(RADIATOR) Nomadix Problem
Hugh Irvine
hugh at open.com.au
Thu Sep 22 19:20:35 CDT 2005
Hello Anton -
Thanks very much for this information.
BTW - here is the list of Nomadix VSA's that we have currently in the
Radiator dictionary - are there any more that we should know about?
#
# Nomadix vendor sepecific
#
VENDORATTR 3309 Nomadix-Bw-Up 1 integer
VENDORATTR 3309 Nomadix-Bw-Down 2 integer
VENDORATTR 3309 Nomadix-URL-Redirection 3 string
VENDORATTR 3309 Nomadix-IP-Upsell 4 integer
VENDORATTR 3309 Nomadix-Expiration-Time 5 string
VENDORATTR 3309 Nomadix-Subnet 6 string
VENDORATTR 3309 Nomadix-MaxBytesUp 7 integer
VENDORATTR 3309 Nomadix-MaxBytesDown 8 integer
VENDORATTR 3309 Nomadix-EndofSession 9 integer
VENDORATTR 3309 Nomadix-Logoff-URL 10 string
VENDORATTR 3309 Nomadix-Net-VLAN 11 integer
VENDORATTR 3309 Nomadix-Config-URL 12 string
VENDORATTR 3309 Nomadix-Goodbye-URL 13 string
regards
Hugh
On 22 Sep 2005, at 18:43, Anton van Cauteren wrote:
> Hi all,
>
> The user-request termination is triggered by the following events:
> - logout in ICC.
> - logout in logout console
> - surfing to 1.1.1.1
> - surfing to logout.nomadix.com
>
> Best Regards,
>
> Anton Van Cauteren
> Nomadix EMEA Support
>
> -----Original Message-----
> From: Hugh Irvine [mailto:hugh at open.com.au]
> Sent: woensdag 21 september 2005 23:26
> To: Frédéric MALADRI
> Cc: radiator at open.com.au; 'Support - Europe'; support at devnet.fr
> Subject: Re: (RADIATOR) Nomadix Problem
>
>
> Salut Frederic -
>
> Comment ca va la vie?
>
> You should check with your NAS vendor to find out what they mean by
> "User-Request" - to me it sounds like exactly that.
>
> There is nothing in the configuration file or debug log that
> indicates anything wrong with what you are doing.
>
> Might this happen if the user turns off his machine?
>
> You should probably do some controlled experiments to see what user
> actions cause different messages from the NAS.
>
> regards
>
> Hugh
>
>
>
> On 22 Sep 2005, at 03:13, Frédéric MALADRI wrote:
>
> > Hello,
> >
> >
> >
> > We are using Radiator 3.9 on a Fedora Core 2 with a mysql database
> > to store login and password.
> >
> >
> >
> > Concerning the NAS, we are using an AG5000 Nomadix server.
> >
> >
> >
> > We met some troubles with some customer connections. Sometimes,
> > some customers are disconnected after a random session-time
> > connection. It seems that the Nomadix send an accounting request
> > packet with an Acc-Terminate-Cause = "User-Request". We don't
> > understand this because we don't let the possibility to our
> > customers to disconnect by themselves.
> >
> >
> >
> > Also, we don't know if the problem is concerning Radiator, Nomadix
> > or our configuration of Radiator??
> >
> >
> >
> > As follow, we could see our configuration file of our Radiator
> > server and the log file of Radiator.
> >
> >
> >
> > Configuration file
> >
> >
> >
> > <SessionDatabase SQL>
> >
> > Identifier SDCANMA
> >
> > DBSource dbi:mysql:canma
> >
> > DBUsername ***********
> >
> > DBAuth **************
> >
> >
> >
> > AddQuery insert into RADONLINE (USERNAME, NASIDENTIFIER,
> > NASPORT,ACCTSESSIONID, TIME_STAMP, FRAMEDIPADDRESS,
> > NASPORTTYPE,SERVICETYPE) values ('%u', '%1', %2, %3, %{Timestamp},'%
> > {Framed-IP-Address}','%{NAS-Port-Type}','%{Service-Type}')
> >
> > DeleteQuery delete from RADONLINE where NASIDENTIFIER='%1'
> > and NASPORT=0%2
> >
> > ClearNasQuery delete from RADONLINE where NASIDENTIFIER='%0'
> >
> > CountQuery select NASIDENTIFIER, NASPORT, ACCTSESSIONID,
> > FRAMEDIPADDRESS from RADONLINE where USERNAME='%u'
> >
> > CountNasSessionsQuery select ACCTSESSIONID from RADONLINE
> > where NASIDENTIFIER='%0'
> >
> > ClearNasSessionQuery delete from RADONLINE where
> > NASIDENTIFIER='%0' and ACCTSESSIONID = '%1'
> >
> > </SessionDatabase>
> >
> > <Realm canma>
> >
> >
> >
> > SessionDatabase SDCANMA
> >
> > <AuthBy SQL>
> >
> > DBSource dbi:mysql:canma
