RE: Question regarding Proxy-State [33] Attribute

2002-09-20 Thread Brandon Lehmann 

Just as a fun Record. I have resolved this issue... Read below for some fun
stuff.

 START CUT 

-Original Message-
From: Ballew, Dean A [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 20, 2002 4:49 PM
To: Brandon Lehmann; Radius Testing
Cc: Dan-CPM; Stephen Goff
Subject: RE: Worldteq - Status of Realm Activation: IP Change


Brandon,
  Please try again.  Your realm was pointing (test server only) to another
company that previously owned this realm...
Proxy-state will not be sent in your dialtests.   Proxy-state will be
implemented with our system upgrades in the near future.
Dean

-Original Message-
From: Brandon Lehmann [mailto:[EMAIL PROTECTED]] 
Sent: Friday, September 20, 2002 3:22 PM
To: '[EMAIL PROTECTED]'
Cc: '[EMAIL PROTECTED]'; Stephen Goff
Subject: FW: Worldteq - Status of Realm Activation: IP Change


When testing the realms I have run into a few problems. Viewing our radius
logs, I do NOT see a Proxy-State attribute being sent from the test radius
proxies. It looks like the users are authenticating ok, but the session will
not start with the test numbers. If you could please let me know why this
may be happening, it would be greatly appreciated. A snapshot of a logfile
from you guys would work even better if the trouble is indeed on our end.
All dialup tests were done w/ the user '[EMAIL PROTECTED]'.

Thanks for your help.

Brandon Lehmann
Network Support Specialist
Networld Online Inc.
1243 Napoleon Street
Fremont, OH 43420
800-644-6638
[EMAIL PROTECTED]
www.nwonline.net

 END CUT ---

The really funny thing is... that we are the only ones that have ever owned
that realm... interesting.. sounds like no one ever set it up to me.

Thanks to all of you that helped!

Brandon Lehmann
Network Support Specialist
Networld Online Inc.
1243 Napoleon Street
Fremont, OH 43420
800-644-6638
[EMAIL PROTECTED] 
www.nwonline.net


> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Chris
> Parker
> Sent: Friday, September 20, 2002 3:36 PM
> To: [EMAIL PROTECTED]
> Subject: RE: Question regarding Proxy-State [33] Attribute
> 
> 
> At 03:19 PM 9/20/2002 -0400, Brandon Lehmann wrote:
> >Chris,
> >
> > This is the result from my debug (radiusd -x -x)
> >
> >rad_recv: Accounting-Request packet from host 
> 209.211.205.27:46810, id=250,
> >length=445
> >Thread 2 assigned request 6
> >--- Walking the entire request list ---
> >Threads: total/active/spare threads = 5/1/4
> >Waking up in 5 seconds...
> >Thread 2 handling request 6, (2 handled so far)
> > User-Name = "[EMAIL PROTECTED]"
> > NAS-IP-Address = 63.152.3.66
> > NAS-Port = 7190
> > Service-Type = Framed-User
> > Cisco-AVPair = "disc-cause-ext=1043"
> > Cisco-AVPair = "pre-bytes-in=250"
> > Cisco-AVPair = "pre-bytes-out=216"
> > Cisco-AVPair = "pre-paks-in=8"
> > Cisco-AVPair = "pre-paks-out=6"
> > Cisco-AVPair = "pre-session-time=27"
> > Cisco-AVPair = "connect-progress=101"
> > Cisco-AVPair = "nas-rx-speed=26400"
> > Cisco-AVPair = "nas-tx-speed=38000"
> > Cisco-NAS-Port = "Async3/07*Serial7/0:1:22"
> > Calling-Station-Id = "4193321376"
> > Acct-Status-Type = Stop
> > Acct-Delay-Time = 0
> > Acct-Input-Octets = 0
> > Acct-Output-Octets = 8
> > Acct-Session-Id = "02000C91"
> > Acct-Authentic = RADIUS
> > Acct-Session-Time = 0
> > Acct-Input-Packets = 0
> > Acct-Output-Packets = 1
> > NAS-Port-Type = Async
> > X-Ascend-Pre-Input-Octets = 250
> > X-Ascend-Pre-Output-Octets = 216
> > X-Ascend-Pre-Input-Packets = 8
> > X-Ascend-Pre-Output-Packets = 6
> > X-Ascend-Disconnect-Cause = 43
> > X-Ascend-Connect-Progress = 101
> > X-Ascend-Data-Rate = 26400
> > X-Ascend-PreSession-Time = 27
> > X-Ascend-Xmit-Rate = 38000
> 
> Qwest isn't sending you a Proxy-State attribute.  Kindly ask them how
> you are supposed to return one if they aren't sending one?
> 
> http://www.freeradius.org/rfc/rfc2865.html#Proxy-State
> 
> -Chris
> --
> \\\|||///  \  StarNet Inc.  \ Chris Parker
> \ ~   ~ /   \   WX *is* Wireless!\   Director, Engineering
> | @   @ |\   http://www.starnetwx.net \  (847) 963-0116
> oOo---(_)---oOo--\
> --
>\ Wholesale Internet Services - 
http://www.megapop.net



- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Question regarding Proxy-State [33] Attribute

2002-09-20 Thread Brandon Lehmann 

Thanks Chris... Funny how that works... They are both slow at fixing
problems and mindless in setting up their own specifications.

Thanks again. If I need anymore help, now I know where to get it :)

Brandon Lehmann
Network Support Specialist
Networld Online Inc.
1243 Napoleon Street
Fremont, OH 43420
800-644-6638
[EMAIL PROTECTED] 
www.nwonline.net


> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Chris
> Parker
> Sent: Friday, September 20, 2002 3:36 PM
> To: [EMAIL PROTECTED]
> Subject: RE: Question regarding Proxy-State [33] Attribute
> 
> 
> At 03:19 PM 9/20/2002 -0400, Brandon Lehmann wrote:
> >Chris,
> >
> > This is the result from my debug (radiusd -x -x)
> >
> >rad_recv: Accounting-Request packet from host 
> 209.211.205.27:46810, id=250,
> >length=445
> >Thread 2 assigned request 6
> >--- Walking the entire request list ---
> >Threads: total/active/spare threads = 5/1/4
> >Waking up in 5 seconds...
> >Thread 2 handling request 6, (2 handled so far)
> > User-Name = "[EMAIL PROTECTED]"
> > NAS-IP-Address = 63.152.3.66
> > NAS-Port = 7190
> > Service-Type = Framed-User
> > Cisco-AVPair = "disc-cause-ext=1043"
> > Cisco-AVPair = "pre-bytes-in=250"
> > Cisco-AVPair = "pre-bytes-out=216"
> > Cisco-AVPair = "pre-paks-in=8"
> > Cisco-AVPair = "pre-paks-out=6"
> > Cisco-AVPair = "pre-session-time=27"
> > Cisco-AVPair = "connect-progress=101"
> > Cisco-AVPair = "nas-rx-speed=26400"
> > Cisco-AVPair = "nas-tx-speed=38000"
> > Cisco-NAS-Port = "Async3/07*Serial7/0:1:22"
> > Calling-Station-Id = "4193321376"
> > Acct-Status-Type = Stop
> > Acct-Delay-Time = 0
> > Acct-Input-Octets = 0
> > Acct-Output-Octets = 8
> > Acct-Session-Id = "02000C91"
> > Acct-Authentic = RADIUS
> > Acct-Session-Time = 0
> > Acct-Input-Packets = 0
> > Acct-Output-Packets = 1
> > NAS-Port-Type = Async
> > X-Ascend-Pre-Input-Octets = 250
> > X-Ascend-Pre-Output-Octets = 216
> > X-Ascend-Pre-Input-Packets = 8
> > X-Ascend-Pre-Output-Packets = 6
> > X-Ascend-Disconnect-Cause = 43
> > X-Ascend-Connect-Progress = 101
> > X-Ascend-Data-Rate = 26400
> > X-Ascend-PreSession-Time = 27
> > X-Ascend-Xmit-Rate = 38000
> 
> Qwest isn't sending you a Proxy-State attribute.  Kindly ask them how
> you are supposed to return one if they aren't sending one?
> 
> http://www.freeradius.org/rfc/rfc2865.html#Proxy-State
> 
> -Chris
> --
> \\\|||///  \  StarNet Inc.  \ Chris Parker
> \ ~   ~ /   \   WX *is* Wireless!\   Director, Engineering
> | @   @ |\   http://www.starnetwx.net \  (847) 963-0116
> oOo---(_)---oOo--\
> --
>\ Wholesale Internet Services - 
http://www.megapop.net



- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Question regarding Proxy-State [33] Attribute

