(RADIATOR) Re: Calling-Station-Id and Called-Station-Id

Hugh Irvine hugh at open.com.au
Mon Mar 8 16:11:43 CST 2004


Hello Deden -

Thanks for sending the configuration and the debug log.

The log shows that there is no Called-Station-Id or Calling-Station-Id  
in the radius request received by Radiator, therefore there is nothing  
to put in the database. You will need to check with your vendor to see  
how to configure the NAS to send these attributes.

>
> Mon Mar  8 16:01:42 2004: DEBUG: Packet dump:
> *** Received from 202.80.208.4 port 1026 ....
> Code:       Accounting-Request
> Identifier: 32
> Authentic:   
> <223><19><25><214>.<22><190><143><244><210><160>J<138><127><192>{
> Attributes:
>        Acct-Session-Id = "0500004D"
>        User-Name = "ana_aja"
>        NAS-IP-Address = xxx
>        NAS-Port = 13
>        NAS-Port-Type = Async
>        Acct-Status-Type = Stop
>        Acct-Session-Time = 1486
>        Acct-Authentic = RADIUS
>        Acct-Input-Octets = 30497
>        Acct-Output-Octets = 149342
>        Acct-Terminate-Cause = Lost-Carrier
>        Service-Type = Framed-User
>        Framed-Protocol = PPP
>        Framed-IP-Address = xxx
>        Acct-Delay-Time = 0


regards

Hugh


On 8 Mar 2004, at 21:13, deden purnamahadi wrote:

> I tried to configure Radiator to log caller number and dialled number  
> (based on mailing list archive). It didn't work.
> Attached is the conf file and log file.
> Anyone can help ?
>
>
> _ddn__
>
>
> # topnet_radius.cfg
>
> Foreground
> LogStdout
> LogDir          /usr/local/src/Radiator-3.7/log
> DbDir           .
> #DbDir          /usr/local/srd/Radiator-3.7/raddb
> AuthPort        1645
> AcctPort        1646
> Trace           4
>
> # You will probably want to add other Clients to suit your site.
> <Client xxxx>
>        Secret  xxxx
>        AddToRequest %{Class}
>        DupInterval 0
>        NasType livingston
> </Client>
>
> <Realm DEFAULT>
>        AuthByPolicy    ContinueAlways
>        RewriteUsername s/^([^@]+).*/$1/
> #       AcctLogFileName %L/details
>
>
> <AuthBy SQL>
> #do the accounting but not authentication
>        AuthSelect
>        DBSource        dbi:Pg:dbname=radiator;host=z.z.z.z.
>        DBUsername      post
>        DBAuth          post
>        AccountingTable accounting
>        AcctColumnDef   username,User-Name
>        AcctColumnDef    
> time_stamp,Timestamp,formatted-date,to_timestamp \
>        ('%e %m %Y %H:%M:%S', 'DD MM YYYY HH24:MI:SS')
>        AcctColumnDef   acctstatustype,Acct-Status-Type
>        AcctColumnDef   acctdelaytime,Acct-Delay-Time,integer
>        AcctColumnDef   acctinputoctets,Acct-Input-Octets,integer
>        AcctColumnDef   acctoutputoctets,Acct-Output-Octets,integer
>        AcctColumnDef   acctsessionid,Acct-Session-Id
>        AcctColumnDef   acctsessiontime,Acct-Session-Time,integer
>        AcctColumnDef   acctterminatecause,Acct-Terminate-Cause
>        AcctColumnDef   nasidentifier,NAS-Identifier
>        AcctColumnDef   nasport,NAS-Port,integer
> AcctColumnDef   nasport,NAS-Port,integer
>        AcctColumnDef   frameipaddress,Framed-IP-Address
>        AcctColumnDef   userrequest,User-Request
>        AcctColumnDef   callingid,Calling-Station-Id
>        AcctColumnDef   calledid,Called-Station-Id
>        AcctFailedLogFileName %D/missedaccounting
>
> </AuthBy>
>
>
> <AuthBy LDAP2>
> #do the authentication only
>                NoDefault
>                Version         3
>                Host            mail
>                Port            389
>                AuthDN          cn=root,o=isp,c=ID
>                AuthPassword    secret
>                BaseDN          o=isp,c=ID
>                UsernameAttr    uid
>                PasswordAttr    userPassword
>                #AuthAttrDef    servicetype,Service-Type,check
>                #AuthAttrDef    address,Frame-IP-Address,reply
>                AddToReply      Framed-Protocol = PPP,\
>                      Framed-IP-Netmask = 255.255.255.255,\
>                      Framed-Routing = None,\
>                      Framed-MTU = 1500,\
>                      Framed-Compression = Van-Jacobson-TCP-IP
>                AddToReply Class = "Calling-Station-Id =  
> %{Calling-Station-Id},\
>                                        Called-Station-Id =  
> %{Called-Station-Id}"
>
> </AuthBy>
>
>
> </Realm>
>
> Logfile
>
> Mon Mar  8 16:01:42 2004: DEBUG: Packet dump:
> *** Received from 202.80.208.4 port 1026 ....
> Code:       Accounting-Request
> Identifier: 32
> Authentic:   
> <223><19><25><214>.<22><190><143><244><210><160>J<138><127><192>{
> Attributes:
>        Acct-Session-Id = "0500004D"
>        User-Name = "ana_aja"
>        NAS-IP-Address = xxx
>        NAS-Port = 13
>        NAS-Port-Type = Async
>        Acct-Status-Type = Stop
>        Acct-Session-Time = 1486
>        Acct-Authentic = RADIUS
>        Acct-Input-Octets = 30497
>        Acct-Output-Octets = 149342
>        Acct-Terminate-Cause = Lost-Carrier
>        Service-Type = Framed-User
>        Framed-Protocol = PPP
>        Framed-IP-Address = xxx
>        Acct-Delay-Time = 0
>
> Mon Mar  8 16:01:42 2004: DEBUG: Handling request with Handler  
> 'Realm=DEFAULT'
> Mon Mar  8 16:01:42 2004: DEBUG: Rewrote user name to ana_aja
> Mon Mar  8 16:01:42 2004: DEBUG:  Deleting session for ana_aja, xxx, 13
> Mon Mar  8 16:01:42 2004: DEBUG: Handling with Radius::AuthSQL
> Mon Mar  8 16:01:42 2004: DEBUG: Handling accounting with  
> Radius::AuthSQL
> Mon Mar  8 16:01:42 2004: DEBUG: do query is: 'insert into accounting  
> (acctdelaytime,acctinputoctets,acctoutputoctets,acctsess
> ionid,acctsessiontime,acctstatustype,acctterminatecause,frameipaddress, 
> nasport,time_stamp,username) values (0,30497,149342,'05
> 00004D',1486,'Stop','Lost-Carrier','xxx',13,to_timestamp (' 8 03 2004  
> 16:01:42', 'DD MM YYYY HH24:MI:SS'),'ana_aja')
> ':
>
> Mon Mar  8 16:01:42 2004: DEBUG: Handling with Radius::AuthLDAP2:
> Mon Mar  8 16:01:42 2004: DEBUG: Accounting accepted
> Mon Mar  8 16:01:42 2004: DEBUG: Packet dump:
> *** Sending to 202.80.208.4 port 1026 ....
> Code:       Accounting-Response
> Identifier: 32
> Authentic:   
> <223><19><25><214>.<22><190><143><244><210><160>J<138><127><192>{
> Attributes:
>
> Code:       Access-Request
> Identifier: 33
> Authentic:  <131><220>y<234><18>a<132><5><19>H<207>GS#^<8>
> Attributes:
>        User-Name = "ana_aja"
>        User-Password = "<203><153><237>e<218><1><243><192>^p<28><179>  
> w?<211>"
>        NAS-IP-Address = xxxx
>        NAS-Port = 18
>        NAS-Port-Type = Async
>        Service-Type = Framed-User
>        Framed-Protocol = PPP
>
> Mon Mar  8 16:11:12 2004: DEBUG: Handling request with Handler  
> 'Realm=DEFAULT'
> Mon Mar  8 16:11:12 2004: DEBUG: Rewrote user name to ana_aja
> Mon Mar  8 16:11:12 2004: DEBUG:  Deleting session for ana_aja, xxx, 18
> Mon Mar  8 16:11:12 2004: DEBUG: Handling with Radius::AuthSQL
> Mon Mar  8 16:11:12 2004: DEBUG: Handling with Radius::AuthLDAP2:
> Mon Mar  8 16:11:12 2004: INFO: Connecting to mail, port 389
> Mon Mar  8 16:11:12 2004: INFO: Attempting to bind to LDAP server  
> mail:389)
> Mon Mar  8 16:11:12 2004: DEBUG: LDAP got result for  
> uid=ana_aja,ou=isp,o=xxx,c=ID
> Mon Mar  8 16:11:12 2004: DEBUG: LDAP got userPassword:  
> {MD5}QcI2qxZUi8WZFRn+OliKWg==
> Mon Mar  8 16:11:12 2004: DEBUG: Radius::AuthLDAP2 looks for match  
> with ana_aja
> Mon Mar  8 16:11:12 2004: DEBUG: Radius::AuthLDAP2 ACCEPT:
> Mon Mar  8 16:11:12 2004: ERR: Bad attribute=value pair:  
> Framed-Protocol = PPP,Framed-IP-Netmask = 255.255.255.255,Framed-Rout
> ing = None,Framed-MTU = 1500,Framed-Compression = Van-Jacobson-TCP-IP
> Mon Mar  8 16:11:12 2004: DEBUG: Access accepted for ana_aja
> Mon Mar  8 16:11:12 2004: DEBUG: Packet dump:
> *** Sending to 202.80.208.4 port 1026 ....
> Code:       Access-Accept
> Identifier: 33
> Authentic:  <131><220>y<234><18>a<132><5><19>H<207>GS#^<8>
> Attributes:
>
> _________________________________________________________________
> Help STOP SPAM with the new MSN 8 and get 2 months FREE*   
> http://join.msn.com/?page=features/junkmail
>
>

NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.

--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list