Dear Alan,

Thanks for your reply.. I have uncommented "sql" in session section of "/etc/raddb/sites-enabled/default"

Problem I am facing is that radius is not calling the simultaneous use queries during auth time.

When I start radius process, it displays the queries in logs as well,

connect_failure_retry_delay = 60

simul_count_query = "SELECT COUNT(*) FROM radacct WHERE UserName='%{SQL-User-Name}' AND AcctStopTime IS NULL"

simul_verify_query = "SELECT RadAcctId, AcctSessionId, UserName, NASIPAddress, NASPortId, FramedIPAddress, CallingStationId, FramedProtocol FROM radacct WHERE UserName='%{SQL-User-Name}' AND AcctStopTime IS NULL"

I have also executed this statement

INSERT INTO radgroupcheck (GroupName, Attribute, op, Value) values("dialup", "Simultaneous-Use", ":=", "1");

I have also set nastype = other in clients.conf.. but its not calling the simultaneous check query while the customer tries to authenticate. Please suggest

# Executing section preacct from file /etc/raddb/sites-enabled/default

+- entering group preacct {...}

++[preprocess] returns ok

[acct_unique] Hashing 'NAS-Port = 1,Client-IP-Address = 192.168.6.144,NAS-IP-Address = 10.233.184.1,Acct-Session-Id = "5356150300000001",User-Name = "muhd.usman@hotmail.com"'

[acct_unique] Acct-Unique-Session-ID = "6660f7aa52e1b7a4".

++[acct_unique] returns ok

[suffix] Looking up realm "hotmail.com" for User-Name = "muhd.usman@hotmail.com"

[suffix] No such realm "hotmail.com"

++[suffix] returns noop

++[files] returns noop

# Executing section accounting from file /etc/raddb/sites-enabled/default

+- entering group accounting {...}

[detail] expand: %{Packet-Src-IP-Address} -> 192.168.6.144

[detail] expand: /var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d -> /var/log/radius/radacct/192.168.6.144/detail-20140422

[detail] /var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radius/radacct/192.168.6.144/detail-20140422

[detail] expand: %t -> Tue Apr 22 12:09:27 2014

++[detail] returns ok

++[unix] returns ok

[radutmp] expand: /var/log/radius/radutmp -> /var/log/radius/radutmp

[radutmp] expand: %{User-Name} -> muhd.usman@hotmail.com

++[radutmp] returns ok

[sql] expand: %{User-Name} -> muhd.usman@hotmail.com

[sql] sql_set_user escaped user --> 'muhd.usman@hotmail.com'

[sql] expand: INSERT into radacct (AcctStatusType, UserName, AcctInputOctets, AcctOutputOctets, AcctInputPackets, AcctOutputPackets, AcctSessionTime, AcctTerminateCause, AcctSessionId, FramedIPAddress, CallingStationId, CalledStationId, NASIPAddress, NASIDENTIFIER, WISPrLocationID, WISPrLocationName) VALUES('%{Acct-Status-Type}', '%{User-Name}',0, 0, 0, 0 ,0, '%{Acct-Terminate-Cause}', '%{Acct-Session-Id}', '%{Framed-IP-Address}','%{Calling-Station-Id}', '%{Called-Station-Id}', '%{NAS-IP-Address}', '%{NAS-Identifier}', '%{WISPr-Location-ID}', '%{WISPr-Location-Name}') -> INSERT into radacct (AcctStatusType, UserName, AcctInputOctets, AcctOutputOctets, AcctInputPackets, AcctOutputPackets, AcctSessionTime, AcctTerminateCause, AcctSessionId, FramedIPAddress, CallingStationId, CalledStationId, NASIPAddress, NASIDENTIFIER, WISPrLocationID, WISPrLocationName) VALUES('Start', 'muhd.usman@hotmail.com',0, 0, 0, 0 ,0, '', '5356150300000001', '10.233.184.2','00-21-6A-1E-C2-A2', '70-72-CF-25-D8-9E', '10.233.184.1',

rlm_sql (sql): Reserving sql socket id: 3

rlm_sql_postgresql: Status: PGRES_COMMAND_OK

rlm_sql_postgresql: query affected rows = 1

rlm_sql (sql): Released sql socket id: 3

++[sql] returns ok

Thanks

On Sat, Apr 19, 2014 at 5:37 PM, Alan DeKok <aland@deployingradius.com> wrote:

Muhammad Usman wrote:
> I want to enable check that multiple sessions of same users donnot exist
> at parallel, I have enabled the two simultaneous check queries in
> dialup.conf.

That's useful, but not enough. See doc/Simultaneous-Use.

> Can some body suggest me what changes are required to bring that
> configuration in practise, as currently multiple users can login with
> same credentials, radius is not calling simultaneous check queries while
> authenticating user.

You need to be sure that the NAS is sending accounting packets, that
they're being stored in SQL, and that you have the "session" section
configured correctly in raddb/sites-enabled/default

Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html