RE: L2tp and fixed Framed IP Address for ADSL customers

2006-04-04 Thread Adil Bikarbass
Hello All 

Just to let you know that i finally find the solution to setup a fixed IP
into an l2tp tunnel for my DSL subscribers

I needed to tell Radius to send the fixed Framed IP address in the
access-req packet by adding the following to my cisco config:

radius-server attribute 8 include-in-access-req

Hope this will help someone who will face the same problem
 -- 
|-Adil Bikarbass 
|-IT Manager, MTDS 
|-tel +212.3.767.4861 
|-fax +212.3.767.4863 
|-gsm +212.6.139. 4541 
|-14, rue 16 novembre 
|-Rabat, Kingdom of Morocco 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Guy Fraser
Sent: mardi 28 mars 2006 20:10
To: freeradius-users@lists.freeradius.org
Subject: Re: L2tp and fixed Framed IP Address for ADSL customers

On Tue, 2006-28-03 at 12:05 -0500, Alan DeKok wrote:
 Adil Bikarbass [EMAIL PROTECTED] wrote:
  My radius is listening on 1645 for auth and 1646 for acct, I can see the
  auth request coming into my radius box but the IP address is never got
from
  the Framed-IP reply item but assigned from the Cisco pool
  
  Any clue about what could be the problem?
 
   The NAS.  Fight with it some more.  I don't think there's anything
 you can do to FreeRADIUS to fix it.
 
Is the IP address in a valid range configured on the NAS?

A Cisco will not assign an IP address that it is not configured 
to handle. It seems to me we used eigrp to handle the static 
ip address networks for our NAS servers.

- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


L2tp and fixed Framed IP Address for ADSL customers

2006-04-04 Thread Adil Bikarbass
Hello All 

Just to let you know that i finally find the solution to setup a fixed IP
into an l2tp tunnel for my DSL subscribers

I needed to tell Radius to send the fixed Framed IP address in the
access-req packet by adding the following to my cisco config:

radius-server attribute 8 include-in-access-req

Hope this will help someone who will face the same problem
 -- 
|-Adil Bikarbass 
|-IT Manager, MTDS 
|-tel +212.3.767.4861 
|-fax +212.3.767.4863 
|-gsm +212.6.139. 4541 
|-14, rue 16 novembre 
|-Rabat, Kingdom of Morocco 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Guy Fraser
Sent: mardi 28 mars 2006 20:10
To: freeradius-users@lists.freeradius.org
Subject: Re: L2tp and fixed Framed IP Address for ADSL customers

On Tue, 2006-28-03 at 12:05 -0500, Alan DeKok wrote:
 Adil Bikarbass [EMAIL PROTECTED] wrote:
  My radius is listening on 1645 for auth and 1646 for acct, I can see the
  auth request coming into my radius box but the IP address is never got
from
  the Framed-IP reply item but assigned from the Cisco pool
  
  Any clue about what could be the problem?
 
   The NAS.  Fight with it some more.  I don't think there's anything
 you can do to FreeRADIUS to fix it.
 
Is the IP address in a valid range configured on the NAS?

A Cisco will not assign an IP address that it is not configured 
to handle. It seems to me we used eigrp to handle the static 
ip address networks for our NAS servers.

- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: L2tp and fixed Framed IP Address for ADSL customers

2006-03-29 Thread Adil Bikarbass
The static IP range is a statically routed subnet to the Cisco NAS

We are not using Eigrp we use static routing

Thanks

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Guy Fraser
Sent: mardi 28 mars 2006 20:10
To: freeradius-users@lists.freeradius.org
Subject: Re: L2tp and fixed Framed IP Address for ADSL customers

On Tue, 2006-28-03 at 12:05 -0500, Alan DeKok wrote:
 Adil Bikarbass [EMAIL PROTECTED] wrote:
  My radius is listening on 1645 for auth and 1646 for acct, I can see the
  auth request coming into my radius box but the IP address is never got
from
  the Framed-IP reply item but assigned from the Cisco pool
  
  Any clue about what could be the problem?
 
   The NAS.  Fight with it some more.  I don't think there's anything
 you can do to FreeRADIUS to fix it.
 
