(RADIATOR) Using UseExtendedId
Title: Message Hey Guys, Having a few issues after implementing UseExtendedId in ournetwork, much like your documentation suggests, it all works fine except when we have a customer that doesn't support it within their RADIUS system. Do you know whether UseExtendedId will work as a row returned within SQLRADIUS? 0 or blank for dont use, 1 for use it? ThanksMartin Martin Edge Senior Applications Engineer [EMAIL PROTECTED] KBS Internet Pty Ltd Phone: 1300 302 134 Phone: +61 3 9868 Fax: +61 3 9868 9900 www.kbs.net.au Level 9 432 St Kilda RdMelbourne VIC 3004NOTICE - This message contains information intended only for the use of the addressee named above. It may also be confidential and/or privileged. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify.
Re: (RADIATOR) Using UseExtendedId
Hello Martin - I am curious to know what the problem is with these customers? What exactly do they not support? I have copied Mike on this mail so he can answer the per-host use of UseExtendedId. regards Hugh On Thursday, Jun 19, 2003, at 16:23 Australia/Melbourne, Martin Edge wrote: Hey Guys, Having a few issues after implementing UseExtendedId in our network, much like your documentation suggests, it all works fine except when we have a customer that doesn't support it within their RADIUS system. Do you know whether UseExtendedId will work as a row returned within SQLRADIUS? 0 or blank for dont use, 1 for use it? Thanks Martin Martin Edge Senior Applications Engineer [EMAIL PROTECTED] KBS Internet Pty Ltd Phone: 1300 302 134 Phone: +61 3 9868 Fax: +61 3 9868 9900 www.kbs.net.au image.tiff> NOTICE - This message contains information intended only for the use of the addressee named above. It may also be confidential and/or privileged. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify. NB: have you included a copy of your configuration file (no secrets), together with a trace 4 debug showing what is happening? -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. - Nets: internetwork inventory and management - graphical, extensible, flexible with hardware, software, platform and database independence.
Re: (RADIATOR) Using UseExtendedId
Hello Martin, On Thu, 19 Jun 2003 04:38 pm, Hugh Irvine wrote: Hello Martin - I am curious to know what the problem is with these customers? What exactly do they not support? I have copied Mike on this mail so he can answer the per-host use of UseExtendedId. Yes, that should work OK as you described it. Cheers. regards Hugh On Thursday, Jun 19, 2003, at 16:23 Australia/Melbourne, Martin Edge wrote: Hey Guys, Having a few issues after implementing UseExtendedId in our network, much like your documentation suggests, it all works fine except when we have a customer that doesn't support it within their RADIUS system. Do you know whether UseExtendedId will work as a row returned within SQLRADIUS? 0 or blank for dont use, 1 for use it? Thanks Martin Martin Edge Senior Applications Engineer [EMAIL PROTECTED] KBS Internet Pty Ltd Phone: 1300 302 134 Phone: +61 3 9868 Fax: +61 3 9868 9900 www.kbs.net.au image.tiff NOTICE - This message contains information intended only for the use of the addressee named above. It may also be confidential and/or privileged. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify. NB: have you included a copy of your configuration file (no secrets), together with a trace 4 debug showing what is happening? -- Mike McCauley [EMAIL PROTECTED] Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW 24 Bateman St Hampton, VIC 3188 Australia http://www.open.com.au Phone +61 3 9598-0985 Fax +61 3 9598-0955 Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, TTLS, PEAP etc on Unix, Windows, MacOS etc. === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
RE: (RADIATOR) Using UseExtendedId
