At 18:47 31/10/99 +1000, Mike McCauley wrote:
>Hello John,
>
>if they try to authenticate with TimLeft less than 0, I would expect to see
>thme rejected with a DEBUG message like:
>
>User $name has no more time left
>
>Is that what you are seeing?
No, sadly not. :-(
They get logged off when timeleft goes below the Zero minutes but then they
can login again.
Here is the logfile at Trace 4.
Mon Nov 1 14:39:13 1999: DEBUG: Packet dump:
*** Received from 203.96.58.18 port 32812 ....
Code: Access-Request
Identifier: 194
Authentic: <3>\8<213>b<2><188><186><246><29><168>9<206><229>3<128>
Attributes:
User-Name = "jjcv2"
CHAP-Password = "<1>t<197>j<144><<253><194><127>Fv`<147><145><30>PK"
NAS-IP-Address = 203.96.58.17
NAS-Port = 2095
NAS-Port-Type = Async
State = ""
Called-Station-Id = "78686"
Acct-Session-Id = "298128151"
Ascend-Data-Rate = 28800
Ascend-Xmit-Rate = 45333
Mon Nov 1 14:39:13 1999: DEBUG: Handling request with Handler 'Realm=DEFAULT'
Mon Nov 1 14:39:13 1999: DEBUG: Deleting session for jjcv2, 203.96.58.17,
2095
Mon Nov 1 14:39:13 1999: DEBUG: do query is: delete from RADONLINE where
NASIDENTIFIER='203.96.58.17' and NASPORT=2095
Mon Nov 1 14:39:13 1999: DEBUG: Handling with Radius::AuthEMERALD
Mon Nov 1 14:39:13 1999: DEBUG: Handling with Radius::AuthEMERALD
Mon Nov 1 14:39:13 1999: DEBUG: Query is: select DateAdd(Day,
ma.extension, maExpireDate),
DateAdd(Day, sa.extension, saExpireDate), sa.AccountID, sa.AccountType,
sa.password, sa.login, sa.shell, sa.TimeLeft ,sa.LoginLimit
from masteraccounts ma, subaccounts sa
where (sa.login = 'jjcv2' or sa.shell = 'jjcv2')
and ma.customerid = sa.customerid
and sa.active <> 0 and ma.active <> 0
Mon Nov 1 14:39:13 1999: DEBUG: Select results: Dec 31 1999 12:00AM, Dec
31 1999 12:00AM, 7714, PPP, xxxxxx, jjcv2, , -20, 1
Mon Nov 1 14:39:13 1999: DEBUG: User jjcv2 has no more time left
Mon Nov 1 14:39:13 1999: DEBUG: Radius::AuthEMERALD looks for match with jjcv2
Mon Nov 1 14:39:13 1999: DEBUG: Query is: select DateAdd(Day,
ma.extension, maExpireDate),
DateAdd(Day, sa.extension, saExpireDate), sa.AccountID, sa.AccountType,
sa.password, sa.login, sa.shell, sa.TimeLeft ,sa.LoginLimit
from masteraccounts ma, subaccounts sa
where (sa.login = 'DEFAULT' or sa.shell = 'DEFAULT')
and ma.customerid = sa.customerid
and sa.active <> 0 and ma.active <> 0
Mon Nov 1 14:39:13 1999: DEBUG: Handling with Radius::AuthFILE
Mon Nov 1 14:39:13 1999: DEBUG: Radius::AuthFILE looks for match with jjcv2
Mon Nov 1 14:39:13 1999: DEBUG: Radius::AuthFILE ACCEPT:
Mon Nov 1 14:39:13 1999: DEBUG: Access accepted for jjcv2
Mon Nov 1 14:39:13 1999: DEBUG: Packet dump:
*** Sending to 203.96.58.18 port 32812 ....
Code: Access-Accept
Identifier: 194
Authentic: <3>\8<213>b<2><188><186><246><29><168>9<206><229>3<128>
Attributes:
Framed-IP-Netmask = 255.255.255.255
Service-Type = Framed
Framed-Protocol = PPP
Idle-Timeout = 1200
Framed-Compression = Van-Jacobsen-TCP-IP
Mon Nov 1 14:39:14 1999: DEBUG: Packet dump:
