Accounts staying online past Session Timeout value
Hello, I am having some problems lately with freeradius 1.1.2 + mysql, and users staying online past their session timeout value (4 hours). Can anyone shed some light on the matter? I can not find any problems with the server itself, the loads are low and everything seems to be functioning OK. Would this be a function of the NAS to disconnect the user and send a stop packet or is it up to freeradius? Also, sometimes i have users who are getting disconnected and can not reconnect because they are still shown to be online, and i am limiting the sessions to 1. Again, would this be a problem with the NAS/network because freeradius is not receiving the stop packet? This setup has been running for over 80 days without a problem, so it leads me to believe that the problem is not on the radius server, but i would like some second opinions. Thank You.
Mike Jakubik <mikej@rogers.com> wrote:
I am having some problems lately with freeradius 1.1.2 + mysql, and users staying online past their session timeout value (4 hours). Can anyone shed some light on the matter? I can not find any problems with the server itself, the loads are low and everything seems to be functioning OK. Would this be a function of the NAS to disconnect the user and send a stop packet or is it up to freeradius?
It's the responsibility of the NAS.
Also, sometimes i have users who are getting disconnected and can not reconnect because they are still shown to be online, and i am limiting the sessions to 1. Again, would this be a problem with the NAS/network because freeradius is not receiving the stop packet?
Yes. But "checkrad" should help here. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Alan DeKok wrote:
Also, sometimes i have users who are getting disconnected and can not reconnect because they are still shown to be online, and i am limiting the sessions to 1. Again, would this be a problem with the NAS/network because freeradius is not receiving the stop packet?
Yes. But "checkrad" should help here.
Thats what i assumed, but wanted to be sure. I guess i would need to install and configure SNMP for this to be actually useful, not sure if i can do that, but thanks for the advice.
Alan DeKok wrote:
Also, sometimes i have users who are getting disconnected and can not reconnect because they are still shown to be online, and i am limiting the sessions to 1. Again, would this be a problem with the NAS/network because freeradius is not receiving the stop packet?
Yes. But "checkrad" should help here.
I have just discovered that the NAS server has its time behind by more than 3 hours, is it possible that this can cause problems? i.e. (my "correct" time) Tue Nov 28 19:06:54 2006 (their time) Event-Timestamp = "Nov 28 2006 15:48:44 EST"
Mike Jakubik <mikej@rogers.com> wrote:
I have just discovered that the NAS server has its time behind by more than 3 hours, is it possible that this can cause problems?
No. Session-Timeout is an offset, not an absolute time. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
On Wed 29 Nov 2006 08:52, Alan DeKok wrote:
Mike Jakubik <mikej@rogers.com> wrote:
I have just discovered that the NAS server has its time behind by more than 3 hours, is it possible that this can cause problems?
No. Session-Timeout is an offset, not an absolute time.
Thats not to say that you shouldn't be running NTP on both your NAS and your RADIUS server as it will certainly make things easier to debug/manage. -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
I am having some problems lately with freeradius 1.1.2 + mysql, and users staying online past their session timeout value (4 hours). Can anyone shed some light on the matter?
I had similar trouble recently; running in debug mode, I was able to see that the session-timeout attribute was not being sent by freeradius. In my case, it was due to the users not being listed in the usergroups table. The session-timeout was in radgroupreply... Andrew Long
participants (4)
-
Alan DeKok -
Andrew Long -
Mike Jakubik -
Peter Nixon