freeradius simultenoues-use error
Dear all i fedup from this problem i dont know how to resolve it no one help me out from this problem i have freradius-1.1.4 + MSSQL setup user databases and accouting done by mssql and my NAS is cisco router with VPDN configuration but i have faceing some problem since last week suposse one user login in to cisco router and he/she accouting start on MSSQL server i am useting simultenouse-use feature in SQL example radacct tables User AcctStartTime AcctStopTime abc 08/03/2007:01:30 1/1/1900 Now user can access internet and anything everything going fine but after when i stop radiusd proccess and start it my user disconnected and he/she try for login in to cisco VPDN he/she got error access deny and i got some log multiple user login Thu Mar 8 20:12:05 2007 : Auth: Multiple logins (max 1) : [mlpm484/<CHAP-Password>] (from client cisco port 974) Thu Mar 8 20:12:08 2007 : Auth: Multiple logins (max 1) : [mlpm629/<CHAP-Password>] (from client cisco port 1111) Thu Mar 8 20:12:10 2007 : Auth: Multiple logins (max 1) : [mlpm484/<CHAP-Password>] (from client cisco port 460) Thu Mar 8 20:12:14 2007 : Auth: Multiple logins (max 1) : SomeThing like this it means in MSSQL AcctStopTime there is i still user login means that entry is not still clear thats why i got error 'Multiple logins (max 1)' in my client.conf file NAStype is "other" caz when i user cisco nastype my Simulteneous-use not working ?? so i thing this detail enough for help plz tell me right suggesstion if i am wrong .... $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers
satish patel wrote:
User AcctStartTime AcctStopTime abc 08/03/2007:01:30 1/1/1900
Now user can access internet and anything everything going fine but after when i stop radiusd proccess and start it my user disconnected and he/she try for login in to cisco VPDN he/she got error access deny and i got some log multiple user login
Thu Mar 8 20:12:05 2007 : Auth: Multiple logins (max 1) :
Looks like the problem isn't FreeRADIUS. The problem is that your NAS is not sending (or FR is not hearing) the stop packets for various reasons. You may need to write a cronjob that runs every minute that looks at your DB to find "open" connections and then polls your NAS to verify that info and update the DB with stop times if the session is gone. FreeRADIUS is doing exactly what you told it to do. Now go make the rest of your system behave or fudge it as I have described. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com
I am not getting u how do i query from shell script to NAS ?? and what is FR packet?? if u have any script example script can u send me ....i am in problem :( Dennis Skinner <dskinner@bluefrog.com> wrote: satish patel wrote:
User AcctStartTime AcctStopTime abc 08/03/2007:01:30 1/1/1900
Now user can access internet and anything everything going fine but after when i stop radiusd proccess and start it my user disconnected and he/she try for login in to cisco VPDN he/she got error access deny and i got some log multiple user login
Thu Mar 8 20:12:05 2007 : Auth: Multiple logins (max 1) :
Looks like the problem isn't FreeRADIUS. The problem is that your NAS is not sending (or FR is not hearing) the stop packets for various reasons. You may need to write a cronjob that runs every minute that looks at your DB to find "open" connections and then polls your NAS to verify that info and update the DB with stop times if the session is gone. FreeRADIUS is doing exactly what you told it to do. Now go make the rest of your system behave or fudge it as I have described. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers
You already have a pearl script that does such ckecking. It's called checkrad.pl and it comes with freeradius. Ivan Kalik Kalik Informatika ISP Dana 9/3/2007, "satish patel" <linuxtrap@yahoo.co.in> piše:
I am not getting u how do i query from shell script to NAS ?? and what is FR packet?? if u have any script example script can u send me ....i am in problem :(
Dennis Skinner <dskinner@bluefrog.com> wrote: satish patel wrote:
User AcctStartTime AcctStopTime abc 08/03/2007:01:30 1/1/1900
Now user can access internet and anything everything going fine but after when i stop radiusd proccess and start it my user disconnected and he/she try for login in to cisco VPDN he/she got error access deny and i got some log multiple user login
Thu Mar 8 20:12:05 2007 : Auth: Multiple logins (max 1) :
Looks like the problem isn't FreeRADIUS. The problem is that your NAS is not sending (or FR is not hearing) the stop packets for various reasons.
You may need to write a cronjob that runs every minute that looks at your DB to find "open" connections and then polls your NAS to verify that info and update the DB with stop times if the session is gone.
FreeRADIUS is doing exactly what you told it to do. Now go make the rest of your system behave or fudge it as I have described.
-- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
$ cat ~/satish/url.txt
System administrator ( Data Center )
please visit this site
--------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers
i have checkrad.pl but this is not working my setup is freeradius-1.1.4 with MSSQL ( windows 2000 SQL ) and i have useing simulteneous-use with /etc/raddb/mssql.conf file and in raddb/radiusd.conf i have enable { session sql } when i run radwho i didnt get any online users how can i check checkrad perl script is there any option i have set NAS type other when i set it cisco my simuletenouse not working and this day my radiusd server automaticaly die i dont know why i am useing radwatch but it is still die and die which radius version is best for RHEL 4.0 redhat linux tnt@kalik.co.yu wrote: You already have a pearl script that does such ckecking. It's called checkrad.pl and it comes with freeradius. Ivan Kalik Kalik Informatika ISP Dana 9/3/2007, "satish patel" pi¹e:
I am not getting u how do i query from shell script to NAS ?? and what is FR packet?? if u have any script example script can u send me ....i am in problem :(
Dennis Skinner wrote: satish patel wrote:
User AcctStartTime AcctStopTime abc 08/03/2007:01:30 1/1/1900
Now user can access internet and anything everything going fine but after when i stop radiusd proccess and start it my user disconnected and he/she try for login in to cisco VPDN he/she got error access deny and i got some log multiple user login
Thu Mar 8 20:12:05 2007 : Auth: Multiple logins (max 1) :
Looks like the problem isn't FreeRADIUS. The problem is that your NAS is not sending (or FR is not hearing) the stop packets for various reasons.
You may need to write a cronjob that runs every minute that looks at your DB to find "open" connections and then polls your NAS to verify that info and update the DB with stop times if the session is gone.
FreeRADIUS is doing exactly what you told it to do. Now go make the rest of your system behave or fudge it as I have described.
-- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
$ cat ~/satish/url.txt
System administrator ( Data Center )
please visit this site
--------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers
satish patel wrote:
I am not getting u how do i query from shell script to NAS ??
See your NAS docs. SNMP may be an option if the NAS supports it (and FR may be able to handle the query itself as another poster suggested), but there may be other ways.... For instance, we have a couple scripts we use when we want to boot a particular user. They are simple bash scripts that use "expect" to handle logging into our cisco modems and look for the tty that the user is on and then clear that tty. It has limitations as the cisco "show users" command only shows so many characters of the username, but it is used rarely and only by me. This option may work for you depending on your situation.
and what is FR packet??
I said that FR (FreeRADIUS) may not hear the stop packet (the stop accounting record) from the NAS.
if u have any script example script can u send me ....i am in problem :(
Have a look at bash scripting and expect. It is fairly simple and you may be able to get away with it. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com
Thnaks for suggestion i have create one script with is login in to cisco router through telnet and run desired command not i am getting your point u told me i kick off user from cisco nas thruogh the script but ....okie i will create it but i dont know wheather i put this script so that this script check login user info and i think this script repace checkrad right ??? plz u give me your suggestion wheather i put this script to check login user on NAS Dennis Skinner <dskinner@bluefrog.com> wrote: satish patel wrote:
I am not getting u how do i query from shell script to NAS ??
See your NAS docs. SNMP may be an option if the NAS supports it (and FR may be able to handle the query itself as another poster suggested), but there may be other ways.... For instance, we have a couple scripts we use when we want to boot a particular user. They are simple bash scripts that use "expect" to handle logging into our cisco modems and look for the tty that the user is on and then clear that tty. It has limitations as the cisco "show users" command only shows so many characters of the username, but it is used rarely and only by me. This option may work for you depending on your situation.
and what is FR packet??
I said that FR (FreeRADIUS) may not hear the stop packet (the stop accounting record) from the NAS.
