(RADIATOR) IPs allocated forever
Jon Omagojeaskoa
omago at sarenet.es
Thu Jul 5 05:11:19 CDT 2001
Thanks Hugh
My config-file was like:
<ClientListSQL>
DBSource ...
DBUsername ...
DBAuth ...
GetClientQuery select NASIDENTIFIER,SECRET,NULL,NULL, \
DEFAULTREALM,NASTYPE,SNMPCOMMUNITY \
from RADCLIENTLIST
</ClientListSQL>
I've added the DUPINTERVAL field to my RADCLIENTLIST table with value
"4" for the problematic NAS and:
GetClientQuery select
NASIDENTIFIER,SECRET,NULL,DUPINTERVAL, \
DEFAULTREALM,NASTYPE,SNMPCOMMUNITY \
from RADCLIENTLIST
Problem solved !!
There are still "lost" IPs due to lost Stop-Packets, but I can clean them
once a day with a crontab-script that sets STATE=0 to those IPs on RADPOOL
that are not in RADONLINE.FRAMEDIPADDRESS. Is there a way to do the same
"cleaning" within radiusd using
ReclaimQuery
DefaultLeasePeriod
LeaseReclaimInterval
I work with MySQL database an nested SELECT querys are not allowed :-(
Jon.
At 10.45 5/7/01, Hugh Irvine wrote:
>Hello Jon -
>
>The first thing to do is discover why you are getting multiple access
>requests from the NAS. The solution is usually to set the DupInterval in
>the Client clause(s) in the Radiator configuration file to something that
>makes sense in your environment. Something like this:
>
># define Client clauses
># set DupInterval to 5 seconds (or whatever)
>
><Client ....>
> Secret ....
> DupInterval 5
> ....
></Client>
>
>.....
>
>
>regards
>
>Hugh
>
>
>At 17:09 +0200 01/7/4, Jon Omagojeaskoa wrote:
>>Hello,
>>
>>We use <Authby DYNADDRES> with <AddressAllocator SQL> and we've seen that
>>IPs are allocated (AllocateQuery) as soon as Authentication packets arrive.
>>
>>
>>Wed Jul 4 16:00:11 2001: DEBUG: Packet dump:
>>*** Received from 212.81.251.101 port 1645 ....
>>Code: Access-Request
>>Identifier: 35
>>Authentic: XXX
>>Attributes:
>>(...)
>>Wed Jul 4 16:00:11 2001: DEBUG: Handling with Radius::AuthDYNADDRESS
>>Wed Jul 4 16:00:11 2001: DEBUG: Query is: select TIME_STAMP, YIADDR from
>>RADPOOL where POOL='pool_profesional'
>>and STATE=0 order by TIME_STAMP LIMIT 1
>>Wed Jul 4 16:00:11 2001: DEBUG: do query is: update RADPOOL set
>>STATE=1,TIME_STAMP=994255211, EXPIRY=994341611, USERNAME='xxxxx' where
>>YIADDR='212.81.164.10' and TIME_STAMP =994251930
>>(...)
>>
>>
>>What happends when 2 Access-Request (duplicated) are received for the
>>same user conection ?
>>2 IPs are allocated and only the second one (the one followed by
>>Accounting packets) is deallocated (when Accounting-STOP arrives).
>>
>>Is there any way to solve this ? We can't use "DefaultLeasePeriod",
>>"LeaseReclaimInterval" ... directives because we've users connected for
>>very long time periods (10-12 days!).
>>
>>
>>Thanks in advance.
>>
>>
>>-------------------------------------------------------------------
>>Jon Mikel Omagojeaskoa Insunza
>>SARENET
>><omago at sarenet.es>
>>+34 94 4209470
>>-------------------------------------------------------------------
>>
>>===
>>Archive at http://www.open.com.au/archives/radiator/
>>Announcements on radiator-announce at open.com.au
>>To unsubscribe, email 'majordomo at open.com.au' with
>>'unsubscribe radiator' in the body of the message.
>
>--
>
>NB: I am travelling this week, so there may be delays in our correspondence.
>
>Radiator: the most portable, flexible and configurable RADIUS server
>anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
>Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
>Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
>===
>Archive at http://www.open.com.au/archives/radiator/
>Announcements on radiator-announce at open.com.au
>To unsubscribe, email 'majordomo at open.com.au' with
>'unsubscribe radiator' in the body of the message.
-------------------------------------------------------------------
Jon Mikel Omagojeaskoa Insunza
SARENET
<omago at sarenet.es>
+34 94 4209470
-------------------------------------------------------------------
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
More information about the radiator
mailing list