Re: Limiting a user to one concurrent session at a time

cor@xs4all.net
Mon, 2 Dec 1996 02:11:13 +0100 (MET)

evanc@synapse.net (Evan Champion) writes:

>On Sun, 1 Dec 1996, Dale E. Reed Jr. wrote:

>> Why deal with Merit, pay big bucks, when he originall IS ALREADY USING
>> RadiusNT for free? He just asked for an option explanation, not
>> a lifestyle change. :)

>Unfortunately the current radiusd's are not stateful, which is what you
>need to be able to limit the number of concurrent sessions. I have heard
>of sites which have hacked the support in, which is why I suggested
>Merit. I know they are expensive as I looked in to them myself, but they
>will do custom work for you.

We have been thinking about adding state info too. (we're running our
own version of radiusd, so getting merit is not an option)
But can you get state info 100% correct? What happens when packets get lost?
What happens when a portmaster reboots? What happens when a session is stuck?

We'd add stateinfo only so we can limit the amount of times a user logs in.
But if that means users cant log in sometimes because the state isnt correct,
its not worth it.

Cor