Can't get checkrad to be called
Dan Brisson
dbrisson at gmail.com
Fri Jun 3 12:35:11 CEST 2011
No different with only using sql in session { }.
It really seems like this line in the radutmp "modules" file is not
being executed:
check_with_nas = yes
But from radiusd -X, it does seem to be:
Module: Checking session {...} for more modules to load
Module: Linked to module rlm_radutmp
Module: Instantiating radutmp
radutmp {
filename = "/var/log/radius/radutmp"
username = "%{User-Name}"
case_sensitive = yes
check_with_nas = yes
perm = 384
callerid = yes
Stumped still....
-dan
On 6/3/11 5:49 AM, Dan Brisson wrote:
> George,
>
> Sorry, I had commented out the simul_verify_query as a troubleshooting
> step but actually do have it uncommented at this point, but it still
> won't work.
>
> I checked radiusd.conf and found this:
>
> # The program to execute to do concurrency checks.
> checkrad = ${sbindir}/checkrad
>
> Re: radutmp vs. sql, good question. I will try with only sql active.
>
> Thanks,
> -dan
>
> On 6/3/11 3:58 AM, George Chelidze wrote:
>> On 06/03/2011 03:59 AM, Dan Brisson wrote:
>>
>>> # simul_verify_query = "SELECT radacctid, acctsessionid, username, \
>>> # nasipaddress, nasportid, framedipaddress, \
>>> # callingstationid, framedprotocol \
>>> # FROM ${acct_table1} \
>>> # WHERE username = '%{SQL-User-Name}' \
>>> # AND acctstoptime IS NULL"
>>
>> as your verify_query is commented out, it will never check it with
>> nas, just compare result of count_query with configured max value (1
>> in your case), so uncomment it.
>>
>>> sites-enabled/default:
>>> # Session database, used for checking Simultaneous-Use. Either the
>>> radutmp
>>> # or rlm_sql module can handle this.
>>> # The rlm_sql module is *much* faster
>>> session {
>>> radutmp
>>>
>>> #
>>> # See "Simultaneous Use Checking Queries" in sql.conf
>>> sql
>>> }
>>
>> Do you really need both?
>>
>>> modules/perl:
>>> func_checksimul = checksimul
>>
>> I would enable checkrad statement in radiusd.conf as it seems to be
>> used with radutmp/sql modules for sumult checks.
>>
>> Best Regards,
>>
>> George Chelidze
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
More information about the Freeradius-Users
mailing list