I have downloaded the latest CVS snapshot (the 12th of June) and am running it on Redhat 9 with Postgresql. I have configured the expiration module and added an entry in the radgroupcheck table. If I send a radius request to my server for a valid user and the expiration date is set to later than now() - the server issues an access-accept but if the expiration date/time has been reached - the server traps this - but NO reply message is sent. Is there something I am missing? Attached the part of the debug log showing what happens: rlm_expiration: Checking Expiration time: '13 Jun 2005' rlm_expiration: Account has expired radius_xlat: 'Your account has expired, jacotest ' modcall[authorize]: module "expiration" returns userlock for request 1 modcall: leaving group authorize (returns userlock) for request 1 Invalid user (Account has expired [Expiration 13 Jun 2005]): [jacotest/jjtest] (from client localhost port 0) Delaying request 1 for 1 seconds Finished request 1 Going to the next request Any help will be appreciated Jaco van Tonder
"Jaco van Tonder" <jaco@alwayson.co.za> wrote:
if the expiration date/time has been reached - the server traps this - but NO reply message is sent. ... Delaying request 1 for 1 seconds
So... is it delayed for 1 second, or is it *never* sent? My tests show it's only delayed for "reject_delay" time. Alan DeKok.
It is never sent. I use radtest and get no reply....radtest simply sends the request again and again... Regards Jaco van Tonder -----Original Message----- From: freeradius-users-bounces@lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Alan DeKok Sent: 14 June 2005 07:07 PM To: FreeRadius users mailing list Subject: Re: Expiration Module "Jaco van Tonder" <jaco@alwayson.co.za> wrote:
if the expiration date/time has been reached - the server traps this - but NO reply message is sent. ... Delaying request 1 for 1 seconds
So... is it delayed for 1 second, or is it *never* sent? My tests show it's only delayed for "reject_delay" time. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
"Jaco van Tonder" <jaco@alwayson.co.za> wrote:
It is never sent. I use radtest and get no reply....radtest simply sends the request again and again...
OK. It works for me with the default "reject_delay = 5". You've set it to "1", which is something I haven't tested. Try setting it BACK to the default value, and it should work. Alan DeKok.
Thanks for the info. Setting it back to 5 did not help. But when I set it to 0 the reject is sent. Thus any value above 0 does not work. Jaco van Tonder -----Original Message----- From: freeradius-users-bounces@lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Alan DeKok Sent: 15 June 2005 06:53 PM To: FreeRadius users mailing list Subject: Re: Expiration Module "Jaco van Tonder" <jaco@alwayson.co.za> wrote:
It is never sent. I use radtest and get no reply....radtest simply sends the request again and again...
OK. It works for me with the default "reject_delay = 5". You've set it to "1", which is something I haven't tested. Try setting it BACK to the default value, and it should work. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
Jaco van Tonder