[RADIATOR] AuthEMERALD Platypus
Hugh Irvine
hugh at open.com.au
Mon Nov 10 16:25:01 CST 2008
Hello Gilbert -
My apologies - I missed this mail last week.
I am not sure what is happening with your user database, but you are
getting "No such user" for the user "Gilbert".
>
> Mon Nov 3 15:37:15 2008: DEBUG: Handling request with Handler
> 'Realm=gilbert'
> Mon Nov 3 15:37:15 2008: DEBUG: Rewrote user name to Gilbert
> Mon Nov 3 15:37:15 2008: DEBUG: Deleting session for
> Gilbert at gilbert,
> 203.63.154.1, 1234
> Mon Nov 3 15:37:15 2008: DEBUG: Handling with Radius::AuthEMERALD:
> Mon Nov 3 15:37:15 2008: DEBUG: Handling with Radius::AuthEMERALD:
> Mon Nov 3 15:37:15 2008: DEBUG: Query is: 'select DateAdd(Day,
> ma.extension+ma.overdue, maExpireDate),
> DateAdd(Day, sa.extension, saExpireDate), sa.AccountID,
> sa.AccountType,
> sa.password, sa.login, sa.shell, sa.TimeLeft
> from masteraccounts ma, subaccounts sa
> where (sa.login = 'Gilbert' or sa.shell = 'Gilbert')
> and ma.customerid = sa.customerid
> and sa.active <> 0 and ma.active <> 0':
>
> Mon Nov 3 15:37:15 2008: DEBUG: Radius::AuthEMERALD looks for match
> with
> Gilbert [Gilbert at gilbert]
> Mon Nov 3 15:37:15 2008: DEBUG: Radius::AuthEMERALD REJECT: No such
> user:
> Gilbert [Gilbert at gilbert]
In the second debug you are getting an initial accept, but the second
result is also "No such user".
Can you clarify what is going on?
regards
Hugh
On 6 Nov 2008, at 03:11, Gilbert T. Gutierrez, Jr. wrote:
> I am running the current version of Radiator, Centos, and Platypus
> (Radiator-4.3.1-1, Centos 5 kernel 2.6.18-92.1.13, Platypus 6.1 Build
> 2130-us). Connection to the Microsoft database is via freetds
> (version
> 0.64-11) and perl-DBD-ODBC (version 1.17-1).
>
> I am having problems with reading attributes from both the Types
> Attribute
> table and the User Attributes table. The system is only working
> when I add
> the AddATDefaults flag and it only responds with the User
> Attribute(s).
> When I do not have the AddATDefaults flag, the system responds the
> first
> time but not subsequent queries. Below are all the details
> including the
> two tables and log files (I divided things with -------). I would
> like to
> have both the PPP attributes and the specific user attributes
> returned and
> when I run the queries manually, they do return properly, but for some
> reason the module is not returning them.
>
> Thank you,
> Gilbert
>
>
> -------------------
>
> Type Attributes table (ppp)
> User-Service = 2
> Framed=Protocol = 1
> Framed-Compression = 1
> Framed-Route = 10.10.10.0/24 10.10.10.10 1
>
> -------------------
>
> User Attribute (User 1107 / ppp user)
> Framed-Address = 10.10.10.10
>
> -------------------
>
> Isql results...
