If it matters I do get the start and stop packet in the first situation
described below. I just get many of them that have different start and stop
times with a higher delay time so my radius logs show several start or stop
packets for a single login. It doesn't do this all the time. I wonder if
they could have a backup server that is misconfigured?
I'll talk to GlobalPOP about that.
Bill Dunn
----- Original Message -----
From: Alan DeKok
To: [EMAIL PROTECTED]
Sent: Thursday, June 03, 2004 1:56 PM
Subject: Re: Proxy with GlobalPOP
"Bill" <[EMAIL PROTECTED]> wrote:
> My Radius accounting keeps receiving the same Start or Stop packet
> many times. It always has the same information in it (Session-ID,
> username, IP address, etc..) except the start or stop times are
> slightly different.
It looks like the shared secret is wrong. When that happens, the
client gets an Accounting-Response, but doesn't believe it, and
re-sends the Accounting-Request.
> I thought Radius was supposed to verify that a customer was connected
in
> order to deny a login for Multiple Logins. We are able to do this with our
> own network of PM3, TNT and TCs but when using GlobalPOP we cannot do
that.
Exactly. Your RADIUS server can't ask the GlobalPOP NASes if the
user is still logged in.
> I'm using FreeRadius 0.9.3 and never had this kind of problem before
and
> we use this same server with realm with many other ISPs for authenticating
> our SlipStream ISP customers. Only with GlobalPOP it's the reverse
situation
> where they run the proxy and we are the final authenticator.
Check the shared secrets.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
