Re: Computone Powerrack

Jeff Woods ( jeff@delta.com )
Thu, 03 Apr 1997 10:53:59 -0500

At 05:42 PM 4/2/97 -0800, you wrote:

>This is not a person trying to log on through the computone, this just pops
>on my debug output immediately following a reboot of the NAS... I have no
>Idea why it pops up... but it does....

Sounds like you still may have a port configured as an auto-login for root.
List your ports, and see if any are not login-by-port/wait. You'll
probably find one is still in the factory default. Ports 0,7,8 and 16 of
EACH REXX card are by default root logins when the PowerRack comes out of
the box. You really need to change these for security purposes....

>
>Josh
>
>----------
>> From: Jeff Woods <jeff@delta.com>
>> To: ntisp@emerald.iea.com
>> Subject: Re: Computone Powerrack
>> Date: Wednesday, April 02, 1997 3:03 PM
>>
>> At 02:05 PM 4/2/97 -0800, you wrote:
>>
>> >just have 1 more question... when I reboot the powerrack I get a login
>> >attempt in the radius window running in debug mode as follows...
>>
>> > SQL Statement: INSERT INTO Calls
>> >(CallDate,AcctStatusType,NASIdentifier,AcctDel
>> >ayTime,UserName) VALUES (GetDate(),7,'206.58.160.252',0,'root')
>> >
>> >ODBC: SQLExecDirect Error:
>> > [Microsoft][ODBC SQL Server Driver][SQL Server] The column NASPort in
>> >table Calls may not be null.
>> >Sending Accounting Ack of id 0 to ce3aa0fc (s2.netcnct.net)
>>
>> Your calls table (the RADIUS accounting) is not being updated correctly,
>> because the above SQL insertion command does not contain the port number.
>> It should look something like:
>>
>> > SQL Statement: INSERT INTO Calls
>> > (CallDate,AcctStatusType,NASIdentifier,AcctDelayTime,UserName,
>> > NASPort,AccountSessionID,UserService)
>> > VALUES
>> (GetDate(),7,'206.58.160.252',0,'root',63,510212.00.001.0,Framed-User)
>>
>> This comes from likely not having complete RADIUS attributes set up for
>the
>> account. (Odd that it's sending Accounting data back on a NVRAM user,
>> though -- you don't have ROOT in the RADIUS database, do you?)
>> >
>> >I don't know if this is normal or not...
>>
>> Nope, it isn't.
>>
>>
>>
>> ----------------------------------------------------------
>> NTISP Mailing List listserver@emerald.iea.com
>
> ----------------------------------------------------------
> NTISP Mailing List listserver@emerald.iea.com
>
>