Re: Simultaneous-Use oddness.

2013-07-31 Thread Matthew Schumacher
Alan, Thanks for your reply. I see your point. But this does create an issue when you deprecate a nas when users are connected (which isn't ideal but does happen) because now the session will never close and radius doesn't assume that a missing nas also means missing session, nor does it pass

Re: Simultaneous-Use oddness.

2013-07-20 Thread Alan DeKok
Matthew Schumacher wrote: When I have a session that didn't get expired in a SQL database, and the user tries to connect then freeradius correctly checks the nas using the checkrad script *UNLESS* the nas is no longer defined in the clients. If the nas is missing, radius doesn't bother to call

Re: Simultaneous Use strategy

2013-03-04 Thread Alan DeKok
Mehdi Ravanbakhsh wrote: /So i need to change /*Simultaneous Use check strategy and if user with same Calling Station ID - NAS ip address - NAS port - Called station ID try to connect i need to accept it .* Then write that policy in unlang. It's not hard. *Is there any way to change

Re: simultaneous-Use is not worrking

2012-11-04 Thread Miha
Alan, just to let you know. I figure out where was the problem. In default file in session I was having set radutmp and also sql. After I comment radutmp and let just sql it begun to work:) Thanks! Miha On Sat, 03 Nov 2012 15:27:41 -0400 Alan DeKok al...@deployingradius.com wrote: Miha

Re: simultaneous-Use is not worrking

2012-11-03 Thread Alan DeKok
Miha wrote: i am turning out you due to issue with simultaneous-Use. I readed mailing list but did not find any appropriate answer. ... my config: [root@localhost sites-available]# radiusd -X FreeRADIUS Version 2.1.12, for host ... Ready to process requests. The reason to post the

Re: simultaneous-Use is not worrking

2012-11-03 Thread Miha
HI Alan, log with simultaneous-Use := 1: rad_recv: Accounting-Request packet from host xxx.xxx.xxx.xxx port 40165, id=56, length=327 Acct-Status-Type = Start Acct-Session-Id = 21613e25-697e-4d90-a741-586503d4abcb User-Name = 018108753.enterprise Freeswitch-Src =

Re: Simultaneous-Use checking

2012-02-25 Thread Fajar A. Nugraha
On Sat, Feb 25, 2012 at 11:51 AM, opti2k4 dr...@email.t-com.hr wrote: Hi, i need little help with this. I have MySQL setup with freeradis, that is working. Now for Simultaneous-Use checking there are no querys to uncomment inside sql.conf by default (installed freeradius over apt-get ). It

Re: Simultaneous-use check but don't reject

2011-12-20 Thread Alan DeKok
Alexander Kosykh wrote: I'm using Simultaneous-use := 1 and sql for check on my Freeradius server. When the radius found that customer connected already it reject customer with Reply-Message := \r\nYou are already logged in - access denied\r\n\n. Is the way do not reject customer to be able

Re: Simultaneous-use check but don't reject

2011-12-20 Thread Alexander Kosykh
The question is not how to make captive portal on my NAS, the question is how do not reject customer, who reached max value of simultaneous-use? Regards, Alexander. 2011/12/20 Alan DeKok al...@deployingradius.com Alexander Kosykh wrote: I'm using Simultaneous-use := 1 and sql for check on my

Re: Simultaneous-use check but don't reject

2011-12-20 Thread Alan Buxey
Hi, The question is not how to make captive portal on my NAS, the question is how do not reject customer, who reached max value of simultaneous-use? if you dont care about them reaching that value, then why are you checking? but if you really do want to redirect them to an error

Re: Simultaneous-use check but don't reject

2011-12-20 Thread Alexander Kosykh
I tried to do this in my config session { # radutmp # # See Simultaneous Use Checking Queries in sql.conf sql if (Post-Auth-Type == reject) { ok block_auth_error # my own policy } } but radius answer is reject whatever and pppoe didn't up 2011/12/21 Alan Buxey a.l.m.bu...@lboro.ac.uk Hi,

Re: Simultaneous-use check but don't reject

2011-12-20 Thread Fajar A. Nugraha
On Wed, Dec 21, 2011 at 4:18 AM, Alexander Kosykh avkos...@gmail.com wrote: I tried to do this in my config session { # radutmp # # See Simultaneous Use Checking Queries in sql.conf sql if (Post-Auth-Type == reject) { ok block_auth_error # my own policy } } but radius answer is

