simultaneous use
Bill Schoolfield
bill at billmax.com
Mon Jan 2 22:50:05 CET 2017
I assume the condition for simultaneous use is already met so no
additional accounting record is needed to conduct the test. Perhaps I'm
mistaken...
I have looked at debug but it's difficult as lots of other (production)
things are going on...
Bill
On 1/2/2017 3:46 PM, Alan DeKok wrote:
>> On Jan 2, 2017, at 4:44 PM, Bill Schoolfield <bill at billmax.com> wrote:
>>
>> Hmm. No NAS, using radtest or radclient to simulate what needs to happen.
> You need to send accounting "start" packets, too. We should really have automated tests for this...
>
>> I created a single radacct record for a test user with a null stop time and I expect the auth to fail unless the group Simultaneous-Use is overwitten by a user specific radcheck attribute of the same name.
>>
>> This works:
>>
>> mysql> select * from radgroupcheck;
>> +----+--------------------+------------------+----+-------+
>> | id | groupname | attribute | op | value |
>> +----+--------------------+------------------+----+-------+
>> | 1 | Package2MB | Simultaneous-Use | = | 1 |
>>
>> mysql> select * from radcheck where username like 'test at livenet.bm';
>> +-----+-----------------+--------------------+----+---------+
>> | id | username | attribute | op | value |
>> +-----+-----------------+--------------------+----+---------+
>> | 1 | test at livenet.bm | Cleartext-Password | := | test123 |
>> | 584 | test at livenet.bm | Simultaneous-Use | := | 3 |
>>
>> mysql> select * from radusergroup where username like 'test at livenet.bm';
>> +-----------------+------------+----------+
>> | username | groupname | priority |
>> +-----------------+------------+----------+
>> | test at livenet.bm | Package2MB | 1 |
>> +-----------------+------------+----------+
>>
>> But if the radcheck table doesn't have the Simultaneous-Use entry, the auth is allowed.
> As always, read the debug output to see what's going on.
>
> Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
More information about the Freeradius-Users
mailing list