Is the IP address in a valid range configured on the NAS?

A Cisco will not assign an IP address that it is not configured 
to handle. It seems to me we used eigrp to handle the static 
ip address networks for our NAS servers.

- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: L2tp and fixed Framed IP Address for ADSL customers

2006-03-28 Thread Adil Bikarbass
Hello All,

My Cisco NAS is listening to responses from FreeRadius here is my Cisco
config

aaa new-model
!
!
aaa authentication login default local
aaa authentication ppp default group radius
aaa authorization network default group radius
aaa accounting delay-start
aaa accounting exec default start-stop group radius
aaa accounting network default start-stop group radius
!
vpdn enable
vpdn search-order domain
vpdn domain-delimiter @ suffix
!
vpdn-group l2tp
 accept-dialin
  protocol l2tp
  virtual-template 1
 terminate-from hostname BAS
 local name rabatgw
 lcp renegotiation on-mismatch
 l2tp tunnel password 7 04561F021C
!
username [EMAIL PROTECTED] password 7 060A5D355C
!
interface Loopback0
 ip address 192.168.1.1 255.255.255.224
!
!
interface Virtual-Template1
 ip unnumbered Loopback0
 ip tcp header-compression
 peer default ip address pool AS
 keepalive 10 255
 ppp authentication pap chap
 ppp timeout idle 1
!
ip local pool AS 192.168.1.2 192.168.1.10
!
radius-server host x.x.x.x auth-port 1645 acct-port 1646 key 7 141A060F1F0
12939213C38303B4351

My radius is listening on 1645 for auth and 1646 for acct, I can see the
auth request coming into my radius box but the IP address is never got from
the Framed-IP reply item but assigned from the Cisco pool

Any clue about what could be the problem?

Thanks

 -- 
|-Adil Bikarbass 
|-IT Manager, MTDS 
|-tel +212.3.767.4861 
|-fax +212.3.767.4863 
|-gsm +212.6.139. 4541 
|-14, rue 16 novembre 
|-Rabat, Kingdom of Morocco 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok
Sent: lundi 20 mars 2006 16:26
To: [EMAIL PROTECTED]; FreeRadius users mailing list
Subject: Re: L2tp and fixed Framed IP Address for ADSL customers 

Adil Bikarbass [EMAIL PROTECTED] wrote:
 I'm using a Cisco 3845. The ADSL users are connecting just fine over the
 L2tp tunnel the issue is that they're getting dynamically assigned address
 from the Cisco IP pool even if a fixed IP is set on FreeRadius attributes

  Then fix the NAS.  Read the Cisco documentation to see how to
configure it to listen to the response from FreeRADIUS.

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: L2tp and fixed Framed IP Address for ADSL customers

2006-03-28 Thread Adil Bikarbass
Thanks stefan

But this is just a test password running on a private test platform

Thanks for the hint anyway



 -- 
|-Adil Bikarbass 
|-IT Manager, MTDS 
|-tel +212.3.767.4861 
|-fax +212.3.767.4863 
|-gsm +212.6.139. 4541 
|-14, rue 16 novembre 
|-Rabat, Kingdom of Morocco 

-Original Message-
From: Stefan Winter [mailto:[EMAIL PROTECTED] 
Sent: mardi 28 mars 2006 11:50
To: [EMAIL PROTECTED]; FreeRadius users mailing list
Subject: Re: L2tp and fixed Framed IP Address for ADSL customers

Hi there!

You *REALLY* *SHOULDN'T* post 7-style passwords from Cisco on a public
mailing 
list:

http://www.alcrypto.co.uk/cisco/

Just enter your crypto stings into the box near the bottom and press enter.

  l2tp tunnel password 7 04561F021C

Good passwords are longer and include numbers, capitals and special 
characters.

 username [EMAIL PROTECTED] password 7 060A5D355C

Dito.

Now that you've told the world your passwords, maybe you should change them.