Re: Simultaneous-use check but don't reject

2011-12-20 Thread Fajar A. Nugraha
On Wed, Dec 21, 2011 at 5:29 AM, Fajar A. Nugraha l...@fajar.net wrote: On Wed, Dec 21, 2011 at 4:18 AM, Alexander Kosykh avkos...@gmail.com wrote: I tried to do this in my config but radius answer is reject whatever and pppoe didn't up You know what, since you say it's pppoe, I can share a

Re: Simultaneous-use check but don't reject

2011-12-20 Thread Alexander Kosykh
Hi. I knew how to make all you wrote above. I need to know how to accept customer, when sim-use rejected him. Regards, Alexander. 2011/12/21 Fajar A. Nugraha l...@fajar.net On Wed, Dec 21, 2011 at 5:29 AM, Fajar A. Nugraha l...@fajar.net wrote: On Wed, Dec 21, 2011 at 4:18 AM, Alexander

Re: Simultaneous-use check but don't reject

2011-12-20 Thread Fajar A. Nugraha
On Wed, Dec 21, 2011 at 12:56 PM, Alexander Kosykh avkos...@gmail.com wrote: Hi. I knew how to make all you wrote above. Are you sure? I need to know how to accept customer, when sim-use rejected him. Cause if you do, you wouldn't ask that. Easiest way: simply remove sql (or radutmp,

Re: Simultaneous-use check but don't reject

2011-12-20 Thread Alexander Kosykh
How to make checkrad, if disable all in session section? acct-stop packets is lost sometimes and sql think that customer is online, but he didn't. Regards, Alexander. 2011/12/21 Fajar A. Nugraha l...@fajar.net On Wed, Dec 21, 2011 at 12:56 PM, Alexander Kosykh avkos...@gmail.com wrote: Hi.

Re: Simultaneous-use check but don't reject

2011-12-20 Thread Fajar A. Nugraha
On Wed, Dec 21, 2011 at 1:22 PM, Alexander Kosykh avkos...@gmail.com wrote: How to make checkrad, if disable all in session section? checkrad should be disabled (i.e. not called by FR) when you comment-out radutmp from session section. You should still be able to run it manually $ checkrad

Re: Simultaneous-use check but don't reject

2011-12-20 Thread Alexander Kosykh
Do you have some examples, which work fast to handle 10 AAA/second and check sim-use without freeradius standart methods? Regards, Alexander. 2011/12/21 Fajar A. Nugraha l...@fajar.net I belive I responded to a similar question yesterday (search the list archive). You just have to deal with

Re: Simultaneous-use check but don't reject

2011-12-20 Thread Fajar A. Nugraha
On Wed, Dec 21, 2011 at 2:10 PM, Alexander Kosykh avkos...@gmail.com wrote: Do you have some examples, which work fast to handle 10 AAA/second and check sim-use without freeradius standart methods? Did you read what I wrote earlier? All the concepts are there. Converting it to actual code is

Re: Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-09 Thread Alan DeKok
Erik wrote: wouldn't you at least see checkrad initiate in the freeradius -X debug if I set the NAS type to cisco? I was just trying to get it to initiate, not expecting it to work. In the debug, it doesn't even come up. I've read in prior posts where you said that checkrad should initiate

Re: Simultaneous-Use For Group Using Unlang

2011-11-09 Thread Alan DeKok
det.explo...@yahoo.com wrote: I'd like to implement this using unlang but not sure where to start. The part that I am having difficulty is on where to create the procedure and how to call the procedure. The rest of the things like the DB query I can reuse from the existing program. I want

Re: Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-09 Thread Erik
 Are you looking for additional problems, or are you trying to solve the original issue? I'm trying to understand exactly what's happening was wondering why checkrad wasn't being called. If I get a NAS which does SNMP, for example, I wanted to know that checkrad would work in a predictable

Re: Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-09 Thread Alan DeKok
Erik wrote: I'm trying to understand exactly what's happening was wondering why checkrad wasn't being called. If I get a NAS which does SNMP, for example, I wanted to know that checkrad would work in a predictable fashion. It does. It works. See man checkrad. I'll quote some of your

Re: Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-09 Thread Erik
 It does.  It works.  See man checkrad. Checkrad is called to double-check duplicate logins. Thank you, I understand now.  The guy using exec-program-wait for Simultaneous-Use was doing something different.  That was clear from his post. Not to me - this is a new world for me I'm doing

Re: Simultaneous-Use For Group Using Unlang

2011-11-09 Thread Det Det
Subject: Re: Simultaneous-Use For Group Using Unlang det.explo...@yahoo.com wrote: I'd like to implement this using unlang but not sure where to start. The part that I am having difficulty is on where to create the procedure and how to call the procedure. The rest of the things like the DB query I

