sql ldap simultaneous-use
mcury
mcury at protonmail.com
Fri Dec 23 18:32:21 UTC 2022
Hi, I'm new to freeradius, currently trying to enforce simultaneous-use = 1 in my wireless network but it is not working.
unifi access point > freeradius > samba-ad-dc
mysql> SELECT COUNT(*) FROM radacct WHERE username = 'vanessa' AND acctstoptime
IS NULL;
+----------+
| COUNT(*) |
+----------+
| 2 |
+----------+
1 row in set (0.00 sec)
I'm using LDAP for authentication through post-auth section in sites-available/default file using Unlang and its working perfectly.
(11) if (LDAP-Group == "wifi_users" && NAS-IP-Address == "172.16.200.3") -> TRUE
(11) if (LDAP-Group == "wifi_users" && NAS-IP-Address == "172.16.200.3") {
(11) update {
(11) control:Simultaneous-Use := 1
(11) reply:Class := 0x776966695f7573657273
(11) } # update = noop
(11) [noop] = noop
(11) } # if (LDAP-Group == "wifi_users" && NAS-IP-Address == "172.16.200.3") = noop
(11) ... skipping elsif: Preceding "if" was taken
(11) } # post-auth = ok
(11) Sent Access-Accept Id 77 from 192.168.255.241:1812 to 172.16.200.3:38173 length 187
LDAP attribute map as per below:
mods-available/ldap:
update {
...
control:Simultaneous-Use += 'radiusSimultaneousUse = 1'
sql is included inside session { section as per documentation.
Any tips, perhaps I forgot something?
Thanks in advance
More information about the Freeradius-Users
mailing list