Hi, I am using pppd on linux nas. The client has connected, then after some time freeradius server has disappered on the network because of connection issue. The user disconnected when it was still down. Then, after freeradius came up the user wasn't able to login anymore because of simultaneous login check with error 691 on windows. Radius was reporting Reply-Message := "\r\nYou are already logged in - access denied\r\n\n" How to make radius stop thinking the user is connected (like if no Acct-Interim-Update messages received in specified time).
Yevgeny Kosarzhevsky wrote:
Hi,
I am using pppd on linux nas. The client has connected, then after some time freeradius server has disappered on the network because of connection issue. The user disconnected when it was still down. Then, after freeradius came up the user wasn't able to login anymore because of simultaneous login check with error 691 on windows. Radius was reporting Reply-Message := "\r\nYou are already logged in - access denied\r\n\n"
How to make radius stop thinking the user is connected (like if no Acct-Interim-Update messages received in specified time).
Store the sessions in a database, and run a "cron" job to clean up stale sessions. Alan DeKok.
Alan DeKok wrote:
Yevgeny Kosarzhevsky wrote:
How to make radius stop thinking the user is connected (like if no Acct-Interim-Update messages received in specified time).
Store the sessions in a database, and run a "cron" job to clean up stale sessions.
Ok and how can I send request to NAS to disconnect client? I tried raddb/sites-available/coa but cannot make it to send packets to appropriate NAS.
Alan DeKok wrote:
it doesn't work ok I am providing the output from radius:
rad_recv: Disconnect-Request packet from host 10.10.10.1 port 36257, id=33, length=36 User-Name = "test" NAS-IP-Address = 10.10.10.11 server coa { +- entering group recv-coa {...} ++[ok] returns ok +- entering group send-coa {...} ++[ok] returns ok } # server coa Sending Disconnect-ACK of id 33 to 10.10.10.1 port 36257 Finished request 46. Going to the next request Cleaning up request 46 ID 33 with timestamp +2708 Ready to process requests. So, it accepts COA request, but how can I make it to disconnect client on NAS, e.g. to send Disconnect message to NAS IP?
Yevgeny Kosarzhevsky wrote:
Alan DeKok wrote:
it doesn't work ok I am providing the output from radius:
rad_recv: Disconnect-Request packet from host 10.10.10.1 port 36257, id=33, length=36 User-Name = "test" NAS-IP-Address = 10.10.10.11
Uh... that's *receiving* a packet from a NAS. It's not *sending* a packet to a NAS to disconnect a user.
So, it accepts COA request, but how can I make it to disconnect client on NAS, e.g. to send Disconnect message to NAS IP?
raddb/sites-available/originate-coa Alan DeKok.
participants (2)
-
Alan DeKok -
Yevgeny Kosarzhevsky