> >
> > DBUsername *************
> >
> > DBAuth **************
> >
> >
> >
> > #DefaultSimultaneousUse 1
> >
> >
> >
> > AuthSelect select PASSWORD, TIMELEFT, REPLYATTR
> > from SUBSCRIBERS where USERNAME=%0 and TIMELEFT > 0
> >
> > AuthColumnDef 0,User-Password,check
> >
> > AuthColumnDef 1,Session-Timeout,reply
> >
> > AuthColumnDef 2,GENERIC,reply
> >
> >
> >
> > AccountingTable ACCOUNTING
> >
> > AcctColumnDef USERNAME,User-Name
> >
> > AcctColumnDef TIME_STAMP,Timestamp,integer
> >
> > AcctColumnDef ACCTSTATUSTYPE,Acct-Status-Type
> >
> > AcctColumnDef ACCTDELAYTIME,Acct-Delay-
> Time,integer
> >
> > AcctColumnDef ACCTINPUTOCTETS,Acct-Input-
> > Octets,integer
> >
> > AcctColumnDef ACCTOUTPUTOCTETS,Acct-Output-
> > Octets,integer
> >
> > AcctColumnDef ACCTSESSIONID,Acct-Session-Id
> >
> > AcctColumnDef ACCTSESSIONTIME,Acct-Session-
> > Time,integer
> >
> > AcctColumnDef ACCTTERMINATECAUSE,Acct-Terminate-
> > Cause
> >
> > AcctColumnDef NASIDENTIFIER,NAS-Identifier
> >
> > AcctColumnDef NASPORT,NAS-Port,integer
> >
> > AcctColumnDef FRAMEDIPADDRESS,Framed-IP-Address
> >
> >
> >
> > AcctSQLStatement update SUBSCRIBERS set TIMELEFT=0
> > where USERNAME='%n'
> >
> >
> >
> > SQLRecoveryFile %D/missedaccounting
> >
> > </AuthBy>
> >
> > <AuthLog SQL>
> >
> > DBSource dbi:mysql:canma
> >
> > DBUsername ***********
> >
> > DBAuth ****************
> >
> >
> >
> > LogSuccess
> >
> > SuccessQuery insert into RADAUTHLOG (TIME_STAMP,
> > USERNAME, TYPE) values (%t, '%n', 1)
> >
> >
> >
> > LogFailure
> >
> > FailureQuery insert into RADAUTHLOG (TIME_STAMP,
> > USERNAME, TYPE, REASON) values (%t, '%n', 0, %1)
> >
> > </AuthLog>
> >
> > <Log FILE>
> >
> > Filename /var/log/radiator/canma/%d-%m-%Y.log
> >
> > Trace 5
> >
> > </Log FILE>
> >
> > </Realm>
> >
> >
> >
> > Log file
> >
> >
> >
> > *** Received from 192.168.1.2 port 1025 ....
> >
> > Code: Accounting-Request
> >
> > Identifier: 180
> >
> > Authentic: <253><20><19>8<133><226><164><246><166>@}a]<147><199>|
> >
> > Attributes:
> >
> > User-Name = "fbodin"
> >
> > NAS-IP-Address = 192.168.1.2
> >
> > NAS-Port = 605
> >
> > Acct-Status-Type = Stop
> >
> > Acct-Session-Id = "18000121"
> >
> > Acct-Output-Octets = 1109687
> >
> > Acct-Input-Octets = 4338298
> >
> > Acct-Output-Packets = 6678
> >
> > Acct-Input-Packets = 5507
> >
> > Session-Timeout = 259200
> >
> > Event-Timestamp = 1127316239
> >
> > Called-Station-Id = "00-50-E8-01-5C-0D"
> >
> > Calling-Station-Id = "00-0F-1F-D1-8B-51"
> >
> > Acct-Session-Time = 13388
> >
> > Acct-Terminate-Cause = User-Request
> >
> > NAS-Identifier = "192.168.1.2"
> >
> > NAS-Port-Type = Async
> >
> > Framed-IP-Address = 10.0.0.109
> >
> > Nomadix-Subnet = "0.0.0.0"
> >
> > WISPr-Location-ID = "isocc=,cc=,ac=,network="
> >
> > Acct-Delay-Time = 0
> >
> >
> >
> >
> >
> >
> >
> > --
> > Frédéric MALADRI
> >
> > DEVNET ( http://www.devnet.fr )
> > Consultant - Service Exploitation
> > 73, rue de Saussure
> > 75017 PARIS
> > Tel : +33 (0)1 70 08 52 98
> >
> > Gsm: +33 (0)6 84 13 41 27
> > Fax : +33 (0)1 34 65 35 81
> >
> >
> >
> >
>
>
> NB:
>
> Have you read the reference manual ("doc/ref.html")?
> Have you searched the mailing list archive (www.open.com.au/archives/
> radiator)?
> Have you had a quick look on Google (www.google.com)?
> Have you included a copy of your configuration file (no secrets),
> together with a trace 4 debug showing what is happening?
>
> --
> Radiator: the most portable, flexible and configurable RADIUS server
> anywhere. Available on *NIX, *BSD, Windows, MacOS X.
> -
> Nets: internetwork inventory and management - graphical, extensible,
> flexible with hardware, software, platform and database independence.
> -
> CATool: Private Certificate Authority for Unix and Unix-like systems.
>
>
>
NB:
Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.
--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
More information about the radiator
mailing list