> SQL> select ra.RadAttributeID, ra.RadVendorID, ra.RadVendorType, Data,
> Value, Type, RadCheck from RadATConfigs rc, RadAttributes ra where
> ra.RadAttributeID = rc.RadAttributeID and ra.RadVendorID =
> rc.RadVendorID
> and ra.RadVendorType = rc.RadVendorType and rc.AccountType='PPP'
> +---------------+------------+--------------
> +-------------------------------
> +------------+------------+---------+
> | RadAttributeID| RadVendorID| RadVendorType| Data
> | Value | Type | RadCheck|
> +---------------+------------+--------------
> +-------------------------------
> +------------+------------+---------+
> | 6 | 0 | 0 | 2
> | 2 | 1 | 0 |
> | 7 | 0 | 0 | 1
> | 1 | 1 | 0 |
> | 13 | 0 | 0 | 1
> | 1 | 1 | 0 |
> | 22 | 0 | 0 | 10.10.10.0/24
> 10.10.10.10 1
> | 10 | 0 | 0 |
> +---------------+------------+--------------
> +-------------------------------
> +------------+------------+---------+
> SQLRowCount returns 4
> 4 rows fetched
>
>
> SQL> select ra.RadAttributeID, ra.RadVendorID, ra.RadVendorType, Data,
> Value, Type, RadCheck from RadConfigs rc, RadAttributes ra where
> ra.RadAttributeID = rc.RadAttributeID and ra.RadVendorID =
> rc.RadVendorID
> and ra.RadVendorType = rc.RadVendorType and rc.AccountID=1107
> +---------------+------------+--------------+----------------
> +------------+-
> -----------+---------+
> | RadAttributeID| RadVendorID| RadVendorType| Data |
> Value |
> Type | RadCheck|
> +---------------+------------+--------------+----------------
> +------------+-
> -----------+---------+
> | 8 | 0 | 0 | 10.10.10.10 |
> 10 |
> 2 | 0 |
> +---------------+------------+--------------+----------------
> +------------+-
> -----------+---------+
> SQLRowCount returns 1
> 1 rows fetched
>
> -------------------
>
> My Configuration (using @gilbert because I don't have a separate test
> machine):
> <Realm gilbert>
> # Take the @phxdsl off of the username
> RewriteUsername s/^([^@]+).*/$1/
> <AuthBy EMERALD>
> DBSource dbi:ODBC:Platypus
> DBUsername platypus
> DBAuth xxxx
> AddATDefaults # Does not work without this flag
> </AuthBy>
> AcctLogFileName %L/detail
> </Realm>
>
> -------------------
>
> Logfile with AddATDefaults Flag (radpwtst -user Gilbert at gilbert -
> password
> xyz -secret xxxx -auth_port 1812 -acct_port 1813)
>
> Mon Nov 3 15:37:15 2008: DEBUG: Packet dump:
> *** Received from 127.0.0.1 port 46064 ....
> Code: Access-Request
> Identifier: 240
> Authentic: <156>8<166>S<<157>(<176><180>v:T<11><0>'5
> Attributes:
> User-Name = "Gilbert at gilbert"
> Service-Type = Framed-User
> NAS-IP-Address = 203.63.154.1
> NAS-Identifier = "203.63.154.1"
> NAS-Port = 1234
> Called-Station-Id = "123456789"
> Calling-Station-Id = "987654321"
> NAS-Port-Type = Async
> User-Password = 5(J1R<169><137>M<13><189>"g<166><204><243>M
>
> Mon Nov 3 15:37:15 2008: DEBUG: Handling request with Handler
> 'Realm=gilbert'
> Mon Nov 3 15:37:15 2008: DEBUG: Rewrote user name to Gilbert
> Mon Nov 3 15:37:15 2008: DEBUG: Deleting session for
> Gilbert at gilbert,
> 203.63.154.1, 1234
> Mon Nov 3 15:37:15 2008: DEBUG: Handling with Radius::AuthEMERALD:
> Mon Nov 3 15:37:15 2008: DEBUG: Handling with Radius::AuthEMERALD:
> Mon Nov 3 15:37:15 2008: DEBUG: Query is: 'select DateAdd(Day,
> ma.extension+ma.overdue, maExpireDate),
> DateAdd(Day, sa.extension, saExpireDate), sa.AccountID,
> sa.AccountType,
> sa.password, sa.login, sa.shell, sa.TimeLeft
> from masteraccounts ma, subaccounts sa
> where (sa.login = 'Gilbert' or sa.shell = 'Gilbert')
> and ma.customerid = sa.customerid
> and sa.active <> 0 and ma.active <> 0':
> Mon Nov 3 15:37:15 2008: DEBUG: Radius::AuthEMERALD looks for match