Hi Hugh, It appears they are not responding with the Proxy-State attribute, therefore our RADIUS system is coming up unknown reply to packet. For instance: Thu Jun 19 16:47:47 2003: WARNING: Unknown reply received in AuthRADIUS for request 239 from 203.30.19.248:1846 Thu Jun 19 16:47:47 2003: WARNING: Unknown reply received in AuthRADIUS for request 240 from 203.30.19.248:1846 Thu Jun 19 16:47:50 2003: WARNING: Unknown reply received in AuthRADIUS for request 241 from 203.30.19.248:1846 Thu Jun 19 16:47:50 2003: WARNING: Unknown reply received in AuthRADIUS for request 241 from 202.71.168.62:1846 Thu Jun 19 16:47:53 2003: WARNING: Unknown reply received in AuthRADIUS for request 242 from 202.71.168.62:1846 Thu Jun 19 16:47:55 2003: WARNING: Unknown reply received in AuthRADIUS for request 242 from 203.30.19.248:1846 Thu Jun 19 16:47:55 2003: WARNING: Unknown reply received in AuthRADIUS for request 243 from 202.71.168.62:1846 Thu Jun 19 16:47:58 2003: WARNING: Unknown reply received in AuthRADIUS for request 243 from 203.30.19.248:1846 Thu Jun 19 16:48:00 2003: WARNING: Unknown reply received in AuthRADIUS for request 244 from 203.30.19.248:1846 *** Sending to 202.4.30.2 port 1646 Code: Accounting-Request Identifier: 74 Authentic: Attributes: Acct-Session-Id = 2F85 Framed-Protocol = PPP Framed-IP-Address = 203.194.16.52 Ascend-Connect-Progress = prLanSessionUp Acct-Authentic = RADIUS Acct-Status-Type = Start Calling-Station-Id = XXX Called-Station-Id = XXX NAS-Port-Type = Async NAS-Port = 7393 Service-Type = Framed-User NAS-IP-Address = 203.194.30.8 Ascend-Session-Svr-Key = XXX NAS-Identifier = ACC08-XX Acct-Delay-Time = 0 User-Name = X Timestamp = 1056005873 Proxy-State = OSC-Extended-Id=330 Thu Jun 19 16:57:53 2003: DEBUG: Accounting accepted Thu Jun 19 16:57:53 2003: DEBUG: Packet dump: *** Received from 202.4.30.2 port 1646 Code: Accounting-Response Identifier: 74 Authentic: 181156NP130;{`21226+{U1331406 Attributes: Thu Jun 19 16:57:53 2003: WARNING: Unknown reply received in AuthRADIUS for request 74 from 202.4.30.2:1646 Thanks Martin Martin Edge Senior Applications Engineer [EMAIL PROTECTED] KBS Internet Pty Ltd Phone: 1300 302 134 Phone: +61 3 9868 Fax: +61 3 9868 9900 www.kbs.net.au Level 9 432 St Kilda Rd Melbourne VIC 3004 NOTICE - This message contains information intended only for the use of the addressee named above. It may also be confidential and/or privileged. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify. -Original Message- From: Hugh Irvine [mailto:[EMAIL PROTECTED] Sent: Thursday, 19 June 2003 4:38 PM To: Martin Edge; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: (RADIATOR) Using UseExtendedId Hello Martin - I am curious to know what the problem is with these customers? What exactly do they not support? I have copied Mike on this mail so he can answer the per-host use of UseExtendedId. regards Hugh On Thursday, Jun 19, 2003, at 16:23 Australia/Melbourne, Martin Edge wrote: Hey Guys, Having a few issues after implementing UseExtendedId in our network, much like your documentation suggests, it all works fine except when we have a customer that doesn't support it within their RADIUS system. Do you know whether UseExtendedId will work as a row returned within SQLRADIUS? 0 or blank for dont use, 1 for use it? Thanks Martin Martin Edge Senior Applications Engineer [EMAIL PROTECTED] KBS Internet Pty Ltd Phone: 1300 302 134 Phone: +61 3 9868 Fax: +61 3 9868 9900 www.kbs.net.au image.tiff NOTICE - This message contains information intended only for the use of the addressee named above. It may also be confidential and/or privileged. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify. NB: have you included a copy of your configuration file (no secrets), together with a trace 4 debug showing what is happening? -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. - Nets: internetwork inventory and management - graphical, extensible, flexible with hardware, software, platform and database independence. === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
RE: (RADIATOR) Using UseExtendedId
