[RadiusNT Digest]

radiusnt-digest-request@iea-software.com
Sat, 30 May 1998 00:00:28 -0700

Message 1: Re: radius upgrade
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 2: Re: radius nt as a service
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 3: Re: Accounting Errors
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 4: Accounting Errors
from "Bruno Tremblay" <bruno@mustangtechno.com>

Message 5: Slightly OT: Portmaster question
from "Danny Sinang" <danny@uplink.com.ph>

Message 6: Re: radius upgrade
from iml@interconnect.net

Message 7: Re: [data] RadiusNT 2.5 problem
from "Zak Wolfinger" <zak@cyberlink.com>

Message 8: Error 650 on dial up
from "Lorri Thomas" <lorri@cowtown.net>

Message 9: Re: radius nt as a service
from Christian Simard <simardc@netc.net>

Message 10: Re: [data] RadiusNT 2.5 problem
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 11: Re: radius upgrade
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 12: Re: radius nt as a service
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 13: Re: [data] RadiusNT 2.5 problem
from "Zak Wolfinger" <zak@cyberlink.com>

Message 14: Re: Slightly OT: Portmaster question
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 15: iPass Support?
from postman@cp-tel.net (Postman Account)

Message 16: Re: Accounting Errors
from "John Rickabaugh" <johnr@ccois.net>

Message 17: static IP and AS5200 problem
from Christian Simard <simardc@netc.net>

Message 18: Re: static IP and AS5200 problem
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 19: Re: iPass Support?
from Steve Spesard <steves@webaccess.net>

Message 20: Re: Accounting Errors
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 21: logfile not logging incorrect passwords
from "Beverly Wise" <bev@hyper-drive.com>

Message 22: Disconnection of users
from PSS <pss@sunbeach.net>

Message 23: Default NASPort
from Michael Whisenant <mwhisen@airnet.net>

Message 24: Re: Error 650 on dial up
from "Josh Hillman" <admin-maillist@talstar.com>

Message 25: Re: Default NASPort
from Brian Lube <brian@mpinet.net>

Message 26: PPTP and RadiusNT
from Michael Whisenant <mwhisen@airnet.net>

Message 27: RE: radius upgrade
from eric@valleynetworking.com (Eric Cowperthwaite)

Message 28: Re: Default NASPort
from Michael Whisenant <mwhisen@airnet.net>

Message 29: Re: radius upgrade
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 30: Re: Disconnection of users
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 31: Emerald Mailing List
from Glen Harvy <glen@aquarius.com.au>

Message 32: Installing Emerald
from Glen Harvy <glen@aquarius.com.au>

Message 33: ANNOUNCEMENT: RadiusNT 2.5 Releases
from Sheryl Stover <sds@iea-software.com>

Message 34: Re: Slightly OT: Portmaster question
from "Danny Sinang" <danny@uplink.com.ph>

Message 35: Re: Slightly OT: Portmaster question
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 36: Fw: ANNOUNCEMENT: RadiusNT 2.5 Releases
from "WebWiz" <webwiz@atlcon.net>

Message 37: Re: Emerald Mailing List
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 38: Re: Emerald Mailing List
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 39: Re: Fw: ANNOUNCEMENT: RadiusNT 2.5 Releases
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 40: RadiusNT 2.5
from "Lamar Townsend" <lamar@shuttle.com>

Message 41: AcctSessionTime question
from "Danny Sinang" <danny@uplink.com.ph>

Message 42: Re: RadiusNT 2.5
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 43: server ports
from iml@interconnect.net

Message 44: Re: Installing Emerald
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 45: Re: iPass Support?
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 46: Re: AcctSessionTime question
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 47: Re: AcctSessionTime question
from "Danny Sinang" <danny@uplink.com.ph>

Message 48: Re: UUCP type cutomers
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 49: Re: AcctSessionTime question
from "Dale E. Reed Jr." <daler@iea-software.com>

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 1 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Re: radius upgrade
From: "Dale E. Reed Jr." <daler@iea-software.com>
Date: Fri, 29 May 1998 00:36:47 -0700

Eric Cowperthwaite wrote:
>
> What steps do I need to take to upgrade from Radius 2.2 to Radius 2.5?
>
> I am using Radius as a standalone product. I have a completely and correctly
> configured MS Access 97 database in place, and I use Radius for both
> authentication and accounting. Radius runs in ODBC mode, as a service, and
> controls concurrency as well.

