--- Forwarded mail from [EMAIL PROTECTED]

Date: Wed, 26 Jul 2000 01:40:16 +1000 (EST)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: BOUNCE [EMAIL PROTECTED]:    Non-member submission from [Patricia
Jung <[EMAIL PROTECTED]>]

>From mikem  Wed Jul 26 01:40:11 2000
Received: by oscar.open.com.au (8.9.0/8.9.0) id BAA17829
        for [EMAIL PROTECTED]; Wed, 26 Jul 2000 01:40:09 +1000 (EST)
>Received: from lillegroenn.enitel.net (pc44-237.telia.no [194.19.44.237]) by
perki.connect.com.au with ESMTP id BAA18134
  (8.8.8/IDA-1.7 for <[EMAIL PROTECTED]>); Wed, 26 Jul 2000 01:14:06 +1000
(EST)
Received: from lillegroenn.enitel.net (pc44-237.telia.no [194.19.44.237]) by
perki.connect.com.au with ESMTP id BAA18134
  (8.8.8/IDA-1.7 for <[EMAIL PROTECTED]>); Wed, 26 Jul 2000 01:14:06 +1000
(EST)
Received: by lillegroenn.enitel.net id <S102105AbQGYPJy>;
        Tue, 25 Jul 2000 17:09:54 +0200
Date:   Tue, 25 Jul 2000 17:09:54 +0200
From: Patricia Jung <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Problem with <AuthBy>-chain
Message-ID: <[EMAIL PROTECTED]>
Mail-Followup-To: [EMAIL PROTECTED]
Mime-Version: 1.0
User-Agent: Mutt/1.0.1i
X-Accept-Language: de, en, no
Content-Type: text/plain; charset=us-ascii


Hi there,

I wonder whether someone has a hint concerning the following problem:

Radiator (2.16.1 on FreeBSD 4.0) authenticates incoming users via MySQL.
If it can't find a matching entry, it hands over to a SQL-patched Livingstone
derivative on another box which I haven't much control over.

Whilst testing this scenario with radpwst, I found a strange but reproduceable
behaviour: In case the user can't be authenticated by Radiator but
by the Livingstone, radpwst returns with
        sending Access-Request...
        No reply

... and the log says:

*** Received from 1*5.2*4.2*0.2*1 port 1645 ....
Code:       Access-Accept
Identifier: 5
Authentic:  <176><19><225>!<229>3<200><127><166><141>v*<165>}<201><154>
Attributes:
        Service-Type = Framed-User

        Tue Jul 25 17:04:58 2000: WARNING: Unknown reply received in AuthRADIUS
for request 5 from 1*5.2*4.2*0.2*1:1645
        Tue Jul 25 17:05:03 2000: INFO: AuthRADIUS: No reply after 3
retransmissions to 1645 for bayRS1400  (238)
        Tue Jul 25 17:05:03 2000: INFO: AuthRADIUS: No response from any RADIUS
hosts. Ignoring


However, as soon as I repeat the whole request, it suddenly succeeds:

*** Received from 1*5.2*4.2*0.2*1 port 1645 ....
Code:       Access-Accept
Identifier: 6
Authentic:  <153><230>p<134><237>&3-<153><169>zAD<188>\<182>
Attributes:
        Service-Type = Framed-User

        Tue Jul 25 17:07:59 2000: DEBUG: Received reply in AuthRADIUS for req 6
from 1*5.2*4.2*0.2*1:1645
        Tue Jul 25 17:07:59 2000: DEBUG: Packet dump:
        *** Sending to 127.0.0.1 port 4312 ....
        Code:       Access-Accept
        Identifier: 179
        Authentic:  1234567890123456
        Attributes:
                Service-Type = Framed-User


Anyone an idea? The Radiator configuration looks as follows:

    <AuthBy GROUP>

        AuthByPolicy ContinueWhileReject

        <AuthBy SQL>

          DBSource      dbi:mysql:radius
          DBUsername    ***
          DBAuth        ***

          FailureBackoffTime    300

          AuthSelect    select PASSWORD from SUBSCRIBERS where USERNAME='%n'

          AuthColumnDef         0, Encrypted-Password, check


        </AuthBy>

        <AuthBy RADIUS>
          Host          ***
          Secret        ***
          AuthPort      1645
        </AuthBy>

    </AuthBy>


Thanks for taking time,


        Patricia



---End of forwarded mail from [EMAIL PROTECTED]

-- 
Mike McCauley                               [EMAIL PROTECTED]
Open System Consultants Pty. Ltd            Unix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985                       Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, Active Directory etc etc 
on Unix, Win95/8, 2000, NT, MacOS 9, MacOS X
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

Reply via email to