Gonzalez, Pedro [EMAIL PROTECTED] wrote:
Still getting segmentation fault after removing old version 0.5 rlm_*
libraries and re-installing. By the way, there are no core dump file
generated even after setting allow_core_dumps = yes.
More ideas ???
ulimit -c unlimited
And then run it
, but never used.
What
am I missing?
Are you using the 'Simultaneous-Use' attribute anywhere for that
user? If not, then the server will never do session checking.
DEFAULT Simultaneous-Use = 1
This is wrong, should be :=.
Read man 5 users
Nick
--
Nick Davis
Associate Systems
Randy Moore [EMAIL PROTECTED] wrote a long time ago:
After talking about it this morning, I couldn't get this out of my head, so
I also worked up a version of this today. I think mine already handles the
session zap issue properly, but I'm not 100% sure of the MLPPP
handling. But it
Hi,
i have freeradius 0.5 installed on freebsd
i have cisco 3660
(snmp community string and acl are already defined)
the problem is that simultaneous-use = 1 doesn't work
the same user can login in twice or even more
have read the faq , it says that you must have cmu-snmp installed.
maybe
Chris A. Kalin [EMAIL PROTECTED] wrote:
I'll keep pounding on this for the next few days but I will absolutely not
feel bad if someone who's a faster and more capable programmer were to take
this by the horns and make this work better than I'll probably be able to
do. :)
Where should I
From looking at how things work with FreeRADIUS, it seems like the
Simultaneous-Use function would only work if the authentication and
accounting servers are the same so RADIUS has access to the radutmp file
at authentication time. Is that correct?
I've been hosting auth on one server
Dave Brodin [EMAIL PROTECTED] wrote:
From looking at how things work with FreeRADIUS, it seems like the
Simultaneous-Use function would only work if the authentication and
accounting servers are the same so RADIUS has access to the radutmp file
at authentication time. Is that correct
Hi,
I have a problem with Simultaneous-Use on Cisco with FreeRadius 0.5
It doesn't work :(
Radius doesn't prevent double logins. The users are still able to
login twice with just one account, I can see that by running radwho
program. What may be wrong?
Have a such entry:
myuser Auth-Type
Try the following:
1. Add Fall-Through = 1 in reply items.
2. Check if you have SNMP access rights to the NAS.
3. Read Simultaneous-Use document.
4. Check if there is the following section in radius.conf
session {
radutmp
}
5. Run checkrad script manual
I'm using freeradius
0.4 with mysql 3.23.41 on SuSE Linux 7.3 for auth. of dial-up users on an
livingston protmaster 2e.The problem:i added all users into a
group PPPi set the Simultaneous-Use to 1when a user is
connected and another connection is requested by the same user then connection
I'm using freeradius 0.4 with mysql 3.23.41 on SuSE Linux 7.3 for auth. of
dial-up users on an livingston protmaster 2e.
The problem:
i added all users into a group PPP
i set the Simultaneous-Use to 1
when a user is connected and another connection is requested by the same
user then connection
hi all
here i am again.everything in progress,now i face to the Simulatneous-use
problem.i'm now work with freeradius0.4 and openldap2.0.23. can i test the
simulatneous-use without nas?just use the radclient? i've read the
/freeradius/doc/Simultaneous-Use ,from that i know that the i
Is it possible to only enforce Simultaneous use, based on the huntgroup
that the client is in?
For example, we use radius for authenticating our dial-in users. We
also use it for authenticating with our news server.
But, I am guesing that if I was to enable Simultaneous-Use = 1, on a
user, he
Justin Ainsworth [EMAIL PROTECTED] wrote:
Is it possible to only enforce Simultaneous use, based on the huntgroup
that the client is in?
Yes.
DEFAULT Huntgroup-Name == foo, Simultaneous-Use := 1
...
That will apply to each user in the huntgroup.
Alan DeKok.
-
List info
hey
i'm still unable to make simultaneous-use work :(
i tried adding a simultaneous-use definition for each user, in the radcheck
table, but that didn't help as well.
please,if anyone has any ideas :)
checkrad works, and returns 1, so the problem is with raddb, or with getting
the attributes
:)
hey
i'm still unable to make simultaneous-use work :(
i tried adding a simultaneous-use definition for each user, in the
radcheck table, but that didn't help as well.
please,if anyone has any ideas :)
checkrad works, and returns 1, so the problem is with raddb, or with
getting the attributes
only get the
last user that logged in. does this matter?
what should i look for when running radiusd -X?
thanks :)
I don't see something bad in sql tables. Some ideas:
Check the radiusd.conf, must inlude the following:
session {
radutmp
}
Read Simultaneous-use documentation.