*** Received from 203.96.58.18 port 32812 ....
Code: Accounting-Request
Identifier: 195
Authentic: <165><15><211>U<171><0>(<2><1><21><171><235><196>F<186><163>
Attributes:
User-Name = "jjcv2"
NAS-IP-Address = 203.96.58.17
NAS-Port = 2095
NAS-Port-Type = Async
Acct-Status-Type = Start
Acct-Delay-Time = 0
Acct-Session-Id = "298128151"
Acct-Authentic = RADIUS
Ascend-Multilink-ID = 974193034
Ascend-Num-In-Multilink = 1
Acct-Link-Count = "<0><0><0><1>"
Acct-Multi-Session-Id = "3a11018a"
Ascend-Modem-PortNo = 34
Ascend-Modem-SlotNo = 11
Ascend-Modem-ShelfNo = 1
Called-Station-Id = "78686"
Framed-Protocol = 262
Framed-IP-Address = 203.96.49.67
Timestamp = 941420219
Mon Nov 1 14:39:14 1999: DEBUG: Handling request with Handler 'Realm=DEFAULT'
Mon Nov 1 14:39:14 1999: DEBUG: Adding session for jjcv2, 203.96.58.17, 2095
Mon Nov 1 14:39:14 1999: DEBUG: do query is: delete from RADONLINE where
NASIDENTIFIER='203.96.58.17' and NASPORT=2095
Mon Nov 1 14:39:14 1999: DEBUG: do query is: insert into RADONLINE
(USERNAME, NASIDENTIFIER, NASPORT, ACCTSESSIONID, TIME_STAMP,
FRAMEDIPADDRESS, NASPORTTYPE, SERVICETYPE) values ('jjcv2', '203.96.58.17',
2095, '298128151', 941420219, '203.96.49.67', 'Async', '')
Mon Nov 1 14:39:14 1999: DEBUG: Handling with Radius::AuthEMERALD
Mon Nov 1 14:39:14 1999: DEBUG: Handling accounting with Radius::AuthEMERALD
Mon Nov 1 14:39:14 1999: DEBUG: do query is: insert into Calls
(UserName, CallDate, AcctStatusType, AcctDelayTime,
AcctSessionId, NASIdentifier, NASPort)
values
('jjcv2', 'Nov 1, 1999 14:36', 1, 0, '298128151',
'203.96.58.17', 2095)
Mon Nov 1 14:39:14 1999: DEBUG: Accounting accepted
Mon Nov 1 14:39:14 1999: DEBUG: Packet dump:
*** Sending to 203.96.58.18 port 32812 ....
Code: Accounting-Response
Identifier: 195
Authentic: <165><15><211>U<171><0>(<2><1><21><171><235><196>F<186><163>
Attributes:
Mon Nov 1 14:39:43 1999: DEBUG: Packet dump:
*** Received from 203.96.58.18 port 32812 ....
Code: Accounting-Request
Identifier: 209
Authentic: <205>Fk<251><163>><169>L<132><244>R2<11><219>~K
Attributes:
User-Name = "jjcv2"
NAS-IP-Address = 203.96.58.17
NAS-Port = 2095
NAS-Port-Type = Async
Acct-Status-Type = Stop
Acct-Delay-Time = 0
Acct-Session-Id = "298128151"
Acct-Authentic = RADIUS
Acct-Session-Time = 29
Acct-Input-Octets = 717
Acct-Output-Octets = 506
Acct-Input-Packets = 19
Acct-Output-Packets = 11
Ascend-Disconnect-Cause = remoteEndHungup
Ascend-Connect-Progress = prLanSessionUp
Ascend-Xmit-Rate = 45333
Ascend-Data-Rate = 28800
Ascend-PreSession-Time = 25
Ascend-Pre-Input-Octets = 535
Ascend-Pre-Output-Octets = 506
Ascend-Pre-Input-Packets = 12
Ascend-Pre-Output-Packets = 11
Ascend-First-Dest = 202.27.156.70
Ascend-Multilink-ID = 974193034
Ascend-Num-In-Multilink = 0
Acct-Link-Count = "<0><0><0><1>"
Acct-Multi-Session-Id = "3a11018a"
Ascend-Modem-PortNo = 34
Ascend-Modem-SlotNo = 11
Ascend-Modem-ShelfNo = 1
Called-Station-Id = "78686"
Framed-Protocol = 262
Framed-IP-Address = 203.96.49.67
Timestamp = 941420248
Mon Nov 1 14:39:43 1999: DEBUG: Handling request with Handler 'Realm=DEFAULT'
Mon Nov 1 14:39:43 1999: DEBUG: Deleting session for jjcv2, 203.96.58.17,
2095
Mon Nov 1 14:39:43 1999: DEBUG: do query is: delete from RADONLINE where
NASIDENTIFIER='203.96.58.17' and NASPORT=2095
Mon Nov 1 14:39:43 1999: DEBUG: Handling with Radius::AuthEMERALD
Mon Nov 1 14:39:43 1999: DEBUG: Handling accounting with Radius::AuthEMERALD
Mon Nov 1 14:39:43 1999: DEBUG: do query is: insert into Calls
(UserName, CallDate, AcctStatusType, AcctDelayTime,
AcctInputOctets, AcctOutputOctets, AcctSessionId, AcctSessionTime,
AcctTerminateCause, NASIdentifier, NASPort)
values
('jjcv2', 'Nov 1, 1999 14:37', 2, 0, 717, 506,
'298128151', 29, 185, '203.96.58.17', 2095)
Mon Nov 1 14:39:43 1999: DEBUG: Accounting accepted
Mon Nov 1 14:39:43 1999: DEBUG: Packet dump:
*** Sending to 203.96.58.18 port 32812 ....
Code: Accounting-Response
Identifier: 209
Authentic: <205>Fk<251><163>><169>L<132><244>R2<11><219>~K
Attributes:
Cheers
John
--
John Vorstermans || We are what we repeatedly do.
Technical Manager || - Aristotle
Actrix Networks
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.