El 28 Apr 2001, a las 11:55, Hugh Irvine escribió:
>
> Hello Mariano -
>
> I have copied this to Mike also, so he can check.
>
> Just one question - is the <Log FILE> created?
yup.
>
> Ie - are you seeing permission problems on the directory?
>
> This is <Log FILE>
>
> Filename %L/%Y-%m/%{GlobalVar:rad_instance}/stdLog_%d-%q
>
> and this is <AuthLog FILE>
>
> Filename %L/%Y-%m/%{GlobalVar:rad_instance}/authLog_%d-%q
>
> If neither one is created, it could be permissions, but if one is created and
> not the other, then there may be something in Radiator.
The <Log FILE> (and the global LogFile if I uncomment it) are created OK,
in fact, the %Y-%m/%{GlobalVar:rad_instance} subdirectory is actually
created by Radiator... all the directories are owned by root (Radiator is
run as root also) and they are mode 755. The logfile itself is also owned
by root and is mode 644... I'm sorry, but it seems to be Radiator...
>
> thanks
>
> Hugh
>
> On Saturday 28 April 2001 07:24, Mariano Absatz wrote:
> > Hi,
> >
> > Netra T1 AC200, 1CPU 360MHz, 512Mb RAM, 2x18Gb HD, Solaris 8, Perl
> > v5.6.1, Radiator 2.18.1 (how easy is to be on the edge version when it's
> > not yet in production :-)
> >
> > The AuthLog is not created. Period.
> >
> > That is, I copied the config from another installation and the file
> > doesn't appear... there is no other new file under the %L hierarchy,
> > either.
> >
> > Radiator is started with "rad_instance=test" to set the GlobalVar...
> >
> > I enclose the full config file and a TRACE 4 after issuing radpwtst once
> > with a wrong password and once with the correct one... there is no
> > indication of an error while parsing the <AuthLog FILE> statement.
> >
> > Any clues?
> >
> >
> > ================= /app/Radiator/etc/radius-test.cfg =====================
> > ================= /app/Radiator/etc/radius-test.cfg =====================
> > ================= /app/Radiator/etc/radius-test.cfg =====================
> > ##################################################################
> > # TEST CONFIGURATION #
> > ##################################################################
> >
> > ##################################################################
> > # FILES AND DIRECTORIES SECTION #
> > ##################################################################
> >
> > LogDir /logs/radius
> > DbDir /app/Radiator/db
> > DefineGlobalVar ScriptDir /app/Radiator/scripts
> > DefineGlobalVar ConfigDir /app/Radiator/etc
> > DefineGlobalVar TempDir /app/Radiator/tmp
> >
> > DictionaryFile %{GlobalVar:ConfigDir}/dictionary
> > PidFile %{GlobalVar:TempDir}/rad-%{GlobalVar:rad_instance}.pid
> >
> > ##################################################################
> > # DATABASE DEFINITIONS SECTION #
> > ##################################################################
> >
> > DefineGlobalVar OracleHost localhost
> > DefineGlobalVar OracleSID radius
> >
> > DefineGlobalVar MR_DBSource
> > dbi:Oracle:host=localhost;sid=radius
> > DefineGlobalVar MR_DBUsername radmin
> > DefineGlobalVar MR_DBAuth radius
> >
> >
> >
> > ##################################################################
> > # REWRITE SECTION #
> > ##################################################################
> >
> > # REWRITE USER NAME BEFORE ANYTHING ELSE
> > # Rewrite any Name without realm to our realm
> > # because defaultrealm does not match on HANDLER
> > RewriteUsername s/^([^@]+)$/$1\@metrored/
> >
> > # change everything in the username to lowercase
> > RewriteUsername tr/[A-Z]/[a-z]/
> >
> > ##################################################################
> > # LOGGING SECTION #
> > ##################################################################
> >
> > # For debugging, uncomment the 2 following lines
> > Trace 4
> > LogFile %L/%Y-%m/%{GlobalVar:rad_instance}/debugLog_%d-%q
> >
> > #Trace:
> > #0 ERR. Error conditions. Serious and unexpected failures
> > #1 WARNING. Warning conditions. Unexpected failures
> > #2 NOTICE. Normal but significant conditions.
> > #3 INFO. Informational messages.
> > #4 DEBUG. Debugging messages.
> > #5 Incoming raw packet dumps in hexadecimal.
