Dear Pierre Strazza, It means Cisco has a Vendor-Specific packet structure different from one recommended in RFC (or sends a buggy packet). Can you sniff the packet?
--Wednesday, March 20, 2002, 3:45:27 AM, you wrote to [EMAIL PROTECTED]: PS> Here is the radius.log extract : PS> Wed Mar 20 01:41:30 2002 : Error: WARNING: Malformed RADIUS packet from host PS> x.x.x.x: Vendor specific attributes do not exactly fill Vendor-Specific PS> Same error is reported while running in debug mode. PS> No further accounting information is logged. PS> The cisco box is a PIX firewall v6.1, authenticating users thru the PS> freeradius server for VPN access. PS> Pierre. PS> -----Message d'origine----- PS> De : Chris Parker [mailto:[EMAIL PROTECTED]] PS> Envoy� : mardi 19 mars 2002 19:13 PS> � : [EMAIL PROTECTED] PS> Objet : RE: PIX v6.1 accounting problem PS> At 05:19 PM 3/19/2002 +0100, Pierre Strazza wrote: >>The request is not loggued since an error message is reported in the >>radius.log file, indicating some non conform attributes - not proceeded. >> >>the dictionary.cisco seems to be already included in the dictionary file by >>default .. >> >>Any idea ? PS> It would really really really help if you could provide the error message PS> printed by the server, as well as any printed when you run it in debug PS> mode. PS> -Chris PS> -- PS> \\\|||/// \ StarNet Inc. \ Chris Parker PS> \ ~ ~ / \ WX *is* Wireless! \ Director, Engineering PS> | @ @ | \ http://www.starnetwx.net \ (847) 963-0116 PS> oOo---(_)---oOo--\------------------------------------------------------ PS> \ Wholesale Internet Services - http://www.megapop.net PS> - PS> List info/subscribe/unsubscribe? See PS> http://www.freeradius.org/list/users.html PS> . PS> . PS> . PS> - PS> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- ~/ZARAZA �� �����... � ���������� ����� ������������ ���, �� ������� ������������� � �����-�� �������� ������ ����. (����) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