Re: Simultaneous-Use For Group Using Unlang

2011-11-09 Thread Fajar A. Nugraha
On Thu, Nov 10, 2011 at 9:27 AM, Det Det det.explo...@yahoo.com wrote: Hi, Where do I put this piece of code? Can I do this invocation in the authorize block? Or is it something I put in the radiusd.conf? man unlang Requests are processed through virtual servers (including the default one),

Re: Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-08 Thread Alan DeKok
Erik wrote: I've been going in circles for days on how to come up with a workaround to get simultaneous-use checking working on my FreeRadius + PEAP MSCHAPv2 deployment. I have read through seemingly all of the posts... I suspect certain areas which might be causing the problem: 1) my NAS

Re: Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-08 Thread Erik
Alan, thanks for the response...  Because the cheap NAS (a) isn't a Cisco box, and (b) doesn't support the protocols needed by checkrad. wouldn't you at least see checkrad initiate in the freeradius -X debug if I set the NAS type to cisco? I was just trying to get it to initiate, not

Re: Simultaneous-Use Checking with FreeRadius + MYSQL

2011-11-08 Thread Fajar A. Nugraha
On Wed, Nov 9, 2011 at 5:11 AM, Erik heideb...@gmail.com wrote: I've read in prior posts where you said that checkrad should initiate regardless if the radutmp or mysql modules were used. I really don't recommend using radutmp. And if you use sql, there's no need to use checkrad. Simultanous

Re: Simultaneous-Use and UserName sent from NAS

2011-06-10 Thread Ziggy Bopster
Hi Alan,  Read doc/Simultaneous-Use.  It's a how-to, and most questions are answered there. Thank you.. I will re-read the Simultaneous-Use Doc again.. I may have to start from a simple configuration, before trying to integrate that with e-Directory.  Ugh.  Upgrade to 2.1.10. I'll upgrade

Re: Simultaneous-Use and UserName sent from NAS

2011-06-10 Thread Ziggy Bopster
Hi Fajar, Thanks for replying.. Really appreciate it. Ask the NAS vendor. It's CISCO.. I do see one Accounting-Request packet for Username=Ziggy when I terminate the connection.. But no Accounting-Request packet for the Start of Username=ziggy logging in. I do see Access-Request packets for

Re: Simultaneous-Use and UserName sent from NAS

2011-06-09 Thread Alan DeKok
Ziggy Bopster wrote: I am want to enable Simultaneous-Use for our users. I have been stuck for many many days trying to figure this out, any help is greatly appreciated. This is my first time posting, so sorry if my netiquette is not correct Read doc/Simultaneous-Use. It's a how-to, and

Re: Simultaneous-Use and UserName sent from NAS

2011-06-09 Thread Fajar A. Nugraha
On Fri, Jun 10, 2011 at 2:26 AM, Ziggy Bopster ziggybops...@gmail.com wrote: IV.  Questions: 1) Why is the NAS sending so many randomly generated numeric UserName in the Accounting-Request? 2) How can I get the NAS to send the correct Username (Ziggy) instead of the randomly generated numbers

Re: Simultaneous-Use = 1 not working

2011-02-06 Thread Alan DeKok
raisedtozero wrote: Hello Ive configured my clients files and has the proper NAS type. Problem is multiple user can login. How do i resolve that? Read doc/Simultaneous-Use Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Simultaneous use

2010-09-02 Thread Alan DeKok
Tom Cooper wrote: hi all, I have to implement Simultaneous-Use on my freeraduis. Running freeradius-2.1.9-2 on CentOS 5.4 64 bit. I have followed all the steps listed here:

Re: Simultaneous-Use

2010-08-31 Thread Student University
its worked after changing the NAS type to other instead of cisco , On Mon, Aug 30, 2010 at 11:19 PM, ziko emobux...@yahoo.com wrote: Go to /etc/raddb/sql/mysql/dialup.conf file and find Simultaneous Use Checking Queries and there uncomment needed lines. then add simultaneous-use attribute

Re: Simultaneous-Use

2010-08-30 Thread ziko
Go to /etc/raddb/sql/mysql/dialup.conf file and find Simultaneous Use Checking Queries and there uncomment needed lines. then add simultaneous-use attribute to user. It worked for me. From: Student University studen...@gmail.com To: FreeRadius users mailing

Re: simultaneous-use via exec ?

