(RADIATOR) 128k isdn dialup
Hugh Irvine
hugh at open.com.au
Thu Jun 21 06:22:12 CDT 2001
Hello Chris -
Thanks for sending the trace output.
The trace shows two Access Requests, each one of which results in an
Access-Accept and as far as I can see there are two accounting Starts
as well.
In other words, Radiator is doing the right thing.
What is happening on the NAS while this is going on?
And what do you see on the PC?
What indication do you have that this is not working as you expect?
thanks
Hugh
At 11:26 AM +0000 6/21/01, Chris Rockett wrote:
>Hi,
>
>I hope that this is the inf that you were after :
>
>Tue Jun 19 09:57:43 2001: DEBUG: Packet dump:
>*** Received from 213.161.67.204 port 7000 ....
>Code: Access-Request
>Identifier: 207
>Authentic: y<177>iV<156><207><176><26><250>Tl<13><159><2> <28>
>Attributes:
> User-Name = "testuser at education.navaho.net"
> User-Password = "<131><0><8><200>5'<199>o<249>aq<136>~mf<205>"
> NAS-Port = 5
> NAS-Port-Type = ISDN-Synchronous
> Acc-Request-Type = User-Authentication
> Service-Type = Framed
> Framed-Protocol = PPP
> Called-Station-Id = "179700"
> Calling-Station-Id = "1243776030"
> NAS-Identifier = "08:00:03:04:06:BC"
>
>Tue Jun 19 09:57:43 2001: DEBUG: Check if Handler
>Realm=education.navaho.net,Time="Wk0800-1800",Called-Station-Id=08208420000
>should be used to handle this request
>Tue Jun 19 09:57:43 2001: DEBUG: Check if Handler
>Realm=education.navaho.net,Called-Station-Id=179700 should be used to
>handle this request
>Tue Jun 19 09:57:43 2001: DEBUG: Handling request with Handler
>'Realm=education.navaho.net,Called-Station-Id=179700'
>Tue Jun 19 09:57:43 2001: DEBUG: Rewrote user name to testuser
>Tue Jun 19 09:57:43 2001: DEBUG: Deleting session for
>testuser at education.navaho.net, 213.161.67.204, 5
>Tue Jun 19 09:57:43 2001: DEBUG: Handling with Radius::AuthLDAP
>Tue Jun 19 09:57:43 2001: DEBUG: Connecting to localhost, port 389
>Tue Jun 19 09:57:43 2001: DEBUG: LDAP got result for uid=testuser,
>dc=education,dc=navaho,dc=net
>Tue Jun 19 09:57:43 2001: DEBUG: LDAP got iphostnumber: 213.161.67.223
>Tue Jun 19 09:57:43 2001: DEBUG: LDAP got userpassword: {clear}unencry
>Tue Jun 19 09:57:43 2001: DEBUG: Radius::AuthLDAP looks for match with
>testuser
>Tue Jun 19 09:57:43 2001: DEBUG: Radius::AuthLDAP ACCEPT:
>Tue Jun 19 09:57:43 2001: DEBUG: Access accepted for testuser
>Tue Jun 19 09:57:43 2001: DEBUG: Packet dump:
>*** Sending to 213.161.67.204 port 7000 ....
>Code: Access-Accept
>Identifier: 207
>Authentic: y<177>iV<156><207><176><26><250>Tl<13><159><2> <28>
>Attributes:
> Framed-IP-Address = 213.161.67.223
> Service-Type = Framed
> Framed-Protocol = PPP
> Framed-MTU = 1500
> Idle-Timeout = 300
>
>Tue Jun 19 09:57:43 2001: DEBUG: Packet dump:
>*** Received from 213.161.67.204 port 7100 ....