Greetings,

Stefan Winter

-- 
Stefan WINTER

Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de 
la Recherche
Ingenieur Forschung  Entwicklung

6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg
E-Mail: [EMAIL PROTECTED]     Tel.:     +352 424409-1
http://www.restena.lu                Fax:      +352 422473



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


L2tp and fixed Framed IP Address for ADSL customers

2006-03-20 Thread Adil Bikarbass
Title: L2tp and fixed Framed IP Address for ADSL customers






Hello All,

Ive just setup an L2tp tunnel with my ADSL service provider and would like to have some of my ADSL subscribers get a fixed IP address instead of the dynamically assigned IP Pool

Im using a Cisco 3845. The ADSL users are connecting just fine over the L2tp tunnel the issue is that theyre getting dynamically assigned address from the Cisco IP pool even if a fixed IP is set on FreeRadius attributes



Do you have any idea on how make this subscribers get the Radius Fixed IP instead of the dynamic one?

Thanks In Advance

--
|-Adil Bikarbass
|-IT Manager, MTDS
|-tel +212.3.767.4861
|-fax +212.3.767.4863
|-gsm +212.6.139. 4541
|-14, rue 16 novembre
|-Rabat, Kingdom of Morocco 




- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Freeradius 0.9.3 user's password length

2004-08-17 Thread Adil Bikarbass
Dear List,
we are actually running a FreeRadius 0.9.3 version on Linux Redhat 8 for 
our Dialup customers and we would like to know what is the maximum 
password length a user can have?

Please advise
Best Regards
--
|-Adil Bikarbass
|-IT Manager
|-MTDS S.A.
|-tel +212.3.767.4861
|-fax +212.3.767.4863
|-gsm +212.6.139. 4541
|-14, rue 16 novembre
|-Rabat, Kingdom of Morocco
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Blank username/password

2004-01-14 Thread Adil Bikarbass
Dear all,

Thanks first of all for making this list available.

I'm new to this list, i've searched the mail archive regarding my problem
but in vain. I'm running Freeradius 0.9.3 using flat users file. I want
to grant access to our dialup users based on the number
called (Called-Station-Id) no need for a username or a password.

Our users file contains the following DEFAULT entry :

DEFAUTL Auth-Type := Accept, Called-Station-Id == 1

What happens is that when a user calls the right phone number and provide
a blank username/password he got rejected. But when the user put any
character as a username he got connected.

How can we have the user either type a blank username or any string as
username and get authenticated?

Please advise


-- 
|-Adil Bikarbass
|-MTDS S.A.
|-tel +212.3.767.4861
|-fax +212.3.767.4863
|-gsm +212.6.139. 4541
|-14, rue 16 novembre
|-Rabat, Kingdom of Morocco

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Blank username/password

2004-01-14 Thread Adil Bikarbass
I've tried this too but with the same result when the username is not
empty it's accepted otherwise it's rejeted,

The problem is with empty usernames/passwords, once again i want to grant
access based on the Called-Station-Id no matter what the username is
(empty username).

Any tips?

Thanks

 On Wed, 14 Jan 2004, Anson Rinesmith wrote:


 Our users file contains the following DEFAULT entry :

 You have
 DEFAUTL Auth-Type := Accept, Called-Station-Id == 1

 DEFAULT Called-Station-ID == 9995551234, Auth-Type := Accept

 Is Closer to what you need in your users file



 -
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


-- 
|-Adil Bikarbass
|-IT Manager
|-MTDS S.A.
|-tel +212.3.767.4861
|-fax +212.3.767.4863
|-gsm +212.6.139. 4541
|-14, rue 16 novembre
|-Rabat, Kingdom of Morocco

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Blank username/password

2004-01-14 Thread Adil Bikarbass
Well i've noticed after reading the debug that the request with the empty
username did not even hit the radius server (nothing on the debug output)

But when using any character on the username i got some input :

