radwho shows only the last user logged.
Hello guys, I have a question. I'm using freeradius 2.1.10 on debian squezze. I am using multiple databases for authentication, in an LDAP, and SQL in another. Each using a different Realm. Regarding the authentication, everything is working normally. But when I try to check the server how many users are logged via the command radwho, it returns me only the last user who logged in, I think he should show everyone who is authenticated at this point right?? Regards. John -- João Paulo de Lima Barbosa Fone: (45) 9938-8399 Blog: http://joao.us Twitter: @joaocdc "O erro dos que tem poder é colocar barreiras para que ninguém os alcance, incentivando-nos a buscar todas as formas que encontramos para alcança-los."
joaocdc@gmail.com wrote:
But when I try to check the server how many users are logged via the command radwho, it returns me only the last user who logged in, I think he should show everyone who is authenticated at this point right??
Your NAS is sending "NAS-Port = 0" for all of the users. Alan DeKok.
OK Alan, First thanks for listening. Actually my NAS is sending the same port for all my users, but the door that she is sending is "NAS-Port = 29". How can I configure it? is the radius or the NAS? If the radius, how do I setup? Thanks. 2011/3/25 Alan DeKok <aland@deployingradius.com>
joaocdc@gmail.com wrote:
But when I try to check the server how many users are logged via the command radwho, it returns me only the last user who logged in, I think he should show everyone who is authenticated at this point right??
Your NAS is sending "NAS-Port = 0" for all of the users.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- João Paulo de Lima Barbosa Fone: (45) 9938-8399 Blog: http://joao.us Twitter: @joaocdc "O erro dos que tem poder é colocar barreiras para que ninguém os alcance, incentivando-nos a buscar todas as formas que encontramos para alcança-los."
joaocdc@gmail.com wrote:
Actually my NAS is sending the same port for all my users, but the door that she is sending is "NAS-Port = 29".
So your NAS is broken. I don't know why people do that...
How can I configure it?
is the radius or the NAS?
The NAS. Read the NAS documentation. However, it will likely say *nothing* about this subject. If the NAS vendor understood RADIUS, they wouldn't have this problem.
If the radius, how do I setup?
Don't use radutmp. Instead, store the sessions in SQL, and edit the SQL configuration. Alan DeKok.
My NAS is cisco is a wireless controller. Any suggestions for settings? And I'm also keeping my sessions in SQL. Att. 2011/3/25 Alan DeKok <aland@deployingradius.com>
joaocdc@gmail.com wrote:
Actually my NAS is sending the same port for all my users, but the door that she is sending is "NAS-Port = 29".
So your NAS is broken. I don't know why people do that...
How can I configure it?
is the radius or the NAS?
The NAS. Read the NAS documentation.
However, it will likely say *nothing* about this subject. If the NAS vendor understood RADIUS, they wouldn't have this problem.
If the radius, how do I setup?
Don't use radutmp. Instead, store the sessions in SQL, and edit the SQL configuration.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- João Paulo de Lima Barbosa Fone: (45) 9938-8399 Blog: http://joao.us Twitter: @joaocdc "O erro dos que tem poder é colocar barreiras para que ninguém os alcance, incentivando-nos a buscar todas as formas que encontramos para alcança-los."
Hi,
Actually my NAS is sending the same port for all my users, but the door that she is sending is "NAS-Port = 29".
So your NAS is broken. I don't know why people do that...
Hello Cisco! :-)
Don't use radutmp. Instead, store the sessions in SQL, and edit the SQL configuration.
and dont use the NAS-Port as one of the keys...because its always 29 alan
ok, how would that be? how do I not use the freeradius NAS-Port as the key? acct_unique is a module? acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" } I just remove the the NAS-Port-up of the keys? John 2011/3/25 Alan Buxey <A.L.M.Buxey@lboro.ac.uk>
Hi,
Actually my NAS is sending the same port for all my users, but the door that she is sending is "NAS-Port = 29".
So your NAS is broken. I don't know why people do that...
Hello Cisco! :-)
Don't use radutmp. Instead, store the sessions in SQL, and edit the SQL configuration.
and dont use the NAS-Port as one of the keys...because its always 29
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- João Paulo de Lima Barbosa Fone: (45) 9938-8399 Blog: http://joao.us Twitter: @joaocdc "O erro dos que tem poder é colocar barreiras para que ninguém os alcance, incentivando-nos a buscar todas as formas que encontramos para alcança-los."
ok, how would that be? how do I not use the freeradius NAS-Port as the key? acct_unique is a module? acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" } I just remove the the NAS-Port-up of the keys? John 2011/3/25 Alan Buxey <A.L.M.Buxey@lboro.ac.uk>
Hi,
Actually my NAS is sending the same port for all my users, but the door that she is sending is "NAS-Port = 29".
So your NAS is broken. I don't know why people do that...
Hello Cisco! :-)
Don't use radutmp. Instead, store the sessions in SQL, and edit the SQL configuration.
and dont use the NAS-Port as one of the keys...because its always 29
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- João Paulo de Lima Barbosa Fone: (45) 9938-8399 Blog: http://joao.us Twitter: @joaocdc "O erro dos que tem poder é colocar barreiras para que ninguém os alcance, incentivando-nos a buscar todas as formas que encontramos para alcança-los."
Hi,
ok, how would that be? how do I not use the freeradius NAS-Port as the key?
acct_unique is a module?
acct_unique { ��� key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" }
I just remove the the NAS-Port-up of the keys?
yes...maybe add something else to keep the entropy/randomness.....perhaps Called-Station-ID or Calling-Station-ID (check that you are getting those before you drop them in). note that if you use IPv6 then this needs changing to stop issues with NAS-IP-Address anyway... alan
participants (3)
-
Alan Buxey -
Alan DeKok -
joaocdc＠gmail.com