Start
|
++---+--+---+--+
| 1 | dynamic | Simultaneous-Use | 1 | := |
++---+--+---+--+
should this be in the radgroupcheck or radgroupreply table? anyway,i tried
both and still doesn't work.
any thoughts?
thanks :)
At 12:21 PM 3/27/2002 +0200
| = |
++---+--+---+--+
From: yoav [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
CC: [EMAIL PROTECTED]
Subject: Re: simultaneous-use mysql
Date: Sat, 30 Mar 2002 13:54:34 +0300 (IDT)
hey
still doesn't work for me.
checkrad reports that double detected, so it works
is:
++---+--+---+--+
| id | GroupName | Attribute| Value | op |
++---+--+---+--+
| 1 | dynamic | Simultaneous-Use | 1 | := |
++---+--+---+--+
thanks :)
Try this one. Insert the following record
Simultaneous-Use to work.
checkrad works well. it returns:
yoavb matches yoavb on port slot:2/mod:4 Returning 1 (double
detected)
here's the mysql table:
++---++-+--+--+| id
| GroupName | Attribute | Value | op
does radiusd -X report from the sessions module?
At 02:44 PM 3/26/2002 +0200, you wrote:
hello
i can't get Simultaneous-Use to work.
checkrad works well. it returns:
yoavb matches yoavb on port slot:2/mod:4 Returning 1 (double detected)
here's the mysql table
At 12:21 PM 3/27/2002 +0200, yoav wrote:
what should i put in the op column? what's it for?
It is the operator column that tells you what type of operator to use.
IE, if you would use 'Simultaneous-Use := 1' in the users file, then you
must set the operator column to ':='.
It uses
How could I check a password of a customer if I have Simultaneous-use:=1
and the user is logged in? My NAS is the other type for radcheck.pl
So, when I test the password of a customer(radtest), freeradius check
the utmp file and find that the user is logged, and reject the test.
I don't know how
hello
i can't get Simultaneous-Use to work.
checkrad works well. it returns:
yoavb matches yoavb on port slot:2/mod:4 Returning 1 (double detected)
here's the mysql table:
++---++-+--+--+
| id | GroupName | Attribute | Value
Hi,
Do you have radutmp in your accounting and sessions blocks in radiusd.conf?
What does radiusd -X report from the sessions module?
At 02:44 PM 3/26/2002 +0200, you wrote:
hello
i can't get Simultaneous-Use to work.
checkrad works well. it returns:
yoavb matches yoavb on port slot:2/mod:4
At 09:15 AM 3/26/2002 -0500, Randy Moore wrote:
Hi,
Do you have radutmp in your accounting and sessions blocks in radiusd.conf?
What does radiusd -X report from the sessions module?
At 02:44 PM 3/26/2002 +0200, you wrote:
hello
i can't get Simultaneous-Use to work.
checkrad works well
I am having exactly the same problem as below...
Could anyone make it work ?
Hi,
Trying to restrict a user to only one 'Simultaneous-Use' and I get the
error in debug ::
rlm_sql: Pairs do not match [testuser]
modcall[authorize]: module sql returns notfound
modcall: group authorize
Hi,
Trying to restrict a user to only one 'Simultaneous-Use' and I get the
error in debug ::
rlm_sql: Pairs do not match [testuser]
modcall[authorize]: module sql returns notfound
modcall: group authorize returns ok
auth: No Auth-Type configuration for the request, rejecting the user
auth
, February 11, 2002 2:15 PM
Subject: Re: Simultaneous Use not working
Are you using realms? If so, you'll need to get a current CVS
snapshot. Even v 0.4 will not work. (radutmp stores the username with
the realm stripped, but the checksimul routine looks for usernames
without the realm
Simultaneous Use is not working for me. The checkrad script works fine when
I call it manually, but it is never executed by radius. I have turned
debugging on in checkrad - but the script is never executed. running
radiusd -xx does not give any indication that it is trying to call checkrad
PROTECTED]
Sent: Monday, February 11, 2002 2:15 PM
Subject: Re: Simultaneous Use not working
Are you using realms? If so, you'll need to get a current CVS
snapshot. Even v 0.4 will not work. (radutmp stores the username with the
realm stripped, but the checksimul routine looks for usernames
Simultaneous Use is not working for me. The checkrad script works fine when
I call it manually, but it is never executed by radius. I have turned
debugging on in checkrad - but the script is never executed. running
radiusd -xx does not give any indication that it is trying to call checkrad
v 0.4. I'd
recommend setting up a test server with the latest CVS to see if it works
for you.
