Instead of spending all that time with the checklogin.pl script, I'm
wondering if there's any issue with finding duplicate logins via the
following:
A user attempts to login -- but there's already a record of login for that
user.
I grab that IP address that it says they're on, and see if anyone with a
newer session is on it.
If there is no one newer on that session, I ping the address to see if
it's alive. If I get a response, I disallow access. If I don't, I allow
access.
Customers who block pings are few and far between and would get caught
rather quickly by my dupe login script, and as such, would be dealt with a
one-by-one basis, and is not a concern.
Am I missing anything?
Regards,
Justin Wheeler
-- Computer programmer (n): Red-eyed mammal capable of communicating with
electronics and inanimate equipment.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
