Freeradius3 accounting bugs

[jaspras]

Alright try this

Set Accounting to Stop/Start (FreeRadius)

Enable Reauthenticate connected users every minute

in radcheck table

–---------------------------------------
john | Simultaneous-use | := | 1

forget about noresetcounter

also works for me

[FrottyZ]

Hi, thanks for the replies.
I will test Start/Stop radius accounting again, but as I said before, this makes users timeout since Last Activity is broken.

@jaspras If you say it works for you, the only possibility I can think about is a regression in the update from freeradius2 package to 3.
Then my only option seems to be a clean reinstall.

[mke]

When I paste that exactly as below, freeradius stops working some this must be syntax

john | Simultaneous-use | := | 1

[Gertjan]

@mke:

When I paste that exactly as below, freeradius stops working some this must be syntax

john | Simultaneous-use | := | 1

Pasting where ?  ;D

I strongly advise you to use phpmyadmin.
Or you could use the mysql command line to INSERT, the web is filled up with zillion examples how to do that.

[mke]

here


[Gertjan]

This is my source : https://www.google.com/search?client=firefox-b&ei=rCDoWsrZPMamsAGTxL64Bg&q=FreeRadius++Simultaneous-Use&oq=FreeRadius++Simultaneous-Use&gs_l=psy-ab.3..0i7i30i19k1l4j0i7i10i30i19k1j0i7i30i19k1j0i19k1l3j0i30i19k1.7776.7776.0.8408.1.1.0.0.0.0.122.122.0j1.1.0….0...1.1.64.psy-ab..0.1.120....0.LJD31UiPcwU (sorry, you have to read a little bit, many people are posting about how not to do it …)

So, after some reading, you'll discover that you should add at the top of the "users file" this :

DEFAULT Simultaneous-Use := 1
 Fall-Through = Yes

This can be done using the FreeRadius package like this (edit the first user !) and then add this : see image.

Over there is also explained why and how to use the command separator, the "|".

Btw : another solution would be using a sql table, and setting for each user the "Simultaneous-Use := 1" or assign user to a group and make that group using "Simultaneous-Use := 1". This all works.

[mke]

The option you did on the screenshot also does not work

[Gertjan]

If you edited the first user on the Radius list, you should have this when you inspect the "users" file :
see image.

I limit users to 2.

edit : I also limit every user to 200 Mbytes a day.

[mke]

Yep, it does not work

Moreover what I want to accomplish is different limit per user.

Also I do have checked "Send RADIUS accounting packets to the primary RADIUS server." and start/stop freeradius


[ontzuevanhussen]

I think you are must studying how to upload picture on forum negate.

[free4]

When you enjoy digging up burried threads a bit too much

[KOM]

Those are placeholders from when the old forum transitioned to the new one. Images from old posts were lost.

[Aubin]

@jaspras
Can you help me with the settings for accounting with MySQL database?

[Pepito Payet]

@mke or should we insert this parameter john | Simultaneous-use | := | 1 please ?

[Pepito Payet]

@Gertjan can you explain to me how you make it work please?

[Gertjan]

@Pepito-Payet

For the Radius user that you want to limit to "5" max, add :

but don't take my words for it.
Fact check this, as its easy to test : get 6 phones, login with all o them. The 6 phone/login should be refused (or way more funnier : it will be allowed, and the first one will be thrown of, the portal ^^).

For myself, I actually don't use it anymore.
Keep us posted.

edit : I've read the thread again.
My proposal - today, above, is : adding some stuff in the GUI.

If you use MySQL (MariaDB) as a Radius "storage", and you know how to add / edit the SQL tables, you can also add the "Simultaneous-Use" criteria into of one the tables. For the format and how to, check with world's most notorious software manual : the one of freeradius.

Take note that by default the freeradius users are not been taken from the SQL tables, but from a flat ASCI file : this one :

and you can see your

DEFAULT Simultaneous-Use := 5 
 Fall-Through = Yes

[Pepito Payet]

This post is deleted!

[Pepito Payet]

@Gertjan I tried but it doesn't work... maybe I have a misconfiguration of the portal captive elsewhere?

[Gertjan]

@Pepito-Payet

Gime 30 minutes and I'll post a step by step "what to do".

---

I created a user, just a use name "cuisine" and a password :

and I added :

DEFAULT Simultaneous-Use := 1 | Fall-Through = Yes

and Save.

Check that FreeRadius successfully restarted. You can do this on the dashboard.

I presume you've set up the portal use the freeradius auth back-end, not the pfSense user database.

You can test drive the authentification here : Diagnostics -> Authentication
You have to select the Freeradius backend, not the "Local Database".

Now : connect one user to the portal using this user name and check he was logged in correctly (dash board and portal auth log).

A second user using the same user name should get the "portal error login page", this page is the same as the portal login page, but shows one thing more : an error message :
I made this error message stand out in red :

You are already logged in - access denied

And this was also logged :

Status > System Logs > Authentication > Captive Portal Auth

[Pepito Payet]

@Gertjan Thank you very much