User never get disconnected (was Re: Simultaneous-Use problem)

[tnt at kalik.co.yu]

No. Idle-Timeout will work if NAS doesn't realize that user is not
online any more. It doesn't help if stop packets are lost. Only
checkrad or such routines that check user status with NAS will help
there.

Ivan Kalik
Kalik Informatika ISP


Dana 12/4/2007, "satish patel" <linuxtrap at yahoo.co.in> piše:

>I have faceing same problem when some time NAS send ACCT-STOP packet and packet would be lost then user session would be open and next time whne user try to login he/she got error multilogin so that i have implement checkrad.pl script and check simultaneouse users through SNMP and it is working fine but i dont know why acct-stop packet lost
>
>I have one more query regarding idle-time out if i set idle-time out 5 min then user automaicaly disconnect if connection was idle but suppose NAS send acct-stop packet and packet will be lost then idle-time out work in this case
>
>PD <paul at ranahminang.net> wrote: On 4/12/2007, "tnt at kalik.co.yu"  wrote:
>
>>+ what cause of this problem ?
>>Either NAS thinks that users are still connected or your RADIUS server is
>>not receiving Stop packages. If NAS (NAS not radacct table) shows users
>>as connected you can add Idle-Timeout of about 5 minutes in user (or
>>group) configuration. If RADIUS packets are not being received have a
>>look at your network. NAS needs reliable connection to RADIUS server -
>>you shouldn't have firewalls and such in the way.
>
>Well... the problem only persist sometime.. let say once or two
>timeseveryday. The communication between Radius box and NAS using STP
>cable.
>
>Currently we are still on development stage of hotspot system. Before
>implement them on big area, we found some problem, like explain above.
>When I log in and log out or shut the notebook down without logout, I
>can see both start and stop the record on radacct table,
>
>I could not find the problem sources.. perhaps someone else has face the
>same problem ?
>
>>+ how to delete this entry daily (perhaps with crontab)
>>Don't do that. Fix your server communication and then delete stale
>>entries once.
>
>Well.. with simultaneous-use:=1, the same user will not be able login
>anymore because radius see that he / she still online.
>
>TIA
>
>PD
>
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>
>
>$ cat ~/satish/url.txt
>
>System administrator ( Data Center )
>
>please visit this site
>
>http://linux.tulipit.com
>
>---------------------------------
> Check out what you're missing if you're not on Yahoo! Messenger
>