>Code: Accounting-Request
>Identifier: 249
>Authentic: <231>P{F<157>3I[<132><209>G<160><255>YV<254>
>Attributes:
> User-Name = "testuser at education.navaho.net"
> NAS-Port = 5
> NAS-Port-Type = ISDN-Synchronous
> Acc-Request-Type = User-Accounting
> Service-Type = Framed
> Framed-Protocol = PPP
> Called-Station-Id = "179700"
> Calling-Station-Id = "1243776030"
> NAS-Identifier = "08:00:03:04:06:BC"
> Acct-Status-Type = Start
> Acct-Delay-Time = 0
> Acct-Session-Id = "010619.100829.010761"
> Acc-Dial-Port-Index = 203
> Connect-Info = "64000 "
> Acc-Connect-Tx-Speed = 64000
> Acc-Connect-Rx-Speed = 64000
> Acct-Multi-Session-Id = "010619.100829.010761"
> Acct-Link-Count = 1
> Acct-Authentic = RADIUS
> Acc-Service-Profile = "tigris"
> Framed-IP-Address = 213.161.67.223
> Idle-Timeout = 300
> Framed-MTU = 1500
>
>Tue Jun 19 09:57:43 2001: DEBUG: Check if Handler
>Realm=education.navaho.net,Time="Wk0800-1800",Called-Station-Id=08208420000
>should be used to handle this request
>Tue Jun 19 09:57:43 2001: DEBUG: Check if Handler
>Realm=education.navaho.net,Called-Station-Id=179700 should be used to
>handle this request
>Tue Jun 19 09:57:43 2001: DEBUG: Handling request with Handler
>'Realm=education.navaho.net,Called-Station-Id=179700'
>Tue Jun 19 09:57:43 2001: DEBUG: Rewrote user name to testuser
>Tue Jun 19 09:57:43 2001: DEBUG: Adding session for
>testuser at education.navaho.net, 213.161.67.204, 5
>Tue Jun 19 09:57:43 2001: DEBUG: Handling with Radius::AuthLDAP
>Tue Jun 19 09:57:43 2001: DEBUG: Accounting accepted
>Tue Jun 19 09:57:43 2001: DEBUG: Packet dump:
>*** Sending to 213.161.67.204 port 7100 ....
>Code: Accounting-Response
>Identifier: 249
>Authentic: <231>P{F<157>3I[<132><209>G<160><255>YV<254>
>Attributes:
>
>Tue Jun 19 09:57:43 2001: DEBUG: Packet dump:
>*** Received from 213.161.67.204 port 7000 ....
>Code: Access-Request
>Identifier: 208
>Authentic: =<21><214><226><7>1^\<157><239><1><138>cB.c
>Attributes:
> User-Name = "testuser at education.navaho.net"
> User-Password =
>""!<143><250><176><196><181><171><208>{<236>g@<151><209>N"
> NAS-Port = 6
> NAS-Port-Type = ISDN-Synchronous
> Acc-Request-Type = User-Authentication
> Service-Type = Framed
> Framed-Protocol = PPP
> Called-Station-Id = "179700"
> Calling-Station-Id = "1243776030"
> NAS-Identifier = "08:00:03:04:06:BC"
>
>Tue Jun 19 09:57:43 2001: DEBUG: Check if Handler
>Realm=education.navaho.net,Time="Wk0800-1800",Called-Station-Id=08208420000
>should be used to handle this request
>Tue Jun 19 09:57:43 2001: DEBUG: Check if Handler
>Realm=education.navaho.net,Called-Station-Id=179700 should be used to
>handle this request
>Tue Jun 19 09:57:43 2001: DEBUG: Handling request with Handler
>'Realm=education.navaho.net,Called-Station-Id=179700'
>Tue Jun 19 09:57:43 2001: DEBUG: Rewrote user name to testuser
>Tue Jun 19 09:57:43 2001: DEBUG: Deleting session for
>testuser at education.navaho.net, 213.161.67.204, 6
>Tue Jun 19 09:57:43 2001: DEBUG: Handling with Radius::AuthLDAP
>Tue Jun 19 09:57:43 2001: DEBUG: Connecting to localhost, port 389
>Tue Jun 19 09:57:43 2001: DEBUG: LDAP got result for uid=testuser,
>dc=education,dc=navaho,dc=net
>Tue Jun 19 09:57:43 2001: DEBUG: LDAP got iphostnumber: 213.161.67.223
>Tue Jun 19 09:57:43 2001: DEBUG: LDAP got userpassword: {clear}unencry
>Tue Jun 19 09:57:43 2001: DEBUG: Radius::AuthLDAP looks for match with
>testuser
>Tue Jun 19 09:57:43 2001: DEBUG: Radius::AuthLDAP ACCEPT:
>Tue Jun 19 09:57:43 2001: DEBUG: Access accepted for testuser
>Tue Jun 19 09:57:43 2001: DEBUG: Packet dump:
>*** Sending to 213.161.67.204 port 7000 ....
