<div dir="ltr"><br><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Feb 19, 2013 at 11:23 AM, Mobin Yazarlou <span dir="ltr"><<a href="mailto:yazarlou.m@gmail.com" target="_blank">yazarlou.m@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="HOEnZb"><div class="h5"><br><div class="gmail_quote">On Tue, Feb 19, 2013 at 10:23 AM, Russell Mike <span dir="ltr"><<a href="mailto:radius.sir@gmail.com" target="_blank">radius.sir@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div><br><br>On Monday, February 18, 2013, Mobin Yazarlou wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br><br><div class="gmail_quote">
On Mon, Feb 18, 2013 at 9:50 PM, Phil Mayers <span dir="ltr"><<a>p.mayers@imperial.ac.uk</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div>On 18/02/13 18:02, Mobin Yazarlou wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi,<br>
I am using freeradius v2.1.12 with MySQL support and noticed if a user<br>
disconnect when radius server is down, NAS can not inform radius about<br>
user being disconnected and radius assume user is still online after<br>
coming up again. This restricts user from connecting again when you set<br>
simultaneous-use to 1.<br>
Is there any solution for this? My NAS is pptpd on Debian 6.<br>
</blockquote>
<br></div></div>
RADIUS uses UDP, and NASes don't "save" accounting packets which don't get a reply; they usually send 1-5 attempts over a few seconds, then give up (or move to the 2nd RADIUS server).<br>
<br>
You need to take this into account.<br>
<br>
Possible solutions include some combination of:<br>
<br>
1. Use interim accounting. Then, use a script to expire any sessions which have not seen accounting packets in X*interim-interval; X==3 for example<br>
<br>
2. Setup a 2nd RADIUS accounting server and ensure your NAS has both servers configured. Use one of several configs to write the accounting data to a robust, replicated database. One way to do this is with the "robust" accounting that comes with FreeRADIUS.<br>
<br>
3. Use a script to check your NASes active sessions and compare to accounting data at a certain interval.<br>
<br>
...and so on.<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/<u></u>list/users.html</a><br>
</blockquote></div><br><div><br></div><div><div>Hi,</div><div> That you for the quick reply Phil. The solutions you have provided brought new thing into my mind.</div><div> I was thinking about similar scenarios that I found out if NAS crashes, same thing will happen. Clients will get disconnected due to NAS unavailability and when NAS is unavailable, radius won't be notified about users getting disconnected.</div>
<div> By taking this into consideration, the most effective solution would be the first or the third approach you have listed. And between this two solutions, the last one seems to be easier to implement.</div><div><br></div>
<div> Please correct me if I am wrong.</div><div><br></div><div>Thank you,</div></div><div>Moby</div></blockquote><div><br></div></div></div><div>Hi Phil & Moby,</div><div><br></div><div>I am also interested in this solution since experiencing the same problem. I liked the solution no1.<span></span></div>
<div><br></div><div>But I have no idea where I can get that script but I can modify if I have one. </div><div><br></div><div>Thanks / RM-- </div><div><br></div><div> <br></div>
<br>-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br></blockquote></div><br><div><br></div></div></div><div>Hi Mike,</div>
<div> Now it is an hour that I am looking for a built-in solution or a ready-to-use script. The only thing I found was <a href="http://freeradius.org/rfc/rfc2865.html#Idle-Timeout" target="_blank">Idle-Timeout</a> attribute. This problem could be solved if RADIUS was responsible for handling this attribute but from what I read, it's the NAS's responsibility.</div>
<div><br></div><div> I hope someone helps us to find the easiest and most effective solution.</div><div><br></div><div>Thank you,</div><div>Moby</div>
<br><font face="verdana, sans-serif"><br></font></blockquote><div><font face="verdana, sans-serif"><br></font></div><div style><font face="verdana, sans-serif">Dear Moby,</font></div><div style><font face="verdana, sans-serif"><br>
</font></div><div style><font face="verdana, sans-serif">That is brilliant, i also read after your advise, and i feel that nothing can be easiest and effective than this, once Freeraiuds knows the ideal timeout value, user can be logged out by Freeradius this is what we were trying to do. Lets use it and see, i trust that it would do. </font></div>
<div style><font face="verdana, sans-serif"><br></font></div><div style><font face="verdana, sans-serif">Great Thanks !! For Helping Community By Sharing Solutions. </font></div><div style><font face="verdana, sans-serif"><br>
</font></div><div style><font face="verdana, sans-serif">Thanks Moby & Phil</font></div><div style><font face="verdana, sans-serif"><br></font></div><div style><font face="verdana, sans-serif"><br></font></div><div style>
<font face="verdana, sans-serif">Regards --RM</font></div><div style><font face="verdana, sans-serif"><br></font></div></div><br></div></div>