(RADIATOR) Strange problem ...

Hugh Irvine hugh at open.com.au
Thu Jan 31 17:21:18 CST 2002


Hello Mushtaque -

I think you will need to write a little cron job that will run every minute 
to check the session database and send the appropriate signal to the NAS to 
terminate a user session when the users time limit expires.

regards

Hugh


On Fri, 1 Feb 2002 03:10, Muhammad Mushtaque wrote:
> Hi Hugh,
>
> You were right about the error. I debug the Nas and its problem  with
> the maximum limit of "timeout absolute" on each Async interface on
> Which our Dialup users are getting connected i-e (0-35790 mins)
> But we have to go beyond this limit through session timeout.
> Is there any way to write a hook which compares the value read from the
> database and always sends the max value of "session-timeout" attribute
> to the NAS until the value read from database drops below the max. In
> this case, it will send the actual value read from the database.
> or is there any other way to do acheive this task ??
>
> thanks in advance,
>
> regards,
>
> Muhammad Mushtaque
> Network Operations
> eWorld(Pvt)Ltd.
> 506, Progressive Plaza,
> Beaumont Road Civil Lines,
> Karachi.
> UAN:92-21-111246246
>
> ________
> This email and any files transmitted with it are confidential and are
> intended solely for the use of the individual or entity to which they
> are addressed. This communication represents the originator's personal
> views and opinions, which do not necessarily reflect those of eWorld
> (Pvt) Ltd. If you are not the original  / intended recipient or the
> person responsible for delivering the email to the intended recipient,
> be advised that you have received this email in error, and that any
> use, dissemination, forwarding, printing, or copying of this email is
> strictly prohibited. If you have received this email in error, we
> regret the inconvenience and request you to please immediately notify
> at info at eworld.net.pk
>
> ----- Original Message -----
> From: Hugh Irvine <hugh at open.com.au>
> Date: Thursday, January 17, 2002 5:46 am
> Subject: Re: (RADIATOR) Strange problem ...
>
> > Hello Mushtaque -
> >
> > Thanks for sending the debug output.
> >
> > I suspect the problem is with the NAS, as the debug shows that you
> > are
> > returning the following:
> >
> >        Session-Timeout = 2160000
> >
> > You should have a look at the debug on the NAS to see what is
> > happening.
> > regards
> >
> > Hugh
> >
> > On Wed, 16 Jan 2002 15:04, Muhammad Mushtaque wrote:
> > > Hi all,
> > >
> > > I m using Platypus with Radiator. I ve come across very strange
> > > problem. There is a field of Blockminleft in Platypus in which we
> > > insert prepaid time of our users ... when this time exceeds from
> >
> > 36000> minutes ... the user is not able to connect. Its very
> > strange that the
> >
> > > user is easily got connected on 35000 mins ... Normally it seems
> >
> > to be
> >
> > > a radiator issue ... I m attching the detail file part of the users
> > > which is not geeting connected with 36000 mins ... the user
> > > authenticates but getting disconnect after authentication ... the
> > > detail file part is as follows :
> > >
> > >   *** Received from 202.63.217.245 port 1645 ....
> > > Code:       Access-Request
> > > Identifier: 253
> > > Authentic:  <184><0>v<229><207><139>e<247><132><227>
> > > c<146><168><212><16>
> > > Attributes:
> > > 	NAS-IP-Address = 202.63.217.245
> > > 	NAS-Port = 109
> > > 	Cisco-NAS-Port = "Async109"
> > > 	NAS-Port-Type = Async
> > > 	User-Name = "test_discount1"
> > > 	Called-Station-Id = "7159"
> > > 	Calling-Station-Id = "215219321"
> > > 	User-Password
> > > = "<136>$<245>N@<173><170>j<189><130><239>md5C<172>"
> > > 	Service-Type = Framed-User
> > > 	Framed-Protocol = PPP
> > >
> > > Sat Jan 19 08:49:51 2002: DEBUG: Handling request with
> > > Handler 'Realm=DEFAULT'
> > > Sat Jan 19 08:49:51 2002: DEBUG:  Deleting session for
> >
