(RADIATOR) Radiator not emptying RADPOOL

Hugh Irvine hugh at open.com.au
Thu Jul 25 18:32:19 CDT 2002


Hello Tunde -

Please send me a trace 4 debug showing what is happening.

regards

Hugh


On Fri, 26 Jul 2002 05:07, Ayotunde Itayemi wrote:
> Hi All, Hi Hugh,
>
> Radiator is not deleting entries in the RADPOOL table when users log off,
> hence it runs out of IP addresses after about 30 successful logons based on
> a particular pool of 30 IP addresses. I have tried both from a Patton RAS
> and also a windows 2K server
> I have also tried it with  commenting out the DefaultLeasePeriod  and
> LeaseReclaimInterval config options - no difference.
>
> My config is as below (I have deleted a few sections):
>
> Another question - I am authenticating my web server against radiator on
> the same box (separate database table though) - anything I should know? Any
> problems?
>
> ================================================================
> # Auth & Acct ports
> AuthPort		1645
> AcctPort		1646
> # --- RADAR -------------------------
> <Monitor>
> 	Username radpasswd
> 	Password radpasswd
> </Monitor>
> # Online users
> <SessionDatabase SQL>
> 	Identifier SDB1
> 	DBSource	dbi:Oracle:myOraDB
> 	DBUsername 	orauser
> 	DBAuth 		orauser
> </SessionDatabase>
> # =======================================================
> <AddressAllocator SQL>
>         Identifier mySQLallocator
> 	DBSource	dbi:Oracle:myOraDB
> 	DBUsername 	orauser
> 	DBAuth 		orauser
>         DefaultLeasePeriod     86400
> #       LeaseReclaimInterval 86400
>         <AddressPool pool1>
>                 Subnetmask      255.255.255.0
>                 Range   a.b.c.d a.b.c.z
>         </AddressPool>
>         <AddressPool pool2>
>                 Subnetmask      255.255.255.0
>                 Range   192.168.10.21 192.168.10.50
>         </AddressPool>
>         <AddressPool pool3>
>                 Subnetmask      255.255.255.0
>                 Range   a.b.e.a a.b.e.u
>         </AddressPool>
> </AddressAllocator>
> # =================== CLIENTs   =================================
> <Client a.b.c.a>
>         Secret asecret
>         DupInterval 0
>         Identifier myras
> 	IdenticalClients a.b.c.c a.b.a.b a.b.k.c b.b.c.d c.d.a.c
> </Client>
> <Client a.d.d.a>
>         Secret another
>         DupInterval 0
>         Identifier myras
> </Client>
> <Client 127.0.0.1>
> # web server on this box
> 	Secret myapache
> 	DupInterval 0
> 	Identifier anapache
> </Client>
> # =================== AUTH BYs =================================
> <AuthBy SQL>
>         Identifier SQLStaffauth
>         NoDefault
> 	DBSource	dbi:Oracle:myOraDB
> 	DBUsername 	orauser
> 	DBAuth 		orauser
>         AuthSelect select PASSWORD, CHECKATTR from STAFF \
>                 where USERNAME = '%n' and STATUS = 'Enabled'
>         AuthColumnDef   0,      User-Password,  check
>         AuthColumnDef   1,      GENERIC,        check
>         AuthColumnDef   2,      GENERIC,        reply
> </Auth>
> <AuthBy SQL>
> 	Identifier SQLClientauth
> 	NoDefault
> 	DBSource	dbi:Oracle:myOraDB
> 	DBUsername 	orauser
> 	DBAuth 		orauser
> 	AuthSelect select PASSWORD, CHECKATTR, REPLYATTR \
> 		from SUBSCRIBERS where USERNAME = '%n'
> 	AuthColumnDef	0,	User-Password,	check
> 	AuthColumnDef	1,	GENERIC,	check
> 	AuthColumnDef	2,	GENERIC,	reply
> </Auth>
> <AuthBy DYNADDRESS>
> 	Identifier myIPADDRESSauth
> 	Allocator mySQLallocator
> 	PoolHint %{Reply:PoolHint}
> 	MapAttribute   yiaddr, Framed-IP-Address
> 	MapAttribute   subnetmask, Framed-IP-Netmask
> 	StripFromReply PoolHint
> 	DefaultSimultaneousUse 1
> </AuthBy>
> #=================== HANDLERs   ================================
> <Handler Client-Identifier=viruse2>
> 	AuthByPolicy ContinueWhileAccept
> 	RewriteUsername s/^([^@]+).*/$1/
> 	UsernameCharset a-zA-Z0-9\._ at -
> 	MaxSessions 1
> 	AcctLogFileName		%L/account.log
> 	PasswordLogFileName	%L/password.log
> 	SessionDatabase SDB1
> 	AuthBy SQLClientauth
> 	AuthBy myIPADDRESSauth
> </Handler>
> <Handler Client-Identifier=apache>
>         AuthByPolicy ContinueWhileAccept
>         RewriteUsername s/^([^@]+).*/$1/
>         UsernameCharset a-zA-Z0-9\._ at -
>         MaxSessions 1
>         AuthBy SQLStaffauth
> </Handler>
> <Handler>
> 	# default handler
> 	<AuthBy RADIUS>
> 	# Default values for all hosts. You can change them for a
> 	# single host in a Host clause
> 	Secret mysecret
> 	RetryTimeout 1
> 	Retries 3
> 	# Hosts to send to are listed below
> 	<Host 203.63.154.2>
> 	</Host>
> 	<Host 203.63.154.3>
> 		BogoMips 2
> 	</Host>
> 	# This host has non-standard ports
> 	<Host 203.63.154.4>
> 		AuthPort 1647
> 		AcctPort 1648
> 	</Host>
> </AuthBy>
> </Handler>

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list