Hello Dmitry -
On Tue, 25 Jan 2000, Dmitry Niqiforoff wrote:
> Hello!
>
> I've been trying to use SNMP method of checking NASes if user still
> online, but it doesn't work. I set up my USR TC to answer on SNMP
> requests, and it does work if I say "snmpget usr radcheck <mib>". But
> when I set up RADIATOR to use SNMP - it just doesn't work. I set up a
> CLIENT section:
>
> SnmpgetProg /usr/bin/snmpget
> <Client 195.128.153.228>
> Secret secret
> IgnoreAcctSignature
> NoIgnoreDuplicates Access-Request
> NasType TotalControlSNMP
> SNMPCommunity radcheck
> </Client>
>
> and ran "tcpdump -n -i eth0 port 161" to see if there is any activity
> on SNMP port. There is no any activity. I tried to set up a Client
> section for my Cisco 3640 - the same effect (i.e. no effect at all).
>
I don't think you are doing anything wrong, but perhaps it isn't clear what
should happen with Simultaneous-Use.
The first thing is you have to specify is a NasType for the Client - you have
done this. Then you have to somehow tell Radiator to check the number of
sessions that a user is allowed. You do this with one or the other of
MaxSessions, DefaultSimultaneousUse or a per-user Simultaneous-Use check item.
Once the Sim-Use checking is configured, Radiator will only check the existing
sessions that the Session Database has for a user if that user is going to
exceed his Sim-Use limit. In other words, Radiator only checks the NAS if it
absolutely has to, not every time.
Hope this clarifies things.
cheers
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