>Code: Access-Accept
>Identifier: 208
>Authentic: =<21><214><226><7>1^\<157><239><1><138>cB.c
>Attributes:
> Framed-IP-Address = 213.161.67.223
> Service-Type = Framed
> Framed-Protocol = PPP
> Framed-MTU = 1500
> Idle-Timeout = 300
>
>Tue Jun 19 09:57:43 2001: DEBUG: Packet dump:
>*** Received from 213.161.67.204 port 7100 ....
>Code: Accounting-Request
>Identifier: 250
>Authentic: 'm<155><9>$<224>E<161><132><146><209><245>U<12>Y<170>
>Attributes:
> User-Name = "testuser at education.navaho.net"
> NAS-Port = 6
> NAS-Port-Type = ISDN-Synchronous
> Acc-Request-Type = User-Accounting
> Service-Type = Framed
> Framed-Protocol = PPP
> Called-Station-Id = "179700"
> Calling-Station-Id = "1243776030"
> NAS-Identifier = "08:00:03:04:06:BC"
> Acct-Status-Type = Start
> Acct-Delay-Time = 0
> Acct-Session-Id = "010619.100830.010762"
> Acc-Dial-Port-Index = 204
> Connect-Info = "64000 "
> Acc-Connect-Tx-Speed = 64000
> Acc-Connect-Rx-Speed = 64000
> Acct-Multi-Session-Id = "010619.100829.010761"
> Acct-Link-Count = 2
> Acct-Authentic = RADIUS
> Acc-Service-Profile = "tigris"
> Framed-IP-Address = 213.161.67.223
> Idle-Timeout = 300
> Framed-MTU = 1500
>
>Tue Jun 19 09:57:43 2001: DEBUG: Check if Handler
>Realm=education.navaho.net,Time="Wk0800-1800",Called-Station-Id=08208420000
>should be used to handle this request
>Tue Jun 19 09:57:43 2001: DEBUG: Check if Handler
>Realm=education.navaho.net,Called-Station-Id=179700 should be used to
>handle this request
>Tue Jun 19 09:57:43 2001: DEBUG: Handling request with Handler
>'Realm=education.navaho.net,Called-Station-Id=179700'
>Tue Jun 19 09:57:43 2001: DEBUG: Rewrote user name to testuser
>Tue Jun 19 09:57:43 2001: DEBUG: Adding session for
>testuser at education.navaho.net, 213.161.67.204, 6
>Tue Jun 19 09:57:43 2001: DEBUG: Handling with Radius::AuthLDAP
>Tue Jun 19 09:57:43 2001: DEBUG: Accounting accepted
>Tue Jun 19 09:57:43 2001: DEBUG: Packet dump:
>*** Sending to 213.161.67.204 port 7100 ....
>Code: Accounting-Response
>Identifier: 250
>Authentic: 'm<155><9>$<224>E<161><132><146><209><245>U<12>Y<170>
>Attributes:
>
>Cheers,
>Chris Rockett.
>
>On Tue, 19 Jun 2001, Hugh Irvine wrote:
>
>>
>> Hello Chris -
>>
>> Thanks for the files, unfortunately you have sent me an extract from
>> the accounting detail file, not the debug trace from the logfile. As
>> mentioned previously, I will need to see a trace 4 debug showing the
>> access requests for both channels.
