Re: [RADIATOR] Expiration Date Bug ?

2013-09-20 Thread Kennyen Choo
Thanks for your prompt response.

Yes, convert the date format to 3 characters did help to resolve the issue
but why is Radiator try to perform the convertion if the date/time format
is incorrect?


On Fri, Sep 20, 2013 at 12:49 PM, Kennyen Choo kennyen.c...@gmail.comwrote:

 Hello,

 I am using RADIATOR 4.10 on x86 linux with MySQL DB.

 I'm using Expiration attribute with format October 20 2013 00:00:00 but
 suprisingly the Radiator converted it to 1358611200 instead of the
 correct value which is 1382198400.

 mysql select from_unixtime(1358611200);
 +---+
 | from_unixtime(1358611200) |
 +---+
 | 2013-01-20 00:00:00   |
 +---+

 mysql select from_unixtime(1382198400);
 +---+
 | from_unixtime(1382198400) |
 +---+
 | 2013-10-20 00:00:00   |
 +---+

 here's the level 4 debug log,

 Fri Sep 20 11:46:00 2013: DEBUG: Packet dump:
 *** Received from xx.xx.xx.xx port 47400 
 Code:   Access-Request
 Identifier: 90
 Authentic:  187n195204165}@1511631672072292724198
 Attributes:
 NAS-Identifier = localdomain
 NAS-IP-Address = xx.xx.xx.xx
 Message-Authenticator =
 159j$+133K2122102509169154240S11
 Acct-Session-Id = 9649291-em1-2
 NAS-Port = 2
 NAS-Port-Type = Ethernet
 Service-Type = Framed-User
 Framed-Protocol = PPP
 Calling-Station-Id = f0bf975c58b2
 Called-Station-Id = 
 NAS-Port-Id = em1
 mpd-link = em1-2
 mpd-peer-ident = MSRASV5.20 MSRAS-0-AGNES-VAIO
 166Sr140JB225B182170163@232h164150
 Tunnel-Medium-Type = 0:802
 Tunnel-Client-Endpoint = f0:bf:97:5c:58:b2
 User-Name = te...@xxx.net
 MS-CHAP-Challenge = 18730h.:23913331516173]150
 176206
 MS-CHAP2-Response =
 10E134u23818717223430172253141205x_131+18617414730s25JY25196-191220139179r196o{233193167l
 Fri Sep 20 11:46:00 2013: DEBUG: Handling request with Handler
 'Realm=DEFAULT', Identifier ''
 Fri Sep 20 11:46:00 2013: DEBUG:  Deleting session for te...@xxx.net,
 xx.xx.xx.xx, 2
 Fri Sep 20 11:46:00 2013: DEBUG: do query to
 'dbi:mysql:radius:xx.xx.xx.xx:3306': 'delete from ActiveSessions where
 nasportid='2' and nasname='xx.xx.xx.xx'':
 Fri Sep 20 11:46:00 2013: DEBUG: Handling with Radius::AuthFREERADIUSSQL:
 Fri Sep 20 11:46:00 2013: DEBUG: Handling with Radius::AuthFREERADIUSSQL:
 Fri Sep 20 11:46:00 2013: DEBUG: Query to
 'dbi:mysql:radius:xx.xx.xx.xx:3306': 'SELECT id, UserName, Attribute,
 Value, op FROM  radcheck WHERE Username=? ORDER BY id': te...@xxx.net
 Fri Sep 20 11:46:00 2013: DEBUG: Got user check row: 7323 
 test1@xxx.netPassword xx ==
 Fri Sep 20 11:46:00 2013: DEBUG: Got user check row: 7325 
 test1@xxx.netExpiration October 20 2013 00:00:00 :=
 Fri Sep 20 11:46:00 2013: DEBUG: Query to
 'dbi:mysql:radius:xx.xx.xx.xx:3306': 'SELECT id, UserName, Attribute,
 Value, op FROM radreply WHERE Username = ? ORDER BY id': te...@xxx.net
 Fri Sep 20 11:46:00 2013: DEBUG: Got user reply row: 5237 
 test1@xx.netFramed-IP-Address 10.32.0.2 :=
 Fri Sep 20 11:46:00 2013: DEBUG: Query to
 'dbi:mysql:radius:xx.xx.xx.xx:3306': 'SELECT 
 radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op
 FROM radgroupcheck,radusergroup WHERE radusergroup.Username = ? AND
 radusergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id':
 te...@xxx.net
 Fri Sep 20 11:46:00 2013: DEBUG: Query to
 'dbi:mysql:radius:xx.xx.xx.xx:3306': 'SELECT 
 radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op
 FROM radgroupreply,radusergroup WHERE radusergroup.Username = ? AND
 radusergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id':
 te...@xxx.net
 Fri Sep 20 11:46:00 2013: DEBUG: Got group reply row: 19 Prepaid Standard
 Acct-Interim-Interval 60 =
 Fri Sep 20 11:46:00 2013: DEBUG: Got group reply row: 21 Prepaid Standard
 mpd-limit in#1=all shape 384000 +=
 Fri Sep 20 11:46:00 2013: DEBUG: Got group reply row: 22 Prepaid Standard
 mpd-limit out#1=all shape 1024000 +=
 Fri Sep 20 11:46:00 2013: DEBUG: Radius::AuthFREERADIUSSQL looks for match
 with te...@xxx.net [te...@xxx.net]
 Fri Sep 20 11:46:00 2013: DEBUG: Expiration date converted to: 1358611200
 Fri Sep 20 11:46:00 2013: DEBUG: Radius::AuthFREERADIUSSQL REJECT:
 Expiration date has passed: te...@xxx.net [te...@xxx.net]
 Fri Sep 20 11:46:00 2013: DEBUG: Query to
 'dbi:mysql:radius:xx.xx.xx.xx:3306': 'SELECT id, UserName, Attribute,
 Value, op FROM  radcheck WHERE Username=? ORDER BY id': DEFAULT
 Fri Sep 20 11:46:00 2013: DEBUG: AuthBy FREERADIUSSQL result: REJECT,
 Expiration date has passed
 Fri Sep 20 11:46:00 2013: INFO: Access rejected for te...@xxx.net:
 Expiration date has passed
 Fri Sep 20 11:46:00 2013: DEBUG: do query to 'dbi:mysql:radius:
 192.168.66.66:3306': 'insert into radpostauth 

