(RADIATOR) roblem with max simultanious users

[Hugh Irvine]

Hello Nir -

If I understand you correctly you are trying to test simultaneous use 
with the radpwtst program? You need to be a bit careful doing this 
because of the way Radiator maintains the session database. When 
Radiator receives an access request it first of all deletes any 
existing session on the NAS-IP_Address/NAS-Port tuple in the request. 
This is because be definition you cannot already have an existing 
session on that NAS-IP-Address and NAS-Port combination (otherwise 
the call would not have come in on that channel). The reason Radiator 
does this is to be self-healing in the face of potential lost stop 
packets.

What all of this means is that you must specify different 
NAS-IP-Address/NAS-Port combinations when using radpwtst for testing.

Have a look at a trace 4 debug from Radiator to see what I mean.

BTW - please do not send HTML email to the list - text only please.

regards

Hugh


>
>Hi=20
>I have a problem with simultaneous users I configured maxsession 1
>But when I check with radpwtst user mikem with password fred that I add
>to my computer=20
>With adduser I can have has many sessions as I want.
>I will be happy to get help .
>This is my configuration file(radius.cfg):
>=20
>=20
>#Foreground
>#LogStdout
>#AcctPort 1648=20
>#AuthPort 1647=20
>LogDir          /var/log/radius
>DbDir           /etc/radiator
>LogFile         /var/log/radius/logfile
># Use a low trace level in production systems. Increase
># it to 4 or 5 for debugging, or use the -trace flag to radiusd
>Trace           5
>=20
># You will probably want to add other Clients to suit your site,
># one for each NAS you want to work with
><Client localhost>
>         Secret  mysecret
>         DupInterval 2
>         NasType Cisco
>         SNMPCommunity  public
></Client>
>=20
><SessionDatabase DBM>
>        Filename %D/online
></SessionDatabase>
>=20
><Log FILE>
>         Filename /var/log/radius/%Y-radius.log
>         LogFormat %1: %1: %2
>         Trace  5
></Log>
>=20
><SNMPAgent>
>         ROCommunity public
></SNMPAgent>
>=20
><Realm DEFAULT>
>         RewriteUsername s/^([^@]+).*/$1/
>         <AuthBy UNIX>
>                 Filename /etc/shadow
>         </AuthBy>
>         # Log accounting to a detail file
>         MaxSessions  1
>         AcctLogFileName %L/detail
>         PasswordLogFileName %L/passwords
></Realm>
-- 

NB: I am travelling this week, so there may be delays in our correspondence.

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.