(RADIATOR) Authentication Question..
Hugh Irvine
hugh at open.com.au
Wed Dec 12 16:13:48 CST 2001
Hello GwangHee -
Thanks for sending the files.
If the Cisco is not sending an Access-Request you will have to check with
Cisco what you need to configure. The trace file only shows an accounting
request that is being processed correctly, so if you are not seeing any
access requests I would have to conclude that the Cisco is not sending them.
regards
Hugh
On Thu, 13 Dec 2001 05:37, GwangHee Yi wrote:
> Dear All,
>
> I am using Cisco2600 Gatekeeper.
>
> I want to authenticate with Radiator.
> I got exact accouting attributes. It's working very well.
> But Cisco Router do not send me an Access-Request.
> Therefore, I can not authenticate with my MySql DB.
>
> Is this Cisco Configuration problem or Radiator Configuration problem..
>
> Below is configuration and Debug...
>
> Thanks,
>
> Configuration.
> ==================================
> Trace 4
> Foreground
> LogStdout
> LogDir .
> DbDir .
>
>
> AuthPort 1712
> AcctPort 1713
> <Realm DEFAULT>
> <AuthBy SQL>
> # Adjust DBSource, DBUsername, DBAuth to suit your DB
> DBSource dbi:mysql:****
> DBUsername ****
> DBAuth *****
>
> # Auth Statements
>
> AuthSelect SELECT password,replyattr FROM subscribers WHERE
> username = '%n'
> AuthColumnDef 0, User-Password, check
> AuthColumnDef 1, GENERIC, reply
>
> # You may want to tailor these for your ACCOUNTING table
> AccountingTable ACCOUNTING
> AcctColumnDef USERNAME,User-Name
> AcctColumnDef TIME_STAMP,Timestamp,integer
> AcctColumnDef ACCTSTATUSTYPE,Acct-Status-Type
> AcctColumnDef ACCTDELAYTIME,Acct-Delay-Time,integer
> AcctColumnDef ACCTINPUTOCTETS,Acct-Input-Octets,integer
> AcctColumnDef ACCTOUTPUTOCTETS,Acct-Output-Octets,integer
> AcctColumnDef ACCTSESSIONID,Acct-Session-Id
> AcctColumnDef ACCTSESSIONTIME,Acct-Session-Time,inter
> </AuthBy>
> AcctLogFileName /var/radius/radius.log
> </Realm>
>
> Debug
> =====================
> Code: Accounting-Request
> Identifier: 76
> Authentic: 0*<23><165>g<202><147><214>P<200>2<180><151>"<250><4>
> Attributes:
> NAS-IP-Address = *********
> NAS-Port-Type = Async
> User-Name = "*******"
> Called-Station-Id = "*******"
> Calling-Station-Id = "*******"
> Acct-Status-Type = Stop
> Service-Type = Login-User
> Acct-Session-Id = "56//****/0 B8E9C61F 4050007 EA25B92//////"
> Acct-Input-Octets = 0
> Acct-Output-Octets = 0
> Acct-Input-Packets = 0
> Acct-Output-Packets = 0
> Acct-Session-Time = 11
> cisco-avpair = "pre-bytes-in=0"
> cisco-avpair = "pre-bytes-out=0"
> cisco-avpair = "pre-paks-in=0"
> cisco-avpair = "pre-paks-out=0"
> cisco-avpair = "nas-rx-speed=0"
> cisco-avpair = "nas-tx-speed=0"
> Acct-Delay-Time = 0
>
> Tue Dec 11 17:04:58 2001: DEBUG: Handling request with Handler
> 'Realm=DEFAULT'
> Tue Dec 11 17:04:58 2001: DEBUG: Deleting session for ******, *********,
> Tue Dec 11 17:04:58 2001: DEBUG: Handling with Radius::AuthSQL
> Tue Dec 11 17:04:58 2001: DEBUG: Handling accounting with Radius::AuthSQL
> Tue Dec 11 17:04:58 2001: DEBUG: do query is: insert into ACCOUNTING
> (USERNAME, TIME_STAMP, ACCTSTATUSTYPE, ACCTDELAYTIME,
> ACCTINPUTOCTETS, ACCTOUTPUTOCTETS, ACCTSESSIONID, ACCTSESSIONTIME)
> values
> ('******', 1008119098, 'Stop', 0, 0, 0, '56//****/0
> B8E9C61F 4050007 EA25B92//////', 11)
>
> Tue Dec 11 17:04:58 2001: DEBUG: Accounting accepted
> Tue Dec 11 17:04:58 2001: DEBUG: Packet dump:
> *** Sending to ******* port 1646 ....
> Code: Accounting-Response
> Identifier: 76
> Authentic: 0*<23><165>g<202><147><214>P<200>2<180><151>"<250><4>
> Attributes:
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
More information about the radiator
mailing list