Re: (RADIATOR) Accounting dictionary for netserver card

1999-06-07 Thread O Stockhammer


IgnoreAcctSignature seems to have rectified the accting interference.

Thanks,
Oliver

On Mon, 7 Jun 1999, Mike McCauley wrote:

 Hi Oliver,
 
 On Jun 4,  4:57pm, O Stockhammer wrote:
  Subject: Re: (RADIATOR) Accounting dictionary for netserver card
 
  These are from the logfile:
 
  Fri Jun  4 16:44:12 1999: ERR: Attribute number 0 (vendor ) is not defined
  in your dictionary
 That is quite bizarre, there is no such attribute
 
  Fri Jun  4 16:45:18 1999: ERR: Attribute number 73 (vendor ) is not
  defined in your dictionary
 So is that.
 
  Fri Jun  4 16:45:18 1999: ERR: Attribute number 116 (vendor ) is not
  defined in your dictionary
 That is supposedly Ascend-Appletalk-Route
 
  Fri Jun  4 16:46:24 1999: ERR: Attribute number 240 (vendor ) is not
  defined in your dictionary
 That is supposedly Ascend-Add-Seconds
 
  Thu Jun  3 20:31:37 1999: ERR: Attribute number 144 (vendor ) is not
  defined in your dictionary
 That is Ascend-Assign-IP-Client
 
 That all looks very strange, almost as if the incoming packet is corrupted in
 being incorrectly interpreted. Can you send a hex packet dump of one of these
 requests? You can get het packet dumps at trace level 5.
 
 
 
 
  These are the logs from the SQL log:
 
  928528731  4 Rewrote user name to
  kaligula
 
  928528731  4 Handling with
  Radius::AuthSQL
 
  928528731  4Handling with
  Radius::AuthUNIX
 
  928528731  4Radius::AuthUNIX looks for match with
  kaligula
 
  928528731  4  Radius::AuthUNIX
  ACCEPT:
 
  928528731  4  Access accepted for
  kaligula
 
  928528736  1   Bad authenticator in request from 207.240.140.6
  (207.240.140.6)
 
  This is what I get at trace level 5.  I am logging both to a logfile and
  MySQL and accounting is going to both a detail file and MySQL.  Accounting
  works for my other chassies using Hyperarc cards.
 
 It seems lime auth is working, but accounting is complaining about  "Bad
 authenticator". This is usually an indication that you need IgnoreAcctSignature
 set for that NAS. But in the light of the very strange results above, it may be
 something else. The packet dump will help.
 
 Im sorry you are having this trouble. I hope we get you on the air soon.
 
 Cheers.
 
  Thanks,
  Oliver
 
  On Fri, 4 Jun 1999, Mike McCauley wrote:
 
   Hi Oliver,
  
   can you send us a fragment of your radiator log file at trace level 4,
 showing
   what happens when you receive accounting packets from your Netserver. I
 would
   exepct to see Radiator complaining about missing dictionary entries. That
 will
   help us track down the missing attributes.
  
   Cheers.
  
  
   On Jun 3,  8:49pm, O Stockhammer wrote:
Subject: (RADIATOR) Accounting dictionary for netserver card
   
Hello,
We are using both Netserver and Hyperarc TotalControl Cards.
Radiator is authenticating fine off of both but the Netserver Cards are
missing entries for the dictionary file and therefore no accounting
happens for them.
For some reason I am missing entries in the dictionary file for
the netserver card.  I am using your dictionary.usr file that you
provided.  What entries do I need for accounting to work?
   
I think it has to do with the vendor specific entries like
   
USR-Chassis-Call-Slot = 0
rather than
Chassis-Call-Slot = 0 which is in the dictionary file
   
Thank you,
Oliver Stockhammer
Systems
The Internet Channel
   
   
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
   -- End of excerpt from O Stockhammer
  
  
  
   --
   Mike McCauley   [EMAIL PROTECTED]
   Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
   24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
   Phone +61 3 9598-0985   Fax   +61 3 9598-0955
  
   Radiator: the most portable, flexible and configurable RADIUS server
   anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
   Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
   NT, Rhapsody
  
 
 
  ===
  Archive at http://www.thesite.com.au/~radiator/
  To unsubscribe, email '[EMAIL PROTECTED]' with
  'unsubscribe radiator' in the body of the message.
 -- End of excerpt from O Stockhammer
 
