User-accounts do not expire in time...

liran tal liransgarage at gmail.com
Wed Nov 21 12:28:19 CET 2007


Hopefully you didn't forget to set the user-group mapping in usergroup
table, right?


Regards,
Liran.

On Nov 21, 2007 1:01 PM, Evert <evert at poboxes.info> wrote:
> Alan DeKok wrote:
> > Evert wrote:
> >> I have users in my system who are supposed to be able to logon as much as they want, in a
> >> period of 24 hours starting from  their 1st logon.
> > ...
> >> however, a user who is a member of the 24hours group is able to log on longer than the
> >> 24hours period:
> >
> >   Is the server receiving accounting packets?
> >
> >   The fact that a user received an Access-Accept doesn't mean they
> > succeeded in logging in.  The NAS may have rebooted, they may have hung
> > up, the Access-Accept could have been lost, etc.
> >
> >   The server knows (and accounts for) the user logging in only when it
> > receives an Accounting-Request packet.  The accounting packets are also
> > used to determine how long the user was logged in for.
>
>
> Provided both the server and the NAS have not rebooted in the mean time, shouldn't the
> server send a 'Maximum never usage time reached', based on the rules in sqlcounter.conf,
> accounting packets or not?
>
> How long the user has been logged on in the 24-hour period is not really relevant in my
> case. All I need is that when the user tries to log in again > 24 hours after 1st logon
> (based on AcctStartTime) he gets a 'Maximum never usage time reached'.
>
>
>
> (I'll have to check on the accounting packets. Not sure about them)
>
>
> Regards,
>         Evert
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>



More information about the Freeradius-Users mailing list