[RADIATOR] radius attribute errors
Murat Kocum
mkocum at inteltek.com.tr
Fri Aug 24 05:36:47 CDT 2012
Dear Heikki,
Below is my logfile with trace. Though It says dictionary file not found we can work without problem from time to time.
We haven't touched dictionary file and I can read since it is text file. I do not think it is corrupt.
Thanks,
Murat
Mon Aug 20 15:29:39 2012: ERR: Attribute number 18 is not defined in your dictionary
Mon Aug 20 15:29:39 2012: ERR: Attribute number 211 is not defined in your dictionary
Mon Aug 20 15:29:39 2012: WARNING: No such attribute Unknown
Mon Aug 20 15:29:39 2012: NOTICE: SIGTERM received: stopping
Mon Aug 20 15:29:40 2012: DEBUG: Adding Clients from SQL database
Mon Aug 20 15:29:40 2012: DEBUG: Query is: 'select
NASIDENTIFIER,
SECRET,
IGNOREACCTSIGNATURE,
DUPINTERVAL,
DEFAULTREALM,
NASTYPE,
SNMPCOMMUNITY,
LIVINGSTONOFFS,
LIVINGSTONHOLE,
FRAMEDGROUPBASEADDRESS,
FRAMEDGROUPMAXPORTSPERCLASSC,
REWRITEUSERNAME,
NOIGNOREDUPLICATES,
PREHANDLERHOOK from RADCLIENTLIST':
Mon Aug 20 15:29:40 2012: DEBUG: ClientListSQL adds Client 10.15.220.152
Mon Aug 20 15:29:40 2012: DEBUG: ClientListSQL adds Client 10.17.3.253
Mon Aug 20 15:29:40 2012: DEBUG: ClientListSQL adds Client 10.17.4.254
Mon Aug 20 15:29:40 2012: DEBUG: ClientListSQL adds Client 10.17.4.253
Mon Aug 20 15:29:40 2012: DEBUG: ClientListSQL adds Client 10.17.3.254
Mon Aug 20 15:29:40 2012: DEBUG: ClientListSQL adds Client 172.29.63.183
Mon Aug 20 15:29:40 2012: DEBUG: Finished reading configuration file '/etc/radiator/radius.cfg'
Mon Aug 20 15:29:40 2012: DEBUG: Reading dictionary file './dictionary'
Mon Aug 20 15:29:40 2012: ERR: Could not open dictionary file './dictionary': No such file or directory
Mon Aug 20 15:29:40 2012: DEBUG: Creating authentication port 0.0.0.0:1812
Mon Aug 20 15:29:40 2012: DEBUG: Creating accounting port 0.0.0.0:1813
Mon Aug 20 15:29:40 2012: NOTICE: Server started: Radiator 4.6 on azradius1
Mon Aug 20 15:29:40 2012: ERR: Attribute number 1 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 2 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 4 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 32 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 30 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 7 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 6 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 61 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 1 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: DEBUG: Packet dump:
*** Received from 10.17.3.253 port 56581 ....
Packet length = 96
01 5f 00 60 82 e9 bc 71 14 97 5c 04 6e 7e 61 d7
55 73 12 64 01 0a 31 30 33 30 38 39 30 31 02 12
55 a4 81 b6 53 ba 86 ea a1 2e 59 fe d0 88 c0 06
04 06 0a 11 03 fd 20 11 4d 31 32 30 5f 32 5f 41
7a 65 72 63 65 6c 6c 1e 07 69 6e 74 65 6c 07 06
00 00 00 07 06 06 00 00 00 02 3d 06 00 00 00 05
Code: Access-Request
Identifier: 95
Authentic: <130><233><188>q<20><151>\<4>n~a<215>Us<18>d
Attributes:
Mon Aug 20 15:29:40 2012: ERR: Attribute number 5 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 40 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: DEBUG: Handling request with Handler 'Realm=DEFAULT'
Mon Aug 20 15:29:40 2012: ERR: Attribute number 4 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 32 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 44 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 8 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: DEBUG: Deleting session for , 10.17.3.253,
Mon Aug 20 15:29:40 2012: DEBUG: do query is: 'delete from RADONLINE where NASIDENTIFIER='10.17.3.253' and NASPORT=0':
Mon Aug 20 15:29:40 2012: ERR: do failed for 'delete from RADONLINE where NASIDENTIFIER='10.17.3.253' and NASPORT=0': MySQL server has gone away
Mon Aug 20 15:29:40 2012: DEBUG: Handling with Radius::AuthRADMIN:
Mon Aug 20 15:29:40 2012: DEBUG: Handling with Radius::AuthRADMIN:
Mon Aug 20 15:29:40 2012: ERR: Attribute number 79 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: DEBUG: Query is: 'select PASS_WORD, STATICADDRESS, TIMELEFT, MAXLOGINS, SERVICENAME, BADLOGINS, VALIDFROM, VALIDTO from RADUSERS where USERNAME=NULL':
Mon Aug 20 15:29:40 2012: DEBUG: Radius::AuthRADMIN looks for match with []
Mon Aug 20 15:29:40 2012: DEBUG: Radius::AuthRADMIN REJECT: No such user: []
Mon Aug 20 15:29:40 2012: DEBUG: AuthBy RADMIN result: REJECT, No such user
Mon Aug 20 15:29:40 2012: INFO: Access rejected for : No such user
Mon Aug 20 15:29:40 2012: ERR: Attribute number 2 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: DEBUG: do query is: 'insert into RADAUTHLOG (TIME_STAMP, USERNAME, TYPE, REASON) values (1345458580, '', 0, 'No such user')':
Mon Aug 20 15:29:40 2012: ERR: Attribute number 18 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 18 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 211 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: WARNING: No such attribute Unknown
Mon Aug 20 15:29:40 2012: DEBUG: Packet dump:
*** Sending to 10.17.3.253 port 56581 ....
Packet length = 20
03 5f 00 14 b6 1f d9 75 48 0c a7 5e 43 2c ef 8a
95 ef 61 35
Code: Access-Reject
Identifier: 95
Authentic: <182><31><217>uH<12><167>^C,<239><138><149><239>a5
Attributes:
Unknown = Request Denied
Mon Aug 20 15:29:40 2012: ERR: Attribute number 1 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 2 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 4 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 32 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 30 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 7 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 6 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 61 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 1 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: DEBUG: Packet dump:
*** Received from 10.17.3.254 port 55534 ....
Packet length = 96
01 74 00 60 2e e1 c9 65 e5 f0 46 5f 21 de 3f a2
ba 60 7a b5 01 0a 31 30 31 30 38 35 30 31 02 12
5c a7 cf 32 2b 8e b8 94 04 e6 aa 83 bc 7f 0a 9b
04 06 0a 11 03 fe 20 11 4d 31 32 30 5f 32 5f 41
7a 65 72 63 65 6c 6c 1e 07 69 6e 74 65 6c 07 06
00 00 00 07 06 06 00 00 00 02 3d 06 00 00 00 05
Code: Access-Request
Identifier: 116
Authentic: .<225><201>e<229><240>F_!<222>?<162><186>`z<181>
Attributes:
Mon Aug 20 15:29:40 2012: ERR: Attribute number 5 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 40 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: DEBUG: Handling request with Handler 'Realm=DEFAULT'
Mon Aug 20 15:29:40 2012: ERR: Attribute number 4 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 32 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 44 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 8 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: DEBUG: Deleting session for , 10.17.3.254,
Mon Aug 20 15:29:40 2012: DEBUG: do query is: 'delete from RADONLINE where NASIDENTIFIER='10.17.3.254' and NASPORT=0':
Mon Aug 20 15:29:40 2012: DEBUG: Handling with Radius::AuthRADMIN:
Mon Aug 20 15:29:40 2012: DEBUG: Handling with Radius::AuthRADMIN:
Mon Aug 20 15:29:40 2012: ERR: Attribute number 79 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: DEBUG: Query is: 'select PASS_WORD, STATICADDRESS, TIMELEFT, MAXLOGINS, SERVICENAME, BADLOGINS, VALIDFROM, VALIDTO from RADUSERS where USERNAME=NULL':
Mon Aug 20 15:29:40 2012: DEBUG: Radius::AuthRADMIN looks for match with []
Mon Aug 20 15:29:40 2012: DEBUG: Radius::AuthRADMIN REJECT: No such user: []
Mon Aug 20 15:29:40 2012: DEBUG: AuthBy RADMIN result: REJECT, No such user
Mon Aug 20 15:29:40 2012: INFO: Access rejected for : No such user
Mon Aug 20 15:29:40 2012: ERR: Attribute number 2 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: DEBUG: do query is: 'insert into RADAUTHLOG (TIME_STAMP, USERNAME, TYPE, REASON) values (1345458580, '', 0, 'No such user')':
Mon Aug 20 15:29:40 2012: ERR: Attribute number 18 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 18 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 211 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: WARNING: No such attribute Unknown
Mon Aug 20 15:29:40 2012: DEBUG: Packet dump:
*** Sending to 10.17.3.254 port 55534 ....
Packet length = 20
03 74 00 14 2c 8d 7b c2 26 e7 1c 6e fb 55 19 28
7d 70 01 b2
Code: Access-Reject
Identifier: 116
Authentic: ,<141>{<194>&<231><28>n<251>U<25>(}p<1><178>
Attributes:
Unknown = Request Denied
Mon Aug 20 15:29:40 2012: ERR: Attribute number 1 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 2 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 4 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 32 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 30 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 7 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 6 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 61 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 1 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: DEBUG: Packet dump:
*** Received from 10.17.3.254 port 55534 ....
Packet length = 96
01 77 00 60 98 7d e3 96 2b 01 7f cc ad da 0a 4f
ed c0 d7 78 01 0a 31 30 31 30 39 33 30 31 02 12
27 1e ef f4 37 b5 09 79 79 40 3e ff 29 77 39 5c
04 06 0a 11 03 fe 20 11 4d 31 32 30 5f 32 5f 41
7a 65 72 63 65 6c 6c 1e 07 69 6e 74 65 6c 07 06
00 00 00 07 06 06 00 00 00 02 3d 06 00 00 00 05
Code: Access-Request
Identifier: 119
Authentic: <152>}<227><150>+<1><127><204><173><218><10>O<237><192><215>x
Attributes:
Mon Aug 20 15:29:40 2012: ERR: Attribute number 5 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 40 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: DEBUG: Handling request with Handler 'Realm=DEFAULT'
Mon Aug 20 15:29:40 2012: ERR: Attribute number 4 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 32 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 44 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: ERR: Attribute number 8 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: DEBUG: Deleting session for , 10.17.3.254,
Mon Aug 20 15:29:40 2012: DEBUG: do query is: 'delete from RADONLINE where NASIDENTIFIER='10.17.3.254' and NASPORT=0':
Mon Aug 20 15:29:40 2012: DEBUG: Handling with Radius::AuthRADMIN:
Mon Aug 20 15:29:40 2012: DEBUG: Handling with Radius::AuthRADMIN:
Mon Aug 20 15:29:40 2012: ERR: Attribute number 79 is not defined in your dictionary
Mon Aug 20 15:29:40 2012: DEBUG: Query is: 'select PASS_WORD, STATICADDRESS, TIMELEFT, MAXLOGINS, SERVICENAME, BADLOGINS, VALIDFROM, VALIDTO from RADUSERS where USERNAME=NULL':
Mon Aug 20 15:29:40 2012: DEBUG: Radius::AuthRADMIN looks for match with []
Mon Aug 20 15:29:40 2012: DEBUG: Radius::AuthRADMIN REJECT: No such user: []
Mon Aug 20 15:29:40 2012: DEBUG: AuthBy RADMIN result: REJECT, No such user
Mon Aug 20 15:29:40 2012: INFO: Access rejected for : No such user
Mon Aug 20 15:29:40 2012: ERR: Attribute number 2 is not defined in your dictionary
-----Original Message-----
From: radiator-bounces at open.com.au [mailto:radiator-bounces at open.com.au] On Behalf Of Heikki Vatiainen
Sent: Friday, August 24, 2012 12:18 PM
To: radiator at open.com.au
Subject: Re: [RADIATOR] radius attribute errors
On 08/24/2012 11:35 AM, Murat Kocum wrote:
> We have mass disconnections on our radius server radiator and then
> they can not connect. It was a smooth running server until our
> provider made some changes on their side. What I see is that we are
> receiving username null when problems occur. We have no username null
> it should be 8 digit figure. Besides I see several attribute not found
> errors. Both of them appear together. For some periods of time they
> connect and work properly. What may be the problem?
