Hello Jeremy -
This sounds very much like the shared secrets are not set correctly.
hth
Hugh
On Saturday 14 July 2001 00:55, Jeremy Bushman wrote:
> I am having some problems getting our new MegaPOP sites to auth users. The
> problem is that the username makes it ok, but the password shows up as a
> bunch of garbage.
>
> I end up with entries like this:
>
> Tue Jul 10 20:55:17
> 2001:994816517:USERNAME:^Wg^UzaW:PASSWORD:FAIL:64.24.37.5 Tue Jul 10
> 20:55:35 2001:994816535:USERNAME:^Wg^UzaW:PASSWORD:FAIL:64.24.37.5 Tue Jul
> 10 20:58:50
> 2001:994816730:USERNAME:^X^S^Jo^A^N^W>Bb-^[:PASSWORD:FAIL:64.24.37.4 Tue
> Jul 10 20:59:08
> 2001:994816748:USERNAME:^X^S^Jo^A^N^W>Bb-^[:PASSWORD:FAIL:64.24.37.4
>
> I've tried various MegaPOP numbers across the country and come up with the
> same problem. I can take the same user and dial into any of our POP's just
> fine.
>
> I've presented this information to MegaPOP and they just replied:
>
> "When I run a radtest through our radius, I get a timeout. When I
> bounce it directly off your radius, I get "Request Denied". This
> sounds like a problem(s) in your radius configuration."
>
> Could this possibly be a problem with my Client statement? An example:
>
> <Client 216.126.128.8>
> Secret *******
> RewriteUsername s/\s//g;
> DupInterval 300
> NasType ignore
> </Client>
>
> I have an entry exactly like this for each of the MegaPOP radius servers,
> as well as a few of our RAS's. (Something with the "NasType ignore" that
> we need)
>
> I am also doing some re-writes in the Handler field, but that is just
> appending domains and converting uppercase to lowercase, the same things
> we are doing for all our POP's.
>
> I've tried a Trace 4 and it just looks like we are getting a bad password
> from MegaPOP.
>
> Anyone have any insight or ideas?
>
> Thank you.
>
> ----------------------------------------------------
> Jeremy Bushman (Voice) 563-557-8463
> Network Operations Center
> MidWest Communications, Inc.
> 241 Main St. [EMAIL PROTECTED]
> Dubuque, IA 52001 [EMAIL PROTECTED]
> ----------------------------------------------------
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