Re: [RADIATOR] Expiration Date Bug ?

2013-09-20 Thread Heikki Vatiainen
On 09/20/2013 07:49 AM, Kennyen Choo wrote:

 I'm using Expiration attribute with format October 20 2013 00:00:00
 but suprisingly the Radiator converted it to 1358611200 instead of the
 correct value which is 1382198400.

Try converting the dates from full month name to three letter
abbreviation. For example October - Oct

If you see the reference manual about Expiration and ValidTo, the
supported format list includes only the abbreviated month name.

Unfortunately one of the examples has 'December' but that is incorrect.

Please let us know if this helps.

Thanks,
Heikki

-- 
Heikki Vatiainen h...@open.com.au

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS,
NetWare etc.
___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator


[RADIATOR] Expiration Date Bug ?

2013-09-19 Thread Kennyen Choo
Hello,

I am using RADIATOR 4.10 on x86 linux with MySQL DB.

I'm using Expiration attribute with format October 20 2013 00:00:00 but
suprisingly the Radiator converted it to 1358611200 instead of the
correct value which is 1382198400.

mysql select from_unixtime(1358611200);
+---+
| from_unixtime(1358611200) |
+---+
| 2013-01-20 00:00:00   |
+---+

mysql select from_unixtime(1382198400);
+---+
| from_unixtime(1382198400) |
+---+
| 2013-10-20 00:00:00   |
+---+

