luis84
Hi everyone,
I am having an issue with Access Server, we own multiple licenses and this is a hard issue that is happening quite a bit.
We have OpenVPNAS authenticating against Radius. If a user doesn't properly disconnect from Access Server it seems Access Server is not sending the disconnect packet to radius, so radius thinks the user is still logged in, so the user comes back and tries to login and it rejects them because they are already logged in (we don't allow simultaneous connections).
Of course, this makes our employees (users) mad, and costs us work. FreeRadius does not handle sessions so we can't disconnect it in freeradius, OpenVPN has to send the disconnect packet and it doesn't.
I tried running this on the server: /usr/local/openvpn_as/scripts/sacli --user <username> DisconnectUser
But it returns this: 0
It just says 0. So it does not tell radius the client is disconnected and radius still thinks it's connected. Restarting radius, restarting openvpn as, etc. is not helping.
Does anybody know what a fix might be?