On Saturday 23 October 2004 12:03 am, gp wrote:
> Some users logging to our network have maximum connections. We set this
> thru the radius. But sometimes the radiusd still thinks users are still
> login. How do I kick somebody's radius login so that the count will
> refresh. One great example is I created a user login with one maximum
> connection but sometimes radiusd is  flaky it thinks that user login is
> still active where in fact he has logout already. Is there a way to find
> out who is still login  or  how do I  reset  a user login in Radius.
> Thanks for the help.
>
> glen

Hi Glen,

What specific radius server are you using?  Cistron radius and its derivatives  
has a built-in facility for checking and enforcing maximum simultaneous 
connections.

Whenever a user is suspected of multiple logins, the radius server queries the 
NAS (usually by SNMP), to find out if the user is still connected.  If it is 
still connected, radius then rejects the new login request.  On the other 
hand, if the user is no longer connected, radius removes the user from its 
list of currently connected users, and then accepts the new login request.

As for you other question about 'how to kick somebody's radius login', you can 
remove a user from radius' list of currently connected users using utilities 
like 'radzap', but that doesn't disconnect the user from the NAS.  

The method for actually kicking out a user's connection to a NAS varies 
depending on the NAS.  With some NASes, you can do this through SNMP, with 
others you'd have to telnet/ssh into the NAS and issue a command to reset the 
port where the user is connected.

HTH,
-eric
--
Philippine Linux Users' Group (PLUG) Mailing List
[EMAIL PROTECTED] (#PLUG @ irc.free.net.ph)
Official Website: http://plug.linux.org.ph
Searchable Archives: http://marc.free.net.ph
.
To leave, go to http://lists.q-linux.com/mailman/listinfo/plug
.
Are you a Linux newbie? To join the newbie list, go to
http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie

Reply via email to