(RADIATOR) SimultaneousUse

Thu Aug 30 10:31:24 CDT 2001

Hi Hugh,

I´m using XtRadius and we have a Cisco AS5300.

My radius.cfg file is:
=========================================================
# radius.cfg

LogStdout
Trace 4
AuthPort 1812
AcctPort 1813
LogFile  /var/log/radius/radius.log
DictionaryFile /usr/local/radiator/dictionary
DictionaryFile /usr/local/radiator/dictionary.cisco

<Client ***>
 Secret ***
</Client>

<Client ***>
 Secret ***
</Client>

<Client DEFAULT>
 Secret ***
 DupInterval 0
 StatusServerShowClientDetails
</Client>

<Realm DEFAULT>
 RewriteUsername s/^([^@]+).*/$1/
 RewriteUsername tr/[A-Z]/[a-z]/
 MaxSessions 1
 AcctLogFileName /var/log/radius/detail
 PasswordLogFileName /var/log/radius/password-radius.log
 RejectHasReason
 <AuthBy FILE>
  Filename /etc/radiator/users
  UseAddressHint
  AddToReply Reply-Message=hello
  AddToReplyIfNotExist Ascend-Data-Filter="ip in forward tcp est"
  DefaultReply Service-Type=Framed-User,Framed-Protocol=PPP
  DefaultSimultaneousUse 1
 </AuthBy>
</Realm>

<Realm unix.realm>
 RewriteUsername s/^([^@]+).*/$1/
 RewriteUsername tr/A-Z/a-z
 RewriteUsername s/\s+//g
 <AuthBy UNIX>
  Filename /etc/passwd
  GroupFilename /etc/group
  DefaultReply Service-Type=Framed-User,Framed-Protocol=PPP
 </AuthBy>
</Realm>

<Realm system.realm>
 RewriteUsername s/^([^@]+).*/$1/

 <AuthBy SYSTEM>
  Identifier System1
 </AuthBy>
</Realm>
=========================================================

Thanks,

Camilo C.

Hugh Irvine wrote:

> Hello Camilo, Hello 'Tunde -
>
> In general, problems with simultaneous use are usually due to dropped
> accounting packets (sometimes congested links, sometimes NAS bugs, sometimes
> configuration problems with Radiator).
>
> I am happy to assist with any problems, but I need to see what is going on.
>
> Please send me a copy of the configuration file (no secrets) together with a
> trace 4 debug from Radiator showing the problem.
>
> It would also be helpful if you could provide some description of what you
> are trying to accomplish.
>
> thanks
>
> Hugh
>
> On Thursday 30 August 2001 01:04, Camilo Fernando Corena G. wrote:
> > I have the same problem.
> >
> > Someone can help us???
> >
> > 'Tunde Ogedengbe wrote:
> > > Hello:
> > >
> > > We are having problems with this attribute.  In some of our
> > > installations, the attribute does not work at all and so no restriction
> > > is enforced.  On another installation,  it works but with severe
> > > problems.  For instance customers with an attribute of 1 who previously
> > > connected to our system and later disconnected are having problems
> > > reconnecting.  This has resulted in a serious problem in which a
> > > significant percentage of connection problems were related to the
> > > SimultaneousUse attribute.  What we have done in the interim is to set
> > > the attribute to 3.  How can we resolve this problem?
> > >
> > > 'Tunde Ogedengbe
> > > Linkserve Limited
> > > 22 Akin Adesola Street
> > > Victoria Island
> > > Lagos - Nigeria
> > > Tel: +234 1 2623900
> > > Fax: +234 1 2623906
> > > URL: http://www.linkserve.net
> > > ----- Original Message -----
> > > From: "Hugh Irvine" <hugh at open.com.au>
> > > To: "lloyd" <dagocl at team.ph.inter.net>; <radiator at open.com.au>
> > > Cc: <hugh at open.com.au>
> > > Sent: Wednesday, August 29, 2001 8:48 AM
> > > Subject: (RADIATOR) Re: two authby clauses
> > >
> > > > Hello Lloyd -
> > > >
> > > > What exactly are you trying to do?
> > > >
> > > > thanks
> > > >
> > > > Hugh
> > > >
> > > > On Wednesday 29 August 2001 14:28, lloyd wrote:
> > > > > hi,
> > > > > how do i configure radiator in such a way that before it proxy's to
> > > > > another radius server, it checks for the Called-Station-Id in say a
> > > > > flat file or a database?
> > > > >
> > > > >
> > > > > will this work (file based with only one field:
> > > > > telephonenumbers).....
> > > > >
> > > > > <AuthBy FILE>
> > > > > Identifier calledstationid
> > > > > FileName %d/Called-Station-ID
> > > > > </AuthBy>
> > > > >
> > > > > <AuthBy RADIUS>
> > > > > Identifier radiusproxy>
> > > > > Host ***.***.***.***
> > > > > Secret ******
> > > > > AuthPort ****
> > > > > AcctPort ****
> > > > > </AuthBy>
> > > > >
> > > > > <Realm>
> > > > > AuthByPolicy ContinueAlways
> > > > > AuthBy calledstationid
> > > > > AuthBy radiusproxy
> > > > > </Realm>
> > > > >
> > > > >
> > > > > Lloyd Dagoc
> > > > > InterDotNet Philippines Inc.
> > > >
> > > > --
> > > > Radiator: the most portable, flexible and configurable RADIUS server
> > > > anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
> > > > -
> > > > Nets: internetwork inventory and management - graphical, extensible,
> > > > flexible with hardware, software, platform and database independence.
> > > > ===
> > > > Archive at http://www.open.com.au/archives/radiator/
> > > > Announcements on radiator-announce at open.com.au
> > > > To unsubscribe, email 'majordomo at open.com.au' with
> > > > 'unsubscribe radiator' in the body of the message.
> > >
> > > ===
> > > Archive at http://www.open.com.au/archives/radiator/
> > > Announcements on radiator-announce at open.com.au
> > > To unsubscribe, email 'majordomo at open.com.au' with
> > > 'unsubscribe radiator' in the body of the message.
>
> --
> Radiator: the most portable, flexible and configurable RADIUS server
> anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
> -
> Nets: internetwork inventory and management - graphical, extensible,
> flexible with hardware, software, platform and database independence.
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.

--
=======================
Camilo Fernando Corena G.
Gerente Técnico
ExpressNet S.A.
ccorena at express.net.co
Telf: (571) 5404090
Santafé de Bogotá D.C. - Colombia

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.open.com.au/pipermail/radiator/attachments/20010830/5ef654b4/attachment.html>