Simultaneous-Use per NAS

Svend Eriksen se at metro-remote.no
Fri Aug 31 10:19:03 CEST 2007


On 8/30/07, *Svend Eriksen* <se at metro-remote.no 
<mailto:se at metro-remote.no>> wrote:
>
>     Hi,
>     We run freeradius 1.1.6 against postgresql 8.1.
>
>     With the current configuration the user can only login one time
>     simultaneously. What I want is that a user can login only one time per
>     NAS, but that the user can login on several NASes at the same
>     time. The
>     reason for this is that a user can move between NASes without the need
>     to logout from the NAS he is leaving.
>
>     The user can only login to NASes that is in a group that he is a
>     member
>     of (this already works today).
>
>     Is it also possible to set the "Simultaneously-Use" as a default value
>     for all users, so we don't have to set it on all the groups?
>
>
>     Here are the lines from the database
>
>     SELECT * FROM radcheck
>     40 | user1         | Cleartext-Password | := | kebab1
>     41 | user1         | Expiration         | := | Dec 31 2050 00:00:00
>
>     SELECT * FROM radusergroup
>     user1         | testusergroup |        0
>
>     SELECT * FROM nas
>       7 | 10.0.0.1 <http://10.0.0.1> | NAS1 | other |       | naspw
>       8 | 10.0.0.2 <http://10.0.0.2> | NAS2 | other |       | naspw
>
>     SELECT * FROM radgroupcheck
>     15 | testusergroup | NAS-IP-Address   | += | 10.0.0.1
>     <http://10.0.0.1>
>     16 | testusergroup | NAS-IP-Address   | += | 10.0.0.2
>     <http://10.0.0.2>
>     17 | testusergroup | Simultaneous-Use | := | 1
>
>
>
>     reg
>     Svend Eriksen
>
>
>
> Hi,
> Why don't you just add Simultaneous-Use for each user to radcheck?
> As I understand you correctly, that would solve the problem, right?
> I don't know how you actually add the new users, but it can easily be 
> done to give them that attr. as a default one.
>
>
> Kind Regards,
> Yves
>   
This is what I do today. The problem occurs when a user leaves a NAS 
without logging out, and then tries to connects to another NAS. The 
second NAS will ask for a new login, but freeradius will answer that the 
user is already logged in.
The solution I am looking for is that a user only can have one 
simultaneously login per NAS, but that the user can be logged in 
simultaneously on different NASes.

reg
Svend



More information about the Freeradius-Users mailing list