 
 
 -- 
 Mike McCauley   [EMAIL PROTECTED]
 Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
 24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
 Phone +61 3 9598-0985   Fax   +61 3 9598-0955
 
 Radiator: the most portable, flexible and configurable RADIUS server 
 anywhere. SQL, proxy, DBM, files, LDAP, NIS+, pa

Re: (RADIATOR) Accounting dictionary for netserver card

1999-06-06 Thread Mike McCauley

Hi Oliver,

On Jun 4,  4:57pm, O Stockhammer wrote:
 Subject: Re: (RADIATOR) Accounting dictionary for netserver card

 These are from the logfile:

 Fri Jun  4 16:44:12 1999: ERR: Attribute number 0 (vendor ) is not defined
 in your dictionary
That is quite bizarre, there is no such attribute

 Fri Jun  4 16:45:18 1999: ERR: Attribute number 73 (vendor ) is not
 defined in your dictionary
So is that.

 Fri Jun  4 16:45:18 1999: ERR: Attribute number 116 (vendor ) is not
 defined in your dictionary
That is supposedly Ascend-Appletalk-Route

 Fri Jun  4 16:46:24 1999: ERR: Attribute number 240 (vendor ) is not
 defined in your dictionary
That is supposedly Ascend-Add-Seconds

 Thu Jun  3 20:31:37 1999: ERR: Attribute number 144 (vendor ) is not
 defined in your dictionary
That is Ascend-Assign-IP-Client

That all looks very strange, almost as if the incoming packet is corrupted in
being incorrectly interpreted. Can you send a hex packet dump of one of these
requests? You can get het packet dumps at trace level 5.




 These are the logs from the SQL log:

 928528731  4 Rewrote user name to
 kaligula

 928528731  4 Handling with
 Radius::AuthSQL

 928528731  4Handling with
 Radius::AuthUNIX

 928528731  4Radius::AuthUNIX looks for match with
 kaligula

 928528731  4  Radius::AuthUNIX
 ACCEPT:

 928528731  4  Access accepted for
 kaligula

 928528736  1   Bad authenticator in request from 207.240.140.6
 (207.240.140.6)

 This is what I get at trace level 5.  I am logging both to a logfile and
 MySQL and accounting is going to both a detail file and MySQL.  Accounting
 works for my other chassies using Hyperarc cards.

It seems lime auth is working, but accounting is complaining about  "Bad
authenticator". This is usually an indication that you need IgnoreAcctSignature
set for that NAS. But in the light of the very strange results above, it may be
something else. The packet dump will help.

Im sorry you are having this trouble. I hope we get you on the air soon.

Cheers.

 Thanks,
 Oliver

 On Fri, 4 Jun 1999, Mike McCauley wrote:

  Hi Oliver,
 
  can you send us a fragment of your radiator log file at trace level 4,
showing
  what happens when you receive accounting packets from your Netserver. I
would
  exepct to see Radiator complaining about missing dictionary entries. That
will
  help us track down the missing attributes.
 
  Cheers.
 
 
  On Jun 3,  8:49pm, O Stockhammer wrote:
   Subject: (RADIATOR) Accounting dictionary for netserver card
  
   Hello,
 We are using both Netserver and Hyperarc TotalControl Cards.
   Radiator is authenticating fine off of both but the Netserver Cards are
   missing entries for the dictionary file and therefore no accounting
   happens for them.
 For some reason I am missing entries in the dictionary file for
   the netserver card.  I am using your dictionary.usr file that you
   provided.  What entries do I need for accounting to work?
  
