(RADIATOR) Authentication Question..

Hugh Irvine hugh at open.com.au
Wed Dec 12 16:13:48 CST 2001


Hello GwangHee -

Thanks for sending the files.

If the Cisco is not sending an Access-Request you will have to check with 
Cisco what you need to configure. The trace file only shows an accounting 
request that is being processed correctly, so if you are not seeing any 
access requests I would have to conclude that the Cisco is not sending them.

regards

Hugh


On Thu, 13 Dec 2001 05:37, GwangHee Yi wrote:
> Dear All,
>
> I am using Cisco2600 Gatekeeper.
>
> I want to authenticate with Radiator.
> I got exact accouting attributes. It's working very well.
> But Cisco Router do not send me an Access-Request.
> Therefore, I can not authenticate with my MySql DB.
>
> Is this Cisco Configuration problem or Radiator Configuration problem..
>
> Below is configuration and Debug...
>
> Thanks,
>
> Configuration.
> ==================================
> Trace 4
> Foreground
> LogStdout
> LogDir          .
> DbDir           .
>
>
> AuthPort        1712
> AcctPort        1713
> <Realm DEFAULT>
>     <AuthBy SQL>
>         # Adjust DBSource, DBUsername, DBAuth to suit your DB
>         DBSource        dbi:mysql:****
>         DBUsername      ****
>         DBAuth          *****
>
>         # Auth Statements
>
>         AuthSelect SELECT password,replyattr FROM subscribers WHERE
> username = '%n'
>         AuthColumnDef 0, User-Password, check
>         AuthColumnDef 1, GENERIC, reply
>
>         # You may want to tailor these for your ACCOUNTING table
>         AccountingTable ACCOUNTING
>         AcctColumnDef   USERNAME,User-Name
>         AcctColumnDef   TIME_STAMP,Timestamp,integer
>         AcctColumnDef   ACCTSTATUSTYPE,Acct-Status-Type
>         AcctColumnDef   ACCTDELAYTIME,Acct-Delay-Time,integer
>         AcctColumnDef   ACCTINPUTOCTETS,Acct-Input-Octets,integer
>         AcctColumnDef   ACCTOUTPUTOCTETS,Acct-Output-Octets,integer
>         AcctColumnDef   ACCTSESSIONID,Acct-Session-Id
>         AcctColumnDef   ACCTSESSIONTIME,Acct-Session-Time,inter
> </AuthBy>
>     AcctLogFileName /var/radius/radius.log
> </Realm>
>
> Debug
> =====================
> Code:       Accounting-Request
> Identifier: 76
> Authentic:  0*<23><165>g<202><147><214>P<200>2<180><151>"<250><4>
> Attributes:
>         NAS-IP-Address = *********
>         NAS-Port-Type = Async
>         User-Name = "*******"
>         Called-Station-Id = "*******"
>         Calling-Station-Id = "*******"
>         Acct-Status-Type = Stop
>         Service-Type = Login-User
>         Acct-Session-Id = "56//****/0 B8E9C61F 4050007 EA25B92//////"
>         Acct-Input-Octets = 0
>         Acct-Output-Octets = 0
>         Acct-Input-Packets = 0
>         Acct-Output-Packets = 0
>         Acct-Session-Time = 11
>         cisco-avpair = "pre-bytes-in=0"
>         cisco-avpair = "pre-bytes-out=0"
>         cisco-avpair = "pre-paks-in=0"
>         cisco-avpair = "pre-paks-out=0"
>         cisco-avpair = "nas-rx-speed=0"
>         cisco-avpair = "nas-tx-speed=0"
>         Acct-Delay-Time = 0
>
> Tue Dec 11 17:04:58 2001: DEBUG: Handling request with Handler
> 'Realm=DEFAULT'
> Tue Dec 11 17:04:58 2001: DEBUG: Deleting session for ******, *********,
> Tue Dec 11 17:04:58 2001: DEBUG: Handling with Radius::AuthSQL
> Tue Dec 11 17:04:58 2001: DEBUG: Handling accounting with Radius::AuthSQL
> Tue Dec 11 17:04:58 2001: DEBUG: do query is: insert into ACCOUNTING
>                 (USERNAME, TIME_STAMP, ACCTSTATUSTYPE, ACCTDELAYTIME,
> ACCTINPUTOCTETS, ACCTOUTPUTOCTETS, ACCTSESSIONID, ACCTSESSIONTIME)
>                 values
>                 ('******', 1008119098, 'Stop', 0, 0, 0, '56//****/0
> B8E9C61F 4050007 EA25B92//////', 11)
>
> Tue Dec 11 17:04:58 2001: DEBUG: Accounting accepted
> Tue Dec 11 17:04:58 2001: DEBUG: Packet dump:
> *** Sending to ******* port 1646 ....
> Code:       Accounting-Response
> Identifier: 76
> Authentic:  0*<23><165>g<202><147><214>P<200>2<180><151>"<250><4>
> Attributes:
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list