Hi,
This may be more of a Cisco issue than a Freeradius issue, but any
pointers will be appreciated... The set-up: Freeradius 1.0.0 running
on Solaris 9; the "NASs" are a group of Cisco Aironet AP 350, using
radius to authenticate MAC addresses attempting to connect to them.
The radius server has a users file with the valid MAC addresses.
Authentication works nicely, as does accounting most of the time. But
when people disconnect, I almost always get these messages:
Sep 13 12:10:28 2004 : Error : rlm_radutmp : Logout for NAS xxxx port
2016, but no Login record
The port number is always 2016, the NAS (obviously) changes. The
accounting records look like this (stripping unneeded bits,
obfuscating some others)):
Mon Sep 13 11:07:44 2004
Acct-Status-Type = Start
User-Name = "001122334455"
Acct-Session-Id = " 150001c"
Acct-Authentic = Local
NAS-Port = 40
NAS-Identifier = "xxxnas1xxx"
Acct-Unique-Session-Id = "f8facef4e67040c2"
[...several "Alive" entries, all looking like this:]
Mon Sep 13 12:07:45 2004
Acct-Status-Type = Alive
User-Name = "001122334455"
Acct-Session-Id = " 150001c"
Acct-Authentic = Local
Acct-Session-Time = 3600
NAS-Port = 40
NAS-Identifier = "xxxnas1xxx"
Acct-Unique-Session-Id = "f8facef4e67040c2"
Mon Sep 13 12:10:28 2004
Acct-Status-Type = Stop
User-Name = "001122334455"
Acct-Session-Id = " 150001c"
Acct-Authentic = Local
Acct-Session-Time = 3764
NAS-Port = 2016
NAS-Identifier = "xxxnas1xxx"
Acct-Terminate-Cause = Lost-Carrier
Acct-Unique-Session-Id = "0b0cc8cc707a221a"
The actual username is a valid MAC address. Note that the NAS-Port is
constant across the whole session, except for the Stop packet. The
Acct-Session-Id remains the same, even for the Stop packet.
Has anyone seen this behaviour? Googling for the appropriate keywords
(and a few not so appropriate ones) has yelded nothing remotely
similar.
Thanks in advance for any hints (or workarounds).
-Wilson
--
Wilson Roberto Afonso [EMAIL PROTECTED]
http://www.netwhatever.com/
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