- Begining of Input -

rad_recv: Accounting-Request packet from host my_NAS:1026, id=252,
length=101
Acct-Session-Id = B85D
User-Name = t
NAS-IP-Address = my_NAS
NAS-Port = 45
NAS-Port-Type = ISDN
Acct-Status-Type = Start
Acct-Authentic = RADIUS
Called-Station-Id = 1
Calling-Station-Id = 037680045
Service-Type = Framed-User
Framed-Protocol = PPP
Framed-IP-Address = 194.204.200.232
Acct-Delay-Time = 0
modcall: entering group preacct for request 28
rlm_realm: No '/' in User-Name = t, looking up realm NULL
rlm_realm: No such realm NULL
  modcall[preacct]: module ROAM returns noop for request 28
rlm_realm: No '@' in User-Name = t, looking up realm NULL
rlm_realm: No such realm NULL
  modcall[preacct]: module suffix returns noop for request 28
  modcall[preacct]: module files returns noop for request 28
  modcall[preacct]: module preprocess returns noop for request 28
modcall: group preacct returns noop for request 28
modcall: entering group accounting for request 28
rlm_acct_unique: WARNING: Attribute NAS-Port-Id was not found in request,
unique ID MAY be inconsistent
rlm_acct_unique: Hashing ',Client-IP-Address = my_NAS,NAS-IP-Address =
my_NAS,Acct-Session-Id = B85D,User-Name = t'
rlm_acct_unique: Acct-Unique-Session-ID = 2dd4757bbb6a253d.
  modcall[accounting]: module acct_unique returns ok for request 28
radius_xlat:  '/var/log/radius/radacct/my_NAS/detail'
rlm_detail: /var/log/radius/radacct/%{Client-IP-Address}/detail expands to
/var/log/radius/radacct/my_NAS/detail
  modcall[accounting]: module detail returns ok for request 28
  modcall[accounting]: module unix returns ok for request 28
radius_xlat:  '/var/log/radius/radutmp'
radius_xlat:  't'
  modcall[accounting]: module radutmp returns ok for request 28
modcall: group accounting returns ok for request 28
Sending Accounting-Response of id 252 to my_NAS:1026
Finished request 28
Going to the next request
Waking up in 6 seconds...

-- End Debug 

My users file contains the following

DEFAUTL Auth-Type := Accept, Called-Station-Id == 1

Please advise

Adil


On Wed, 14 Jan 2004, Anson Rinesmith wrote:

 With the supplied line in your users file, could you send me your relevant
 output from radiusd -X, might help debug your problem.

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Adil
 Bikarbass
 Sent: Wednesday, January 14, 2004 10:36 AM
 To: [EMAIL PROTECTED]
 Subject: RE: Blank username/password

 I've tried this too but with the same result when the username is not
 empty it's accepted otherwise it's rejeted,

 The problem is with empty usernames/passwords, once again i want to grant
 access based on the Called-Station-Id no matter what the username is
 (empty username).

 Any tips?

 Thanks

  On Wed, 14 Jan 2004, Anson Rinesmith wrote:

 
  Our users file contains the following DEFAULT entry :
 
  You have
  DEFAUTL Auth-Type := Accept, Called-Station-Id == 1
 
  DEFAULT Called-Station-ID == 9995551234, Auth-Type := Accept
 
  Is Closer to what you need in your users file
 
 
 
  -
  List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html
 



-- 
|-Adil Bikarbass
|-IT Manager
|-MTDS S.A.
|-tel +212.3.767.4861
|-fax +212.3.767.4863
|-gsm +212.6.139. 4541
|-14, rue 16 novembre
|-Rabat, Kingdom of Morocco

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Blank username/password

2004-01-14 Thread Adil Bikarbass
I'm running Lucent Postmaster 3 ComOS version 3.9 which is running just
fine

I'll double check the config

Thanks
On Wed, 14 Jan 2004, Dustin Doris wrote:


 On Wed, 14 Jan 2004, Adil Bikarbass wrote:

  Well i've noticed after reading the debug that the request with the empty
  username did not even hit the radius server (nothing on the debug output)
 
  But when using any character on the username i got some input :
 

 I would say that is a problem on your NAS.


