---------- Forwarded Message ----------
Subject: BOUNCE [EMAIL PROTECTED]: Non-member submission from [Frank
Danielson <[EMAIL PROTECTED]>]
Date: Mon, 3 Mar 2003 08:35:34 -0600
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
>From [EMAIL PROTECTED] Mon Mar 3 08:35:34 2003
Received: from orlrelay02 ([209.4.229.191])
by server1.open.com.au (8.11.0/8.11.0) with SMTP id h23EZYx03351
for <[EMAIL PROTECTED]>; Mon, 3 Mar 2003 08:35:34 -0600
Received: FROM orlexch02.brience.local BY orlrelay02 ; Mon Mar 03 14:23:53
2003 -0500 Received: by orlexch02.brience.local with Internet Mail Service
(5.5.2653.19) id <FKHB85FK>; Mon, 3 Mar 2003 14:31:20 -0500
Message-ID: <[EMAIL PROTECTED]>
From: Frank Danielson <[EMAIL PROTECTED]>
To: Dan <[EMAIL PROTECTED]>, [EMAIL PROTECTED]
Subject: RE: (RADIATOR) Session Database and MaxSessions
Date: Mon, 3 Mar 2003 14:31:15 -0500
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
Content-Type: multipart/alternative;
boundary="----_=_NextPart_001_01C2E1BB.74F2FA50"
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
------_=_NextPart_001_01C2E1BB.74F2FA50
Content-Type: text/plain;
charset="iso-8859-1"
Dan-
could you also send the clients.cfg (no secrets)?
-----Original Message-----
From: Dan [mailto:[EMAIL PROTECTED]
Sent: Monday, March 03, 2003 12:23 PM
To: [EMAIL PROTECTED]
Subject: (RADIATOR) Session Database and MaxSessions
I have a existing session database. I am now to the point where I need to
control MaxSessions.
When i add the MaxSessions 1 to my conf. file I get ALOT of people that
can't login because it believes the user is still online or maxsession is
exceeded. I know for a fact that these users are not online. Why is it not
letting them online?
Is there any other way or Proper way to set radiator up to control
maxsessions when I'm getting my auth's from wholesale provider which does
not support snmp to the nas's...? How do other people on the list control
simultaneous usage with Networks like Uunet,Qwest,Megapop etc....
I have included the log file (Trace 4) with the errors I get when I add
MaxSessions 1 these errors are occurring even when the user is not trying to
do simultaneous connections. I have also attached my conf file.
Mon Mar 3 08:06:00 2003: DEBUG: Packet dump:
*** Received from 216.127.139.10 port 3800 ....
Code: Access-Request
Identifier: 171
Authentic: U<143><8><233><171><129><22><252><26>7<148><157>b<21><216>M
Attributes:
User-Name = " [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> "
CHAP-Password = <1>#<134><194><141>c(<29>;<243><168><143>D<168>V<213><172>
NAS-IP-Address = 67.193.160.36
NAS-Port = 2052
NAS-Port-Type = Async
Service-Type = Framed-User
Framed-Protocol = PPP
State = ""
Called-Station-Id = "************"
Acct-Session-Id = "388570715"
Ascend-Data-Rate = 26400
Ascend-Xmit-Rate = 50667
network = "u2"
Mon Mar 3 08:06:00 2003: DEBUG: Handling request with Handler
'Realm=DEFAULT'
Mon Mar 3 08:06:00 2003: DEBUG: Deleting session for [EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]> , 67.193.160.36, 2052
Mon Mar 3 08:06:00 2003: DEBUG: do query is: delete from RADONLINE where
NASIDENTIFIER='67.193.160.36' and NASPORT=02052
Mon Mar 3 08:06:00 2003: DEBUG: Query is: select NASIDENTIFIER, NASPORT,
ACCTSESSIONID, FRAMEDIPADDRESS from RADONLINE where [EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]>
Mon Mar 3 08:06:01 2003: DEBUG: Checking if user is still online: unknown,
[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> , 67.193.160.36
, 13, 388532462 67.193.119.193
Mon Mar 3 08:06:01 2003: DEBUG: Checking if user is still online: unknown,
[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> , 67.193.160.36
, 3203, 388529606 67.193.119.73
Mon Mar 3 08:06:01 2003: DEBUG: Checking if user is still online: unknown,
[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> , 67.193.160.36
, 2121, 388518728 67.193.119.57
Mon Mar 3 08:06:01 2003: DEBUG: Checking if user is still online: unknown,
[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> , 67.193.160.36
, 2244, 388501182 67.193.119.57
Mon Mar 3 08:06:01 2003: DEBUG: Checking if user is still online: unknown,
[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> , 67.193.160.36
, 111, 388543128 67.193.119.187
Mon Mar 3 08:06:01 2003: DEBUG: Checking if user is still online: unknown,
[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> , 67.193.160.47
, 17, 376236234 67.193.170.23
Mon Mar 3 08:06:01 2003: DEBUG: Checking if user is still online: unknown,
[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> , 67.193.160.36
, 2065, 388528348 67.193.119.93
Mon Mar 3 08:06:01 2003: DEBUG: Checking if user is still online: unknown,
[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> , 67.193.160.47
, 2059, 376233805 67.193.170.77
Mon Mar 3 08:06:01 2003: DEBUG: Checking if user is still online: unknown,
[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> , 67.193.160.47
, 209, 376233644 67.193.170.44
Mon Mar 3 08:06:01 2003: INFO: Access rejected for [EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]> : MaxSessions exceeded
Mon Mar 3 08:06:01 2003: DEBUG: Packet dump:
