Hello Onno -
This is a problem with your dictionary - what dictionary file are you using?
You should start with the standard Radiator dictionary and add anything extra
that is required to it.
BTW - what version of Radiator are you running?
thanks
Hugh
On Friday 12 January 2001 02:48, Onno Becker Hof wrote:
> Hi All,
>
> I am trying already for a while to limit the number of sessions per user
> allowed on a BAS. For some bizarre reason it doesn't work for me. I have
> tried both "internal" session database as "external" session database. Has
> somebody in this group successfully implemented limited access? If so, what
> configuration has been used?
>
> I would appreciate your support and advise very much,
>
> Best regards Onno
>
>
> Below the debug window of Radiator indicating that the user onno@ISP1
> successfully logs in, while the simultaneous-use is set to one (1);
>
> C:\Perl\Radius>perl radiusd -config_file rb-user.cfg
> Thu Jan 11 16:41:20 2001: DEBUG: Reading users file ./users.cfg
> Thu Jan 11 16:41:20 2001: INFO: Server started: Radiator 2.17.1 on OHNO
> Thu Jan 11 16:41:27 2001: DEBUG: Packet dump:
>
> ************************************************* First session starts here
> *******************************
>
> *** Received from 100.1.1.10 port 1812 ....
> Code: Access-Request
> Identifier: 0
> Authentic:
> <199>{<182><188>*<205><136><178><223><248>A<204><213><194><159>,
> Attributes:
> User-Name = "onno@ISP1"
> CHAP-Password =
> "<1><16><26><195>'z<163><197>y<213><163>^<196><19><252><
> 187><30>"
> NAS-Identifier = "RedBack"
> NAS-IP-Address = 100.1.1.10
> Calling-Station-Id = "-RedBack-4/0"
> RB-NAS-Real-Port = 536870913
> Service-Type = Framed-User
> Framed-Protocol = PPP
> NAS-Port = 117440513
> Acct-Session-Id = "07000001-3A5DD28E"
>
> Thu Jan 11 16:41:27 2001: DEBUG: Handling request with Handler 'Realm=ISP1'
> Thu Jan 11 16:41:27 2001: DEBUG: Deleting session for onno@ISP1,
> 100.1.1.10, 11
> 7440513
> Thu Jan 11 16:41:27 2001: ERR: Attribute number 211 (vendor ) is not
> defined in
> your dictionary
> Thu Jan 11 16:41:27 2001: DEBUG: Handling with Radius::AuthFILE
> Thu Jan 11 16:41:27 2001: DEBUG: Radius::AuthFILE looks for match with
> onno@ISP1
>
> Thu Jan 11 16:41:27 2001: DEBUG: Radius::AuthFILE ACCEPT:
> Thu Jan 11 16:41:27 2001: DEBUG: Access accepted for onno@ISP1
> Thu Jan 11 16:41:27 2001: DEBUG: Packet dump:
> *** Sending to 100.1.1.10 port 1812 ....
> Code: Access-Accept
> Identifier: 0
> Authentic:
> <199>{<182><188>*<205><136><178><223><248>A<204><213><194><159>,
> Attributes:
> RB-Rate-Limit-Rate = 500
> RB-Rate-Limit-Burst = 100000
>
> Thu Jan 11 16:41:29 2001: DEBUG: Packet dump:
> *** Received from 100.1.1.10 port 1812 ....
> Code: Accounting-Request
> Identifier: 0
> Authentic: a<11>Hd<185><134><200><227>=R<168>/UGl<26>
> Attributes:
> User-Name = "onno@ISP1"
> NAS-Identifier = "RedBack"
> NAS-IP-Address = 100.1.1.10
> Service-Type = Framed-User
> Framed-Protocol = PPP
> NAS-Port = 117440513
> Calling-Station-Id = "-RedBack-4/0"
> RB-NAS-Real-Port = 536870913
> Acct-Session-Id = "07000001-3A5DD28E"
> Acct-Authentic = 1
> Framed-IP-Address = 50.1.1.2
> Acct-Status-Type = 1
>
> Thu Jan 11 16:41:29 2001: DEBUG: Handling request with Handler 'Realm=ISP1'
> Thu Jan 11 16:41:29 2001: ERR: Attribute number 211 (vendor ) is not
> defined in
> your dictionary
> Thu Jan 11 16:41:29 2001: DEBUG: Handling with Radius::AuthFILE
> Thu Jan 11 16:41:29 2001: DEBUG: Accounting accepted
> Thu Jan 11 16:41:29 2001: DEBUG: Packet dump:
> *** Sending to 100.1.1.10 port 1812 ....