  - Begining of Input -
 
  rad_recv: Accounting-Request packet from host my_NAS:1026, id=252,
  length=101
  Acct-Session-Id = B85D
  User-Name = t
  NAS-IP-Address = my_NAS
  NAS-Port = 45
  NAS-Port-Type = ISDN
  Acct-Status-Type = Start
  Acct-Authentic = RADIUS
  Called-Station-Id = 1
  Calling-Station-Id = 037680045
  Service-Type = Framed-User
  Framed-Protocol = PPP
  Framed-IP-Address = 194.204.200.232
  Acct-Delay-Time = 0
  modcall: entering group preacct for request 28
  rlm_realm: No '/' in User-Name = t, looking up realm NULL
  rlm_realm: No such realm NULL
modcall[preacct]: module ROAM returns noop for request 28
  rlm_realm: No '@' in User-Name = t, looking up realm NULL
  rlm_realm: No such realm NULL
modcall[preacct]: module suffix returns noop for request 28
modcall[preacct]: module files returns noop for request 28
modcall[preacct]: module preprocess returns noop for request 28
  modcall: group preacct returns noop for request 28
  modcall: entering group accounting for request 28
  rlm_acct_unique: WARNING: Attribute NAS-Port-Id was not found in request,
  unique ID MAY be inconsistent
  rlm_acct_unique: Hashing ',Client-IP-Address = my_NAS,NAS-IP-Address =
  my_NAS,Acct-Session-Id = B85D,User-Name = t'
  rlm_acct_unique: Acct-Unique-Session-ID = 2dd4757bbb6a253d.
modcall[accounting]: module acct_unique returns ok for request 28
  radius_xlat:  '/var/log/radius/radacct/my_NAS/detail'
  rlm_detail: /var/log/radius/radacct/%{Client-IP-Address}/detail expands to
  /var/log/radius/radacct/my_NAS/detail
modcall[accounting]: module detail returns ok for request 28
modcall[accounting]: module unix returns ok for request 28
  radius_xlat:  '/var/log/radius/radutmp'
  radius_xlat:  't'
modcall[accounting]: module radutmp returns ok for request 28
  modcall: group accounting returns ok for request 28
  Sending Accounting-Response of id 252 to my_NAS:1026
  Finished request 28
  Going to the next request
  Waking up in 6 seconds...
 
  -- End Debug 
 
  My users file contains the following
 
  DEFAUTL Auth-Type := Accept, Called-Station-Id == 1
 
  Please advise
 
  Adil
 
 
  On Wed, 14 Jan 2004, Anson Rinesmith wrote:
 
   With the supplied line in your users file, could you send me your relevant
   output from radiusd -X, might help debug your problem.
  
   -Original Message-
   From: [EMAIL PROTECTED]
   [mailto:[EMAIL PROTECTED] On Behalf Of Adil
   Bikarbass
   Sent: Wednesday, January 14, 2004 10:36 AM
   To: [EMAIL PROTECTED]
   Subject: RE: Blank username/password
  
   I've tried this too but with the same result when the username is not
   empty it's accepted otherwise it's rejeted,
  
   The problem is with empty usernames/passwords, once again i want to grant
   access based on the Called-Station-Id no matter what the username is
   (empty username).
  
   Any tips?
  
   Thanks
  
On Wed, 14 Jan 2004, Anson Rinesmith wrote:
  
   
Our users file contains the following DEFAULT entry :
   
You have
DEFAUTL Auth-Type := Accept, Called-Station-Id == 1
   
DEFAULT Called-Station-ID == 9995551234, Auth-Type := Accept
   
Is Closer to what you need in your users file
   
   
   
-
List info/subscribe/unsubscribe? See
   http://www.freeradius.org/list/users.html
   
  
  
 
  --
  |-Adil Bikarbass
  |-IT Manager
  |-MTDS S.A.
  |-tel +212.3.767.4861
  |-fax +212.3.767.4863
  |-gsm +212.6.139. 4541
  |-14, rue 16 novembre
  |-Rabat, Kingdom of Morocco
 
  -
  List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
 

 -
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


-- 
|-Adil Bikarbass
|-IT Manager
|-MTDS S.A.
|-tel +212.3.767.4861
|-fax +212.3.767.4863
|-gsm +212.6.139. 4541
|-14, rue 16 novembre
|-Rabat, Kingdom of Morocco

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Blank username/password

2004-01-14 Thread Adil Bikarbass
My NAS config seems to be OK

Nothing special in it, i specified the radius server and the shared secret

So i'm wondering what's wrong and why i'm not getting anything in the logs
if there is an empty username

any other ideas?

