[RADIATOR] Upgrade to 4.6 caused me problems
Hugh Irvine
hugh at open.com.au
Fri Sep 17 10:36:11 CDT 2010
Hello Heikki, Hello Jethro -
Yes correct - if you want the decoded values you should use a ClientHook instead of a PreClientHook.
regards
Hugh
On 17 Sep 2010, at 10:02, Heikki Vatiainen wrote:
> On 09/17/2010 05:43 PM, Jethro R Binks wrote:
>
>> With reference to the problem I observed when upgrading to 4.6, where
>> special character %N (ref: "The NAS-IP-Address in the current request (if
>> any)") is printed "raw"
>>
>>> Mon Apr 26 00:03:26 2010 OK client=tambala.net.strath.ac.uk
>>> clientip=130.159.17.137 clientident=SquidProxy nasip=<82><9F>^Q<89>
>> nasid=
>>> naspttype= requser=abc replyuser= outeruser=abc eapidentity=,
>>> calling-st-id= called-st-id= fr amed-ip-addr= handler=strathrealm
>>> rmessage=
>> ...
>>> So note "nasip=<82><9F>^Q<89>". This is actually my terminal's
>>> representation of the hi-bit characters, and it turns out they are the
>> hex
>>> equivalent of the IP address: 0x82h == 130, 0x9f == 159, etc. Before
>> 4.6
>>> (3.17.1 previously) this was seamlessly translated to a printable IP
>>> address, but it now appears this is being printed "raw".
>
> The messages from Apr 26, are they from a hook?
>
> If I remember correctly there have been changes to packet processing
> that affected the moment of decoding and translation of packet contents.
>
> So if the messages are for example, from a PreClientHook the following
> note from the manual may apply.
>
> 5.4.27 PreClientHook
> ...
> Caution: At the time this hook is run, integer attributes have not yet
> been unpacked and decoded, and encrypted attributes have not yet been
> decrypted. If you need unpacked, decrypted versions of these attributes,
> consider using a per-client ClientHook instead.
> ...
>
> --
> Heikki Vatiainen, Arch Red Oy
> +358 44 087 6547
> _______________________________________________
> radiator mailing list
> radiator at open.com.au
> http://www.open.com.au/mailman/listinfo/radiator
NB:
Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.
More information about the radiator
mailing list