> Code: Accounting-Response
> Identifier: 0
> Authentic: a<11>Hd<185><134><200><227>=R<168>/UGl<26>
> Attributes:
>
> Thu Jan 11 16:41:31 2001: DEBUG: Packet dump:
> *** Received from 100.1.1.10 port 1812 ....
> Code: Accounting-Request
> Identifier: 0
> Authentic: <187><212><254>`T<193><182><174>$<200>R<133><169>{<177>S
> Attributes:
> User-Name = "onno@ISP1"
> NAS-Identifier = "RedBack"
> NAS-IP-Address = 100.1.1.10
> Service-Type = Framed-User
> Framed-Protocol = PPP
> NAS-Port = 117440513
> Calling-Station-Id = "-RedBack-4/0"
> RB-NAS-Real-Port = 536870913
> Acct-Session-Id = "07000001-3A5DD28E"
> Acct-Authentic = 1
> Acct-Status-Type = 3
> RB-Rate-Limit-Rate = 500
> RB-Rate-Limit-Burst = 100000
> Framed-IP-Address = 50.1.1.2
> Acct-Input-Octets = 362
> Acct-Output-Octets = 0
> Acct-Input-Packets = 6
> Acct-Output-Packets = 0
> Acct-Session-Time = 0
> RB-Acct-Input-Octets-64 = 0
> RB-Acct-Output-Octets-64 = 0
> RB-Acct-Input-Packets-64 = 0
> RB-Acct-Output-Packets-64 = 0
>
> Thu Jan 11 16:41:31 2001: DEBUG: Handling request with Handler 'Realm=ISP1'
> Thu Jan 11 16:41:31 2001: ERR: Attribute number 211 (vendor ) is not
> defined in
> your dictionary
> Thu Jan 11 16:41:31 2001: DEBUG: Handling with Radius::AuthFILE
> Thu Jan 11 16:41:31 2001: DEBUG: Accounting accepted
> Thu Jan 11 16:41:31 2001: DEBUG: Packet dump:
> *** Sending to 100.1.1.10 port 1812 ....
> Code: Accounting-Response
> Identifier: 0
> Authentic: <187><212><254>`T<193><182><174>$<200>R<133><169>{<177>S
> Attributes:
>
> Thu Jan 11 16:41:38 2001: DEBUG: Packet dump:
> *** Received from 100.1.1.10 port 1812 ....
>
> ************************************************* Second session starts
> here *******************************
>
> Code: Access-Request
> Identifier: 0
> Authentic: <27>;[<223>w<5><225><20><199><224>,7<204>~<209>C
> Attributes:
> User-Name = "onno@ISP1"
> CHAP-Password = "<1><166><235>9?7=<185><221>. -`<188>3<173><239>"
> NAS-Identifier = "RedBack"
> NAS-IP-Address = 100.1.1.10
> Calling-Station-Id = "-RedBack-4/0"
> RB-NAS-Real-Port = 536870913
> Service-Type = Framed-User
> Framed-Protocol = PPP
> NAS-Port = 117440514
> Acct-Session-Id = "07000002-3A5DD29A"
>
> Thu Jan 11 16:41:38 2001: DEBUG: Handling request with Handler 'Realm=ISP1'
> Thu Jan 11 16:41:38 2001: DEBUG: Deleting session for onno@ISP1,
> 100.1.1.10, 11
> 7440514
> Thu Jan 11 16:41:38 2001: ERR: Attribute number 211 (vendor ) is not
> defined in
> your dictionary
> Thu Jan 11 16:41:38 2001: DEBUG: Handling with Radius::AuthFILE
> Thu Jan 11 16:41:38 2001: DEBUG: Radius::AuthFILE looks for match with
> onno@ISP1
>
> Thu Jan 11 16:41:38 2001: DEBUG: Radius::AuthFILE ACCEPT:
> Thu Jan 11 16:41:38 2001: DEBUG: Access accepted for onno@ISP1
> Thu Jan 11 16:41:38 2001: DEBUG: Packet dump:
> *** Sending to 100.1.1.10 port 1812 ....
> Code: Access-Accept
> Identifier: 0
> Authentic: <27>;[<223>w<5><225><20><199><224>,7<204>~<209>C
> Attributes:
> RB-Rate-Limit-Rate = 500
> RB-Rate-Limit-Burst = 100000
>
> Thu Jan 11 16:41:40 2001: DEBUG: Packet dump:
> *** Received from 100.1.1.10 port 1812 ....
