simultaneous login(s) is not working
Dear List simultaneous login(s) is not working here. Does it include any other steps than listed here. *STEP: 1* Query From dialup.conf: simul_count_query = "SELECT COUNT(*) \ FROM ${acct_table1} \ WHERE username = '%{SQL-User-Name}' \ AND acctstoptime IS NULL" simul_verify_query = "SELECT radacctid, acctsessionid, username, \ nasipaddress, nasportid, framedipaddress, \ callingstationid, framedprotocol \ FROM ${acct_table1} \ WHERE username = '%{SQL-User-Name}' \ AND acctstoptime IS NULL" *STEP: 2*session { sql } *STEP: 3 - *in the database Simultaneous-Use := 1 Thanks / --RM
On 9 May 2014, at 13:57, Russell Mike <radius.sir@gmail.com> wrote:
Dear List
simultaneous login(s) is not working here. Does it include any other steps than listed here.
STEP: 1
Query From dialup.conf:
simul_count_query = "SELECT COUNT(*) \ FROM ${acct_table1} \ WHERE username = '%{SQL-User-Name}' \ AND acctstoptime IS NULL"
simul_verify_query = "SELECT radacctid, acctsessionid, username, \ nasipaddress, nasportid, framedipaddress, \ callingstationid, framedprotocol \ FROM ${acct_table1} \ WHERE username = '%{SQL-User-Name}' \ AND acctstoptime IS NULL"
STEP: 2
session {
sql }
STEP: 3 - in the database
Simultaneous-Use := 1
Can has debug and versions plz, k thx bai! Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Dear Aran Cudbard B. Thank you very much for your response in answer to my request. Sure, i shall send the debug version soon. i want to understand also, how simultaneous check works. Is there any documentation which i can read to understand the process stage? Could you kindly, tell me at which stage of the process simultaneous login check is performed ? such as "post auth" or ? Yesterday i forgot to mention that all related include directives in "radiusd.conf" are opened, such as include "dialup.conf". i also did not mentioned that i do use MySQL DBMS with radius accounting. Yes, accounting is logged in database. FreeRADIUS has been installed on UBUNTU 12.4LTS & Version is Following root@FreeRADIUS:~# dpkg -l freeradius Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad) ||/ Name Version Description +++-==============================-==============================-============================================================================ ii freeradius 2.2.0+dfsg-ppa10~precise a high-performance and highly configurable RADIUS server Thanks / Regards --RM On Fri, May 9, 2014 at 8:07 PM, Arran Cudbard-Bell < a.cudbardb@freeradius.org> wrote:
On 9 May 2014, at 13:57, Russell Mike <radius.sir@gmail.com> wrote:
Dear List
simultaneous login(s) is not working here. Does it include any other steps than listed here.
STEP: 1
Query From dialup.conf:
simul_count_query = "SELECT COUNT(*) \ FROM ${acct_table1} \ WHERE username = '%{SQL-User-Name}' \ AND acctstoptime IS NULL"
simul_verify_query = "SELECT radacctid, acctsessionid, username, \ nasipaddress, nasportid, framedipaddress, \ callingstationid, framedprotocol \ FROM ${acct_table1} \ WHERE username = '%{SQL-User-Name}' \ AND acctstoptime IS NULL"
STEP: 2
session {
sql }
STEP: 3 - in the database
Simultaneous-Use := 1
Can has debug and versions plz, k thx bai!
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Russell Mike wrote:
Thank you very much for your response in answer to my request. Sure, i shall send the debug version soon. i want to understand also, how simultaneous check works. Is there any documentation which i can read to understand the process stage?
The server comes with a file "doc/Simultaneous-Use".
Could you kindly, tell me at which stage of the process simultaneous login check is performed ? such as "post auth" or ?
It's in it's own section, called "session" for historical reasons.
Yesterday i forgot to mention that all related include directives in "radiusd.conf" are opened, such as include "dialup.conf". i also did not mentioned that i do use MySQL DBMS with radius accounting. Yes, accounting is logged in database. FreeRADIUS has been installed on UBUNTU 12.4LTS & Version is Following
None of that matters. 1. Can the user get authenticated at *all*? 2. Have you set 'Simultaneous-Use = 1' for the user? 3. Is the server receiving ANY accounting packets? 4. After the user gets authenticated, does FreeRADIUS receive accounting packets for that user? 5. Is the radutmp / sql module logging those accounting packets? 6. Do the accounting packets have enough information to uniquely identify a session? i.e. no "NAS-Port = 0" for all users 7. Is the nas_type in the "client" configuration set to a known NAS, where the server can double-check logins? 7. When the user logs in a second time, does FreeRADIUS even try Simultaneous-Use checking? The configuration is composed of a set of interlocking pieces. They ALL have to be configured correctly for Simultaneous-Use to work. Some of the problems can be due to the NAS, which misbehaves. Alan DeKok.
