bay networks can run radius now only in special configuration
called "Erpcd Proxy Radius Client". Erpcd is their own authentification
agent, similar to radius. so every one device (client) talks to "erpcd"
and erpcd talks to radius server.
well, i have pinpointed the problem - in the log file of
"erpcd":
RADIUS Acct: Event=logout, Service=ppp, NASip=[195.12.129.66],
Port=#05, User=kmarek, Msg=(NULL)
RADIUS Acct: UNMATCHED Logout!
RADIUS Acct: Sesrec created block=00CEBB80 User=kmarek,
NASaddr=[195.12.129.66], Port=#05, Sesid=6A070001
log_message
RADIUS Acct: Event=acct, Service=ppp, NASip=[195.12.129.66],
Port=#05, User=kmarek, Msg=(NULL)
RADIUS Acct: Stats: In: 5603, 276881 Out: 2479, 641754
RADIUS Acct: Open_server [195.12.128.17]
RADIUS Acct: ServerInfo: Timeout=30, Retries=3,
BackupSrvr=[255.255.255.255]
RADIUS Acct: Secret= XX XX XX XX XX XX XX XX XX 00 00 00 00 00
00 00
RADIUS Acct: sending request to [195.12.128.17]
syslog: pri 7, msg Sent RADIUS Accounting-Request to
195.12.128.17
RADIUS Acct: message #1 sent okay
syslog: pri 7, msg No response from RADIUS server 195.12.128.17
RADIUS Acct: request timeout/err: error code=-2, retry count=0,
#1, server=[195.12.128.17]
RADIUS Acct: sending request to [195.12.128.17]
syslog: pri 7, msg Sent RADIUS Accounting-Request to
195.12.128.17
RADIUS Acct: message #1 sent okay
syslog: pri 7, msg No response from RADIUS server 195.12.128.17
RADIUS Acct: request timeout/err: error code=-2, retry count=1,
#1, server=[195.12.128.17]
RADIUS Acct: sending request to [195.12.128.17]
syslog: pri 7, msg Sent RADIUS Accounting-Request to
195.12.128.17
RADIUS Acct: message #1 sent okay
syslog: pri 7, msg No response from RADIUS server 195.12.128.17
RADIUS Acct: request timeout/err: error code=-2, retry count=2,
#1, server=[195.12.128.17]
syslog: pri 3, msg RADIUS Acct: Transmit retries exceeded for
server [195.12.128.17]
RADIUS Acct: Transmit retries exceeded for server
[195.12.128.17]
RADIUS Acct: Open_server [255.255.255.255]
RADIUS Acct: Failed to find server info for [255.255.255.255]
syslog: pri 2, msg RADIUS Acct: Failed to find server
information for [255.255.255.255]
syslog: pri 3, msg RADIUS Acct: Failed to open Backup server
syslog: pri 2, msg RADIUS Acct: RADIUS Accounting shutting down
[Mokrosh Pietro] at the same time, RadiusNT logs:
> [Mokrosh Pietro] Resp Time: 130 Auth: 0/0 -> 0 Acct: 2/16/10
> -> 28
radrecv: Request from host c30c8004 code=4, id=2, length=110
Acct-Status-Type = Stop
User-Name = "kmarek"
NAS-Identifier = 195.12.129.66
NAS-Port = 5
NAS-Port-Type = Async
User-Service = Framed-User
Framed-Protocol = PPP
Acct-Session-Id = "6A070001"
Acct-Authentic = RADIUS
Acct-Delay-Time = 0
Acct-Input-Packets = 5603
Acct-Output-Packets = 2479
Acct-Input-Octets = 276881
Acct-Output-Octets = 641754
SQL Statement: INSERT INTO Calls
(CallDate,AcctStatusType,UserName,NASIdentifier,NASPort,NASPortType,User
Service,FramedProtocol,AcctSessionId,AcctDelayTime,AcctInputOctets,AcctO
utputOctets) VALUES
(GetDate(),2,'kmarek','195.12.129.66',5,0,2,1,'6A070001',0,276881,641754
)
SQL Statement: UPDATE CallsOnline Set UserName='kmarek',
AcctStatusType=2, CallDate=GetDate(), FramedAddress=NULL WHERE
NASIdentifier='195.12.129.66' and NASPort=5
Sending Accounting Ack of id 2 to c30c8004 (ACP-PROXY)
Resp Time: 120 Auth: 0/0 -> 0 Acct: 3/16/10 -> 29
radrecv: Request from host c30c8004 code=4, id=2, length=110
Acct-Status-Type = Stop
User-Name = "kmarek"
NAS-Identifier = 195.12.129.66
NAS-Port = 5
NAS-Port-Type = Async
User-Service = Framed-User
Framed-Protocol = PPP
Acct-Session-Id = "6A070001"
Acct-Authentic = RADIUS
Ac
[Mokrosh Pietro] i have tried "require secret" on radius NT,
but with no luck...
eventually, i'll grab the communication between erpcd and
radiusnt and compare it with rfc2058 to find the problem...
any suggestion?
pietro