Fri Jun 29 10:20:06 2012 : Info: [sql] expand: SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, UserName, Attribute, Value, Op FROM radcheck WHERE Username = 'test1' ORDER BY id

Fri Jun 29 10:20:06 2012 : Info: [sql] expand: SELECT id, UserName, Attribute, Value, Op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, UserName, Attribute, Value, Op FROM radreply WHERE Username = 'test1' ORDER BY id

Fri Jun 29 10:20:06 2012 : Debug: sqlcounter_expand: 'SELECT SUM(AcctSessionTime - GREATER((1340953200 - AcctStartTime::ABSTIME::INT4), 0)) FROM radacct WHERE UserName='%{User-Name}' AND AcctStartTime::ABSTIME::INT4 + AcctSessionTime > '1340953200''

Fri Jun 29 10:20:06 2012 : Info: [hourlycounter] expand: SELECT SUM(AcctSessionTime - GREATER((1340953200 - AcctStartTime::ABSTIME::INT4), 0)) FROM radacct WHERE UserName='%{User-Name}' AND AcctStartTime::ABSTIME::INT4 + AcctSessionTime > '1340953200' -> SELECT SUM(AcctSessionTime - GREATER((1340953200 - AcctStartTime::ABSTIME::INT4), 0)) FROM radacct WHERE UserName='test1' AND AcctStartTime::ABSTIME::INT4 + AcctSessionTime > '1340953200'

Fri Jun 29 10:20:06 2012 : Debug: sqlcounter_expand: '%{sql:SELECT SUM(AcctSessionTime - GREATER((1340953200 - AcctStartTime::ABSTIME::INT4), 0)) FROM radacct WHERE UserName='test1' AND AcctStartTime::ABSTIME::INT4 + AcctSessionTime > '1340953200'}'

Fri Jun 29 10:20:06 2012 : Info: [hourlycounter] expand: SELECT SUM(AcctSessionTime - GREATER((1340953200 - AcctStartTime::ABSTIME::INT4), 0)) FROM radacct WHERE UserName='test1' AND AcctStartTime::ABSTIME::INT4 + AcctSessionTime > '1340953200' -> SELECT SUM(AcctSessionTime - GREATER((1340953200 - AcctStartTime::ABSTIME::INT4), 0)) FROM radacct WHERE UserName='test1' AND AcctStartTime::ABSTIME::INT4 + AcctSessionTime > '1340953200'

Fri Jun 29 10:20:06 2012 : Info: [hourlycounter] expand: %{sql:SELECT SUM(AcctSessionTime - GREATER((1340953200 - AcctStartTime::ABSTIME::INT4), 0)) FROM radacct WHERE UserName='test1' AND AcctStartTime::ABSTIME::INT4 + AcctSessionTime > '1340953200'} ->

Fri Jun 29 10:20:06 2012 : Info: [detail] expand: /netnfork/radius//var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d -> /netnfork/radius//var/log/radius/radacct/127.0.0.1/detail-20120629

Fri Jun 29 10:20:06 2012 : Info: [detail] /netnfork/radius//var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /netnfork/radius//var/log/radius/radacct/127.0.0.1/detail-20120629

Fri Jun 29 10:20:06 2012 : Info: [sql] expand: INSERT INTO radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctAuthentic, ConnectInfo_start, CalledStationId, CallingStationId, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, XAscendSessionSvrKey) VALUES('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', NULLIF('%{Realm}', ''), '%{NAS-IP-Address}', %{%{NAS-Port}:-NULL}, '%{NAS-Port-Type}', ('%S'::timestamp - '%{%{Acct-Delay-Time}:-0}'::interval), '%{Acct-Authentic}', '%{Connect-Info}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', NULLIF('%{Framed-IP-Address}', '')::inet, 0, '%{X-Ascend-Session-Svr-Key}') -> INSERT INTO radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctAuthentic, ConnectInfo_start, CalledStationId, CallingStationId, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay,

So, as you can see from my comments, the Session-Timeout attribute isn't present in the radius response debug from the first login. The second time when it appears, it is caluculated correctly. For now I think that I have an issue with FR, so I don't go further to my chillispot NAS yet.

On Thu, Jun 28, 2012 at 3:50 PM, Fajar A. Nugraha <list@fajar.net> wrote:

On Thu, Jun 28, 2012 at 7:34 PM, Andrei Petru Mura <mapandrei@gmail.com> wrote:
> id | username | attribute | op | value
>
> -----+------------------------+----------------------------+----+------------
> 167 | test1 | Password | := | test1
> 168 | test1 | Max-Daily-Session | := | 60
>
> The problem is that every time when I authenticate for the first time per
> hour (because the sqlcounter is resetted hourly), with username test1, I can
> access the services given by freeradius an unlimited time.

That's not right.
- Did you read the wiki?
- Did you try to run FR in debug mode? Did it send Session-Timeout
attribute? Was it calculated correctly?
- Does your NAS honor Session-Timeout attribute?

IIRC some NAS (e.g. chillispot) ignores some attributes (e.g.
Acct-Interim-Interval) if it's too small (e.g <= 60 seconds). That
might be the case in your setup (although the attribute here is
different).

--
Fajar
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html