> >
> > <Log FILE>
> > Identifier fileLoggerMetroTest
> > Filename %L/%Y-%m/%{GlobalVar:rad_instance}/stdLog_%d-%q
> > Trace 3
> > </Log>
> >
> > #Log authentication success and failure to a file
> > <AuthLog FILE>
> > Identifier testLoggerMetroRED
> > Filename %L/%Y-%m/%{GlobalVar:rad_instance}/authLog_%d-%q
> > LogSuccess 1
> > LogFailure 1
> > SuccessFormat %l:%n:<****>:OK
> > FailureFormat %l:%n:%P:FAIL
> > </AuthLog>
> >
> >
> > ##################################################################
> > # PROTOCOL SECTION #
> > ##################################################################
> >
> > AuthPort 1812
> > AcctPort 1813
> >
> > <SNMPAgent>
> > Port 16111
> > ROCommunity CONFIGURAR-COMUNIDAD
> > </SNMPAgent>
> >
> >
> > #################################################################
> > # CLIENTS SECTION #
> > ##################################################################
> >
> > # Test CPM
> > <Client 1.2.3.4>
> > Identifier testClient
> > Secret XXXXXXXXXX
> > IdenticalClients localhost
> > </Client>
> >
> > ##################################################################
> > # AUTHENTICATION SECTION #
> > ##################################################################
> >
> > <Realm DEFAULT>
> > <AuthBy FILE>
> > Identifier testFileAuth
> > Filename %D/testusers
> > # para poder editar el archivo y no recargar el radius
> > # OJO que la busqueda es LINEAL!!!
> > Nocache
> > </AuthBy>
> > </Realm>
> >
> >
> >
> >
> > =========================== TRACE 4 ===============================
> > =========================== TRACE 4 ===============================
> > =========================== TRACE 4 ===============================
> > Fri Apr 27 17:39:24 2001: INFO: Server started: Radiator 2.18.1 on mr-
> > radius
> > Fri Apr 27 17:39:32 2001: DEBUG: Packet dump:
> > *** Received from 127.0.0.1 port 35085 ....
> > Code: Access-Request
> > Identifier: 2
> > Authentic: 1234567890123456
> > Attributes:
> > User-Name = "mariano@pert"
> > Service-Type = Framed-User
> > NAS-IP-Address = 203.63.154.1
> > NAS-Port = 1234
> > Called-Station-Id = "123456789"
> > Calling-Station-Id = "987654321"
> > NAS-Port-Type = Async
> > User-Password =
> > "B=<231>g%<251><233>:<238><192><220>`<176><12>\<146>"
> >
> > Fri Apr 27 17:39:32 2001: DEBUG: Rewrote user name to mariano@pert
> > Fri Apr 27 17:39:32 2001: DEBUG: Rewrote user name to mariano@pert
> > Fri Apr 27 17:39:32 2001: DEBUG: Handling request with Handler
> > 'Realm=DEFAULT'
> > Fri Apr 27 17:39:32 2001: DEBUG: Deleting session for mariano@pert,
> > 203.63.154.1, 1234
> > Fri Apr 27 17:39:32 2001: DEBUG: Handling with Radius::AuthFILE
> > Fri Apr 27 17:39:32 2001: DEBUG: Reading users file
> > /app/Radiator/db/testusers
> > Fri Apr 27 17:39:32 2001: DEBUG: Radius::AuthFILE looks for match with
> > mariano@pert
> > Fri Apr 27 17:39:33 2001: DEBUG: Radius::AuthFILE REJECT: Bad Password
> > Fri Apr 27 17:39:33 2001: DEBUG: Reading users file
> > /app/Radiator/db/testusers
> > Fri Apr 27 17:39:33 2001: INFO: Access rejected for mariano@pert: Bad
> > Password
> > Fri Apr 27 17:39:33 2001: DEBUG: Packet dump:
> > *** Sending to 127.0.0.1 port 35085 ....
> > Code: Access-Reject
> > Identifier: 2
> > Authentic: 1234567890123456
> > Attributes:
> > Reply-Message = "Request Denied"
> >
> > Fri Apr 27 17:39:33 2001: DEBUG: Packet dump:
> > *** Received from 127.0.0.1 port 35085 ....
