please help not allow the many connections from single user
Hi We has big problem to have many connections from single user in DSL clients A single user can authenticate on the different LNS server to use the internet connection. how can we prevent it? As our users are using the dynamic ip, the ip address is assigned by the LNS not the radius in this case, the ip pool can't be defined in the radius setting. Right? Can you help to give us detail info? thank you so much ____________________________________________________________________________________ Be a better pen pal. Text or chat with friends inside Yahoo! Mail. See how. http://overview.mail.yahoo.com/
how can we prevent it?
Restrict the user to a single session. Have a look at the (check) attribute Simultaneous-Use. If you are using sql accounting you will need to make slight adjustments to radiusd.conf and sql.conf. Read instructions in them. Ivan Kalik Kalik Informatika ISP
Thank you In the freeradius/doc/Simultaneous-Use, I don't understand this one. ls it in the radius.conf? Can you teach me how to add this? NOTE!!! The "Simultaneous-Use" parameter is in the "check" A/V pairs, and not in the Reply A/V pairs (it _is_ a check). Thank you --- tnt@kalik.co.yu wrote:
how can we prevent it?
Restrict the user to a single session. Have a look at the (check) attribute Simultaneous-Use. If you are using sql accounting you will need to make slight adjustments to radiusd.conf and sql.conf. Read instructions in them.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
____________________________________________________________________________________ Get easy, one-click access to your favorites. Make Yahoo! your homepage. http://www.yahoo.com/r/hs
I did attribute in mysql and start freeradius In the /var/log/radius.log I can see Auth: Multiple logins (max 1) [MPP attempt]: When I kick out the user in the nas server, I am still seeing this "Auth: Multiple logins (max 1) [MPP attempt]:" ls it any delay time to take? how can I control it? Thank you --- tnt@kalik.co.yu wrote:
how can we prevent it?
Restrict the user to a single session. Have a look at the (check) attribute Simultaneous-Use. If you are using sql accounting you will need to make slight adjustments to radiusd.conf and sql.conf. Read instructions in them.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
____________________________________________________________________________________ Be a better pen pal. Text or chat with friends inside Yahoo! Mail. See how. http://overview.mail.yahoo.com/
Have you configured nastype in your clent configuration? If checkrad script is to check sessions with NAS it needs that. Ivan Kalik Kalik Informatika ISP Dana 20/11/2007, "ann kok" <annkok2001@yahoo.com> piše:
I did attribute in mysql and start freeradius
In the /var/log/radius.log
I can see
Auth: Multiple logins (max 1) [MPP attempt]:
When I kick out the user in the nas server, I am still seeing this "Auth: Multiple logins (max 1) [MPP attempt]:"
ls it any delay time to take?
how can I control it?
Thank you
--- tnt@kalik.co.yu wrote:
how can we prevent it?
Restrict the user to a single session. Have a look at the (check) attribute Simultaneous-Use. If you are using sql accounting you will need to make slight adjustments to radiusd.conf and sql.conf. Read instructions in them.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
____________________________________________________________________________________ Be a better pen pal. Text or chat with friends inside Yahoo! Mail. See how. http://overview.mailyahoo.com/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thank you but in the nas file. it said to use clients.conf i configure the clients.conf and put the NAS (linux) there can you help? or teach me to run the command Thank you Peter more naslist # # THIS FILE IS DEPRECATED. # # You should NOT be using this file to configure the server. # It is here ONLY for backwards compatibility. # # See 'clients.conf' for the new configuration. # --- tnt@kalik.co.yu wrote:
Have you configured nastype in your clent configuration? If checkrad script is to check sessions with NAS it needs that.
Ivan Kalik Kalik Informatika ISP
Dana 20/11/2007, "ann kok" <annkok2001@yahoo.com> pi¹e:
I did attribute in mysql and start freeradius
In the /var/log/radius.log
I can see
Auth: Multiple logins (max 1) [MPP attempt]:
When I kick out the user in the nas server, I am still seeing this "Auth: Multiple logins (max 1) [MPP attempt]:"
ls it any delay time to take?
how can I control it?
