(RADIATOR) Rodopi & Radiator
Hugh Irvine
hugh at open.com.au
Wed Feb 5 21:45:09 CST 2003
Hello Tim -
In what you show below, there is no DBSource, DBUsername or DBAuth
(they are commented out).
These *must* be set to enable access to your database (the values must
match what has been configured in your database).
regards
Hugh
On Thursday, Feb 6, 2003, at 12:11 Australia/Melbourne, Tim Jung wrote:
> Ok I went and looked at the configurations you mention and made a few
> changes. One of them was to try and use domain login rather than server
> login. It should not have made a difference, since there is both a
> "rodopi"
> NT account and SQL account, but all of a sudden I get a lot more
> information from Radiator. We are also running in mixed-mode
> authentication
> so it shouldn't have mattered. I have all the config files and logs
> below
> your message Dave, at the end of this message.
>
> Now Radiator says that the account "testikano" doesn't exist when it in
> fact it does exist in Rodopi. In fact when Rodopi does it standard
> radius
> export to a "users" text file it shows up in there.
>
> If any of the passwords look strange it is because I changed them for
> obvious reasons. If your wondering about the port numbers is it
> because I
> have our original radius server running on the same machine only on the
> higher port numbers.
>
> So it looks like I am getting closer to getting this working, but it
> still
> isn't perfect yet. Any clues as to what exactly I might have screwed
> up or
> done wrong?
>
> It appears that the "stored procedure 'Interface_VircomUsers'" doesn't
> exist or it can't find it. So now what the heck am I suppose to do if
> this
> is the case? I think if I can just figure out this problem with the
> stored
> procedure stuff that it would probably start working.
>
> Any help would be appreciated.
>
> Tim Jung
> System Admin
> Internet Gateway
> tjung at igateway.net
>
>
> ----- Original Message -----
> From: "Dave Birkbeck" <dbirkbeck at ikano.com>
> To: "'Tim Jung'" <tjung at igateway.net>; <radiator at open.com.au>
> Sent: Wednesday, February 05, 2003 5:55 PM
> Subject: RE: (RADIATOR) Rodopi & Radiator
>
>
>> Tim,
>>
>> What does your config look like? Also, what does your freetds.conf
>> look
>> like?
>>
>> David Birkbeck
>> Network Engineer
>> IKANO Communications
>> mailto:dave at ikano.com
>> (801)415-8022 Phone & FAX
>
>
> ------------------------ radius.cfg ----------------------------
>
> Foreground
> LogStdout
> #LogDir .
> LogDir /var/log/radacct
> DbDir .
> DictionaryFile /etc/radiator/dictionary
> Trace 5
> #AuthPort 1645, 1812
> #AcctPort 1646, 1813
> AuthPort 1645
> AcctPort 1646
>
> #
> # Default
> #
> <Client DEFAULT>
> Secret secret
> DupInterval 0
> </Client>
>
> #
> # Nightowl
> #
> <Client 209.176.170.8>
> Secret secret
> DupInterval 0
> </Client>
>
>
> #
> #Ikano
> #
> <Client 216.126.204.150>
> Secret secret
> /Client>
>
> <Client 216.126.204.151>
> Secret secret
> DupInterval 0
> </Client>
>
> <Client 216.126.204.152>
> Secret secret
> DupInterval 0
> </Client>
>
> <Client 216.126.204.153>
> Secret secret
> DupInterval 0
> </Client>
>
>
> <Realm DEFAULT>
> <AuthBy RODOPI>
> # Change DBSource, DBUsername, DBAuth for your database
> # See the reference manual
> # ON NT, You will need to add a System DSN for Rodopi:
> # DBSource dbi:ODBC:Rodopi
> # DBUsername Rodopi
> # DBAuth secret
>
> # Heres how you might connect to the Rodopi MS-SQL
> # database from Unix using DBD-Sybase
> DBSource dbi:Sybase:Rodopi
> DBUsername rodopi
> DBAuth secret
> </AuthBy>
> # You will probably want to keep an accounting log file too
> # so you can recover from database outages. You will need
> # to add the URL for this file to the "Online Usage URL's"
> # page in the Administration section of RODOPI. RODOPI
> # will automatically rotate it when it is fetched.