> Code: Accounting-Request
> Identifier: 0
> Authentic: <18><29>T<188><171>Le<153><8><166><223>M<230>W<243><26>
> Attributes:
> User-Name = "onno@ISP1"
> NAS-Identifier = "RedBack"
> NAS-IP-Address = 100.1.1.10
> Service-Type = Framed-User
> Framed-Protocol = PPP
> NAS-Port = 117440514
> Calling-Station-Id = "-RedBack-4/0"
> RB-NAS-Real-Port = 536870913
> Acct-Session-Id = "07000002-3A5DD29A"
> Acct-Authentic = 1
> Framed-IP-Address = 50.1.1.3
> Acct-Status-Type = 1
>
> Thu Jan 11 16:41:40 2001: DEBUG: Handling request with Handler 'Realm=ISP1'
> Thu Jan 11 16:41:40 2001: ERR: Attribute number 211 (vendor ) is not
> defined in
> your dictionary
> Thu Jan 11 16:41:40 2001: DEBUG: Handling with Radius::AuthFILE
> Thu Jan 11 16:41:40 2001: DEBUG: Accounting accepted
> Thu Jan 11 16:41:40 2001: DEBUG: Packet dump:
> *** Sending to 100.1.1.10 port 1812 ....
> Code: Accounting-Response
> Identifier: 0
> Authentic: <18><29>T<188><171>Le<153><8><166><223>M<230>W<243><26>
> Attributes:
>
> Thu Jan 11 16:41:42 2001: DEBUG: Packet dump:
> *** Received from 100.1.1.10 port 1812 ....
> Code: Accounting-Request
> Identifier: 0
> Authentic: <188><163>P<7><8>>u<12>|3IV<220><29><188>i
> Attributes:
> User-Name = "onno@ISP1"
> NAS-Identifier = "RedBack"
> NAS-IP-Address = 100.1.1.10
> Service-Type = Framed-User
> Framed-Protocol = PPP
> NAS-Port = 117440514
> Calling-Station-Id = "-RedBack-4/0"
> RB-NAS-Real-Port = 536870913
> Acct-Session-Id = "07000002-3A5DD29A"
> Acct-Authentic = 1
> Acct-Status-Type = 3
> RB-Rate-Limit-Rate = 500
> RB-Rate-Limit-Burst = 100000
> Framed-IP-Address = 50.1.1.3
> Acct-Input-Octets = 362
> Acct-Output-Octets = 0
> Acct-Input-Packets = 6
> Acct-Output-Packets = 0
> Acct-Session-Time = 0
> RB-Acct-Input-Octets-64 = 0
> RB-Acct-Output-Octets-64 = 0
> RB-Acct-Input-Packets-64 = 0
> RB-Acct-Output-Packets-64 = 0
>
> Thu Jan 11 16:41:42 2001: DEBUG: Handling request with Handler 'Realm=ISP1'
> Thu Jan 11 16:41:42 2001: ERR: Attribute number 211 (vendor ) is not
> defined in
> your dictionary
> Thu Jan 11 16:41:42 2001: DEBUG: Handling with Radius::AuthFILE
> Thu Jan 11 16:41:42 2001: DEBUG: Accounting accepted
> Thu Jan 11 16:41:42 2001: DEBUG: Packet dump:
> *** Sending to 100.1.1.10 port 1812 ....
> Code: Accounting-Response
> Identifier: 0
> Authentic: <188><163>P<7><8>>u<12>|3IV<220><29><188>i
> Attributes:
>
> ***************************************************************************
>* *************
> The configuration I am using is below;
>
>
> rb-user.cfg ;
>
> #
> AuthPort 1812
> AcctPort 1813
>
> Trace 4
> LogFile %L/logfile.log
>
> <AuthBy FILE>
> Filename ./users.cfg
> Identifier ID_0
> </AuthBy>
>
> <Client DEFAULT>
> DupInterval 0
> Secret xyz
> </Client>
>
> <Realm ISP1>
> AcctLogFileName ./detail
> AuthBy ID_0
> PasswordLogFileName %L/password.log
> </Realm>
>
>
> user.cfg;
> onno@ISP1 User-Password = "onno", Simultaneous-Use = 1
> RB-Rate-Limit-Rate= 500,
> RB-Rate-Limit-Burst= 100000
>
>
>
> ===
> Archive at http://www.starport.net/~radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
