Need help in double logins in radacct

Nachiketa Rajpurohit nachiketaa at gmail.com
Thu Aug 9 12:42:29 CEST 2007


I observed the same double or multiple inserts. with same AcctSessionID and
same Start time for some users. This happens with Interim update too.  I
later changed radius.conf to calculate AcctUniqueID and do updates based on
that in sql.conf but this random occurrence did not go away. May be it is
because of the delay. Still not sure why multiple inserts.

On 8/9/07, freeradius-users-request at lists.freeradius.org <
freeradius-users-request at lists.freeradius.org> wrote:
>
> Send Freeradius-Users mailing list submissions to
>         freeradius-users at lists.freeradius.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
>         http://lists.freeradius.org/mailman/listinfo/freeradius-users
> or, via email, send a message with subject or body 'help' to
>         freeradius-users-request at lists.freeradius.org
>
> You can reach the person managing the list at
>         freeradius-users-owner at lists.freeradius.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Freeradius-Users digest..."
>
>
> Today's Topics:
>
>    1. Re : Converting PAP to MS-CHAPV2 (Eshun Benjamin)
>    2. Re: Need help in double logins in radacct (Claudiu Filip)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Thu, 9 Aug 2007 09:02:22 +0000 (GMT)
> From: Eshun Benjamin <bkeshun at yahoo.fr>
> Subject: Re : Converting PAP to MS-CHAPV2
> To: FreeRadius users mailing list
>         <freeradius-users at lists.freeradius.org>
> Message-ID: <107714.37623.qm at web26014.mail.ukl.yahoo.com>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Freeradius can dynamically authenticate  against  PAP  or MSCHAP.  You
> would have to have 2 password db. ( eg. unix passwd and smbpasswd). You can
> not use one db for both. It does it like magic :-) if you have to db.
>
> ==================================================
> Benjamin K. Eshun
>
> ----- Message d'origine ----
> De : Arran Cudbard-Bell <A.Cudbard-Bell at sussex.ac.uk>
> ? : FreeRadius users mailing list <freeradius-users at lists.freeradius.org>
> Envoy? le : Mercredi, 8 Ao?t 2007, 23h46mn 13s
> Objet : Re: Converting PAP to MS-CHAPV2
>
> Jo?o Mendes wrote:
> > HI,
> > I was wondering if freeradius could do the following:
> >     - I have a radius client that needs to talk MS-Chapv2 and a Radius
> > server that only talks PAP.
> >     Can freeradius convert and proxy the request to the server than
> > answer to the client??
> >
> No,
> Amongst other things In order for PAP (Plaintext Authentication
> Protocol) to work, the supplicant needs to provide it's credentials in
> Plaintext.
> MSCHAPv2 only provides hashes on the users credentials.
> > Thanks
> > Jo?o Mendes
> >
> >
> >
> >
> >
> >
> >
> >
> > -
> > List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> >
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
>
>
>
>
>
>
>
>
>       _____________________________________________________________________________
> Ne gardez plus qu'une seule adresse mail ! Copiez vos mails vers Yahoo!
> Mail
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <
> https://lists.freeradius.org/pipermail/freeradius-users/attachments/20070809/c129902e/attachment-0001.html
> >
>
> ------------------------------
>
> Message: 2
> Date: Thu, 9 Aug 2007 12:51:54 +0300
> From: Claudiu Filip <claudiu at globtel.ro>
> Subject: Re: Need help in double logins in radacct
> To: FreeRadius users mailing list
>         <freeradius-users at lists.freeradius.org>
> Message-ID: <1445043763.20070809125154 at globtel.ro>
> Content-Type: text/plain; charset=us-ascii
>
> Thursday, August 9, 2007, 10:38:27 AM, you wrote:
> > could help me distinguish why it has double record in mysql. But
> > when in radius logs,it has one request only.
> > | RadAcctId | AcctSessionId | UserName   |
> > |    517069 | 3C001FC0      | foo        |
> > |    517071 | 3C001FC0      | foo        |
> > |    517075 | 3C001FC0      | foo        |
>
> Hi Nelson,
>
> RadAcctId is an autoincrement field, so it will be different for sure.
> There is no reason to have those dups unless the INSERT query is run
> multiple times.
>
> 1) Are you sure that you have only one request coming to fr?
>    If no, the duplicates can be generated by the radius client if it
>    doesnt get a reply quick enough. Decreasing database response time
>    and increasing radius timeout on client can help.
>
> 2) AcctStopTime is different?
>    If no, check 1) again :D
>    If yes, maybe the radius client sends a weak AcctSessionId (you can
>    create one using the acct_unique)
>
> Best regards,
>
> Claudiu Filip
> @: claudiu at globtel.ro
> Http://www.globtel.ro
> T:+40344880100
> F:+40344880113
>
>
>
>
>
> ------------------------------
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
>
> End of Freeradius-Users Digest, Vol 28, Issue 30
> ************************************************
>



-- 
Nachiketa Rajpurohit
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20070809/a3ffb03a/attachment.html>


More information about the Freeradius-Users mailing list