Support,
I am having an approximate 15% failure rate in authenticating users against an
SQL database using
radiator.
I believe I am starting to narrow the problem down as to why users are getting
the following message
on their WIN95/98 boxes.
"Error 691: The computer you're dialing in to cannot establish a Dial-Up
Networking connection.
Check your password, and then try again."
I am using a Cisco AS5300 as the NAS. It is also the radiius client passing
authentication requests to
radiator running on a Linux box. There is also an SQL database on the linux box
and radiator is configured
to convert the incoming radiius request into an SQL authentication request.
It works quite well with the exception of the current error I am trying to debug
and fix. It appears to be happening
about 15% of the time. When I do a "show modem command" on the AS5300, the 85%
success rate statistic
confirms the the reason why 15% of the users are calling me.
Can you suggest any parameters I might want to try to look at in radiator to
adjust in order to eliminate the failed
authentications?
The following ouput is from a debug ppp negotiaion,
debug ppp error
debug ppp authentication
command on the Cisco AS5300.
This is an example of a successful connection as far as the AS5300 is concerned.
However, the user did
not get authenticated due to what I am starting to believe is a breakdown in the
communicatoin exchange
between the radiius client and the radiius server.
*Dec 2 16:33:50.238: %LINK-3-UPDOWN: Interface Async31, changed state to up
*Dec 2 16:33:50.242: As31 PPP: Treating connection as a dedicated line
*Dec 2 16:33:50.242: As31 PPP: Phase is ESTABLISHING, Active Open
*Dec 2 16:33:50.242: As31 LCP: O CONFREQ [Closed] id 39 len 25
*Dec 2 16:33:50.242: As31 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Dec 2 16:33:50.242: As31 LCP: AuthProto CHAP (0x0305C22305)
*Dec 2 16:33:50.242: As31 LCP: MagicNumber 0x58CF1E14 (0x050658CF1E14)
*Dec 2 16:33:50.242: As31 LCP: PFC (0x0702)
*Dec 2 16:33:50.242: As31 LCP: ACFC (0x0802)
*Dec 2 16:33:51.222: As31 LCP: I CONFREQ [REQsent] id 3 len 23
*Dec 2 16:33:51.222: As31 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Dec 2 16:33:51.222: As31 LCP: MagicNumber 0x00029B9A (0x050600029B9A)
*Dec 2 16:33:51.222: As31 LCP: PFC (0x0702)
*Dec 2 16:33:51.222: As31 LCP: ACFC (0x0802)
*Dec 2 16:33:51.222: As31 LCP: Callback 6 (0x0D0306)
*Dec 2 16:33:51.222: As31 LCP: O CONFREJ [REQsent] id 3 len 7
*Dec 2 16:33:51.222: As31 LCP: Callback 6 (0x0D0306)
*Dec 2 16:33:52.246: As31 LCP: TIMEout: Time 0x85C0160 State REQsent
*Dec 2 16:33:52.246: As31 LCP: O CONFREQ [REQsent] id 40 len 25
*Dec 2 16:33:52.246: As31 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Dec 2 16:33:52.246: As31 LCP: AuthProto CHAP (0x0305C22305)
*Dec 2 16:33:52.246: As31 LCP: MagicNumber 0x58CF1E14 (0x050658CF1E14)
*Dec 2 16:33:52.246: As31 LCP: PFC (0x0702)
*Dec 2 16:33:52.246: As31 LCP: ACFC (0x0802)
*Dec 2 16:33:52.402: As31 LCP: I CONFACK [REQsent] id 40 len 25
*Dec 2 16:33:52.402: As31 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Dec 2 16:33:52.402: As31 LCP: AuthProto CHAP (0x0305C22305)
*Dec 2 16:33:52.402: As31 LCP: MagicNumber 0x58CF1E14 (0x050658CF1E14)
*Dec 2 16:33:52.402: As31 LCP: PFC (0x0702)