2002-09-20 Thread Chris Parker 

At 03:19 PM 9/20/2002 -0400, Brandon Lehmann wrote:
>Chris,
>
> This is the result from my debug (radiusd -x -x)
>
>rad_recv: Accounting-Request packet from host 209.211.205.27:46810, id=250,
>length=445
>Thread 2 assigned request 6
>--- Walking the entire request list ---
>Threads: total/active/spare threads = 5/1/4
>Waking up in 5 seconds...
>Thread 2 handling request 6, (2 handled so far)
> User-Name = "[EMAIL PROTECTED]"
> NAS-IP-Address = 63.152.3.66
> NAS-Port = 7190
> Service-Type = Framed-User
> Cisco-AVPair = "disc-cause-ext=1043"
> Cisco-AVPair = "pre-bytes-in=250"
> Cisco-AVPair = "pre-bytes-out=216"
> Cisco-AVPair = "pre-paks-in=8"
> Cisco-AVPair = "pre-paks-out=6"
> Cisco-AVPair = "pre-session-time=27"
> Cisco-AVPair = "connect-progress=101"
> Cisco-AVPair = "nas-rx-speed=26400"
> Cisco-AVPair = "nas-tx-speed=38000"
> Cisco-NAS-Port = "Async3/07*Serial7/0:1:22"
> Calling-Station-Id = "4193321376"
> Acct-Status-Type = Stop
> Acct-Delay-Time = 0
> Acct-Input-Octets = 0
> Acct-Output-Octets = 8
> Acct-Session-Id = "02000C91"
> Acct-Authentic = RADIUS
> Acct-Session-Time = 0
> Acct-Input-Packets = 0
> Acct-Output-Packets = 1
> NAS-Port-Type = Async
> X-Ascend-Pre-Input-Octets = 250
> X-Ascend-Pre-Output-Octets = 216
> X-Ascend-Pre-Input-Packets = 8
> X-Ascend-Pre-Output-Packets = 6
> X-Ascend-Disconnect-Cause = 43
> X-Ascend-Connect-Progress = 101
> X-Ascend-Data-Rate = 26400
> X-Ascend-PreSession-Time = 27
> X-Ascend-Xmit-Rate = 38000

Qwest isn't sending you a Proxy-State attribute.  Kindly ask them how
you are supposed to return one if they aren't sending one?

http://www.freeradius.org/rfc/rfc2865.html#Proxy-State

-Chris
--
\\\|||///  \  StarNet Inc.  \ Chris Parker
\ ~   ~ /   \   WX *is* Wireless!\   Director, Engineering
| @   @ |\   http://www.starnetwx.net \  (847) 963-0116
oOo---(_)---oOo--\--
   \ Wholesale Internet Services - http://www.megapop.net



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Question regarding Proxy-State [33] Attribute

2002-09-20 Thread Brandon Lehmann 

Chris,

This is the result from my debug (radiusd -x -x)