   I think it has to do with the vendor specific entries like
  
   USR-Chassis-Call-Slot = 0
   rather than
   Chassis-Call-Slot = 0 which is in the dictionary file
  
   Thank you,
   Oliver Stockhammer
   Systems
   The Internet Channel
  
  
   ===
   Archive at http://www.thesite.com.au/~radiator/
   To unsubscribe, email '[EMAIL PROTECTED]' with
   'unsubscribe radiator' in the body of the message.
  -- End of excerpt from O Stockhammer
 
 
 
  --
  Mike McCauley   [EMAIL PROTECTED]
  Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
  24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
  Phone +61 3 9598-0985   Fax   +61 3 9598-0955
 
  Radiator: the most portable, flexible and configurable RADIUS server
  anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
  Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
  NT, Rhapsody
 


 ===
 Archive at http://www.thesite.com.au/~radiator/
 To unsubscribe, email '[EMAIL PROTECTED]' with
 'unsubscribe radiator' in the body of the message.
-- End of excerpt from O Stockhammer



-- 
Mike McCauley   [EMAIL PROTECTED]
Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985   Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, 
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) Accounting dictionary for netserver card

1999-06-04 Thread O Stockhammer


These are from the logfile:

Fri Jun  4 16:44:12 1999: ERR: Attribute number 0 (vendor ) is not defined
in your dictionary
Fri Jun  4 16:45:18 1999: ERR: Attribute number 73 (vendor ) is not
defined in your dictionary
Fri Jun  4 16:45:18 1999: ERR: Attribute number 116 (vendor ) is not
defined in your dictionary
Fri Jun  4 16:46:24 1999: ERR: Attribute number 240 (vendor ) is not
defined in your dictionary
Thu Jun  3 20:31:37 1999: ERR: Attribute number 144 (vendor ) is not
defined in your dictionary

These are the logs from the SQL log:

928528731  4 Rewrote user name to
kaligula

928528731  4 Handling with
Radius::AuthSQL

928528731  4Handling with
Radius::AuthUNIX

928528731  4Radius::AuthUNIX looks for match with
kaligula

928528731  4  Radius::AuthUNIX
ACCEPT:

928528731  4  Access accepted for 
kaligula

928528736  1   Bad authenticator in request from 207.240.140.6 
(207.240.140.6)

This is what I get at trace level 5.  I am logging both to a logfile and
MySQL and accounting is going to both a detail file and MySQL.  Accounting
works for my other chassies using Hyperarc cards.

Thanks,
Oliver

On Fri, 4 Jun 1999, Mike McCauley wrote:

 Hi Oliver,
 
 can you send us a fragment of your radiator log file at trace level 4, showing
 what happens when you receive accounting packets from your Netserver. I would
 exepct to see Radiator complaining about missing dictionary entries. That will
 help us track down the missing attributes.
 
 Cheers.
 
 
 On Jun 3,  8:49pm, O Stockhammer wrote:
  Subject: (RADIATOR) Accounting dictionary for netserver card
 
  Hello,
  We are using both Netserver and Hyperarc TotalControl Cards.
  Radiator is authenticating fine off of both but the Netserver Cards are
  missing entries for the dictionary file and therefore no accounting
  happens for them.
  For some reason I am missing entries in the dictionary file for
  the netserver card.  I am using your dictionary.usr file that you
  provided.  What entries do I need for accounting to work?
 
  I think it has to do with the vendor specific entries like
 
  USR-Chassis-Call-Slot = 0
  rather than
  Chassis-Call-Slot = 0 which is in the dictionary file
 
  Thank you,
  Oliver Stockhammer
  Systems
  The Internet Channel
 
 
  ===
  Archive at http://www.thesite.com.au/~radiator/
  To unsubscribe, email '[EMAIL PROTECTED]' with
  'unsubscribe radiator' in the body of the message.
 -- End of excerpt from O Stockhammer
 
 
 
 -- 
 Mike McCauley   [EMAIL PROTECTED]
 Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
 24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
 Phone +61 3 9598-0985   Fax   +61 3 9598-0955
 
 Radiator: the most portable, flexible and configurable RADIUS server 
 anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
 Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, 
 NT, Rhapsody
 


===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



(RADIATOR) Accounting dictionary for netserver card

1999-06-03 Thread O Stockhammer


Hello,
We are using both Netserver and Hyperarc TotalControl Cards.
Radiator is authenticating fine off of both but the Netserver Cards are
missing entries for the dictionary file and therefore no accounting 
happens for them.
For some reason I am missing entries in the dictionary file for
the netserver card.  I am using your dictionary.usr file that you
provided.  What entries do I need for accounting to work?

I think it has to do with the vendor specific entries like

USR-Chassis-Call-Slot = 0
rather than 
Chassis-Call-Slot = 0 which is in the dictionary file

Thank you,
Oliver Stockhammer
Systems
The Internet Channel


===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.