On Jun 15, 2015, at 3:14 PM, Renato Sousa <rensousa@gmail.com> wrote:
Created another freeradius without proxy to test authentication on users file as line below:
myuser Cleartext-Password: = "test123" Simultaneous-Use: = 1
That won't work. The Simultaneous-Use attribute should go onto the first line, with the Cleartext-Password.
User authentication works, but also allows more than one simultaneous session. Analyzing the debug log, you can see information about the Simultaneous-Use item:
First login (device: notebook) [Peap] Got tunneled reply code 11 Simultaneous-Use: = 1 EAP-Message = 0x014300201a0143001b103aa68684db737872b04dd470becf8bd56d7975736572 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x182e1712186d0dd5e3788587d7861272 ... [Peap] Got tunneled reply code 2 Simultaneous-Use: = 1
It's not a reply attribute.
Second login (device: mobile android) [TTLS] Got tunneled reply code 2 Simultaneous-Use: = 1
It's not a reply attribute.
The accountig information is being successfully written to the mysql. The acctsessionid field displays two distinct connections to the same user (myuser). The innertunnel and default files are configured as follows:
session { sql }
It will check Simultaneous-Use in the inner-tunnel, but it may not have access to all of the session data. And you've got to ensure that the User-Name in the Accounting-Request packet is the same as for the Access-Request. i.e. not "anonymous". Alan DeKok.