here's the level 4 debug log,

Fri Sep 20 11:46:00 2013: DEBUG: Packet dump:
*** Received from xx.xx.xx.xx port 47400 
Code:   Access-Request
Identifier: 90
Authentic:  187n195204165}@1511631672072292724198
Attributes:
NAS-Identifier = localdomain
NAS-IP-Address = xx.xx.xx.xx
Message-Authenticator =
159j$+133K2122102509169154240S11
Acct-Session-Id = 9649291-em1-2
NAS-Port = 2
NAS-Port-Type = Ethernet
Service-Type = Framed-User
Framed-Protocol = PPP
Calling-Station-Id = f0bf975c58b2
Called-Station-Id = 
NAS-Port-Id = em1
mpd-link = em1-2
mpd-peer-ident = MSRASV5.20 MSRAS-0-AGNES-VAIO
166Sr140JB225B182170163@232h164150
Tunnel-Medium-Type = 0:802
Tunnel-Client-Endpoint = f0:bf:97:5c:58:b2
User-Name = te...@xxx.net
MS-CHAP-Challenge = 18730h.:23913331516173]150
176206
MS-CHAP2-Response =
10E134u23818717223430172253141205x_131+18617414730s25JY25196-191220139179r196o{233193167l
Fri Sep 20 11:46:00 2013: DEBUG: Handling request with Handler
'Realm=DEFAULT', Identifier ''
Fri Sep 20 11:46:00 2013: DEBUG:  Deleting session for te...@xxx.net,
xx.xx.xx.xx, 2
Fri Sep 20 11:46:00 2013: DEBUG: do query to
'dbi:mysql:radius:xx.xx.xx.xx:3306': 'delete from ActiveSessions where
nasportid='2' and nasname='xx.xx.xx.xx'':
Fri Sep 20 11:46:00 2013: DEBUG: Handling with Radius::AuthFREERADIUSSQL:
Fri Sep 20 11:46:00 2013: DEBUG: Handling with Radius::AuthFREERADIUSSQL:
Fri Sep 20 11:46:00 2013: DEBUG: Query to
'dbi:mysql:radius:xx.xx.xx.xx:3306': 'SELECT id, UserName, Attribute,
Value, op FROM  radcheck WHERE Username=? ORDER BY id': te...@xxx.net
Fri Sep 20 11:46:00 2013: DEBUG: Got user check row: 7323
test1@xxx.netPassword xx ==
Fri Sep 20 11:46:00 2013: DEBUG: Got user check row: 7325
test1@xxx.netExpiration October 20 2013 00:00:00 :=
Fri Sep 20 11:46:00 2013: DEBUG: Query to
'dbi:mysql:radius:xx.xx.xx.xx:3306': 'SELECT id, UserName, Attribute,
Value, op FROM radreply WHERE Username = ? ORDER BY id': te...@xxx.net
Fri Sep 20 11:46:00 2013: DEBUG: Got user reply row: 5237
test1@xx.netFramed-IP-Address 10.32.0.2 :=
Fri Sep 20 11:46:00 2013: DEBUG: Query to
'dbi:mysql:radius:xx.xx.xx.xx:3306': 'SELECT
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op
FROM radgroupcheck,radusergroup WHERE radusergroup.Username = ? AND
radusergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id':
te...@xxx.net
Fri Sep 20 11:46:00 2013: DEBUG: Query to
'dbi:mysql:radius:xx.xx.xx.xx:3306': 'SELECT
radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op
FROM radgroupreply,radusergroup WHERE radusergroup.Username = ? AND
radusergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id':
te...@xxx.net
Fri Sep 20 11:46:00 2013: DEBUG: Got group reply row: 19 Prepaid Standard
Acct-Interim-Interval 60 =
Fri Sep 20 11:46:00 2013: DEBUG: Got group reply row: 21 Prepaid Standard
mpd-limit in#1=all shape 384000 +=
Fri Sep 20 11:46:00 2013: DEBUG: Got group reply row: 22 Prepaid Standard
mpd-limit out#1=all shape 1024000 +=
Fri Sep 20 11:46:00 2013: DEBUG: Radius::AuthFREERADIUSSQL looks for match
with te...@xxx.net [te...@xxx.net]
Fri Sep 20 11:46:00 2013: DEBUG: Expiration date converted to: 1358611200
Fri Sep 20 11:46:00 2013: DEBUG: Radius::AuthFREERADIUSSQL REJECT:
Expiration date has passed: te...@xxx.net [te...@xxx.net]
Fri Sep 20 11:46:00 2013: DEBUG: Query to
'dbi:mysql:radius:xx.xx.xx.xx:3306': 'SELECT id, UserName, Attribute,
Value, op FROM  radcheck WHERE Username=? ORDER BY id': DEFAULT
Fri Sep 20 11:46:00 2013: DEBUG: AuthBy FREERADIUSSQL result: REJECT,
Expiration date has passed
Fri Sep 20 11:46:00 2013: INFO: Access rejected for te...@xxx.net:
Expiration date has passed
Fri Sep 20 11:46:00 2013: DEBUG: do query to 'dbi:mysql:radius:
192.168.66.66:3306': 'insert into radpostauth (username,reply) values('
te...@xxx.net','Access-Reject')':
Fri Sep 20 11:46:00 2013: DEBUG: Packet dump:
*** Sending to 210.195.155.242 port 47400 
Code:   Access-Reject
Identifier: 90
Authentic:  h25325171164248|4138~20022215620`154
Attributes:
MS-CHAP2-Success = 1S=DD72975DA9372B033A52115BCD039F1445C5B613
Reply-Message = Request Denied