Hi All,
I am trying already for a while to limit the number of sessions per user
allowed on a BAS. For some bizarre reason it doesn't work for me. I have
tried both "internal" session database as "external" session database. Has
somebody in this group successfully implemented limited access? If so, what
configuration has been used?
I would appreciate your support and advise very much,
Best regards Onno
Below the debug window of Radiator indicating that the user onno@ISP1
successfully logs in, while the simultaneous-use is set to one (1);
C:\Perl\Radius>perl radiusd -config_file rb-user.cfg
Thu Jan 11 16:41:20 2001: DEBUG: Reading users file ./users.cfg
Thu Jan 11 16:41:20 2001: INFO: Server started: Radiator 2.17.1 on OHNO
Thu Jan 11 16:41:27 2001: DEBUG: Packet dump:
************************************************* First session starts here
*******************************
*** Received from 100.1.1.10 port 1812 ....
Code: Access-Request
Identifier: 0
Authentic: <199>{<182><188>*<205><136><178><223><248>A<204><213><194><159>,
Attributes:
User-Name = "onno@ISP1"
CHAP-Password =
"<1><16><26><195>'z<163><197>y<213><163>^<196><19><252><
187><30>"
NAS-Identifier = "RedBack"
NAS-IP-Address = 100.1.1.10
Calling-Station-Id = "-RedBack-4/0"
RB-NAS-Real-Port = 536870913
Service-Type = Framed-User
Framed-Protocol = PPP
NAS-Port = 117440513
Acct-Session-Id = "07000001-3A5DD28E"
Thu Jan 11 16:41:27 2001: DEBUG: Handling request with Handler 'Realm=ISP1'
Thu Jan 11 16:41:27 2001: DEBUG: Deleting session for onno@ISP1,
100.1.1.10, 11
7440513
Thu Jan 11 16:41:27 2001: ERR: Attribute number 211 (vendor ) is not defined
in
your dictionary
Thu Jan 11 16:41:27 2001: DEBUG: Handling with Radius::AuthFILE
Thu Jan 11 16:41:27 2001: DEBUG: Radius::AuthFILE looks for match with
onno@ISP1
Thu Jan 11 16:41:27 2001: DEBUG: Radius::AuthFILE ACCEPT:
Thu Jan 11 16:41:27 2001: DEBUG: Access accepted for onno@ISP1
Thu Jan 11 16:41:27 2001: DEBUG: Packet dump:
*** Sending to 100.1.1.10 port 1812 ....
Code: Access-Accept
Identifier: 0
Authentic: <199>{<182><188>*<205><136><178><223><248>A<204><213><194><159>,
Attributes:
RB-Rate-Limit-Rate = 500
RB-Rate-Limit-Burst = 100000
Thu Jan 11 16:41:29 2001: DEBUG: Packet dump:
*** Received from 100.1.1.10 port 1812 ....
Code: Accounting-Request
Identifier: 0
Authentic: a<11>Hd<185><134><200><227>=R<168>/UGl<26>
Attributes:
User-Name = "onno@ISP1"
NAS-Identifier = "RedBack"
NAS-IP-Address = 100.1.1.10
Service-Type = Framed-User
Framed-Protocol = PPP
NAS-Port = 117440513
Calling-Station-Id = "-RedBack-4/0"
RB-NAS-Real-Port = 536870913
Acct-Session-Id = "07000001-3A5DD28E"
Acct-Authentic = 1
Framed-IP-Address = 50.1.1.2
Acct-Status-Type = 1
Thu Jan 11 16:41:29 2001: DEBUG: Handling request with Handler 'Realm=ISP1'
Thu Jan 11 16:41:29 2001: ERR: Attribute number 211 (vendor ) is not defined
in
your dictionary
Thu Jan 11 16:41:29 2001: DEBUG: Handling with Radius::AuthFILE
Thu Jan 11 16:41:29 2001: DEBUG: Accounting accepted
Thu Jan 11 16:41:29 2001: DEBUG: Packet dump:
*** Sending to 100.1.1.10 port 1812 ....
Code: Accounting-Response
Identifier: 0
Authentic: a<11>Hd<185><134><200><227>=R<168>/UGl<26>
Attributes:
Thu Jan 11 16:41:31 2001: DEBUG: Packet dump:
*** Received from 100.1.1.10 port 1812 ....
Code: Accounting-Request
Identifier: 0
Authentic: <187><212><254>`T<193><182><174>$<200>R<133><169>{<177>S
Attributes:
User-Name = "onno@ISP1"
NAS-Identifier = "RedBack"
NAS-IP-Address = 100.1.1.10
Service-Type = Framed-User
Framed-Protocol = PPP
NAS-Port = 117440513
Calling-Station-Id = "-RedBack-4/0"
RB-NAS-Real-Port = 536870913
Acct-Session-Id = "07000001-3A5DD28E"
Acct-Authentic = 1
Acct-Status-Type = 3
RB-Rate-Limit-Rate = 500
RB-Rate-Limit-Burst = 100000
Framed-IP-Address = 50.1.1.2
Acct-Input-Octets = 362
Acct-Output-Octets = 0
Acct-Input-Packets = 6
Acct-Output-Packets = 0
Acct-Session-Time = 0
RB-Acct-Input-Octets-64 = 0
RB-Acct-Output-Octets-64 = 0
RB-Acct-Input-Packets-64 = 0
RB-Acct-Output-Packets-64 = 0
Thu Jan 11 16:41:31 2001: DEBUG: Handling request with Handler 'Realm=ISP1'
Thu Jan 11 16:41:31 2001: ERR: Attribute number 211 (vendor ) is not defined
in
your dictionary
Thu Jan 11 16:41:31 2001: DEBUG: Handling with Radius::AuthFILE
Thu Jan 11 16:41:31 2001: DEBUG: Accounting accepted
Thu Jan 11 16:41:31 2001: DEBUG: Packet dump:
*** Sending to 100.1.1.10 port 1812 ....
Code: Accounting-Response
Identifier: 0
Authentic: <187><212><254>`T<193><182><174>$<200>R<133><169>{<177>S
Attributes:
Thu Jan 11 16:41:38 2001: DEBUG: Packet dump:
*** Received from 100.1.1.10 port 1812 ....
************************************************* Second session starts here
*******************************
Code: Access-Request
Identifier: 0
Authentic: <27>;[<223>w<5><225><20><199><224>,7<204>~<209>C
Attributes:
User-Name = "onno@ISP1"
CHAP-Password = "<1><166><235>9?7=<185><221>. -`<188>3<173><239>"
NAS-Identifier = "RedBack"
NAS-IP-Address = 100.1.1.10
Calling-Station-Id = "-RedBack-4/0"
RB-NAS-Real-Port = 536870913
Service-Type = Framed-User
Framed-Protocol = PPP
NAS-Port = 117440514
Acct-Session-Id = "07000002-3A5DD29A"
Thu Jan 11 16:41:38 2001: DEBUG: Handling request with Handler 'Realm=ISP1'
Thu Jan 11 16:41:38 2001: DEBUG: Deleting session for onno@ISP1,
100.1.1.10, 11
7440514
Thu Jan 11 16:41:38 2001: ERR: Attribute number 211 (vendor ) is not defined
in
your dictionary
Thu Jan 11 16:41:38 2001: DEBUG: Handling with Radius::AuthFILE
Thu Jan 11 16:41:38 2001: DEBUG: Radius::AuthFILE looks for match with
onno@ISP1
Thu Jan 11 16:41:38 2001: DEBUG: Radius::AuthFILE ACCEPT:
Thu Jan 11 16:41:38 2001: DEBUG: Access accepted for onno@ISP1
Thu Jan 11 16:41:38 2001: DEBUG: Packet dump:
*** Sending to 100.1.1.10 port 1812 ....
Code: Access-Accept
Identifier: 0
Authentic: <27>;[<223>w<5><225><20><199><224>,7<204>~<209>C
Attributes:
RB-Rate-Limit-Rate = 500
RB-Rate-Limit-Burst = 100000
Thu Jan 11 16:41:40 2001: DEBUG: Packet dump:
