Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

(ASCEND) Using Livingston RADIUS 2.0 with Ascend MAX

Does anyone have a suggestion for this.  Here is what I am seeing:

Radius Server: Livingston 2.0
Security Dynamics ACE Server: 3.01
Radius Client:  Ascend MAX 4080

When a user dials via a Modem into the MAX and attempts to login using
secure ID, the livingston 2.0 server (running in debugging mode) gives the
following output:

Wed Jan 14 14:37:03 1998: [148] radrecv: Request from host 159.156.20.33
code=1,
 id=50, length=82
Wed Jan 14 14:37:03 1998: [148] User-Name = "tester"
Wed Jan 14 14:37:03 1998: [148] Password =
"\260\324\357\357!6\016\016\342\312d"
Wed Jan 14 14:37:03 1998: [148] NAS-Identifier = 159.156.20.33
Wed Jan 14 14:37:03 1998: [148] NAS-Port = 20102
Wed Jan 14 14:37:03 1998: [148] NAS-Port-Type = Async
Wed Jan 14 14:37:03 1998: [148] User-Service = Login-User
Wed Jan 14 14:37:03 1998: [148] State = ""
Wed Jan 14 14:37:03 1998: [148] Ascend-Third-Prompt = ""
Wed Jan 14 14:37:03 1998: [148] Acct-Session-Id = "247673318"
Wed Jan 14 14:37:03 1998: [178] securid: unexpected STATE=""
Wed Jan 14 14:37:03 1998: [178] Sending Reject of id 50 to 159.156.20.33
(159.15
6.20.33)

It appears the the radius client software on the MAX is sending a NULL State
across to the Livingston server.  The radius server is not expecting the
State to
come from the client and as a result, the radius server rejects the request
without
even contacting the ACE server.

My questions are:
1.  Is there any way to configure the radius server to ignore the State
attribute initially
sent by the client rather than reject the entire request?

2.  Is there a version of the MAX radius client that does not send this NULL
state across
when initiating an Authentication request to the server?

A sample users file entry:
tester  Auth-Type = SecurID,
        User-Service =  Framed-User,
        Framed-Protocol = PPP,
        Ascend-Idle-Limit = 3600,
        Framed-Route = "0.0.0.0 1",
        User-Name = "tester"

Thanks for any info you may have,

Alex Tsepetis
Synetics, Inc.


++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>
Follow-Ups: