(RADIATOR) tigris and Accounting-Request

[Hugh Irvine]

Hello Adam -

This looks very much to me like a NAS bug.

If you are not using a session database at all, you can set up the 
following:

# define NULL session database

<SessionDatabase NULL>
	Identifier NULLSDB
</SessionDatabase>

And you could also set up a special Handler to catch these requests:

# define Handler for Accounting-On

<Handler Acct-Status-Type = Accounting-On>
	....
</Handler>

<Handler Request-Type = Accounting-Request>
	....
</Handler>

.....

regards

Hugh


On Monday, Mar 31, 2003, at 23:53 Australia/Melbourne, Adam Pogorzelski 
wrote:

> Hi,
> I got strage problem with radiator 3.5 and tigris with 12.3.1.15 
> firmware.
> Tigris is sending me Accounting-Requests with Nas-Reload many times 
> with
> the same acct-session-id, and after that radiator wants to delete all
> sessions which belongs to this NAS.
> I dont know if its tigris bug or feature.
> After every packet from NAS radiator sending response:
> ------
> *** Received from aaa.bbb.ccc.ddd port 8002 ....
>
> Packet length = 72
> 04 10 00 48 67 ba bd 00 36 ea 02 ab 3c 72 ff e5
> 17 b6 11 d3 04 06 3e 1d ff d2 28 06 00 00 00 07
> 29 06 00 00 06 4c 2c 16 30 33 30 33 33 31 2e 31
> 33 34 35 35 35 2e 30 30 30 30 30 30 1a 0c 00 00
> 00 05 15 06 00 00 00 01
> Code:       Accounting-Request
> Identifier: 16
> Authentic:  g<186><189><0>6<234><2><171><r<255><229><23><182><17><211>
> Attributes:
>         NAS-IP-Address = aaa.bbb.ccc.ddd
>         Acct-Status-Type = Accounting-On
>         Acct-Delay-Time = 1612
>         Acct-Session-Id = "030331.134555.000000"
>         Acc-Acct-On-Off-Reason = NAS-Reload
>
> Mon Mar 31 15:13:38 2003: DEBUG: Handling request with Handler
> 'Request-Type = Accounting-Request'
> Mon Mar 31 15:13:38 2003: DEBUG:  Deleting all sessions for 
> aaa.bbb.ccc.ddd
> Mon Mar 31 15:13:38 2003: DEBUG: Handling with AuthINTERNAL:
> AccountingResponse
> Mon Mar 31 15:13:38 2003: DEBUG: Accounting accepted
> Mon Mar 31 15:13:38 2003: DEBUG: Packet dump:
> *** Sending to 62.29.255.210 port 8002 ....
>
> Packet length = 20
> 05 10 00 14 e5 03 dd 84 1d f0 9a 3a c8 84 51 7e
> 24 0c ea df
> Code:       Accounting-Response
> Identifier: 16
> Authentic:  g<186><189><0>6<234><2><171><r<255><229><23><182><17><211>
> Attributes:
> -----
>
> Here my config:
>
> <Client aaa.bbb.ccc.ddd>
>         NasType TigrisNew
>         Secret abcdabcd
> </Client>
> and Handler:
>
> <AuthBy INTERNAL>
>   Identifier AccountingResponse
>   AcctResult ACCEPT
> </AuthBy>
>
>    # define Handlers
> <Handler Request-Type = Accounting-Request>
>   AuthBy AccountingResponse
>         AcctLogFileName ./detail
> </Handler>
>
> I got 12 tigrises and all of them are doing the same.
> And not only NAS-Reloads/resets, but Acc-Acct-On-Off-Reason = Enabled 
> and
> so.
> I've checked freeradius and it looks that he got somenthing that
> recognizes packets with same session-id and somehow knows that
> NAS-reloaded many seconds ago and he doing nothing. Or if packets is 
> seen
> first time, updating session database.
> I've informed ericsson too so i am waiting for additional info.
> Best Regards
>
> ----
> A.P. <kwaz at intelcom.pl>
> UNIX/Linux system administrator
>
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>
>

NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.