sql ldap simultaneous-use

[mcury]

I really appreciate your help. Its working now :)

(94)   Reply-Message := "You are already logged in - access denied"
(94) eap_peap: Got tunneled reply code 3
(94) eap_peap:   Reply-Message := "You are already logged in - access denied"
(94) eap_peap: Got tunneled reply RADIUS code 3
(94) eap_peap:   Reply-Message := "You are already logged in - access denied"
(94) eap_peap: Tunneled authentication was rejected
(94) eap_peap: FAILURE
(94) eap: Sending EAP Request (code 1) ID 246 length 46
(94) eap: EAP session adding &reply:State = 0xe567fa8aec91e376
(94)     [eap] = handled

> You just do:
> 
> control:Simultaneous-Use += radiusSimultaneousUse

I was so close ehhe

Thank you so much, and happy holidays :)
Best regards, Marcelo.

------- Original Message -------
On Friday, December 23rd, 2022 at 16:27, Alan DeKok <aland at deployingradius.com> wrote:


> On Dec 23, 2022, at 1:32 PM, mcury via Freeradius-Users freeradius-users at lists.freeradius.org wrote:
> 
> > Hi, I'm new to freeradius, currently trying to enforce simultaneous-use = 1 in my wireless network but it is not working.
> > unifi access point > freeradius > samba-ad-dc
> > ...
> > I'm using LDAP for authentication through post-auth section in sites-available/default file using Unlang and its working perfectly.
> 
> 
> OK, that's good.
> 
> > (11) if (LDAP-Group == "wifi_users" && NAS-IP-Address == "172.16.200.3") -> TRUE
> > (11) if (LDAP-Group == "wifi_users" && NAS-IP-Address == "172.16.200.3") {
> > (11) update {
> > (11) control:Simultaneous-Use := 1
> 
> 
> That sets Simultaneous-Use as necessary.
> 
> > (11) reply:Class := 0x776966695f7573657273
> > (11) } # update = noop
> > (11) [noop] = noop
> > (11) } # if (LDAP-Group == "wifi_users" && NAS-IP-Address == "172.16.200.3") = noop
> > (11) ... skipping elsif: Preceding "if" was taken
> > (11) } # post-auth = ok
> > (11) Sent Access-Accept Id 77 from 192.168.255.241:1812 to 172.16.200.3:38173 length 187
> > 
> > LDAP attribute map as per below:
> > mods-available/ldap:
> > update {
> > ...
> > control:Simultaneous-Use += 'radiusSimultaneousUse = 1'
> 
> 
> What is that?
> 
> You don't set values in the ldap module configuration. You just do:
> 
> control:Simultaneous-Use += radiusSimultaneousUse
> 
> > sql is included inside session { section as per documentation.
> > 
> > Any tips, perhaps I forgot something?
> 
> 
> Read the debug output to see what's going on. It prints out everything it does, and why a user is allowed (or not) on the network.
> 
> Alan DeKok.
> 
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html