Re: Can't get checkrad to be called

2 Jun 2011

      I do have this feeling that I'm missing, but I'm not sure what it is.

Here's what I have configured:

clients.conf:
client 10.1.10.20 {
         secret      = password
         nastype     = pr3000

sql/mysql/dialup.conf:
         # Uncomment simul_count_query to enable simultaneous use checking
         simul_count_query = "SELECT COUNT(*) \
                              FROM ${acct_table1} \
                              WHERE username = '%{SQL-User-Name}' \
                              AND acctstoptime IS NULL"

#       simul_verify_query  = "SELECT radacctid, acctsessionid, username, \
#                               nasipaddress, nasportid, framedipaddress, \
#                               callingstationid, framedprotocol \
#                               FROM ${acct_table1} \
#                               WHERE username = '%{SQL-User-Name}' \
#                               AND acctstoptime IS NULL"

sites-enabled/default:
#  Session database, used for checking Simultaneous-Use. Either the radutmp
#  or rlm_sql module can handle this.
#  The rlm_sql module is *much* faster
session {
         radutmp

         #
         #  See "Simultaneous Use Checking Queries" in sql.conf
         sql
}

modules/perl:
        func_checksimul = checksimul

And in my MySQL radcheck table I have:

testuser  Simultaneous-Use := 1

Thanks in advance for any insight,

-dan

On 6/2/11 5:54 AM, Alan DeKok wrote:
...
Dan Brisson wrote:
...
I was wondering if someone could help me determine why checkrad isn't
being called.  I've followed the directions in the doc/Simultaneous-Use
but still cannot get checkrad to fire off when I login.  It will check
radutmp, but never reaches out to my NAS with checkrad, as evidenced
here from radiusd -X:
+- entering group session {...}
[radutmp]       expand: /var/log/radius/radutmp ->  /var/log/radius/radutmp
[radutmp]       expand: %{User-Name} ->  testuser
++[radutmp] returns ok
Using Post-Auth-Type Reject
   If you've configured Simultaneous-Use, then there should be
*something* about checkrad in the output.
...
Can I provide any other data?  I'm using SQL for authorization and
accounting.  I'm on version 2.1.7-7.el5 of FreeRadius.
   Where did you configure Simultaneous-Use?  How?
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html