Thank you
--- tnt@kalik.co.yu wrote:
how can we prevent it?
Restrict the user to a single session. Have a look at the (check) attribute Simultaneous-Use. If you are using sql accounting you will need to make slight adjustments to radiusd.conf and sql.conf. Read instructions in them.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
____________________________________________________________________________________
Be a better pen pal. Text or chat with friends inside Yahoo! Mail. See how. http://overview.mailyahoo.com/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
____________________________________________________________________________________ Get easy, one-click access to your favorites. Make Yahoo! your homepage. http://www.yahoo.com/r/hs
nastype is a setting in clients.conf. Read instructions in the file. Ivan Kalik Kalik Informatika ISP Dana 20/11/2007, "ann kok" <annkok2001@yahoo.com> piše:
Thank you
but in the nas file. it said to use clients.conf i configure the clients.conf and put the NAS (linux) there
can you help?
or teach me to run the command
Thank you Peter
more naslist # # THIS FILE IS DEPRECATED. # # You should NOT be using this file to configure the server. # It is here ONLY for backwards compatibility. # # See 'clients.conf' for the new configuration. #
--- tnt@kalik.co.yu wrote:
Have you configured nastype in your clent configuration? If checkrad script is to check sessions with NAS it needs that.
Ivan Kalik Kalik Informatika ISP
Dana 20/11/2007, "ann kok" <annkok2001@yahoo.com> piše:
I did attribute in mysql and start freeradius
In the /var/log/radius.log
I can see
Auth: Multiple logins (max 1) [MPP attempt]:
When I kick out the user in the nas server, I am still seeing this "Auth: Multiple logins (max 1) [MPP attempt]:"
ls it any delay time to take?
how can I control it?
Thank you
--- tnt@kalik.co.yu wrote:
how can we prevent it?
Restrict the user to a single session. Have a look at the (check) attribute Simultaneous-Use. If you are using sql accounting you will need to make slight adjustments to radiusd.conf and sql.conf. Read instructions in them.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
____________________________________________________________________________________
Be a better pen pal. Text or chat with friends inside Yahoo! Mail. See how. http://overview.mailyahoo.com/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
____________________________________________________________________________________ Get easy, one-click access to your favorites. Make Yahoo! your homepage. http://www.yahoo.com/r/hs - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
btw, i saw some users are fine but some users are not not sure it is limited by time or modem Do you have idea? Thank you --- tnt@kalik.co.yu wrote:
nastype is a setting in clients.conf. Read instructions in the file.
Ivan Kalik Kalik Informatika ISP
Dana 20/11/2007, "ann kok" <annkok2001@yahoo.com> pi¹e:
Thank you
but in the nas file. it said to use clients.conf i configure the clients.conf and put the NAS (linux) there
can you help?
or teach me to run the command
Thank you Peter
more naslist # # THIS FILE IS DEPRECATED. # # You should NOT be using this file to configure the server. # It is here ONLY for backwards compatibility. # # See 'clients.conf' for the new configuration. #
--- tnt@kalik.co.yu wrote:
Have you configured nastype in your clent configuration? If checkrad script is to check sessions with NAS it needs that.
Ivan Kalik Kalik Informatika ISP
Dana 20/11/2007, "ann kok" <annkok2001@yahoo.com> pi¹e:
I did attribute in mysql and start freeradius
In the /var/log/radius.log
I can see
Auth: Multiple logins (max 1) [MPP attempt]:
When I kick out the user in the nas server, I am still seeing this "Auth: Multiple logins (max 1) [MPP attempt]:"
ls it any delay time to take?
how can I control it?
Thank you
--- tnt@kalik.co.yu wrote:
how can we prevent it?
