(RADIATOR) Orinoco AP-500/1000 MAC auth problem

[Bon sy]

Sehr geehrter Charly

	Vielen Dank! 

	Ich bin sehr froh. Mein AP funktioniert. Dass gefaellt mir sehr
gut. Das ist mein Log im attachment. 

Bon
P.S. I wish I can write more than this with my limited German proficiency. 
More inline reply ....

On Fri, 20 Sep 2002, Karl Gaissmaier wrote:

> Hello,
> 
> Bon sy schrieb:
> > 
> > Does anyone know the exact reply attribute list required by Orinoco
> > AP-500/AP-1000 for RADIUS MAC authentication?
> > 
> 
> why do you ask? Where is your problem?

	I managed to get the RADIATOR to talk to the AP, but the AP
initially did not authorize wireless access properly even it receives the
access authentication. Apparently (Naturalick) I missed to include in the
reply the user-name and NAS-IP-address information.

> > I am completely surprised by the tech support when they told me they
> > themselves have to get in touch with the AP-1000 developer to get that
> > information. I am hoping someone in the list may have the information
> > handy.
> 
> what tech support? Compare it to the tech support for radiator ;-)

	You are right! No tech support gets close to radiator!

> 
> Regards
> 	Charly
> -- 
> Karl Gaissmaier          Computing Center,University of Ulm,Germany
> Email:karl.gaissmaier at rz.uni-ulm.de          Network Administration
> Tel.: ++49 731 50-22499
> 
-------------- next part --------------
Fri Sep 20 07:44:35 2002: DEBUG: Packet dump:
*** Received from 192.168.123.104 port 192 ....

Packet length = 59
01 12 00 3b 9a 86 a3 22 b8 60 2a 67 66 ec 8f 9e
e7 14 de c3 04 06 c0 a8 7b 68 01 0f 30 30 61 30
66 38 2d 39 30 30 36 39 38 02 12 d5 30 91 01 e3
81 85 cd e2 a1 df 7a 4d 06 e9 7b
Code:       Access-Request
Identifier: 18
Authentic:  <154><134><163>"<184>`*gf<236><143><158><231><20><222><195>
Attributes:
        NAS-IP-Address = 192.168.123.104
        User-Name = "00a0f8-900698"
        User-Password = "<213>0<145><1><227><129><133><205><226><161><223>zM<6><233>{"

Fri Sep 20 07:44:35 2002: DEBUG: Handling request with Handler 'Realm=DEFAULT'
Fri Sep 20 07:44:35 2002: DEBUG:  Deleting session for 00a0f8-900698, 192.168.123.104,
Fri Sep 20 07:44:35 2002: DEBUG: Handling with Radius::AuthSQL
Fri Sep 20 07:44:35 2002: DEBUG: Handling with Radius::AuthSQL:
Fri Sep 20 07:44:35 2002: DEBUG: Query is: select decode(NVL(b.password, 'NotFound'), 'NotFound', 'InValidLogin', 'EAPsecret') from wp_adapter a, wp_member b, wp_group_member c, wp_group d, wp_group_node e, wp_node f where a.mac_address = substr('00a0f8-900698', 1, instr('00a0f8-900698','-')-1) || substr('00a0f8-900698',instr('00a0f8-900698','-')+1,length('00a0f8-900698')) and a.user_id = b.user_id and b.user_id = c.user_id and c.group_id = d.group_id and d.group_id = e.group_id and e.node_id = f.node_id and f.ip_address = '192.168.123.104'

Fri Sep 20 07:44:35 2002: DEBUG: Radius::AuthSQL looks for match with 00a0f8-900698
Fri Sep 20 07:44:35 2002: DEBUG: Radius::AuthSQL ACCEPT:
Fri Sep 20 07:44:35 2002: DEBUG: Access accepted for 00a0f8-900698
Fri Sep 20 07:44:35 2002: DEBUG: Packet dump:
*** Sending to 192.168.123.104 port 192 ....

Packet length = 49
02 12 00 31 c0 2b f7 ef 11 b1 49 2b 9f b9 cd 6f
d9 6b dc 06 06 06 00 00 00 02 01 0f 30 30 61 30
66 38 2d 39 30 30 36 39 38 02 02 04 06 c0 a8 7b
68
Code:       Access-Accept
Identifier: 18
Authentic:  <154><134><163>"<184>`*gf<236><143><158><231><20><222><195>
Attributes:
        Service-Type = Framed-User
        User-Name = "00a0f8-900698"
        User-Password = ""
        NAS-IP-Address = 192.168.123.104