No different with only using sql in session { }.

It really seems like this line in the radutmp "modules" file is not being executed:

        check_with_nas = yes

But from radiusd -X, it does seem to be:

 Module: Checking session {...} for more modules to load
 Module: Linked to module rlm_radutmp
 Module: Instantiating radutmp
  radutmp {
        filename = "/var/log/radius/radutmp"
        username = "%{User-Name}"
        case_sensitive = yes
        check_with_nas = yes
        perm = 384
        callerid = yes

Stumped still....

-dan

On 6/3/11 5:49 AM, Dan Brisson wrote:
George,

Sorry, I had commented out the simul_verify_query as a troubleshooting step but actually do have it uncommented at this point, but it still won't work.

I checked radiusd.conf and found this:

#  The program to execute to do concurrency checks.
checkrad = ${sbindir}/checkrad

Re: radutmp vs. sql, good question.  I will try with only sql active.

Thanks,
-dan

On 6/3/11 3:58 AM, George Chelidze wrote:
On 06/03/2011 03:59 AM, Dan Brisson wrote:

# simul_verify_query = "SELECT radacctid, acctsessionid, username, \
# nasipaddress, nasportid, framedipaddress, \
# callingstationid, framedprotocol \
# FROM ${acct_table1} \
# WHERE username = '%{SQL-User-Name}' \
# AND acctstoptime IS NULL"

as your verify_query is commented out, it will never check it with nas, just compare result of count_query with configured max value (1 in your case), so uncomment it.

sites-enabled/default:
# Session database, used for checking Simultaneous-Use. Either the radutmp
# or rlm_sql module can handle this.
# The rlm_sql module is *much* faster
session {
radutmp

#
# See "Simultaneous Use Checking Queries" in sql.conf
sql
}

Do you really need both?

modules/perl:
func_checksimul = checksimul

I would enable checkrad statement in radiusd.conf as it seems to be used with radutmp/sql modules for sumult checks.

Best Regards,

George Chelidze
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to