Probably not much more than just running the 2.5 installation. The
basic database layout for 2.5 hasn't changed from an MS Access
perspective. You might want to look at the radius97.mdb database
though. There are some new tables for advanced features.

-- Dale E. Reed Jr.  (daler@iea-software.com)_________________________________________________________________       IEA Software, Inc.      |  RadiusNT, Emerald, and NT FAQs Internet Solutions for Today  |   http://www.iea-software.com

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 2 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: radius nt as a serviceFrom: "Dale E. Reed Jr." <daler@iea-software.com>Date: Fri, 29 May 1998 00:39:41 -0700

Christian Simard wrote:> > Hi!> > I've just installed radius Nt as a service with "radius.exe -install"> the problem is that when I boot windows NT, the service does not> start automatically (yes, it is checked automatic in services).> When the machine has finished booted, i can start it manually> without problems!!!

If you are running with SQL Server on the same machine, upgradeto RadiusNT 2.5 and it should resolve the problem.

-- Dale E. Reed Jr.  (daler@iea-software.com)_________________________________________________________________       IEA Software, Inc.      |  RadiusNT, Emerald, and NT FAQs Internet Solutions for Today  |   http://www.iea-software.com

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 3 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: Accounting ErrorsFrom: "Dale E. Reed Jr." <daler@iea-software.com>Date: Fri, 29 May 1998 02:02:16 -0700

John Rickabaugh wrote:> > Ever since the last beta, currently running the full zip downloaded today> from the ftp site, I have been unable to get the calls online to update.> Here is a snip from the accounting debug log:

> SQL Statement: UPDATE CallsOnline Set> Username='info4you',AcctStatusType=1, CallDate=Now(), FramedAddress=NULL> WHERE NASIdentifier='DU' and NASPort=2 AND (DateAdd('s',> 0-i.AcctDelayTime, i.CallDate) >= CallDate OR CallDate IS NULL)> > ODBC Error:07001:-3010:> [Microsoft][ODBC Microsoft Access 97 Driver] Too few parameters. Expected> 2.

I shouldn't copy those triggers so exact. Alright. I fixed this problemin 2.5.116.

-- Dale E. Reed Jr.  (daler@iea-software.com)_________________________________________________________________       IEA Software, Inc.      |  RadiusNT, Emerald, and NT FAQs Internet Solutions for Today  |   http://www.iea-software.com

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 4 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Accounting ErrorsFrom: "Bruno Tremblay" <bruno@mustangtechno.com>Date: Fri, 29 May 1998 07:46:17 -0400

In version 2.5.110 or Radius NT Calls on line still not working but inversion 2.5.105 calls on line work great.

I still got that error when I enable the access port servers :Server:server12 (XXX.XXX.XXX.XX) Port:2 (Time)

I set StartTime and StopTime to 0 for no PortAccess restriction on times.

ThanksBruno Tremblay

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 5 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Slightly OT: Portmaster questionFrom: "Danny Sinang" <danny@uplink.com.ph>Date: Fri, 29 May 1998 23:18:38 +0800

Hello.

I am considering buying a PM-2, but I need to know some facts first.

Does a PM-2 have an "Accept-All-Logins" feature ? I might need this featurewhenever I'm doing some maintenance on my ODBC database.

Danny SinangPresident - Uplink Technologies, Inc.( Provider of "Clean" Internet Access )www.uplink.com.phdanny@uplink.com.ph

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 6 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: radius upgradeFrom: iml@interconnect.netDate: Fri, 29 May 1998 10:50:03 -0500

Dale any special precautions for Emerald users? or is it just aninstall of radius.

On a side note I believe you mentioned a while back that we can definecheck attributes in the upcoming version 2.5 like port type...was thisimplemented?

One last question we really need to be able to offer accounts that canonly log in certain hours is thing an Emerald thing or a RadiusNTthing and can it be done...if not, any idea when?

Thanks for all the great products.

