(RADIATOR) Can't Install Digest::MD5
MJ
php at cyberia.net.sa
Tue Jun 15 09:44:10 CDT 2004
Hi,
I created new cfg file exactly same as per your example but I am getting following error, while I am connecting from second NAS (which appear 2nd in cfg file). It works fine if I connect from first NAS (which appears), I tried to change order of NASes in the cfg file, it always works fine with first client set. Any idea?
MJ
*** Received from 212.119.67.23 port 1645 ....
Code: Access-Request
Identifier: 77
Authentic: <225>p<227>[c<138><130>s<131><190><250><227><171><156>D<242>
Attributes:
Framed-Protocol = PPP
User-Name = "roaming"
User-Password = "f<25><160><231><211>u<18><176>D<165><158>6<0>!I<166>"
NAS-Port-Type = Virtual
NAS-Port = 80
Calling-Station-Id = "14647114"
Called-Station-Id = "3010"
Service-Type = Framed-User
NAS-IP-Address = 212.119.67.23
Tue Jun 15 16:49:37 2004: WARNING: Could not find a handler for roaming: request is ignored
----- Original Message -----
From: "Hugh Irvine" <hugh at open.com.au>
To: "MJ" <php at cyberia.net.sa>
Cc: <radiator at open.com.au>; <elias at tmnet.com.my>; "Stefan Riegelnik" <sriegelnik at netway.at>
Sent: Monday, June 14, 2004 6:17 PM
Subject: Re: (RADIATOR) Can't Install Digest::MD5
Hello MJ -
You configuration file should contain _only_ the two Handlers, not the
Realm DEFAULT, as shown in my example.
Ie:
Foreground
LogStdout
LogDir .
DbDir .
Trace 4
<Client 212.119.67.21>
Secret cisco
Identifier dialup
DupInterval 0
</Client>
<Client 212.119.67.22>
Secret cisco
Identifier roaming
DupInterval 0
</Client>
<Handler Client-Identifier=dialup>
<AuthBy FILE>
Filename ./dialup
</AuthBy>
</Handler>
<Handler Client-Indentifier=roaming>
<AuthBy FILE>
Filename ./roaming
</AuthBy>
</Handler>
regards
Hugh
On 14 Jun 2004, at 16:34, MJ wrote:
> Hi,
> As per your and Stefan's suggestions, I tried with following two cfg
> files, but both attempts were unsuffeccfull. My objective is that we
> have two category of users. One is "dialup" and second is "roaming".
> Both categories will be comming using different NAS (different IP) and
> we want both categories of users should be authorized using two
> different files. We don't want our users to change their username
> (realm) when they connect as romaing users (while they travel). Please
> help.
> MJ
>
> ================= First Attempt CFG File Start ===================
> Foreground
> LogStdout
> LogDir .
> DbDir .
> Trace 4
>
> <Client 212.119.67.21>
> Secret cisco
> Identifier dialup
> DupInterval 0
> </Client>
>
> <Client 212.119.67.22>
> Secret cisco
> Identifier roaming
> DupInterval 0
> </Client>
> <Handler Client-Identifier=dialup>
> <AuthBy FILE>
> Filename ./dialup
> </AuthBy>
> </Handler>
> <Handler Client-Indentifier=roaming>
> <AuthBy FILE>
> Filename ./roaming
> </AuthBy>
> </Handler>
> <Realm DEFAULT>
> <AuthBy FILE>
> Filename ./users
> </AuthBy>
> AcctLogFileName ./detail
> </Realm>
> ================= First Attempt CFG File End ===================
>
> ================= Second Attempt CFG File Start ===================
> Foreground
> LogStdout
> LogDir .
> DbDir .
> Trace 4
>
> <Client 212.119.67.21>
> Secret cisco
> <AuthBy FILE>
> Filename ./dialup
> </AuthBy>
> DupInterval 0
> </Client>
>
> <Client 212.119.67.22>
> Secret cisco
> <AuthBy FILE>
> Filename ./roaming
> </AuthBy>
> DupInterval 0
> </Client>
> <Realm DEFAULT>
> <AuthBy FILE>
> Filename ./users
> </AuthBy>
> AcctLogFileName ./detail
> </Realm>
> ================= Second Attempt CFG File End ===================
>
> ----- Original Message -----
> From: "Hugh Irvine" <hugh at open.com.au>
> To: "MJ" <php at cyberia.net.sa>
> Cc: <radiator at open.com.au>; <elias at tmnet.com.my>; "Stefan Riegelnik"
> <sriegelnik at netway.at>
> Sent: Sunday, June 13, 2004 6:21 PM
> Subject: Re: (RADIATOR) Can't Install Digest::MD5
>
> >
> > Hello MJ -
> >
> > You can do something like this:
> >
> > <Client 1.1.1.1>
> > Identifier SomethingMeaningful
> > ......
> > </Client>
> >
> > <Client 2.2.2.2>
> > Identifier SomethingElse
> > .....
> > </Client>
> >
> > .....
> >
> > <Handler Client-Identifier = SomethingMeaningful>
> > # process requests for this NAS(s)
> > ......
> > </Handler>
> >
> > <Handler Client-Identifier = SomethingElse>
> > # process requests for this NAS(s)
> > ......
> > </Handler>
> >
> > .....
> >
> > regards
> >
> > Hugh
> >
> >
> > On 13 Jun 2004, at 16:30, MJ wrote:
> >
> > > Sorry, It was my mistake, I was using a username which was not in
> the
> > > users
> > > file. Now I have a running radius server with simple.cfg.
> > > Now I want to setup my radius in a way that it can receive request
> > > from two
> > > different NAS, both the NAS should use different users file because
> > > both
> > > have different set of users, how I can achieve this. Please help.
> Also
> > > I am
> > > confused about "Realm", can you tell me what is the meaning of
> Realm,
> > > sorry
> > > for the silly questions.
> > >
> > > MJ.
> >
> >
> > NB: have you included a copy of your configuration file (no secrets),
> > together with a trace 4 debug showing what is happening?
> >
> > --
> > Radiator: the most portable, flexible and configurable RADIUS server
> > anywhere. Available on *NIX, *BSD, Windows, MacOS X.
> > -
> > Nets: internetwork inventory and management - graphical, extensible,
> > flexible with hardware, software, platform and database independence.
> > -
> > CATool: Private Certificate Authority for Unix and Unix-like systems.
> >
> > --
> > Archive at http://www.open.com.au/archives/radiator/
> > Announcements on radiator-announce at open.com.au
> > To unsubscribe, email 'majordomo at open.com.au' with
> > 'unsubscribe radiator' in the body of the message.
> >
NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.
NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.
--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.open.com.au/pipermail/radiator/attachments/20040615/c5fa5c20/attachment.html>
More information about the radiator
mailing list