Thanks Dear Alan Dekok, for your detailed response. very much appreciated. -- RM On Sat, May 10, 2014 at 12:31 PM, Alan DeKok <aland@deployingradius.com>wrote:
Russell Mike wrote:
Thank you very much for your response in answer to my request. Sure, i shall send the debug version soon. i want to understand also, how simultaneous check works. Is there any documentation which i can read to understand the process stage?
The server comes with a file "doc/Simultaneous-Use".
Could you kindly, tell me at which stage of the process simultaneous login check is performed ? such as "post auth" or ?
It's in it's own section, called "session" for historical reasons.
Yesterday i forgot to mention that all related include directives in "radiusd.conf" are opened, such as include "dialup.conf". i also did not mentioned that i do use MySQL DBMS with radius accounting. Yes, accounting is logged in database. FreeRADIUS has been installed on UBUNTU 12.4LTS & Version is Following
None of that matters.
1. Can the user get authenticated at *all*?
2. Have you set 'Simultaneous-Use = 1' for the user?
3. Is the server receiving ANY accounting packets?
4. After the user gets authenticated, does FreeRADIUS receive accounting packets for that user?
5. Is the radutmp / sql module logging those accounting packets?
6. Do the accounting packets have enough information to uniquely identify a session? i.e. no "NAS-Port = 0" for all users
7. Is the nas_type in the "client" configuration set to a known NAS, where the server can double-check logins?
7. When the user logs in a second time, does FreeRADIUS even try Simultaneous-Use checking?
The configuration is composed of a set of interlocking pieces. They ALL have to be configured correctly for Simultaneous-Use to work. Some of the problems can be due to the NAS, which misbehaves.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dear All, I faced the same problem, I have written answers to your questions below, 1. Can the user get authenticated at *all*? *Yes..User is getting authenticated via DB* 2. Have you set 'Simultaneous-Use = 1' for the user? *Yes.an entry for user is added in radcheck table like mention below* *"username@hotmail.com <username@hotmail.com>";"Simultaneous-Use";":=";"1"*3. Is the server receiving ANY accounting packets? *Yes. My NAS is sending the accounting requests* 4. After the user gets authenticated, does FreeRADIUS receive accounting packets for that user? *yes. Interim packets are recieved, but I havent enabled query to add interim accounting request data to DB, only Start/Stop packets are saved* 5. Is the radutmp / sql module logging those accounting packets? *I can see the packets coming in logs* 6. Do the accounting packets have enough information to uniquely identify a session? i.e. no "NAS-Port = 0" for all users *Accounting packets have username, session id field in them, which are unique but there are no NAS-Port field. * 7. Is the nas_type in the "client" configuration set to a known NAS, where the server can double-check logins? *NAS type is set to other* 7. When the user logs in a second time, does FreeRADIUS even try Simultaneous-Use checking? *Nope, I am unable to see any such simultaneous check query in logs, queries are enabled in dialup.conf and sql option is uncommented in session section.* Thanks On Sat, May 10, 2014 at 5:31 PM, Alan DeKok <aland@deployingradius.com>wrote:
Russell Mike wrote:
Thank you very much for your response in answer to my request. Sure, i shall send the debug version soon. i want to understand also, how simultaneous check works. Is there any documentation which i can read to understand the process stage?
The server comes with a file "doc/Simultaneous-Use".
Could you kindly, tell me at which stage of the process simultaneous login check is performed ? such as "post auth" or ?
It's in it's own section, called "session" for historical reasons.
Yesterday i forgot to mention that all related include directives in "radiusd.conf" are opened, such as include "dialup.conf". i also did not mentioned that i do use MySQL DBMS with radius accounting. Yes, accounting is logged in database. FreeRADIUS has been installed on UBUNTU 12.4LTS & Version is Following
None of that matters.
1. Can the user get authenticated at *all*?
2. Have you set 'Simultaneous-Use = 1' for the user?
3. Is the server receiving ANY accounting packets?
4. After the user gets authenticated, does FreeRADIUS receive accounting packets for that user?
5. Is the radutmp / sql module logging those accounting packets?
6. Do the accounting packets have enough information to uniquely identify a session? i.e. no "NAS-Port = 0" for all users
7. Is the nas_type in the "client" configuration set to a known NAS, where the server can double-check logins?
7. When the user logs in a second time, does FreeRADIUS even try Simultaneous-Use checking?
The configuration is composed of a set of interlocking pieces. They ALL have to be configured correctly for Simultaneous-Use to work. Some of the problems can be due to the NAS, which misbehaves.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Muhammad Usman wrote:
6. Do the accounting packets have enough information to uniquely identify a session? i.e. no "NAS-Port = 0" for all users *Accounting packets have username, session id field in them, which are unique but there are no NAS-Port field. *
That's usually a problem. If there is no way to uniquely identify a user session, then it's much harder to get Simultaneous-Use working.
7. Is the nas_type in the "client" configuration set to a known NAS, where the server can double-check logins? *NAS type is set to other*
So the server can't double-check logins.