On Fri, 29 May 1998 00:36:47 -0700, you wrote:

>Eric Cowperthwaite wrote:>>=20>> What steps do I need to take to upgrade from Radius 2.2 to Radius 2.5?>>=20>> I am using Radius as a standalone product. I have a completely and =correctly>> configured MS Access 97 database in place, and I use Radius for both>> authentication and accounting. Radius runs in ODBC mode, as a service,= and>> controls concurrency as well.>>Probably not much more than just running the 2.5 installation. The=20>basic database layout for 2.5 hasn't changed from an MS Access=20>perspective. You might want to look at the radius97.mdb database>though. There are some new tables for advanced features.

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 7 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: [data] RadiusNT 2.5 problemFrom: "Zak Wolfinger" <zak@cyberlink.com>Date: Fri, 29 May 1998 11:57:31 -0500

-----Original Message-----From: Dale E. Reed Jr. <daler@iea-software.com>To: radiusnt@iea-software.com <radiusnt@iea-software.com>Date: Thursday, May 28, 1998 12:09 PMSubject: Re: [data] RadiusNT 2.5 problem

|Zak Wolfinger wrote:|>|> Hmmm...thought I had grabbed the latest version. IsRadius_25_110.exe|> the correct (latest) version to download?||The full distribution for RadiusNT 2.5.115 is in the /radiusnt|directory now. RadiusNT 2.2 has been moved to the /radiusnt/old|directory. There should be an annoucement about this shortly.|The version in the /radiusnt directory shows 2.5.105 not 115. Is thiscosmetic or do I still have the wrong version?

Zak

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 8 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Error 650 on dial upFrom: "Lorri Thomas" <lorri@cowtown.net>Date: Fri, 29 May 1998 12:56:07 -0500

This is a multi-part message in MIME format.

------=_NextPart_000_0084_01BD8B01.257CB580Content-Type: text/plain; charset="iso-8859-1"Content-Transfer-Encoding: quoted-printable

We are running Radius (ver. 2.02.41) on an NT server for authentication =only. My customers (and even myself on occasion) get an error 650 when =dialing in. I searched MS KB & it says to disable PPTP, however, we =don't even have that installed. Has anyone experienced this? I found =nothing in the archives.

Lorri A. ThomasEmail: lorri@cowtown.netPhone: 817-293-9353 - or 972-730-2010Fax: 817-293-9076

"Hanging onto resentment is letting someoneyou despise live rent-free in your head." - Ann Landers

------=_NextPart_000_0084_01BD8B01.257CB580Content-Type: text/html; charset="iso-8859-1"Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD W3 HTML//EN">

We are running Radius (ver. 2.02.41) =on an NT=20server for authentication only.  My customers (and even myself on =occasion)=20get an error 650 when dialing in.  I searched MS KB & it says =to=20disable PPTP, however, we don't even have that installed.  Has =anyone=20experienced this?  I found nothing in the archives.

Lorri A. Thomas
Email:  =lorri@cowtown.net
Phone: =20817-293-9353
 - or     =20972-730-2010
Fax:      =817-293-9076
 
