Re: Need help in double logins in radacct
I observed the same double or multiple inserts. with same AcctSessionID and same Start time for some users. This happens with Interim update too. I later changed radius.conf to calculate AcctUniqueID and do updates based on that in
sql.conf but this random occurrence did not go away. May be it is because of the delay. Still not sure why multiple inserts.
On 8/9/07,
freeradius-users-request@lists.freeradius.org <freeradius-users-request@lists.freeradius.org> wrote:
Send Freeradius-Users mailing list submissions to
freeradius-users@lists.freeradius.org
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.freeradius.org/mailman/listinfo/freeradius-users
or, via email, send a message with subject or body 'help' to
freeradius-users-request@lists.freeradius.org
You can reach the person managing the list at
freeradius-users-owner@lists.freeradius.org
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Freeradius-Users digest..."
Today's Topics:
1. Re : Converting PAP to MS-CHAPV2 (Eshun Benjamin)
2. Re: Need help in double logins in radacct (Claudiu Filip)
----------------------------------------------------------------------
Message: 1
Date: Thu, 9 Aug 2007 09:02:22 +0000 (GMT)
From: Eshun Benjamin <bkeshun@yahoo.fr>
Subject: Re : Converting PAP to MS-CHAPV2
To: FreeRadius users mailing list
<
freeradius-users@lists.freeradius.org>
Message-ID: <107714.37623.qm@web26014.mail.ukl.yahoo.com">107714.37623.qm@web26014.mail.ukl.yahoo.com
>
Content-Type: text/plain; charset="iso-8859-1"
Freeradius can dynamically authenticate against PAP or MSCHAP. You would have to have 2 password db. ( eg. unix passwd and smbpasswd). You can not use one db for both. It does it like magic :-) if you have to db.
==================================================
Benjamin K. Eshun
----- Message d'origine ----
De : Arran Cudbard-Bell <A.Cudbard-Bell@sussex.ac.uk
>
? : FreeRadius users mailing list <freeradius-users@lists.freeradius.org>
Envoy? le : Mercredi, 8 Ao?t 2007, 23h46mn 13s
Objet : Re: Converting PAP to MS-CHAPV2
Jo?o Mendes wrote:
> HI,
> I was wondering if freeradius could do the following:
> - I have a radius client that needs to talk MS-Chapv2 and a Radius
> server that only talks PAP.
> Can freeradius convert and proxy the request to the server than
> answer to the client??
>
No,
Amongst other things In order for PAP (Plaintext Authentication
Protocol) to work, the supplicant needs to provide it's credentials in
Plaintext.
MSCHAPv2 only provides hashes on the users credentials.
> Thanks
> Jo?o Mendes
>
>
>
>
>
>
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_____________________________________________________________________________
Ne gardez plus qu'une seule adresse mail ! Copiez vos mails vers Yahoo! Mail
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <
https://lists.freeradius.org/pipermail/freeradius-users/attachments/20070809/c129902e/attachment-0001.html>
------------------------------
Message: 2
Date: Thu, 9 Aug 2007 12:51:54 +0300
From: Claudiu Filip <
claudiu@globtel.ro>
Subject: Re: Need help in double logins in radacct
To: FreeRadius users mailing list
<
freeradius-users@lists.freeradius.org>
Message-ID: <1445043763.20070809125154@globtel.ro">1445043763.20070809125154@globtel.ro>
Content-Type: text/plain; charset=us-ascii
Thursday, August 9, 2007, 10:38:27 AM, you wrote:
> could help me distinguish why it has double record in mysql. But
> when in radius logs,it has one request only.
> | RadAcctId | AcctSessionId | UserName |
> | 517069 | 3C001FC0 | foo |
> | 517071 | 3C001FC0 | foo |
> | 517075 | 3C001FC0 | foo |
Hi Nelson,
RadAcctId is an autoincrement field, so it will be different for sure.
There is no reason to have those dups unless the INSERT query is run
multiple times.
1) Are you sure that you have only one request coming to fr?
If no, the duplicates can be generated by the radius client if it
doesnt get a reply quick enough. Decreasing database response time
and increasing radius timeout on client can help.
2) AcctStopTime is different?
If no, check 1) again :D
If yes, maybe the radius client sends a weak AcctSessionId (you can
create one using the acct_unique)
Best regards,
Claudiu Filip
@: claudiu@globtel.ro
Http://www.globtel.ro
T:+40344880100
F:+40344880113
------------------------------
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
End of Freeradius-Users Digest, Vol 28, Issue 30
************************************************
--
Nachiketa Rajpurohit
This archive was generated by a fusion of
Pipermail (Mailman edition) and
MHonArc.