Hi all I'm newbie in freeradius, i've already installed freeradius-1.1.6, Mysql and MikroTik NAS. I'm configuring my radius 1 session for every 1 user : +----+---------------+---------------------------+-----+-------------+ | id | UserName | Attribute | op | Value | +----+---------------+---------------------------+-----+--------------+ | 57 | rsa@idola | Simultaneous-Use | := | 0 | | 42 | rsa@idola | Password | == | denpasar | +----+---------------+---------------------------+----+---------------+ The problem is sometimes user cannot login even no session rsa@idola user in Mikrotik NAS connected, I check with radwho, its shown below : [root@ladps ~]# radwho Login Name What TTY When From Location tyl@idola tyl@idola PPP S232 Mon 17:43 129.47.26 172.16.30.79 awn@idola awn@idola PPP S245 Mon 19:53 129.47.26 172.16.30.246 gde@idola gde@idola PPP S189 Mon 13:12 129.47.26 172.16.30.255 afy@idola afy@idola PPP S218 Mon 13:20 129.47.26 172.16.30.252 no session rsa@idola in that list… is'nt it ? but rsa@idola still couldnot login, this is the log from radiusd –X : Ready to process requests. Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 129.47.26.123:1088, id=8, length=179 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 252 NAS-Port-Type = Ethernet User-Name = "rsa@idola" Calling-Station-Id = "00:18:DE:69:F1:F3" Called-Station-Id = "VLAN TEST" NAS-Port-Id = "vlan_TEST" MS-CHAP-Domain = "idola" CHAP-Challenge = 0x0270131ced4933d4f26646e2946b2192 CHAP-Password = 0x016806e0edb33d434bc59078e233381b6c NAS-Identifier = "ROUTER INDUK" NAS-IP-Address = 129.47.26.123 Mikrotik-Realm = "idola" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 1 modcall[authorize]: module "mschap" returns noop for request 1 rlm_realm: Looking up realm "idola" for User-Name = "rsa@idola" rlm_realm: No such realm "idola" modcall[authorize]: module "suffix" returns noop for request 1 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 1 users: Matched entry DEFAULT at line 163 users: Matched entry DEFAULT at line 183 users: Matched entry DEFAULT at line 195 modcall[authorize]: module "files" returns ok for request 1 radius_xlat: 'rsa@idola' rlm_sql (sql): sql_set_user escaped user --> 'rsa@idola' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'rsa@idola' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 2 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName, radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'rsa@idola' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'rsa@idola' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName, radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'rsa@idola' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): Released sql socket id: 2 modcall[authorize]: module "sql" returns ok for request 1 rlm_pap: Found existing Auth-Type, not changing it. modcall[authorize]: module "pap" returns noop for request 1 rlm_sqlcounter: Entering module authorize code rlm_sqlcounter: Could not find Check item value pair modcall[authorize]: module "noresetcounter" returns noop for request 1 rlm_sqlcounter: Entering module authorize code rlm_sqlcounter: Could not find Check item value pair modcall[authorize]: module "dailycounter" returns noop for request 1 rlm_sqlcounter: Entering module authorize code rlm_sqlcounter: Could not find Check item value pair modcall[authorize]: module "monthlycounter" returns noop for request 1 rlm_sqlcounter: Entering module authorize code rlm_sqlcounter: Could not find Check item value pair modcall[authorize]: module "mbcounter" returns noop for request 1 rlm_sqlcounter: Entering module authorize code rlm_sqlcounter: Could not find Check item value pair modcall[authorize]: module "dailymbcounter" returns noop for request 1 rlm_sqlcounter: Entering module authorize code rlm_sqlcounter: Could not find Check item value pair modcall[authorize]: module "monthlymbcounter" returns noop for request 1 modcall: leaving group authorize (returns ok) for request 1 rad_check_password: Found Auth-Type Local auth: type Local auth: user supplied CHAP-Password matches local User-Password Processing the session section of radiusd.conf modcall: entering group session for request 1 radius_xlat: '/usr/local/var/log/radius/radutmp' radius_xlat: 'rsa@idola' modcall[session]: module "radutmp" returns ok for request 1 modcall: leaving group session (returns ok) for request 1 Found Post-Auth-Type Processing the post-auth section of radiusd.conf modcall: entering group REJECT for request 1 rlm_sql (sql): Processing sql_postauth radius_xlat: 'rsa@idola' rlm_sql (sql): sql_set_user escaped user --> 'rsa@idola' radius_xlat: 'INSERT into radpostauth (id, user, pass, reply, date) values ('','rsa@idola', 'Chap-Password', 'Access-Reject', NOW())' rlm_sql (sql) in sql_postauth: query is INSERT into radpostauth (id, user, pass,reply, date) values ('', 'rsa@idola', 'Chap-Password', 'Access-Reject', NOW()) rlm_sql (sql): Reserving sql socket id: 1 rlm_sql (sql): Released sql socket id: 1 modcall[post-auth]: module "sql" returns ok for request 1 modcall: leaving group REJECT (returns ok) for request 1 Delaying request 1 for 1 seconds Finished request 1 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... rad_recv: Access-Request packet from host 129.47.26.123:1088, id=8, length=179 Sending Access-Reject of id 8 to 129.47.26.123 port 1088 Reply-Message := "\r\nYou are already logged in - access denied\r\n\n" Waking up in 1 seconds... I have already checked my NAS and there is no session for rsa@idola, I try with radzap and still not working… Any help please… thanks trio