Simultaneous logins

[Franz]

What I meant on the second part is that i am using localhost on
clients.conf, so now when i am just checking session with sql
simul_count_query, and as soon as the request is received by server it says
the user is already logged in, even is is not logged in:

checkrad: No NAS type, or type "other" not checking
rlm_sql (sql): Released sql socket id: 1
++[sql] returns ok
        expand: good -> good
Multiple logins (max 1) [MPP attempt]: [C8P7G6/C8P7G6] (from client
localhost port 7 cli 192.168.0.7) good
Using Post-Auth-Type Reject
# Executing group from file /usr/local/etc/raddb/sites-enabled/default
+- entering group REJECT {...}


On Mon, May 9, 2011 at 1:23 AM, Fajar A. Nugraha <list at fajar.net> wrote:

> On Mon, May 9, 2011 at 5:38 AM, Franz <flamana at gmail.com> wrote:
> > Hi,
> > I am trying to prevent simultaneous logins on my freeradius server, I
> need
> > to do it with MYSQL, I have enabled simul_count query, and enabled sql
> for
> > session and accounting.
>
> Seems reasonable
>
> > Now, the tricky part is that my server is also my
> > firewall and all requests are comming to the same nick which is listed on
> my
> > clients.conf file, the nas type is other and therefore the check is
> ignored.
> > When I setup as type cisco it get no response from SNMP session, and the
> > wiki suggest that SNMP is not working with version 2.1.10 unless some
> > modification is done.
>
> I have no idea what you're talking about.
>
> You can have sql to manage accounting and session (using the
> acccounting data), which should be independent of NAS type, without
> the need for SNMP or any external command/utility. Look at
> simul_count_query and simul_verify_query. Sometimes it's easier to:
> - uncomment simul_count_query
> - adjust it according your needs (for example, we use acctstoptime to
> store when an accounting packet arrives, including acct-start and
> acct-interim, so in our case we can't use "AND acctstoptime IS NULL"
> part).
> - comment-out simul_verify_query
>
> --
> Fajar
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20110509/eaecddd1/attachment.html>