rlm_sqlcounter: Max-Daily-Session.

[Russell Mike]

On Tue, May 13, 2014 at 12:30 PM, * <zhex900 at gmail.com> wrote:

> Hi,
>
> Thank you for your patience. I am very happy someone can help me. Now I
> made some progress.
>
> I find out what the problem is now. In the query you provided I need to
> put quotes around radacct. Like this:
>  query = "SELECT IFNULL(TIME_TO_SEC(TIMEDIFF(NOW(),
> MIN(AcctStartTime))),0) FROM *`radacct` *WHERE UserName='%{%k}' ORDER BY
> AcctStartTime LIMIT 1;"
>
> Okay, good, there was error in username veritable as well in your previous
query ('%{%k}' ). Anyways. happy it worked !!


> Now, have one more problem.
>
> My NAS (Mikrotik) is not receiving the Session-Timout. I cannot see it in
> the NAS log. I only can see Acct-Session-Time. Therefore it is not
> terminating the session. For testing I have set the time limit to 60
> seconds.
>
> Freeradius is sending it:
>
> (2) dailycounter : Sent Reply-Item for user hello, Type=Session-Timeout,
> value=60
> (2)   [dailycounter] = ok
>
> Sending Access-Challenge of id 232 from 10.1.1.2 port 135 to 27.33.228.125
> port 47097
> Session-Timeout = 60
>  EAP-Message = 0x010200061920
> Message-Authenticator = 0x00000000000000000000000000000000
> State = 0x543a9074553889da6f504855ab4e7a4b
> (2) Finished request 2.
>
> I did not put anything in the radreply for the user. When I did put
> Session-Timeout=60 in radreply, I still cannot see it in the NAS log.
>
> Is it my a problem with NAS configuration?
>
> What should I do now?
>

The way FreeRADIUS works is that, it does not disconnect users him self.
But rather tells the NAS to disconnect user. if i say that, how FreeRADIUS
would tell NAS to disconnect user ? using REPLY ITEM. So put
"Session-Timeout" in Reply as well. You said even if you add
"Session-Timeout" in reply make no difference, no problem leave
"Session-Timeout" in reply-item, it must to be there. And you have more
than one problem. 60 seconds are too less, minimum test should be done with
600 seconds for better results.

FreeRADIUS is now fine. Configure your NAS properly

NOTE: Check item is for FreeRADIUS. reply item is for NAS.

Thanks / Regards

--RM



> Jake He
>
>
> On Tue, May 13, 2014 at 5:12 PM, Arran Cudbard-Bell <
> a.cudbardb at freeradius.org> wrote:
>
>>
>> On 13 May 2014, at 08:46, * <zhex900 at gmail.com> wrote:
>>
>> > You mean I need to upgrade to 3.0.3?
>>
>> yes.
>>
>> Arran Cudbard-Bell <a.cudbardb at freeradius.org>
>> FreeRADIUS Development Team
>>
>> FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
>>
>>
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>>
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20140513/3fd8a3f1/attachment.html>