*Dec 2 16:33:52.402: As31 LCP: ACFC (0x0802)
*Dec 2 16:33:54.222: As31 LCP: I CONFREQ [ACKrcvd] id 4 len 23
*Dec 2 16:33:54.222: As31 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Dec 2 16:33:54.222: As31 LCP: MagicNumber 0x00029B9A (0x050600029B9A)
*Dec 2 16:33:54.222: As31 LCP: PFC (0x0702)
*Dec 2 16:33:54.222: As31 LCP: ACFC (0x0802)
*Dec 2 16:33:54.222: As31 LCP: Callback 6 (0x0D0306)
*Dec 2 16:33:54.222: As31 LCP: O CONFREJ [ACKrcvd] id 4 len 7
*Dec 2 16:33:54.222: As31 LCP: Callback 6 (0x0D0306)
*Dec 2 16:33:54.246: As31 LCP: TIMEout: Time 0x85C0934 State ACKrcvd
*Dec 2 16:33:54.246: As31 LCP: O CONFREQ [ACKrcvd] id 41 len 25
*Dec 2 16:33:54.246: As31 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Dec 2 16:33:54.246: As31 LCP: AuthProto CHAP (0x0305C22305)
*Dec 2 16:33:54.246: As31 LCP: MagicNumber 0x58CF1E14 (0x050658CF1E14)
*Dec 2 16:33:54.246: As31 LCP: PFC (0x0702)
*Dec 2 16:33:54.246: As31 LCP: ACFC (0x0802)
*Dec 2 16:33:54.430: As31 LCP: I CONFREQ [REQsent] id 5 len 20
*Dec 2 16:33:54.430: As31 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Dec 2 16:33:54.430: As31 LCP: MagicNumber 0x00029B9A (0x050600029B9A)
*Dec 2 16:33:54.430: As31 LCP: PFC (0x0702)
*Dec 2 16:33:54.430: As31 LCP: ACFC (0x0802)
*Dec 2 16:33:54.430: As31 LCP: O CONFACK [REQsent] id 5 len 20
*Dec 2 16:33:54.430: As31 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Dec 2 16:33:54.430: As31 LCP: MagicNumber 0x00029B9A (0x050600029B9A)
*Dec 2 16:33:54.430: As31 LCP: PFC (0x0702)
*Dec 2 16:33:54.430: As31 LCP: ACFC (0x0802)
*Dec 2 16:33:54.430: As31 LCP: I CONFACK [ACKsent] id 41 len 25
*Dec 2 16:33:54.434: As31 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Dec 2 16:33:54.434: As31 LCP: AuthProto CHAP (0x0305C22305)
*Dec 2 16:33:54.434: As31 LCP: MagicNumber 0x58CF1E14 (0x050658CF1E14)
*Dec 2 16:33:54.434: As31 LCP: PFC (0x0702)
*Dec 2 16:33:54.434: As31 LCP: ACFC (0x0802)
*Dec 2 16:33:54.434: As31 LCP: State is Open
*Dec 2 16:33:54.434: As31 PPP: Phase is AUTHENTICATING, by this end
*Dec 2 16:33:54.434: As31 CHAP: O CHALLENGE id 12 len 26 from "labri"
*Dec 2 16:33:54.638: As31 CHAP: I RESPONSE id 12 len 27 from "contej"
*Dec 2 16:33:54.890: As31 CHAP: Unable to validate Response. Username contej:
Authentication fail
ure
*Dec 2 16:33:54.890: As31 CHAP: O FAILURE id 12 len 26 msg is "Authentication
failure"
*Dec 2 16:33:54.890: As31 PPP: Phase is TERMINATING
*Dec 2 16:33:54.890: As31 LCP: O TERMREQ [Open] id 42 len 4
*Dec 2 16:33:55.054: As31 LCP: I TERMACK [TERMsent] id 42 len 4
*Dec 2 16:33:55.054: As31 LCP: State is Closed
*Dec 2 16:33:55.054: As31 PPP: Phase is DOWN
*Dec 2 16:33:55.054: As31 PPP: Phase is ESTABLISHING, Passive Open
*Dec 2 16:33:55.054: As31 LCP: State is Listen
*Dec 2 16:33:55.250: %ISDN-6-DISCONNECT: Interface Serial0:4 disconnected from
unknown , call las
ted 26
*Dec 2 16:33:55.302: Se0:4 LCP: State is Closed
*Dec 2 16:33:55.302: Se0:4 PPP: Phase is DOWN
*Dec 2 16:33:57.054: %LINK-5-CHANGED: Interface Async31, changed state to reset
*Dec 2 16:33:57.054: As31 LCP: State is Closed
*Dec 2 16:33:57.054: As31 PPP: Phase is DOWN
*Dec 2 16:33:57.054: As31 IPCP: Remove route to 10.20.10.138
Thanks,
John Benson
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
