Re: (RADIATOR) Accounting dictionary for netserver card
IgnoreAcctSignature seems to have rectified the accting interference. Thanks, Oliver On Mon, 7 Jun 1999, Mike McCauley wrote: > Hi Oliver, > > On Jun 4, 4:57pm, O Stockhammer wrote: > > Subject: Re: (RADIATOR) Accounting dictionary for netserver card > > > > These are from the logfile: > > > > Fri Jun 4 16:44:12 1999: ERR: Attribute number 0 (vendor ) is not defined > > in your dictionary > That is quite bizarre, there is no such attribute > > > Fri Jun 4 16:45:18 1999: ERR: Attribute number 73 (vendor ) is not > > defined in your dictionary > So is that. > > > Fri Jun 4 16:45:18 1999: ERR: Attribute number 116 (vendor ) is not > > defined in your dictionary > That is supposedly Ascend-Appletalk-Route > > > Fri Jun 4 16:46:24 1999: ERR: Attribute number 240 (vendor ) is not > > defined in your dictionary > That is supposedly Ascend-Add-Seconds > > > Thu Jun 3 20:31:37 1999: ERR: Attribute number 144 (vendor ) is not > > defined in your dictionary > That is Ascend-Assign-IP-Client > > That all looks very strange, almost as if the incoming packet is corrupted in > being incorrectly interpreted. Can you send a hex packet dump of one of these > requests? You can get het packet dumps at trace level 5. > > > > > > > These are the logs from the SQL log: > > > > 928528731 4 Rewrote user name to > > kaligula > > > > 928528731 4 Handling with > > Radius::AuthSQL > > > > 928528731 4Handling with > > Radius::AuthUNIX > > > > 928528731 4Radius::AuthUNIX looks for match with > > kaligula > > > > 928528731 4 Radius::AuthUNIX > > ACCEPT: > > > > 928528731 4 Access accepted for > > kaligula > > > > 928528736 1 Bad authenticator in request from 207.240.140.6 > > (207.240.140.6) > > > > This is what I get at trace level 5. I am logging both to a logfile and > > MySQL and accounting is going to both a detail file and MySQL. Accounting > > works for my other chassies using Hyperarc cards. > > It seems lime auth is working, but accounting is complaining about "Bad > authenticator". This is usually an indication that you need IgnoreAcctSignature > set for that NAS. But in the light of the very strange results above, it may be > something else. The packet dump will help. > > Im sorry you are having this trouble. I hope we get you on the air soon. > > Cheers. > > > > Thanks, > > Oliver > > > > On Fri, 4 Jun 1999, Mike McCauley wrote: > > > > > Hi Oliver, > > > > > > can you send us a fragment of your radiator log file at trace level 4, > showing > > > what happens when you receive accounting packets from your Netserver. I > would > > > exepct to see Radiator complaining about missing dictionary entries. That > will > > > help us track down the missing attributes. > > > > > > Cheers. > > > > > > > > > On Jun 3, 8:49pm, O Stockhammer wrote: > > > > Subject: (RADIATOR) Accounting dictionary for netserver card > > > > > > > > Hello, > > > > We are using both Netserver and Hyperarc TotalControl Cards. > > > > Radiator is authenticating fine off of both but the Netserver Cards are > > > > missing entries for the dictionary file and therefore no accounting > > > > happens for them. > > > > For some reason I am missing entries in the dictionary file for > > > > the netserver card. I am using your dictionary.usr file that you > > > > provided. What entries do I need for accounting to work? > > > > > > > > I think it has to do with the vendor specific entries like > > > > > > > > USR-Chassis-Call-Slot = 0 > > > > rather than > > > > Chassis-Call-Slot = 0 which is in the dictionary file > > > > > > > > Thank you, > > > > Oliver Stockhammer > > > > Systems > > > > The Internet Channel > > > > > > > > > > > > === > > > > Archive at http://www.thesite.com.au/~radiator/ > > > > To unsubscribe, email '[EMAIL PROTECTED]' with > > > > 'unsubscribe radiator' in the body of the message. > > > >-- End of excerpt from O Stockhammer > > > > > > > > &
Re: (RADIATOR) Accounting dictionary for netserver card
