(RADIATOR) strange problems with cisco 3810

[Hugh Irvine]

Hello Eli -

Attribute 79 is the EAP-Message attribute, found in the standard Radiator 3.1 
dictionary file. What dictionary are you using? You should start with the 
standard Radiator dictionary and add/remove entries as required.

The usual reason for "Bad Authenticator ..." is incorrect shared secrets, so 
you should double check that they are correct.

Once you have the dictionary sorted out, please send me a copy of the 
configuration file (no secrets) together with a trace 4 debug from Radiator 
showing what is going on.

regards

Hugh



On Mon, 10 Jun 2002 14:26, Eli Klein wrote:
> I'm running Radiator 3.1, Perl 5.6.1 and a cisco 3810 running 12.1.11..
> I have 2 other ciscos that work great (not 3810s, but they run IOS!),
> but no matter what I do, I get a Bad Password (or Bad Encrypted Password
> if using Encrypted-Password).. if the SAME username/password combination
> is on the local router, it works fine.  There was another problem with
> the "Bad Authenticator...", but that was fixed with the
> IgnoreAcctSignature line.  I've included a trace 4 output of one of the
> errors.  Any help would be much appreciated.  Also not sure what the
> attribute 79 is, but I can probably figure that one out :)
>
> Information follows below.
>
> TIA
> -Eli Klein
> First Link Technology, Inc.
>
> Here's the Client entry from my config:
>
> <Client 192.168.253.98>
>         IdenticalClients        192.168.232.1
>         Secret *********
>         DupInterval 0
>         DefaultRealm dsl.firstlink.com
>         IgnoreAcctSignature
> </Client>
>
> Fri Jun  7 13:00:11 2002: DEBUG: Packet dump:
> *** Received from 192.168.253.98 port 1645 ....
> Code:       Access-Request
> Identifier: 215
> Authentic:  ;<219>p<136>a<140><24>i<157>-<194>=<250>v<136><229>
> Attributes:
>         NAS-IP-Address = 192.168.232.1
>         NAS-Port = 3
>         NAS-Port-Type = Virtual
>         User-Name = "werner"
>         User-Password = "- <157><12><174>G\<4>X<248><12>,<22><18>U<136>"
>         Service-Type = Framed-User
>         Framed-Protocol = PPP
>
> Fri Jun  7 13:00:11 2002: DEBUG: Handling request with Handler
> 'Realm=dsl.firstlink.com'
> Fri Jun  7 13:00:11 2002: DEBUG:  Deleting session for werner,
> 192.168.232.1, 3
> Fri Jun  7 13:00:11 2002: DEBUG: do query is: delete from RADONLINE
> where NASIDENTIFIER='192.168.232.1' and NASPORT=03
>
> Fri Jun  7 13:00:11 2002: DEBUG: Query is: select NASIDENTIFIER,
> NASPORT, ACCTSESSIONID, FRAMEDIPADDRESS from RADONLINE where
> USERNAME='werner'
>
> Fri Jun  7 13:00:11 2002: DEBUG: Handling with Radius::AuthFILE:
> Fri Jun  7 13:00:11 2002: DEBUG: Radius::AuthFILE looks for match with
> werner at dsl.firstlink.com
> Fri Jun  7 13:00:11 2002: ERR: Attribute number 79 is not defined in
> your dictionary
> Fri Jun  7 13:00:11 2002: DEBUG: Radius::AuthFILE REJECT: Bad Password
> Fri Jun  7 13:00:11 2002: INFO: Access rejected for
> werner at dsl.firstlink.com: Bad Password
> Fri Jun  7 13:00:11 2002: DEBUG: Packet dump:
> *** Sending to 192.168.253.98 port 1645 ....
> Code:       Access-Reject
> Identifier: 215
> Authentic:  ;<219>p<136>a<140><24>i<157>-<194>=<250>v<136><229>
> Attributes:
>         Reply-Message = "Request Denied"
>
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.