sqlippool --> ip's expiring and being allocated again

[Petre Bandac]

Hallo

I appreciate the clarifications, now I know where to start; I shall 
thoroughly analyze pppoe's behavior and look for the acct pkts.

Thanks everybody for your time and shared knowledge



On 17.10.2013 15:12, Alan DeKok wrote:
> Petre Bandac wrote:
>> I believe this is because the same ip is allocated to two different
>> users (I can see this with radwho);
>
>   No.  That doesn't happen.  The IP is being *used* by two different
> users.  That is a very different statement.
>
>> freeradius sees the ip as "free" in
>> radippool table (since it exceeded lease-time, it has now all fields
>> empty and is eligible for a new allocation) and hands it over to the
>> new request
>
>   A "free" IP means it's no longer allocated to the original user.
>
>> Freeradius sits behind a pppoe server
>
>   Then fix the PPPoE server so that it drops connections at
> Session-Timeout.  The user will then be prevented from using the IP.
>
>> Rephrasing my question: I want to detect the lost ppp connections (I
>> suppose there is a timeout set somewhere) and delete the ip from
>> radippool without waiting the lease-time set in radius (something 
>> like
>> the check dhcp does with the handled ip addresses)
>
>   You don't "detect" the lost PPP connection.  The PPPoE server sends 
> an
> accounting packet, with Acct-Status-Type = Stop.  When FreeRADIUS 
> sees
> that, it marks the session as closed, and frees the IP>
>
>> an excerpt of the freeradius -X is @ http://pastebin.ca/2467690
>>
>> as my radius knowledge is very chaotic/hands-on approach, I 
>> appreciate
>> any hint.
>
>   Blame the NAS for everything.  Really.
>
>   And read "man radiusd".  A chaotic approach is the worst possible
> method to solving a problem.
>
>   Alan DeKok.
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html

-- 

Petre Bandac

Network Scientist

-

petre at kgb.ro