(RADIATOR) help with missing attributes in reply

Hugh Irvine hugh at open.com.au
Thu Jul 14 19:25:23 CDT 2005


Hello Tu Nguyen -

We will need to see your configuration file (no secrets) together  
with a complete trace 4 debug showing what is happening in the two  
cases.

However, I have been doing some testing here are there are a number  
of problems in your users file.

Here is what works correctly:


DEFAULT         Called-Station-Id = "xxx2880", Time = "Al1001-0200",  
Simultaneous-Use = 1, Auth-Type = "uidauthent"
                 Session-Timeout = "3600",
                 Service-Type = Framed-User,
                 Framed-Protocol = PPP,
                 Reply-Message = "xxx-2880:Permission granted"

DEFAULT         Called-Station-Id = "xxx9935",Simultaneous-Use = "1",  
Auth-Type = "uidauthent"
                 Session-Timeout = "900",
                 Service-Type = Framed-User,
                 Framed-Protocol = PPP,
                 Reply-Message = "xxx-9935:Permission granted"

Note that all check items _must_ be on the first line, and the reply  
items _must_ be on the second and succeeding lines.

Hope that helps.

regards

Hugh


On 15 Jul 2005, at 08:21, Tu Nguyen wrote:

> Hi All:
>  I have a very simply radius.cfg configuration. Users can dial two  
> numbers
> and each number will have a different session time out. When I dial  
> one number,
> I have the correct attributes returned but no attributes are seen
> when I dial the other. Attached are the user profile and the traces.
>   Can anyone help?
> Thanks in advance.
>
> Tu Nguyen
> nguyen at ucalgary.ca
>
>
>
>
> 1. Below is my users file:
>
> DEFAULT         Auth-Type = "uidauthent",
>                 Called-Station-Id = "xxx2880",
>                 Time = "Al1001-0200",
>                 Simultaneous-Use = "1"
>
>                 Session-Timeout = "3600",
>                 Fall-Through = "Yes",
>                 Service-Type = Framed-User,
>                 Framed-Protocol = PPP,
>                 Reply-Message = "xxx-2880:Permission granted"
>
> DEFAULT         Auth-Type = "uidauthent",
>                 Called-Station-Id = "xxx9935",
>                 Simultaneous-Use = "1"
>
>                 Session-Timeout = "900",
>                 Fall-Through = "Yes",
>                 Service-Type = Framed-User,
>                 Framed-Protocol = PPP,
>                 Reply-Message = "xxx-9935:Permission granted"
>
> 2. Below is log.radiusd
> #######################
>
> ########## when dialing xxx2880, the attribues are replied
> ...
> ...
> Attributes:
>         NAS-IP-Address = aaa.bbb.123.2
>         NAS-Port = 143
>         Cisco-NAS-Port = "Async143*Serial4:20"
>         NAS-Port-Type = Async
>         User-Name = "aaabbbccc"
>         Called-Station-Id = "xxx2880"
>         Calling-Station-Id = "xxxaaabbbb"
>         User-Password = "<194><20><172>)<22>] 
> *5<218><194><31>zfs<240>X"
>         Service-Type = Framed-User
>         Framed-Protocol = PPP
> ...
> ...
> ...
> ######### when dial xxx9935, no attributes are sent.
>
>
> *** Sending to 216.123.198.242 port 36868 ....
> Code:       Access-Accept
> Identifier: 154
> Authentic:  <132><129>e<212><172><22><251>R*<150><153><130>`DDR
> Attributes:
>            nothing here
>            ^^^^^^^^^^^^^^
> ...
> ...
>
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>


NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/ 
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.


--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list