> with
> Gilbert [Gilbert at gilbert]
> Mon Nov 3 15:37:15 2008: DEBUG: Radius::AuthEMERALD REJECT: No such
> user:
> Gilbert [Gilbert at gilbert]
> Mon Nov 3 15:37:15 2008: DEBUG: Query is: 'select DateAdd(Day,
> ma.extension+ma.overdue, maExpireDate),
> DateAdd(Day, sa.extension, saExpireDate), sa.AccountID,
> sa.AccountType,
> sa.password, sa.login, sa.shell, sa.TimeLeft
> from masteraccounts ma, subaccounts sa
> where (sa.login = 'DEFAULT' or sa.shell = 'DEFAULT')
> and ma.customerid = sa.customerid
> and sa.active <> 0 and ma.active <> 0':
> Mon Nov 3 15:37:15 2008: DEBUG: Select results: 2009-11-03
> 15:37:13.630,
> 2009-11-03 15:37:13.630, 1107, PPP, c
> razy4u, Gilbert, , ,
> Mon Nov 3 15:37:15 2008: DEBUG: Query is: 'select ra.RadAttributeID,
> ra.RadVendorID,
> ra.RadVendorType,
> Data, Value, Type, RadCheck
> from RadConfigs rc, RadAttributes ra
> where ra.RadAttributeID = rc.RadAttributeID
> and ra.RadVendorID = rc.RadVendorID
> and ra.RadVendorType = rc.RadVendorType
> and rc.AccountID=1107':
> Mon Nov 3 15:37:15 2008: ERR: Execute failed for 'select
> ra.RadAttributeID,
> ra.RadVendorID,
> ra.RadVendorType,
> Data, Value, Type, RadCheck
> from RadConfigs rc, RadAttributes ra
> where ra.RadAttributeID = rc.RadAttributeID
> and ra.RadVendorID = rc.RadVendorID
> and ra.RadVendorType = rc.RadVendorType
> and rc.AccountID=1107':
> Mon Nov 3 15:37:15 2008: DEBUG: Query is: 'select ra.RadAttributeID,
> ra.RadVendorID,
> ra.RadVendorType,
> Data, Value, Type, RadCheck
> from RadATConfigs rc, RadAttributes ra
> where ra.RadAttributeID = rc.RadAttributeID
> and ra.RadVendorID = rc.RadVendorID
> and ra.RadVendorType = rc.RadVendorType
> and rc.AccountType='PPP'':
> Mon Nov 3 15:37:15 2008: DEBUG: Radius::AuthEMERALD looks for match
> with
> DEFAULT [Gilbert at gilbert]
> Mon Nov 3 15:37:15 2008: DEBUG: Expiration date converted to:
> 1257287833
> Mon Nov 3 15:37:15 2008: DEBUG: Expiration date converted to:
> 1257287833
> Mon Nov 3 15:37:15 2008: DEBUG: Radius::AuthEMERALD ACCEPT: : DEFAULT
> [Gilbert at gilbert]
> Mon Nov 3 15:37:15 2008: DEBUG: AuthBy EMERALD result: ACCEPT,
> Mon Nov 3 15:37:15 2008: DEBUG: Access accepted for Gilbert
> Mon Nov 3 15:37:15 2008: DEBUG: Packet dump:
> *** Sending to 127.0.0.1 port 46064 ....
> Code: Access-Accept
> Identifier: 240
> Authentic: <229>E2a<12><222>d!@<14>><2><232><203>A<18>
> Attributes:
> Framed-IP-Address = 10.10.10.10
>
> Mon Nov 3 15:37:15 2008: DEBUG: Packet dump:
> *** Received from 127.0.0.1 port 46064 ....
> Code: Accounting-Request
> Identifier: 241
> Authentic: <139><24>O<140><192>M<147>+DX<200><158><10><11>P<231>
> Attributes:
> User-Name = "Gilbert at gilbert"
> Service-Type = Framed-User
> NAS-IP-Address = 203.63.154.1
> NAS-Identifier = "203.63.154.1"
> NAS-Port = 1234
> NAS-Port-Type = Async
> Acct-Session-Id = "00001234"
> Acct-Status-Type = Start
> Called-Station-Id = "123456789"
> Calling-Station-Id = "987654321"
> Framed-IP-Address = 10.10.10.10
> Acct-Delay-Time = 0
>
> Mon Nov 3 15:37:15 2008: DEBUG: Handling request with Handler
> 'Realm=gilbert'
> Mon Nov 3 15:37:15 2008: DEBUG: Rewrote user name to Gilbert
> Mon Nov 3 15:37:15 2008: DEBUG: Adding session for Gilbert at gilbert,
> 203.63.154.1, 1234
> Mon Nov 3 15:37:15 2008: DEBUG: Handling with Radius::AuthEMERALD:
> Mon Nov 3 15:37:15 2008: DEBUG: Handling accounting with
> Radius::AuthEMERALD
> Mon Nov 3 15:37:15 2008: DEBUG: AuthBy EMERALD result: ACCEPT,
> Mon Nov 3 15:37:15 2008: DEBUG: Accounting accepted
> Mon Nov 3 15:37:15 2008: DEBUG: Packet dump:
> *** Sending to 127.0.0.1 port 46064 ....