2010-03-19 Thread Alan DeKok
power159 wrote: I am trying to load simultaneous-use parameter via exec . What does that mean? I have tried it in any section ( authorize / accounting / post-auth and .. ) at beginning and end of the section , but I dont know why freeradius is not reading it .. its just working when I am

Re: simultaneous-use doc

2010-03-01 Thread Alan DeKok
J Brandon Polley wrote: I am trying to understand the simultaneous-use doc I am having trouble with a part that says: Note that you need to add the Simultaneous-Use parameter to the check item (first line), not the reply item, using the ':=' operator. I am not sure where to add the

Re: Re: Simultaneous-Use problem with Mikrotik NAS clients

2010-02-12 Thread Fojtán Balázs István
Hello Fajar, mysql select * from radgroupreply; ++---+--++---+ | id | GroupName | Attribute ? ? ? ?| op | Value | ++---+--++---+ | ?1 | HZ ? ? ? ?| Simultaneous-Use | := | 1 ? ? |

Re: Re: Simultaneous-Use problem with Mikrotik NAS clients

2010-02-12 Thread Chris Knipe
Yes, Simulaneous-Use is a check item, not a reply. 2010/2/12 Fojtán Balázs István bal...@fojtan.hu Hello Fajar, mysql select * from radgroupreply; ++---+--++---+ | id | GroupName | Attribute ? ? ? ?| op | Value |

Re: Re: Simultaneous-Use problem with Mikrotik NAS clients

2010-02-12 Thread Fojtán Balázs István
Hello, Yes, Simulaneous-Use is a check item, not a reply. Ok, I did this mistake, sorry. Now I've deleted the Simultaneous-Use := 1 record from radgroupreply (now this is empty), and inserted it into the radgroupcheck. mysql select * from radgroupcheck;

Re: Simultaneous-Use problem with Mikrotik NAS clients

2010-02-11 Thread Fajar A. Nugraha
2010/2/11 Fojtán Balázs István bal...@fojtan.hu: simul_count_query = SELECT COUNT(*) \ FROM ${acct_table1} \ WHERE username = '%{SQL-User-Name}' \ AND acctstoptime IS NULL it uses ${acct_table1} (should be radacct by default). Have you enabled accounting? mysql select * from radcheck;

Re: Re: Simultaneous-Use problem with Mikrotik NAS clients

2010-02-11 Thread Fojtán Balázs István
Hello Fajar, thanks for your rapid response! simul_count_query = SELECT COUNT(*) \ FROM ${acct_table1} \ WHERE username = '%{SQL-User-Name}' \ AND acctstoptime IS NULL it uses ${acct_table1} (should be radacct by default). Have you enabled accounting? Yes, the accounting is working. It is

Re: Simultaneous-Use problem with Mikrotik NAS clients

2010-02-11 Thread Fajar A. Nugraha
2010/2/11 Fojtán Balázs István bal...@fojtan.hu: mysql select * from radgroupreply; ++---+--++---+ | id | GroupName | Attribute        | op | Value | ++---+--++---+ |  1 | HZ        | Simultaneous-Use | := | 1     |

Re: Simultaneous-Use problem with Mikrotik NAS clients

2010-02-11 Thread Marinko Tarlac
Yes. Fajar A. Nugraha wrote: 2010/2/11 Fojtán Balázs István bal...@fojtan.hu: mysql select * from radgroupreply; ++---+--++---+ | id | GroupName | Attribute| op | Value | ++---+--++---+ | 1 | HZ|

Re: Simultaneous Use

2010-02-09 Thread Alan DeKok
Josh Willmarth wrote: Hello, Quick question: how do I restrict simultaneous use on a user by user basis in the users file? You set the attribute Simultaneous-Use on a user by user basis. bob Simultaneous-Use := 1 Alan DeKok. - List info/subscribe/unsubscribe? See

Re: simultaneous use logging

2009-06-17 Thread Ivan Kalik
I have setup a custom module to do auth and acct. In debug mode everything appears correct, and responses appear correct. When I don't have radius running in debug mode, responses still appear correct, but if auth fails due to simultaneous use, radius is logging 'Auth: Login OK'.