Thanks, I'll give it a bash.. Martin -Original Message- From: Mike McCauley [mailto:[EMAIL PROTECTED] Sent: Thursday, 19 June 2003 4:57 PM To: Hugh Irvine; Martin Edge Cc: [EMAIL PROTECTED] Subject: Re: (RADIATOR) Using UseExtendedId Hello Martin, On Thu, 19 Jun 2003 04:38 pm, Hugh Irvine wrote: Hello Martin - I am curious to know what the problem is with these customers? What exactly do they not support? I have copied Mike on this mail so he can answer the per-host use of UseExtendedId. Yes, that should work OK as you described it. Cheers. regards Hugh On Thursday, Jun 19, 2003, at 16:23 Australia/Melbourne, Martin Edge wrote: Hey Guys, Having a few issues after implementing UseExtendedId in our network, much like your documentation suggests, it all works fine except when we have a customer that doesn't support it within their RADIUS system. Do you know whether UseExtendedId will work as a row returned within SQLRADIUS? 0 or blank for dont use, 1 for use it? Thanks Martin Martin Edge Senior Applications Engineer [EMAIL PROTECTED] KBS Internet Pty Ltd Phone: 1300 302 134 Phone: +61 3 9868 Fax: +61 3 9868 9900 www.kbs.net.au image.tiff NOTICE - This message contains information intended only for the use of the addressee named above. It may also be confidential and/or privileged. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify. NB: have you included a copy of your configuration file (no secrets), together with a trace 4 debug showing what is happening? -- Mike McCauley [EMAIL PROTECTED] Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW 24 Bateman St Hampton, VIC 3188 Australia http://www.open.com.au Phone +61 3 9598-0985 Fax +61 3 9598-0955 Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, TTLS, PEAP etc on Unix, Windows, MacOS etc. === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
Re: (RADIATOR) Using UseExtendedId
Hello Martin - Not returning a Proxy-State attribute is quite broken behaviour. regards Hugh On Thursday, Jun 19, 2003, at 17:00 Australia/Melbourne, Martin Edge wrote: Hi Hugh, It appears they are not responding with the Proxy-State attribute, therefore our RADIUS system is coming up unknown reply to packet. For instance: Thu Jun 19 16:47:47 2003: WARNING: Unknown reply received in AuthRADIUS for request 239 from 203.30.19.248:1846 Thu Jun 19 16:47:47 2003: WARNING: Unknown reply received in AuthRADIUS for request 240 from 203.30.19.248:1846 Thu Jun 19 16:47:50 2003: WARNING: Unknown reply received in AuthRADIUS for request 241 from 203.30.19.248:1846 Thu Jun 19 16:47:50 2003: WARNING: Unknown reply received in AuthRADIUS for request 241 from 202.71.168.62:1846 Thu Jun 19 16:47:53 2003: WARNING: Unknown reply received in AuthRADIUS for request 242 from 202.71.168.62:1846 Thu Jun 19 16:47:55 2003: WARNING: Unknown reply received in AuthRADIUS for request 242 from 203.30.19.248:1846 Thu Jun 19 16:47:55 2003: WARNING: Unknown reply received in AuthRADIUS for request 243 from 202.71.168.62:1846 Thu Jun 19 16:47:58 2003: WARNING: Unknown reply received in AuthRADIUS for request 243 from 203.30.19.248:1846 Thu Jun 19 16:48:00 2003: WARNING: Unknown reply received in AuthRADIUS for request 244 from 203.30.19.248:1846 *** Sending to 202.4.30.2 port 1646 Code: Accounting-Request Identifier: 74 Authentic: Attributes: Acct-Session-Id = 2F85 Framed-Protocol = PPP Framed-IP-Address = 203.194.16.52 Ascend-Connect-Progress = prLanSessionUp Acct-Authentic = RADIUS Acct-Status-Type = Start Calling-Station-Id = XXX Called-Station-Id = XXX NAS-Port-Type = Async NAS-Port = 7393 Service-Type = Framed-User NAS-IP-Address = 203.194.30.8 Ascend-Session-Svr-Key = XXX NAS-Identifier = ACC08-XX Acct-Delay-Time = 0 User-Name = X Timestamp = 1056005873 Proxy-State = OSC-Extended-Id=330 Thu Jun 19 16:57:53 2003: DEBUG: Accounting accepted Thu Jun 19 16:57:53 2003: DEBUG: Packet dump: *** Received from 202.4.30.2 port 1646 Code: Accounting-Response Identifier: 74 Authentic: 181156NP130;{`21226+{U1331406 Attributes: Thu Jun 19 16:57:53 2003: WARNING: Unknown reply received in AuthRADIUS for request 74 from 202.4.30.2:1646 Thanks Martin Martin Edge Senior Applications Engineer [EMAIL PROTECTED] KBS Internet Pty Ltd Phone: 1300 302 134 Phone: +61 3 9868 Fax: +61 3 9868 9900 www.kbs.net.au Level 9 432 St Kilda Rd Melbourne VIC 3004 NOTICE - This message contains information intended only for the use of the addressee named above. It may also be confidential and/or privileged. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify. -Original Message- From: Hugh Irvine [mailto:[EMAIL PROTECTED] Sent: Thursday, 19 June 2003 4:38 PM To: Martin Edge; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: (RADIATOR) Using UseExtendedId Hello Martin - I am curious to know what the problem is with these customers? What exactly do they not support? I have copied Mike on this mail so he can answer the per-host use of UseExtendedId. regards Hugh On Thursday, Jun 19, 2003, at 16:23 Australia/Melbourne, Martin Edge wrote: Hey Guys, Having a few issues after implementing UseExtendedId in our network, much like your documentation suggests, it all works fine except when we have a customer that doesn't support it within their RADIUS system. Do you know whether UseExtendedId will work as a row returned within SQLRADIUS? 0 or blank for dont use, 1 for use it? Thanks Martin Martin Edge Senior Applications Engineer [EMAIL PROTECTED] KBS Internet Pty Ltd Phone: 1300 302 134 Phone: +61 3 9868 Fax: +61 3 9868 9900 www.kbs.net.au image.tiff NOTICE - This message contains information intended only for the use of the addressee named above. It may also be confidential and/or privileged. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify. NB: have you included a copy of your configuration file (no secrets), together with a trace 4 debug showing what is happening? -- Radiator: the most portable, flexible and configurable RADIUS server anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. - Nets: internetwork inventory and management - graphical, extensible, flexible with hardware, software, platform and database independence. NB: have you included a copy of your configuration file (no secrets), together
RE: (RADIATOR) Using UseExtendedId
Hi guys, Looks like it doesn't work as expected. Not seeing any Proxy-State values being implemented when relying on SQL RADIUS, have confirmed my database is coming up with a '1' to say use it, as soon as I readd 'UseExtendedIds' to the AuthBy the stuff below sits, it works fine again. Within SQLRADIUS : HostColumnDef 0, Host HostColumnDef 1, Secret HostColumnDef 2, AuthPort HostColumnDef 3, AcctPort HostColumnDef 4, Retries HostColumnDef 5, RetryTimeout HostColumnDef 6, FailureBackoffTime HostColumnDef 7, FailurePolicy HostColumnDef 8, AddToReply HostColumnDef 9, StripFromReply HostColumnDef 10, AllowInReply HostColumnDef 11, AddToReplyIfNotExist HostColumnDef 12, DefaultReply HostColumnDef 13, AddToRequest HostColumnDef 14, StripFromRequset HostColumnDef 15, AddToRequestIfNotExist HostColumnDef 16, UseOldAscendPasswords HostColumnDef 17, ServerHasBrokenPortNumbers HostColumnDef 18, ServerHasBrokenAddresses HostColumnDef 19, IgnoreReplySignature HostColumnDef 20, UseExtendedIds Is this because I am still using depreciated fields, UseOldAs.. And ServerHasBr.. ? Thanks Martin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martin Edge Sent: Thursday, 19 June 2003 5:02 PM To: 'Mike McCauley'; 'Hugh Irvine' Cc: [EMAIL PROTECTED] Subject: RE: (RADIATOR) Using UseExtendedId Thanks, I'll give it a bash.. Martin -Original Message- From: Mike McCauley [mailto:[EMAIL PROTECTED] Sent: Thursday, 19 June 2003 4:57 PM To: Hugh Irvine; Martin Edge Cc: [EMAIL PROTECTED] Subject: Re: (RADIATOR) Using UseExtendedId Hello Martin, On Thu, 19 Jun 2003 04:38 pm, Hugh Irvine wrote: Hello Martin - I am curious to know what the problem is with these customers? What exactly do they not support? I have copied Mike on this mail so he can answer the per-host use of UseExtendedId. Yes, that should work OK as you described it. Cheers. regards Hugh On Thursday, Jun 19, 2003, at 16:23 Australia/Melbourne, Martin Edge wrote: Hey Guys, Having a few issues after implementing UseExtendedId in our network, much like your documentation suggests, it all works fine except when we have a customer that doesn't support it within their RADIUS system. Do you know whether UseExtendedId will work as a row returned within SQLRADIUS? 0 or blank for dont use, 1 for use it? Thanks Martin Martin Edge Senior Applications Engineer [EMAIL PROTECTED] KBS Internet Pty Ltd Phone: 1300 302 134 Phone: +61 3 9868 Fax: +61 3 9868 9900 www.kbs.net.au image.tiff NOTICE - This message contains information intended only for the use of the addressee named above. It may also be confidential and/or privileged. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify. NB: have you included a copy of your configuration file (no secrets), together with a trace 4 debug showing what is happening? -- Mike McCauley [EMAIL PROTECTED] Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW 24 Bateman St Hampton, VIC 3188 Australia http://www.open.com.au Phone +61 3 9598-0985 Fax +61 3 9598-0955 Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, TTLS, PEAP etc on Unix, Windows, MacOS etc. === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message. === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