> Code: Accounting-Response
> Identifier: 241
> Authentic: <138>^h<147><10><243><127><211><7>!s<192><223>+<193><252>
> Attributes:
>
> Mon Nov 3 15:37:15 2008: DEBUG: Packet dump:
> *** Received from 127.0.0.1 port 46064 ....
> Code: Accounting-Request
> Identifier: 242
> Authentic: <166>Q<7>O<171><183>sl^<5><206><199>i<2><186><164>
> Attributes:
> User-Name = "Gilbert at gilbert"
> Service-Type = Framed-User
> NAS-IP-Address = 203.63.154.1
> NAS-Identifier = "203.63.154.1"
> NAS-Port = 1234
> NAS-Port-Type = Async
> Acct-Session-Id = "00001234"
> Acct-Status-Type = Stop
> Called-Station-Id = "123456789"
> Calling-Station-Id = "987654321"
> Framed-IP-Address = 10.10.10.10
> Acct-Delay-Time = 0
> Acct-Session-Time = 1000
> Acct-Input-Octets = 20000
> Acct-Output-Octets = 30000
>
> Mon Nov 3 15:37:15 2008: DEBUG: Handling request with Handler
> 'Realm=gilbert'
> Mon Nov 3 15:37:15 2008: DEBUG: Rewrote user name to Gilbert
> Mon Nov 3 15:37:15 2008: DEBUG: Deleting session for
> Gilbert at gilbert,
> 203.63.154.1, 1234
> Mon Nov 3 15:37:15 2008: DEBUG: Handling with Radius::AuthEMERALD:
> Mon Nov 3 15:37:15 2008: DEBUG: Handling accounting with
> Radius::AuthEMERALD
> Mon Nov 3 15:37:15 2008: DEBUG: AuthBy EMERALD result: ACCEPT,
> Mon Nov 3 15:37:15 2008: DEBUG: Accounting accepted
> Mon Nov 3 15:37:15 2008: DEBUG: Packet dump:
> *** Sending to 127.0.0.1 port 46064 ....
> Code: Accounting-Response
> Identifier: 242
> Authentic: <231><166><137><209><8>U<235><191><142><228><255>9D<192>yW
> Attributes:
>
>
> -------------------
>
> Logfile without the AddATDefaults Flag (radpwtst -user Gilbert at gilbert
> -password xyz -secret xxxx -auth_port 1812 -acct_port 1813)
>
> Mon Nov 3 15:44:05 2008: DEBUG: Packet dump:
> *** Received from 127.0.0.1 port 39968 ....
> Code: Access-Request
> Identifier: 140
> Authentic: <159><141>f<7><249>oJY<192><179><239><207>(<19><132><152>
> Attributes:
> User-Name = "Gilbert at gilbert"
> Service-Type = Framed-User
> NAS-IP-Address = 203.63.154.1
> NAS-Identifier = "203.63.154.1"
> NAS-Port = 1234
> Called-Station-Id = "123456789"
> Calling-Station-Id = "987654321"
> NAS-Port-Type = Async
> User-Password = 4>3$lY7<239><141><180>{<28>;<211><203><135>
>
> Mon Nov 3 15:44:05 2008: DEBUG: Handling request with Handler
> 'Realm=gilbert'
> Mon Nov 3 15:44:05 2008: DEBUG: Rewrote user name to Gilbert
> Mon Nov 3 15:44:05 2008: DEBUG: Deleting session for
> Gilbert at gilbert,
> 203.63.154.1, 1234
> Mon Nov 3 15:44:05 2008: DEBUG: Handling with Radius::AuthEMERALD:
> Mon Nov 3 15:44:05 2008: DEBUG: Handling with Radius::AuthEMERALD:
> Mon Nov 3 15:44:05 2008: DEBUG: Query is: 'select DateAdd(Day,
> ma.extension+ma.overdue, maExpireDate),
> DateAdd(Day, sa.extension, saExpireDate), sa.AccountID,
> sa.AccountType,
