(RADIATOR) Simultaneous-Use issue
Hugh Irvine
hugh at open.com.au
Mon Apr 3 20:31:00 CDT 2006
Hello Jamie -
What you describe is the normal Radiator processing. Radiator tries
to be self-healing in case of lost accounting stop records by doing a
delete when an access request is received. This presumes of course
that your access requests contain sensible data.
If you can send me a copy of your configuration file and a trace 4
debug showing what is happening, I will take a look.
regards
Hugh
On 4 Apr 2006, at 08:38, Jamie Orzechowski wrote:
> I corrected the attribute to be a Check Item and the error has
> disappeared ... multiple logins are still being allowed though ...
>
> Looking at the log file I see it removes the user from the
> SessionDB on an Access-Request and then it Adds the user the the
> SessionDB on an Accounting-Request .. .
>
> Still allows multiple logins to occur ...
>
> Mon Apr 3 18:34:31 2006: DEBUG: Handling request with Handler
> 'Request-Type = Access-Request, Realm=xxx.com'
> Mon Apr 3 18:34:31 2006: DEBUG: Rewrote user name to xxx
> Mon Apr 3 18:34:31 2006: DEBUG: SessionDB Deleting session for xxx,
>
> ---------
>
> Mon Apr 3 18:34:31 2006: DEBUG: Handling request with Handler
> 'Request-Type = Accounting-Request, Realm=xxx.com'
> Mon Apr 3 18:34:31 2006: DEBUG: Rewrote user name to xxx
> Mon Apr 3 18:34:31 2006: DEBUG: SessionDB Adding session for xxx,
> xx.xx.xx.xx,
>
>
>
> Hugh Irvine wrote:
>>
>> Hello again -
>>
>> BTW - if you want to set a simultaneous use for all users, you can
>> use either "MaxSessions = 1" in the Realm or Handler, or you can
>> use "DefaultSimultaneousUse 1" in the AuthBy clause.
>>
>> See the corresponding sections of the Radiator 3.14 reference
>> manual ("doc/ref.html").
>>
>> regards
>>
>> Hugh
>>
>>
>> On 4 Apr 2006, at 02:00, Jamie Orzechowski wrote:
>>
>>> Hello,
>>>
>>> I am trying to enable Simultaneous-Use but running into errors ...
>>>
>>> I have added a Sessiondatabase in my config
>>>
>>> <SessionDatabase DBM>
>>> Identifier SessionDB
>>> DBType DB_File
>>> Filename %D/session.db
>>> </SessionDatabase>
>>>
>>> I have also set the Simultaneous-Use = 1 for each subscribe via
>>> RODOPI.
>>>
>>> When I look at the log file I see the following entry each time a
>>> user authentictates ... any ideas??
>>> *WARNING: Invalid reply item Simultaneous-Use ignored*
>>>
>>> Mon Apr 3 11:51:41 2006: DEBUG: AuthBy RODOPI result: ACCEPT,
>>> Mon Apr 3 11:51:41 2006: DEBUG: Access accepted for xxx at xxx.com
>>> Mon Apr 3 11:51:41 2006: WARNING: Invalid reply item
>>> Simultaneous-Use ignored
>>> Mon Apr 3 11:51:41 2006: DEBUG: Packet dump:
>>> *** Sending to 64.235.198.30 port 49156 ....
>>> Code: Access-Accept
>>> Identifier: 75
>>> Authentic: <0><0>Es<0><0>8<140><0><0>-<183><0><0><20>=
>>> Attributes:
>>> Shasta-Service-Profile = "dsl-res"
>>> Simultaneous-Use = 1
>>>
>>> =-=-=-=-=-=-=-=-=-=-=-=-=
>>> Jamie Orzechowski - CCNA
>>> RipNET Ltd. System/Network Administrator
>>> Tel.: 613-342-3946 x294
>>> Mobile.: 613-802-9229
>>>
>>> THIS MESSAGE IS INTENDED ONLY FOR THE ADDRESSEE, IT MAY CONTAIN
>>> PRIVILEGED OR CONFIDENTIAL INFORMATION. ANY UNAUTHORIZED
>>> DISCLOSURE IS STRICTLY PROHIBITED. IF YOU HAVE RECEIVED THIS
>>> MESSAGE IN ERROR, PLEASE NOTIFY ME IMMEDIATELY SO THAT I MAY
>>> CORRECT MY INTERNAL RECORDS. PLEASE THEN DELETE THE ORIGINAL
>>> MESSAGE.
>>> =-=-=-=-=-=-=-=-=-=-=-=-=
>>>
>>> --
>>> Archive at http://www.open.com.au/archives/radiator/
>>> Announcements on radiator-announce at open.com.au
>>> To unsubscribe, email 'majordomo at open.com.au' with
>>> 'unsubscribe radiator' in the body of the message.
>>
>>
>> NB:
>>
>> Have you read the reference manual ("doc/ref.html")?
>> Have you searched the mailing list archive (www.open.com.au/
>> archives/radiator)?
>> Have you had a quick look on Google (www.google.com)?
>> Have you included a copy of your configuration file (no secrets),
>> together with a trace 4 debug showing what is happening?
>>
>> --Radiator: the most portable, flexible and configurable RADIUS
>> server
>> anywhere. Available on *NIX, *BSD, Windows, MacOS X.
>> -
>> Nets: internetwork inventory and management - graphical, extensible,
>> flexible with hardware, software, platform and database independence.
>> -
>> CATool: Private Certificate Authority for Unix and Unix-like systems.
>>
>>
NB:
Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.
--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
More information about the radiator
mailing list