Can't get checkrad to be called
    Dan Brisson 
    dbrisson at gmail.com
       
    Fri Jun  3 01:59:21 CEST 2011
    
    
  
I do have this feeling that I'm missing, but I'm not sure what it is.
Here's what I have configured:
clients.conf:
client 10.1.10.20 {
         secret      = password
         nastype     = pr3000
sql/mysql/dialup.conf:
         # Uncomment simul_count_query to enable simultaneous use checking
         simul_count_query = "SELECT COUNT(*) \
                              FROM ${acct_table1} \
                              WHERE username = '%{SQL-User-Name}' \
                              AND acctstoptime IS NULL"
#       simul_verify_query  = "SELECT radacctid, acctsessionid, username, \
#                               nasipaddress, nasportid, framedipaddress, \
#                               callingstationid, framedprotocol \
#                               FROM ${acct_table1} \
#                               WHERE username = '%{SQL-User-Name}' \
#                               AND acctstoptime IS NULL"
sites-enabled/default:
#  Session database, used for checking Simultaneous-Use. Either the radutmp
#  or rlm_sql module can handle this.
#  The rlm_sql module is *much* faster
session {
         radutmp
         #
         #  See "Simultaneous Use Checking Queries" in sql.conf
         sql
}
modules/perl:
        func_checksimul = checksimul
And in my MySQL radcheck table I have:
testuser  Simultaneous-Use := 1
Thanks in advance for any insight,
-dan
On 6/2/11 5:54 AM, Alan DeKok wrote:
> Dan Brisson wrote:
>> I was wondering if someone could help me determine why checkrad isn't
>> being called.  I've followed the directions in the doc/Simultaneous-Use
>> but still cannot get checkrad to fire off when I login.  It will check
>> radutmp, but never reaches out to my NAS with checkrad, as evidenced
>> here from radiusd -X:
>>
>> +- entering group session {...}
>> [radutmp]       expand: /var/log/radius/radutmp ->  /var/log/radius/radutmp
>> [radutmp]       expand: %{User-Name} ->  testuser
>> ++[radutmp] returns ok
>> Using Post-Auth-Type Reject
>    If you've configured Simultaneous-Use, then there should be
> *something* about checkrad in the output.
>
>> Can I provide any other data?  I'm using SQL for authorization and
>> accounting.  I'm on version 2.1.7-7.el5 of FreeRadius.
>    Where did you configure Simultaneous-Use?  How?
>
>    Alan DeKok.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
    
    
More information about the Freeradius-Users
mailing list