(RADIATOR) No Proxy-State Attribute After Max Session Exceeded Reply

[Hugh Irvine]

Hello Lee -

You should test this with Radiator 3.8, which should work correctly.

Please let me know if it doesn't.

regards

Hugh


On 08/01/2004, at 4:56 PM, Lee Webb wrote:

> Hi,
>
> I have noticed that the Proxy-State attribute is not being preserved in
> the Access-Reject after a Max Sessions Exceeded
>
> I was under the impression that Radiator would preserve the Proxy-State
> attribute {from ref.html Radiator automatically copies any Proxy-State
> attribute from the incoming Radius request to the reply}
>
> We are currently running Radiator Ver 2.18.4
>
> Short of writing a hook to put the Proxy-State attribute back in to the
> reply packet, is there a way to make Radiator do it?
>
> Following is a debug dump of the packets:
>
> Thu Jan  8 16:52:11 2004: DEBUG: Packet dump:
> *** Received from 203.194.59.120 port 1812 ....
> Code:       Access-Request
> Identifier: 60
> Authentic:
> c<151><149><209><18><24><213><164>[<219><237><215>H<17><238><244>
> Attributes:
>         Framed-Protocol = PPP
>         CHAP-Password =
> "<2><201><190><151>o<176><187>&<15><5><139>+<239><173><153>~<147>"
>         NAS-Port-Type = Virtual
>         NAS-Port = 2955
>         Calling-Station-Id = "HIDDEN"
>         Service-Type = Framed-User
>         NAS-IP-Address = 203.194.30.201
>         NAS-Identifier = "HIDDEN"
>         User-Name = "FNN at REALM"
>         Proxy-State =
> HIDDEN/ 
> 639795D11218D5A45BDBEDD74811EEF4DAB50998447F6AA9BA485C41C417D45DE549E7C 
> 1447F6F9D718A411090FEDFD41AB619D7AA77729A822B3
> 7B8B67CECAFD57BDF1D714756AC887C1FBDA773EDF89C26935A691B1DF694263AAD
>
> Thu Jan  8 16:52:11 2004: INFO: Access rejected for FNN at REALM:
> MaxSessions exceeded
> Thu Jan  8 16:52:11 2004: DEBUG: Packet dump:
> *** Sending to 203.194.59.120 port 1812 ....
> Code:       Access-Reject
> Identifier: 60
> Authentic:
> c<151><149><209><18><24><213><164>[<219><237><215>H<17><238><244>
> Attributes:
>         Reply-Message = "Request Denied"
>
>
> -- 
> Cheers
> Lee Webb
>
> Systems Administrator
> DOT Communications
> lee at dot.net.au
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>
>

NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.