gnoring request from unknown client

2003-04-03 Thread Rosenstein Dan 
Title: gnoring request from unknown client





Hi,
I'm using freeradius 0.8.1.
I try activating it from actually two types of clients (which worked successfully against other RADIUS servers).
And keep getting server errors of the form:


Ignoring request from unknown client 10.119.33.184:3458


The client (IP) is configure in both: clients  clients conf.


10.119.33.184  comverse


 


client 10.119.33.61 {
 #
 # The shared secret use to encrypt and sign packets between
 # the NAS and FreeRADIUS. You MUST change this secret from the
 # default, otherwise it's not a secret any more!
 #
 # The secret can be any string, up to 32 characters in length.
 #
 secret  = comverse
}


What seems fishy is that the (random) port number is attached to the ip. Purhaps the combination ip:port is treated as the client and is thus not found in the config files ?

Does any one have an idea ?


Thanks for your help.
Danny Rosenstein.
Comverse Ltd.

Re: gnoring request from unknown client

2003-04-03 Thread Alan DeKok 
Rosenstein Dan [EMAIL PROTECTED] wrote:
 I try activating it from actually two types of clients (which worked
 successfully against other RADIUS servers).
 And keep getting server errors of the form:
 
 Ignoring request from unknown client 10.119.33.184:3458
 
 The client (IP) is configure in both: clients  clients conf.

  Hmm... that means it should be accepted.

  Are you sure the server is reading the configuration files you think
it's reading?

 What seems fishy is that the (random) port number is attached to the ip.
 Purhaps the combination ip:port is treated as the client and is thus not
 found in the config files ?

  No, the port number is not used to determine known/unknown clients.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: gnoring request from unknown client

2003-04-03 Thread Chris Brotsos 
At 10:31 AM 4/3/2003, you wrote:

Hi,
I'm using freeradius 0.8.1.
I try activating it from actually two types of clients (which worked 
successfully against other RADIUS servers).
And keep getting server errors of the form:

Ignoring request from unknown client 10.119.33.184:3458

The client (IP) is configure in both: clients  clients conf.
Just use clients.conf .


10.119.33.184   comverse



client 10.119.33.61 {

#
#  The shared secret use to encrypt and sign packets between
#  the NAS and FreeRADIUS.  You MUST change this secret from the
#  default, otherwise it's not a secret any more!
#
#  The secret can be any string, up to 32 characters in length.
#
secret  = comverse
}
Does any one have an idea ?
Yes, you have 10.119.33.61 instead of 10.119.33.184 in clients.conf.

Chris



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: gnoring request from unknown client

2003-04-03 Thread Chris Brotsos 
At 10:49 AM 4/3/2003, you wrote:

Thankis Chris,
But I have 10.119.33.184 as well, which doesn't help:
And clients itself should be enough (although obsolete).


O/k, I thought maybe you just missed that by mistake.

I would take Allen's suggestion, and make sure the server is reading the 
configuration files you think
it's reading. Work with one file at a time.

Chris



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html