rad_recv: Accounting-Request packet from host 209.211.205.27:46810, id=250,
length=445
Thread 2 assigned request 6
--- Walking the entire request list ---
Threads: total/active/spare threads = 5/1/4
Waking up in 5 seconds...
Thread 2 handling request 6, (2 handled so far)
User-Name = "[EMAIL PROTECTED]"
NAS-IP-Address = 63.152.3.66
NAS-Port = 7190
Service-Type = Framed-User
Cisco-AVPair = "disc-cause-ext=1043"
Cisco-AVPair = "pre-bytes-in=250"
Cisco-AVPair = "pre-bytes-out=216"
Cisco-AVPair = "pre-paks-in=8"
Cisco-AVPair = "pre-paks-out=6"
Cisco-AVPair = "pre-session-time=27"
Cisco-AVPair = "connect-progress=101"
Cisco-AVPair = "nas-rx-speed=26400"
Cisco-AVPair = "nas-tx-speed=38000"
Cisco-NAS-Port = "Async3/07*Serial7/0:1:22"
Calling-Station-Id = "4193321376"
Acct-Status-Type = Stop
Acct-Delay-Time = 0
Acct-Input-Octets = 0
Acct-Output-Octets = 8
Acct-Session-Id = "02000C91"
Acct-Authentic = RADIUS
Acct-Session-Time = 0
Acct-Input-Packets = 0
Acct-Output-Packets = 1
NAS-Port-Type = Async
X-Ascend-Pre-Input-Octets = 250
X-Ascend-Pre-Output-Octets = 216
X-Ascend-Pre-Input-Packets = 8
X-Ascend-Pre-Output-Packets = 6
X-Ascend-Disconnect-Cause = 43
X-Ascend-Connect-Progress = 101
X-Ascend-Data-Rate = 26400
X-Ascend-PreSession-Time = 27
X-Ascend-Xmit-Rate = 38000
modcall: entering group preacct
  modcall[preacct]: module "preprocess" returns noop
rlm_realm: Looking up realm nwonline.net for User-Name =
"[EMAIL PROTECTED]"
rlm_realm: Found realm DEFAULT
  rlm_realm: Proxying request from user test to realm DEFAULT
rlm_realm: Adding Realm = "DEFAULT"
rlm_realm:  Preparing to proxy accounting request to realm DEFAULT 
  modcall[preacct]: module "suffix" returns ok
modcall: group preacct returns ok
modcall: entering group accounting
radius_xlat:  '/usr/local/var/log/radius/radacct/detail.log'
rlm_detail: /usr/local/var/log/radius/radacct/detail.log expands to
/usr/local/var/log/radius/radacct/detail.log
rlm_detail: Freeradius-Proxied-To set to 208.231.144.20
  modcall[accounting]: module "detail" returns ok
radius_xlat:  '[EMAIL PROTECTED]'
Accounting: logout: login entry for NAS nas14.arlington1.va.us.da.qwest port
7190 not found
  modcall[accounting]: module "radutmp" returns ok
modcall: group accounting returns ok
Sending Accounting-Request of id 4 to 208.231.144.20:1646
User-Name = "[EMAIL PROTECTED]"
NAS-IP-Address = 63.152.3.66
NAS-Port = 7190
Service-Type = Framed-User
Cisco-AVPair = "1043"
Cisco-AVPair = "250"
Cisco-AVPair = "216"
Cisco-AVPair = "8"
Cisco-AVPair = "6"
Cisco-AVPair = "27"
Cisco-AVPair = "101"
Cisco-AVPair = "26400"
Cisco-AVPair = "38000"
Cisco-NAS-Port = "Async3/07*Serial7/0:1:22"
Calling-Station-Id = "4193321376"
Acct-Status-Type = Stop
Acct-Delay-Time = 0
Acct-Input-Octets = 0
Acct-Output-Octets = 8
Acct-Session-Id = "02000C91"
Acct-Authentic = RADIUS
Acct-Session-Time = 0
Acct-Input-Packets = 0
Acct-Output-Packets = 1
NAS-Port-Type = Async
X-Ascend-Pre-Input-Octets = 250
X-Ascend-Pre-Output-Octets = 216
X-Ascend-Pre-Input-Packets = 8
X-Ascend-Pre-Output-Packets = 6
X-Ascend-Disconnect-Cause = 43
X-Ascend-Connect-Progress = 101
X-Ascend-Data-Rate = 26400
X-Ascend-PreSession-Time = 27
X-Ascend-Xmit-Rate = 38000
Proxy-State = "250"
Thread 2 waiting to be assigned a request
rad_recv: Accounting-Response packet from host 208.231.144.20:1646, id=4,
length=25
Thread 3 assigned request 6
rl_next:  returning NULL
Waking up in 5 seconds...
Thread 3 handling request 6, (2 handled so far)
Proxy-State = 0x323530
Sending Accounting-Response of id 250 to 209.211.205.27:46810
Finished request 6
Going to the next request
Thread 3 waiting to be assigned a request


>From what it looks like, Qwest is not sending me proxy-state attributes.
This is really interesting as they told us that these were required. My
testing will still not let me log on.

Brandon Lehmann
Network Support Specialist
Networld Online Inc.
1243 Napoleon Street
Fremont, OH 43420
800-644-6638
[EMAIL PROTECTED] 
www.nwonline.net


> -Original Message-
&

RE: Question regarding Proxy-State [33] Attribute

2002-09-20 Thread Brandon Lehmann 

So what your saying... is that i should use the CVS snapshot and try this.

freeradius does show a succesful auth. but the session never comes up. Our
realms are already in production, but we are doing testing for Qwest's new
requirement for round-robin radius (using the qwest test #). I'll try the
cvs snapshot first. Thanks.

