RE: [RadiusNT] fixed hours plan

Emad Hazza ( (no email) )
Sat, 9 Oct 1999 13:50:08 +0200

------ =_NextPart_000_01BF125D.33D63CC0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Dale,

RadiusNt sends session time out only if time left is set for the user. =
But if time left is not set, radius will not send session time out based =
on the end-time attribute set in the server port access for the =
particular plan, even the MAX attribute will not be used unless time =
left is set.
In the service default if the start and end time attributes are set user =
will not be able to log on, the debug radlogin gives the message time =
left is 6000 (which is the time set for the MAX attribute) and stops =
their.
Logically it should work the way you mentioned below, but it doesn't =
seem to do so.=20

-----Original Message-----
From: Dale E. Reed Jr. [SMTP:daler@iea-software.com]
Sent: 27 ??CI? C?EC??E, 1420 06:47 ?
To: radiusnt@iea-software.com
Subject: Re: [RadiusNT] fixed hours plan

RadiusNt sends session time out only if time left is set for the user. =
But if time left is not set, radius will not send session time out based =
on the end-time attribute set in the server port access for the =
particular plan, even the MAX attribute will not be used unless time =
left is set.
In the service default if the start and end time attributes are set user =
will not be able to log on, the debug radlogin gives the message time =
left is 6000 (which is the time set for the MAX attribute) and stops =
their.
Logically it should work the way you mentioned below, but it doesn't =
seem to do so.=20

Emad Hazza wrote:
>=20
> Sheryl,
>=20
> What you said is ture and understood. But if I want to sell a fixed =
hours plan say from 8am to 6pm, so their is no way to force users on =
this plan who are still connected at 6pm to log out, they can go on as =
long as the wish using that session. I thought if radius can force a =
disconnect when the maxinmum session time is exceeded, it should force a =
disconnect when the allowed log on time is up which is in this case 6pm. =
Somebody suggested to telnet the NAS and clear the lines their, but this =
is not always practical.

As long as your NAS supports Session-Timeout, RadiusNT *WILL*
send the Session-Timeout value of how long they have left=20
in their current window. IE: If its 5pm when the user logs
in, RadiusNT will send a session-timeout of 3600 (one hour)
to the NAS. Again, as long as your NAS supports Session-Timeout,
then it will work. (For Example, Cisco does NOT support
Session-Timeout for a PPP session).

You can verify/check this by using Radlogin for the user,
since it will show use the Session-Timeout value that=20
RadiusNT returns.

> -----Original Message-----
> From: Sheryl D. Weidner [SMTP:sds@iea-software.com]
> Sent: 26 ??CI? C?EC??E, 1420 05:31 ?
> To: radiusnt@iea-software.com
> Subject: Re: [RadiusNT] fixed hours plan
>=20
> Emad,
>=20
> Are you saying that the user's record still appears in the online tab,
> or that the user must initiate the disconnect? If the user must
> initiate the disconnect, that is to be expected. The RADIUS protocol
> does not allow a RADIUS server to send interactive commands to the NAS
> once the user is connected - it can only send information at the start
> of the session instructing the NAS in how to handle that user. The
> "clear" button is there for you to clear any entries in the online =
table
> that for some reason weren't cleared when the user disconnected (for
> example, if the NAS lost its connection with the RADIUS server and
> didn't send the stop record to it). This prevents RadiusNT from
> rejecting a user's login because it thinks the user is already online.
>=20
> If the "clear" button does not remove the entry from the online tab,
> which version of the Emerald client are you using?
>=20
> Sheryl
>=20
> Emad Hazza wrote:
> >
> > Thankyou it is working now, I have aquestion , if a plane is defined =
to allow access during certian hours on a certain port, when the time is =
up, will the raduis clear the user who is still logged on. or do I have =
to go and clear the user manually. The problem I am facing now is that =
when I clear any user from the online tab the session doesnot cleared =
until the user himself ends his session.
> >
> > -----Original Message-----
> > From: David Routh [SMTP:drouth@davlin.net]
> > Sent: 25 ??CI? C?EC??E, 1420 02:42 ?
> > To: radiusnt@iea-software.com
> > Subject: RE: [RadiusNT] fixed hours plan
> >
> > At 02:19 PM 10/5/1999 +0200, you wrote:
> > >Server port access on the radius admin is nothing but a blank page, =
I
> > don't if this is a bug during upgrade
> > >so it cannot be used to define the time range. Can anybody suggest =
something
> > >
> >
> > Here's what I was told:
> >
> > >
> > > Nothing is in "Server Port Access"... it's a blank screen...
> >
> > if you are not using server port access, then turn it off in the
> > RadiusNT admin. A newer Emerald admin will clear up the blank
> > tab problem:
> >
> > <ftp://ftp.iea-software.com/Emerald/beta/Emeradmn.exe>
> >
> > David
> >
> > For more information about this list (including removal) go to:
> > http://www.iea-software.com/support/maillists/liststart
> >
> > =
------------------------------------------------------------------------
> >
> > Part 1.2 Type: application/ms-tnef
> > Encoding: base64
>=20
> For more information about this list (including removal) go to:
> http://www.iea-software.com/support/maillists/liststart
>=20
> =
------------------------------------------------------------------------
>=20
> Part 1.2 Type: application/ms-tnef
> Encoding: base64

--=20

Dale E. Reed Jr. Emerald and RadiusNT
__________________________________________
IEA Software, Inc. www.iea-software.com

For more information about this list (including removal) go to:
http://www.iea-software.com/support/maillists/liststart
------ =_NextPart_000_01BF125D.33D63CC0
Content-Type: application/ms-tnef
Content-Transfer-Encoding: base64
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------ =_NextPart_000_01BF125D.33D63CC0--