One possibility is your dictionary file is missing or very broken. When you start radiusd with Trace 4 enabled you should see something like this:
Fri Aug 24 12:14:56 2012: DEBUG: Reading dictionary file '/home/hvn/radiator/Radiator-4.10/dictionary'
The actual location of dictionary file depends on your configuration.
The default is %D/dictionary where %D is DbDir which is by default /usr/local/etc/raddb. Many sites define DbDir to /etc/radiator
Please take a look at Radiator startup messages for hints about dictionary file and see that the dictionary file is correct. The packet dump looks reasonable and seems to contain User-Name, User-Password etc.
Thanks,
Heikki
> Packet length = 96
> 01 b9 00 60 fe 9f dc 6b 6f a0 55 c6 4f 6c 0c 7d 8c 66 b3 33 01 0a 31
> 30 35 31 31 34 30 31 02 12
> 56 76 5a 41 6b 86 97 f6 68 af 2c 3f 99 32 1a c3
> 04 06 0a 11 03 fe 20 11 4d 31 32 30 5f 32 5f 41 7a 65 72 63 65 6c 6c
> 1e 07 69 6e 74 65 6c 07 06
> 00 00 00 07 06 06 00 00 00 02 3d 06 00 00 00 05
> Code: Access-Request
> Identifier: 185
> Authentic: <254><159><220>ko<160>U<198>Ol<12>}<140>f<179>3
> Attributes:
>
> Mon Aug 20 17:07:48 2012: ERR: Attribute number 5 is not defined in
> your dictionary Mon Aug 20 17:07:48 2012: ERR: Attribute number 40 is
> not defined in your dictionary Mon Aug 20 17:07:48 2012: DEBUG:
> Handling request with Handler 'Realm=DEFAULT'
> Mon Aug 20 17:07:48 2012: ERR: Attribute number 4 is not defined in
> your dictionary Mon Aug 20 17:07:48 2012: ERR: Attribute number 32 is
> not defined in your dictionary Mon Aug 20 17:07:48 2012: ERR:
> Attribute number 44 is not defined in your dictionary Mon Aug 20
> 17:07:48 2012: ERR: Attribute number 8 is not defined in your
> dictionary Mon Aug 20 17:07:48 2012: DEBUG: Deleting session for ,
> 10.17.3.254, Mon Aug 20 17:07:48 2012: DEBUG: do query is: 'delete
> from RADONLINE where NASIDENTIFIER='10.17.3.254' and NASPORT=0':
> Mon Aug 20 17:07:48 2012: DEBUG: Handling with Radius::AuthRADMIN:
> Mon Aug 20 17:07:48 2012: DEBUG: Handling with Radius::AuthRADMIN:
> Mon Aug 20 17:07:48 2012: ERR: Attribute number 79 is not defined in
> your dictionary Mon Aug 20 17:07:48 2012: DEBUG: Query is: 'select
> PASS_WORD, STATICADDRESS, TIMELEFT, MAXLOGINS, SERVICENAME, BADLOGINS,
> VALIDFROM, VALIDTO from RADUSERS where USERNAME=NULL':
> Mon Aug 20 17:07:48 2012: DEBUG: Radius::AuthRADMIN looks for match
> with [] Mon Aug 20 17:07:48 2012: DEBUG: Radius::AuthRADMIN REJECT: No
> such user: [] Mon Aug 20 17:07:48 2012: DEBUG: AuthBy RADMIN result:
> REJECT, No such user Mon Aug 20 17:07:48 2012: INFO: Access rejected
> for : No such user Mon Aug 20 17:07:48 2012: ERR: Attribute number 2
> is not defined in your dictionary Mon Aug 20 17:07:48 2012: DEBUG: do
> query is: 'insert into RADAUTHLOG (TIME_STAMP, USERNAME, TYPE, REASON)
> values (1345464468, '', 0, 'No such
> user')':
> Mon Aug 20 17:07:48 2012: ERR: Attribute number 18 is not defined in
> your dictionary Mon Aug 20 17:07:48 2012: ERR: Attribute number 18 is
> not defined in your dictionary Mon Aug 20 17:07:48 2012: ERR:
> Attribute number 211 is not defined in your dictionary Mon Aug 20
> 17:07:48 2012: WARNING: No such attribute Unknown Mon Aug 20 17:07:48
> 2012: DEBUG: Packet dump:
> *** Sending to 10.17.3.254 port 63160 ....
