Re: checkrad, check_with_nas, and sql

2005-03-29 Thread Jason Frisvold
On Tue, 29 Mar 2005 14:36:42 -0500, Alan DeKok <[EMAIL PROTECTED]> wrote: > I believe it is. See src/modules/rlm_sql/rlm_sql.c, which calls > rad_check_ts(). Yup, I definitely see that.. And now that I'm digging deeper, I'm seeing the problem.. *sigh* So here's what I'm guessing is going on.

Re: checkrad, check_with_nas, and sql

2005-03-29 Thread Chris Knipe
If a utmp is in place, in the above occurance, checkrad would be called which will verify that the user is NOT logged into the NAS, and thus will allow the auth. You will however still sit with the stale accounting records in SQL No. See src/main/session.c. If the user is no longer logged in, t

Re: checkrad, check_with_nas, and sql

2005-03-29 Thread Alan DeKok
"Chris Knipe" <[EMAIL PROTECTED]> wrote: > In this situation, the correct approach would be for checkrad to be > called from FR yes - something, which for some reason it is not > doing. It should, but I'm not sure why. > If a utmp is in place, in the above occurance, checkrad would be called >

Re: checkrad, check_with_nas, and sql

2005-03-29 Thread Jason Frisvold
On Tue, 29 Mar 2005 21:18:06 +0200, Chris Knipe <[EMAIL PROTECTED]> wrote: > Again, I am guessing this is incomplete code (at this stage). > you manually reset all the SQL acocunting records)... I hope I'm making > sense... Yup.. seems clear anough.. > Again, IMHO checkrad should be called

Re: checkrad, check_with_nas, and sql

2005-03-29 Thread Chris Knipe
It may actually be a good idea to get checkrad to be called if utmp *OR* SQL thinks a user is loged in twice But that will require some source hacking I think. I guess I don't understand the purpose of the simul checks in the sql.conf file then.. If utmp is the only thing that checks for simu

Re: checkrad, check_with_nas, and sql

2005-03-29 Thread Jason Frisvold
On Tue, 29 Mar 2005 20:58:45 +0200, Chris Knipe <[EMAIL PROTECTED]> wrote: > You must run utmp. Even if it is just for simul. use. You can stil have > all your accounting in SQL instead of detailed files, but utmp must be there > for checkrad. Ugh.. So, if my primary radius server fails to back

Re: checkrad, check_with_nas, and sql

2005-03-29 Thread Chris Knipe
I don't have radutmp enabled. I noticed, however, in the radutmp module definition, the check_with_nas option. It appears that this causes the checkrad program to be called. If radutmp is not enabled, checkrad isn't called.. I think. To my knowledge, checkrad is never called if utmp isn't avail

checkrad, check_with_nas, and sql

2005-03-29 Thread Jason Frisvold
Wow.. today seems to be the day I sent a lot of mail to the freeradius list.. :) Hopefully an answer to this will finish off what I need to accomplish... :) In my radiusd.conf file, I have enabled sql for simultaneous use checking : session { sql } I don't have radutmp enabled. I not