Re: Accounting-Response with invalid signature

2007-05-27 Thread Rio Yang
Hi Alan, Thanks for your explanation. Do you know when will it happen ? Rio 2007/5/25, Alan Dekok [EMAIL PROTECTED]: Rio Yang wrote: I got the following message from my radius.log. Wed May 23 16:39:11 2007 : Error: Received Accounting-Response packet from 172.16.1.1:1813 with invalid

Accounting-Response with invalid signature

2007-05-23 Thread Rio Yang
Hi All, I got the following message from my radius.log. Wed May 23 16:39:11 2007 : Error: Received Accounting-Response packet from 172.16.1.1:1813 with invalid signature (err=2)! (Shared secret is incorrect.) Wed May 23 16:39:11 2007 : Error: Reply from home server 172.16.1.1:1813 - ID: 180

Re: Accounting-Response with invalid signature

2007-05-23 Thread Rio Yang
Hi Milan, Sorry~ I don't describ my architecture more detail. NAS (Aptilo) --- FreeRADIUS --- JuniperSBR (Funk) (FreeRadius proxy to JuniperSBR) The error message occurred between FreeRADIUS and JuniperSBR. In my thinking, there is no secret error in Accounting-Request why I got the secret

Re: Accounting-Response with invalid signature

2007-05-23 Thread Rio Yang
I have checked all secrets and they are the same. Not all Accounting-Response with invalid signature. This error message occurred in sometime. It's a very strange. Rio 2007/5/23, Alex French [EMAIL PROTECTED]: On 23/05/07, Rio Yang [EMAIL PROTECTED] wrote: NAS (Aptilo) --- FreeRADIUS

Re: Wrong Realm in the detail files

2007-05-09 Thread Rio Yang
I'll try to upgrade to 1.1.6 Thanks Alan. Rio 2007/5/9, Alan DeKok [EMAIL PROTECTED]: Rio Yang wrote: I configured two realm in proxy.conf. One is realm ABC (prefix mode), and another is def.org (suffix mode). In my thinking, when request come into radius, prefix will work first

Wrong Realm in the detail files

2007-05-08 Thread Rio Yang
Hi, Recently, I found the wrong realm in the detail files. This log is captured from detail file. Tue May 8 17:46:41 2007 Class = 0x417074696c6f313a313a31383030 User-Name = ABC/[EMAIL PROTECTED] Acct-Status-Type = Start Acct-Session-Id = 464046fecc9c08a5

Realm and LDAP authentication

2006-11-02 Thread Rio Yang
Hi,I wanna to authenticate user by LDAP server.But I have two LDAP servers for different group of users.For example, students or staffs, each has different realm name.Students' realm name is @ stud.test and staffs' realm name is @staf.test.Realm (@stud.test) must pass to LDAP server one to

Re: Proxy Realm Error or Realm dead ??

2006-10-30 Thread Rio Yang
Hi Alan,Do you mean if the realm abc.com have been marked dead by freeradius, then the following packets that proxy to abc.com will use the default realm???Thanks.Rio2006/10/30, Alan DeKok [EMAIL PROTECTED] :Rio Yang [EMAIL PROTECTED] wrote: Or abc.com deaded and the freeradius assign [EMAIL

Proxy Realm Error or Realm dead ??

2006-10-29 Thread Rio Yang
Hi all,Found a problem on freeradius when I review the log file (detail-MMDD).The following is my proxy settings.default (proxy to 1.1.1.1)abc.com (proxy to 2.2.2.2)But I found some error entries in detail log.The username is [EMAIL PROTECTED] and it's realm must be abc.comBut in detail log,

Re: Rewrite Attribute when proxy the specific realm

2006-10-19 Thread Rio Yang
Thanks.But the hints file can only add new attributes.I wanna to rewrite the attribute not create new one.Any new idea?Rio2006/10/20, Richard Cotrina [EMAIL PROTECTED]: Youmight use regular expressions in the hints file. - Original Message - From: Rio Yang

Re: Rewrite Attribute when proxy the specific realm

2006-10-19 Thread Rio Yang
I found the solution.The preproxy_users file can rewrite attribute by the specific realm.Thanks.Rio2006/10/20, Rio Yang [EMAIL PROTECTED] :Thanks.But the hints file can only add new attributes.I wanna to rewrite the attribute not create new one. Any new idea?Rio2006/10/20, Richard Cotrina [EMAIL

Rewrite Attribute when proxy the specific realm

2006-10-17 Thread Rio Yang
Hi,I have tried attr_rewrite function to rewrite attribute value on specific attribute successfully.But now, I want to rewrite to attribute that proxy to specific realm.For example, When the AUTH proxy the realm abc.com.I wanna to rewrite the attribute NAS-Identifier value into new one.Could

Accounting-Response Log ??

2006-10-16 Thread Rio Yang
Hi,I have two radius servers. (Freeradius and Juniper SBR).Freeradius server be a radius proxy to proxy all auth/acct requests to Juniper SBR.Then I sometimes found there are some accounting-stop request don't arrival to Juniper SBR. Because Freeradius server and Juniper SBR is in the different

Accounting-Response Log ??

2006-10-10 Thread Rio Yang
Hi,I have two radius servers. (Freeradius and Juniper SBR).Freeradius server be a radius proxy to proxy all auth/acct requests to Juniper SBR.Then I sometimes found there are some accounting-stop request don't arrival to Juniper SBR. Because Freeradius server and Juniper SBR is in the different