(RADIATOR) No Proxy-State Attribute After Max Session Exceeded Reply

Lee Webb lee at dot.net.au
Wed Jan 7 23:56:26 CST 2004


Hi,

I have noticed that the Proxy-State attribute is not being preserved in
the Access-Reject after a Max Sessions Exceeded

I was under the impression that Radiator would preserve the Proxy-State
attribute {from ref.html Radiator automatically copies any Proxy-State
attribute from the incoming Radius request to the reply}

We are currently running Radiator Ver 2.18.4

Short of writing a hook to put the Proxy-State attribute back in to the
reply packet, is there a way to make Radiator do it? 

Following is a debug dump of the packets:

Thu Jan  8 16:52:11 2004: DEBUG: Packet dump:
*** Received from 203.194.59.120 port 1812 ....
Code:       Access-Request
Identifier: 60
Authentic: 
c<151><149><209><18><24><213><164>[<219><237><215>H<17><238><244>
Attributes:
        Framed-Protocol = PPP
        CHAP-Password =
"<2><201><190><151>o<176><187>&<15><5><139>+<239><173><153>~<147>"
        NAS-Port-Type = Virtual
        NAS-Port = 2955
        Calling-Station-Id = "HIDDEN"
        Service-Type = Framed-User
        NAS-IP-Address = 203.194.30.201
        NAS-Identifier = "HIDDEN"
        User-Name = "FNN at REALM"
        Proxy-State =
HIDDEN/639795D11218D5A45BDBEDD74811EEF4DAB50998447F6AA9BA485C41C417D45DE549E7C1447F6F9D718A411090FEDFD41AB619D7AA77729A822B3
7B8B67CECAFD57BDF1D714756AC887C1FBDA773EDF89C26935A691B1DF694263AAD

Thu Jan  8 16:52:11 2004: INFO: Access rejected for FNN at REALM:
MaxSessions exceeded
Thu Jan  8 16:52:11 2004: DEBUG: Packet dump:
*** Sending to 203.194.59.120 port 1812 ....
Code:       Access-Reject
Identifier: 60
Authentic: 
c<151><149><209><18><24><213><164>[<219><237><215>H<17><238><244>
Attributes:
        Reply-Message = "Request Denied"


-- 
Cheers
Lee Webb

Systems Administrator
DOT Communications
lee at dot.net.au

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list