Re: (RADIATOR) Accounting dictionary for netserver card

1999-06-07 Thread O Stockhammer


IgnoreAcctSignature seems to have rectified the accting interference.

Thanks,
Oliver

On Mon, 7 Jun 1999, Mike McCauley wrote:

> Hi Oliver,
> 
> On Jun 4,  4:57pm, O Stockhammer wrote:
> > Subject: Re: (RADIATOR) Accounting dictionary for netserver card
> >
> > These are from the logfile:
> >
> > Fri Jun  4 16:44:12 1999: ERR: Attribute number 0 (vendor ) is not defined
> > in your dictionary
> That is quite bizarre, there is no such attribute
> 
> > Fri Jun  4 16:45:18 1999: ERR: Attribute number 73 (vendor ) is not
> > defined in your dictionary
> So is that.
> 
> > Fri Jun  4 16:45:18 1999: ERR: Attribute number 116 (vendor ) is not
> > defined in your dictionary
> That is supposedly Ascend-Appletalk-Route
> 
> > Fri Jun  4 16:46:24 1999: ERR: Attribute number 240 (vendor ) is not
> > defined in your dictionary
> That is supposedly Ascend-Add-Seconds
> 
> > Thu Jun  3 20:31:37 1999: ERR: Attribute number 144 (vendor ) is not
> > defined in your dictionary
> That is Ascend-Assign-IP-Client
> 
> That all looks very strange, almost as if the incoming packet is corrupted in
> being incorrectly interpreted. Can you send a hex packet dump of one of these
> requests? You can get het packet dumps at trace level 5.
> 
> 
> 
> >
> > These are the logs from the SQL log:
> >
> > 928528731  4 Rewrote user name to
> > kaligula
> >
> > 928528731  4 Handling with
> > Radius::AuthSQL
> >
> > 928528731  4Handling with
> > Radius::AuthUNIX
> >
> > 928528731  4Radius::AuthUNIX looks for match with
> > kaligula
> >
> > 928528731  4  Radius::AuthUNIX
> > ACCEPT:
> >
> > 928528731  4  Access accepted for
> > kaligula
> >
> > 928528736  1   Bad authenticator in request from 207.240.140.6
> > (207.240.140.6)
> >
> > This is what I get at trace level 5.  I am logging both to a logfile and
> > MySQL and accounting is going to both a detail file and MySQL.  Accounting
> > works for my other chassies using Hyperarc cards.
> 
> It seems lime auth is working, but accounting is complaining about  "Bad
> authenticator". This is usually an indication that you need IgnoreAcctSignature
> set for that NAS. But in the light of the very strange results above, it may be
> something else. The packet dump will help.
> 
> Im sorry you are having this trouble. I hope we get you on the air soon.
> 
> Cheers.
> >
> > Thanks,
> > Oliver
> >
> > On Fri, 4 Jun 1999, Mike McCauley wrote:
> >
> > > Hi Oliver,
> > >
> > > can you send us a fragment of your radiator log file at trace level 4,
> showing
> > > what happens when you receive accounting packets from your Netserver. I
> would
> > > exepct to see Radiator complaining about missing dictionary entries. That
> will
> > > help us track down the missing attributes.
> > >
> > > Cheers.
> > >
> > >
> > > On Jun 3,  8:49pm, O Stockhammer wrote:
> > > > Subject: (RADIATOR) Accounting dictionary for netserver card
> > > >
> > > > Hello,
> > > > We are using both Netserver and Hyperarc TotalControl Cards.
> > > > Radiator is authenticating fine off of both but the Netserver Cards are
> > > > missing entries for the dictionary file and therefore no accounting
> > > > happens for them.
> > > > For some reason I am missing entries in the dictionary file for
> > > > the netserver card.  I am using your dictionary.usr file that you
> > > > provided.  What entries do I need for accounting to work?
> > > >
> > > > I think it has to do with the vendor specific entries like
> > > >
> > > > USR-Chassis-Call-Slot = 0
> > > > rather than
> > > > Chassis-Call-Slot = 0 which is in the dictionary file
> > > >
> > > > Thank you,
> > > > Oliver Stockhammer
> > > > Systems
> > > > The Internet Channel
> > > >
> > > >
> > > > ===
> > > > Archive at http://www.thesite.com.au/~radiator/
> > > > To unsubscribe, email '[EMAIL PROTECTED]' with
> > > > 'unsubscribe radiator' in the body of the message.
> > > >-- End of excerpt from O Stockhammer
> > >
> > >
> > &

Re: (RADIATOR) Accounting dictionary for netserver card

1999-06-06 Thread Mike McCauley

Hi Oliver,

On Jun 4,  4:57pm, O Stockhammer wrote:
> Subject: Re: (RADIATOR) Accounting dictionary for netserver card
>
> These are from the logfile:
>
> Fri Jun  4 16:44:12 1999: ERR: Attribute number 0 (vendor ) is not defined
> in your dictionary
That is quite bizarre, there is no such attribute

> Fri Jun  4 16:45:18 1999: ERR: Attribute number 73 (vendor ) is not
> defined in your dictionary
So is that.

