<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: Arial; font-size: 10pt; color: #000000'><P><SPAN>hi,</SPAN></P>
<P><SPAN></SPAN> </P>
<P><SPAN>mi name is Daniel.</SPAN></P>
<P><SPAN></SPAN> </P>
<P><SPAN>my problem is about simultaneous-use, i need use this attribute, but when i try use it, only the last user logged apply this attribute.</SPAN></P>
<P><SPAN></SPAN> </P>
<P><SPAN>i think the problem is radutmp, when i execute the radwho command i only can see the last user logged.</SPAN></P>
<P><SPAN></SPAN> </P>
<P><SPAN>is possible a problem whit the nas-port (ever is nas port 0), too i received this message </SPAN></P>
<P><SPAN></SPAN> </P>
<P><SPAN> Error: rlm_radutmp: Logout entry for NAS cisco_pruebas port 0 has wrong ID<BR></SPAN></P>
<P><SPAN>when the user that appear in radwho is disconnected.</SPAN></P>
<P><SPAN></SPAN> </P>
<P><SPAN></SPAN> </P>
<P><SPAN>this is my radiusd -X</SPAN></P>
<P><SPAN></SPAN> </P>
<P><SPAN></SPAN> </P>
<P><SPAN></SPAN><SPAN>Starting - reading configuration files ...<BR>reread_config: reading radiusd.conf<BR>Config: including file: /etc/raddb/proxy.conf<BR>Config: including file: /etc/raddb/clients.conf<BR>Config: including file: /etc/raddb/snmp.conf<BR>Config: including file: /etc/raddb/eap.conf<BR> main: prefix = "/usr"<BR> main: localstatedir = "/var"<BR> main: logdir = "/var/log/radius"<BR> main: libdir = "/usr/lib"<BR> main: radacctdir = "/var/log/radius/radacct"<BR> main: hostname_lookups = yes<BR> main: snmp = yes<BR> main: max_request_time = 30<BR> main: cleanup_delay = 5<BR> main: max_requests = 1024<BR> main: delete_blocked_requests = 0<BR> main: port = 1812<BR> main: allow_core_dumps = no<BR> main: log_stripped_names = yes<BR> main: log_file = "/var/log/radius/radius.log"<BR> main: log_auth = yes<BR> main: log_auth_badpass = no<BR> main: log_auth_goodpass = no<BR> main: pidfile = "/var/run/radiusd/radiusd.pid"<BR> main: bind_address = 12.12.12.40 IP address [12.12.12.40]<BR> main: user = "(null)"<BR> main: group = "(null)"<BR> main: usercollide = no<BR> main: lower_user = "no"<BR> main: lower_pass = "no"<BR> main: nospace_user = "no"<BR> main: nospace_pass = "no"<BR> main: checkrad = "/usr/sbin/checkrad"<BR> main: proxy_requests = yes<BR> proxy: retry_delay = 5<BR> proxy: retry_count = 3<BR> proxy: synchronous = no<BR> proxy: default_fallback = yes<BR> proxy: dead_time = 120<BR> proxy: post_proxy_authorize = no<BR> proxy: wake_all_if_all_dead = no<BR> security: max_attributes = 200<BR> security: reject_delay = 1<BR> security: status_server = no<BR> main: debug_level = 0<BR>read_config_files: reading dictionary<BR>read_config_files: reading naslist<BR>Using deprecated naslist file. Support for this will go away soon.<BR>read_config_files: reading clients<BR>read_config_files: reading realms<BR>radiusd: entering modules setup<BR>Module: Library search path is /usr/lib<BR>Module: Loaded exec <BR> exec: wait = yes<BR> exec: program = "(null)"<BR> exec: input_pairs = "request"<BR> exec: output_pairs = "(null)"<BR> exec: packet_type = "(null)"<BR>rlm_exec: Wait=yes but no output defined. Did you mean output=none?<BR>Module: Instantiated exec (exec) <BR>Module: Loaded expr <BR>Module: Instantiated expr (expr) <BR>Module: Loaded PAP <BR> pap: encryption_scheme = "clear"<BR>Module: Instantiated pap (pap) <BR>Module: Loaded CHAP <BR>Module: Instantiated chap (chap) <BR>Module: Loaded MS-CHAP <BR> mschap: use_mppe = yes<BR> mschap: require_encryption = no<BR> mschap: require_strong = no<BR> mschap: with_ntdomain_hack = no<BR> mschap: passwd = "(null)"<BR> mschap: ntlm_auth = "(null)"<BR>Module: Instantiated mschap (mschap) <BR>Module: Loaded Pam <BR> pam: pam_auth = "radiusd"<BR>Module: Instantiated pam (pam) <BR>Module: Loaded System <BR> unix: cache = no<BR> unix: passwd = "/etc/passwd"<BR> unix: shadow = "/etc/shadow"<BR> unix: group = "/etc/group"<BR> unix: radwtmp = "/var/log/radius/radwtmp"<BR> unix: usegroup = no<BR> unix: cache_reload = 600<BR>Module: Instantiated unix (unix) <BR>Module: Loaded LDAP <BR> ldap: server = "10.40.30.80"<BR> ldap: port = 389<BR> ldap: net_timeout = 1<BR> ldap: timeout = 4<BR> ldap: timelimit = 3<BR> ldap: identity = ""<BR> ldap: tls_mode = no<BR> ldap: start_tls = no<BR> ldap: