help - simultaneous accounting

[Alan DeKok]

劉君羿 wrote:
> I want to allow simultaneous use of accounts.
> However, *RFC 2866 *says that the* Acct-Session-Time* 
> 
>     can only be present in Accounting-Request records where the
>     Acct-Status-Type is set to Stop [Page 17]
> 
>  
> Does this mean that RADIUS protocol can not manage simultaneous use of
> an account?

  It means that RADIUS does accounting for each session individually.

> For example, an account with *Session-Timeout *2 hours is shared by two
> users.
> User1 login first and use the account for 1 hour,
> user2 then login (user1 still accessing the account),
> then user2 turns out two have *2 hours*, which is wrong and is because
> that user1 not yet send Acct-Session-Time to the server.

  This is really a problem for the NAS.  If the NAS doesn't send interim
updates, then you can't do what you want.

> If RADIUS is not suit for the scenario above, should I try other
> protocols such as DIAMETER and TACACS+?

  The other protocols will be just like RADIUS.

  Alan DeKok.