> AcctLogFileName %L/detail
> </Realm>
>
> <Realm igateway.net>
> RewriteUsername s/^([^@]+).*/$1/
> <AuthBy RODOPI>
> # Change DBSource, DBUsername, DBAuth for your database
> # See the reference manual
> # ON NT, You will need to add a System DSN for Rodopi:
> # DBSource dbi:ODBC:Rodopi
> # DBUsername Rodopi
> # DBAuth secret
>
> # Heres how you might connect to the Rodopi MS-SQL
> # database from Unix using DBD-Sybase
> DBSource dbi:Sybase:Rodopi
> DBUsername rodopi
> DBAuth secret
> </AuthBy>
> # You will probably want to keep an accounting log file too
> # so you can recover from database outages. You will need
> # to add the URL for this file to the "Online Usage URL's"
> # page in the Administration section of RODOPI. RODOPI
> # will automatically rotate it when it is fetched.
> AcctLogFileName %L/detail
> </Realm>
>
>
> --------------------- freetds.conf ------------------------------
>
> [global]
> # TDS protocol version
> tds version = 7.0
>
> initial block size = 512
>
> swap broken dates = no
>
> swap broken money = no
>
> # Database server login method, if both server and domain
> # logins are enabled, domain login is tried first if a domain
> # is specified, and if that fails the server login will be
> used.
> try server login = yes
> try domain login = no
>
> # The default authentication domain, can be overridden by
> # specifying a username with a domain prefix, e.g.
> DOMAIN\username
> ; nt domain = WORKGROUP
>
> # If the server responds with different domain try that one?
> cross domain login = no
>
> # Whether to write a TDSDUMP file for diagnostic purposes
> # (setting this to /tmp is insecure on a multi-user system)
> dump file = /tmp/freetds.log
> debug level = 10
>
> # Command and connection timeouts
> timeout = 10;
> connect timeout = 10;
>
> # This is a Sybase hosted database server, if you are directly on the
> # net you can use it to test.
> [JDBC]
> host = 192.138.151.39
> port = 4444
> tds version = 5.0
>
> # A typical Microsoft SQL Server 7.0 configuration using domain logins
> [Rodopi]
> host = billing.igateway.net
> port = 1433
> tds version = 7.0
> try domain login = yes
> try server login = no
> nt domain = IGATEWAY
>
>
> -------------------- Radiator Debug ------------------------
>
>
> /usr/bin/radiusd -config_file /etc/radiator/radius.cfg
> Wed Feb 5 19:57:40 2003: DEBUG: Finished reading configuration file
> '/etc/radiator/radius.cfg'
> This Radiator license will expire on 2003-06-01
> This Radiator license will stop operating after 1000 requests
> To purchase an unlimited full source version of Radiator, see
> http://www.open.com.au/ordering.html
> To extend your evaluation period, contact admin at open.com.au
>
> Wed Feb 5 19:57:40 2003: DEBUG: Reading dictionary file
> '/etc/radiator/dictionary'
> Wed Feb 5 19:57:42 2003: DEBUG: Creating authentication port
> 0.0.0.0:1645
> Wed Feb 5 19:57:42 2003: DEBUG: Creating accounting port 0.0.0.0:1646
> Wed Feb 5 19:57:42 2003: INFO: Server started: Radiator 3.5 on
> radius.igateway.net (DEMO)
> Wed Feb 5 19:58:53 2003: DEBUG: Packet dump:
> *** Received from 206.142.60.79 port 1062 ....
>
> Packet length = 108
> 01 9d 00 6c 31 32 33 34 35 36 37 38 39 30 31 32
> 33 34 35 36 01 18 74 65 73 74 69 6b 61 6e 6f 40
> 69 67 61 74 65 77 61 79 2e 6e 65 74 06 06 00 00
> 00 02 04 06 cb 3f 9a 01 05 06 00 00 04 d2 1e 0b
> 31 32 33 34 35 36 37 38 39 1f 0b 39 38 37 36 35
> 34 33 32 31 3d 06 00 00 00 00 02 12 42 05 d9 e1
> 00 3c e1 71 a9 ae 09 a1 07 78 87 21
> Code: Access-Request
> Identifier: 157
> Authentic: 1234567890123456
> Attributes:
> User-Name = "testikano at igateway.net"
> Service-Type = Framed-User
> NAS-IP-Address = 203.63.154.1
> NAS-Port = 1234
> Called-Station-Id = "123456789"
> Calling-Station-Id = "987654321"
> NAS-Port-Type = Async
> User-Password =
> "B<5><217><225><0><<225>q<169><174><9><161><7>x<135>!"
>
> Wed Feb 5 19:58:53 2003: DEBUG: Handling request with Handler
> 'Realm=igateway.net'
> Wed Feb 5 19:58:53 2003: DEBUG: Rewrote user name to testikano
> Wed Feb 5 19:58:53 2003: DEBUG: Deleting session for
> testikano at igateway.net, 203.63.154.1, 1234
> Wed Feb 5 19:58:53 2003: DEBUG: Handling with Radius::AuthRODOPI
> Wed Feb 5 19:58:53 2003: DEBUG: Handling with Radius::AuthRODOPI:
> Wed Feb 5 19:58:53 2003: DEBUG: Query is: exec Interface_VircomUsers
> 'testikano'
>
> Wed Feb 5 19:58:53 2003: ERR: Execute failed for 'exec
> Interface_VircomUsers 'testikano'': Server message number=2812
> severity=16
> state=62 line=1 server=BILLINGtext=Could not find stored procedure
> 'Interface_VircomUsers'.
> DBI::db=HASH(0x866c298)->disconnect invalidates 1 active statement
> handle
> (either destroy statement handles or call finish on them before
> disconnecting) at /usr/lib/perl5/site_perl/5.6.1/Radius/SqlDb.pm line
> 273.
> Wed Feb 5 19:58:53 2003: ERR: Execute failed for 'exec
> Interface_VircomUsers 'testikano'': Server message number=2812
> severity=16
> state=62 line=1 server=BILLINGtext=Could not find stored procedure
> 'Interface_VircomUsers'.
> DBI::db=HASH(0x866d2a0)->disconnect invalidates 1 active statement
> handle
> (either destroy statement handles or call finish on them before
> disconnecting) at /usr/lib/perl5/site_perl/5.6.1/Radius/SqlDb.pm line
> 273.
> Wed Feb 5 19:58:53 2003: DEBUG: Radius::AuthRODOPI looks for match
> with
> testikano
> Wed Feb 5 19:58:53 2003: DEBUG: Query is: exec Interface_VircomUsers
> 'DEFAULT'
>
> Wed Feb 5 19:58:53 2003: ERR: Execute failed for 'exec
> Interface_VircomUsers 'DEFAULT'': Server message number=2812
> severity=16
> state=62 line=1 server=BILLINGtext=Could not find stored procedure
> 'Interface_VircomUsers'.
> DBI::db=HASH(0x848bd20)->disconnect invalidates 1 active statement
> handle
> (either destroy statement handles or call finish on them before
> disconnecting) at /usr/lib/perl5/site_perl/5.6.1/Radius/SqlDb.pm line
> 273.
> Wed Feb 5 19:58:53 2003: ERR: Execute failed for 'exec
> Interface_VircomUsers 'DEFAULT'': Server message number=2812
> severity=16
> state=62 line=1 server=BILLINGtext=Could not find stored procedure
> 'Interface_VircomUsers'.
> DBI::db=HASH(0x866d324)->disconnect invalidates 1 active statement
> handle
> (either destroy statement handles or call finish on them before
> disconnecting) at /usr/lib/perl5/site_perl/5.6.1/Radius/SqlDb.pm line
> 273.
> Wed Feb 5 19:58:53 2003: INFO: Access rejected for testikano: No such
> user
> Wed Feb 5 19:58:53 2003: DEBUG: Packet dump:
> *** Sending to 206.142.60.79 port 1062 ....
>
> Packet length = 36
> 03 9d 00 24 d7 6b e4 9a 1b 91 5f 3e 47 7b a2 0e
> 1f c6 52 9f 12 10 52 65 71 75 65 73 74 20 44 65
> 6e 69 65 64
> Code: Access-Reject
> Identifier: 157
> Authentic: 1234567890123456
> Attributes:
> Reply-Message = "Request Denied"
>
> Wed Feb 5 19:58:53 2003: DEBUG: Packet dump:
> *** Received from 206.142.60.79 port 1062 ....
>
> Packet length = 112
> 04 9e 00 70 e8 e3 7c 42 1a f9 bb 3f d4 60 50 8d
> ff c0 45 a7 01 18 74 65 73 74 69 6b 61 6e 6f 40
> 69 67 61 74 65 77 61 79 2e 6e 65 74 06 06 00 00
> 00 02 04 06 cb 3f 9a 01 05 06 00 00 04 d2 3d 06
> 00 00 00 00 2c 0a 30 30 30 30 31 32 33 34 28 06
> 00 00 00 01 1e 0b 31 32 33 34 35 36 37 38 39 1f
> 0b 39 38 37 36 35 34 33 32 31 29 06 00 00 00 00
> Code: Accounting-Request
> Identifier: 158
> Authentic: <232><227>|B<26><249><187>?<212>`P<141><255><192>E<167>
> Attributes:
> User-Name = "testikano at igateway.net"
> Service-Type = Framed-User
> NAS-IP-Address = 203.63.154.1
> NAS-Port = 1234
> NAS-Port-Type = Async
> Acct-Session-Id = "00001234"
> Acct-Status-Type = Start
> Called-Station-Id = "123456789"
> Calling-Station-Id = "987654321"
> Acct-Delay-Time = 0
>
> Wed Feb 5 19:58:53 2003: DEBUG: Handling request with Handler
> 'Realm=igateway.net'
> Wed Feb 5 19:58:53 2003: DEBUG: Rewrote user name to testikano
> Wed Feb 5 19:58:54 2003: DEBUG: Adding session for
> testikano at igateway.net, 203.63.154.1, 1234
> Wed Feb 5 19:58:54 2003: DEBUG: do query is: exec
> Interface_VircomDetails
> '00001234', 'Feb 5, 2003 19:58', 'testikano', '203.63.154.1', 1234,
> 'Framed-User', NULL, NULL, '987654321', NULL,
> 'Start', 0, NULL, NULL, NULL, NULL, NULL, NULL, 'Async', NULL,
> '123456789'
>
> DBI handle cleared whilst still active at
> /usr/lib/perl5/site_perl/5.6.1/Radius/Util.pm line 518.
> DBI Handle has uncleared implementors data at
> /usr/lib/perl5/site_perl/5.6.1/Radius/Util.pm line 518.
> dbih_clearcom (sth 0x84fd7e0 0x84eff80, com 0x867abe8, imp
> DBD::Sybase::st):
> FLAGS 0x113: COMSET IMPSET Warn PrintError
> PARENT DBI::db=HASH(0x84fd6a8)
> KIDS 0 (0 Active)
> IMP_DATA undef
> LongReadLen 32768
> NUM_OF_FIELDS 0
> NUM_OF_PARAMS 0
> Wed Feb 5 19:58:54 2003: ERR: do failed for 'exec
> Interface_VircomDetails
> '00001234', 'Feb 5, 2003 19:58', 'testikano', '203.63.154.1', 1234,
> 'Framed-User', NULL, NULL, '987654321', NULL,
> 'Start', 0, NULL, NULL, NULL, NULL, NULL, NULL, 'Async', NULL,
> '123456789'': Server message number=2812 severity=16 state=62 line=1
> server=BILLINGtext=Could not find stored procedure
> 'Interface_VircomDetails'.
