Hello Lee -


You should test this with Radiator 3.8, which should work correctly.

Please let me know if it doesn't.

regards

Hugh


On 08/01/2004, at 4:56 PM, Lee Webb wrote:


Hi,

I have noticed that the Proxy-State attribute is not being preserved in
the Access-Reject after a Max Sessions Exceeded

I was under the impression that Radiator would preserve the Proxy-State
attribute {from ref.html Radiator automatically copies any Proxy-State
attribute from the incoming Radius request to the reply}

We are currently running Radiator Ver 2.18.4

Short of writing a hook to put the Proxy-State attribute back in to the
reply packet, is there a way to make Radiator do it?

Following is a debug dump of the packets:

Thu Jan 8 16:52:11 2004: DEBUG: Packet dump:
*** Received from 203.194.59.120 port 1812 ....
Code: Access-Request
Identifier: 60
Authentic:
c<151><149><209><18><24><213><164>[<219><237><215>H<17><238><244>
Attributes:
Framed-Protocol = PPP
CHAP-Password =
"<2><201><190><151>o<176><187>&<15><5><139>+<239><173><153>~<147>"
NAS-Port-Type = Virtual
NAS-Port = 2955
Calling-Station-Id = "HIDDEN"
Service-Type = Framed-User
NAS-IP-Address = 203.194.30.201
NAS-Identifier = "HIDDEN"
User-Name = "[EMAIL PROTECTED]"
Proxy-State =
HIDDEN/ 639795D11218D5A45BDBEDD74811EEF4DAB50998447F6AA9BA485C41C417D45DE549E7C 1447F6F9D718A411090FEDFD41AB619D7AA77729A822B3
7B8B67CECAFD57BDF1D714756AC887C1FBDA773EDF89C26935A691B1DF694263AAD


Thu Jan  8 16:52:11 2004: INFO: Access rejected for [EMAIL PROTECTED]:
MaxSessions exceeded
Thu Jan  8 16:52:11 2004: DEBUG: Packet dump:
*** Sending to 203.194.59.120 port 1812 ....
Code:       Access-Reject
Identifier: 60
Authentic:
c<151><149><209><18><24><213><164>[<219><237><215>H<17><238><244>
Attributes:
        Reply-Message = "Request Denied"


-- Cheers Lee Webb

Systems Administrator
DOT Communications
[EMAIL PROTECTED]

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



NB: have you included a copy of your configuration file (no secrets), together with a trace 4 debug showing what is happening?

--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

Reply via email to