> Fri Jun  4 16:45:18 1999: ERR: Attribute number 116 (vendor ) is not
> defined in your dictionary
That is supposedly Ascend-Appletalk-Route

> Fri Jun  4 16:46:24 1999: ERR: Attribute number 240 (vendor ) is not
> defined in your dictionary
That is supposedly Ascend-Add-Seconds

> Thu Jun  3 20:31:37 1999: ERR: Attribute number 144 (vendor ) is not
> defined in your dictionary
That is Ascend-Assign-IP-Client

That all looks very strange, almost as if the incoming packet is corrupted in
being incorrectly interpreted. Can you send a hex packet dump of one of these
requests? You can get het packet dumps at trace level 5.



>
> These are the logs from the SQL log:
>
> 928528731  4 Rewrote user name to
> kaligula
>
> 928528731  4 Handling with
> Radius::AuthSQL
>
> 928528731  4Handling with
> Radius::AuthUNIX
>
> 928528731  4Radius::AuthUNIX looks for match with
> kaligula
>
> 928528731  4  Radius::AuthUNIX
> ACCEPT:
>
> 928528731  4  Access accepted for
> kaligula
>
> 928528736  1   Bad authenticator in request from 207.240.140.6
> (207.240.140.6)
>
> This is what I get at trace level 5.  I am logging both to a logfile and
> MySQL and accounting is going to both a detail file and MySQL.  Accounting
> works for my other chassies using Hyperarc cards.

It seems lime auth is working, but accounting is complaining about  "Bad
authenticator". This is usually an indication that you need IgnoreAcctSignature
set for that NAS. But in the light of the very strange results above, it may be
something else. The packet dump will help.

Im sorry you are having this trouble. I hope we get you on the air soon.

Cheers.
>
> Thanks,
> Oliver
>
> On Fri, 4 Jun 1999, Mike McCauley wrote:
>
> > Hi Oliver,
> >
> > can you send us a fragment of your radiator log file at trace level 4,
showing
> > what happens when you receive accounting packets from your Netserver. I
would
> > exepct to see Radiator complaining about missing dictionary entries. That
will
> > help us track down the missing attributes.
> >
> > Cheers.
> >
> >
> > On Jun 3,  8:49pm, O Stockhammer wrote:
> > > Subject: (RADIATOR) Accounting dictionary for netserver card
> > >
> > > Hello,
> > >   We are using both Netserver and Hyperarc TotalControl Cards.
> > > Radiator is authenticating fine off of both but the Netserver Cards are
> > > missing entries for the dictionary file and therefore no accounting
> > > happens for them.
> > >   For some reason I am missing entries in the dictionary file for
> > > the netserver card.  I am using your dictionary.usr file that you
> > > provided.  What entries do I need for accounting to work?
> > >
> > > I think it has to do with the vendor specific entries like
> > >
> > > USR-Chassis-Call-Slot = 0
> > > rather than
> > > Chassis-Call-Slot = 0 which is in the dictionary file
> > >
> > > Thank you,
> > > Oliver Stockhammer
> > > Systems
> > > The Internet Channel
> > >
> > >
> > > ===
> > > Archive at http://www.thesite.com.au/~radiator/
> > > To unsubscribe, email '[EMAIL PROTECTED]' with
> > > 'unsubscribe radiator' in the body of the message.
> > >-- End of excerpt from O Stockhammer
> >
> >
> >
> > --
> > Mike McCauley   [EMAIL PROTECTED]
> > Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
> > 24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
> > Phone +61 3 9598-0985   Fax   +61 3 9598-0955
> >
> > Radiator: the most portable, flexible and configurable RADIUS server
> > anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
> > Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
> > NT, Rhapsody
> >
>
>
> ===
> Archive at http://www.thesite.com.au/~radiator/
> To unsubscribe, email '[EMAIL PROTECTED]' with
>

Re: (RADIATOR) Accounting dictionary for netserver card

1999-06-04 Thread O Stockhammer


These are from the logfile:

Fri Jun  4 16:44:12 1999: ERR: Attribute number 0 (vendor ) is not defined
in your dictionary
Fri Jun  4 16:45:18 1999: ERR: Attribute number 73 (vendor ) is not
defined in your dictionary
Fri Jun  4 16:45:18 1999: ERR: Attribute number 116 (vendor ) is not
defined in your dictionary
Fri Jun  4 16:46:24 1999: ERR: Attribute number 240 (vendor ) is not
defined in your dictionary
Thu Jun  3 20:31:37 1999: ERR: Attribute number 144 (vendor ) is not
defined in your dictionary

