Hello Gordon -
As far as I can see, your configuration is correct. Do the AcctSQL and AuthSQL clauses operate correctly? And could you please send me a trace 4 debug showing what is happening? thanks Hugh On Wed, 30 Jan 2002 08:10, Gordon Smith wrote: > Hi Hugh, > > I'm setting up 2 radius servers that talk to a backend database (MySQL) on > a separate box. > > Problem is, for some reason the local RADONLINE table is updated, which I > don't want, as the user can be processed by either radius server. I want > the sessions to be checked against the backend DB, which I thought was > configured with the SessionDatabase attribute. > > Can you shed some light on this for me? The goal is to have both front end > servers checking the back end radonline table for enforcing simultaneous > use policies. > > Cheers, > Gordon > > > This is the relevent config: > > <AuthBy SQL> > Identifier AcctSQL > DBSource dbi:mysql:radmin:d3.morenet.net.nz > DBUsername xxxx > DBAuth zzzzzz > AuthSelect > > AccountingTable RADUSAGE > AcctColumnDef USERNAME,User-Name > AcctColumnDef TIME_STAMP,Timestamp,integer > AcctColumnDef ACCTSTATUSTYPE,Acct-Status-Type,integer > AcctColumnDef ACCTDELAYTIME,Acct-Delay-Time,integer > AcctColumnDef ACCTINPUTOCTETS,Acct-Input-Octets,integer > AcctColumnDef ACCTOUTPUTOCTETS,Acct-Output-Octets,integer > AcctColumnDef ACCTSESSIONID,Acct-Session-Id > AcctColumnDef ACCTSESSIONTIME,Acct-Session-Time,integer > AcctColumnDef ACCTTERMINATECAUSE,Acct-Terminate-Cause > AcctColumnDef FRAMEDIPADDRESS,Framed-IP-Address > AcctColumnDef NASIDENTIFIER,NAS-IP-Address > AcctColumnDef NASPORT,NAS-Port,integer > AcctColumnDef DNIS,Called-Station-Id > AcctColumnDef CALLERID,Calling-Station-Id > </AuthBy> > > <AuthBy RADMIN> > Identifier AuthSQL > DBSource dbi:mysql:radmin > DBUsername xxx > DBAuth zzz > > AddToReply \ > Framed-Protocol = PPP,\ > Framed-IP-Netmask = 255.255.255.255,\ > Framed-Routing = None,\ > Framed-MTU = 1500,\ > Framed-Compression = Van-Jacobson-TCP-IP,\ > Service-Type = Framed-User,\ > Session-Timeout = 14400,\ > Idle-Timeout = 900,\ > Ascend-Client-Primary-DNS = 210.185.31.4,\ > Ascend-Client-Secondary-DNS = 210.185.31.5 > </AuthBy> > > <SessionDatabase SQL> > Identifier SessSQL > DBSource dbi:mysql:radmin:d3.morenet.net.nz > DBUsername xxx > DBAuth zzz > </SessionDatabase> > > <AuthLog SQL> > Identifier logAuth > DBSource dbi:mysql:radmin:d3.morenet.net.nz > DBUsername radmin > DBAuth radminpw > > Table AUTH_LOG > > LogSuccess 0 > LogFailure 1 > > SuccessQuery INSERT INTO AUTH_LOG \ > (ACCESS_OK,TIME_STAMP,USERNAME,SEVERITY,REASON) \ > VALUES \ > ('OK','%t','%n','%0','%1') > > FailureQuery INSERT INTO AUTH_LOG \ > (ACCESS_OK,TIME_STAMP,USERNAME,SEVERITY,REASON) \ > VALUES \ > ('NO','%t','%n','%0','%1') > </AuthLog> > > > <Realm infogen.net.nz> > AuthByPolicy ContinueAlways > AuthBy AcctSQL > AuthBy AuthSQL > AuthLog logAuth > SessionDatabase SessSQL > > </Realm> > > <Realm morenet.net.nz> > AuthByPolicy ContinueAlways > AuthBy AcctSQL > AuthBy AuthSQL > AuthLog logAuth > SessionDatabase SessSQL > </Realm> -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. - Nets: internetwork inventory and management - graphical, extensible, flexible with hardware, software, platform and database independence. === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.