Wrong packing of attributes?
radiusd: FreeRADIUS Version 3.0.0, for host i686-pc-linux-gnu, built on
Mar 24 2011 at 15:45:30
I'm on a bit of a limb here, but I think I might have found a bug. Far
from sure though, so please don't kill me if I'm wrong.
Example of authentication reply:
Sending Access-Accept of id 162 to 192.168.106.240 port 1812
WiMAX-R3-IF-Name = KRIS
01 06 4b 52 49 53
WiMAX-PDFID = 1
02 04 00 01
*WiMAX-R3-IF-Descriptor = ...*- *Perfect*
1a 13 60b5 (24757) 8b 0d 00 01 06 4b 52 49 53 02 04 00 01
WiMAX-Packet-Data-Flow-Id = 1
01 04 00 01
WiMAX-Direction = Bi-Directional
04 03 03
WiMAX-Transport-Type = Ethernet
06 03 03
WiMAX-Uplink-QOS-Id = 1
07 03 01
WiMAX-Downlink-QOS-Id = 1
08 03 01
WiMAX-ClassifierID = 1
01 03 01
WiMAX-Classifier-Priority = 1
02 03 01
WiMAX-Classifier-Direction = Bi-Directional
04 03 03
WiMAX-VLAN-ID = 50
09 04 00 32
*WiMAX-Classifier = ...* - *Perfect*
0b 0f 01 03 01 02 03 01 04 03 03 09 04 00 32
WiMAX-QoS-Id = 1
01 03 01
WiMAX-Schedule-Type = Best-Effort
04 03 02
WiMAX-Traffic-Priority = 1
05 03 01
WiMAX-Maximum-Sustained-Traffic-Rate = 200
06 06 00 1e 84 80
WiMAX-Packet-Flow-Descriptor = ...
1a 37 60b5 (24757) 1c 31 00 01 04 00 01 04 03 03 06 03
03 07 03 01 08 03 01
*0b 0f 01 03 01 02 03 01 04 03 03 09 04 00 32 01 *-Our classifier has
been packed in the flow descriptor
03 01 04 03 02 05 03 01 06 06 00 1e 84 80
Calling-Station-Id = 00-10-E7-AA-40-C4
1f 13 30 30 2d 31 30 2d 45 37 2d 41 41 2d 34 30 2d 43
34
EAP-Message = 0x03070004
4f 06 03 07 00 04
Message-Authenticator = 0x
50 12 ...
User-Name = {am=1}34f1c6d378383b0a78a50d1d61c14976
01 28 7b 61 6d 3d 31 7d 33 34 66 31 63 36 64 33 37 38
33 38 33 62 30 61 37 38 61 35 30 64 31 64 36 31
63 31 34 39 37 36
WiMAX-AAA-Session-Id =
0x3635613865393037626230306231653539633164643033626162353832353630
1a 29 60b5 (24757) 04 23 00 36 35 61 38 65 39 30 37 62
62 30 30 62 31 65 35
39 63 31 64 64 30 33 62 61 62 35 38 32 35 36 30
WiMAX-MSK =
0xbb7ceda36bf48308924b3c134c73a576e4f0a290ee7e099070d0b6efe09a98032a0a4f93e626a3a1c803ca964d0288da345587f2c8b64d76c39957e482662b4a
1a 5b 60b5 (24757) 05 55 00 87 2b dc 67 b2 50 8a 3f 02
95 25 c3 d2 c2 52 d2
07 50 3b a1 a9 e0 53 48 3a a2 74 3f 86 5c 22 17
a2 a6 72 64 c9 0e de 93 53 a7 18 a4 92 40 79 6e
54 d3 81 c5 9e c7 3c ac 2c 53 12 c8 b0 63 81 a5
8e ca ed c4 f8 ed 05 29 42 4a 40 98 56 8b 34 8b
b5 2f
Code:2
Id:162
Length:309
Vector:8b8551e57f89b4247daf7b2f0d312efa
Data:1a 13 60b5 (24757) 8b 0d 00 01 06 4b 52 49 53 02
04 00 01
1a 37 60b5 (24757) 1c 31 00 01 04 00 01 04 03 03 06 03
03 07 03 01
08 03 01 0b 0f 01 03 01 02 03 01 04 03 03 09 04
00 32 01 03 01 04 03 02 05 03 01 06 06 00 1e 84
80
1f 13 30 30 2d 31 30 2d 45 37 2d 41 41 2d 34 30 2d 43
34
4f 06 03 07 00 04
50 12 b5 7e 69 23 2f d4 52 d0 5b 8d de e2 83 41 c3 22
01 28 7b 61 6d 3d 31 7d 33 34 66 31 63 36 64 33 37 38
33 38 33 62 30 61 37 38 61 35 30 64 31 64 36 31
63 31 34 39 37 36
1a 29 60b5 (24757) 04 23 00 36 35 61 38 65 39 30 37 62
62 30 30 62