These are the logs from the SQL log:

928528731  4 Rewrote user name to
kaligula

928528731  4 Handling with
Radius::AuthSQL

928528731  4Handling with
Radius::AuthUNIX

928528731  4Radius::AuthUNIX looks for match with
kaligula

928528731  4  Radius::AuthUNIX
ACCEPT:

928528731  4  Access accepted for 
kaligula

928528736  1   Bad authenticator in request from 207.240.140.6 
(207.240.140.6)

This is what I get at trace level 5.  I am logging both to a logfile and
MySQL and accounting is going to both a detail file and MySQL.  Accounting
works for my other chassies using Hyperarc cards.

Thanks,
Oliver

On Fri, 4 Jun 1999, Mike McCauley wrote:

> Hi Oliver,
> 
> can you send us a fragment of your radiator log file at trace level 4, showing
> what happens when you receive accounting packets from your Netserver. I would
> exepct to see Radiator complaining about missing dictionary entries. That will
> help us track down the missing attributes.
> 
> Cheers.
> 
> 
> On Jun 3,  8:49pm, O Stockhammer wrote:
> > Subject: (RADIATOR) Accounting dictionary for netserver card
> >
> > Hello,
> > We are using both Netserver and Hyperarc TotalControl Cards.
> > Radiator is authenticating fine off of both but the Netserver Cards are
> > missing entries for the dictionary file and therefore no accounting
> > happens for them.
> > For some reason I am missing entries in the dictionary file for
> > the netserver card.  I am using your dictionary.usr file that you
> > provided.  What entries do I need for accounting to work?
> >
> > I think it has to do with the vendor specific entries like
> >
> > USR-Chassis-Call-Slot = 0
> > rather than
> > Chassis-Call-Slot = 0 which is in the dictionary file
> >
> > Thank you,
> > Oliver Stockhammer
> > Systems
> > The Internet Channel
> >
> >
> > ===
> > Archive at http://www.thesite.com.au/~radiator/
> > To unsubscribe, email '[EMAIL PROTECTED]' with
> > 'unsubscribe radiator' in the body of the message.
> >-- End of excerpt from O Stockhammer
> 
> 
> 
> -- 
> Mike McCauley   [EMAIL PROTECTED]
> Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
> 24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
> Phone +61 3 9598-0985   Fax   +61 3 9598-0955
> 
> Radiator: the most portable, flexible and configurable RADIUS server 
> anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
> Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, 
> NT, Rhapsody
> 


===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Accounting dictionary for netserver card

1999-06-03 Thread Mike McCauley

Hi Oliver,

can you send us a fragment of your radiator log file at trace level 4, showing
what happens when you receive accounting packets from your Netserver. I would
exepct to see Radiator complaining about missing dictionary entries. That will
help us track down the missing attributes.

Cheers.


On Jun 3,  8:49pm, O Stockhammer wrote:
> Subject: (RADIATOR) Accounting dictionary for netserver card
>
> Hello,
>   We are using both Netserver and Hyperarc TotalControl Cards.
> Radiator is authenticating fine off of both but the Netserver Cards are
> missing entries for the dictionary file and therefore no accounting
> happens for them.
>   For some reason I am missing entries in the dictionary file for
> the netserver card.  I am using your dictionary.usr file that you
> provided.  What entries do I need for accounting to work?
>
> I think it has to do with the vendor specific entries like
>
> USR-Chassis-Call-Slot = 0
> rather than
> Chassis-Call-Slot = 0 which is in the dictionary file
>
> Thank you,
> Oliver Stockhammer
> Systems
> The Internet Channel
>
>
> ===
> Archive at http://www.thesite.com.au/~radiator/
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
>-- End of excerpt from O Stockhammer



-- 
Mike McCauley   [EMAIL PROTECTED]
Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985   Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, 
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) Accounting dictionary for netserver card

1999-06-03 Thread O Stockhammer


Hello,
We are using both Netserver and Hyperarc TotalControl Cards.
Radiator is authenticating fine off of both but the Netserver Cards are
missing entries for the dictionary file and therefore no accounting 
happens for them.
For some reason I am missing entries in the dictionary file for
the netserver card.  I am using your dictionary.usr file that you
provided.  What entries do I need for accounting to work?

I think it has to do with the vendor specific entries like

USR-Chassis-Call-Slot = 0
rather than 
Chassis-Call-Slot = 0 which is in the dictionary file

Thank you,
Oliver Stockhammer
Systems
The Internet Channel


===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.