>>
>> thanks
>>
>> Hugh
>>
>>
>>
>> At 1:24 PM +0000 6/19/01, Chris Rockett wrote:
>> >Hi,
>> >
>> >Here are the things that u asked for, many thanks for the quick response
>> >and sorry about the state of the config file :)
>> >
>> >
>> >************* radius.cfg ***********************************
>> >
>> ># radius.cfg
>> >#
>> ># Configuration file for radius server
>> >
>> >
>> ># LogStdout makes all log file output appear on stdout as well
>> ># You must be running in Foreground mode for this to work
>> >LogStdout
>> >
>> >#normally use trace 3
>> >Trace 4
>> >
>> >PidFile /var/run/radiusd.pid
>> >AuthPort 1645
>> >AcctPort 1646
>> >
>> >BindAddress tweedledum
>> >
>> >#DictionaryFile %D/dictionary
>> >DictionaryFile %D/dictionary.acc
>> >
>> ># There are a number of other optional configuration items
>> ># for optional NAS communications. See the reference manual.
>> ># you only need these if you specify Simultaneous-Use and
>> ># a specific NasType in a <Client> statement
>> ># FingerProg defaults to an internal client. If you specify
>> ># a program name for FingerProg, it wil luse that program instead
>> ># of the internal client.
>> >#FingerProg /bin/finger
>> >#SnmpgetProg /usr/bin/snmpget
>> >#PmwhoProg /usr/local/sbin/pmwho
>> >
>> >#LivingstonMIB .iso.org.dod.internet.private.enterprises.307
>> >#LivingstonOffs 29
>> >#LivingstonHole 2
>> >SnmpgetProg /usr/local/bin/snmpget
>> >
>> ><Client **nas-ip-removed**>
>> > Secret **removed**
>> > NasType Tigris
>> >
>> ></Client>
>> >
>> ><Client **hostmachine-ip-removed**>
>> > Secret **removed**
>> ></Client>
>> >#UUNet radius proxies
>> >
>> >#danproxy200.dan.uu.net
>> ><Client 195.129.12.2>
>> >
>> ># danproxy201.dan.uu.net toll210.dan.uu.net
>> >danproxy201.dan.uu.net
>> > IdenticalClients 195.129.12.34 195.129.12.42
>> >195.129.12.50
>> > Secret **removed**
>> > DupInterval 60
>> >
>> > DefaultRealm argonet
>> ></Client>
>> >
>> >
>> ># 0820 number
>> >
>> ><Handler
>> >Realm=education.navaho.net,Time="Wk0800-1800",Called-Station-Id=08208420000>
>> > RewriteUsername s/^([^@]+).*/$1/
>> > PasswordLogFileName %L/passwordlog
>> > AcctLogFileName %L/accounting
>> >
>> > <AuthBy LDAP>
>> > HoldServerConnection
>> >
>> ># auth should have another user
>> > AuthDN cn=admin,dc=navaho,dc=net
>> > AuthPassword lnflashd
>> >
>> > BaseDN dc=education,dc=navaho,dc=net
>> > UsernameAttr uid
>> > PasswordAttr userpassword
>> > AuthAttrDef iphostnumber,Framed-IP-Address,reply
>> >
>> > AddToReply Service-Type = Framed,\
>> > Framed-Protocol = PPP,\
>> > Framed-MTU = 1500,\
>> > Framed-Compression = Van-Jacobson-TCP-IP,\
>> > Session-Timeout="until 1800"
>> > </AuthBy>
>> ></Handler>
>> >
>> ># not 0820 number....