Adil

On Wed, 14 Jan 2004, Dustin Doris wrote:


 On Wed, 14 Jan 2004, Adil Bikarbass wrote:

  Well i've noticed after reading the debug that the request with the empty
  username did not even hit the radius server (nothing on the debug output)
 
  But when using any character on the username i got some input :
 

 I would say that is a problem on your NAS.


  - Begining of Input -
 
  rad_recv: Accounting-Request packet from host my_NAS:1026, id=252,
  length=101
  Acct-Session-Id = B85D
  User-Name = t
  NAS-IP-Address = my_NAS
  NAS-Port = 45
  NAS-Port-Type = ISDN
  Acct-Status-Type = Start
  Acct-Authentic = RADIUS
  Called-Station-Id = 1
  Calling-Station-Id = 037680045
  Service-Type = Framed-User
  Framed-Protocol = PPP
  Framed-IP-Address = 194.204.200.232
  Acct-Delay-Time = 0
  modcall: entering group preacct for request 28
  rlm_realm: No '/' in User-Name = t, looking up realm NULL
  rlm_realm: No such realm NULL
modcall[preacct]: module ROAM returns noop for request 28
  rlm_realm: No '@' in User-Name = t, looking up realm NULL
  rlm_realm: No such realm NULL
modcall[preacct]: module suffix returns noop for request 28
modcall[preacct]: module files returns noop for request 28
modcall[preacct]: module preprocess returns noop for request 28
  modcall: group preacct returns noop for request 28
  modcall: entering group accounting for request 28
  rlm_acct_unique: WARNING: Attribute NAS-Port-Id was not found in request,
  unique ID MAY be inconsistent
  rlm_acct_unique: Hashing ',Client-IP-Address = my_NAS,NAS-IP-Address =
  my_NAS,Acct-Session-Id = B85D,User-Name = t'
  rlm_acct_unique: Acct-Unique-Session-ID = 2dd4757bbb6a253d.
modcall[accounting]: module acct_unique returns ok for request 28
  radius_xlat:  '/var/log/radius/radacct/my_NAS/detail'
  rlm_detail: /var/log/radius/radacct/%{Client-IP-Address}/detail expands to
  /var/log/radius/radacct/my_NAS/detail
modcall[accounting]: module detail returns ok for request 28
modcall[accounting]: module unix returns ok for request 28
  radius_xlat:  '/var/log/radius/radutmp'
  radius_xlat:  't'
modcall[accounting]: module radutmp returns ok for request 28
  modcall: group accounting returns ok for request 28
  Sending Accounting-Response of id 252 to my_NAS:1026
  Finished request 28
  Going to the next request
  Waking up in 6 seconds...
 
  -- End Debug 
 
  My users file contains the following
 
  DEFAUTL Auth-Type := Accept, Called-Station-Id == 1
 
  Please advise
 
  Adil
 
 
  On Wed, 14 Jan 2004, Anson Rinesmith wrote:
 
   With the supplied line in your users file, could you send me your relevant
   output from radiusd -X, might help debug your problem.
  
   -Original Message-
   From: [EMAIL PROTECTED]
   [mailto:[EMAIL PROTECTED] On Behalf Of Adil
   Bikarbass
   Sent: Wednesday, January 14, 2004 10:36 AM
   To: [EMAIL PROTECTED]
   Subject: RE: Blank username/password
  
   I've tried this too but with the same result when the username is not
   empty it's accepted otherwise it's rejeted,
  
   The problem is with empty usernames/passwords, once again i want to grant
   access based on the Called-Station-Id no matter what the username is
   (empty username).
  
   Any tips?
  
