(RADIATOR) Problem with jradius based authenticator

[Hugh Irvine]

Hello Alex -

I suggest you start with a simple Radiator configuration file for  
testing purposes to get the basics working first, then add your  
Handlers until you find out why what you show below is not working. I  
suspect either you are not looking at the correct configuration file,  
or you haven't restarted Radiator with the modified configuration file.

As far as I can see,  what you show below should work.

regards

Hugh


On 21 Aug 2006, at 22:00, Alex Sharaz wrote:

> Chaps,
>
> I'm writing a radius based authenticator for a java application server
> using the jradius API.
>
> It's fairly simple and just tries to perform a PAP type authentication
> at the moment.
>
> I am running 3.1.15 with a patchfile including updates up till  
> 27-06-06
>
> However , when I try to perform an authentication from the application
> server, I get
>
> Mon Aug 21 12:52:32 2006: DEBUG: Packet dump:
> *** Received from 150.237.47.22 port 32821 ....
> Code:       Access-Request
> Identifier: 5
> Authentic:  <232><141><129><186>u<235>q<127><231>M<16><198><17>0PU
> Attributes:
>         User-Name = "ccsas at hull.ac.uk"
>         NAS-Port-Type = Wireless-IEEE-802-11
>         NAS-Port = 1
>         NAS-IP-Address = 150.237.47.22
>         NAS-Identifier = "Newcomms RADIUS auth module"
>         User-Password =
> bY<213><216>&o<132><138><215>e<254><166><156><252><27>j
>         Message-Authenticator =
> <1><180><161><234><219><251><197>><154><13><222>?<21>C<249><194>
>
> Mon Aug 21 12:52:32 2006: WARNING: Could not find a handler for
> ccsas at hull.ac.uk: request is ignored
>
> On my radius.conf file I have
>
> <Client 150.237.47.22>
>         Secret   <something>
>         Identifier newcomms
>         NasType unknown
> </Client>
>
> And
> (my usual Client-Identifire=/newcomms/I instead of the NAS-IP-Address
> attribute also fails.)
> #
> # Newcomms loging auth
> #
> <Handler NAS-IP-Address=/150\.237\.47\.22/i, Realm=/hull\.ac\.uk/i>
>    AuthBy radHull
>    AuthLog  paplog
>    RejectHasReason
>    SessionDatabase NULL_SESSION_DB
>    PreProcessingHook file:"%D/access_request.pl"
> </Handler>
> #
> # userid without a realm
> #
> <Handler NAS-IP-Address=/150\.237\.47\.22/i, Realm=>
>    AuthBy radHull
>    AuthLog  paplog
>    RejectHasReason
>    SessionDatabase NULL_SESSION_DB
>    PreProcessingHook file:"%D/access_request.pl"
> </ 
> Handler>************************************************************** 
> ***************************
> To view the terms under which this email is distributed, please go  
> to http://www.hull.ac.uk/legal/email_disclaimer.html
> ********************************************************************** 
> *******************



NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/ 
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.


--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.