RE: (RADIATOR) Using UseExtendedId
I'll see I can find out which products these customers are using.. (pretty sure it's not Radiator) Thanks Martin Martin Edge Senior Applications Engineer [EMAIL PROTECTED] KBS Internet Pty Ltd Phone: 1300 302 134 Phone: +61 3 9868 Fax: +61 3 9868 9900 www.kbs.net.au Level 9 432 St Kilda Rd Melbourne VIC 3004 NOTICE - This message contains information intended only for the use of the addressee named above. It may also be confidential and/or privileged. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hugh Irvine Sent: Thursday, 19 June 2003 5:12 PM To: Martin Edge Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: (RADIATOR) Using UseExtendedId Hello Martin - Not returning a Proxy-State attribute is quite broken behaviour. regards Hugh On Thursday, Jun 19, 2003, at 17:00 Australia/Melbourne, Martin Edge wrote: Hi Hugh, It appears they are not responding with the Proxy-State attribute, therefore our RADIUS system is coming up unknown reply to packet. For instance: Thu Jun 19 16:47:47 2003: WARNING: Unknown reply received in AuthRADIUS for request 239 from 203.30.19.248:1846 Thu Jun 19 16:47:47 2003: WARNING: Unknown reply received in AuthRADIUS for request 240 from 203.30.19.248:1846 Thu Jun 19 16:47:50 2003: WARNING: Unknown reply received in AuthRADIUS for request 241 from 203.30.19.248:1846 Thu Jun 19 16:47:50 2003: WARNING: Unknown reply received in AuthRADIUS for request 241 from 202.71.168.62:1846 Thu Jun 19 16:47:53 2003: WARNING: Unknown reply received in AuthRADIUS for request 242 from 202.71.168.62:1846 Thu Jun 19 16:47:55 2003: WARNING: Unknown reply received in AuthRADIUS for request 242 from 203.30.19.248:1846 Thu Jun 19 16:47:55 2003: WARNING: Unknown reply received in AuthRADIUS for request 243 from 202.71.168.62:1846 Thu Jun 19 16:47:58 2003: WARNING: Unknown reply received in AuthRADIUS for request 243 from 203.30.19.248:1846 Thu Jun 19 16:48:00 2003: WARNING: Unknown reply received in AuthRADIUS for request 244 from 203.30.19.248:1846 *** Sending to 202.4.30.2 port 1646 Code: Accounting-Request Identifier: 74 Authentic: Attributes: Acct-Session-Id = 2F85 Framed-Protocol = PPP Framed-IP-Address = 203.194.16.52 Ascend-Connect-Progress = prLanSessionUp Acct-Authentic = RADIUS Acct-Status-Type = Start Calling-Station-Id = XXX Called-Station-Id = XXX NAS-Port-Type = Async NAS-Port = 7393 Service-Type = Framed-User NAS-IP-Address = 203.194.30.8 Ascend-Session-Svr-Key = XXX NAS-Identifier = ACC08-XX Acct-Delay-Time = 0 User-Name = X Timestamp = 1056005873 Proxy-State = OSC-Extended-Id=330 Thu Jun 19 16:57:53 2003: DEBUG: Accounting accepted Thu Jun 19 16:57:53 2003: DEBUG: Packet dump: *** Received from 202.4.30.2 port 1646 Code: Accounting-Response Identifier: 74 Authentic: 181156NP130;{`21226+{U1331406 Attributes: Thu Jun 19 16:57:53 2003: WARNING: Unknown reply received in AuthRADIUS for request 74 from 202.4.30.2:1646 Thanks Martin Martin Edge Senior Applications Engineer [EMAIL PROTECTED] KBS Internet Pty Ltd Phone: 1300 302 134 Phone: +61 3 9868 Fax: +61 3 9868 9900 www.kbs.net.au Level 9 432 St Kilda Rd Melbourne VIC 3004 NOTICE - This message contains information intended only for the use of the addressee named above. It may also be confidential and/or privileged. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify. -Original Message- From: Hugh Irvine [mailto:[EMAIL PROTECTED] Sent: Thursday, 19 June 2003 4:38 PM To: Martin Edge; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: (RADIATOR) Using UseExtendedId Hello Martin - I am curious to know what the problem is with these customers? What exactly do they not support? I have copied Mike on this mail so he can answer the per-host use of UseExtendedId. regards Hugh On Thursday, Jun 19, 2003, at 16:23 Australia/Melbourne, Martin Edge wrote: Hey Guys, Having a few issues after implementing UseExtendedId in our network, much like your documentation suggests, it all works fine except when we have a customer that doesn't support it within their RADIUS system. Do you know whether UseExtendedId will work as a row returned
