I have searched and searched, read the archives, etc. I feel that I may have a unique problem and just missing a piece of the puzzle. I have been running freeradius with a mysql database for over a year now. It is very stable and I am generally pleased. I have been having stale session issues on every one of my NASes. They range from Cisco 7200, Cisco 2600, and Livingston Portmasters. They all have stale sessions in the mysql database that never recieve a stop time. I am almost certain there are no network issues because it seems that start packets are never lost or update packets either. This is the aaa config on my Ciscos: aaa new-model ! ! aaa authentication login default local group radius aaa authentication login telnet line aaa authentication ppp default if-needed local group radius aaa authorization network default local group radius aaa authorization network iemcdslauth group radius local aaa accounting delay-start aaa accounting update newinfo aaa accounting network default start-stop group radius aaa session-id common ! radius-server attribute nas-port format d radius-server host X.X.X.X auth-port 1645 acct-port 1646 radius-server key 7 XXXXXXXXXXXXXXX So the question is, why are my NASs not sending stop packets, or why is the freeradius server not processing the stop packets? Is this a common problem? Feel free to also point me to some documents that may be of assistance. Maybe I don't have enough resources to process the commands? I have about 1500 users. This is my setup: openSuSE 10.2 Freeradius 1.1.13 MySQL 5.0.26 128MB RAM Pentium III Thanks for any help, Shane
I am having the same problem. I am using: radiusd: FreeRADIUS Version 1.1.3, for host i686-redhat-linux-gnu, built on May 10 2007 at 12:30:17 on Centos 5.1. I only have about 150 users authenticating and I have plenty of CPU time and the server is in a datacenter with several DS3s so I doubt it is a bandwidth or cpu load issue. I get the following in radius.log Tue Apr 8 07:11:57 2008 : Error: rlm_radutmp: Logout for NAS XXX.XXX.XXX.XXX port 407, but no Login record On Tue, 8 Apr 2008, Shane McKinley wrote:
Date: Tue, 8 Apr 2008 11:17:19 -0400 From: Shane McKinley <shane@hemc.coop> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> To: freeradius-users@lists.freeradius.org Subject: Stale Sessions
I have searched and searched, read the archives, etc. I feel that I may have a unique problem and just missing a piece of the puzzle.
I have been running freeradius with a mysql database for over a year now. It is very stable and I am generally pleased.
I have been having stale session issues on every one of my NASes. They range from Cisco 7200, Cisco 2600, and Livingston Portmasters. They all have stale sessions in the mysql database that never recieve a stop time. I am almost certain there are no network issues because it seems that start packets are never lost or update packets either.
This is the aaa config on my Ciscos:
aaa new-model ! ! aaa authentication login default local group radius aaa authentication login telnet line aaa authentication ppp default if-needed local group radius aaa authorization network default local group radius aaa authorization network iemcdslauth group radius local aaa accounting delay-start aaa accounting update newinfo aaa accounting network default start-stop group radius aaa session-id common ! radius-server attribute nas-port format d radius-server host X.X.X.X auth-port 1645 acct-port 1646 radius-server key 7 XXXXXXXXXXXXXXX
So the question is, why are my NASs not sending stop packets, or why is the freeradius server not processing the stop packets?
Is this a common problem? Feel free to also point me to some documents that may be of assistance. Maybe I don't have enough resources to process the commands? I have about 1500 users.
This is my setup:
openSuSE 10.2 Freeradius 1.1.13 MySQL 5.0.26 128MB RAM Pentium III
Thanks for any help,
Shane
-- Bill bbrunton@icu.net http://www.brunton.net http://www.video-records.com http://www.icu.net KA0SEP NNN0HQA/OK ATP CFII BE200 BE300 BE300F BE1900 BE2000 BE2000S CE500 SIC CE525 HS125 LR45 LRJET The Internet... The place to be! - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Bill Brunton -
Shane McKinley