if u have any script example script can u send me ....i am in problem :(
Have a look at bash scripting and expect. It is fairly simple and you may be able to get away with it. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers
# SNMP CONFIGURATION # # Snmp configuration is only valid if SNMP support was enabled # at compile time. # # To enable SNMP querying of the server, set the value of the # 'snmp' attribute to 'yes' # snmp = no $INCLUDE ${confdir}/snmp.conf This is in radius.conf. Change snmp = yes and checkrad should work with nastype set to cisco. If you want to get rid of all stale sessions delete them with SQL oneliner like: delete from radacct where AcctStopTime=0 && AcctStartTime < '2007-3-8' (this is MySQL - MSSQL syntax might be slightly different) This will delete all open sessions up to today. Ivan Kalik Kalik Informatika ISP Dana 8/3/2007, "satish patel" <linuxtrap@yahoo.co.in> piše:
Dear all
i fedup from this problem i dont know how to resolve it no one help me out from this problem i have freradius-1.1.4 + MSSQL setup user databases and accouting done by mssql and my NAS is cisco router with VPDN configuration but i have faceing some problem since last week suposse one user login in to cisco router and he/she accouting start on MSSQL server i am useting simultenouse-use feature in SQL
example radacct tables
User AcctStartTime AcctStopTime abc 08/03/2007:01:30 1/1/1900
Now user can access internet and anything everything going fine but after when i stop radiusd proccess and start it my user disconnected and he/she try for login in to cisco VPDN he/she got error access deny and i got some log multiple user login
Thu Mar 8 20:12:05 2007 : Auth: Multiple logins (max 1) : [mlpm484/<CHAP-Password>] (from client cisco port 974) Thu Mar 8 20:12:08 2007 : Auth: Multiple logins (max 1) : [mlpm629/<CHAP-Password>] (from client cisco port 1111) Thu Mar 8 20:12:10 2007 : Auth: Multiple logins (max 1) : [mlpm484/<CHAP-Password>] (from client cisco port 460) Thu Mar 8 20:12:14 2007 : Auth: Multiple logins (max 1) :
SomeThing like this it means in MSSQL AcctStopTime there is i still user login means that entry is not still clear thats why i got error 'Multiple logins (max 1)' in my client.conf file NAStype is "other" caz when i user cisco nastype my Simulteneous-use not working ?? so i thing this detail enough for help plz tell me right suggesstion if i am wrong ....
$ cat ~/satish/url.txt
System administrator ( Data Center )
please visit this site
--------------------------------- Here�s a new way to find what you're looking for - Yahoo! Answers
Thank dear tell me one thing 1) in freeradius two type of method to check simultenous login checking one is sql base query and second is checkrad perl script now i am useing simultenous-use attributes through SQL i have done some change in raddb/mssql.conf file simu_count and simu_very users this is working fine but know i want to check this thing not from sql i want to use checkrad perl script so what is the configuration for this I have read document on net but it is bit confusing me some author told put entry in naslist naspasswd and client.conf so i dont know where i put right entry ro start this thing and i have read one more thing checkrad script support cisco NAS and i have cisco router also i have enable snmp but i dont know how to check this checkrad script is it working or not can u explain me this thing caz i m suffer this thing..... One more problem my radiusd server die again and again and i got this erro 1 *** glibc detected *** malloc() what is thus how can i resolve this one tnt@kalik.co.yu wrote: # SNMP CONFIGURATION # # Snmp configuration is only valid if SNMP support was enabled # at compile time. # # To enable SNMP querying of the server, set the value of the # 'snmp' attribute to 'yes' # snmp = no $INCLUDE ${confdir}/snmp.conf This is in radius.conf. Change snmp = yes and checkrad should work with nastype set to cisco. If you want to get rid of all stale sessions delete them with SQL oneliner like: delete from radacct where AcctStopTime=0 && AcctStartTime < '2007-3-8' (this is MySQL - MSSQL syntax might be slightly different) This will delete all open sessions up to today. Ivan Kalik Kalik Informatika ISP Dana 8/3/2007, "satish patel" pi¹e:
Dear all
i fedup from this problem i dont know how to resolve it no one help me out from this problem i have freradius-1.1.4 + MSSQL setup user databases and accouting done by mssql and my NAS is cisco router with VPDN configuration but i have faceing some problem since last week suposse one user login in to cisco router and he/she accouting start on MSSQL server i am useting simultenouse-use feature in SQL
example radacct tables
User AcctStartTime AcctStopTime abc 08/03/2007:01:30 1/1/1900
Now user can access internet and anything everything going fine but after when i stop radiusd proccess and start it my user disconnected and he/she try for login in to cisco VPDN he/she got error access deny and i got some log multiple user login
Thu Mar 8 20:12:05 2007 : Auth: Multiple logins (max 1) : [mlpm484/] (from client cisco port 974) Thu Mar 8 20:12:08 2007 : Auth: Multiple logins (max 1) : [mlpm629/] (from client cisco port 1111) Thu Mar 8 20:12:10 2007 : Auth: Multiple logins (max 1) : [mlpm484/] (from client cisco port 460) Thu Mar 8 20:12:14 2007 : Auth: Multiple logins (max 1) :
SomeThing like this it means in MSSQL AcctStopTime there is i still user login means that entry is not still clear thats why i got error 'Multiple logins (max 1)' in my client.conf file NAStype is "other" caz when i user cisco nastype my Simulteneous-use not working ?? so i thing this detail enough for help plz tell me right suggesstion if i am wrong ....
