(RADIATOR) Problems with Colubris CN3000

Hugh Irvine hugh at open.com.au
Thu Jan 16 15:47:40 CST 2003


Salut Denis -

Ca va la vie? Et Bonne Annee!

I suspect the problem below is due to your additions to the dictionary.

Radiator 3.5 already has "Colubris-AVPAIR" defined, so you do not have  
to add anything to the dictionary.

What is happening below is that you have specified "Colubris-AVPair"  
twice, with the second one over-riding the first one, and the second  
one is incorrect (you have specified it as attribute 0 in the RFC  
space).

If you look at a trace 4 debug from Radiator you will see exactly what  
is happening.

I suggest you remove your definitions from the dictionary and just use  
"Colubris-AVPAIR".

A+

Hugues


On Friday, Jan 17, 2003, at 04:01 Australia/Melbourne, Denis Beauchemin  
wrote:

> Hello,
>
> We are testing a Colubris CN3000 802.1x wireless access point and are
> having some problems with it. (see
> http://www.colubris.com/en/products/public_access/CN3000/ for more
> info).
>
> The biggest one is the HTTP URLs that don't seem to be sent to (or
> accepted by) the unit.
>
> Here is what I have in radius.cfg (I am using Radiator 3.5):
> <Client 132.210.X.Y>
>     Secret oursecret
>     Identifier  colubris
> </Client>
> <Handler Client-Identifier=colubris>
>     MaxSessions 1
>     WtmpFileName %L/wtmp
>     AcctLogFileName %L/accounting
> #   PasswordLogFileName %L/password.log
>     <AuthBy DBFILE>
>         AutoMPPEKeys    Yes
>         AddToReply  Service-Type = Framed-User,\
>         MS-MPPE-Encryption-Policy = Encryption-Allowed,\
>         MS-MPPE-Encryption-Types = Encryption-Any,\
>         Framed-Protocol = PPP,\
>         Framed-IP-Netmask = 255.255.255.255,\
>         Framed-Routing = None,\
>         Framed-MTU = 1500,\
>         Colubris-AVPair =  
> "login-url=https://somewhere.USherbrooke.ca:8443/java/colubris/ 
> login.jsp?loginurl=%l",\
>         Colubris-AVPair =  
> "session-page=https://somewhere.USherbrooke.ca:8443/java/colubris/ 
> session.html",\
>         Colubris-AVPair =  
> "transport-page=https://somewhere.USherbrooke.ca:8443/java/colubris/ 
> transport.html",\
>         Colubris-AVPair =  
> "fail-page=https://somewhere.USherbrooke.ca:8443/java/colubris/ 
> fail.html",\
>         Colubris-AVPair =  
> "logo=https://somewhere.USherbrooke.ca:8443/java/colubris/logo.gif",\
>         Colubris-AVPair =  
> "access-list=carrefour,ACCEPT,tcp,132.210.X.Y,8443",\
>         Colubris-AVPair =  
> "access-list=carrefour,ACCEPT,tcp,132.210.X.Y,80"
>         Filename %D/usersdb
>         RcryptKey our key
>     </AuthBy>
>     AuthLog Defaut
> </Handler>
>
> This is what I added to dictionary:
> VENDOR     Colubris    8744
> VENDORATTR    8744   Colubris-AVPair   0   string
> ATTRIBUTE            Colubris-AVPair   0   string
>
> The Colubris-AVPair don't seem to get to the CN3000 when it logs on.
>
> Any ideas?  I'm pretty sure I made a mistake in one of Radiator's conf
> files.
>
> Thanks!
> -- 
> Denis Beauchemin, analyste
> Université de Sherbrooke, S.T.I.
> T: 819.821.8000x2252 F: 819.821.8045
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>
>

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list