RE: Re[2]: PIX v6.1 accounting problem

2002-03-20 Thread Pierre Strazza
1 7 ^Z^U  D e  s t  i n  a t  i o  n -
  P o  r t  = 8  0

-Message d'origine-
De : 3APA3A [mailto:[EMAIL PROTECTED]]
Envoyé : mercredi 20 mars 2002 09:44
À : Pierre Strazza
Objet : Re[2]: PIX v6.1 accounting problem


Dear Pierre Strazza,

It means Cisco has a Vendor-Specific packet structure different from one
recommended in RFC (or sends a buggy packet). Can you sniff the packet?

--Wednesday, March 20, 2002, 3:45:27 AM, you wrote to
[EMAIL PROTECTED]:


PS> Here is the radius.log extract :
PS> Wed Mar 20 01:41:30 2002 : Error: WARNING: Malformed RADIUS packet from
host
PS> x.x.x.x: Vendor specific attributes do not exactly fill Vendor-Specific

PS> Same error is reported while running in debug mode.

PS> No further accounting information is logged.

PS> The cisco box is a PIX firewall v6.1, authenticating users thru the
PS> freeradius server for VPN access.

PS> Pierre.

PS> -Message d'origine-
PS> De : Chris Parker [mailto:[EMAIL PROTECTED]]
PS> Envoyé : mardi 19 mars 2002 19:13
PS> À : [EMAIL PROTECTED]
PS> Objet : RE: PIX v6.1 accounting problem


PS> At 05:19 PM 3/19/2002 +0100, Pierre Strazza wrote:
>>The request is not loggued since an error message is reported in the
>>radius.log file, indicating some non conform attributes - not proceeded.
>>
>>the dictionary.cisco seems to be already included in the dictionary file
by
>>default ..
>>
>>Any idea ?

PS> It would really really really help if you could provide the error
message
PS> printed by the server, as well as any printed when you run it in debug
PS> mode.

PS> -Chris

PS> --
PS> \\\|||///  \  StarNet Inc.  \Chris Parker
PS> \ ~   ~ /   \   WX *is* Wireless!\   Director, Engineering
PS> | @   @ |\   http://www.starnetwx.net \  (847) 963-0116
PS> oOo---(_)---oOo--\--
PS>\ Wholesale Internet Services -
http://www.megapop.net



PS> - 
PS> List info/subscribe/unsubscribe? See
PS> http://www.freeradius.org/list/users.html


PS> .




PS> .




PS> .



PS> - 
PS> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html


-- 
~/ZARAZA
Íî Ãàððè... ÿ áåçóñëîâíî îòäàþ ïðåäïî÷òåíèå åìó, çà
âûñîêóþ ïèòàòåëüíîñòü è êàêîå-òî îñîáåííî íåæíîå ìÿñî. (Òâåí)


- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html


.




.




.



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Re[2]: PIX v6.1 accounting problem

2002-03-20 Thread 3APA3A

Dear Pierre Strazza,

It means Cisco has a Vendor-Specific packet structure different from one
recommended in RFC (or sends a buggy packet). Can you sniff the packet?

--Wednesday, March 20, 2002, 3:45:27 AM, you wrote to 
[EMAIL PROTECTED]:


PS> Here is the radius.log extract :
PS> Wed Mar 20 01:41:30 2002 : Error: WARNING: Malformed RADIUS packet from host
PS> x.x.x.x: Vendor specific attributes do not exactly fill Vendor-Specific

PS> Same error is reported while running in debug mode.

PS> No further accounting information is logged.

PS> The cisco box is a PIX firewall v6.1, authenticating users thru the
PS> freeradius server for VPN access.

PS> Pierre.

PS> -Message d'origine-
PS> De : Chris Parker [mailto:[EMAIL PROTECTED]]
PS> Envoyé : mardi 19 mars 2002 19:13
PS> À : [EMAIL PROTECTED]
PS> Objet : RE: PIX v6.1 accounting problem


PS> At 05:19 PM 3/19/2002 +0100, Pierre Strazza wrote:
>>The request is not loggued since an error message is reported in the
>>radius.log file, indicating some non conform attributes - not proceeded.
>>
>>the dictionary.cisco seems to be already included in the dictionary file by
>>default ..
>>
>>Any idea ?

PS> It would really really really help if you could provide the error message
PS> printed by the server, as well as any printed when you run it in debug
PS> mode.

PS> -Chris

PS> --
PS> \\\|||///  \  StarNet Inc.  \Chris Parker
PS> \ ~   ~ /   \   WX *is* Wireless!\   Director, Engineering
PS> | @   @ |\   http://www.starnetwx.net \  (847) 963-0116
PS> oOo---(_)---oOo--\--
PS>\ Wholesale Internet Services - http://www.megapop.net



PS> - 
PS> List info/subscribe/unsubscribe? See
PS> http://www.freeradius.org/list/users.html


PS> .




PS> .




PS> .



PS> - 
PS> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


-- 
~/ZARAZA
Íî Ãàððè... ÿ áåçóñëîâíî îòäàþ ïðåäïî÷òåíèå åìó, çà
âûñîêóþ ïèòàòåëüíîñòü è êàêîå-òî îñîáåííî íåæíîå ìÿñî. (Òâåí)


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html