Simultaneous-Use in proxy

Alan DeKok aland at deployingradius.com
Tue May 19 17:40:08 CEST 2015


On May 19, 2015, at 10:47 AM, Renato Sousa <rensousa at gmail.com> wrote:
> The user can normally log into the system. The debug log shows that
> authentication is sent to the central proxy server and after some
> Access-Request and Access-Challenge message, the system returns an
> Access-Accept. There is nothing about the user has an active session.

  Does the database contain information for the first user session?  If not, that's the problem.

  Also check the attributes in the packets.  Does it look like the user is logging in via the SAME session?  i.e. Look at the two sessions.  Are the attributes identical (other than EAP-Message).  If so, then it looks like the user is logging into the same session, twice.  Which is allowed.

> Watching the mysql accounting tables, it is possible to see the initiated
> simultaneous sessions:

  That's good.

> I made a debug log file of the second user session, but can not find any
> clue of the problem! :(

  There's no debug message saying "This is why Simultaneous-Use is going wrong".  There ARE lots of debug messages showing what it's doing, and why.  You've got to read them, understand them, understand what the server is doing, and go on from there.

  Alan DeKok.




More information about the Freeradius-Users mailing list