Help with simultaneous use and radutmp
Hi folks..... I have a FreeRadius server working with Mikrotik as NAS, and I'm often receiveing message of multiple connection at log, and the user is not able to connect. I found some solutions at google but it's to whom uses freeradius with sql as session manager. I'm using radutmp file and I couldn't find any solution to kill the session locked at the radutmp file. anyone can help me..?? The message I'm receiving is: Sat Apr 23 18:02:03 2011 : Auth: Multiple logins (max 1) : [#######@########/<no User-Password attribute>] (from client ###.##.0.0/24 port 35226 cli ##:##:##:##:##:##) My Freeradius version is 2.1. Thanks Rodrigo Yoshioka
On Sun, Apr 24, 2011 at 6:06 AM, Rodrigo Yoshioka <ro_yoshioka2002@yahoo.com.br> wrote:
Hi folks..... I have a FreeRadius server working with Mikrotik as NAS, and I'm often receiveing message of multiple connection at log, and the user is not able to connect. I found some solutions at google but it's to whom uses freeradius with sql as session manager. I'm using radutmp file and I couldn't find any solution to kill the session locked at the radutmp file. anyone can help me..?? The message I'm receiving is: Sat Apr 23 18:02:03 2011 : Auth: Multiple logins (max 1) : [#######@########/<no User-Password attribute>] (from client ###.##.0.0/24 port 35226 cli ##:##:##:##:##:##)
My Freeradius version is 2.1.
Try http://freeradius.org/radiusd/man/radzap.html IMHO it's better to use sql instead. For example, if whatever NAS you use can also use interim update, then you can also modify simultaneous query to: - only select records whose acct-stop-time is newer than 2 x interim-update time - only select records whose CallingStationId is different than current calling station id Those two conditions can help filter-out stale sessions. -- Fajar
Hi, I thought that there would have another way to solve that. I tried once to change the session manager to sql, but it stopped working, I gave up of this tough. Its an live environment so I'm not able to do a lot of tests, but I'll try againd... I'll try about radzap, lets see if it works if I make an script to monitoring radius log and apply the changes automaticaly when some session stale. Thanks a lot Rodrigo Yoshioka ________________________________ De: Fajar A. Nugraha <list@fajar.net> Para: Rodrigo Yoshioka <ro_yoshioka2002@yahoo.com.br>; FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Enviadas: Sábado, 23 de Abril de 2011 23:54 Assunto: Re: Help with simultaneous use and radutmp On Sun, Apr 24, 2011 at 6:06 AM, Rodrigo Yoshioka <ro_yoshioka2002@yahoo.com.br> wrote:
Hi folks..... I have a FreeRadius server working with Mikrotik as NAS, and I'm often receiveing message of multiple connection at log, and the user is not able to connect. I found some solutions at google but it's to whom uses freeradius with sql as session manager. I'm using radutmp file and I couldn't find any solution to kill the session locked at the radutmp file. anyone can help me..?? The message I'm receiving is: Sat Apr 23 18:02:03 2011 : Auth: Multiple logins (max 1) : [#######@########/<no User-Password attribute>] (from client ###.##.0.0/24 port 35226 cli ##:##:##:##:##:##)
My Freeradius version is 2.1.
Try http://freeradius.org/radiusd/man/radzap.html IMHO it's better to use sql instead. For example, if whatever NAS you use can also use interim update, then you can also modify simultaneous query to: - only select records whose acct-stop-time is newer than 2 x interim-update time - only select records whose CallingStationId is different than current calling station id Those two conditions can help filter-out stale sessions. -- Fajar
On Sun, Apr 24, 2011 at 10:15 AM, Rodrigo Yoshioka <ro_yoshioka2002@yahoo.com.br> wrote:
Hi, I thought that there would have another way to solve that. I tried once to change the session manager to sql, but it stopped working,
I had a problem with simul_verify_query in an old FR setup (simultaneous check doesn't work when it's enabled). So now I simply use a modified version of simul_count_query, while commenting out simul_verify_query. Perhaps it's the same problem in your setup.
I gave up of this tough. Its an live environment so I'm not able to do a lot of tests, but I'll try againd...
Just setup a new FR + MYSQL instance. It's not that hard, and you can even do it with Virtualbox on your PC/laptop. For a NAS you can use an AP with chillispot it in (like dd-wrt compatible APs). It's easiy to setup, and should work correctly with interim-updates as long as you set it > 60s. When everything works you can apply the changes to production environment. -- Fajar
participants (2)
-
Fajar A. Nugraha -
Rodrigo Yoshioka