>> ><Handler Realm=education.navaho.net,Called-Station-Id=179700>
> > > RewriteUsername s/^([^@]+).*/$1/
>> > PasswordLogFileName %L/passwordlog
>> > AcctLogFileName %L/accounting
>> >
>> > <AuthBy LDAP>
>> > HoldServerConnection
>> >
>> ># auth should have another user
>> > AuthDN cn=admin,dc=navaho,dc=net
>> > AuthPassword lnflashd
>> >
>> > BaseDN dc=education,dc=navaho,dc=net
>> > UsernameAttr uid
>> > PasswordAttr userpassword
>> > AuthAttrDef iphostnumber,Framed-IP-Address,reply
>> >
>> > AddToReply Service-Type = Framed,\
>> > Framed-Protocol = PPP,\
>> > Framed-MTU = 1500,\
>> ># Framed-Compression = Van-Jacobson-TCP-IP,\
>> > Idle-Timeout = 300,\
>> ># Port-Limit = 1
>> > Simultaneous-Use = 2
>> ># Session-Timeout="until 0800"
>> > </AuthBy>
>> ></Handler>
>> >
>> ># UUNet ISP backup
>> >
>> ><Handler Realm=argonet>
>> > RewriteUsername tr/A-Z/a-z/
>> > RewriteUsername s/^ukarg\/(.*)@.*$/$1/
>> > PasswordLogFileName %L/argonet-passwordlog
>> >
>> > <AuthBy FILE>
>> > Filename %D/argonet-users
>> > Dynamic USR-IP-Input-Filter
>> > UseAddressHint
>> > AddToReply Service-Type = Framed-User,\
>> > Framed-Protocol = PPP,\
>> > Framed-Routing = None,\
>> > Framed-MTU = 1500,\
>> > Framed-Compression = None,\
>> > Reply-Message="Protocol:"
>> > </AuthBy>
>> ></handler>
>> >
>> ><Handler>
>> > PasswordLogFileName %L/dev-passwordlog
>> >
>> > <AuthBy FILE>
>> > Filename %D/users
>> >
>> > AddToReply Service-Type = Framed,\
>> > Framed-Protocol = PPP,\
>> > Framed-MTU = 1500
>> > </AuthBy>
>> ></handler>
>> >
>> >************ Log Excert showing the two dialed up channels ************
>> >
>> >Tue Jun 19 10:47:45 2001
>> > User-Name = "testuser"
>> > NAS-Port = 5
>> > NAS-Port-Type = ISDN-Synchronous
>> > Acc-Request-Type = User-Accounting
>> > Service-Type = Framed
>> > Framed-Protocol = PPP
>> > Called-Station-Id = "179700"
>> > Calling-Station-Id = "1243776030"
>> > NAS-Identifier = "08:00:03:04:06:BC"
>> > Acct-Status-Type = Stop
>> > Acct-Delay-Time = 0
>> > Acct-Session-Id = "010619.105231.010789"
>> > Acc-Dial-Port-Index = 203
>> > Connect-Info = "64000 "
>> > Acc-Connect-Tx-Speed = 64000
>> > Acc-Connect-Rx-Speed = 64000
>> > Acct-Multi-Session-Id = "010619.105136.010787"
>> > Acct-Link-Count = 3
>> > Acct-Authentic = RADIUS
>> > Acc-Service-Profile = "tigris"
>> > Acct-Session-Time = 361
>> > Acct-Input-Octets = 29716
>> > Acct-Output-Octets = 536
>> > Acct-Input-Packets = 483
>> > Acct-Output-Packets = 41
>> > Acc-Input-Errors = 0
>> > Acc-Output-Errors = 0
>> > Acct-Termination-Cause = User-Request
>> > Acc-Reason-Code = Requested-By-User
>> > Framed-IP-Address = 213.161.67.223
>> > Idle-Timeout = 300
>> > Framed-MTU = 1500
>> > Timestamp = 992944065
>> >
>> >Tue Jun 19 10:47:46 2001
>> > User-Name = "testuser"
>> > NAS-Port = 6
>> > NAS-Port-Type = ISDN-Synchronous
>> > Acc-Request-Type = User-Accounting
>> > Service-Type = Framed
>> > Framed-Protocol = PPP
>> > Called-Station-Id = "179700"
>> > Calling-Station-Id = "1243776030"
>> > NAS-Identifier = "08:00:03:04:06:BC"
>> > Acct-Status-Type = Stop
>> > Acct-Delay-Time = 0
>> > Acct-Session-Id = "010619.105137.010788"
>> > Acc-Dial-Port-Index = 204
>> > Connect-Info = "64000 "
> > > Acc-Connect-Tx-Speed = 64000
>> > Acc-Connect-Rx-Speed = 64000
>> > Acct-Multi-Session-Id = "010619.105136.010787"
>> > Acct-Link-Count = 3
>> > Acct-Authentic = RADIUS
>> > Acc-Service-Profile = "tigris"
>> > Acct-Session-Time = 415
>> > Acct-Input-Octets = 35198
>> > Acct-Output-Octets = 1304878
>> > Acct-Input-Packets = 560
>> > Acct-Output-Packets = 1031
>> > Acc-Input-Errors = 0
>> > Acc-Output-Errors = 0
>> > Acct-Termination-Cause = User-Request
>> > Acc-Reason-Code = Requested-By-User
>> > Framed-IP-Address = 213.161.67.223
>> > Idle-Timeout = 300
>> > Framed-MTU = 1500
>> > Timestamp = 992944066
>> >
>> >
>> >The ISDN TA is a BT speedway which is a rebadged AVM berliner USB
>> >TA. AFAIK the adaptor itself has MPPP capabilities under standard
>> >win98/2k os .
