Simultaneous-Use unreliable for 'other' NAS-type

Taymour Gabr taymourgabr at googlemail.com
Fri Jul 5 22:53:23 CEST 2019


Hi,

Thanks Alan,

I'm confused however how checkrad can help with any simultaneous use
that isn't set to exactly '1'.
checkrad has this notice at the top
# Returns:	0 = no duplicate, 1 = duplicate, >1 = error.

So if checkrad is called when radwho would deny the user, and my
simultaneous-use is set to 3. I would want it to return 0  if that
user is logged in less than 3 times.
That in turn means, I have to hard-code checkrad to include a method
for my it for my nas to return 0, if it finds less than 3 users. The
number 3 would be hard-coded.

This doesn't seem right. Am I missing something?

Thanks again for the help

Kind Regards,
Taymour

On 05/07/2019, Alan Buxey <alan.buxey at gmail.com> wrote:
> hi,
>
> as per the clients.con
>
> # The nas_type tells 'checkrad.pl' which NAS-specific method to
> # use to query the NAS for simultaneous use.
>
> this is actually checkrad - which should end up in sbin/   - very few
> additional NAS types have been added over the years - but you can
> check
> that script to see how it deals with eg cisco and maybe copy that method?
>
> alan
>
> On Fri, 5 Jul 2019 at 19:17, Taymour Gabr via Freeradius-Users
> <freeradius-users at lists.freeradius.org> wrote:
>>
>> Dear All,
>>
>> I'm using an HP ProCurve MSM 710 as the NAS, and SQL for accounting
>> and authentication.
>> Simultaneous-Use works sometimes, but not all the time.
>>
>> From what I've read, for the NAS-type 'other', freeradius only queries
>> radutmp, and does no additional checkrad check. Obviously I would like
>> to change that. Could someone tell me please where I can make the
>> necessary changes? so I can add a checkrad routine for 'other'
>> nas-type, and change that routine according to my needs.
>>
>> I would also like to point out that radwho only works if I specify the
>> file, via "radwho -F /var/log/freeradius/sradutmp". So if checkrad
>> wraps around radwho, like radzap, this might be an issue.
>>
>> Here's my sites-available/default file, if anyone is interested in that:
>> https://termbin.com/334u
>>
>> Thanks for any and all help!
>> Kind Regards,
>> Taymour
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html


More information about the Freeradius-Users mailing list