> sa.password, sa.login, sa.shell, sa.TimeLeft
> from masteraccounts ma, subaccounts sa
> where (sa.login = 'Gilbert' or sa.shell = 'Gilbert')
> and ma.customerid = sa.customerid
> and sa.active <> 0 and ma.active <> 0':
> Mon Nov 3 15:44:05 2008: DEBUG: Select results: 2009-11-03
> 15:44:03.957,
> 2009-11-03 15:44:03.957, 1107, PPP, crazy4u, Gilbert, , ,
> Mon Nov 3 15:44:05 2008: DEBUG: Query is: 'select ra.RadAttributeID,
> ra.RadVendorID,
> ra.RadVendorType,
> Data, Value, Type, RadCheck
> from RadConfigs rc, RadAttributes ra
> where ra.RadAttributeID = rc.RadAttributeID
> and ra.RadVendorID = rc.RadVendorID
> and ra.RadVendorType = rc.RadVendorType
> and rc.AccountID=1107':
> Mon Nov 3 15:44:05 2008: DEBUG: Radius::AuthEMERALD looks for match
> with
> Gilbert [Gilbert at gilbert]
> Mon Nov 3 15:44:05 2008: DEBUG: Expiration date converted to:
> 1257288243
> Mon Nov 3 15:44:05 2008: DEBUG: Expiration date converted to:
> 1257288243
> Mon Nov 3 15:44:05 2008: DEBUG: Radius::AuthEMERALD ACCEPT: : Gilbert
> [Gilbert at gilbert]
> Mon Nov 3 15:44:05 2008: DEBUG: AuthBy EMERALD result: ACCEPT,
> Mon Nov 3 15:44:05 2008: DEBUG: Access accepted for Gilbert
> Mon Nov 3 15:44:05 2008: DEBUG: Packet dump:
> *** Sending to 127.0.0.1 port 39968 ....
> Code: Access-Accept
> Identifier: 140
> Authentic: <202>'<199><132><132><233>d2xO<128>v<187><214><12><228>
> Attributes:
> Framed-IP-Address = 10.10.10.10
>
> Mon Nov 3 15:44:05 2008: DEBUG: Packet dump:
> *** Received from 127.0.0.1 port 39968 ....
> Code: Accounting-Request
> Identifier: 141
> Authentic: <21>z,s<148><10>>t<218><199>::<145><190>Q<17>
> Attributes:
> User-Name = "Gilbert at gilbert"
> Service-Type = Framed-User
> NAS-IP-Address = 203.63.154.1
> NAS-Identifier = "203.63.154.1"
> NAS-Port = 1234
> NAS-Port-Type = Async
> Acct-Session-Id = "00001234"
> Acct-Status-Type = Start
> Called-Station-Id = "123456789"
> Calling-Station-Id = "987654321"
> Framed-IP-Address = 10.10.10.10
> Acct-Delay-Time = 0
>
> Mon Nov 3 15:44:05 2008: DEBUG: Handling request with Handler
> 'Realm=gilbert'
> Mon Nov 3 15:44:05 2008: DEBUG: Rewrote user name to Gilbert
> Mon Nov 3 15:44:05 2008: DEBUG: Adding session for Gilbert at gilbert,
> 203.63.154.1, 1234
> Mon Nov 3 15:44:05 2008: DEBUG: Handling with Radius::AuthEMERALD:
> Mon Nov 3 15:44:05 2008: DEBUG: Handling accounting with
> Radius::AuthEMERALD
> Mon Nov 3 15:44:05 2008: DEBUG: AuthBy EMERALD result: ACCEPT,
> Mon Nov 3 15:44:05 2008: DEBUG: Accounting accepted
> Mon Nov 3 15:44:05 2008: DEBUG: Packet dump:
> *** Sending to 127.0.0.1 port 39968 ....
> Code: Accounting-Response
> Identifier: 141
> Authentic: d<228>]]<253>M/<12>u2<144>H<190>)<141><21>
> Attributes:
>
> Mon Nov 3 15:44:05 2008: DEBUG: Packet dump:
> *** Received from 127.0.0.1 port 39968 ....
