Hello,
Radiator enforces the _most_restrictive_ of MaxSessions (for the realm) and
Simultaneous-Use (for a user)
I think that explains what you are seeing?
On Mar 22, 11:50am, True Communications Corp. wrote:
> Subject: (RADIATOR) Simultaneous-Use!!!
>
> Hello,
>
> I am trying to install Radiator on an IRIX 6.4 machine with a combination of
> USR / cisco servers, and I have ran into the following problem. Any feedback
> will be appreciated.
>
> I have setup Radiator to use an Authby FILE module, with MaximumSession
> defined to 1 as the default for all users in the users file. I was under the
> impression
> that you can override the default for any of the users by using the
> Simultaneous-Use
> attribute in the users file. Which is exactly what I did.
>
> Originally I kept getting the following error when using the generic
dictionary:
>
> ----> WARNING: Simultaneous-Use (no such attribute)
>
> I added the following line to the dictionary:
>
> ---> ATTRIBUTE Simultaneous-Use 1034 integer
>
> and though radiator does not complain about the attribute not being defined
any
> more. It seems that it is ignoring it and still inforcing the Maximum session
on
> all
> users. and I am still getting
>
> ---> INFO: Access rejected for uername: MaxSessions exceeded
>
>
> Thank you in advance.
>
> -Radwan Khalil
> -True Communications Corporation
>
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
>
> this is what is being logged now:
> ----------------------
>
> Mon Mar 22 17:29:36 1999: DEBUG: Packet dump:
> *** Received from xxx.xxx.xxx.xxx port 1645 ....
> Code: Access-Request
> Identifier: 255
> Authentic: <24><162><18><249>k<199><243><6>.jX<14>1y<188><226>
> Attributes:
> NAS-IP-Address = xxx.xxx.xxx.xxx
> NAS-Port = 8
> NAS-Port-Type = Async
> User-Name = "username"
>
> Mon Mar 22 17:29:36 1999: DEBUG: Handling request with Handler 'Realm=cisco'
> Mon Mar 22 17:29:36 1999: DEBUG: Handling with Radius::AuthFILE
> Mon Mar 22 17:29:36 1999: DEBUG: Radius::AuthFILE looks for match with
username
> Mon Mar 22 17:29:36 1999: DEBUG: Handling with Radius::AuthSYSTEM
> Mon Mar 22 17:29:36 1999: DEBUG: Radius::AuthSYSTEM looks for match with
username
>
> Mon Mar 22 17:29:36 1999: DEBUG: Radius::AuthSYSTEM ACCEPT:
> Mon Mar 22 17:29:36 1999: DEBUG: Radius::AuthFILE ACCEPT:
> Mon Mar 22 17:29:36 1999: DEBUG: Access accepted for username
> Mon Mar 22 17:29:36 1999: DEBUG: Packet dump:
>
> *** Sending to 208.142.211.6 port 1645 ....
> Code: Access-Accept
> Identifier: 255
> Authentic: <24><162><18><249>k<199><243><6>.jX<14>1y<188><226>
> Attributes:
> Framed-IP-Address = yyy.yyy.yyy.yyy
>
>
>
> The following is a part of the Config file:
> -------------------------
>
> <Client xxx.xxx.xxx.xxx>
> Secret mysecret
> NasType unknown
> DefaultRealm cisco
> </Client>
>
> <Realm cisco>
> MaxSessions 1
> AcctLogFileName %L/log/%c/detail
> RejectHasReason
> <AuthBy FILE>
> Filename %D/users.cisco
> </AuthBy>
> </Realm>
>
> <AuthBy SYSTEM>
> Identifier System
> </AuthBy>
>
>
> The following is part of the users.cisco file
> ---------------------------
>
> username Auth-Type = System
> Simultaneous-Use = 2
> Service-Type = Framed-User,
> Framed-Protocol = PPP,
> Framed-IP-Address = yyy.yyy.yyy.yyy,
> Framed-IP-Netmask = 255.255.255.255,
> Framed-Routing = None,
> Framed-Compression = Van-Jacobsen-TCP-IP,
> Framed-MTU = 1500,
> Session-Timeout = 0
>
>
>
>
>
> ===
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
>-- End of excerpt from True Communications Corp.
--
Mike McCauley [EMAIL PROTECTED]
Open System Consultants Pty. Ltd Unix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia Consulting and development
Phone, Fax: +61 3 9598-0985 http://www.open.com.au
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, external, etc etc on Unix, Win95/8, NT, Rhapsody
===
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
