[mailto:freeradius-users-
bounces+listas.nata=cnett.com...@lists.freeradius.org] Em nome de
Marinko Tarlac
Enviada em: segunda-feira, 10 de outubro de 2011 17:59
Para: FreeRadius users mailing list
Assunto: Re: Trying to solve a Simultaneous-Use problem
We discuss at least once per week about stalled
On 11 Oct 2011, at 13:34, Nataniel Klug wrote:
Arran,
Thanks for your answer. So to test the NAS what should I use?
A ping packet in a shell script?
Yes. Or an SNMP request.
Arran Cudbard-Bell
a.cudba...@freeradius.org
Betelwiki, Betelwiki, Betelwiki
So, my question is: how can I use Simultaneous-Use in this
scenario? Should I make a script that test if the NAS is online every 10
seconds and if not list all clients connect and stop that connections? Should
this work? Is there anyone with the same scenario that can share
We discuss at least once per week about stalled sessions... Search
before you ask...
On 10/10/2011 10:49 PM, Arran Cudbard-Bell wrote:
So, my question is: how can I use Simultaneous-Use in
this scenario? Should I make a script that test if the NAS is online
every 10
On Tue, Oct 11, 2011 at 3:44 AM, Nataniel Klug listas.n...@cnett.com.brwrote:
Hello all,
** **
I am trying to solve a problem about Simultaneous-Use, not
in the code because it’s working, but inside my network layout. I have two
different NAS the can
Hello Fajar,
mysql select * from radgroupreply;
++---+--++---+
| id | GroupName | Attribute ? ? ? ?| op | Value |
++---+--++---+
| ?1 | HZ ? ? ? ?| Simultaneous-Use | := | 1 ? ? |
Yes,
Simulaneous-Use is a check item, not a reply.
2010/2/12 Fojtán Balázs István bal...@fojtan.hu
Hello Fajar,
mysql select * from radgroupreply;
++---+--++---+
| id | GroupName | Attribute ? ? ? ?| op | Value |
Hello,
Yes,
Simulaneous-Use is a check item, not a reply.
Ok, I did this mistake, sorry. Now I've deleted the Simultaneous-Use := 1
record from radgroupreply (now this is empty), and inserted it into the
radgroupcheck.
mysql select * from radgroupcheck;
Hello,
After I've made your suggested change (inserted the Simultaneous-Use := 1
record into radgroupcheck table), the checkrad.pl script run, when I use
radtest to a user, who is listed by radwho. I've set the $debug, $snmpget,
$snmpwalk, $cmmty_string variables in the /usr/sbin/checkrad. After
2010/2/11 Fojtán Balázs István bal...@fojtan.hu:
simul_count_query = SELECT COUNT(*) \
FROM ${acct_table1} \
WHERE username = '%{SQL-User-Name}' \
AND acctstoptime IS NULL
it uses ${acct_table1} (should be radacct by default). Have you
enabled accounting?
mysql select * from radcheck;
Hello Fajar,
thanks for your rapid response!
simul_count_query = SELECT COUNT(*) \
FROM ${acct_table1} \
WHERE username = '%{SQL-User-Name}' \
AND acctstoptime IS NULL
it uses ${acct_table1} (should be radacct by default). Have you
enabled accounting?
Yes, the accounting is working. It is
2010/2/11 Fojtán Balázs István bal...@fojtan.hu:
mysql select * from radgroupreply;
++---+--++---+
| id | GroupName | Attribute | op | Value |
++---+--++---+
| 1 | HZ | Simultaneous-Use | := | 1 |
Yes.
Fajar A. Nugraha wrote:
2010/2/11 Fojtán Balázs István bal...@fojtan.hu:
mysql select * from radgroupreply;
++---+--++---+
| id | GroupName | Attribute| op | Value |
++---+--++---+
| 1 | HZ|
I have a feeling that the answer is blindingly obvious, but I can't
figure it out...
The 'users' file consists of:
DEFAULT Auth-Type = Accept
Simultaneous-Use := 1
In radiusd.conf I also have:
session {
sql
}
authorize {
radius-user-auth
}
'radius-user-auth'
On Monday 25 June 2007 11:42:08 Josh Howlett wrote:
I have a feeling that the answer is blindingly obvious, but I can't
figure it out...
The 'users' file consists of:
DEFAULT Auth-Type = Accept
Simultaneous-Use := 1
Simultaneous-Use is a check item, not a reply item.
On Monday 25 June 2007 11:42:08 Josh Howlett wrote:
I have a feeling that the answer is blindingly obvious, but I can't
figure it out...
The 'users' file consists of:
DEFAULT Auth-Type = Accept
Simultaneous-Use := 1
Because Simultaneous-Use is in the wrong place.
Dear all,
We has the problem regarding the above subject...
mysql select * from radgroupcheck;
++---+--++---+
| id | GroupName | Attribute| op | Value |
++---+--++---+
| 1 | POSTPAID | Simultaneous-Use | == | 1
Hi,
On Thu, Apr 12, 2007 at 07:14:48AM +, PD wrote:
Dear all,
We has the problem regarding the above subject...
mysql select * from radgroupcheck;
++---+--++---+
| id | GroupName | Attribute| op | Value |
On 4/12/2007, Milan Holub [EMAIL PROTECTED] wrote:
Hi,
On Thu, Apr 12, 2007 at 07:14:48AM +, PD wrote:
Dear all,
We has the problem regarding the above subject...
mysql select * from radgroupcheck;
++---+--++---+
| id | GroupName | Attribute|
On 4/12/2007, Milan Holub [EMAIL PROTECTED] wrote:
.cut...