RE: (RADIATOR) Using UseExtendedId
Have 1 instance of MacRadius, one of ICRadius 0.18, one X-Radius 1.2.1 which I've never heard of. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martin Edge Sent: Thursday, 19 June 2003 5:31 PM To: 'Hugh Irvine' Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: RE: (RADIATOR) Using UseExtendedId I'll see I can find out which products these customers are using.. (pretty sure it's not Radiator) Thanks Martin Martin Edge Senior Applications Engineer [EMAIL PROTECTED] KBS Internet Pty Ltd Phone: 1300 302 134 Phone: +61 3 9868 Fax: +61 3 9868 9900 www.kbs.net.au Level 9 432 St Kilda Rd Melbourne VIC 3004 NOTICE - This message contains information intended only for the use of the addressee named above. It may also be confidential and/or privileged. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hugh Irvine Sent: Thursday, 19 June 2003 5:12 PM To: Martin Edge Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: (RADIATOR) Using UseExtendedId Hello Martin - Not returning a Proxy-State attribute is quite broken behaviour. regards Hugh On Thursday, Jun 19, 2003, at 17:00 Australia/Melbourne, Martin Edge wrote: Hi Hugh, It appears they are not responding with the Proxy-State attribute, therefore our RADIUS system is coming up unknown reply to packet. For instance: Thu Jun 19 16:47:47 2003: WARNING: Unknown reply received in AuthRADIUS for request 239 from 203.30.19.248:1846 Thu Jun 19 16:47:47 2003: WARNING: Unknown reply received in AuthRADIUS for request 240 from 203.30.19.248:1846 Thu Jun 19 16:47:50 2003: WARNING: Unknown reply received in AuthRADIUS for request 241 from 203.30.19.248:1846 Thu Jun 19 16:47:50 2003: WARNING: Unknown reply received in AuthRADIUS for request 241 from 202.71.168.62:1846 Thu Jun 19 16:47:53 2003: WARNING: Unknown reply received in AuthRADIUS for request 242 from 202.71.168.62:1846 Thu Jun 19 16:47:55 2003: WARNING: Unknown reply received in AuthRADIUS for request 242 from 203.30.19.248:1846 Thu Jun 19 16:47:55 2003: WARNING: Unknown reply received in AuthRADIUS for request 243 from 202.71.168.62:1846 Thu Jun 19 16:47:58 2003: WARNING: Unknown reply received in AuthRADIUS for request 243 from 203.30.19.248:1846 Thu Jun 19 16:48:00 2003: WARNING: Unknown reply received in AuthRADIUS for request 244 from 203.30.19.248:1846 *** Sending to 202.4.30.2 port 1646 Code: Accounting-Request Identifier: 74 Authentic: Attributes: Acct-Session-Id = 2F85 Framed-Protocol = PPP Framed-IP-Address = 203.194.16.52 Ascend-Connect-Progress = prLanSessionUp Acct-Authentic = RADIUS Acct-Status-Type = Start Calling-Station-Id = XXX Called-Station-Id = XXX NAS-Port-Type = Async NAS-Port = 7393 Service-Type = Framed-User NAS-IP-Address = 203.194.30.8 Ascend-Session-Svr-Key = XXX NAS-Identifier = ACC08-XX Acct-Delay-Time = 0 User-Name = X Timestamp = 1056005873 Proxy-State = OSC-Extended-Id=330 Thu Jun 19 16:57:53 2003: DEBUG: Accounting accepted Thu Jun 19 16:57:53 2003: DEBUG: Packet dump: *** Received from 202.4.30.2 port 1646 Code: Accounting-Response Identifier: 74 Authentic: 181156NP130;{`21226+{U1331406 Attributes: Thu Jun 19 16:57:53 2003: WARNING: Unknown reply received in AuthRADIUS for request 74 from 202.4.30.2:1646 Thanks Martin Martin Edge Senior Applications Engineer [EMAIL PROTECTED] KBS Internet Pty Ltd Phone: 1300 302 134 Phone: +61 3 9868 Fax: +61 3 9868 9900 www.kbs.net.au Level 9 432 St Kilda Rd Melbourne VIC 3004 NOTICE - This message contains information intended only for the use of the addressee named above. It may also be confidential and/or privileged. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify. -Original Message- From: Hugh Irvine [mailto:[EMAIL PROTECTED] Sent: Thursday, 19 June 2003 4:38 PM To: Martin Edge; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: (RADIATOR) Using UseExtendedId Hello Martin - I am curious to know what the problem is with these customers? What exactly do they not support? I have copied Mike on this mail so he can answer the per-host use of UseExtendedId. regards Hugh On Thursday, Jun