31 65 35 39 63 31 64 64 30 33 62 61 62 35 38 32
35 36 30
1a 5b 60b5 (24757) 05 55 00 87 2b dc 67 b2 50 8a 3f 02
95 25 c3 d2
c2 52 d2 07 50 3b a1 a9 e0 53 48 3a a2 74 3f 86
5c 22 17 a2 a6 72 64 c9 0e de 93 53 a7 18 a4 92
40 79 6e 54 d3 81 c5 9e c7 3c ac 2c 53 12 c8 b0
63 81 a5 8e ca ed c4 f8 ed 05 29 42 4a 40 98 56
8b 34 8b b5 2f
Fri Mar 25 09:15:51 2011 : Info: (6) Finished request.
The problem here though, is that the following attributes:
*WiMAX-QoS-Id* = 1
01 03 01
*WiMAX-Schedule-Type* = Best-Effort
04 03 02
*WiMAX-Traffic-Priority* = 1
05 03 01
*WiMAX-Maximum-Sustained-Traffic-Rate* = 200
Should really be packed into a WiMAX-QoS-Descriptor,as far as I can see?
Cut'n'paste from Dictionary:
ATTRIBUTE WiMAX-QoS-Descriptor29 tlv
ATTRIBUTE WiMAX-QoS-Id29.1byte
ATTRIBUTE WiMAX-Global-Service-Class-Name 29.2string #
6 octets
ATTRIBUTE WiMAX-Service-Class-Name29.3string
ATTRIBUTE WiMAX-Schedule-Type 29.4byte
ATTRIBUTE WiMAX-Traffic-Priority 29.5byte
ATTRIBUTE WiMAX-Maximum-Sustained-Traffic-Rate29.6integer
ATTRIBUTE
Re: Wrong packing of attributes?
Kristoffer Milligan wrote: Am I messing up something here, or could there be a bug in the encoder? Bug in the encoder. Fixed pushed to git. WiMAX is *weird*. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Wrong packing of attributes?
On 03/25/2011 09:59 AM, Alan DeKok wrote: Kristoffer Milligan wrote: Am I messing up something here, or could there be a bug in the encoder? Bug in the encoder. Fixed pushed to git. WiMAX is *weird*. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Wohoo! I managed to spot something! :) Anyway, ~/freeradius-server# git pull Already up-to-date. Did it push to production? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Wrong packing of attributes?
Kristoffer Milligan wrote: Anyway, ~/freeradius-server# git pull Already up-to-date. Did it push to production? It should be there now. Alan deKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Wrong packing of attributes?
If you are working on a VPWS service flow in an Alvarion 4-Motion base
station you will have to do some steps to fix the NAS.
1.Update to the latest version for 2.2
2. Define the R3 attributes in a separate dictionary.
3. Update the main dictionary.wimax to make sure all of the Alvarion
WiMAX- attributes are added to that dictionary
4. Let me know any success as I have yet to get the NAS to properly
accept the service flow.
Let me know if you need any dictionary files for that NAS.
David
From:
freeradius-users-bounces+david.peterson=acc-corp@lists.freeradius.org
[mailto:freeradius-users-bounces+david.peterson=acc-corp.net@lists.freeradiu
s.org] On Behalf Of Kristoffer Milligan
Sent: Friday, March 25, 2011 4:26 AM
To: FreeRadius users mailing list
Subject: Wrong packing of attributes?
radiusd: FreeRADIUS Version 3.0.0, for host i686-pc-linux-gnu, built on Mar
24 2011 at 15:45:30
I'm on a bit of a limb here, but I think I might have found a bug. Far from
sure though, so please don't kill me if I'm wrong.