> > Code: Accounting-Request
> > Identifier: 3
> > Authentic:
> > V<155><221>K<249>*<233><131><212><210><193><148><214><195><11>e
> > Attributes:
> > User-Name = "mariano@pert"
> > Service-Type = Framed-User
> > NAS-IP-Address = 203.63.154.1
> > NAS-Port = 1234
> > NAS-Port-Type = Async
> > Acct-Session-Id = "00001234"
> > Acct-Status-Type = Start
> > Called-Station-Id = "123456789"
> > Calling-Station-Id = "987654321"
> >
> > Fri Apr 27 17:39:33 2001: DEBUG: Rewrote user name to mariano@pert
> > Fri Apr 27 17:39:33 2001: DEBUG: Rewrote user name to mariano@pert
> > Fri Apr 27 17:39:33 2001: DEBUG: Handling request with Handler
> > 'Realm=DEFAULT'
> > Fri Apr 27 17:39:33 2001: DEBUG: Adding session for mariano@pert,
> > 203.63.154.1, 1234
> > Fri Apr 27 17:39:33 2001: DEBUG: Handling with Radius::AuthFILE
> > Fri Apr 27 17:39:33 2001: DEBUG: Accounting accepted
> > Fri Apr 27 17:39:33 2001: DEBUG: Packet dump:
> > *** Sending to 127.0.0.1 port 35085 ....
> > Code: Accounting-Response
> > Identifier: 3
> > Authentic:
> > V<155><221>K<249>*<233><131><212><210><193><148><214><195><11>e
> > Attributes:
> >
> > Fri Apr 27 17:39:33 2001: DEBUG: Packet dump:
> > *** Received from 127.0.0.1 port 35085 ....
> > Code: Accounting-Request
> > Identifier: 4
> > Authentic: <182><179>e<216>L<160><149><206>m_<193>!<182>Wo`
> > Attributes:
> > User-Name = "mariano@pert"
> > Service-Type = Framed-User
> > NAS-IP-Address = 203.63.154.1
> > NAS-Port = 1234
> > NAS-Port-Type = Async
> > Acct-Session-Id = "00001234"
> > Acct-Status-Type = Stop
> > Called-Station-Id = "123456789"
> > Calling-Station-Id = "987654321"
> > Acct-Delay-Time = 0
> > Acct-Session-Time = 1000
> > Acct-Input-Octets = 20000
> > Acct-Output-Octets = 30000
> >
> > Fri Apr 27 17:39:33 2001: DEBUG: Rewrote user name to mariano@pert
> > Fri Apr 27 17:39:33 2001: DEBUG: Rewrote user name to mariano@pert
> > Fri Apr 27 17:39:33 2001: DEBUG: Handling request with Handler
> > 'Realm=DEFAULT'
> > Fri Apr 27 17:39:33 2001: DEBUG: Deleting session for mariano@pert,
> > 203.63.154.1, 1234
> > Fri Apr 27 17:39:33 2001: DEBUG: Handling with Radius::AuthFILE
> > Fri Apr 27 17:39:33 2001: DEBUG: Accounting accepted
> > Fri Apr 27 17:39:33 2001: DEBUG: Packet dump:
> > *** Sending to 127.0.0.1 port 35085 ....
> > Code: Accounting-Response
> > Identifier: 4
> > Authentic: <182><179>e<216>L<160><149><206>m_<193>!<182>Wo`
> > Attributes:
> >
> > Fri Apr 27 17:39:39 2001: DEBUG: Packet dump:
> > *** Received from 127.0.0.1 port 35086 ....
> > Code: Access-Request
> > Identifier: 9
> > Authentic: 1234567890123456
> > Attributes:
> > User-Name = "mariano@pert"
> > Service-Type = Framed-User
> > NAS-IP-Address = 203.63.154.1
> > NAS-Port = 1234
> > Called-Station-Id = "123456789"
> > Calling-Station-Id = "987654321"
> > NAS-Port-Type = Async
> > User-Password =
> > "A/<225>x%<251><233>:<238><192><220>`<176><12>\<146>"
> >
> > Fri Apr 27 17:39:39 2001: DEBUG: Rewrote user name to mariano@pert
> > Fri Apr 27 17:39:39 2001: DEBUG: Rewrote user name to mariano@pert
> > Fri Apr 27 17:39:39 2001: DEBUG: Handling request with Handler
> > 'Realm=DEFAULT'
> > Fri Apr 27 17:39:39 2001: DEBUG: Deleting session for mariano@pert,
> > 203.63.154.1, 1234
> > Fri Apr 27 17:39:39 2001: DEBUG: Handling with Radius::AuthFILE
> > Fri Apr 27 17:39:39 2001: DEBUG: Reading users file
> > /app/Radiator/db/testusers
> > Fri Apr 27 17:39:39 2001: DEBUG: Radius::AuthFILE looks for match with
> > mariano@pert
> > Fri Apr 27 17:39:39 2001: DEBUG: Radius::AuthFILE ACCEPT:
> > Fri Apr 27 17:39:39 2001: DEBUG: Access accepted for mariano@pert
> > Fri Apr 27 17:39:39 2001: DEBUG: Packet dump:
> > *** Sending to 127.0.0.1 port 35086 ....