> > test_discount1,> 202.63.217.245, 109
> >
> > > Sat Jan 19 08:49:51 2002: DEBUG: Handling with Radius::AuthEMERALD
> > > Sat Jan 19 08:49:51 2002: DEBUG: Handling with Radius::AuthEMERALD
> > > Sat Jan 19 08:49:51 2002: DEBUG: Query is: select DateAdd(Day,
> > > ma.extension+ma.overdue, maExpireDate),
> > > DateAdd(Day, sa.extension, saExpireDate), sa.AccountID,
> >
> > sa.AccountType,> sa.password, sa.login, sa.shell, sa.TimeLeft
> > ,sa.LoginLimit> from masteraccounts ma, subaccounts sa
> >
> > > where (sa.login = 'test_discount1' or sa.shell = 'test_discount1')
> > > and ma.customerid = sa.customerid
> > > and sa.active <> 0 and ma.active <> 0
> > >
> > > Sat Jan 19 08:49:51 2002: DEBUG: Select results: 2003-01-16
> > > 08:43:40.190, 2003-01-16 08:43:40.190, 6033, PPP, eworld,
> > > test_discount1, , 36000, 1
> > > Sat Jan 19 08:49:51 2002: DEBUG: Query is: select ra.RadAttributeID,
> > > ra.RadVendorID, ra.RadVendorType,
> > > Data, Value, Type, RadCheck
> > > from RadConfigs rc, RadAttributes ra
> > > where ra.RadAttributeID = rc.RadAttributeID
> > > and ra.RadVendorID = rc.RadVendorID
> > > and ra.RadVendorType = rc.RadVendorType
> > > and rc.AccountID=6033
> > >
> > > Sat Jan 19 08:49:51 2002: DEBUG: Query is: select ra.RadAttributeID,
> > > ra.RadVendorID, ra.RadVendorType,
> > > Data, Value, Type, RadCheck
> > > from RadATConfigs rc, RadAttributes ra
> > > where ra.RadAttributeID = rc.RadAttributeID
> > > and ra.RadVendorID = rc.RadVendorID
> > > and ra.RadVendorType = rc.RadVendorType
> > > and rc.AccountType='PPP'
> > >
> > > Sat Jan 19 08:49:51 2002: DEBUG: Query is: select
> > > username,clicheck,cli1,cli2,cli3 from customer where username
> > > = 'test_discount1'
> > >
> > > Sat Jan 19 08:49:51 2002: DEBUG: Radius::AuthEMERALD looks for match
> > > with test_discount1
> > > Sat Jan 19 08:49:51 2002: DEBUG: Expiration date converted to:
> > > 1042657200
> > > Sat Jan 19 08:49:51 2002: DEBUG: Expiration date converted to:
> > > 1042657200
> > > Sat Jan 19 08:49:51 2002: DEBUG: Radius::AuthEMERALD ACCEPT:
> > > Sat Jan 19 08:49:51 2002: DEBUG: Access accepted for test_discount1
> > > Sat Jan 19 08:49:51 2002: DEBUG: Packet dump:
> > > *** Sending to 202.63.217.245 port 1645 ....
> > > Code:       Access-Accept
> > > Identifier: 253
> > > Authentic:  <184><0>v<229><207><139>e<247><132><227>
> > > c<146><168><212><16>
> > > Attributes:
> > > 	Session-Timeout = 2160000
> > > 	Service-Type = 2
> > > 	Framed-Protocol = 1
> > > 	Service-Type = Framed-User
> > >
> > > Sat Jan 19 08:49:51 2002: DEBUG: Packet dump:
> > > *** Received from 202.63.217.245 port 1646 ....
> > > Code:       Accounting-Request
> > > Identifier: 254
> > > Authentic:
> > > <214>c<190><208><30>n<182><210><214><247><209><15><245><165>\+
> > > Attributes:
> > > 	NAS-IP-Address = 202.63.217.245
> > > 	NAS-Port = 109
> > > 	Cisco-NAS-Port = "Async109"
> > > 	NAS-Port-Type = Async
> > > 	User-Name = "test_discount1"
> > > 	Called-Station-Id = "7159"
> > > 	Calling-Station-Id = "215219321"
> > > 	Acct-Status-Type = Start
> > > 	Acct-Authentic = RADIUS
> > > 	Service-Type = Framed-User
> > > 	Acct-Session-Id = "0000004C"
> > > 	Framed-Protocol = PPP
> > > 	Acct-Delay-Time = 0
> > >
> > > Sat Jan 19 08:49:51 2002: DEBUG: Handling request with
> > > Handler 'Realm=DEFAULT'
> > > Sat Jan 19 08:49:51 2002: DEBUG:  Adding session for test_discount1,
> > > 202.63.217.245, 109
> > > Sat Jan 19 08:49:51 2002: DEBUG: Handling with Radius::AuthEMERALD
> > > Sat Jan 19 08:49:51 2002: DEBUG: Handling accounting with
> > > Radius::AuthEMERALD
> > > Sat Jan 19 08:49:51 2002: DEBUG: do query is: insert into Calls
> > > 		(UserName, CallDate, AcctStatusType, AcctDelayTime,
> > > AcctSessionId, NASIdentifier, CallerID, NASPort)
> > > 		values
> > > 		('test_discount1', 'Jan 19, 2002 08:49', 1,
> > > 0, '0000004C', '202.63.217.245', '215219321', 109)
> > >
> > > Sat Jan 19 08:49:51 2002: DEBUG: Accounting accepted
> > > Sat Jan 19 08:49:51 2002: DEBUG: Packet dump:
