At 18:47 31/10/99 +1000, Mike McCauley wrote:
>Hello John,
>
>if they try to authenticate with TimLeft less than 0, I would expect to see
>thme rejected with a DEBUG message like:
>
>User $name has no more time left
>
>Is that what you are seeing?

No, sadly not. :-(

They get logged off when timeleft goes below the Zero minutes but then they 
can login again.

Here is the logfile at Trace 4.

Mon Nov  1 14:39:13 1999: DEBUG: Packet dump:
*** Received from 203.96.58.18 port 32812 ....
Code:       Access-Request
Identifier: 194
Authentic:  <3>\8<213>b<2><188><186><246><29><168>9<206><229>3<128>
Attributes:
         User-Name = "jjcv2"
         CHAP-Password = "<1>t<197>j<144><<253><194><127>Fv`<147><145><30>PK"
         NAS-IP-Address = 203.96.58.17
         NAS-Port = 2095
         NAS-Port-Type = Async
         State = ""
         Called-Station-Id = "78686"
         Acct-Session-Id = "298128151"
         Ascend-Data-Rate = 28800
         Ascend-Xmit-Rate = 45333

Mon Nov  1 14:39:13 1999: DEBUG: Handling request with Handler 'Realm=DEFAULT'
Mon Nov  1 14:39:13 1999: DEBUG:  Deleting session for jjcv2, 203.96.58.17, 
2095
Mon Nov  1 14:39:13 1999: DEBUG: do query is: delete from RADONLINE where 
NASIDENTIFIER='203.96.58.17' and NASPORT=2095

Mon Nov  1 14:39:13 1999: DEBUG: Handling with Radius::AuthEMERALD
Mon Nov  1 14:39:13 1999: DEBUG: Handling with Radius::AuthEMERALD
Mon Nov  1 14:39:13 1999: DEBUG: Query is: select DateAdd(Day, 
ma.extension, maExpireDate),
DateAdd(Day, sa.extension, saExpireDate), sa.AccountID, sa.AccountType,
sa.password, sa.login, sa.shell, sa.TimeLeft ,sa.LoginLimit
from masteraccounts ma, subaccounts sa
where (sa.login = 'jjcv2' or sa.shell = 'jjcv2')
and ma.customerid = sa.customerid
and sa.active <> 0 and ma.active <> 0

Mon Nov  1 14:39:13 1999: DEBUG: Select results: Dec 31 1999 12:00AM, Dec 
31 1999 12:00AM, 7714, PPP, xxxxxx, jjcv2,  , -20, 1
Mon Nov  1 14:39:13 1999: DEBUG: User jjcv2 has no more time left
Mon Nov  1 14:39:13 1999: DEBUG: Radius::AuthEMERALD looks for match with jjcv2
Mon Nov  1 14:39:13 1999: DEBUG: Query is: select DateAdd(Day, 
ma.extension, maExpireDate),
DateAdd(Day, sa.extension, saExpireDate), sa.AccountID, sa.AccountType,
sa.password, sa.login, sa.shell, sa.TimeLeft ,sa.LoginLimit
from masteraccounts ma, subaccounts sa
where (sa.login = 'DEFAULT' or sa.shell = 'DEFAULT')
and ma.customerid = sa.customerid
and sa.active <> 0 and ma.active <> 0

Mon Nov  1 14:39:13 1999: DEBUG: Handling with Radius::AuthFILE
Mon Nov  1 14:39:13 1999: DEBUG: Radius::AuthFILE looks for match with jjcv2
Mon Nov  1 14:39:13 1999: DEBUG: Radius::AuthFILE ACCEPT:
Mon Nov  1 14:39:13 1999: DEBUG: Access accepted for jjcv2
Mon Nov  1 14:39:13 1999: DEBUG: Packet dump:
*** Sending to 203.96.58.18 port 32812 ....
Code:       Access-Accept
Identifier: 194
Authentic:  <3>\8<213>b<2><188><186><246><29><168>9<206><229>3<128>
Attributes:
         Framed-IP-Netmask = 255.255.255.255
         Service-Type = Framed
         Framed-Protocol = PPP
         Idle-Timeout = 1200
         Framed-Compression = Van-Jacobsen-TCP-IP


Mon Nov  1 14:39:14 1999: DEBUG: Packet dump:
*** Received from 203.96.58.18 port 32812 ....
Code:       Accounting-Request
Identifier: 195
Authentic:  <165><15><211>U<171><0>(<2><1><21><171><235><196>F<186><163>
Attributes:
         User-Name = "jjcv2"
         NAS-IP-Address = 203.96.58.17
         NAS-Port = 2095
         NAS-Port-Type = Async
         Acct-Status-Type = Start
         Acct-Delay-Time = 0
         Acct-Session-Id = "298128151"
         Acct-Authentic = RADIUS
         Ascend-Multilink-ID = 974193034
         Ascend-Num-In-Multilink = 1
         Acct-Link-Count = "<0><0><0><1>"
         Acct-Multi-Session-Id = "3a11018a"
         Ascend-Modem-PortNo = 34
         Ascend-Modem-SlotNo = 11
         Ascend-Modem-ShelfNo = 1
         Called-Station-Id = "78686"
         Framed-Protocol = 262
         Framed-IP-Address = 203.96.49.67
         Timestamp = 941420219

