Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) multiple clients using *one* rad server



On Wed, 15 Jul 1998 Willie.Meagher@ascend.com wrote:

> 
> 
> What Radius server are you using ?
> 
	I'm running the Ascend Modified Free Radius.

> If it's Ascend Modified Free Radius or Livingston, can you run Radius in
> debug mode (radiusd -x) and forward the debug info generated when you try
> to log in on a profile with NAS-IP-Address or NAS-Identifier
> 

	Doh!  I completely forgot I had set up logging ... sheesh.
	Anyhow, thanks for the reminder and this odda clear things up:


when dialing into the MAX:

When using NAS-Identifier = "netserv"  ( dates stripped )

rad_auth: visi-rtr1.virtual-impact.com.1025, id=60: check item mismatch:
-780275933 != -780275898

This seems to be the correct behavior

----

When using NAS-IP-Address = xxx.xxx.xxx.xxx

/usr/local/bin/radiusd: attribute name NAS-IP-Address not found
/usr/local/bin/radiusd: Parse.check error -95 for user goober
Authenticate: visi-rtr1.virtual-impact.com.1025, id=0: Dict-Attribute Find
Error: goober

It turns out NAS-IP-Address isn't defined in the dictionary file 
I'm using.



when dialing into the NETServ:

I'll spare the details ... but it turns out that the whole set-up
was working to begin with - only the 'goober' profile I was testing 
with was not being read because I had previously created a 'goober'
user on the NETServ itself, so it wasn't even querying our  radius
server!! (  gee, I feel dumb  ([c;  ) 


> BTW,  when you specified the NAS-IP-Address, did you have quotes around the
> IP address ?   You shouldn't so I'm hoping the answer is no
> 
	Actually, I tried both, and recieve the same outcome either way.
	However thats obviously because NAS-IP-Address isn't included
	in my dictionary file!  (c;

I looked in another dictionary file I had lying around from a more
recent release of the ascend radiusd ( radius-980618.tar.gz )
and there is no NAS-IP-Address in that, either.

rainier :raddb $ grep NAS dictionary
ATTRIBUTE       NAS-Identifier          4       ipaddr
ATTRIBUTE       NAS-Port                5       integer
ATTRIBUTE       NAS-Port-Type           61      integer
#       NAS Port Types
#       VALUE   NAS-Port-Type                   Async                   0
#       VALUE   NAS-Port-Type                   Sync                    1
#       VALUE   NAS-Port-Type                   ISDN-Sync               2
#       VALUE   NAS-Port-Type                   ISDN-Async-V120         3
#       VALUE   NAS-Port-Type                   ISDN-Async-V110         4
#       VALUE   NAS-Port-Type                   Virtual                 5
#       VALUE   NAS-Port-Type                   PIAFS                   6
#


Thanks alot for hanging in there with me, very much appreciated!


Beers!

Corey
corey@virtual-impact.com


++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>
Follow-Ups: