(RADIATOR) Using UseExtendedId

Thu Jun 19 04:07:31 CDT 2003

Hello Martin,

RFC 2865 clearly specifies the behaviour in case a request contains
Proxy-State. So not returning Proxy-State correctly is a violation of the
RFC. Sometimes things go wrong when requests are proxied twice with each
proxy adding Proxy-State. But the RFC covers this as well.

Met vriendelijke groet,
Hylke Zuidema
Developmentmanager
KPN - Internet Operator
Tel: +31 70 451 33 70

-----Oorspronkelijk bericht-----
Van: Martin Edge [mailto:martinedge at kbs.net.au]
Verzonden: donderdag 19 juni 2003 10:14
Aan: 'Hugh Irvine'
CC: mikem at open.com.au; radiator at open.com.au
Onderwerp: RE: (RADIATOR) Using UseExtendedId

Have 1 instance of MacRadius, one of ICRadius 0.18, one X-Radius 1.2.1
which I've never heard of.

-----Original Message-----
From: owner-radiator at open.com.au [mailto:owner-radiator at open.com.au] On
Behalf Of Martin Edge
Sent: Thursday, 19 June 2003 5:31 PM
To: 'Hugh Irvine'
Cc: mikem at open.com.au; radiator at open.com.au
Subject: RE: (RADIATOR) Using UseExtendedId

I'll see I can find out which products these customers are using..

(pretty sure it's not Radiator)

Thanks
Martin

____________________________________________
Martin Edge 
Senior Applications Engineer 
medge at kbs.net.au 
KBS Internet Pty Ltd 
Phone: 1300 302 134 
Phone: +61 3 9868 9999 
Fax: +61 3 9868 9900 
www.kbs.net.au 

Level 9
432 St Kilda Rd
Melbourne VIC 3004 
____________________________________________

NOTICE - This message contains information intended only for the use of
the addressee named above. It may also be confidential and/or
privileged. If you are not the intended recipient of this message you
are hereby notified that you must not disseminate, copy or take any
action in reliance on it. If you have received this message in error
please notify. 

-----Original Message-----
From: owner-radiator at open.com.au [mailto:owner-radiator at open.com.au] On
Behalf Of Hugh Irvine
Sent: Thursday, 19 June 2003 5:12 PM
To: Martin Edge
Cc: mikem at open.com.au; radiator at open.com.au
Subject: Re: (RADIATOR) Using UseExtendedId

Hello Martin -

Not returning a Proxy-State attribute is quite broken behaviour.

regards

Hugh

On Thursday, Jun 19, 2003, at 17:00 Australia/Melbourne, Martin Edge 
wrote:

> Hi Hugh,
>
> It appears they are not responding with the Proxy-State attribute, 
> therefore our RADIUS system is coming up unknown reply to packet.
>
> For instance:
> Thu Jun 19 16:47:47 2003: WARNING: Unknown reply received in
AuthRADIUS
> for request 239 from 203.30.19.248:1846
> Thu Jun 19 16:47:47 2003: WARNING: Unknown reply received in
AuthRADIUS
> for request 240 from 203.30.19.248:1846
> Thu Jun 19 16:47:50 2003: WARNING: Unknown reply received in
AuthRADIUS
> for request 241 from 203.30.19.248:1846
> Thu Jun 19 16:47:50 2003: WARNING: Unknown reply received in
AuthRADIUS
> for request 241 from 202.71.168.62:1846
> Thu Jun 19 16:47:53 2003: WARNING: Unknown reply received in
AuthRADIUS
> for request 242 from 202.71.168.62:1846
> Thu Jun 19 16:47:55 2003: WARNING: Unknown reply received in
AuthRADIUS
> for request 242 from 203.30.19.248:1846
> Thu Jun 19 16:47:55 2003: WARNING: Unknown reply received in
AuthRADIUS
> for request 243 from 202.71.168.62:1846
> Thu Jun 19 16:47:58 2003: WARNING: Unknown reply received in
AuthRADIUS
> for request 243 from 203.30.19.248:1846
> Thu Jun 19 16:48:00 2003: WARNING: Unknown reply received in
AuthRADIUS
> for request 244 from 203.30.19.248:1846
>
> *** Sending to 202.4.30.2 port 1646 ....
> Code:       Accounting-Request
> Identifier: 74
> Authentic:  <0><0><0><0><0><0><0><0><0><0><0><0><0><0><0><0>
> Attributes:
>         Acct-Session-Id = "00002F85"
>         Framed-Protocol = PPP
>         Framed-IP-Address = 203.194.16.52
>         Ascend-Connect-Progress = prLanSessionUp
>         Acct-Authentic = RADIUS
>         Acct-Status-Type = Start
>         Calling-Station-Id = "XXXXXXX"
>         Called-Station-Id = "XXXXXXX"
>         NAS-Port-Type = Async
>         NAS-Port = 7393
>         Service-Type = Framed-User
>         NAS-IP-Address = 203.194.30.8
>         Ascend-Session-Svr-Key = "XXXXXXX"
>         NAS-Identifier = "ACC08-XXXXXX"
>         Acct-Delay-Time = 0
>         User-Name = "XXXXX"
>         Timestamp = 1056005873
>         Proxy-State = OSC-Extended-Id=330
>
> Thu Jun 19 16:57:53 2003: DEBUG: Accounting accepted
>
> Thu Jun 19 16:57:53 2003: DEBUG: Packet dump:
> *** Received from 202.4.30.2 port 1646 ....
> Code:       Accounting-Response
> Identifier: 74
> Authentic:  <181><156>NP<130>;{`<21><226>+{U<133><140><6>
> Attributes:
>
> Thu Jun 19 16:57:53 2003: WARNING: Unknown reply received in
AuthRADIUS
> for request 74 from 202.4.30.2:1646
>
> Thanks
> Martin
>
>
> ____________________________________________
> Martin Edge
> Senior Applications Engineer
> medge at kbs.net.au
> KBS Internet Pty Ltd
> Phone: 1300 302 134
> Phone: +61 3 9868 9999
> Fax: +61 3 9868 9900
> www.kbs.net.au
>
> Level 9
> 432 St Kilda Rd
> Melbourne VIC 3004
>
> NOTICE - This message contains information intended only for the use
of
> the addressee named above. It may also be confidential and/or 
> privileged. If you are not the intended recipient of this message you 
> are hereby notified that you must not disseminate, copy or take any 
> action in reliance on it. If you have received this message in error 
> please notify.
>
>
>
>
>
> -----Original Message-----
> From: Hugh Irvine [mailto:hugh at open.com.au]
> Sent: Thursday, 19 June 2003 4:38 PM
> To: Martin Edge; mikem at open.com.au
> Cc: radiator at open.com.au
> Subject: Re: (RADIATOR) Using UseExtendedId
>
>
>
> Hello Martin -
>
> I am curious to know what the problem is with these customers? What 
> exactly do they not support?
>
> I have copied Mike on this mail so he can answer the per-host use of 
> UseExtendedId.
>
> regards
>
> Hugh
>
>
> On Thursday, Jun 19, 2003, at 16:23 Australia/Melbourne, Martin Edge
> wrote:
>
>
> Hey Guys,
>
> Having a few issues after implementing UseExtendedId in our network, 
> much like your documentation suggests, it all works fine except when
we
> have a customer that doesn't support it within their RADIUS system.
>
> Do you know whether UseExtendedId will work as a row returned within 
> SQLRADIUS? 0 or blank for dont use, 1 for use it?
>
> Thanks
> Martin
>
> ____________________________________________
> Martin Edge
> Senior Applications Engineer
> medge at kbs.net.au
> KBS Internet Pty Ltd
> Phone: 1300 302 134
> Phone: +61 3 9868 9999
> Fax: +61 3 9868 9900
> www.kbs.net.au
>
> <image.tiff>
>
>
> NOTICE - This message contains information intended only for the use
of
> the addressee named above. It may also be confidential and/or 
> privileged. If you are not the intended recipient of this message you 
> are hereby notified that you must not disseminate, copy or take any 
> action in reliance on it. If you have received this message in error 
> please notify.
>
>
>
>
>
>
>
>
> NB: have you included a copy of your configuration file (no secrets), 
> together with a trace 4 debug showing what is happening?
>
> --
> Radiator: the most portable, flexible and configurable RADIUS server
> anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
> -
> Nets: internetwork inventory and management - graphical, extensible,
> flexible with hardware, software, platform and database independence.
>
>

NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.