(RADIATOR) Problems with radius authentication

[Francisco Rodrigo Cortinas Maseda]

Hello everybody,
 
my name is Francisco, and i had a problem with the authentication of
part of my network. We inserted a new radius server on the net, and this
radius begun serving requests to clients.
 
Some hours later, some clients call the callcenter saying the service
was unavailable. The NOC people undo the changes, passing the traffic
through the old server, and all starts functioning again.
 
Doing some investigation, we saw that some people could authenticate,
and some not (nothing common between them). We dont know what the
problem was, but seeing the radius servers upstream, we saw the
following error:
 
Mon Mar  3 18:48:58 2008 369177: ERR: Attribute number 59 (vendor 2011)
is not defined in your dictionary
Mon Mar  3 18:48:58 2008 369528: ERR: Attribute number 60 (vendor 2011)
is not defined in your dictionary
Mon Mar  3 18:48:58 2008 369711: ERR: Attribute number 26 (vendor 2011)
is not defined in your dictionary
Mon Mar  3 18:48:58 2008 369881: ERR: Attribute number 254 (vendor 2011)
is not defined in your dictionary
 
I supose that what the error is saying is that an attribute coming from
the NAS is not being correctly interpreted by the upstream radius (where
the traces where found). The question is:
 
Is a must that the attributes that the radius is marking as unknown
where defined in the dictionary in order to process the request?
 
Thanks everybody.
<mailto:francisco.cortinas at jazztel.com> 

Antes de imprimir este e-mail piense bien si es necesario hacerlo.

*********
Este mensaje es privado y CONFIDENCIAL y se dirige exclusivamente a su destinatario. Si usted ha recibido este mensaje por error, no debe revelar, copiar, distribuir o usarlo en ningun sentido. Le rogamos lo comunique al remitente y borre dicho mensaje y cualquier documento adjunto que pudiera contener. El correo electronico via Internet no permite asegurar la confidencialidad de los mensajes que se transmiten ni su integridad o correcta recepcion. JAZZTEL no asume responsabilidad por estas circunstancias. Si el destinatario de este mensaje no consintiera la utilizacion del correo electronico via Internet y la grabacion de los mensajes, rogamos lo ponga en nuestro conocimiento de forma inmediata.Cualquier opinion expresada en este mensaje pertenece unicamente al autor remitente, y no representa necesariamente la opinion de JAZZTEL, a no ser que expresamente se diga y el remitente este autorizado para hacerlo.
*********
This message is private and CONFIDENTIAL and it is intended exclusively for its addressee. If you receive this message in error, you should not disclose, copy, distribute this e-mail or use it in any other way. Please inform the sender and delete the message and attachments from your system.Internet e-mail neither guarantees the confidentiality nor the integrity or proper receipt of the messages sent. JAZZTEL does not assume any liability for those circumstances. If the addressee of this message does not consent to the use of Internet e-mail and message recording, please notify us immediately.Any views or opinions contained in this message are solely those of the author, and do not necessarily represent those of JAZZTEL, unless otherwise specifically stated and the sender is authorised to do so. 
*********

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.open.com.au/pipermail/radiator/attachments/20080304/7f83eebb/attachment.html>