*** Sending to 216.127.139.10 port 3800 ....
Code: Access-Reject
Identifier: 171
Authentic: U<143><8><233><171><129><22><252><26>7<148><157>b<21><216>M
Attributes:
Reply-Message = "Request Denied"
------_=_NextPart_001_01C2E1BB.74F2FA50
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 5.50.4807.2300" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><SPAN class=3D290333019-03032003><FONT face=3DArial =
color=3D#0000ff=20
size=3D2>Dan-</FONT></SPAN></DIV>
<DIV><SPAN class=3D290333019-03032003><FONT face=3DArial =
color=3D#0000ff=20
size=3D2></FONT></SPAN> </DIV>
<DIV><SPAN class=3D290333019-03032003><FONT face=3DArial =
color=3D#0000ff size=3D2>could=20
you also send the clients.cfg (no secrets)?</FONT></SPAN></DIV>
<BLOCKQUOTE dir=3Dltr style=3D"MARGIN-RIGHT: 0px">
<DIV class=3DOutlookMessageHeader dir=3Dltr align=3Dleft><FONT =
face=3DTahoma=20
size=3D2>-----Original Message-----<BR><B>From:</B> Dan=20
[mailto:[EMAIL PROTECTED]<BR><B>Sent:</B> Monday, March 03, 2003 12:23 =
PM<BR><B>To:</B> [EMAIL PROTECTED]<BR><B>Subject:</B> (RADIATOR) =
Session=20
Database and MaxSessions<BR><BR></FONT></DIV>
<DIV><FONT face=3DArial size=3D2>I have a existing session database. =
I am now to=20
the point where I need to control MaxSessions.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT><FONT face=3DArial=20
size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>When i add the MaxSessions 1 to my =
conf. file I=20
get ALOT of people that can't login because it believes the user is =
still=20
online or maxsession is exceeded. I know for a fact that these users =
are not=20
online. Why is it not letting them online?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Is there any other way or Proper way =
to set=20
radiator up to control maxsessions when I'm getting my auth's from =
wholesale=20
provider which does not support snmp to the nas's...? How do other =
people on=20
the list control simultaneous usage with Networks like =
Uunet,Qwest,Megapop=20
etc....</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>I have included the log file (Trace =
4) with=20
the errors I get when I add MaxSessions 1 these errors are occurring =
even when=20
the user is not trying to do simultaneous connections. I have =
also=20
attached my conf file.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Mon Mar 3 08:06:00 2003: =
DEBUG: Packet=20
dump:<BR>*** Received from 216.127.139.10 port 3800=20
....<BR>Code: =20
Access-Request<BR>Identifier: 171<BR>Authentic: =20
=
U<143><8><233><171><129><22><252&=
gt;<26>7<148><157>b<21><216>M<BR>Attribute=
s:<BR> User-Name=20
=3D "<A =
href=3D"mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]</A>"<BR> CHAP-Passwor=
d=20
=3D=20
=
<1>#<134><194><141>c(<29>;<243><1=
68><143>D<168>V<213><172><BR> NAS-IP-Add=
ress=20
=3D 67.193.160.36<BR> NAS-Port =3D 2052<BR> NAS-Port-Type =
=3D=20
Async<BR> Service-Type =3D Framed-User<BR> Framed-Protocol =
=3D=20
PPP<BR> State =3D ""<BR> Called-Station-Id =3D=20
"************"<BR> Acct-Session-Id =3D=20
"388570715"<BR> Ascend-Data-Rate =3D =
26400<BR> Ascend-Xmit-Rate =3D=20
50667<BR> network =3D "u2"</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=3DArial size=3D2>Mon Mar 3 08:06:00 2003: =
DEBUG: Handling=20
request with Handler 'Realm=3DDEFAULT'<BR>Mon Mar 3 08:06:00 =
2003:=20
DEBUG: Deleting session for <A=20
href=3D"mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]</A>, 67.193.160.36, =
2052<BR>Mon=20
Mar 3 08:06:00 2003: DEBUG: do query is: delete from RADONLINE =
where=20