Re: simultaneous use logging

2009-06-17 Thread James Devine
Well, in debugging mode, it doesn't log anything to the file, but the debug output shows it being rejected. When I am not running in debug, I only get 'Login OK: [zdls02/p2182111] (from client allowed_clients port 536936642)' logged by the radius server, I am logging my own simultaneous use

Re: simultaneous use logging

2009-06-17 Thread Ivan Kalik
Well, in debugging mode, it doesn't log anything to the file, but the debug output shows it being rejected. When I am not running in debug, I only get 'Login OK: [zdls02/p2182111] (from client allowed_clients port 536936642)' logged by the radius server, I am logging my own simultaneous use

Re: simultaneous use logging

2009-06-17 Thread James Devine
The authentication portion of the module returns ok, the session portion returns reject, as it should. On Wed, Jun 17, 2009 at 9:18 AM, Ivan Kalikt...@kalik.net wrote: Well, in debugging mode, it doesn't log anything to the file, but the debug output shows it being rejected.  When I am not

Re: simultaneous use logging

2009-06-17 Thread Alan DeKok
James Devine wrote: The authentication portion of the module returns ok, the session portion returns reject, as it should. No. The session portion should return ok, and increment request-simul_count. See rlm_radutmp for examples. This is because users may be tracked in multiple places

Re: simultaneous use logging

2009-06-17 Thread James Devine
Ah yes, I was doing that wrong, that seems to work much better now. Thank you. On Wed, Jun 17, 2009 at 10:28 AM, Alan DeKokal...@deployingradius.com wrote: James Devine wrote: The authentication portion of the module returns ok, the session portion returns reject, as it should.  No.  

Re: simultaneous use logging

2009-06-16 Thread Alan DeKok
James Devine wrote: I have setup a custom module to do auth and acct. In debug mode everything appears correct, and responses appear correct. When I don't have radius running in debug mode, responses still appear correct, but if auth fails due to simultaneous use, radius is logging 'Auth:

Re: Simultaneous-Use

2009-05-01 Thread Ivan Kalik
I'm back on Simultaneous-Use. I think the problem comes from NAS because NAS-Port gives 0 value in the Access-Request. You can see following log Apr 30 18:17:22.353 GMT: RADIUS: NAS-Port-Type [61] 6 Virtual [5] Apr 30 18:17:22.353 GMT: RADIUS: NAS-Port

Re: Simultaneous-Use for roaming wireless user

2009-02-13 Thread Alexandre Chapellon
Well if you know a way to check if the session is really up or no on your NAS i might not be hard to write a checkrad script to enable stale session deletion. Le 12.02.2009 18:33, ST Wong (ITSC) a écrit : Hi all, We enabled Simultaneous-Use checking with checking against accouting data

Re: Simultaneous-Use check not working

2008-10-27 Thread tnt
I check for a login using radwho and I see I have a session, I then attempt both a new auth and start accounting again and still radwho shows only one login. The fact that you have user listed in radwho doesn't mean that he is connected to the NAS as well. checkrad script will delete stale

Re: Simultaneous-Use check not working

2008-10-27 Thread DAve
[EMAIL PROTECTED] wrote: I check for a login using radwho and I see I have a session, I then attempt both a new auth and start accounting again and still radwho shows only one login. The fact that you have user listed in radwho doesn't mean that he is connected to the NAS as well. checkrad

Re: Simultaneous-Use check not working

2008-10-27 Thread Marcelus Trojahn
Are you telling the radius to check for Simultaneous-Use := 1 anywhere? Even if you have the SQL for simultaneous use uncommented, you still have to configure Simultaneous-Use := 1 to that specific user or group, otherwise it will just ignore the SQL... I also use SQL for my authentication but

Re: Simultaneous-Use check not working

2008-10-27 Thread tnt
It is other both in the localhost client and in the client I created to test using radiustest. I have, it shows 5 sessions for this user. mysql SELECT COUNT(*) FROM radacct WHERE UserName='yellowhousejake' AND AcctStopTime = 0; +--+ | COUNT(*) | +--+ |5 | +--+ 1

Re: Simultaneous-Use check not working

2008-10-27 Thread DAve
[EMAIL PROTECTED] wrote: It is other both in the localhost client and in the client I created to test using radiustest. I have, it shows 5 sessions for this user. mysql SELECT COUNT(*) FROM radacct WHERE UserName='yellowhousejake' AND AcctStopTime = 0; +--+ | COUNT(*) | +--+ |

Re: Simultaneous-Use check not working

2008-10-27 Thread DAve
Marcelus Trojahn wrote: Are you telling the radius to check for Simultaneous-Use := 1 anywhere? Even if you have the SQL for simultaneous use uncommented, you still have to configure Simultaneous-Use := 1 to that specific user or group, otherwise it will just ignore the SQL... I also use SQL

Re: Simultaneous-Use check not working

2008-10-27 Thread tnt
Do I need to set Simultaneous-Use := 1 for the groups not allowed SU, and Simultaneous-Use := 2 for the group allowed SU? OK. This is how Simultaneous-Use works in freeradius: you put that attribute when you want to set the limit for a number of simultaneous connections. The number you enter is

Re: Simultaneous-Use ..

