Hello Joshua -
On Tue, 04 Jul 2000, Joshua M. Thompson wrote:
>
> On Mon, 3 Jul 2000, Hugh Irvine wrote:
>
> > Radiator should only try to directly query the NAS if you are enforcing strict
> > simultaneous use with a NasType set for your Client clauses. If you don't have
> > a NasType set, it won't be queried.
>
> The funny part here is it's querying NASes that _aren't_ in my client
> list. It's querying a NAS to which one of my users is logged in but that
> NAS talks is talking to a RADIUS server one or more "proxy hops" away.
>
Do you have Simultaneous-Use check items set for your users?
> > And when you mention stuck sessions, are these really stuck on the NAS, or are
> > they simply remnants in the session database?
>
> They're not stuck on the NASes, just in my session database. It primarily
> seems to be happening to users who come in to the numbers where the
> authentication goes through another RADIUS server that's proxying from
> me. I see very few happening on my numbers,
>
The usual cause for this is lost Stop records which mean that the session
database does not get cleaned up properly.
> > It would be useful to see a copy of your configuration file (no secrets)
> > together with an example trace 4 debug showing what is happening.
>
> I'l have to catch the trace sometime today, but I've started by attaching
> my radius.cfg. Beware, it's big and hairy, mostly owing to having to sort
> out classes of service based only on packet contents (such as
> distinguishing Merit calls from everything else by looking for a
> Huntgroup-Name attribute). The MARVIN stuff is a custom auth module that
> talks to our proprietary MySQL billing and provisioning system. It
> shouldn't be causing any problems since it's only doing authentications
> and not logging or session management.
>
Thanks for sending the configuration file - it's extremely well done.
regards
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