7. When the user logs in a second time, does FreeRADIUS even try Simultaneous-Use checking? *Nope, I am unable to see any such simultaneous check query in logs, queries are enabled in dialup.conf and sql option is uncommented in session section.*
Then run the server in debugging mode to see what happens. Alan DeKok.
Compare sql.conf sql { server = "localhost" database = "mysql" $INCLUDE sql/${database}/dialup.conf } in radiusd.conf $INCLUDE sql.conf in session section of sites-available/default { sql } in database :- simulation use :- 1 carefully check if you have a virtual server in "sites-available" that allow everyone. i was having that problem. Thanks / Regards
Thanks for the reply, how can I identify virtual server? On Mon, May 12, 2014 at 8:07 PM, Russell Mike <radius.sir@gmail.com> wrote:
Compare sql.conf
sql {
server = "localhost"
database = "mysql"
$INCLUDE sql/${database}/dialup.conf
}
in radiusd.conf
$INCLUDE sql.conf
in session section of sites-available/default
{
sql
}
in database :-
simulation use :- 1
carefully check if you have a virtual server in "sites-available" that allow everyone. i was having that problem.
Thanks / Regards
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi, i was having a file in "sites-available/auth_all". Attached in a virtual server named "auth_all. "This make my simulations check stop On Mon, May 12, 2014 at 3:23 PM, Muhammad Usman <muhd.usman87@gmail.com>wrote:
Thanks for the reply, how can I identify virtual server?
On Mon, May 12, 2014 at 8:07 PM, Russell Mike <radius.sir@gmail.com>wrote:
Compare sql.conf
sql {
server = "localhost"
database = "mysql"
$INCLUDE sql/${database}/dialup.conf
}
in radiusd.conf
$INCLUDE sql.conf
in session section of sites-available/default
{
sql
}
in database :-
simulation use :- 1
carefully check if you have a virtual server in "sites-available" that allow everyone. i was having that problem.
Thanks / Regards
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thanks my site-enabled/inner-tunnel contains default *server inner-tunnel, *I dont have auth-all file. On Mon, May 12, 2014 at 8:54 PM, <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
Thanks for the reply, how can I identify virtual server?
look at radiusd -X output (full debug) it will show you what decisions the server is making and what virtual server is being used..... look in sites-enabled directory to see what virtual servers you have active
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hello, auth_all do not come by default. i gave you idea just. inner-tunnel is default file. leave it there. Thanks On Mon, May 12, 2014 at 4:30 PM, Muhammad Usman <muhd.usman87@gmail.com>wrote:
Thanks my site-enabled/inner-tunnel contains default *server inner-tunnel, *I dont have auth-all file.
On Mon, May 12, 2014 at 8:54 PM, <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
Thanks for the reply, how can I identify virtual server?
look at radiusd -X output (full debug) it will show you what decisions the server is making and what virtual server is being used..... look in sites-enabled directory to see what virtual servers you have active
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
Thanks my site-enabled/inner-tunnel contains default server inner-tunnel, I dont have auth-all file.
of course you dont - its not provided by default...its somethign that someone else has ..and if you ONLY have a inner-tunnel virtual server present then I'm surprised anything works alan
Hi Please we are helping. Try to learn your self also so that we end up fixing. we are just guiding, cannot actually understand fully what is the problem. Thanks A L M B for your help as well. On Mon, May 12, 2014 at 4:54 PM, <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
Thanks my site-enabled/inner-tunnel contains default server inner-tunnel, I dont have auth-all file.
of course you dont - its not provided by default...its somethign that someone else has
..and if you ONLY have a inner-tunnel virtual server present then I'm surprised anything works
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Dear All,
That's usually a problem. If there is no way to uniquely identify a user session, then it's much harder to get Simultaneous-Use working. *Does FR identifies simultaneous use based on query, is NAS-Port a must column, can you please elaborate this point*
*I am running server in debug mode, but I don't see any simultaneous check query in debug logs.* * My NAS is coova chilli AC, so any suggestions that what my NAS type would be?* On Mon, May 12, 2014 at 4:10 PM, Alan DeKok <aland@deployingradius.com>wrote:
Muhammad Usman wrote:
6. Do the accounting packets have enough information to uniquely identify a session? i.e. no "NAS-Port = 0" for all users *Accounting packets have username, session id field in them, which are unique but there are no NAS-Port field. *
That's usually a problem. If there is no way to uniquely identify a user session, then it's much harder to get Simultaneous-Use working.
7. Is the nas_type in the "client" configuration set to a known NAS, where the server can double-check logins? *NAS type is set to other*
So the server can't double-check logins.
7. When the user logs in a second time, does FreeRADIUS even try Simultaneous-Use checking? *Nope, I am unable to see any such simultaneous check query in logs, queries are enabled in dialup.conf and sql option is uncommented in session section.*
Then run the server in debugging mode to see what happens.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (5)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Arran Cudbard-Bell -
Muhammad Usman -
Russell Mike