Restrict the user to a single session. Have a look at the (check) attribute Simultaneous-Use. If you are using sql accounting you will need to make slight adjustments to radiusd.conf and sql.conf. Read instructions in them.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
____________________________________________________________________________________
Be a better pen pal. Text or chat with friends inside Yahoo! Mail. See how. http://overview.mailyahoo.com/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
____________________________________________________________________________________
Get easy, one-click access to your favorites. Make Yahoo! your homepage. http://www.yahoo.com/r/hs - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
____________________________________________________________________________________ Be a better sports nut! Let your teams follow you with Yahoo Mobile. Try it now. http://mobile.yahoo.com/sports;_ylt=At9_qDKvtAbMuh1G1SQtBI7ntAcJ
basically I don't know how to solve it out I follow the freeradius/doc 1/ add group in freeradius/users eg: DEFAULT Group == "homeuse",Simultaneous-Use = 1,Fall-Through = 1 2/ insert radius database INSERT INTO radgroupcheck (GroupName, Attribute, op, Value) values("homeuse", "Simultaneous-Use", ":=", "1"); After restart the mysql, freeradius, I can see the some users can have "Multiple logins (max 1) [MPP attempt]" in radius log When I tested to kick out those users from NAS, it still shows Multiple logins in the radius log and the users can't log on again. and I can't see any login in the NAS But some users I can kick it out and have logon again sucessful in the radius log I check checkrad this script. he looks like to use the naslist and naspassword files. but in our naslist, the comment told me to use the clients.conf instead I add naslist and naspassword but I don't know how to test it. ls there any conflict? I am using linux as NAS, what is the type of this one? ls the type as Other? Thank you again --- tnt@kalik.co.yu wrote:
btw, i saw some users are fine
but some users are not
not sure it is limited by time or modem
Do you have idea?
Thank you
Sorry. I don't know what are you on about. Whatever it is, modem is the most unlikely culprit.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
____________________________________________________________________________________ Be a better pen pal. Text or chat with friends inside Yahoo! Mail. See how. http://overview.mail.yahoo.com/
1. Delete that entry in users file. You are checkig Simultaneous-Use in radgroupcheck. 2. In session{} module in radiusd.conf change checking to sql. 3. Uncomment simunltaneous use queries in sql.conf. 4. If your NAS is not listed in docs enter other as nastype. That means there will be no check of NAS sessions, only what's written in the database. 5. Find all open entries in the database (SELECT * FROM radacct WHERE AcctStopTime = 0). If there are some open sessions older than what is normal - delete them - they are most likely stale and are preventing users from connecting. Ivan Kalik Kalik Informatika ISP Dana 20/11/2007, "ann kok" <annkok2001@yahoo.com> piše:
basically I don't know how to solve it out
I follow the freeradius/doc
1/ add group in freeradius/users eg: DEFAULT Group == "homeuse",Simultaneous-Use = 1,Fall-Through = 1
2/ insert radius database INSERT INTO radgroupcheck (GroupName, Attribute, op, Value) values("homeuse", "Simultaneous-Use", ":=", "1");
After restart the mysql, freeradius, I can see the some users can have "Multiple logins (max 1) [MPP attempt]" in radius log
When I tested to kick out those users from NAS, it still shows Multiple logins in the radius log and the users can't log on again. and I can't see any login in the NAS
But some users I can kick it out and have logon again sucessful in the radius log
I check checkrad this script. he looks like to use the naslist and naspassword files. but in our naslist, the comment told me to use the clients.conf instead
I add naslist and naspassword but I don't know how to test it. ls there any conflict?
I am using linux as NAS, what is the type of this one? ls the type as Other?
Thank you again
--- tnt@kalik.co.yu wrote:
btw, i saw some users are fine
but some users are not
not sure it is limited by time or modem
Do you have idea?
Thank you
Sorry. I don't know what are you on about. Whatever it is, modem is the most unlikely culprit.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
____________________________________________________________________________________ Be a better pen pal. Text or chat with friends inside Yahoo! Mail. See how. http://overview.mailyahoo.com/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Alan DeKok -
ann kok -
Ivan Kalik -
tnt＠kalik.co.yu