> > Code: Access-Accept
> > Identifier: 9
> > Authentic: 1234567890123456
> > Attributes:
> > Framed-Protocol = PPP
> >
> > Fri Apr 27 17:39:39 2001: DEBUG: Packet dump:
> > *** Received from 127.0.0.1 port 35086 ....
> > Code: Accounting-Request
> > Identifier: 10
> > Authentic: Z<24>}<132><175>=<131><201><11>;<24><217><150><159>7<10>
> > Attributes:
> > User-Name = "mariano@pert"
> > Service-Type = Framed-User
> > NAS-IP-Address = 203.63.154.1
> > NAS-Port = 1234
> > NAS-Port-Type = Async
> > Acct-Session-Id = "00001234"
> > Acct-Status-Type = Start
> > Called-Station-Id = "123456789"
> > Calling-Station-Id = "987654321"
> >
> > Fri Apr 27 17:39:39 2001: DEBUG: Rewrote user name to mariano@pert
> > Fri Apr 27 17:39:39 2001: DEBUG: Rewrote user name to mariano@pert
> > Fri Apr 27 17:39:39 2001: DEBUG: Handling request with Handler
> > 'Realm=DEFAULT'
> > Fri Apr 27 17:39:39 2001: DEBUG: Adding session for mariano@pert,
> > 203.63.154.1, 1234
> > Fri Apr 27 17:39:39 2001: DEBUG: Handling with Radius::AuthFILE
> > Fri Apr 27 17:39:39 2001: DEBUG: Accounting accepted
> > Fri Apr 27 17:39:39 2001: DEBUG: Packet dump:
> > *** Sending to 127.0.0.1 port 35086 ....
> > Code: Accounting-Response
> > Identifier: 10
> > Authentic: Z<24>}<132><175>=<131><201><11>;<24><217><150><159>7<10>
> > Attributes:
> >
> > Fri Apr 27 17:39:39 2001: DEBUG: Packet dump:
> > *** Received from 127.0.0.1 port 35086 ....
> > Code: Accounting-Request
> > Identifier: 11
> > Authentic:
> > <207><152><10>5<170><228>Po6<200><172><132><197><225><216><161>
> > Attributes:
> > User-Name = "mariano@pert"
> > Service-Type = Framed-User
> > NAS-IP-Address = 203.63.154.1
> > NAS-Port = 1234
> > NAS-Port-Type = Async
> > Acct-Session-Id = "00001234"
> > Acct-Status-Type = Stop
> > Called-Station-Id = "123456789"
> > Calling-Station-Id = "987654321"
> > Acct-Delay-Time = 0
> > Acct-Session-Time = 1000
> > Acct-Input-Octets = 20000
> > Acct-Output-Octets = 30000
> >
> > Fri Apr 27 17:39:39 2001: DEBUG: Rewrote user name to mariano@pert
> > Fri Apr 27 17:39:39 2001: DEBUG: Rewrote user name to mariano@pert
> > Fri Apr 27 17:39:39 2001: DEBUG: Handling request with Handler
> > 'Realm=DEFAULT'
> > Fri Apr 27 17:39:39 2001: DEBUG: Deleting session for mariano@pert,
> > 203.63.154.1, 1234
> > Fri Apr 27 17:39:39 2001: DEBUG: Handling with Radius::AuthFILE
> > Fri Apr 27 17:39:39 2001: DEBUG: Accounting accepted
> > Fri Apr 27 17:39:39 2001: DEBUG: Packet dump:
> > *** Sending to 127.0.0.1 port 35086 ....
> > Code: Accounting-Response
> > Identifier: 11
> > Authentic:
> > <207><152><10>5<170><228>Po6<200><172><132><197><225><216><161>
> > Attributes:
> >
> > Fri Apr 27 17:39:54 2001: NOTICE: SIGHUP received: restarting
> >
> >
> > ===
> > Archive at http://www.starport.net/~radiator/
> > Announcements on [EMAIL PROTECTED]
> > To unsubscribe, email '[EMAIL PROTECTED]' with
> > 'unsubscribe radiator' in the body of the message.
>
> --
> Radiator: the most portable, flexible and configurable RADIUS server
> anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
> -
> Nets: internetwork inventory and management - graphical, extensible,
> flexible with hardware, software, platform and database independence.
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