tls_cacertfile = "(null)"<BR> ldap: tls_cacertdir = "(null)"<BR> ldap: tls_certfile = "(null)"<BR> ldap: tls_keyfile = "(null)"<BR> ldap: tls_randfile = "(null)"<BR> ldap: tls_require_cert = "allow"<BR> ldap: password = ""<BR> ldap: basedn = "ou=prf, dc=uax,dc=es"<BR> ldap: filter = "(uid=%{Stripped-User-Name:-%{User-Name}})"<BR> ldap: base_filter = "(objectclass=radiusprofile)"<BR> ldap: default_profile = "(null)"<BR> ldap: profile_attribute = "(null)"<BR> ldap: password_header = "{clear}"<BR> ldap: password_attribute = "userPassword"<BR> ldap: access_attr = "(null)"<BR> ldap: groupname_attribute = "cn"<BR> ldap: groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))"<BR> ldap: groupmembership_attribute = "(null)"<BR> ldap: dictionary_mapping = "/etc/raddb/ldap.attrmap"<BR> ldap: ldap_debug = 0<BR> ldap: ldap_connections_number = 5<BR> ldap: compare_check_items = no<BR> ldap: access_attr_used_for_allow = yes<BR> ldap: do_xlat = yes<BR> ldap: set_auth_type = yes<BR>rlm_ldap: Registering ldap_groupcmp for Ldap-Group<BR>rlm_ldap: Creating new attribute ldap_client1-Ldap-Group<BR>rlm_ldap: Registering ldap_groupcmp for ldap_client1-Ldap-Group<BR>rlm_ldap: Registering ldap_xlat with xlat_name ldap_client1<BR>rlm_ldap: Over-riding set_auth_type, as we're not listed in the "authenticate" section.<BR>rlm_ldap: reading ldap<->radius mappings from file /etc/raddb/ldap.attrmap<BR>rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$<BR>rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$<BR>rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type<BR>rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use<BR>rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id<BR>rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id<BR>rlm_ldap: LDAP sambaLMPassword mapped to RADIUS LM-Password<BR>rlm_ldap: LDAP sambaNTPassword mapped to RADIUS NT-Password<BR>rlm_ldap: LDAP sambaAcctFlags mapped to RADIUS SMB-Account-CTRL-TEXT<BR>rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration<BR>rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address<BR>rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password<BR>rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password<BR>rlm_ldap: LDAP userPassword mapped to RADIUS User-Password<BR>rlm_ldap: LDAP digestHA1 mapped to RADIUS Digest-HA1<BR>rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type<BR>rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol<BR>rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address<BR>rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask<BR>rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route<BR>rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing<BR>rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id<BR>rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU<BR>rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression<BR>rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host<BR>rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service<BR>rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port<BR>rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number<BR>rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id<BR>rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network<BR>rlm_ldap: LDAP radiusClass mapped to RADIUS Class<BR>rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout<BR>rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout<BR>rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action<BR>rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service<BR>rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node<BR>rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group<BR>rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link<BR>rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network<BR>rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone<BR>rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit<BR>rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port<BR>rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message<BR>conns: 0x9f4d188<BR>Module: Instantiated ldap (ldap_client1) <BR> ldap: server = "10.40.40.20"<BR> ldap: port = 389<BR> ldap: net_timeout = 1<BR> ldap: timeout = 4<BR> ldap: timelimit = 3<BR> ldap: identity = ""<BR> ldap: tls_mode = no<BR> ldap: start_tls = no<BR> ldap: tls_cacertfile = "(null)"<BR> ldap: tls_cacertdir = "(null)"<BR> ldap: tls_certfile = "(null)"<BR> ldap: tls_keyfile = "(null)"<BR> ldap: tls_randfile = "(null)"<BR> ldap: tls_require_cert = "allow"<BR> ldap: password = ""<BR> ldap: basedn = "ou=alum,dc=uax,dc=es"<BR> ldap: filter = "(uid=%{Stripped-User-Name:-%{User-Name}})"<BR> ldap: base_filter = "(objectclass=radiusprofile)"<BR> ldap: default_profile = "(null)"<BR> ldap: profile_attribute = "(null)"<BR> ldap: password_header = "{clear}"<BR> ldap: password_attribute = "(null)"<BR> ldap: access_attr = "(null)"<BR> ldap: groupname_attribute = "cn"<BR> ldap: groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))"<BR> ldap: groupmembership_attribute = "(null)"<BR> ldap: dictionary_mapping = "/etc/raddb/ldap.attrmap"<BR> ldap: ldap_debug = 0<BR> ldap: ldap_connections_number = 5<BR> ldap: compare_check_items = no<BR> ldap: access_attr_used_for_allow = yes<BR> ldap: do_xlat = yes<BR> ldap: set_auth_type = yes<BR>rlm_ldap: Registering ldap_groupcmp for Ldap-Group<BR>rlm_ldap: Creating new attribute ldap_client2-Ldap-Group<BR>rlm_ldap: Registering ldap_groupcmp for ldap_client2-Ldap-Group<BR>rlm_ldap: Registering ldap_xlat with xlat_name ldap_client2<BR>rlm_ldap: Over-riding set_auth_type, as we're not listed in the "authenticate" section.<BR>rlm_ldap: reading ldap<->radius mappings from file /etc/raddb/ldap.attrmap<BR>rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$<BR>rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$<BR>rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type<BR>rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use<BR>rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id<BR>rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id<BR>rlm_ldap: LDAP sambaLMPassword mapped to RADIUS LM-Password<BR>rlm_ldap: LDAP sambaNTPassword mapped to RADIUS NT-Password<BR>rlm_ldap: LDAP sambaAcctFlags mapped to RADIUS SMB-Account-CTRL-TEXT<BR>rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration<BR>rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address<BR>rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password<BR>rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password<BR>rlm_ldap: LDAP userPassword mapped to RADIUS User-Password<BR>rlm_ldap: LDAP digestHA1 mapped to RADIUS Digest-HA1<BR>rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type<BR>rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol<BR>rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address<BR>rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask<BR>rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route<BR>rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing<BR>rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id<BR>rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU<BR>rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression<BR>rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host<BR>rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service<BR>rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port<BR>rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number<BR>rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id<BR>rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network<BR>rlm_ldap: LDAP radiusClass mapped to RADIUS Class<BR>rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout<BR>rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout<BR>rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action<BR>rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service<BR>rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node<BR>rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group<BR>rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link<BR>rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network<BR>rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone<BR>rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit<BR>rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port<BR>rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message<BR>conns: 0x9f4e370<BR>Module: Instantiated ldap (ldap_client2) <BR>Module: Loaded eap <BR> eap: default_eap_type = "md5"<BR> eap: timer_expire = 60<BR> eap: ignore_unknown_eap_types = no<BR> eap: cisco_accounting_username_bug = no<BR>rlm_eap: Loaded and initialized type md5<BR>rlm_eap: Loaded and initialized type leap<BR> gtc: challenge = "Password: "<BR> gtc: auth_type = "PAP"<BR>rlm_eap: Loaded and initialized type gtc<BR> mschapv2: with_ntdomain_hack = no<BR>rlm_eap: Loaded and initialized type mschapv2<BR>Module: Instantiated eap (eap) <BR>Module: Loaded preprocess <BR> preprocess: huntgroups = "/etc/raddb/huntgroups"<BR> preprocess: hints = "/etc/raddb/hints"<BR> preprocess: with_ascend_hack = no<BR> preprocess: ascend_channels_per_line = 23<BR> preprocess: with_ntdomain_hack = no<BR> preprocess: with_specialix_jetstream_hack = no<BR> preprocess: with_cisco_vsa_hack = yes<BR> preprocess: with_alvarion_vsa_hack = no<BR>Module: Instantiated preprocess (preprocess) <BR>Module: Loaded detail <BR> detail: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d"<BR> detail: detailperm = 384<BR> detail: dirperm = 493<BR> detail: locking = no<BR>Module: Instantiated detail (auth_log) <BR>Module: Loaded attr_filter <BR> attr_filter: attrsfile = "/etc/raddb/attrs"<BR> rlm_attr_filter: Authorize method will be deprecated.<BR>Module: Instantiated attr_filter (attr_filter) <BR>Module: Loaded realm <BR> realm: format = "suffix"<BR> realm: delimiter = "@"<BR> realm: ignore_default = no<BR> realm: ignore_null = no<BR>Module: Instantiated realm (suffix) <BR>Module: Loaded files <BR> files: usersfile = "/etc/raddb/users"<BR> files: acctusersfile = "/etc/raddb/acct_users"<BR> files: preproxy_usersfile = "/etc/raddb/preproxy_users"<BR> files: compat = "no"<BR>Module: Instantiated files (files) <BR>Module: Loaded Acct-Unique-Session-Id <BR> acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port"<BR>Module: Instantiated acct_unique (acct_unique) <BR> detail: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d"<BR> detail: detailperm = 384<BR> detail: dirperm = 493<BR> detail: locking = no<BR>Module: Instantiated detail (detail) <BR>Module: Loaded radutmp <BR> radutmp: filename = "/var/log/radius/radutmp"<BR> radutmp: username = "%{User-Name}"<BR> radutmp: case_sensitive = no<BR> radutmp: check_with_nas = yes<BR> radutmp: perm = 511<BR> radutmp: callerid = yes<BR>Module: Instantiated radutmp (radutmp) <BR>Module: Loaded IPPOOL <BR> ippool: session-db = "/etc/raddb/danipool.db"<BR> ippool: ip-index = "/etc/raddb/ipindex.db"<BR> ippool: range-start = 10.132.0.98 IP address [10.132.0.98]<BR> ippool: range-stop = 10.132.0.100 IP address [10.132.0.100]<BR> ippool: netmask = 255.255.255.0 IP address [255.255.255.0]<BR> ippool: cache-size = 800<BR> ippool: override = yes<BR> ippool: maximum-timeout = 0<BR>Module: Instantiated ippool (dani_pool) <BR> ippool: session-db = "/etc/raddb/mainpool.db"<BR> ippool: ip-index = "/etc/raddb/mainindex.db"<BR> ippool: range-start = 10.130.0.70 IP address [10.130.0.70]<BR> ippool: range-stop = 10.130.0.100 IP address [10.130.0.100]<BR> ippool: netmask = 255.255.255.0 IP address [255.255.255.0]<BR> ippool: cache-size = 800<BR> ippool: override = yes<BR> ippool: maximum-timeout = 0<BR>Module: Instantiated ippool (main_pool) <BR> detail: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d"<BR> detail: detailperm = 384<BR> detail: dirperm = 493<BR> detail: locking = no<BR>Module: Instantiated detail (pre_proxy_log) <BR> detail: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d"<BR> detail: detailperm = 384<BR> detail: dirperm = 493<BR> detail: locking = no<BR>Module: Instantiated detail (reply_log) <BR> main: smux_password = ""<BR> main: snmp_write_access = yes<BR>SMUX connect try 1<BR>Can't connect to SNMP agent with SMUX: Connection refused<BR>Listening on authentication 12.12.12.40:1812<BR>Listening on accounting 12.12.12.40:1813<BR>Listening on proxy 12.12.12.40:1814<BR>Ready to process requests</SPAN></P>
<P><SPAN>my nas is a cisco 1841 v12.4</SPAN></P>
<P><SPAN>and my freeradius is version 1.1.3 over red hat.</SPAN></P>
<P><SPAN> </P>
<P><BR>thanks<BR>-- <BR></P>
<DIV>
<P align=center><FONT color=#990000></FONT> </P>
<P align=center><FONT color=#990000></FONT> </P>
<P> </P></DIV><BR></SPAN></div></body></html>