>
> Packet length = 20
> 03 b9 00 14 18 88 f4 7d 1f 34 4b f5 d8 f9 ea 96
> 05 ea b3 ef
> Code: Access-Reject
> Identifier: 185
> Authentic:
> <24><136><244>}<31>4K<245><216><249><234><150><5><234><179><239>
> Attributes:
> Unknown = Request Denied
>
> <http://www.iddaa.com/>
>
> *Disclaimer:*
>
> ----------------------------------------------------------------------
> --
>
> Bu e-posta mesaji ve ekleri sadece gonderildigi kisi veya kuruma
> ozeldir. Eger dogru kisiye ulasmadigini dusunuyorsaniz, bu mesajin
> yonlendirilmesi, kopyalanmasi veya herhangi bir sekilde kullanilmasi
> yasaktir.Mesaj iceriginde bulunan fikir ve yorumlar, INTELTEK'e degil
> sadece gondericiye aittir. Bu mesaj bilinen tum viruslere karsi test
> edilmistir.
> <http://www.iddaa.com/>
> This e-mail and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. If you are not the intended recipient you are hereby
> notified that any dissemination, copying or use of the information is prohibited.
> The opinions expressed in this message belong to sender alone. There
> is no implied endorsement by INTELTEK.This e-mail has been scanned for
> all known computer viruses.
>
> ----------------------------------------------------------------------
> --
>
>
> _______________________________________________
> radiator mailing list
> radiator at open.com.au
> http://www.open.com.au/mailman/listinfo/radiator
>
--
Heikki Vatiainen <hvn at open.com.au>
Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP, DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS, NetWare etc.
_______________________________________________
radiator mailing list
radiator at open.com.au
http://www.open.com.au/mailman/listinfo/radiator
<P align=left><A href="http://www.iddaa.com/"></A> </P>
<P style="MARGIN-LEFT: -1px" align=left><B>Disclaimer:</B></P>
<HR>
<P align=left><FONT size=2>Bu e-posta mesaji ve ekleri sadece gonderildigi kisi veya kuruma ozeldir. Eger dogru kisiye ulasmadigini dusunuyorsaniz, bu mesajin yonlendirilmesi, kopyalanmasi veya herhangi bir sekilde kullanilmasi yasaktir.Mesaj iceriginde bulunan fikir ve yorumlar, INTELTEK'e degil sadece gondericiye aittir. Bu mesaj bilinen tum viruslere karsi test edilmistir.</FONT><BR><A href="http://www.iddaa.com/"><IMG height=60 src="http://www.inteltek.com.tr/exchange_banner/468x60.gif" width=468 border=0></A><BR><FONT size=2>This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient you are hereby notified that any dissemination, copying or use of the information is prohibited. The opinions expressed in this message belong to sender alone. There is no implied endorsement by INTELTEK.This e-mail has been scanned for all known computer viruses.</FONT></P>
<HR>
More information about the radiator
mailing list