Hallo I appreciate the clarifications, now I know where to start; I shall thoroughly analyze pppoe's behavior and look for the acct pkts. Thanks everybody for your time and shared knowledge On 17.10.2013 15:12, Alan DeKok wrote:
Petre Bandac wrote:
I believe this is because the same ip is allocated to two different users (I can see this with radwho);
No. That doesn't happen. The IP is being *used* by two different users. That is a very different statement.
freeradius sees the ip as "free" in radippool table (since it exceeded lease-time, it has now all fields empty and is eligible for a new allocation) and hands it over to the new request
A "free" IP means it's no longer allocated to the original user.
Freeradius sits behind a pppoe server
Then fix the PPPoE server so that it drops connections at Session-Timeout. The user will then be prevented from using the IP.
Rephrasing my question: I want to detect the lost ppp connections (I suppose there is a timeout set somewhere) and delete the ip from radippool without waiting the lease-time set in radius (something like the check dhcp does with the handled ip addresses)
You don't "detect" the lost PPP connection. The PPPoE server sends an accounting packet, with Acct-Status-Type = Stop. When FreeRADIUS sees that, it marks the session as closed, and frees the IP>
an excerpt of the freeradius -X is @ http://pastebin.ca/2467690
as my radius knowledge is very chaotic/hands-on approach, I appreciate any hint.
Blame the NAS for everything. Really.
And read "man radiusd". A chaotic approach is the worst possible method to solving a problem.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Petre Bandac Network Scientist - petre@kgb.ro