   Thanks
  
On Wed, 14 Jan 2004, Anson Rinesmith wrote:
  
   
Our users file contains the following DEFAULT entry :
   
You have
DEFAUTL Auth-Type := Accept, Called-Station-Id == 1
   
DEFAULT Called-Station-ID == 9995551234, Auth-Type := Accept
   
Is Closer to what you need in your users file
   
   
   
-
List info/subscribe/unsubscribe? See
   http://www.freeradius.org/list/users.html
   
  
  
 
  --
  |-Adil Bikarbass
  |-IT Manager
  |-MTDS S.A.
  |-tel +212.3.767.4861
  |-fax +212.3.767.4863
  |-gsm +212.6.139. 4541
  |-14, rue 16 novembre
  |-Rabat, Kingdom of Morocco
 
  -
  List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
 

 -
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


-- 
|-Adil Bikarbass
|-IT Manager
|-MTDS S.A.
|-tel +212.3.767.4861
|-fax +212.3.767.4863
|-gsm +212.6.139. 4541
|-14, rue 16 novembre
|-Rabat, Kingdom of Morocco

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Blank username/password

2004-01-14 Thread Adil Bikarbass
Here is what i got on my PM3 when trying to connect using an empty
username

 Begin of output --

S3: LCP Open
Received UNKNOWN on port S3 of 14 bytes containing:wire bytes 18
0c 03 00 12 67 6e 33 3c 4d 53 52 41 53 56 35 2e
31 30
Received UNKNOWN on port S3 of 24 bytes containing:wire bytes 28
0c 04 00 1c 67 6e 33 3c 4d 53 52 41 53 2d 31 2d
50 43 41 42 44 45 4c 4d 41 4a 49 44
Received PAP_AUTH_REQ on port S3 of 6 bytes containing:
01 01 00 06 00 00
Sending PAP_AUTH_NAK on port S3 of 14 bytes containing:wire bytes 18
03 01 00 12 0d 49 6e 76 61 6c 69 64 20 4c 6f 67
69 6e
Received LCP_TERMINATE_REQUEST on port S3 of 12 bytes containing:wire
bytes 16
05 05 00 10 67 6e 33 3c 00 3c cd 74 00 00 02 b3

Sending LCP_TERMINATE_ACK on port S3 of 0 bytes containing:wire bytes 4
06 02 00 04

-- end of output 


And here is what i got when i use a username like hi :

 begin of output ---

Received LCP_CONFIGURE_REQUEST on port S2 of 16 bytes containing:wire
bytes 20
01 02 00 14 02 06 00 00 00 00 05 06 14 14 1b 12
07 02 08 02
Sending LCP_CONFIGURE_ACK on port S2 of 16 bytes containing:wire bytes 20
02 02 00 14 02 06 00 00 00 00 05 06 14 14 1b 12
07 02 08 02
S2: LCP Open
Received UNKNOWN on port S2 of 14 bytes containing:wire bytes 18
0c 03 00 12 14 14 1b 12 4d 53 52 41 53 56 35 2e
31 30
Received UNKNOWN on port S2 of 18 bytes containing:wire bytes 22
0c 04 00 16 14 14 1b 12 4d 53 52 41 53 2d 31 2d
55 53 45 52 2d 31
Received PAP_AUTH_REQ on port S2 of 16 bytes containing:
01 00 00 10 04 6a 6f 63 6b 06 66 73 74 6f 6e 65

Sending PAP_AUTH_ACK on port S2 of 16 bytes containing:wire bytes 20
02 00 00 14 0f 4c 6f 67 69 6e 20 53 75 63 63 65
65 64 65 64

--- end of output --

Seems like my PM3 is sending a Not acking for some reason when it gets
empty usernames

Still investigating


Adil


On Wed, 14 Jan 2004, Alan DeKok wrote:

 Adil Bikarbass [EMAIL PROTECTED] wrote:
  So i'm wondering what's wrong and why i'm not getting anything in the logs
  if there is an empty username

   You're getting nothing in the logs because the NAS isn't sending any
 packets to FreeRADIUS.

   Alan DeKok.

 -
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


-- 
|-Adil Bikarbass
|-IT Manager
|-MTDS S.A.
|-tel +212.3.767.4861
|-fax +212.3.767.4863
|-gsm +212.6.139. 4541
|-14, rue 16 novembre
|-Rabat, Kingdom of Morocco

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html