At 12:31 PM 2/11/2002 +1000, you wrote:
Simultaneous Use is not working for me. The checkrad script works fine when
I call it manually, but it is never executed by radius. I have turned
debugging
PROTECTED]
Sent: Monday, February 11, 2002 2:15 PM
Subject: Re: Simultaneous Use not working
Are you using realms? If so, you'll need to get a current CVS
snapshot. Even v 0.4 will not work. (radutmp stores the username with the
realm stripped, but the checksimul routine looks for usernames
], Simultaneous-Use, 16) == 0))
mode = T_OP_ADD;
else
mode = T_OP_CMP_EQ;
But nothing ever works ... can anyone help , plz ?
I always get incorrect login, no matter what.
If there is any document about this subject, point me to it and ill be
pleased to RTFM
Hi.
We have got trouble with parameter Simultaneous-Use. It doesn't work when
we
try to autorize user. Although parameter Login-Time works correctly.
I use FreeRadius 0.4 + PostgreSQL
table radgroupcheck:
|id |GroupName |Attribute|Value|op|
| 1 |DEFAULT
[EMAIL PROTECTED] wrote:
Then i've read users man, and i thing to understand, that my configuration
will have to be of this way:
ic@inycom Password == icnet25, Simultaneous-Use := 5
Cisco-AVPair = ip:addr-pool=pool-qos100,
Fall-Through = Yes
DEFAULT Simultaneous-Use
Hi !
I am running into a problem with the simultaneous-use check attribute...
I have read the freeradius-snapshot-20020107/doc/Simultaneous-Use doc:
I read that the SImultaneous-Use parameter has to be a check:
I suppose that if I have no groups defined I can have those 2 lines
DEFAULT
At 12:10 PM 1/4/2002 +0800, Rubby wrote:
Hi,all,happy new year!
I want to know freeRadius 0.3 how to support Simultaneous-Use?
0.4 is the latest release. And the current CVS builds have many more
bugfixes beyond 0.4.
Does it maintain a internal online-users table?
It is described, in lots
Rubby [EMAIL PROTECTED] wrote TWICE:
I want to know freeRadius 0.3 how to support Simultaneous-Use?
Does it maintain a internal online-users table?
If I use SQL to authorize and authenticate, I must add a temporary online-users
table?
And how to configure?
Can you PLEASE only post ONE
Hi,all,happy new year!
I want to know freeRadius 0.3 how to support Simultaneous-Use?
Does it maintain a internal online-users table?
If I use SQL to authorize and authenticate, I must add a temporary online-users table?
And how to configure?
â²Ø§~ì¹» ®Þþéì¹» ®ÞI硶Úÿ 0~·§bºÊ+ùb²ßî
Hi,all,happy new year!
I want to know freeRadius 0.3 how to support Simultaneous-Use?
Does it maintain a internal online-users table?
If I use SQL to authorize and authenticate, I must add a temporary online-users table?
And how to configure?
-
List info/subscribe/unsubscribe? See http
Auth-Type := Local, Password == secret, Simultaneous-Use := 2
Framed-IP-Address = sss.ttt.uuu,eee,
Framed-IP-Netmask = 255.255.255.252,
Fall-Through = Yes
DEFAULT Service-Type == Framed-User, Huntgroup-Name == ASYNC
I've looked through the archives and so far haven't found anything on the
lists, so I'll ask.
How in the world do I get simultaneous-use working with SQL? I tried putting checks
for the group in radgroupcheck, for the individual user in radcheck, and
combinations of those. Hasn't been working
On Sat, 29 Dec 2001, Keith Pitcher wrote:
I've looked through the archives and so far haven't found anything on the
lists, so I'll ask.
How in the world do I get simultaneous-use working with SQL? I tried putting checks
for the group in radgroupcheck, for the individual user in radcheck
, Simultaneous-Use := 2
Framed-IP-Address = sss.ttt.uuu,eee,
Framed-IP-Netmask = 255.255.255.252,
Fall-Through = Yes
DEFAULT Service-Type == Framed-User, Huntgroup-Name == ASYNC,
Simultaneous-Use := 1
Service-Type = Framed-User
, Simultaneous-Use := 2
Framed-IP-Address = sss.ttt.uuu,eee,
Framed-IP-Netmask = 255.255.255.252,
Fall-Through = Yes
DEFAULT Service-Type == Framed-User, Huntgroup-Name == ASYNC,
Simultaneous-Use := 1
Service-Type = Framed-User
At: Saturday, December 15, 2001 6:33 PM
Posted To: FreeRADIUS
Conversation: Simultaneous-Use in SQL table?