Example of authentication reply:
Sending Access-Accept of id 162 to 192.168.106.240 port 1812
WiMAX-R3-IF-Name = KRIS
01 06 4b 52 49 53
WiMAX-PDFID = 1
02 04 00 01
WiMAX-R3-IF-Descriptor = ...- Perfect
1a 13 60b5 (24757) 8b 0d 00 01 06 4b 52 49 53 02 04 00 01
WiMAX-Packet-Data-Flow-Id = 1
01 04 00 01
WiMAX-Direction = Bi-Directional
04 03 03
WiMAX-Transport-Type = Ethernet
06 03 03
WiMAX-Uplink-QOS-Id = 1
07 03 01
WiMAX-Downlink-QOS-Id = 1
08 03 01
WiMAX-ClassifierID = 1
01 03 01
WiMAX-Classifier-Priority = 1
02 03 01
WiMAX-Classifier-Direction = Bi-Directional
04 03 03
WiMAX-VLAN-ID = 50
09 04 00 32
WiMAX-Classifier = ... - Perfect
0b 0f 01 03 01 02 03 01 04 03 03 09 04 00 32
WiMAX-QoS-Id = 1
01 03 01
WiMAX-Schedule-Type = Best-Effort
04 03 02
WiMAX-Traffic-Priority = 1
05 03 01
WiMAX-Maximum-Sustained-Traffic-Rate = 200
06 06 00 1e 84 80
WiMAX-Packet-Flow-Descriptor = ...
1a 37 60b5 (24757) 1c 31 00 01 04 00 01 04 03 03 06 03 03 07
03 01 08 03 01
0b 0f 01 03 01 02 03 01 04 03 03 09 04 00 32 01 -Our classifier
has been packed in the flow descriptor
03 01 04 03 02 05 03 01 06 06 00 1e 84 80
Calling-Station-Id = 00-10-E7-AA-40-C4
1f 13 30 30 2d 31 30 2d 45 37 2d 41 41 2d 34 30 2d 43
34
EAP-Message = 0x03070004
4f 06 03 07 00 04
Message-Authenticator = 0x
50 12 ...
User-Name = {am=1}34f1c6d378383b0a78a50d1d61c14976
01 28 7b 61 6d 3d 31 7d 33 34 66 31 63 36 64 33 37 38
33 38 33 62 30 61 37 38 61 35 30 64 31 64 36 31
63 31 34 39 37 36
WiMAX-AAA-Session-Id =
0x3635613865393037626230306231653539633164643033626162353832353630
1a 29 60b5 (24757) 04 23 00 36 35 61 38 65 39 30 37 62 62 30
30 62 31 65 35
39 63 31 64 64 30 33 62 61 62 35 38 32 35 36 30
WiMAX-MSK =
0xbb7ceda36bf48308924b3c134c73a576e4f0a290ee7e099070d0b6efe09a98032a0a4f93e6
26a3a1c803ca964d0288da345587f2c8b64d76c39957e482662b4a
1a 5b 60b5 (24757) 05 55 00 87 2b dc 67 b2 50 8a 3f 02 95 25
c3 d2 c2 52 d2
07 50 3b a1 a9 e0 53 48 3a a2 74 3f 86 5c 22 17
a2 a6 72 64 c9 0e de 93 53 a7 18 a4 92 40 79 6e
54 d3 81 c5 9e c7 3c ac 2c 53 12 c8 b0 63 81 a5
8e ca ed c4 f8 ed 05 29 42 4a 40 98 56 8b 34 8b
b5 2f
Code:2
Id:162
Length:309
Vector:8b8551e57f89b4247daf7b2f0d312efa
Data:1a 13 60b5 (24757) 8b 0d 00 01 06 4b 52 49 53 02 04 00
01
1a 37 60b5 (24757) 1c 31 00 01 04 00 01 04 03 03 06 03 03 07
03 01
08 03 01 0b 0f 01 03 01 02 03 01 04 03 03 09 04
00 32 01 03 01 04 03 02 05 03 01 06 06 00 1e 84
80
1f 13 30 30 2d 31 30 2d 45 37 2d 41 41 2d 34 30 2d 43
34
4f 06 03 07 00 04
50 12 b5 7e 69 23 2f d4 52 d0 5b 8d de e2 83 41 c3 22
01 28 7b 61 6d 3d 31 7d 33 34 66 31 63 36 64 33 37 38
33 38 33 62 30 61 37 38 61 35 30 64 31 64 36 31
63 31 34 39 37 36
1a 29 60b5 (24757) 04 23 00 36 35 61 38 65 39 30 37 62 62 30
30 62
31 65 35 39 63 31 64 64 30 33 62 61 62 35 38 32
35 36 30
1a 5b 60b5 (24757) 05 55 00 87 2b dc 67 b2 50 8a 3f 02 95 25
c3 d2
c2 52 d2 07 50 3b a1 a9 e0 53 48 3a a2 74 3f 86
5c 22 17 a2 a6 72 64 c9 0e de 93 53 a7 18 a4 92
40 79 6e 54 d3 81 c5 9e c7 3c ac 2c 53 12 c8 b0
63 81 a5 8e ca ed c4 f8 ed 05 29 42 4a 40 98 56
8b 34 8b b5 2f
Fri Mar 25 09:15:51 2011 : Info: (6
Re: Wrong packing of attributes?