> Code: Accounting-Request
> Identifier: 142
> Authentic: <246>q]<173>D[<235><167><152><199>?<130><144><149><183>b
> Attributes:
> User-Name = "Gilbert at gilbert"
> Service-Type = Framed-User
> NAS-IP-Address = 203.63.154.1
> NAS-Identifier = "203.63.154.1"
> NAS-Port = 1234
> NAS-Port-Type = Async
> Acct-Session-Id = "00001234"
> Acct-Status-Type = Stop
> Called-Station-Id = "123456789"
> Calling-Station-Id = "987654321"
> Framed-IP-Address = 10.10.10.10
> Acct-Delay-Time = 0
> Acct-Session-Time = 1000
> Acct-Input-Octets = 20000
> Acct-Output-Octets = 30000
>
> Mon Nov 3 15:44:05 2008: DEBUG: Handling request with Handler
> 'Realm=gilbert'
> Mon Nov 3 15:44:05 2008: DEBUG: Rewrote user name to Gilbert
> Mon Nov 3 15:44:05 2008: DEBUG: Deleting session for
> Gilbert at gilbert,
> 203.63.154.1, 1234
> Mon Nov 3 15:44:05 2008: DEBUG: Handling with Radius::AuthEMERALD:
> Mon Nov 3 15:44:05 2008: DEBUG: Handling accounting with
> Radius::AuthEMERALD
> Mon Nov 3 15:44:05 2008: DEBUG: AuthBy EMERALD result: ACCEPT,
> Mon Nov 3 15:44:05 2008: DEBUG: Accounting accepted
> Mon Nov 3 15:44:05 2008: DEBUG: Packet dump:
> *** Sending to 127.0.0.1 port 39968 ....
> Code: Accounting-Response
> Identifier: 142
> Authentic: <159><10><218><225>>j'<25><172><135>+<253>=<242><202><164>
> Attributes:
>
> Mon Nov 3 15:44:08 2008: DEBUG: Packet dump:
> *** Received from 127.0.0.1 port 38060 ....
> Code: Access-Request
> Identifier: 143
> Authentic: <187>q<180><202>k<163>cnl>h<137><180><246><133>-
> Attributes:
> User-Name = "Gilbert at gilbert"
> Service-Type = Framed-User
> NAS-IP-Address = 203.63.154.1
> NAS-Identifier = "203.63.154.1"
> NAS-Port = 1234
> Called-Station-Id = "123456789"
> Calling-Station-Id = "987654321"
> NAS-Port-Type = Async
> User-Password =
> <156><215><251><158><212>M<203><194>T<237>L7jN<175><198>
>
> Mon Nov 3 15:44:08 2008: DEBUG: Handling request with Handler
> 'Realm=gilbert'
> Mon Nov 3 15:44:08 2008: DEBUG: Rewrote user name to Gilbert
> Mon Nov 3 15:44:08 2008: DEBUG: Deleting session for
> Gilbert at gilbert,
> 203.63.154.1, 1234
> Mon Nov 3 15:44:08 2008: DEBUG: Handling with Radius::AuthEMERALD:
> Mon Nov 3 15:44:08 2008: DEBUG: Handling with Radius::AuthEMERALD:
> Mon Nov 3 15:44:08 2008: DEBUG: Query is: 'select DateAdd(Day,
> ma.extension+ma.overdue, maExpireDate),
> DateAdd(Day, sa.extension, saExpireDate), sa.AccountID,
> sa.AccountType,
> sa.password, sa.login, sa.shell, sa.TimeLeft
> from masteraccounts ma, subaccounts sa
> where (sa.login = 'Gilbert' or sa.shell = 'Gilbert')
> and ma.customerid = sa.customerid
> and sa.active <> 0 and ma.active <> 0':
> Mon Nov 3 15:44:08 2008: DEBUG: Radius::AuthEMERALD looks for match
> with
> Gilbert [Gilbert at gilbert]
> Mon Nov 3 15:44:08 2008: DEBUG: Radius::AuthEMERALD REJECT: No such
> user:
> Gilbert [Gilbert at gilbert]
> Mon Nov 3 15:44:08 2008: DEBUG: Query is: 'select DateAdd(Day,
> ma.extension+ma.overdue, maExpireDate),
> DateAdd(Day, sa.extension, saExpireDate), sa.AccountID,
> sa.AccountType,
> sa.password, sa.login, sa.shell, sa.TimeLeft
> from masteraccounts ma, subaccounts sa
> where (sa.login = 'DEFAULT' or sa.shell = 'DEFAULT')
> and ma.customerid = sa.customerid
> and sa.active <> 0 and ma.active <> 0':
> Mon Nov 3 15:44:08 2008: DEBUG: AuthBy EMERALD result: REJECT, No
> such user
> Mon Nov 3 15:44:08 2008: INFO: Access rejected for Gilbert: No such
> user
> Mon Nov 3 15:44:08 2008: DEBUG: Packet dump:
> *** Sending to 127.0.0.1 port 38060 ....