NASIDENTIFIER=3D'67.193.160.36' and NASPORT=3D02052</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=3DArial size=3D2>Mon Mar 3 08:06:00 2003: =
DEBUG: Query is:=20
select NASIDENTIFIER, NASPORT, ACCTSESSIONID, FRAMEDIPADDRESS from =
RADONLINE=20
where <A=20
=
href=3D"mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]</A><=
/FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=3DArial size=3D2>Mon Mar 3 08:06:01 2003: =
DEBUG: Checking if=20
user is still online: unknown, <A=20
href=3D"mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]</A>,=20
=
67.193.160.36  =
;  =
;  =
; =20
, 13,=20
=
388532462 &nb=
sp; =20
67.193.119.193 <BR>Mon =
Mar 3=20
08:06:01 2003: DEBUG: Checking if user is still online: unknown, <A=20
href=3D"mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]</A>,=20
=
67.193.160.36  =
;  =
;  =
; =20
, 3203,=20
=
388529606 &nb=
sp; =20
67.193.119.73 <BR>Mon =
Mar 3 08:06:01 2003: DEBUG: Checking if user is still online: =
unknown,=20
<A href=3D"mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]</A>,=20
=
67.193.160.36  =
;  =
;  =
; =20
, 2121,=20
=
388518728 &nb=
sp; =20
67.193.119.57 <BR>Mon =
Mar 3 08:06:01 2003: DEBUG: Checking if user is still online: =
unknown,=20
<A href=3D"mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]</A>,=20
=
67.193.160.36  =
;  =
;  =
; =20
, 2244,=20
=
388501182 &nb=
sp; =20
67.193.119.57 <BR>Mon =
Mar 3 08:06:01 2003: DEBUG: Checking if user is still online: =
unknown,=20
<A href=3D"mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]</A>,=20
=
67.193.160.36  =
;  =
;  =
; =20
, 111,=20
=
388543128 &nb=
sp; =20
67.193.119.187 <BR>Mon =
Mar 3=20
08:06:01 2003: DEBUG: Checking if user is still online: unknown, <A=20
href=3D"mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]</A>,=20
=
67.193.160.47  =
;  =
;  =
; =20
, 17,=20
=
376236234 &nb=
sp; =20
67.193.170.23 <BR>Mon =
Mar 3 08:06:01 2003: DEBUG: Checking if user is still online: =
unknown,=20
<A href=3D"mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]</A>,=20
67.193.160.36 &nb=
sp; &nb=
sp; &nb=
sp; =20
, 2065,=20
=
388528348 &nb=
sp; =20
67.193.119.93 <BR>Mon =
Mar 3 08:06:01 2003: DEBUG: Checking if user is still online: =
unknown,=20
<A href=3D"mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]</A>,=20
=
67.193.160.47  =
;  =
;  =
; =20
, 2059,=20
=
376233805 &nb=
sp; =20
67.193.170.77 <BR>Mon =
Mar 3 08:06:01 2003: DEBUG: Checking if user is still online: =
unknown,=20
<A href=3D"mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]</A>,=20
=
67.193.160.47  =
;  =
;  =
; =20
, 209,=20
=
376233644 &nb=
sp; =20
67.193.170.44 <BR>Mon =
Mar 3 08:06:01 2003: INFO: Access rejected for <A=20
href=3D"mailto:[EMAIL PROTECTED]">[EMAIL PROTECTED]</A>: MaxSessions =
exceeded<BR>Mon=20
Mar 3 08:06:01 2003: DEBUG: Packet dump:<BR>*** Sending to=20
216.127.139.10 port 3800 =
....<BR>Code: =20
Access-Reject<BR>Identifier: 171<BR>Authentic: =20
=
U<143><8><233><171><129><22><252&=
gt;<26>7<148><157>b<21><216>M<BR>Attribute=
s:<BR> Reply-Message=20
=3D "Request Denied"</FONT></DIV></BLOCKQUOTE></BODY></HTML>
------_=_NextPart_001_01C2E1BB.74F2FA50--
-------------------------------------------------------
--
Mike McCauley [EMAIL PROTECTED]
Open System Consultants Pty. Ltd Unix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia http://www.open.com.au
Phone +61 3 9598-0985 Fax +61 3 9598-0955
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
TTLS, PEAP etc on Unix, Windows, MacOS etc.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