> > > *** Sending to 202.63.217.245 port 1646 ....
> > > Code:       Accounting-Response
> > > Identifier: 254
> > > Authentic:
> > > <214>c<190><208><30>n<182><210><214><247><209><15><245><165>\+
> > > Attributes:
> > >
> > > Sat Jan 19 08:49:51 2002: DEBUG: Packet dump:
> > > *** Received from 202.63.217.245 port 1646 ....
> > > Code:       Accounting-Request
> > > Identifier: 255
> > > Authentic:
> > > <132>&<178><250><27><198><203><190><5><200><180><207><172>w<231>V
> > > Attributes:
> > > 	NAS-IP-Address = 202.63.217.245
> > > 	NAS-Port = 109
> > > 	Cisco-NAS-Port = "Async109"
> > > 	NAS-Port-Type = Async
> > > 	User-Name = "test_discount1"
> > > 	Called-Station-Id = "7159"
> > > 	Calling-Station-Id = "215219321"
> > > 	Acct-Status-Type = Stop
> > > 	Acct-Authentic = RADIUS
> > > 	Service-Type = Framed-User
> > > 	Acct-Session-Id = "0000004C"
> > > 	Framed-Protocol = PPP
> > > 	Acct-Terminate-Cause = Host-Request
> > > 	Acct-Input-Octets = 62
> > > 	Acct-Output-Octets = 8
> > > 	Acct-Input-Packets = 3
> > > 	Acct-Output-Packets = 1
> > > 	Acct-Session-Time = 0
> > > 	Acct-Delay-Time = 0
> > >
> > > Sat Jan 19 08:49:51 2002: DEBUG: Handling request with
> > > Handler 'Realm=DEFAULT'
> > > Sat Jan 19 08:49:51 2002: DEBUG:  Deleting session for
> >
> > test_discount1,> 202.63.217.245, 109
> >
> > > Sat Jan 19 08:49:51 2002: DEBUG: Handling with Radius::AuthEMERALD
> > > Sat Jan 19 08:49:51 2002: DEBUG: Handling accounting with
> > > Radius::AuthEMERALD
> > > Sat Jan 19 08:49:51 2002: DEBUG: do query is: insert into Calls
> > > 		(UserName, CallDate, AcctStatusType, AcctDelayTime,
> > > AcctInputOctets, AcctOutputOctets, AcctSessionId, AcctSessionTime,
> > > AcctTerminateCause, NASIdentifier, CallerID, NASPort)
> > > 		values
> > > 		('test_discount1', 'Jan 19, 2002 08:49', 2, 0, 62,
> > > 8, '0000004C', 0, 18, '202.63.217.245', '215219321', 109)
> > >
> > > Sat Jan 19 08:49:51 2002: DEBUG: Accounting accepted
> > > Sat Jan 19 08:49:51 2002: DEBUG: Packet dump:
> > > *** Sending to 202.63.217.245 port 1646 ....
> > > Code:       Accounting-Response
> > > Identifier: 255
> > > Authentic:
> > > <132>&<178><250><27><198><203><190><5><200><180><207><172>w<231>V
> > > Attributes:
> > >
> > > Any one can help me out here ??
> > >
> > > thanks in Advance ...
> > >
> > > Best regards,
> > >
> > > Muhammad Mushtaque
> > > Network Operations
> > > eWorld(Pvt)Ltd.
> > > 506, Progressive Plaza,
> > > Beaumont Road Civil Lines,
> > > Karachi.
> > > UAN:92-21-111246246
> > >
> > > ________
> > > This email and any files transmitted with it are confidential
> >
> > and are
> >
> > > intended solely for the use of the individual or entity to which
> >
> > they> are addressed. This communication represents the
> > originator's personal
> >
> > > views and opinions, which do not necessarily reflect those of eWorld
> > > (Pvt) Ltd. If you are not the original  / intended recipient or the
> > > person responsible for delivering the email to the intended
> >
> > recipient,> be advised that you have received this email in error,
> > and that any
> >
> > > use, dissemination, forwarding, printing, or copying of this
> >
> > email is
> >
> > > strictly prohibited. If you have received this email in error, we
> > > regret the inconvenience and request you to please immediately
> >
> > notify> at info at eworld.net.pk
> >
> > > ===
> > > Archive at http://www.open.com.a
> > > Announcements on radiator-announce at open.com.au
> > > To unsubscribe, email 'majordomo at open.com.au' with
> > > 'unsubscribe radiator' in the body of the message.
> >
> > --
> > Radiator: the most portable, flexible and configurable RADIUS server
> > anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
> > -
> > Nets: internetwork inventory and management - graphical, extensible,
> > flexible with hardware, software, platform and database independence.

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list