I thought that if the RADIUS CLIENT/NAS got a failure (from the
primary server) that it wouldn't check the second machine.
The RADIUS CLIENT/NAS will alternates to other backup RADIUS
SERVER when it gets no reponse, not a failed response.
----------
From: Josh Hillman[SMTP:admin-maillist@talstar.com]
Sent: Wednesday, March 12, 1997 11:24 AM
To: radiusnt@emerald.iea.com
Subject: backup radius server
I'm running RadiusNT .60 as a service (ODBC only) on the primary machine
(where the SQL database resides) and authentication works just fine.
On the secondary machine, I have RadiusNT .60 and am trying to run it from
the CMD prompt, "radius -x -A".
RadiusNT Admin settings:
Auth port = 1645
Accounting: Require secret
Port: 1646
Mode: Text Files
Directories/files:
Data: c:\radius\data
Accounting: c:\radius\acct
Users file: users
Radlogin on the backup machine works fine, so long as the "dictionary file
is in the "c:\radius" AND "c:\radius\data" directories.
The problem is when I dialup through our Ascend Max 4004, I'm not
authenticated because it seems that the Max isn't even looking at the
backup server. The Max responds (on the console), "LAN securty error
test3".
That user is not in the database--it only resides in the text file on the
backup machine. The same "secret" is used on both servers as well as the
Max.
Here's what the Max 4004 (5.0A) has set:
Auth...
Auth=RADIUS
Auth Host #1=(IP addr for primary machine)
Auth Host #2=(IP addr for secondary machine)
Auth Host #3=(IP addr for primary machine)
Auth Port=1645
Auth Src Port=0
Auth Timeout=5
Auth Key=*SECURE*
Auth Pool=Yes
Auth TS Secure=Yes
Auth Send Attr. 6,7=Yes
Local Profiles First=Yes
Auth Req=Yes
CLID Timeout Busy=No
CLID Fail Busy=No
APP Server=No
APP Host=N/A
APP Port=N/A
SecurID DES encryption=N/A
SecurID host retries=N/A
SecurID NodeSecret=N/A
Sess Timer=N/A
Accounting...
Acct=RADIUS
Acct Host #1=(IP addr for primary machine)
Acct Host #2=(IP addr for secondary machine)
Acct Host #3=(IP addr for primary machine)
Acct Port=1646
Acct Src Port=0
Acct Timeout=5
Acct Key=*SECURE*
Sess Timer=0
Acct-ID Base=10
What am I missing?
Are loginnames in the text files still limited to 8 or less characters?
Thanks,
Josh Hillman
hillman@talstar.com
----------------------------------------------------------
RadiusNT Mailing List listserver@emerald.iea.com
------ =_NextPart_000_01BC2EDD.3D202C20
Content-Type: application/ms-tnef
Content-Transfer-Encoding: base64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------ =_NextPart_000_01BC2EDD.3D202C20--