User-accounts do not expire in time...
Evert
evert at poboxes.info
Wed Nov 21 12:01:46 CET 2007
Alan DeKok wrote:
> Evert wrote:
>> I have users in my system who are supposed to be able to logon as much as they want, in a
>> period of 24 hours starting from their 1st logon.
> ...
>> however, a user who is a member of the 24hours group is able to log on longer than the
>> 24hours period:
>
> Is the server receiving accounting packets?
>
> The fact that a user received an Access-Accept doesn't mean they
> succeeded in logging in. The NAS may have rebooted, they may have hung
> up, the Access-Accept could have been lost, etc.
>
> The server knows (and accounts for) the user logging in only when it
> receives an Accounting-Request packet. The accounting packets are also
> used to determine how long the user was logged in for.
Provided both the server and the NAS have not rebooted in the mean time, shouldn't the
server send a 'Maximum never usage time reached', based on the rules in sqlcounter.conf,
accounting packets or not?
How long the user has been logged on in the 24-hour period is not really relevant in my
case. All I need is that when the user tries to log in again > 24 hours after 1st logon
(based on AcctStartTime) he gets a 'Maximum never usage time reached'.
(I'll have to check on the accounting packets. Not sure about them)
Regards,
Evert
More information about the Freeradius-Users
mailing list