> Code: Access-Reject
> Identifier: 143
> Authentic: o<247><253>G<151>h<242><<252>*<215><206><190><186><12>e
> Attributes:
> Reply-Message = "Request Denied"
>
> Mon Nov 3 15:44:08 2008: DEBUG: Packet dump:
> *** Received from 127.0.0.1 port 38060 ....
> Code: Accounting-Request
> Identifier: 144
> Authentic: <163><251><162>E<180><3>R<200><249>;<251><240><161>uk<215>
> Attributes:
> User-Name = "Gilbert at gilbert"
> Service-Type = Framed-User
> NAS-IP-Address = 203.63.154.1
> NAS-Identifier = "203.63.154.1"
> NAS-Port = 1234
> NAS-Port-Type = Async
> Acct-Session-Id = "00001234"
> Acct-Status-Type = Start
> Called-Station-Id = "123456789"
> Calling-Station-Id = "987654321"
> Acct-Delay-Time = 0
>
> Mon Nov 3 15:44:08 2008: DEBUG: Handling request with Handler
> 'Realm=gilbert'
> Mon Nov 3 15:44:08 2008: DEBUG: Rewrote user name to Gilbert
> Mon Nov 3 15:44:08 2008: DEBUG: Adding session for Gilbert at gilbert,
> 203.63.154.1, 1234
> Mon Nov 3 15:44:08 2008: DEBUG: Handling with Radius::AuthEMERALD:
> Mon Nov 3 15:44:08 2008: DEBUG: Handling accounting with
> Radius::AuthEMERALD
> Mon Nov 3 15:44:08 2008: DEBUG: AuthBy EMERALD result: ACCEPT,
> Mon Nov 3 15:44:08 2008: DEBUG: Accounting accepted
> Mon Nov 3 15:44:08 2008: DEBUG: Packet dump:
> *** Sending to 127.0.0.1 port 38060 ....
> Code: Accounting-Response
> Identifier: 144
> Authentic: <160><9>3<0><146><218><15>@<230>X<241><215>RS<194><28>
> Attributes:
>
> Mon Nov 3 15:44:08 2008: DEBUG: Packet dump:
> *** Received from 127.0.0.1 port 38060 ....
> Code: Accounting-Request
> Identifier: 145
> Authentic: .f<247><167><10><7><10><199><255>Xq<150><154>)<199>I
> Attributes:
> User-Name = "Gilbert at gilbert"
> Service-Type = Framed-User
> NAS-IP-Address = 203.63.154.1
> NAS-Identifier = "203.63.154.1"
> NAS-Port = 1234
> NAS-Port-Type = Async
> Acct-Session-Id = "00001234"
> Acct-Status-Type = Stop
> Called-Station-Id = "123456789"
> Calling-Station-Id = "987654321"
> Acct-Delay-Time = 0
> Acct-Session-Time = 1000
> Acct-Input-Octets = 20000
> Acct-Output-Octets = 30000
>
> Mon Nov 3 15:44:08 2008: DEBUG: Handling request with Handler
> 'Realm=gilbert'
> Mon Nov 3 15:44:08 2008: DEBUG: Rewrote user name to Gilbert
> Mon Nov 3 15:44:08 2008: DEBUG: Deleting session for
> Gilbert at gilbert,
> 203.63.154.1, 1234
> Mon Nov 3 15:44:08 2008: DEBUG: Handling with Radius::AuthEMERALD:
> Mon Nov 3 15:44:08 2008: DEBUG: Handling accounting with
> Radius::AuthEMERALD
> Mon Nov 3 15:44:08 2008: DEBUG: AuthBy EMERALD result: ACCEPT,
> Mon Nov 3 15:44:08 2008: DEBUG: Accounting accepted
> Mon Nov 3 15:44:08 2008: DEBUG: Packet dump:
> *** Sending to 127.0.0.1 port 38060 ....
> Code: Accounting-Response
> Identifier: 145
> Authentic: <9>><188><181>G<179>g<190>y<149><147><22><215><177>(A
> Attributes:
>
>
>
>
>
> _______________________________________________
> radiator mailing list
> radiator at open.com.au
> http://www.open.com.au/mailman/listinfo/radiator
NB:
Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
Have you checked the RadiusExpert wiki:
http://www.open.com.au/wiki/index.php/Main_Page
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.
More information about the radiator
mailing list