2008-08-31 Thread Alan DeKok
Alexandre J. Correa - Onda Internet wrote: how i can setup freeradius to disconnect previous session of user that has Simultaneous-Use = 1 ?! If your NAS supports it, use radclient to disconnect a user. You can run radclient as an executable program from within the configuration files.

Re: simultaneous-use check via sql

2008-08-05 Thread Alan DeKok
Oguzhan Kayhan wrote: I am trying to run Simultaneous-Use parameter on freeradius 2.0.5 which i have 2 virtual servers on. There can be same usernames on both virtual servers, so im not sure about how it works but i prefer to use sql instead of radutmp file for simultaneous check. The

Re: simultaneous-use check via sql

2008-08-05 Thread Oguzhan Kayhan
Oguzhan Kayhan wrote: I am trying to run Simultaneous-Use parameter on freeradius 2.0.5 which i have 2 virtual servers on. There can be same usernames on both virtual servers, so im not sure about how it works but i prefer to use sql instead of radutmp file for simultaneous check. The

Re: simultaneous-use check via sql

2008-08-05 Thread Alan DeKok
Oguzhan Kayhan wrote: Different virtual servers using different sql databases, so it wont be a problem to use same username i think (or am i wrong?) If you do that, yes, it should work. In 1.1.7 version to test the sim-use i was using this setting so without loggin in i was able to test

Re: Simultaneous-Use and radwho

2008-06-13 Thread Alan DeKok
Tuc at T-B-O-H.NET wrote: Ok, wasn't aware of the functionality. I don't see a radsneeze, so I'm guessing you pipe them back in via echoing it to radclient? Yes. I'd love to help, but I'm a C compiler (I can find includes/functions and missing libraries) and not a C programmer.

Re: Simultaneous-Use and radwho

2008-06-12 Thread Tuc at T-B-O-H.NET
Copy the configs to a test machine. Run radsniff on the production machine to grab packets. Play them back on the test machine. Run radiusd -X on the test machine. Ok, wasn't aware of the functionality. I don't see a radsneeze, so I'm guessing you pipe them back in via echoing it

Re: Simultaneous-Use and radwho

2008-06-11 Thread Alan DeKok
Tuc at T-B-O-H.NET wrote: I haven't been given authorization to do a radiusd -X yet, Copy the configs to a test machine. Run radsniff on the production machine to grab packets. Play them back on the test machine. Run radiusd -X on the test machine. But it seems somehow they

Re: Simultaneous use without DB

2008-04-10 Thread Eduardo Lima
Yes, I receive accounting packets from the NAS normally... Ivan Kalik [EMAIL PROTECTED] escreveu: Are you getting accounting packets from the NAS at all? Ivan Kalik Kalik Informatika ISP Dana 8/4/2008, Eduardo Lima pi¹e: I removed the Auth-Type Sustem from users, by it stills not working.

Re: Simultaneous use without DB

2008-04-10 Thread Ivan Kalik
Have you made any changes to the accounting {} section? Ivan Kalik Kalik Informatika ISP Dana 10/4/2008, Eduardo Lima [EMAIL PROTECTED] piše: Yes, I receive accounting packets from the NAS normally... Ivan Kalik [EMAIL PROTECTED] escreveu: Are you getting accounting packets from the NAS at

Re: Simultaneous use without DB

2008-04-08 Thread Ivan Kalik
It works without the database (accounting) by default. Remove Auth-Type System from user entry. Ivan Kalik Kalik Informatika ISP Dana 8/4/2008, Eduardo Lima [EMAIL PROTECTED] piše: I want to limit one access per user on freeradius 2.0.2 but I don't want to use a database. Is that possible? I

Re: Simultaneous use without DB

2008-04-08 Thread Eduardo Lima
I removed the Auth-Type Sustem from users, by it stills not working. Radwho command doesn't work either... Ivan Kalik [EMAIL PROTECTED] escreveu: It works without the database (accounting) by default. Remove Auth-Type System from user entry. Ivan Kalik Kalik Informatika ISP Dana 8/4/2008,

Re: Simultaneous use without DB

2008-04-08 Thread Ivan Kalik
Are you getting accounting packets from the NAS at all? Ivan Kalik Kalik Informatika ISP Dana 8/4/2008, Eduardo Lima [EMAIL PROTECTED] piše: I removed the Auth-Type Sustem from users, by it stills not working. Radwho command doesn't work either... Ivan Kalik [EMAIL PROTECTED] escreveu: It

Re: Simultaneous-Use and PEAP doesn't work correctly.

