Hello, Thanks for all the RADIUS messages. They are very helpful.
I am able to successfully implemented digest authentications in FreeRADIUS and have been using it ever since. This is after getting help from the great people on this mailing. I wonder if anyone here has any experience Cisco Access Registrar 4.1.X as it relates to digest authentications? I know it is probably not related to FreeRADIUS but I tried everything and Cisco Access Registrar 4.1.X keeps dropping the Access-Request packets with response-type: -1. cisco support is of no help. I went through 5 support representatives so far. Below is the output of the trace file (i.e. name_radius_1_trace). This is running on Solaris 10 on a T1000 Ultrasparc T1 8 cores, 4 threads per core, 32 virtual cpus total. I am not sure if any of the cores make any difference. As always, your assistances are greatly appreciated. Best regards, Hoa ------------------ Output of trace file -------------------------- 07/29/2008 18:55:04: P11864: Packet received from 10.8.140.21 07/29/2008 18:55:04: P11864: Packet successfully added 07/29/2008 18:55:04: P11864: Trace of Access-Request packet 07/29/2008 18:55:04: P11864: identifier = 209 07/29/2008 18:55:04: P11864: length = 218 07/29/2008 18:55:04: P11864: reqauth = cf:04:c9:51:ae:f5:ed:34:aa:47:61:ed:9f:96:63:eb 07/29/2008 18:55:04: P11864: User-Name = fakeuser 07/29/2008 18:55:04: P11864: Service-Type = 200 07/29/2008 18:55:04: P11864: NAS-Identifier = qcs-qchat-ops-2-3.qln.test.com.(none) 07/29/2008 18:55:04: P11864: NAS-Port-Type = Virtual 07/29/2008 18:55:04: P11864: Digest-Response = fakeqcdigest 07/29/2008 18:55:04: P11864: Digest-Attributes = { Realm = fakedomain } 07/29/2008 18:55:04: P11864: Digest-Attributes = { Nonce = fakeqcnonce } 07/29/2008 18:55:04: P11864: Digest-Attributes = { Method = QCHAT-REGISTER } 07/29/2008 18:55:04: P11864: Digest-Attributes = { URI = fakedomain } 07/29/2008 18:55:04: P11864: Digest-Attributes = { QOP = auth } 07/29/2008 18:55:04: P11864: Digest-Attributes = { Algorithm = MD5-sess } 07/29/2008 18:55:04: P11864: Digest-Attributes = { CNonce = fakeqccnonce } 07/29/2008 18:55:04: P11864: Digest-Attributes = { Nonce-Count = 1 } 07/29/2008 18:55:04: P11864: Digest-Attributes = { User-Name = fakeuseraddr } 07/29/2008 18:55:04: P11864: Running Server's IncomingScript: show-contents 07/29/2008 18:55:04: Log: Request from 10.8.140.21: Server IncomingScript failed fakeuser 07/29/2008 18:55:04: P11864: Dropping request (response-type: -1) 07/29/2008 18:55:04: P11864: Packet successfully removed --------------------------------------------------------------------- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html