RE: (RADIATOR) Using UseExtendedId
Hello Martin, RFC 2865 clearly specifies the behaviour in case a request contains Proxy-State. So not returning Proxy-State correctly is a violation of the RFC. Sometimes things go wrong when requests are proxied twice with each proxy adding Proxy-State. But the RFC covers this as well. Met vriendelijke groet, Hylke Zuidema Developmentmanager KPN - Internet Operator Tel: +31 70 451 33 70 -Oorspronkelijk bericht- Van: Martin Edge [mailto:[EMAIL PROTECTED] Verzonden: donderdag 19 juni 2003 10:14 Aan: 'Hugh Irvine' CC: [EMAIL PROTECTED]; [EMAIL PROTECTED] Onderwerp: RE: (RADIATOR) Using UseExtendedId Have 1 instance of MacRadius, one of ICRadius 0.18, one X-Radius 1.2.1 which I've never heard of. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martin Edge Sent: Thursday, 19 June 2003 5:31 PM To: 'Hugh Irvine' Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: RE: (RADIATOR) Using UseExtendedId I'll see I can find out which products these customers are using.. (pretty sure it's not Radiator) Thanks Martin Martin Edge Senior Applications Engineer [EMAIL PROTECTED] KBS Internet Pty Ltd Phone: 1300 302 134 Phone: +61 3 9868 Fax: +61 3 9868 9900 www.kbs.net.au Level 9 432 St Kilda Rd Melbourne VIC 3004 NOTICE - This message contains information intended only for the use of the addressee named above. It may also be confidential and/or privileged. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hugh Irvine Sent: Thursday, 19 June 2003 5:12 PM To: Martin Edge Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: (RADIATOR) Using UseExtendedId Hello Martin - Not returning a Proxy-State attribute is quite broken behaviour. regards Hugh On Thursday, Jun 19, 2003, at 17:00 Australia/Melbourne, Martin Edge wrote: Hi Hugh, It appears they are not responding with the Proxy-State attribute, therefore our RADIUS system is coming up unknown reply to packet. For instance: Thu Jun 19 16:47:47 2003: WARNING: Unknown reply received in AuthRADIUS for request 239 from 203.30.19.248:1846 Thu Jun 19 16:47:47 2003: WARNING: Unknown reply received in AuthRADIUS for request 240 from 203.30.19.248:1846 Thu Jun 19 16:47:50 2003: WARNING: Unknown reply received in AuthRADIUS for request 241 from 203.30.19.248:1846 Thu Jun 19 16:47:50 2003: WARNING: Unknown reply received in AuthRADIUS for request 241 from 202.71.168.62:1846 Thu Jun 19 16:47:53 2003: WARNING: Unknown reply received in AuthRADIUS for request 242 from 202.71.168.62:1846 Thu Jun 19 16:47:55 2003: WARNING: Unknown reply received in AuthRADIUS for request 242 from 203.30.19.248:1846 Thu Jun 19 16:47:55 2003: WARNING: Unknown reply received in AuthRADIUS for request 243 from 202.71.168.62:1846 Thu Jun 19 16:47:58 2003: WARNING: Unknown reply received in AuthRADIUS for request 243 from 203.30.19.248:1846 Thu Jun 19 16:48:00 2003: WARNING: Unknown reply received in AuthRADIUS for request 244 from 203.30.19.248:1846 *** Sending to 202.4.30.2 port 1646 Code: Accounting-Request Identifier: 74 Authentic: Attributes: Acct-Session-Id = 2F85 Framed-Protocol = PPP Framed-IP-Address = 203.194.16.52 Ascend-Connect-Progress = prLanSessionUp Acct-Authentic = RADIUS Acct-Status-Type = Start Calling-Station-Id = XXX Called-Station-Id = XXX NAS-Port-Type = Async NAS-Port = 7393 Service-Type = Framed-User NAS-IP-Address = 203.194.30.8 Ascend-Session-Svr-Key = XXX NAS-Identifier = ACC08-XX Acct-Delay-Time = 0 User-Name = X Timestamp = 1056005873 Proxy-State = OSC-Extended-Id=330 Thu Jun 19 16:57:53 2003: DEBUG: Accounting accepted Thu Jun 19 16:57:53 2003: DEBUG: Packet dump: *** Received from 202.4.30.2 port 1646 Code: Accounting-Response Identifier: 74 Authentic: 181156NP130;{`21226+{U1331406 Attributes: Thu Jun 19 16:57:53 2003: WARNING: Unknown reply received in AuthRADIUS for request 74 from 202.4.30.2:1646 Thanks Martin Martin Edge Senior Applications Engineer [EMAIL PROTECTED] KBS Internet Pty Ltd Phone: 1300 302 134 Phone: +61 3 9868 Fax: +61 3 9868 9900 www.kbs.net.au Level 9 432 St Kilda Rd Melbourne VIC 3004 NOTICE - This message contains information intended only for the use of the addressee named above. It may also be confidential and/or privileged. If you are not the intended recipient of this message you
