Re[2]: semulteneius-use with cisco nas
Alan, sorry for wasting your time. I said that i am new in FR and I understand that problem is ME. I just asked to indicate what exact is wrong, I supposed that maillist was created for such purposes. Again sorry, for waisting your time. 14 декабря 2011, 13:05 от Alan DeKok-2 [via FreeRadius] ml-node+s1045715n507393...@n5.nabble.com: [hidden email] wrote: i made everything from: - enable sql in accounting section of sites-available/default - enable sql in session section of sites-available/default (and sites-available/inner-tunnel, if you use EAP) - uncomment simul_count_query in sql /*/ dialup.conf but it doesn't work(( The problem is you. I replied *twice* with a description of the requirements for Simultaneous-Use to work. I described what needs to happen. Both times you didn't reply. You MUST (1) understand the process, (2) follow the process, checking the packets data at each stage. You're not doing that. Instead, you're focussed on configuration. No amount of editing the configuration files will magically make it work. The configuration files are just one step out of many. You are fixated on the configuration files, and are ignoring ALL OF THE OTHER STEPS. I've been on this list for 10 years, and have seen problems like yours many, many, times. My best guess is that in your fanatical dedication to staring at the configuration files, you missed something critical. Until you understand that, everyone here is wasting their time by helping you. If you keep wasting peoples time, I will unsubscribe you. Sorry, but after 10 years of this kind of behavior, list etiquette has now become follow instructions or go away Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- If you reply to this email, your message will be added to the discussion below: http://freeradius.1045715.n5.nabble.com/semulteneius-use-with-cisco-nas-tp5062116p5073936.html To unsubscribe from semulteneius-use with cisco nas, click here. NAML -- View this message in context: http://freeradius.1045715.n5.nabble.com/semulteneius-use-with-cisco-nas-tp5062116p5073955.html Sent from the FreeRadius - User mailing list archive at Nabble.com.- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re[2]: semulteneius-use with cisco nas
Hi,
this is my radwho output for 1st user (last string for 12-12-2011):
freebsd# radwho
Login Name What TTY When From Location
user user shell 999 Thu 14:38 10.169.33.11
user user shell 999 Thu 15:03 10.169.33.11
user user shell 999 Thu 17:25 10.169.33.11
user user shell 999 Thu 17:26 10.169.33.11
user user shell 999 Mon 10:45 10.169.33.11
this is seen from NAS, i cannot add file with prntscrs, but use session is
active in NAS.
then, i connect 2nd user via same NAS:
freebsd# radwho
Login Name What TTY When From Location
user user shell 999 Thu 14:38 10.169.33.11
user user shell 999 Thu 15:03 10.169.33.11
user user shell 999 Thu 17:25 10.169.33.11
user user shell 999 Thu 17:26 10.169.33.11
user user shell 999 Mon 10:45 10.169.33.11
user user shell 999 Mon 10:50 10.169.33.11
this is seen from NAS, also.
so, first user is recorded.
I also wanted to add configuration files, but it is not allowed by maillist
policy.
part of clients.conf:
freebsd# cat clients.conf
client 10.169.33.11/24 {
#require_message_authenticator = no
secret = 12345
nastype = cisco
login = snmp
password= public
}
freeradius server connects via snmp to NAs, i checked with snmpget.
so, what can be wrong in my configuration?
BR,
Anatolii
10 декабря 2011, 05:52 от Alan DeKok al...@deployingradius.com:
tolik_shavlov...@mail.ru wrote:
i am really not experienced with freeradius and mysql. I made everything
with your website.
I kindly ask you for help.
i made test in the following manner:
1. connect 1st laptop via Ap (NAS) with user/user
2. connect second laptop
simult-use feature should block second one, as i understood.
IF CERTAIN CONDITIONS ARE MET.
from your previuos emailing i understood that acounting is send if we
use database, so I configured authentication from mysql.
in the debug i see Accounting-Request packet and Accounting-Response.
can you describe what is not met??
Read doc/Simultaneous-Use, Section 3. It documents what happens for
Simultaneous-Use to work.
Go check it against the debug output. Run radwho after the first
login to see if FreeRADIUS has recorded that the user has logged in.
If that information isn't recorded, Simultaneous-Use won't work.
Don't blame FreeRADIUS. Blame the NAS which is sending useless data.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re[2]: semulteneius-use with cisco nas
Alan, i am really not experienced with freeradius and mysql. I made everything with your website. I kindly ask you for help. i made test in the following manner: 1. connect 1st laptop via Ap (NAS) with user/user 2. connect second laptop simult-use feature should block second one, as i understood. from your previuos emailing i understood that acounting is send if we use database, so I configured authentication from mysql. in the debug i see Accounting-Request packet and Accounting-Response. can you describe what is not met?? thanks for help. 09 декабря 2011, 19:50 от Alan DeKok-2 [via FreeRadius] ml-node+s1045715n5062175...@n5.nabble.com: [hidden email] wrote: what can be an issue? As I said a few days ago: Simultaneous-Use checks are done if the server receives accounting packets, AND a user session is still open, AND that user tries to log in a second time from a different location. The debug log makes it clear that those conditions are NOT met. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- If you reply to this email, your message will be added to the discussion below: http://freeradius.1045715.n5.nabble.com/semulteneius-use-with-cisco-nas-tp5062116p5062175.html To unsubscribe from semulteneius-use with cisco nas, click here. NAML -- View this message in context: http://freeradius.1045715.n5.nabble.com/semulteneius-use-with-cisco-nas-tp5062116p5062201.html Sent from the FreeRadius - User mailing list archive at Nabble.com.- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
