rlm_sqlcounter: Max-Daily-Session.

[*]

Hi,

It finally worked. Only for EAP-TTLS. EAP-PEAP still does not send
Session-Timeout in Access-Accept.

This is what I did. Comment out these lines in inner-tunnel.

update outer.reply {
          User-Name = "%{request:User-Name}"
          Session-timeout = "%{request:Session-timeout}"
        }

vi eap in /etc/freeradius/mods-enabled

use_tunneled_reply = yes for everything.

Thank you for helping me.

Jake He


On Fri, May 16, 2014 at 6:02 PM, * <zhex900 at gmail.com> wrote:

> Hi,
>
> I kind of know what the problem is now. Hopefully, I am heading in the
> right direction. This post<http://freeradius.1045715.n5.nabble.com/Sending-an-attribute-with-the-Access-Accept-instead-of-Access-Challenge-td3338454.html> gave
> me some ideas.
>
> I added the following in inner-tunnel. How do I set the value of the
> Session-Timeout attribute correctly?
>
> update outer.reply {
>           User-Name = "%{request:User-Name}"
>           Session-timeout = "%{request:Session-timeout}"
>         }
>
> But the radiusd -X shows Session-timeout  = 0
>
> (7)   update outer.reply {
> (7) expand: "%{request:User-Name}" -> 'bob'
> (7) User-Name = "bob"
> (7) expand: "%{request:Session-timeout}" -> ''
> (7)  *Session-timeout = 0*
> (7)   } # update outer.reply = noop
> (7)  } #  post-auth = ok
> } # server inner-tunnel
>
> Thanks
>
> Jake He
>
>
> On Fri, May 16, 2014 at 12:42 PM, * <zhex900 at gmail.com> wrote:
>
>> Hi,
>>
>> Does Session-Timeout attribute needs to be in Access-Accept? Currently my
>> radius send Session-Timeout in Access-Challenge.
>>
>> If so, how I do configure the radius to send Session-Timeout in
>> Access-Accept?
>>
>> Jake He
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20140516/521c9b49/attachment.html>