2007-10-12 Thread Alan DeKok
Marcotte, Tyler wrote: Thank you for the response, even if it was ridden with unnecessary sarcasm. shrug After nearly a decade on this list, I've found that the best way to convince certain people to READ my messages, and to THINK about the problem they have is to be blunt. Those people

Re: Simultaneous-Use and PEAP doesn't work correctly.

2007-10-11 Thread Alan DeKok
Marcotte, Tyler wrote: I can understand that nowhere in any documentation does it say that an Access-Reject is sent back (I just double-checked to verify). However, what I don't understand is why not? Because it's an EAP method, *and* it's TLS. Go read the debug output again: the inner

RE: Simultaneous-Use and PEAP doesn't work correctly.

2007-10-11 Thread Marcotte, Tyler
insightful, even if it was condescending and rude. Regards, -Tyler -Original Message- From: [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Thursday, October 11, 2007 3:35 AM To: FreeRadius users mailing list Subject: Re: Simultaneous-Use and PEAP

RE: Simultaneous-Use and PEAP doesn't work correctly.

2007-10-11 Thread Phil Mayers
On Thu, 2007-10-11 at 15:11 -0400, Marcotte, Tyler wrote: Thank you for the response, even if it was ridden with unnecessary sarcasm. I wasn't trying to argue, I was trying to understand why an Access-Reject wasn't sent back. Thank you for explaining that. While I don't necessarily agree

RE: Simultaneous-Use and PEAP doesn't work correctly.

2007-10-10 Thread Marcotte, Tyler
Hi, You said it's a bug in 1.x. I just tried the latest code in the cvs repository (2.0 I believe) and I still get the same problem. After the PEAP failure, it sends an Access-Challenge rather than an Access-Reject. Am I missing anything else here? Thank you in advance. Regards, -Tyler

Re: Simultaneous-Use and PEAP doesn't work correctly.

2007-10-10 Thread Alan DeKok
Marcotte, Tyler wrote: Hi, You said it's a bug in 1.x. I just tried the latest code in the cvs repository (2.0 I believe) and I still get the same problem. After the PEAP failure, it sends an Access-Challenge rather than an Access-Reject. That's completely different from what you said

RE: Simultaneous-Use and PEAP doesn't work correctly.

2007-10-10 Thread Marcotte, Tyler
Marcotte, Tyler wrote: Hi, You said it's a bug in 1.x. I just tried the latest code in the cvs repository (2.0 I believe) and I still get the same problem. After the PEAP failure, it sends an Access-Challenge rather than an Access- Reject. That's completely different from what you

Re: Simultaneous-Use and PEAP doesn't work correctly.

2007-10-10 Thread Alan DeKok
Marcotte, Tyler wrote: ... PEAP: Got tunneled reply RADIUS code 3 Reply-Message := \r\nYou are already logged in - access denied\r\n\n PEAP: Processing from tunneled session code 0x81667248 3 Reply-Message := \r\nYou are already logged in - access denied\r\n\n PEAP:

RE: Simultaneous-Use and PEAP doesn't work correctly.

2007-10-10 Thread Marcotte, Tyler
So? Why would you expect it to send an Access-Reject? If you watch what happens next in the conversation, you should see the side effects of the Simultaneous-Use. I'm not surprised at this behavior. It's what is *supposed* to happen. Alan DeKok. I can understand that nowhere in

Re: Simultaneous-Use and PEAP doesn't work correctly.

2007-10-09 Thread Alan DeKok
Marcotte, Tyler wrote: I've configured Simultaneous-Use on my freeradius server and have it configured to use PEAP as an authentication method. Users can authenticate perfectly well, however when the Simultaneous-Use limit is exceeded, it only half works. The user is not allowed on, the

RE: Simultaneous-Use and PEAP doesn't work correctly.

2007-10-09 Thread Marcotte, Tyler
Marcotte, Tyler wrote: I've configured Simultaneous-Use on my freeradius server and have it configured to use PEAP as an authentication method. Users can authenticate perfectly well, however when the Simultaneous-Use limit is exceeded, it only half works. The user is not allowed on, the PEAP

Re: simultaneous use --solved-- :-)

2007-09-26 Thread tnt
That is wrong. You need to update the session to which accounting packet belongs to, not any open session for that user. It's better to investigate the source of open sessions and resolve it than to fudge things like that. Ivan Kalik Kalik Informatika ISP. Dana 26/9/2007, Michael Ziemann [EMAIL

Re: simultaneous use

2007-09-25 Thread Alan DeKok
Michael Ziemann wrote: Ok, I put the start and stop records back to radacct table. But it's the same problem... when I delete the entry with the stop time .00.00 00:00:00 the user can login again. And what do you see when you run the server in debugging mode? Did you read ALL of

