Simultaneous-Use per NAS
Svend Eriksen
se at metro-remote.no
Fri Aug 31 10:19:03 CEST 2007
On 8/30/07, *Svend Eriksen* <se at metro-remote.no
<mailto:se at metro-remote.no>> wrote:
>
> Hi,
> We run freeradius 1.1.6 against postgresql 8.1.
>
> With the current configuration the user can only login one time
> simultaneously. What I want is that a user can login only one time per
> NAS, but that the user can login on several NASes at the same
> time. The
> reason for this is that a user can move between NASes without the need
> to logout from the NAS he is leaving.
>
> The user can only login to NASes that is in a group that he is a
> member
> of (this already works today).
>
> Is it also possible to set the "Simultaneously-Use" as a default value
> for all users, so we don't have to set it on all the groups?
>
>
> Here are the lines from the database
>
> SELECT * FROM radcheck
> 40 | user1 | Cleartext-Password | := | kebab1
> 41 | user1 | Expiration | := | Dec 31 2050 00:00:00
>
> SELECT * FROM radusergroup
> user1 | testusergroup | 0
>
> SELECT * FROM nas
> 7 | 10.0.0.1 <http://10.0.0.1> | NAS1 | other | | naspw
> 8 | 10.0.0.2 <http://10.0.0.2> | NAS2 | other | | naspw
>
> SELECT * FROM radgroupcheck
> 15 | testusergroup | NAS-IP-Address | += | 10.0.0.1
> <http://10.0.0.1>
> 16 | testusergroup | NAS-IP-Address | += | 10.0.0.2
> <http://10.0.0.2>
> 17 | testusergroup | Simultaneous-Use | := | 1
>
>
>
> reg
> Svend Eriksen
>
>
>
> Hi,
> Why don't you just add Simultaneous-Use for each user to radcheck?
> As I understand you correctly, that would solve the problem, right?
> I don't know how you actually add the new users, but it can easily be
> done to give them that attr. as a default one.
>
>
> Kind Regards,
> Yves
>
This is what I do today. The problem occurs when a user leaves a NAS
without logging out, and then tries to connects to another NAS. The
second NAS will ask for a new login, but freeradius will answer that the
user is already logged in.
The solution I am looking for is that a user only can have one
simultaneously login per NAS, but that the user can be logged in
simultaneously on different NASes.
reg
Svend
More information about the Freeradius-Users
mailing list