[RADIATOR] rapwtst and CoA-Request Error-Cause
Hugh Irvine
hugh at open.com.au
Sat Jul 31 04:32:27 CDT 2010
Hello Vangelis -
Thanks for reporting this - now fixed in the latest Radiator 4.6 patches.
regards
Hugh
On 30 Jul 2010, at 21:20, Hugh Irvine wrote:
>
> Hello Vangelis -
>
> You are quite right - I'll fix this tomorrow.
>
> regards
>
> Hugh
>
>
> On 30 Jul 2010, at 17:04, Vangelis Kyriakakis wrote:
>
>> Hello Hugh, Bruno,
>>
>> I'm using -trace 4. Here is the log output of both the NAS and the radpwtst:
>>
>> NAS:
>> Jul 26 18:17:03.173: RADIUS: COA received from id 48 xxx.xxx.xxx.xxx:11678, CoA Request, len 77
>> Jul 26 18:17:03.173: COA: 212.251.84.21 request queued
>> Jul 26 18:17:03.173: RADIUS: authenticator 65 1B F5 01 6D 6F 96 A1 - CA 21 E3 21 EC 89 AC D7
>> Jul 26 18:17:03.173: RADIUS: Vendor, Cisco [26] 47
>> Jul 26 18:17:03.173: RADIUS: Cisco AVpair [1] 41 "ip:sub-qos-policy-in=ADSL-10Mbps-policy"
>> Jul 26 18:17:03.173: RADIUS: Acct-Session-Id [44] 10 "015B4AA9"
>> Jul 26 18:17:03.173: ++++++ CoA Attribute List ++++++
>> Jul 26 18:17:03.173: 231FC340 0 00000009 sub-qos-policy-in(371) 18 ADSL-10Mbps-policy
>> Jul 26 18:17:03.173: 231F3BD4 0 00000001 session-id(362) 4 22760105(15B4AA9)
>> Jul 26 18:17:03.173:
>> Jul 26 18:17:03.173: RADIUS(00000000): sending
>> Jul 26 18:17:03.173: RADIUS(00000000): Send CoA Nack Response to xxx.xxx.xxx.xxx:11678 id 48, len 88
>> Jul 26 18:17:03.173: RADIUS: authenticator B5 AC 44 56 F1 9B 50 02 - 9C 2F BA 91 02 11 E0 EB
>> Jul 26 18:17:03.173: RADIUS: Vendor, Cisco [26] 44
>> Jul 26 18:17:03.173: RADIUS: Cisco AVpair [1] 38 "sub-qos-policy-in=ADSL-10Mbps-policy"
>> Jul 26 18:17:03.173: RADIUS: Reply-Message [18] 18
>> Jul 26 18:17:03.173: RADIUS: 4E 6F 20 76 61 6C 69 64 20 53 65 73 73 69 6F 6E [ No valid Session]
>> Jul 26 18:17:03.173: RADIUS: Dynamic-Author-Error[101] 6 Session Context Not Found [503]
>>
>> radpwtst:
>>
>> Mon Jul 26 18:17:03 2010: DEBUG: Reading dictionary file '/etc/radiator/dictionary'
>> sending Change-Filter-Request...
>> Mon Jul 26 18:17:03 2010: DEBUG: Packet dump:
>> *** Sending to XXX.XXX.XXX.XXX port 1816 ....
>> Code: Change-Filter-Request
>>
>> Identifier: 48
>> Authentic: e<27><245><1>mo<150><161><202>!<227>!<236><137><172><215>
>> Attributes:
>> cisco-avpair = "ip:sub-qos-policy-in=ADSL-10Mbps-policy"
>> Acct-Session-Id = "015B4AA9"
>>
>> OK
>>
>> As you can see although the NAS sends back a CoA-NAK packet with Session Context Not Found, radpwtst outputs just OK.
>> Any Ideas?
>>
>> Regards
>> Vangelis
>>
>>
>> On 30/7/2010 1:11 πμ, Hugh Irvine wrote:
>>> Hello Vangelis -
>>>
>>> Bruno is correct -
>>>
>>> perl radpwtst -trace 4 ……
>>>
>>> regards
>>>
>>> Hugh
>>>
>>>
>>> On 30 Jul 2010, at 00:08, Bruno Tiago Rodrigues wrote:
>>>
>>>
>>>> Vangelis:
>>>> Have you tried adding the -trace option to radpwtst?
>>>>
>>>> On Jul 29, 2010, at 12:48 PM, Vangelis Kyriakakis wrote:
>>>>
>>>>
>>>>> Hello,
>>>>>
>>>>> We are using radpwtst to send CoA packets to a Cisco NAS. If there
>>>>> is a problem the NAS sends back a CoA NAK packet which contains the
>>>>> Error-Cause attribute. Radpwtst just reports OK without taking note of
>>>>> the Error-Cause attribute. Is there any way to print it?
>>>>>
>>>>> Regards
>>>>> Vangelis
>>>>> _______________________________________________
>>>>> radiator mailing list
>>>>>
>>>>> radiator at open.com.au
>>>>> http://www.open.com.au/mailman/listinfo/radiator
>>>> _______________________________________________
>>>> radiator mailing list
>>>>
>>>> radiator at open.com.au
>>>> http://www.open.com.au/mailman/listinfo/radiator
>>>
>>>
>>> NB:
>>>
>>> Have you read the reference manual ("doc/ref.html")?
>>> Have you searched the mailing list archive (
>>> www.open.com.au/archives/radiator
>>> )?
>>> Have you had a quick look on Google (
>>> www.google.com
>>> )?
>>> Have you included a copy of your configuration file (no secrets),
>>> together with a trace 4 debug showing what is happening?
>>>
>>>
>
>
>
> NB:
>
> Have you read the reference manual ("doc/ref.html")?
> Have you searched the mailing list archive (www.open.com.au/archives/radiator)?
> Have you had a quick look on Google (www.google.com)?
> Have you included a copy of your configuration file (no secrets),
> together with a trace 4 debug showing what is happening?
>
> --
> Radiator: the most portable, flexible and configurable RADIUS server
> anywhere. Available on *NIX, *BSD, Windows, MacOS X.
> Includes support for reliable RADIUS transport (RadSec),
> and DIAMETER translation agent.
> -
> Nets: internetwork inventory and management - graphical, extensible,
> flexible with hardware, software, platform and database independence.
> -
> CATool: Private Certificate Authority for Unix and Unix-like systems.
>
>
>
> _______________________________________________
> radiator mailing list
> radiator at open.com.au
> http://www.open.com.au/mailman/listinfo/radiator
NB:
Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.
More information about the radiator
mailing list