Brandon Lehmann
Network Support Specialist
Networld Online Inc.
1243 Napoleon Street
Fremont, OH 43420
800-644-6638
[EMAIL PROTECTED] 
www.nwonline.net


> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Franklin
> Trumpy
> Sent: Friday, September 20, 2002 2:31 PM
> To: '[EMAIL PROTECTED]'
> Subject: Re: Question regarding Proxy-State [33] Attribute
> 
> 
> 
> On Fri, 20 Sep 2002, Brandon Lehmann wrote:
> > The only reason that this would happen is because our proxy 
> server is
> > NOT sending back a Proxy-State [33] attribute. How can I 
> make sure that
> > FreeRadius sends this attr back? If I can't get it to do this, can
> > someone please advise a software package that can do this?
> 
> If the Proxy-State attribute is getting lost somewhere, it's most
> likely being stripped off by the VopRADIUS server, which, of 
> course, it
> shouldn't be doing.
> 
> I can confirm that the FreeRADIUS CVS snapshot dated 08/16/2002 does
> receive Proxy-State attributes from QWest NAS correctly, does 
> proxy them
> correctly (to, in my case, a Radiator server *shudder*), and 
> does return
> them to the QWest client correctly. It has been behaving exactly as it
> should according to the RFC through various releases and CVS 
> iterations
> for about a year.
> 
> Does your FreeRADIUS server show a successful authentication, 
> but then the
> actual session fails to come up, or does the FreeRADIUS server show a
> failed authentication? On a QWest-specific note, unless your
> realm is already in production, Proxy-State shouldn't preclude a
> successful connection at the NAS end.
> 
> Franklin
> 
> --
> Franklin Trumpy, NFA, MNGS, GSc | Say not, "I have found the truth,"
> Sr. UNIX Systems Administrator  | but rather, "I have found a truth."
> Lighthouse Communications   | 
> [EMAIL PROTECTED] | Say not, "I have found the 
> path of the soul."
> (515)244-1115   | Say rather, "I have met the 
> soul walking
> (888)953-3278   |   upon my path."
> http://www.lh.net   |
> | -Kahlil Gibran, 
> _The Prophet_, 1923
> 
> 
> 
> - 
> List info/subscribe/unsubscribe? See 
http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Question regarding Proxy-State [33] Attribute

2002-09-20 Thread Chris Parker 

At 01:31 PM 9/20/2002 -0500, Franklin Trumpy wrote:

>On Fri, 20 Sep 2002, Brandon Lehmann wrote:
> > The only reason that this would happen is because our proxy server is
> > NOT sending back a Proxy-State [33] attribute. How can I make sure that
> > FreeRadius sends this attr back? If I can't get it to do this, can
> > someone please advise a software package that can do this?
>
>If the Proxy-State attribute is getting lost somewhere, it's most
>likely being stripped off by the VopRADIUS server, which, of course, it
>shouldn't be doing.

Which FreeRADIUS handles very gracefully.  It also handles Merit servers
which decide to mangle attributes.  Any Proxy-State attributes that are
received in a reply from a remote server are discarded by FreeRADIUS.  The
Proxy-State attributes that were sent in the *original* request are
copied into the reply to send back to Qwest.  IE, the server already
handles the case of a remote server stripping or mangling the Proxy-State(s).

Hence the request to run it in debug to see what Qwest is sending, and
what is being sent back to them.

-Chris
--
\\\|||///  \  StarNet Inc.  \ Chris Parker
\ ~   ~ /   \   WX *is* Wireless!\   Director, Engineering
| @   @ |\   http://www.starnetwx.net \  (847) 963-0116
oOo---(_)---oOo--\--
   \ Wholesale Internet Services - http://www.megapop.net



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Question regarding Proxy-State [33] Attribute

2002-09-20 Thread Franklin Trumpy 


On Fri, 20 Sep 2002, Brandon Lehmann wrote:
> The only reason that this would happen is because our proxy server is
> NOT sending back a Proxy-State [33] attribute. How can I make sure that
> FreeRadius sends this attr back? If I can't get it to do this, can
> someone please advise a software package that can do this?

If the Proxy-State attribute is getting lost somewhere, it's most
likely being stripped off by the VopRADIUS server, which, of course, it
shouldn't be doing.

I can confirm that the FreeRADIUS CVS snapshot dated 08/16/2002 does
receive Proxy-State attributes from QWest NAS correctly, does proxy them
correctly (to, in my case, a Radiator server *shudder*), and does return
them to the QWest client correctly. It has been behaving exactly as it
should according to the RFC through various releases and CVS iterations
for about a year.