Subject: Simultaneous-Use in SQL table?
Hi,
I'm new to freeradius and am having a problem when I try to use the
Simultaneous-Use check item from within a MySQL table. I'm trying to
put
When I add the check item Simultaneous-Use in the radcheck table i get in
debug mode:
auth: No Auth-Type configuration for the request, rejecting the user
auth: Failed to validate the user
Without the statement everything works fine
The Simultaneous-Use statement in user-file ( without sql
auth: Failed to validate the user.
I need this to work, can anyone help me ?
Le Mercredi 12 Décembre 2001 08:06, vous avez écrit :
When I add the check item Simultaneous-Use in the radcheck table i get in
debug mode:
auth: No Auth-Type configuration for the request, rejecting the user
auth
Hello,
I'm running freeradius-0.3 on a solaris2.7 box and have attempted
to set Simultaneous-Use (in the users file) to 1. It still
does not seem to be limiting simultaneous sessions at all.
I turned on debugging in checkrad but it doesn't look like it's
ever being run.
Here are the lines
Hello,
Just wishing to clarify something. Using freeradius-0.3 and I wish to catch
users using a DEFAULT statement and a group equal to 'x', I also wish to
limit each one of these users to one login only. If I specify the
simultaneous-use parameter along with the group parameter I presume
Darrin Robinson [EMAIL PROTECTED] wrote:
Just wishing to clarify something. Using freeradius-0.3 and I wish to catch
users using a DEFAULT statement and a group equal to 'x', I also wish to
limit each one of these users to one login only. If I specify the
simultaneous-use parameter along
Hi again
I am using 0.3 CVS 20011108 but still haven't got
Simultaneous-Use := 1 working, please help, am i doing something wrong?
Am i alowed to use sql for checking user names/password
and at the same time use users file for defaults
assignning IP for some users?
part of users file
Hi
I've been trying to use Simultaneous use and SQL authentication without
success. Is it possible to insert the simultaneous use attribute into
the SQL radcheck tables instead of using it on the users file ?
Thanks in advance for any help
David Eusse
Hi guys
I down loaded the latest CVS 20011108, installed and restarted the comp.
but Simultaneous-Use := 1 still does not work, i can login as a second user
Just to explain
i use authenticate (username/password) from sql but i use users file for defaults,
is it OK to use it like
sql
}
users:
DEFAULT Simultaneous-Use := 1, Auth-Type := Sql
My problem is:
If I comment the files instruction in authorize I can't control the
Simultaneous-Use. But if I leave as it is, Simultaneaous-Use works but
the check attributes stop working and some (pirate) Modem users can
connect
Dear List,
I have been reading about checkrad and Simultaneous-use ...
In the doc/Simultaneous-use, the example
8--
DEFAULT Group == staff, Simultaneous-Use := 4
Fall-Through = 1
8--
means probably that EACH
Hi,
Is it posible to lock the account when somebody tries to connect with it and
there is already connected user with this account? Also I want to drop the
currently connected user.
thanks in advance.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
victor [EMAIL PROTECTED] wrote:
Is it posible to lock the account when somebody tries to connect with it and
there is already connected user with this account?
Maybe. You'll have to edit the source of the server and/or
checkrad, thoguh/
Also I want to drop the currently connected user.
It would also be nice if you add some words about radwatch to
/doc/supervise-radiusd.txt
Suggested text ... ??
Here is the diff.
[root@bb-sv doc]# diff supervise-radiusd.txt.old supervise-radiusd.txt
14c14,15
either Dan Bernstein's 'daemontools' package or the inittab file.
---
Hi!
Nikolay P. Romanyuk [EMAIL PROTECTED] wrote:
P.S. I am very sorry, but letters to '[EMAIL PROTECTED]'
without replies.
I've been a little busy, sorry. Send the patches to the list, so
everyone else can see them, too.
I have a patches fixing detecting PostgreSQL on
Nikolay P. Romanyuk [EMAIL PROTECTED] wrote:
P.S. I am very sorry, but letters to '[EMAIL PROTECTED]'
without replies.
I've been a little busy, sorry. Send the patches to the list, so
everyone else can see them, too.
I have a patches fixing detecting PostgreSQL on
FreeBSD-4.X
Those I
Andrew Melnikov [EMAIL PROTECTED] wrote:
It would also be nice if you add some words about radwatch to
/doc/supervise-radiusd.txt
Suggested text ... ??
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi.
There have some problem about Simultaneous-Use:
(1) How to limit the number of times one user account can login
from the same NAS client?