> DBI handle cleared whilst still active at
> /usr/lib/perl5/site_perl/5.6.1/Radius/Util.pm line 518.
> DBI Handle has uncleared implementors data at
> /usr/lib/perl5/site_perl/5.6.1/Radius/Util.pm line 518.
> dbih_clearcom (sth 0x866f3f0 0x86446d0, com 0x8678cf8, imp
> DBD::Sybase::st):
> FLAGS 0x113: COMSET IMPSET Warn PrintError
> PARENT DBI::db=HASH(0x84fd828)
> KIDS 0 (0 Active)
> IMP_DATA undef
> LongReadLen 32768
> NUM_OF_FIELDS 0
> NUM_OF_PARAMS 0
> Wed Feb 5 19:58:54 2003: ERR: do failed for 'exec
> Interface_VircomDetails
> '00001234', 'Feb 5, 2003 19:58', 'testikano', '203.63.154.1', 1234,
> 'Framed-User', NULL, NULL, '987654321', NULL,
> 'Start', 0, NULL, NULL, NULL, NULL, NULL, NULL, 'Async', NULL,
> '123456789'': Server message number=2812 severity=16 state=62 line=1
> server=BILLINGtext=Could not find stored procedure
> 'Interface_VircomDetails'.
> Wed Feb 5 19:58:54 2003: DEBUG: Accounting accepted
> Wed Feb 5 19:58:54 2003: DEBUG: Packet dump:
> *** Sending to 206.142.60.79 port 1062 ....
>
> Packet length = 20
> 05 9e 00 14 1a bb 9b 06 1a cb 02 bc 51 b2 30 a9
> 09 8b fd 92
> Code: Accounting-Response
> Identifier: 158
> Authentic: <232><227>|B<26><249><187>?<212>`P<141><255><192>E<167>
> Attributes:
>
> Wed Feb 5 19:58:54 2003: DEBUG: Packet dump:
> *** Received from 206.142.60.79 port 1062 ....
>
> Packet length = 130
> 04 9f 00 82 04 11 7c 4f 3f a8 e3 41 8b df 76 d1
> 7d 51 82 96 01 18 74 65 73 74 69 6b 61 6e 6f 40
> 69 67 61 74 65 77 61 79 2e 6e 65 74 06 06 00 00
> 00 02 04 06 cb 3f 9a 01 05 06 00 00 04 d2 3d 06
> 00 00 00 00 2c 0a 30 30 30 30 31 32 33 34 28 06
> 00 00 00 02 1e 0b 31 32 33 34 35 36 37 38 39 1f
> 0b 39 38 37 36 35 34 33 32 31 29 06 00 00 00 00
> 2e 06 00 00 03 e8 2a 06 00 00 4e 20 2b 06 00 00
> 75 30
> Code: Accounting-Request
> Identifier: 159
> Authentic: <4><17>|O?<168><227>A<139><223>v<209>}Q<130><150>
> Attributes:
> User-Name = "testikano at igateway.net"
> Service-Type = Framed-User
> NAS-IP-Address = 203.63.154.1
> NAS-Port = 1234
> NAS-Port-Type = Async
> Acct-Session-Id = "00001234"
> Acct-Status-Type = Stop
> Called-Station-Id = "123456789"
> Calling-Station-Id = "987654321"
> Acct-Delay-Time = 0
> Acct-Session-Time = 1000
> Acct-Input-Octets = 20000
> Acct-Output-Octets = 30000
>
> Wed Feb 5 19:58:54 2003: DEBUG: Handling request with Handler
> 'Realm=igateway.net'
> Wed Feb 5 19:58:54 2003: DEBUG: Rewrote user name to testikano
> Wed Feb 5 19:58:54 2003: DEBUG: Deleting session for
> testikano at igateway.net, 203.63.154.1, 1234
> Wed Feb 5 19:58:54 2003: DEBUG: do query is: exec
> Interface_VircomDetails
> '00001234', 'Feb 5, 2003 19:58', 'testikano', '203.63.154.1', 1234,
> 'Framed-User', NULL, NULL, '987654321', NULL,
> 'Stop', 0, 20000, 30000, 1000, NULL, NULL, NULL, 'Async', NULL,
> '123456789'
>
> DBI handle cleared whilst still active at
> /usr/lib/perl5/site_perl/5.6.1/Radius/Util.pm line 518.
> DBI Handle has uncleared implementors data at
> /usr/lib/perl5/site_perl/5.6.1/Radius/Util.pm line 518.
> dbih_clearcom (sth 0x84fd624 0x8644c28, com 0x86789f8, imp
> DBD::Sybase::st):
> FLAGS 0x113: COMSET IMPSET Warn PrintError
> PARENT DBI::db=HASH(0x866d534)
> KIDS 0 (0 Active)
> IMP_DATA undef
> LongReadLen 32768
> NUM_OF_FIELDS 0
> NUM_OF_PARAMS 0
> Wed Feb 5 19:58:54 2003: ERR: do failed for 'exec
> Interface_VircomDetails
> '00001234', 'Feb 5, 2003 19:58', 'testikano', '203.63.154.1', 1234,
> 'Framed-User', NULL, NULL, '987654321', NULL,
> 'Stop', 0, 20000, 30000, 1000, NULL, NULL, NULL, 'Async', NULL,
> '123456789'': Server message number=2812 severity=16 state=62 line=1
> server=BILLINGtext=Could not find stored procedure
> 'Interface_VircomDetails'.
> DBI handle cleared whilst still active at
> /usr/lib/perl5/site_perl/5.6.1/Radius/Util.pm line 518.
> DBI Handle has uncleared implementors data at
> /usr/lib/perl5/site_perl/5.6.1/Radius/Util.pm line 518.
> dbih_clearcom (sth 0x866f468 0x8678de0, com 0x866de38, imp
> DBD::Sybase::st):
> FLAGS 0x113: COMSET IMPSET Warn PrintError
> PARENT DBI::db=HASH(0x866f210)
> KIDS 0 (0 Active)
> IMP_DATA undef
> LongReadLen 32768
> NUM_OF_FIELDS 0
> NUM_OF_PARAMS 0
> Wed Feb 5 19:58:54 2003: ERR: do failed for 'exec
> Interface_VircomDetails
> '00001234', 'Feb 5, 2003 19:58', 'testikano', '203.63.154.1', 1234,
> 'Framed-User', NULL, NULL, '987654321', NULL,
> 'Stop', 0, 20000, 30000, 1000, NULL, NULL, NULL, 'Async', NULL,
> '123456789'': Server message number=2812 severity=16 state=62 line=1
> server=BILLINGtext=Could not find stored procedure
> 'Interface_VircomDetails'.
> Wed Feb 5 19:58:54 2003: DEBUG: Accounting accepted
> Wed Feb 5 19:58:54 2003: DEBUG: Packet dump:
> *** Sending to 206.142.60.79 port 1062 ....
>
> Packet length = 20
> 05 9f 00 14 37 58 7c a9 46 f3 52 16 ba b4 5d 8e
> 26 16 ed da
> Code: Accounting-Response
> Identifier: 159
> Authentic: <4><17>|O?<168><227>A<139><223>v<209>}Q<130><150>
> Attributes:
>
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>
>
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
More information about the radiator
mailing list