David Peterson wrote: 1.Update to the latest version for 2.2 It's now pre-3.0 2. Define the R3 attributes in a separate dictionary. Already in share/dictionary.alvarion.wimax.v2_2 3. Update the main dictionary.wimax to make sure all of the Alvarion WiMAX- attributes are added to that dictionary Already in share/dictionary.wimax.alvarion 4. Let me know any success as I have yet to get the NAS to properly accept the service flow. Some fixes went in recently for encoding WiMAX attributes. The new -Xxx feature is very useful for debugging the detailed contents of packets. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Wrong packing of attributes?
Excellent! I just ran a git pull but not sure if I am set up correctly. Here is the output I received. From git://git.freeradius.org/freeradius-server 03f1be4..92caaa4 master - origin/master 2ae298a..14f534a v2.1.x - origin/v2.1.x Should I make some changes to my git setup? David -Original Message- From: Alan DeKok [mailto:al...@deployingradius.com] Sent: Friday, March 25, 2011 8:44 AM To: David Peterson-WirelessConnections; FreeRadius users mailing list Subject: Re: Wrong packing of attributes? David Peterson wrote: 1.Update to the latest version for 2.2 It's now pre-3.0 2. Define the R3 attributes in a separate dictionary. Already in share/dictionary.alvarion.wimax.v2_2 3. Update the main dictionary.wimax to make sure all of the Alvarion WiMAX- attributes are added to that dictionary Already in share/dictionary.wimax.alvarion 4. Let me know any success as I have yet to get the NAS to properly accept the service flow. Some fixes went in recently for encoding WiMAX attributes. The new -Xxx feature is very useful for debugging the detailed contents of packets. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Wrong packing of attributes?
You want the master branch mate, git clone git://git.freeradius.org/freeradius-server.git http://git.freeradius.org/ On 03/25/2011 02:06 PM, David Peterson wrote: Excellent! I just ran a git pull but not sure if I am set up correctly. Here is the output I received. From git://git.freeradius.org/freeradius-server 03f1be4..92caaa4 master - origin/master 2ae298a..14f534a v2.1.x - origin/v2.1.x Should I make some changes to my git setup? David -Original Message- From: Alan DeKok [mailto:al...@deployingradius.com] Sent: Friday, March 25, 2011 8:44 AM To: David Peterson-WirelessConnections; FreeRadius users mailing list Subject: Re: Wrong packing of attributes? David Peterson wrote: 1.Update to the latest version for 2.2 It's now pre-3.0 2. Define the R3 attributes in a separate dictionary. Already in share/dictionary.alvarion.wimax.v2_2 3. Update the main dictionary.wimax to make sure all of the Alvarion WiMAX- attributes are added to that dictionary Already in share/dictionary.wimax.alvarion 4. Let me know any success as I have yet to get the NAS to properly accept the service flow. Some fixes went in recently for encoding WiMAX attributes. The new -Xxx feature is very useful for debugging the detailed contents of packets. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Wrong packing of attributes?