Re: (RADIATOR) Using UseExtendedId
Hello Martin - Sounds like three potential customers to me. :-) regards Hugh On Thursday, Jun 19, 2003, at 18:14 Australia/Melbourne, Martin Edge wrote: Have 1 instance of MacRadius, one of ICRadius 0.18, one X-Radius 1.2.1 which I've never heard of. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martin Edge Sent: Thursday, 19 June 2003 5:31 PM To: 'Hugh Irvine' Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: RE: (RADIATOR) Using UseExtendedId I'll see I can find out which products these customers are using.. (pretty sure it's not Radiator) Thanks Martin Martin Edge Senior Applications Engineer [EMAIL PROTECTED] KBS Internet Pty Ltd Phone: 1300 302 134 Phone: +61 3 9868 Fax: +61 3 9868 9900 www.kbs.net.au Level 9 432 St Kilda Rd Melbourne VIC 3004 NOTICE - This message contains information intended only for the use of the addressee named above. It may also be confidential and/or privileged. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hugh Irvine Sent: Thursday, 19 June 2003 5:12 PM To: Martin Edge Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: (RADIATOR) Using UseExtendedId Hello Martin - Not returning a Proxy-State attribute is quite broken behaviour. regards Hugh On Thursday, Jun 19, 2003, at 17:00 Australia/Melbourne, Martin Edge wrote: Hi Hugh, It appears they are not responding with the Proxy-State attribute, therefore our RADIUS system is coming up unknown reply to packet. For instance: Thu Jun 19 16:47:47 2003: WARNING: Unknown reply received in AuthRADIUS for request 239 from 203.30.19.248:1846 Thu Jun 19 16:47:47 2003: WARNING: Unknown reply received in AuthRADIUS for request 240 from 203.30.19.248:1846 Thu Jun 19 16:47:50 2003: WARNING: Unknown reply received in AuthRADIUS for request 241 from 203.30.19.248:1846 Thu Jun 19 16:47:50 2003: WARNING: Unknown reply received in AuthRADIUS for request 241 from 202.71.168.62:1846 Thu Jun 19 16:47:53 2003: WARNING: Unknown reply received in AuthRADIUS for request 242 from 202.71.168.62:1846 Thu Jun 19 16:47:55 2003: WARNING: Unknown reply received in AuthRADIUS for request 242 from 203.30.19.248:1846 Thu Jun 19 16:47:55 2003: WARNING: Unknown reply received in AuthRADIUS for request 243 from 202.71.168.62:1846 Thu Jun 19 16:47:58 2003: WARNING: Unknown reply received in AuthRADIUS for request 243 from 203.30.19.248:1846 Thu Jun 19 16:48:00 2003: WARNING: Unknown reply received in AuthRADIUS for request 244 from 203.30.19.248:1846 *** Sending to 202.4.30.2 port 1646 Code: Accounting-Request Identifier: 74 Authentic: Attributes: Acct-Session-Id = 2F85 Framed-Protocol = PPP Framed-IP-Address = 203.194.16.52 Ascend-Connect-Progress = prLanSessionUp Acct-Authentic = RADIUS Acct-Status-Type = Start Calling-Station-Id = XXX Called-Station-Id = XXX NAS-Port-Type = Async NAS-Port = 7393 Service-Type = Framed-User NAS-IP-Address = 203.194.30.8 Ascend-Session-Svr-Key = XXX NAS-Identifier = ACC08-XX Acct-Delay-Time = 0 User-Name = X Timestamp = 1056005873 Proxy-State = OSC-Extended-Id=330 Thu Jun 19 16:57:53 2003: DEBUG: Accounting accepted Thu Jun 19 16:57:53 2003: DEBUG: Packet dump: *** Received from 202.4.30.2 port 1646 Code: Accounting-Response Identifier: 74 Authentic: 181156NP130;{`21226+{U1331406 Attributes: Thu Jun 19 16:57:53 2003: WARNING: Unknown reply received in AuthRADIUS for request 74 from 202.4.30.2:1646 Thanks Martin Martin Edge Senior Applications Engineer [EMAIL PROTECTED] KBS Internet Pty Ltd Phone: 1300 302 134 Phone: +61 3 9868 Fax: +61 3 9868 9900 www.kbs.net.au Level 9 432 St Kilda Rd Melbourne VIC 3004 NOTICE - This message contains information intended only for the use of the addressee named above. It may also be confidential and/or privileged. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify. -Original Message- From: Hugh Irvine [mailto:[EMAIL PROTECTED] Sent: Thursday, 19 June 2003 4:38 PM To: Martin Edge; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: (RADIATOR) Using UseExtendedId Hello Martin - I am curious to know what the problem is with these customers? What exactly do they not support? I have copied Mike on this mail so he can answer the per-host use of UseExtendedId