Stale sessions and simultaneous use issue

[Clayton Alves]

The role of "deletestalesessions" parameter is to delete the record if
checkrad script returns 0. Nevertheless, for it to work, you need to enable
SNMP in your NAS, because checkrad script tries to connect through SNMP.

Checkrad script is responsible for avoiding stale sessions.

It works like this:

- user tries to log in.
- if there is a stale session in the database, run checkrad script
- checkrad script connects to the NAS (through snmp) and list active users.
- if checkrad sees the user, it returns 1. This tells freeradius to reject
the authentication. In the log files, u will see "multiple logins"
- if checkrad does'nt see the user, it returns 0. This tells freeradius do
accept the login

If for some reason, NAS does'nt send Acct-stop packet, you need to close
the session in the database yourself. I wrote a script to do that. In fact,
I based my script on coovachilli's script.


Clayton A. Alves <http://claytonaalves.github.com>
 *claytonaalves*
 +55 66 9233-3406




2014-04-15 7:09 GMT-04:00 Fernando Pizarro <feanpg at gmail.com>:

> Hi all!
>
> I had configured MySQL to store sessions of the users and I have a lots of
> records with wrong acctsessiontime value because NAS are sent Accounting
> On/Off packets and the database is update with the actual timestamp.
>
> I change deletestalesessions = no in sql.conf but the database is update
> too. What is the function of this parameter?
>
> There are some attribute to avoid stale sessions? I remember Idle-Timeout
> attribute but if the NAS isn't live the server never kill that session
> right?
>
> Thanks for all.
> Kings regards. Fernando.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20140415/eb181ace/attachment-0001.html>