(2) How to limit the number of times one user account can login
when two freeradius
running two different host computer
Here is my users file:
DEFAULT Auth-Type := Sql, Simultaneous-Use = 1
change this to:
DEFAULT Auth-Type := Sql, Simultaneous-Use := 1
Grab the CVS snapshot from tonight, and take a look at the
documentation again.
I changed Simultaneous-Use from '=' to ':=' but nothing changed. I
PROTECTED]
Sent: Friday, October 05, 2001 4:37 AM
Subject: Simultaneous-use still doesn't work
Here is my users file:
DEFAULT Auth-Type := Sql, Simultaneous-Use = 1
change this to:
DEFAULT Auth-Type := Sql, Simultaneous-Use := 1
Grab the CVS snapshot from tonight, and take
Andrew Melnikov [EMAIL PROTECTED] wrote:
First, in /doc/Simultaneous-Use file I can see the following:
...
That's wrong. I'll correct it now.
It would also be nice if you add some words about radwatch to
/doc/supervise-radiusd.txt
...
Grab the CVS snapshot from tonight, and take
Hello Nikolay,
Monday, October 01, 2001, 10:27:12 PM, you wrote:
If I define it in in radcheck or radgroupcheck tables FreeRADIUS
says:
NPR [skip]
rlm_sql: Pairs do not match [test]
NPR You must wrote 'Simultaneous-Use = 1' into radreply (radgroupreply) also.
Ok. I did as you say
Hello Mojahedul,
Tuesday, October 02, 2001, 10:50:30 AM, you wrote:
MHAH Simultanous-Use and Login-Time does not work with rlm_sql modules
MHAH without a minor change in source code.
Can I define this parameter w/o changes in code?
In ./etc/raddb/users for example? But I need auth* in sql.
Hello,
I can't get Simultaneous-Use working. I use portslave as NAS. I have
ctlportslave running as fingerd. checkrad perl script works fine when I run
it manually. But it is never run by freeradius. I think this is because I
don't understand the meaning of :=, == and = statements.
First
At 03:52 PM 10/2/2001 +0200, you wrote:
Hello,
I can't get Simultaneous-Use working. I use portslave as NAS. I have
ctlportslave running as fingerd. checkrad perl script works fine when I run
it manually. But it is never run by freeradius. I think this is because I
don't understand the meaning
/users for example? But I need auth* in sql.
That's what I said!
Simultaneous-Use works fine in /etc/raddb/users. But it will not
work in sql. To make it work in sql, you have to make the
changes I suggested.
No, don't. Your changes fix the specific symptom you are experiencing,
but do
Andrew Melnikov [EMAIL PROTECTED] wrote:
First, in /doc/Simultaneous-Use file I can see the following:
...
That's wrong. I'll correct it now.
So, something in the documentation is incorrect. Can somebody tell me what
should I change in my users file to make simultaneous logins limit
);
return RLM_MODULE_NOTFOUND;
}
#endif
I am use 'Simultaneous-Use' in real life. NAS - Hiper Total Control
My radcheck:
id | username|attribute | value
+-+--+--
235 | Mag | Simultaneous-Use | 1
My radreply:
id | username
èÕ ÉÚ ÚÉÓØ, äÒÉÎËÉÎÓ?
éÃ Ü Sergey V. Sichevsky [[EMAIL PROTECTED]] ×ÒÏÔÅ:
If I define it in in radcheck or radgroupcheck tables FreeRADIUS
says:
[skip]
rlm_sql: Pairs do not match [test]
You must wrote 'Simultaneous-Use = 1' into radreply (radgroupreply) also.
Some question
When I add the check item Simultaneous-Use in
the sql table i get in debug mode
auth: No Auth-Type configuration for the request, rejecting the user
auth: Failed to validate the user.
Without the statement everything works fine.
The Simultaneous-Use statement in users-file (without sql)
works
athincation back to the server. But this
did not work either. If anyone has any suggestions on how to prevent
simultaneous use please let me know.
The 'users' file entry should look like:
DEFAULT Auth-Type := System, Simultaneous-Use := 1
Reply-Message = Welcome To me
pat st.john [EMAIL PROTECTED] wrote:
ok, after some more research, it looks like the problem I'm having is that
my users log in with Pusername,
the hints file strips the prefix off, and authenticates the user withthe
stripped username, but the radutmp file still shows the Pusername as the
turns out I found another way around the whole simultaneous use issue, the
CVX nas supports a reply called Port-Limit the documentation states that
this is ignored or has been disabled, but it looks like the firmware in the
NAS was updated and it is now supported. thanks for the help though
101 - 181 of 181 matches
Mail list logo
