Hugh/Mike, 

I've got a problem with the DefaulSimultaneousUse. This does not seem to
work for my realm-based customers. 
Below is a trace level 4 of the different steps for checking the simutaneous
use. As you can see it checks with the Ascend NAS using AscendSNMP. But the
USERNAME passed is "lydia". Not "[EMAIL PROTECTED]". Hence there is never match
and Radiator thinks that the session has gone away. This however is not
true. If the AscendSNMP would check agains "[EMAIL PROTECTED]" it would notice
that this username and the username in the MIB match and deny access.

Mon Aug 27 11:53:11 2001: DEBUG: Checking if user is still online:
AscendSNMP, lydia, 207.65.70.7, 842, 326199869
Mon Aug 27 11:53:11 2001: DEBUG: Running command `/usr/bin/snmpget
207.65.70.7 community .iso.org.dod.internet.private.enterprises.326199869
Mon Aug 27 11:53:11 2001: NOTICE: sessiondb Session for lydia at
207.65.70.7:842 has gone away
Mon Aug 27 11:53:11 2001: DEBUG: sessiondb Deleting session for lydia,
207.65.70.7, 842
Mon Aug 27 11:53:11 2001: DEBUG: do query is: delete from RADONLINE where
USERNAME='[EMAIL PROTECTED]' and NASIDENTIFIER='207.65.70.7'

I've done a little bit of poking around the code to try and find out where
the problem lies. However the code is a little bit dense for me. :) 

Sincerely, 

Leon Oosterwijk


The part of the config file that is relevant to cora.net:

===============
# NetServices -> cora.net
#*******************************************************************
<Handler Realm=cora.net>
#       MaxSessions 1
        RewriteUsername      s/^([^@]+).*/$1/
                
        <AuthBy SQL>
                DBSource        dbi:mysql:NETSERVICES:host=216.153.4.28
                DBUsername      root
                DBAuth          shit
                
                AuthSelect select password, ip_address, netmask, port_limit,
idle_timeout, max_connect_time  from Dialup where user$
                AuthColumnDef 0, User-Password, check
                AuthColumnDef 1, Framed-IP-Address, reply
                AuthColumnDef 2, Framed-IP-Netmask, reply
                AuthColumnDef 3, Ascend-Maximum-Channels, reply
                AuthColumnDef 4, Ascend-Idle-Limit, reply  
                AuthColumnDef 5, Ascend-Maximum-Call-Duration, reply

                DefaultSimultaneousUse  1
                PrependToReply Ascend-Assign-IP-Pool = 12

#               PrependToReply Ascend-Idle-Limit = 1800

                StripFromReply Proxy-State
                StripFromReply Filter-Id
                StripFromReply Framed-Routing
                StripFromReply Ascend-Idle-Limit

                AddToReply      Ascend-Idle-Limit = 1800
                AddToReplyIfNotExist Service-Type = Framed, Framed-Protocol
= PPP, \
                                Ascend-Maximum-Call-Duration = 180,
Ascend-Maximum-Channels = 2

#                AddToReplyIfNotExist Framed-Routing = None
                
#                AddToReplyIfNotExist Service-Type = Framed
#                AddToReplyIfNotExist Framed-Protocol = PPP
#                AddToReplyIfNotExist Ascend-Idle-Limit = 1800
                
#                AddToReplyIfNotExist Ascend-Maximum-Call-Duration = 180
#                AddToReplyIfNotExist Ascend-Maximum-Channels = 2
                
        </AuthBy>
                
</Handler>
===========================


===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

Reply via email to