Hello Martin, RFC 2865 clearly specifies the behaviour in case a request contains Proxy-State. So not returning Proxy-State correctly is a violation of the RFC. Sometimes things go wrong when requests are proxied twice with each proxy adding Proxy-State. But the RFC covers this as well.
Met vriendelijke groet, Hylke Zuidema Developmentmanager KPN - Internet Operator Tel: +31 70 451 33 70 -----Oorspronkelijk bericht----- Van: Martin Edge [mailto:[EMAIL PROTECTED] Verzonden: donderdag 19 juni 2003 10:14 Aan: 'Hugh Irvine' CC: [EMAIL PROTECTED]; [EMAIL PROTECTED] Onderwerp: RE: (RADIATOR) Using UseExtendedId Have 1 instance of MacRadius, one of ICRadius 0.18, one X-Radius 1.2.1 which I've never heard of. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martin Edge Sent: Thursday, 19 June 2003 5:31 PM To: 'Hugh Irvine' Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: RE: (RADIATOR) Using UseExtendedId I'll see I can find out which products these customers are using.. (pretty sure it's not Radiator) Thanks Martin ____________________________________________ Martin Edge Senior Applications Engineer [EMAIL PROTECTED] KBS Internet Pty Ltd Phone: 1300 302 134 Phone: +61 3 9868 9999 Fax: +61 3 9868 9900 www.kbs.net.au Level 9 432 St Kilda Rd Melbourne VIC 3004 ____________________________________________ NOTICE - This message contains information intended only for the use of the addressee named above. It may also be confidential and/or privileged. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hugh Irvine Sent: Thursday, 19 June 2003 5:12 PM To: Martin Edge Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: (RADIATOR) Using UseExtendedId Hello Martin - Not returning a Proxy-State attribute is quite broken behaviour. regards Hugh On Thursday, Jun 19, 2003, at 17:00 Australia/Melbourne, Martin Edge wrote: > Hi Hugh, > > It appears they are not responding with the Proxy-State attribute, > therefore our RADIUS system is coming up unknown reply to packet. > > For instance: > Thu Jun 19 16:47:47 2003: WARNING: Unknown reply received in AuthRADIUS > for request 239 from 203.30.19.248:1846 > Thu Jun 19 16:47:47 2003: WARNING: Unknown reply received in AuthRADIUS > for request 240 from 203.30.19.248:1846 > Thu Jun 19 16:47:50 2003: WARNING: Unknown reply received in AuthRADIUS > for request 241 from 203.30.19.248:1846 > Thu Jun 19 16:47:50 2003: WARNING: Unknown reply received in AuthRADIUS > for request 241 from 202.71.168.62:1846 > Thu Jun 19 16:47:53 2003: WARNING: Unknown reply received in AuthRADIUS > for request 242 from 202.71.168.62:1846 > Thu Jun 19 16:47:55 2003: WARNING: Unknown reply received in AuthRADIUS > for request 242 from 203.30.19.248:1846 > Thu Jun 19 16:47:55 2003: WARNING: Unknown reply received in AuthRADIUS > for request 243 from 202.71.168.62:1846 > Thu Jun 19 16:47:58 2003: WARNING: Unknown reply received in AuthRADIUS > for request 243 from 203.30.19.248:1846 > Thu Jun 19 16:48:00 2003: WARNING: Unknown reply received in AuthRADIUS > for request 244 from 203.30.19.248:1846 > > *** Sending to 202.4.30.2 port 1646 .... > Code: Accounting-Request > Identifier: 74 > Authentic: <0><0><0><0><0><0><0><0><0><0><0><0><0><0><0><0> > Attributes: > Acct-Session-Id = "00002F85" > Framed-Protocol = PPP > Framed-IP-Address = 203.194.16.52 > Ascend-Connect-Progress = prLanSessionUp > Acct-Authentic = RADIUS > Acct-Status-Type = Start > Calling-Station-Id = "XXXXXXX" > Called-Station-Id = "XXXXXXX" > NAS-Port-Type = Async > NAS-Port = 7393 > Service-Type = Framed-User > NAS-IP-Address = 203.194.30.8 > Ascend-Session-Svr-Key = "XXXXXXX" > NAS-Identifier = "ACC08-XXXXXX" > Acct-Delay-Time = 0 > User-Name = "XXXXX" > Timestamp = 1056005873 > Proxy-State = OSC-Extended-Id=330 > > Thu Jun 19 16:57:53 2003: DEBUG: Accounting accepted > > Thu Jun 19 16:57:53 2003: DEBUG: Packet dump: > *** Received from 202.4.30.2 port 1646 .... > Code: Accounting-Response > Identifier: 74 > Authentic: <181><156>NP<130>;{`<21><226>+{U<133><140><6> > Attributes: > > Thu Jun 19 16:57:53 2003: WARNING: Unknown reply received in AuthRADIUS > for request 74 from 202.4.30.2:1646 > > Thanks > Martin > > > ____________________________________________ > Martin Edge > Senior Applications Engineer > [EMAIL PROTECTED] > KBS Internet Pty Ltd > Phone: 1300 302 134 > Phone: +61 3 9868 9999 > Fax: +61 3 9868 9900 > www.kbs.net.au > > Level 9 > 432 St Kilda Rd > Melbourne VIC 3004 > > NOTICE - This message contains information intended only for the use of > the addressee named above. It may also be confidential and/or > privileged. If you are not the intended recipient of this message you > are hereby notified that you must not disseminate, copy or take any > action in reliance on it. If you have received this message in error > please notify. > > > > > > -----Original Message----- > From: Hugh Irvine [mailto:[EMAIL PROTECTED] > Sent: Thursday, 19 June 2003 4:38 PM > To: Martin Edge; [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: Re: (RADIATOR) Using UseExtendedId > > > > Hello Martin - > > I am curious to know what the problem is with these customers? What > exactly do they not support? > > I have copied Mike on this mail so he can answer the per-host use of > UseExtendedId. > > regards > > Hugh > > > On Thursday, Jun 19, 2003, at 16:23 Australia/Melbourne, Martin Edge > wrote: > > > Hey Guys, > > Having a few issues after implementing UseExtendedId in our network, > much like your documentation suggests, it all works fine except when we > have a customer that doesn't support it within their RADIUS system. > > Do you know whether UseExtendedId will work as a row returned within > SQLRADIUS? 0 or blank for dont use, 1 for use it? > > Thanks > Martin > > ____________________________________________ > Martin Edge > Senior Applications Engineer > [EMAIL PROTECTED] > KBS Internet Pty Ltd > Phone: 1300 302 134 > Phone: +61 3 9868 9999 > Fax: +61 3 9868 9900 > www.kbs.net.au > > <image.tiff> > > > NOTICE - This message contains information intended only for the use of > the addressee named above. It may also be confidential and/or > privileged. If you are not the intended recipient of this message you > are hereby notified that you must not disseminate, copy or take any > action in reliance on it. If you have received this message in error > please notify. > > > > > > > > > NB: have you included a copy of your configuration file (no secrets), > together with a trace 4 debug showing what is happening? > > -- > Radiator: the most portable, flexible and configurable RADIUS server > anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. > - > Nets: internetwork inventory and management - graphical, extensible, > flexible with hardware, software, platform and database independence. > > NB: have you included a copy of your configuration file (no secrets), together with a trace 4 debug showing what is happening? -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. - Nets: internetwork inventory and management - graphical, extensible, flexible with hardware, software, platform and database independence. === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message. === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message. === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message. === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