Re: simultaneous use

2007-09-25 Thread tnt
Forget about what I wrote. I was under a (mistaken) impression that you had some idea what you were doing. BTW, if you read the whole sql.conf (helps to do that before you start messing with it) you would know what check and verify query is. If you went back to the default sql.conf, then you don't

Re: Simultaneous-Use per NAS

2007-08-31 Thread YvesDM
On 8/30/07, Svend Eriksen [EMAIL PROTECTED] wrote: Hi, We run freeradius 1.1.6 against postgresql 8.1. With the current configuration the user can only login one time simultaneously. What I want is that a user can login only one time per NAS, but that the user can login on several NASes at

Re: Simultaneous-Use per NAS

2007-08-31 Thread Svend Eriksen
On 8/30/07, *Svend Eriksen* [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: Hi, We run freeradius 1.1.6 against postgresql 8.1. With the current configuration the user can only login one time simultaneously. What I want is that a user can login only one time per NAS, but

Re: Simultaneous-Use per NAS

2007-08-31 Thread tnt
Make multiple sql instances - one for each NAS. Ivan Kalik Kalik Informatika ISP Dana 31/8/2007, Svend Eriksen [EMAIL PROTECTED] piše: On 8/30/07, *Svend Eriksen* [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: Hi, We run freeradius 1.1.6 against postgresql 8.1. With the

Re: Simultaneous-Use per NAS

2007-08-31 Thread Svend Eriksen
I'm sorry, but I dont understand what you mean. Can you please explain? reg Svend [EMAIL PROTECTED] skrev: Make multiple sql instances - one for each NAS. Ivan Kalik Kalik Informatika ISP Dana 31/8/2007, Svend Eriksen [EMAIL PROTECTED] piše: On 8/30/07, *Svend Eriksen* [EMAIL

Re: Simultaneous-Use per NAS

2007-08-31 Thread tnt
http://wiki.freeradius.org/Rlm_sql Ivan Kalik Kalik Informatika ISP Dana 31/8/2007, Svend Eriksen [EMAIL PROTECTED] piše: I'm sorry, but I dont understand what you mean. Can you please explain? reg Svend [EMAIL PROTECTED] skrev: Make multiple sql instances - one for each NAS. Ivan Kalik

Re: Simultaneous-Use per NAS

2007-08-31 Thread Roberto Greiner
I've got through the same problem, and based in some help I got here from the list I managed to solve the problem with a simple change to sql.conf, modifying the simul_count_query. The original entry: simul_count_query = SELECT COUNT(*) FROM ${acct_table1} WHERE UserName='%{SQL-User-Name}' AND

Re: Simultaneous-Use problem.

2007-06-25 Thread Kevin Bonner
On Monday 25 June 2007 11:42:08 Josh Howlett wrote: I have a feeling that the answer is blindingly obvious, but I can't figure it out... The 'users' file consists of: DEFAULT Auth-Type = Accept Simultaneous-Use := 1 Simultaneous-Use is a check item, not a reply item.

RE: Simultaneous-Use problem.

2007-06-25 Thread Josh Howlett
On Monday 25 June 2007 11:42:08 Josh Howlett wrote: I have a feeling that the answer is blindingly obvious, but I can't figure it out... The 'users' file consists of: DEFAULT Auth-Type = Accept Simultaneous-Use := 1 Because Simultaneous-Use is in the wrong place.

Re: Simultaneous-Use problem

2007-04-12 Thread Milan Holub
Hi, On Thu, Apr 12, 2007 at 07:14:48AM +, PD wrote: Dear all, We has the problem regarding the above subject... mysql select * from radgroupcheck; ++---+--++---+ | id | GroupName | Attribute| op | Value |

Re: Simultaneous-Use problem

2007-04-12 Thread PD
On 4/12/2007, Milan Holub [EMAIL PROTECTED] wrote: Hi, On Thu, Apr 12, 2007 at 07:14:48AM +, PD wrote: Dear all, We has the problem regarding the above subject... mysql select * from radgroupcheck; ++---+--++---+ | id | GroupName | Attribute|

User never get disconnected (was Re: Simultaneous-Use problem)

2007-04-12 Thread PD
On 4/12/2007, Milan Holub [EMAIL PROTECTED] wrote: .cut... == I believe you have a typo in the tables: radgroupcheck: groupname=POSTPAID usergroup: groupname=POSPAID I still have another problem... many of radacct table records are incompleted. We know the user already disconnected (even by click

  1   2   >