Thanks! OK I am now getting this on compile... I must have screwed something up: make[4]: Entering directory `/usr/src/freeradius-server/freeradius-server/src/ma in' /usr/src/freeradius-server/freeradius-server/libtool --mode=compile gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wshadow -Wpointe r-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-p rototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef - I/usr/src/freeradius-server/freeradius-server/src -DHOSTINFO=\i686-pc-linux-gnu \ -DRADIUSD_VERSION=\3.0.0\ -DOPENSSL_NO_KRB5 -c acct.c mkdir .libs gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wsha dow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-dec ls -Wundef -I/usr/src/freeradius-server/freeradius-server/src -DHOSTINFO=\i686- pc-linux-gnu\ -DRADIUSD_VERSION=\3.0.0\ -DOPENSSL_NO_KRB5 -c acct.c -fPIC -D PIC -o .libs/acct.o gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wsha dow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-dec ls -Wundef -I/usr/src/freeradius-server/freeradius-server/src -DHOSTINFO=\i686- pc-linux-gnu\ -DRADIUSD_VERSION=\3.0.0\ -DOPENSSL_NO_KRB5 -c acct.c -o acct.o /dev/null 21 /usr/src/freeradius-server/freeradius-server/libtool --mode=compile gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wshadow -Wpointe r-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-p rototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef - I/usr/src/freeradius-server/freeradius-server/src -DHOSTINFO=\i686-pc-linux-gnu \ -DRADIUSD_VERSION=\3.0.0\ -DOPENSSL_NO_KRB5 -c auth.c gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wsha dow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-dec ls -Wundef -I/usr/src/freeradius-server/freeradius-server/src -DHOSTINFO=\i686- pc-linux-gnu\ -DRADIUSD_VERSION=\3.0.0\ -DOPENSSL_NO_KRB5 -c auth.c -fPIC -D PIC -o .libs/auth.o auth.c: In function 'auth_name': auth.c:51: error: too few arguments to function 'pairfind' make[4]: *** [auth.lo] Error 1 -Original Message- From: Kristoffer Milligan [mailto:kristof...@nextnet.no] Sent: Friday, March 25, 2011 9:42 AM To: David Peterson-WirelessConnections; FreeRadius users mailing list Subject: Re: Wrong packing of attributes? You want the master branch mate, git clone git://git.freeradius.org/freeradius-server.git http://git.freeradius.org/ On 03/25/2011 02:06 PM, David Peterson wrote: Excellent! I just ran a git pull but not sure if I am set up correctly. Here is the output I received. From git://git.freeradius.org/freeradius-server 03f1be4..92caaa4 master - origin/master 2ae298a..14f534a v2.1.x - origin/v2.1.x Should I make some changes to my git setup? David -Original Message- From: Alan DeKok [mailto:al...@deployingradius.com] Sent: Friday, March 25, 2011 8:44 AM To: David Peterson-WirelessConnections; FreeRadius users mailing list Subject: Re: Wrong packing of attributes? David Peterson wrote: 1.Update to the latest version for 2.2 It's now pre-3.0 2. Define the R3 attributes in a separate dictionary. Already in share/dictionary.alvarion.wimax.v2_2 3. Update the main dictionary.wimax to make sure all of the Alvarion WiMAX- attributes are added to that dictionary Already in share/dictionary.wimax.alvarion 4. Let me know any success as I have yet to get the NAS to properly accept the service flow. Some fixes went in recently for encoding WiMAX attributes. The new -Xxx feature is very useful for debugging the detailed contents of packets. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Wrong packing of attributes?
David Peterson wrote: I just ran a git pull but not sure if I am set up correctly. Here is the output I received. You should be able to do git pull origin master:master Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Wrong packing of attributes?
David Peterson wrote: OK I am now getting this on compile... I must have screwed something up: git pull again. Dang API differences between 2.1 and 3.0. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Wrong packing of attributes?
That fixed it. Thanks! David -Original Message- From: Alan DeKok [mailto:al...@deployingradius.com] Sent: Friday, March 25, 2011 10:32 AM To: David Peterson-WirelessConnections; FreeRadius users mailing list Subject: Re: Wrong packing of attributes? David Peterson wrote: OK I am now getting this on compile... I must have screwed something up: git pull again. Dang API differences between 2.1 and 3.0. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