>> >
>> >Many thanks for your help in all this.
>> >
>> >Cheers,
>> >Chris Rockett,
>> >Systems Engineer. Freedom 2 Limited, http://www.freedom2.com
>> >
>> >
>> >
>> >On Tue, 19 Jun 2001, Hugh Irvine wrote:
>> >
>> >>
>> >> Hello Chris -
>> >>
>> >> Thanks for the information.
>> >>
>> >> I am not sure whether the problem is with the PC, the NAS, or with
>> >> Radiator. I can help you with the Radiator part if you send me a copy
>> >> of the Radiator configuration file (no secrets) together with a trace
>> >> 4 debug from Radiator showing what happens with the first channel as
>> >> well as the second channel.
>> > >
>> >> For the PC and the NAS, you will have to check with the vendor of the
>> >> ISDN card (ie. does it support MPPP? and if so how?).
>> >>
>> >> cheers
>> >>
>> >> Hugh
>> >>
>> >>
>> >> At 12:27 PM +0000 6/19/01, Chris Rockett wrote:
>> >> >Hi,
>> >> >
>> >> >The original company name is Argonet/Argo interactive/VTI
>>limites/Vertical
>> >> >Twist Interactive. It should be one of those but
>>unfortunatley I cant lay
>> >> >my hands on the radiator licence atm so I cant be more definate about
>> >> >which one it is.
>> >> >
>> >> >Cheers,
>> >> >Chris Rockett,
>> >> >Systems Engineer. Freedom 2 Limited, http://www.freedom2.com
>> >> >
>> >> >
>> >> >On Tue, 19 Jun 2001, Hugh Irvine wrote:
>> >> >
>> >> >>
>> >> >> Hello Chris -
>> >> >>
>> >> >> As I can't find you in our customer database, could you please send
>> >> >> me the name of the registered company that purchased this copy of
>> >> >> Radiator?
>> >> >>
>> >> >> Please reply to me directly.
>> >> >>
>> >> >> regards
>> >> >>
>> >> >> Hugh
>> >> >>
>> >> >>
>> >> >> At 11:38 AM +0000 6/19/01, Chris Rockett wrote:
>> >> >> >Hi,
>> >> >> >
>> >> >> >Im a bit of a newbie at radiator configuration. I have
>> >>radiator running
>> >> >> >and authenticating correctly for 64k isdn but cant seem
>>to get a bonded
>> >> >> >channel for 128k isdn. Using win2k the dialup works and
>>auths but only
>> >> >> >works at 64k still, any ideas of where to look for
>> >>information or what the
>> >> >> >possible cause could be?
>> >> >> >
>> >> >> >Many Thanks.
>> >> >> >Chris Rockett.
>> >> >> >
>> >> >> >===
>> >> >> >Archive at http://www.open.com.au/archives/radiator/
>> >> >> >Announcements on radiator-announce at open.com.au
>> >> >> >To unsubscribe, email 'majordomo at open.com.au' with
>> >> >> >'unsubscribe radiator' in the body of the message.
>> >> >>
>> >> >>
>> >>
>> >>
>> >
>> >===
>> >Archive at http://www.open.com.au/archives/radiator/
>> >Announcements on radiator-announce at open.com.au
>> >To unsubscribe, email 'majordomo at open.com.au' with
>> >'unsubscribe radiator' in the body of the message.
>>
>>
--
NB: I am travelling this week, so there may be delays in our correspondence.
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
More information about the radiator
mailing list