*** Received from 100.1.1.10 port 1812 ....
Code: Accounting-Request
Identifier: 0
Authentic: <18><29>T<188><171>Le<153><8><166><223>M<230>W<243><26>
Attributes:
User-Name = "onno@ISP1"
NAS-Identifier = "RedBack"
NAS-IP-Address = 100.1.1.10
Service-Type = Framed-User
Framed-Protocol = PPP
NAS-Port = 117440514
Calling-Station-Id = "-RedBack-4/0"
RB-NAS-Real-Port = 536870913
Acct-Session-Id = "07000002-3A5DD29A"
Acct-Authentic = 1
Framed-IP-Address = 50.1.1.3
Acct-Status-Type = 1
Thu Jan 11 16:41:40 2001: DEBUG: Handling request with Handler 'Realm=ISP1'
Thu Jan 11 16:41:40 2001: ERR: Attribute number 211 (vendor ) is not defined
in
your dictionary
Thu Jan 11 16:41:40 2001: DEBUG: Handling with Radius::AuthFILE
Thu Jan 11 16:41:40 2001: DEBUG: Accounting accepted
Thu Jan 11 16:41:40 2001: DEBUG: Packet dump:
*** Sending to 100.1.1.10 port 1812 ....
Code: Accounting-Response
Identifier: 0
Authentic: <18><29>T<188><171>Le<153><8><166><223>M<230>W<243><26>
Attributes:
Thu Jan 11 16:41:42 2001: DEBUG: Packet dump:
*** Received from 100.1.1.10 port 1812 ....
Code: Accounting-Request
Identifier: 0
Authentic: <188><163>P<7><8>>u<12>|3IV<220><29><188>i
Attributes:
User-Name = "onno@ISP1"
NAS-Identifier = "RedBack"
NAS-IP-Address = 100.1.1.10
Service-Type = Framed-User
Framed-Protocol = PPP
NAS-Port = 117440514
Calling-Station-Id = "-RedBack-4/0"
RB-NAS-Real-Port = 536870913
Acct-Session-Id = "07000002-3A5DD29A"
Acct-Authentic = 1
Acct-Status-Type = 3
RB-Rate-Limit-Rate = 500
RB-Rate-Limit-Burst = 100000
Framed-IP-Address = 50.1.1.3
Acct-Input-Octets = 362
Acct-Output-Octets = 0
Acct-Input-Packets = 6
Acct-Output-Packets = 0
Acct-Session-Time = 0
RB-Acct-Input-Octets-64 = 0
RB-Acct-Output-Octets-64 = 0
RB-Acct-Input-Packets-64 = 0
RB-Acct-Output-Packets-64 = 0
Thu Jan 11 16:41:42 2001: DEBUG: Handling request with Handler 'Realm=ISP1'
Thu Jan 11 16:41:42 2001: ERR: Attribute number 211 (vendor ) is not defined
in
your dictionary
Thu Jan 11 16:41:42 2001: DEBUG: Handling with Radius::AuthFILE
Thu Jan 11 16:41:42 2001: DEBUG: Accounting accepted
Thu Jan 11 16:41:42 2001: DEBUG: Packet dump:
*** Sending to 100.1.1.10 port 1812 ....
Code: Accounting-Response
Identifier: 0
Authentic: <188><163>P<7><8>>u<12>|3IV<220><29><188>i
Attributes:
****************************************************************************
*************
The configuration I am using is below;
rb-user.cfg ;
#
AuthPort 1812
AcctPort 1813
Trace 4
LogFile %L/logfile.log
<AuthBy FILE>
Filename ./users.cfg
Identifier ID_0
</AuthBy>
<Client DEFAULT>
DupInterval 0
Secret xyz
</Client>
<Realm ISP1>
AcctLogFileName ./detail
AuthBy ID_0
PasswordLogFileName %L/password.log
</Realm>
user.cfg;
onno@ISP1 User-Password = "onno", Simultaneous-Use = 1
RB-Rate-Limit-Rate= 500,
RB-Rate-Limit-Burst= 100000
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