$ cat ~/satish/url.txt
System administrator ( Data Center )
please visit this site
--------------------------------- Here�s a new way to find what you're looking for - Yahoo! Answers
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers
You have a document "Simultaneous-Use" in /usr/local/share/doc/freeradius-version. See if that is helpful. Best thing to do is to have a look at the script and see if you can switch on logging or debugging somewhere. Then try running it manually and see what happens. It might not be pulling NAS information properly. No radwho output? How about radlast - does it have recent entries or from some days ago (or none at all)? Can you paste the part od radiusd -X output when that error occurs? Ivan Kalik Kalik Informatika ISP -----Original Message----- From: freeradius-users-bounces+tnt=kalik.co.yu@lists.freeradius.org [mailto:freeradius-users-bounces+tnt=kalik.co.yu@lists.freeradius.org] On Behalf Of satish patel Sent: 09 March 2007 14:06 To: FreeRadius users mailing list Subject: Re: freeradius simultenoues-use error Thank dear tell me one thing 1) in freeradius two type of method to check simultenous login checking one is sql base query and second is checkrad perl script now i am useing simultenous-use attributes through SQL i have done some change in raddb/mssql.conf file simu_count and simu_very users this is working fine but know i want to check this thing not from sql i want to use checkrad perl script so what is the configuration for this I have read document on net but it is bit confusing me some author told put entry in naslist naspasswd and client.conf so i dont know where i put right entry ro start this thing and i have read one more thing checkrad script support cisco NAS and i have cisco router also i have enable snmp but i dont know how to check this checkrad script is it working or not can u explain me this thing caz i m suffer this thing..... One more problem my radiusd server die again and again and i got this erro 1 *** glibc detected *** malloc() what is thus how can i resolve this one tnt@kalik.co.yu wrote: # SNMP CONFIGURATION # # Snmp configuration is only valid if SNMP support was enabled # at compile time. # # To enable SNMP querying of the server, set the value of the # 'snmp' attribute to 'yes' # snmp = no $INCLUDE ${confdir}/snmp.conf This is in radius.conf. Change snmp = yes and checkrad should work with nastype set to cisco. If you want to get rid of all stale sessions delete them with SQL oneliner like: delete from radacct where AcctStopTime=0 && AcctStartTime < '2007-3-8' (this is MySQL - MSSQL syntax might be slightly different) This will delete all open sessions up to today. Ivan Kalik Kalik Informatika ISP Dana 8/3/2007, "satish patel" pi¹e:
Dear all
i fedup from this problem i dont know how to resolve it no one help me out from this problem i have freradius-1.1.4 + MSSQL setup user databases and accouting done by mssql and my NAS is cisco router with VPDN configuration but i have faceing some problem since last week suposse one user login in to cisco router and he/she accouting start on MSSQL server i am useting simultenouse-use feature in SQL
example radacct tables
User AcctStartTime AcctStopTime abc 08/03/2007:01:30 1/1/1900
Now user can access internet and anything everything going fine but after when i stop radiusd proccess and start it my user disconnected and he/she try for login in to cisco VPDN he/she got error access deny and i got some log multiple user login
Thu Mar 8 20:12:05 2007 : Auth: Multiple logins (max 1) : [mlpm484/] (from client cisco port 974) Thu Mar 8 20:12:08 2007 : Auth: Multiple logins (max 1) : [mlpm629/] (from client cisco port 1111) Thu Mar 8 20:12:10 2007 : Auth: Multiple logins (max 1) : [mlpm484/] (from client cisco port 460) Thu Mar 8 20:12:14 2007 : Auth: Multiple logins (max 1) :
SomeThing like this it means in MSSQL AcctStopTime there is i still user login means that entry is not still clear thats why i got error 'Multiple logins (max 1)' in my client.conf file NAStype is "other" caz when i user cisco nastype my Simulteneous-use not working ?? so i thing this detail enough for help plz tell me right suggesstion if i am wrong ....
$ cat ~/satish/url.txt
System administrator ( Data Center )
please visit this site
--------------------------------- Here�s a new way to find what you're looking for - Yahoo! Answers
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com _____ Here’s a new way to find what you're looking for - Yahoo! <http://us.rd.yahoo.com/mail/in/yanswers/*http://in.answers.yahoo.com/> Answers
I have freeradius version 1.1.4 latest and i am useing it with cisco VPDN with MSSQL database and i got this error ...... and this is my production server many users accounting runing on this server .....what the hell it is my radius die again and again i also started radwatch but it;s still die $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers
satish patel wrote:
I have freeradius version 1.1.4 latest and i am useing it with cisco VPDN with MSSQL database and i got this error ...... and this is my production server many users accounting runing on this server .....what the hell it is my radius die again and again i also started radwatch but it;s still die
It looks like a bug in the mssql driver in FreeRADIUS. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (5)
-
Alan DeKok -
Dennis Skinner -
Ivan Kalik -
satish patel -
tnt＠kalik.co.yu