== I believe you have a typo in the tables:
radgroupcheck: groupname=POSTPAID
usergroup: groupname=POSPAID
I still have another problem...
many of radacct table records are incompleted.
We know the user already disconnected (even by click
On Thu, Apr 12, 2007 at 07:42:16AM +, PD wrote:
I still have another problem...
many of radacct table records are incompleted.
We know the user already disconnected (even by click logout botton or
just shut his/her computer down), but the information did not saved.
At Radacct table,
Operator should be :=. Check first that you have sql checking enabled in
radiusd.conf:
# Session database, used for checking Simultaneous-Use. Either the
radutmp
# or rlm_sql module can handle this.
# The rlm_sql module is *much* faster
session {
# radutmp
#
# See
Dana 12/4/2007, PD [EMAIL PROTECTED] piše:
snip
+ what cause of this problem ?
snip
Either NAS thinks that users are still connected or your RADIUS server is
not receiving Stop packages. If NAS (NAS not radacct table) shows users
as connected you can add Idle-Timeout of about 5 minutes in user
On 4/12/2007, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote:
+ what cause of this problem ?
Either NAS thinks that users are still connected or your RADIUS server is
not receiving Stop packages. If NAS (NAS not radacct table) shows users
as connected you can add Idle-Timeout of about 5 minutes in
On 4/12/2007, Milan Holub [EMAIL PROTECTED] wrote:
== is Accounting-STOP reaching your radius?
you can find out by running in debug mode: freeradius -X
== is the correct query run on your database? check accounting_ queries in
your sql/mysql-dialup.conf
* check your DB log files: eg. with mysql:
If you are happy with reliability then fix checkrad and it will clean
these random drops. That is the utility that radiusd calls to check
stale entries and in sql.conf you can enable deletion of such entries.
Just make sure that such users are not listed as active by the hotspot.
If NAS thinks
I have faceing same problem when some time NAS send ACCT-STOP packet and packet
would be lost then user session would be open and next time whne user try to
login he/she got error multilogin so that i have implement checkrad.pl script
and check simultaneouse users through SNMP and it is working
checkrad work only for simultaneous detection not fix my stop time entry in sql
it is possible to modify checkrad to fix sql stop time in radacct table ?
[EMAIL PROTECTED] wrote: If you are happy with reliability then fix checkrad
and it will clean
these random drops. That is the utility that
for a temp fix I would make your perl script ping said ip before
checking for idle (perhaps a sleep timer) or you could simply have
each supposed active ip pinged every 1 - 2 minutes by a seperate perl
script.
Would you mind posting your checkrad.pl script, Im a perl hacker myself :)
On 4/12/07,
No. Idle-Timeout will work if NAS doesn't realize that user is not
online any more. It doesn't help if stop packets are lost. Only
checkrad or such routines that check user status with NAS will help
there.
Ivan Kalik
Kalik Informatika ISP
Dana 12/4/2007, satish patel [EMAIL PROTECTED] piše:
I
There is a line in (my)sql.conf:
# Remove stale session if checkrad does not see a double login
deletestalesessions = yes
that enables it. I don't know if there is such an entry in mssql.conf.
Ivan Kalik
Kalik Informatika ISP
Dana 12/4/2007, satish patel [EMAIL PROTECTED] piše:
authentication. It currently is working to do this.
We use freeradius with mysql. I am having problems with users dialing into
the system more then once from more then one location at the sometime. I.E
a simultaneous use problem. I cannot check against the NAS because we don't
have our own nases
To: freeradius-users@lists.freeradius.org
Subject: Re: Simultaneous-Use Problem
On 7/28/05, Jeremy Kenney [EMAIL PROTECTED] wrote:
I have posted this twice now I was wondering if someone would be kind
enough
to possibly answer it
Hello,
I am a very frustrated free radius user at this point. It's
Jeremy Kenney [EMAIL PROTECTED] wrote:
Yes but what I want is for the radius server to check the accounting logs
for a session already in progress and send a access reject if its already
there
I responded to this yesterday. Do you read the list?
Read doc/Simultaneous-Use
Alan DeKok.
freeradius with mysql. I am having problems with users dialing into
the system more then once from more then one location at the sometime. I.E
a simultaneous use problem. I cannot check against the NAS because we dont
have our own nases and are doing pass-thru radius authentication.
I need to do
Do You Yahoo!?
La mejor conexión a Internet y 2GB extra a tu correo por $100 al mes. http://net.yahoo.com.mx
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
I need your help
I want to limit the number of times one user account can login;
I have next in the user file:
wireless User-Password == "wireless", Simultaneous-Use := 1 Aruba-User-Role = "STAFF"
But de user "wireless" can login moreof one times
How can i solve this problem?
Thanks in
Hi everybody.
I got a simple question about the Simultaneous-Use parameter.
We use freeradius for accounting of our ppp server. it work's fine at the
moment but from now on i want to restrict users to only one or two
simultanous logins.
So i implemented the Simultaneous-Use parameter to the
38 matches
Mail list logo