Hi Oliver, On Jun 4, 4:57pm, O Stockhammer wrote: > Subject: Re: (RADIATOR) Accounting dictionary for netserver card > > These are from the logfile: > > Fri Jun 4 16:44:12 1999: ERR: Attribute number 0 (vendor ) is not defined > in your dictionary That is quite bizarre, there is no such attribute > Fri Jun 4 16:45:18 1999: ERR: Attribute number 73 (vendor ) is not > defined in your dictionary So is that. > Fri Jun 4 16:45:18 1999: ERR: Attribute number 116 (vendor ) is not > defined in your dictionary That is supposedly Ascend-Appletalk-Route > Fri Jun 4 16:46:24 1999: ERR: Attribute number 240 (vendor ) is not > defined in your dictionary That is supposedly Ascend-Add-Seconds > Thu Jun 3 20:31:37 1999: ERR: Attribute number 144 (vendor ) is not > defined in your dictionary That is Ascend-Assign-IP-Client That all looks very strange, almost as if the incoming packet is corrupted in being incorrectly interpreted. Can you send a hex packet dump of one of these requests? You can get het packet dumps at trace level 5. > > These are the logs from the SQL log: > > 928528731 4 Rewrote user name to > kaligula > > 928528731 4 Handling with > Radius::AuthSQL > > 928528731 4Handling with > Radius::AuthUNIX > > 928528731 4Radius::AuthUNIX looks for match with > kaligula > > 928528731 4 Radius::AuthUNIX > ACCEPT: > > 928528731 4 Access accepted for > kaligula > > 928528736 1 Bad authenticator in request from 207.240.140.6 > (207.240.140.6) > > This is what I get at trace level 5. I am logging both to a logfile and > MySQL and accounting is going to both a detail file and MySQL. Accounting > works for my other chassies using Hyperarc cards. It seems lime auth is working, but accounting is complaining about "Bad authenticator". This is usually an indication that you need IgnoreAcctSignature set for that NAS. But in the light of the very strange results above, it may be something else. The packet dump will help. Im sorry you are having this trouble. I hope we get you on the air soon. Cheers. > > Thanks, > Oliver > > On Fri, 4 Jun 1999, Mike McCauley wrote: > > > Hi Oliver, > > > > can you send us a fragment of your radiator log file at trace level 4, showing > > what happens when you receive accounting packets from your Netserver. I would > > exepct to see Radiator complaining about missing dictionary entries. That will > > help us track down the missing attributes. > > > > Cheers. > > > > > > On Jun 3, 8:49pm, O Stockhammer wrote: > > > Subject: (RADIATOR) Accounting dictionary for netserver card > > > > > > Hello, > > > We are using both Netserver and Hyperarc TotalControl Cards. > > > Radiator is authenticating fine off of both but the Netserver Cards are > > > missing entries for the dictionary file and therefore no accounting > > > happens for them. > > > For some reason I am missing entries in the dictionary file for > > > the netserver card. I am using your dictionary.usr file that you > > > provided. What entries do I need for accounting to work? > > > > > > I think it has to do with the vendor specific entries like > > > > > > USR-Chassis-Call-Slot = 0 > > > rather than > > > Chassis-Call-Slot = 0 which is in the dictionary file > > > > > > Thank you, > > > Oliver Stockhammer > > > Systems > > > The Internet Channel > > > > > > > > > === > > > Archive at http://www.thesite.com.au/~radiator/ > > > To unsubscribe, email '[EMAIL PROTECTED]' with > > > 'unsubscribe radiator' in the body of the message. > > >-- End of excerpt from O Stockhammer > > > > > > > > -- > > Mike McCauley [EMAIL PROTECTED] > > Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW > > 24 Bateman St Hampton, VIC 3188 Australia http://www.open.com.au > > Phone +61 3 9598-0985 Fax +61 3 9598-0955 > > > > Radiator: the most portable, flexible and configurable RADIUS server > > anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, > > Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, > > NT, Rhapsody > > > > > === > Archive at http://www.thesite.com.au/~radiator/ > To unsubscribe, email '[EMAIL PROTECTED]' with >
Re: (RADIATOR) Accounting dictionary for netserver card
These are from the logfile: Fri Jun 4 16:44:12 1999: ERR: Attribute number 0 (vendor ) is not defined in your dictionary Fri Jun 4 16:45:18 1999: ERR: Attribute number 73 (vendor ) is not defined in your dictionary Fri Jun 4 16:45:18 1999: ERR: Attribute number 116 (vendor ) is not defined in your dictionary Fri Jun 4 16:46:24 1999: ERR: Attribute number 240 (vendor ) is not defined in your dictionary Thu Jun 3 20:31:37 1999: ERR: Attribute number 144 (vendor ) is not defined in your dictionary These are the logs from the SQL log: 928528731 4 Rewrote user name to kaligula 928528731 4 Handling with Radius::AuthSQL 928528731 4Handling with Radius::AuthUNIX 928528731 4Radius::AuthUNIX looks for match with kaligula 928528731 4 Radius::AuthUNIX ACCEPT: 928528731 4 Access accepted for kaligula 928528736 1 Bad authenticator in request from 207.240.140.6 (207.240.140.6) This is what I get at trace level 5. I am logging both to a logfile and MySQL and accounting is going to both a detail file and MySQL. Accounting works for my other chassies using Hyperarc cards. Thanks, Oliver On Fri, 4 Jun 1999, Mike McCauley wrote: > Hi Oliver, > > can you send us a fragment of your radiator log file at trace level 4, showing > what happens when you receive accounting packets from your Netserver. I would > exepct to see Radiator complaining about missing dictionary entries. That will > help us track down the missing attributes. > > Cheers. > > > On Jun 3, 8:49pm, O Stockhammer wrote: > > Subject: (RADIATOR) Accounting dictionary for netserver card > > > > Hello, > > We are using both Netserver and Hyperarc TotalControl Cards. > > Radiator is authenticating fine off of both but the Netserver Cards are > > missing entries for the dictionary file and therefore no accounting > > happens for them. > > For some reason I am missing entries in the dictionary file for > > the netserver card. I am using your dictionary.usr file that you > > provided. What entries do I need for accounting to work? > > > > I think it has to do with the vendor specific entries like > > > > USR-Chassis-Call-Slot = 0 > > rather than > > Chassis-Call-Slot = 0 which is in the dictionary file > > > > Thank you, > > Oliver Stockhammer > > Systems > > The Internet Channel > > > > > > === > > Archive at http://www.thesite.com.au/~radiator/ > > To unsubscribe, email '[EMAIL PROTECTED]' with > > 'unsubscribe radiator' in the body of the message. > >-- End of excerpt from O Stockhammer > > > > -- > Mike McCauley [EMAIL PROTECTED] > Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW > 24 Bateman St Hampton, VIC 3188 Australia http://www.open.com.au > Phone +61 3 9598-0985 Fax +61 3 9598-0955 > > Radiator: the most portable, flexible and configurable RADIUS server > anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, > Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, > NT, Rhapsody > === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Accounting dictionary for netserver card
Hi Oliver, can you send us a fragment of your radiator log file at trace level 4, showing what happens when you receive accounting packets from your Netserver. I would exepct to see Radiator complaining about missing dictionary entries. That will help us track down the missing attributes. Cheers. On Jun 3, 8:49pm, O Stockhammer wrote: > Subject: (RADIATOR) Accounting dictionary for netserver card > > Hello, > We are using both Netserver and Hyperarc TotalControl Cards. > Radiator is authenticating fine off of both but the Netserver Cards are > missing entries for the dictionary file and therefore no accounting > happens for them. > For some reason I am missing entries in the dictionary file for > the netserver card. I am using your dictionary.usr file that you > provided. What entries do I need for accounting to work? > > I think it has to do with the vendor specific entries like > > USR-Chassis-Call-Slot = 0 > rather than > Chassis-Call-Slot = 0 which is in the dictionary file > > Thank you, > Oliver Stockhammer > Systems > The Internet Channel > > > === > Archive at http://www.thesite.com.au/~radiator/ > To unsubscribe, email '[EMAIL PROTECTED]' with > 'unsubscribe radiator' in the body of the message. >-- End of excerpt from O Stockhammer -- Mike McCauley [EMAIL PROTECTED] Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW 24 Bateman St Hampton, VIC 3188 Australia http://www.open.com.au Phone +61 3 9598-0985 Fax +61 3 9598-0955 Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, NT, Rhapsody === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
(RADIATOR) Accounting dictionary for netserver card
Hello, We are using both Netserver and Hyperarc TotalControl Cards. Radiator is authenticating fine off of both but the Netserver Cards are missing entries for the dictionary file and therefore no accounting happens for them. For some reason I am missing entries in the dictionary file for the netserver card. I am using your dictionary.usr file that you provided. What entries do I need for accounting to work? I think it has to do with the vendor specific entries like USR-Chassis-Call-Slot = 0 rather than Chassis-Call-Slot = 0 which is in the dictionary file Thank you, Oliver Stockhammer Systems The Internet Channel === Archive at http://www.thesite.com.au/~radiator/ To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.