User-accounts do not expire in time...

Evert evert at poboxes.info
Wed Nov 21 12:01:46 CET 2007


Alan DeKok wrote:
> Evert wrote:
>> I have users in my system who are supposed to be able to logon as much as they want, in a
>> period of 24 hours starting from  their 1st logon.
> ...
>> however, a user who is a member of the 24hours group is able to log on longer than the
>> 24hours period:
> 
>   Is the server receiving accounting packets?
> 
>   The fact that a user received an Access-Accept doesn't mean they
> succeeded in logging in.  The NAS may have rebooted, they may have hung
> up, the Access-Accept could have been lost, etc.
> 
>   The server knows (and accounts for) the user logging in only when it
> receives an Accounting-Request packet.  The accounting packets are also
> used to determine how long the user was logged in for.


Provided both the server and the NAS have not rebooted in the mean time, shouldn't the
server send a 'Maximum never usage time reached', based on the rules in sqlcounter.conf,
accounting packets or not?

How long the user has been logged on in the 24-hour period is not really relevant in my
case. All I need is that when the user tries to log in again > 24 hours after 1st logon
(based on AcctStartTime) he gets a 'Maximum never usage time reached'.



(I'll have to check on the accounting packets. Not sure about them)


Regards,
	Evert




More information about the Freeradius-Users mailing list