Does your FreeRADIUS server show a successful authentication, but then the
actual session fails to come up, or does the FreeRADIUS server show a
failed authentication? On a QWest-specific note, unless your
realm is already in production, Proxy-State shouldn't preclude a
successful connection at the NAS end.

Franklin

--
Franklin Trumpy, NFA, MNGS, GSc | Say not, "I have found the truth,"
Sr. UNIX Systems Administrator  | but rather, "I have found a truth."
Lighthouse Communications   | 
[EMAIL PROTECTED] | Say not, "I have found the path of the soul."
(515)244-1115   | Say rather, "I have met the soul walking
(888)953-3278   |   upon my path."
http://www.lh.net   |
| -Kahlil Gibran, _The Prophet_, 1923



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Question regarding Proxy-State [33] Attribute

2002-09-20 Thread Alan DeKok 

Brandon Lehmann <[EMAIL PROTECTED]> wrote:
>   This is what we are running into. On top of some errors about
> accounting (FreeRadius wants us to add ALL of qwest's NAS boxes to the
> clients file.. ick)

  No, that's definitely not true.  The ONLY addresses which are
required to be in the 'clients' file are the machines which send
packets to the server.

> The only reason that this would happen is because our proxy server
> is NOT sending back a Proxy-State [33] attribute. How can I make
> sure that FreeRadius sends this attr back?

  Look at the output of debugging mode?

  Also, try upgrading to the latest CVS snapshot.  It has a few more
fixes which didn't make it into 0.7.1.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Question regarding Proxy-State [33] Attribute

2002-09-20 Thread Chris Parker 

At 09:51 AM 9/20/2002 -0400, Brandon Lehmann wrote:
>Hi List,
>
> We are currently trying to get FreeRadius 0.7.1 to work with our
>VopRadius server. This is how it flows.
>
> Our users dial into the Qwest Network. The Qwest NAS sends a request
>to Qwest's radius proxy servers -> Qwest proxy servers send a request to one
>of our proxy servers -> our proxy server sends the request to our VopRadius
>server -> VopRadius authenicates the user. Sounds easy right?
>
> This is what we are running into. On top of some errors about
>accounting (FreeRadius wants us to add ALL of qwest's NAS boxes to the
>clients file.. ick) we are not getting authenticated.

Huh?  Uhh, no.  You don't need to do that unless Qwest's NAS are going
to talk to your radius server directly.  If requests are proxied through
Qwest's radius servers, then you only have to add their Radius server IPs
to your clients file.

>The only reason that this would happen is because our proxy server is NOT 
>sending back a Proxy-State [33] attribute. How can I make sure that 
>FreeRadius sends this attr back? If I can't get it to do this, can someone 
>please advise a software package that can do this?

If Qwest's server sends it to you, then FreeRADIUS will send it back.  You
can find out what you are receiving from Qwest and what you are sending back
by running the server in Debug mode ( radiusd -x -x ).

Good luck.

-Chris
--
\\\|||///  \  StarNet Inc.  \ Chris Parker
\ ~   ~ /   \   WX *is* Wireless!\   Director, Engineering
| @   @ |\   http://www.starnetwx.net \  (847) 963-0116
oOo---(_)---oOo--\--
   \ Wholesale Internet Services - http://www.megapop.net



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Question regarding Proxy-State [33] Attribute

2002-09-20 Thread Brandon Lehmann 

Hi List,

We are currently trying to get FreeRadius 0.7.1 to work with our
VopRadius server. This is how it flows.

Our users dial into the Qwest Network. The Qwest NAS sends a request
to Qwest's radius proxy servers -> Qwest proxy servers send a request to one
of our proxy servers -> our proxy server sends the request to our VopRadius
server -> VopRadius authenicates the user. Sounds easy right?

This is what we are running into. On top of some errors about
accounting (FreeRadius wants us to add ALL of qwest's NAS boxes to the
clients file.. ick) we are not getting authenticated. The only reason that
this would happen is because our proxy server is NOT sending back a
Proxy-State [33] attribute. How can I make sure that FreeRadius sends this
attr back? If I can't get it to do this, can someone please advise a
software package that can do this?

Thank you and have a good day.

Brandon Lehmann
Network Support Specialist
Networld Online Inc.
1243 Napoleon Street
Fremont, OH 43420
800-644-6638
[EMAIL PROTECTED] 
www.nwonline.net

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html