Mon Nov  1 14:39:14 1999: DEBUG: Handling request with Handler 'Realm=DEFAULT'
Mon Nov  1 14:39:14 1999: DEBUG:  Adding session for jjcv2, 203.96.58.17, 2095
Mon Nov  1 14:39:14 1999: DEBUG: do query is: delete from RADONLINE where 
NASIDENTIFIER='203.96.58.17' and NASPORT=2095

Mon Nov  1 14:39:14 1999: DEBUG: do query is: insert into RADONLINE 
(USERNAME, NASIDENTIFIER, NASPORT, ACCTSESSIONID, TIME_STAMP, 
FRAMEDIPADDRESS, NASPORTTYPE, SERVICETYPE) values ('jjcv2', '203.96.58.17', 
2095, '298128151', 941420219, '203.96.49.67', 'Async', '')

Mon Nov  1 14:39:14 1999: DEBUG: Handling with Radius::AuthEMERALD
Mon Nov  1 14:39:14 1999: DEBUG: Handling accounting with Radius::AuthEMERALD
Mon Nov  1 14:39:14 1999: DEBUG: do query is: insert into Calls
                 (UserName, CallDate, AcctStatusType, AcctDelayTime, 
AcctSessionId, NASIdentifier, NASPort)
                 values
                 ('jjcv2', 'Nov 1, 1999 14:36', 1, 0, '298128151', 
'203.96.58.17', 2095)

Mon Nov  1 14:39:14 1999: DEBUG: Accounting accepted
Mon Nov  1 14:39:14 1999: DEBUG: Packet dump:
*** Sending to 203.96.58.18 port 32812 ....
Code:       Accounting-Response
Identifier: 195
Authentic:  <165><15><211>U<171><0>(<2><1><21><171><235><196>F<186><163>
Attributes:

Mon Nov  1 14:39:43 1999: DEBUG: Packet dump:
*** Received from 203.96.58.18 port 32812 ....
Code:       Accounting-Request
Identifier: 209
Authentic:  <205>Fk<251><163>><169>L<132><244>R2<11><219>~K
Attributes:
         User-Name = "jjcv2"
         NAS-IP-Address = 203.96.58.17
         NAS-Port = 2095
         NAS-Port-Type = Async
         Acct-Status-Type = Stop
         Acct-Delay-Time = 0
         Acct-Session-Id = "298128151"
         Acct-Authentic = RADIUS
         Acct-Session-Time = 29
         Acct-Input-Octets = 717
         Acct-Output-Octets = 506
         Acct-Input-Packets = 19
         Acct-Output-Packets = 11
         Ascend-Disconnect-Cause = remoteEndHungup
         Ascend-Connect-Progress = prLanSessionUp
         Ascend-Xmit-Rate = 45333
         Ascend-Data-Rate = 28800
         Ascend-PreSession-Time = 25
         Ascend-Pre-Input-Octets = 535
         Ascend-Pre-Output-Octets = 506
         Ascend-Pre-Input-Packets = 12
         Ascend-Pre-Output-Packets = 11
         Ascend-First-Dest = 202.27.156.70
         Ascend-Multilink-ID = 974193034
         Ascend-Num-In-Multilink = 0
         Acct-Link-Count = "<0><0><0><1>"
         Acct-Multi-Session-Id = "3a11018a"
         Ascend-Modem-PortNo = 34
         Ascend-Modem-SlotNo = 11
         Ascend-Modem-ShelfNo = 1
         Called-Station-Id = "78686"
         Framed-Protocol = 262
         Framed-IP-Address = 203.96.49.67
         Timestamp = 941420248

Mon Nov  1 14:39:43 1999: DEBUG: Handling request with Handler 'Realm=DEFAULT'
Mon Nov  1 14:39:43 1999: DEBUG:  Deleting session for jjcv2, 203.96.58.17, 
2095
Mon Nov  1 14:39:43 1999: DEBUG: do query is: delete from RADONLINE where 
NASIDENTIFIER='203.96.58.17' and NASPORT=2095

Mon Nov  1 14:39:43 1999: DEBUG: Handling with Radius::AuthEMERALD
Mon Nov  1 14:39:43 1999: DEBUG: Handling accounting with Radius::AuthEMERALD
Mon Nov  1 14:39:43 1999: DEBUG: do query is: insert into Calls
                 (UserName, CallDate, AcctStatusType, AcctDelayTime, 
AcctInputOctets, AcctOutputOctets, AcctSessionId, AcctSessionTime, 
AcctTerminateCause, NASIdentifier, NASPort)
                 values
                 ('jjcv2', 'Nov 1, 1999 14:37', 2, 0, 717, 506, 
'298128151', 29, 185, '203.96.58.17', 2095)

Mon Nov  1 14:39:43 1999: DEBUG: Accounting accepted
Mon Nov  1 14:39:43 1999: DEBUG: Packet dump:
*** Sending to 203.96.58.18 port 32812 ....
Code:       Accounting-Response
Identifier: 209
Authentic:  <205>Fk<251><163>><169>L<132><244>R2<11><219>~K
Attributes:


Cheers
John
--
John Vorstermans                        ||    We are what we repeatedly do.
Technical Manager                       ||         - Aristotle
Actrix Networks

===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

Reply via email to