It's against
last night's CVS snapshot.
OK... but you changed it so that it doesn't call rad_check_ts() any
more, and instead calls sql_check_ts(). This is wrong.
The issue is that SQL
-
From: Alan DeKok [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, August 26, 2002 4:50 PM
Subject: Re: rlm_sql.c and sql.c fixes for Simultaneous-Use
Chris A. Kalin [EMAIL PROTECTED] wrote:
Should be simple enough to understand without much comment. It's
against
last night's CVS
I successfully configured freeradius 0.6 to authenticate against MySQL
server and also to add accounting information to the database.
I want to add simultaneous access check so I uncommented
simul_count_query in sql.conf and added sql into session{} section of
radiusd.conf.
From the radiusd log
[EMAIL PROTECTED] wrote:
I want to add simultaneous access check so I uncommented
simul_count_query in sql.conf and added sql into session{} section of
radiusd.conf.
From the radiusd log I see that the query is defined, but never used. What
am I missing?
Are you using the 'Simultaneous
the 'Simultaneous-Use' attribute anywhere for that
user? If not, then the server will never do session checking.
This is my /etc/raddb/users file, I think that Simultaneous-Use is defined
when radiusd fall through sql module. From the log I see that the module
files is run before module sql. Or my be I had
/sbin #
-Original Message-
From: Alan DeKok [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 30, 2002 8:57 AM
To: [EMAIL PROTECTED]
Subject: Re: MySQL and simultaneous use check
[EMAIL PROTECTED] wrote:
I want to add simultaneous access check so I uncommented
simul_count_query
1 - 100 of 181 matches
Mail list logo