"Hanging onto resentment is =letting=20someone
you despise live rent-free in your=20head."
         &nbs=p; =20- Ann Landers
------=_NextPart_000_0084_01BD8B01.257CB580--..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 9 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: radius nt as a serviceFrom: Christian Simard Date: Fri, 29 May 1998 14:08:23 -0400At 00:39 29/05/98 -0700, you wrote:Is there a way to solve this problems without upgrading? Can Iset the order of the services startup in windows NT booting process in such a way that radius NT start at the end?I use Radius NT 1.16 and SQL serverthanks!>Christian Simard wrote:>> >> Hi!>> >> I've just installed radius Nt as a service with "radius.exe -install">> the problem is that when I boot windows NT, the service does not>> start automatically (yes, it is checked automatic in services).>> When the machine has finished booted, i can start it manually>> without problems!!!>>If you are running with SQL Server on the same machine, upgrade>to RadiusNT 2.5 and it should resolve the problem.>>-- >Dale E. Reed Jr. (daler@iea-software.com)>_________________________________________________________________> IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs> Internet Solutions for Today | http://www.iea-software.com>>..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 10 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: [data] RadiusNT 2.5 problemFrom: "Dale E. Reed Jr." Date: Fri, 29 May 1998 11:29:28 -0700Zak Wolfinger wrote:> > The version in the /radiusnt directory shows 2.5.105 not 115. Is this> cosmetic or do I still have the wrong version?Do you mean when you actually run it, or on the FTP server? I'll check the distribution.-- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 11 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: radius upgradeFrom: "Dale E. Reed Jr." Date: Fri, 29 May 1998 11:38:27 -0700iml@interconnect.net wrote:> > Dale any special precautions for Emerald users? or is it just an> install of radius.Just run the rad25_up.sql script against your database.> On a side note I believe you mentioned a while back that we can define> check attributes in the upcoming version 2.5 like port type...was this> implemented?Yes. Its in the documentation. > One last question we really need to be able to offer accounts that can> only log in certain hours is thing an Emerald thing or a RadiusNT> thing and can it be done...if not, any idea when?RadiusNT 2.5 supports this via the ServerAccess options. -- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 12 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: radius nt as a serviceFrom: "Dale E. Reed Jr." Date: Fri, 29 May 1998 12:10:39 -0700Christian Simard wrote:> > At 00:39 29/05/98 -0700, you wrote:> > Is there a way to solve this problems without upgrading? Can I> set the order of the services startup in windows NT booting process> in such a way that radius NT start at the end?> > I use Radius NT 1.16 and SQL serverEven when you change the startup order, SQL Server still taked longerthan RadiusNT to start and the problem occurs. RadiusNT 2.5 hassmarts added to "wait" until everything is OK.> thanks!> > >Christian Simard wrote:> >>> >> Hi!> >>> >> I've just installed radius Nt as a service with "radius.exe -install"> >> the problem is that when I boot windows NT, the service does not> >> start automatically (yes, it is checked automatic in services).> >> When the machine has finished booted, i can start it manually> >> without problems!!!> >> >If you are running with SQL Server on the same machine, upgrade> >to RadiusNT 2.5 and it should resolve the problem.> >> >--> >Dale E. Reed Jr. (daler@iea-software.com)> >_________________________________________________________________> > IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs> > Internet Solutions for Today | http://www.iea-software.com> >> >-- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 13 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: [data] RadiusNT 2.5 problemFrom: "Zak Wolfinger" Date: Fri, 29 May 1998 14:19:39 -0500When I downloaded this file from the FTP site in the RadiusNTdirectory:-r-xr-xr-x 1 owner group 3863479 May 27 0:43RadiusNT.zipand installed, and ran it, it reports to be 2.5.105Zak||Do you mean when you actually run it, or on the FTP server? I'll|check the distribution...------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 14 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: Slightly OT: Portmaster questionFrom: "Dale E. Reed Jr." Date: Fri, 29 May 1998 12:29:12 -0700Danny Sinang wrote:> > I am considering buying a PM-2, but I need to know some facts first.> > Does a PM-2 have an "Accept-All-Logins" feature ? I might need this feature> whenever I'm doing some maintenance on my ODBC database.No, but RadiusNT does (DEFAULT/ANY combination in text mode).-- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 15 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: iPass Support?From: postman@cp-tel.net (Postman Account)Date: Fri, 29 May 1998 14:37:06 -0500Any idea as to when RadiusNT will support iPass? I noticedthere is future plans for this in the RadiusNT v2.5 docs...------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 16 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: Accounting ErrorsFrom: "John Rickabaugh" Date: Fri, 29 May 1998 14:14:31 -0600Is it posted in the directory?Thanks,John-----Original Message-----From: Dale E. Reed Jr. To: radiusnt@iea-software.com Date: Friday, May 29, 1998 3:11 AMSubject: Re: Accounting Errors>John Rickabaugh wrote:>>>> Ever since the last beta, currently running the full zip downloaded today>> from the ftp site, I have been unable to get the calls online to update.>> Here is a snip from the accounting debug log:>>>> SQL Statement: UPDATE CallsOnline Set>> Username='info4you',AcctStatusType=1, CallDate=Now(), FramedAddress=NULL>> WHERE NASIdentifier='DU' and NASPort=2 AND (DateAdd('s',>> 0-i.AcctDelayTime, i.CallDate) >= CallDate OR CallDate IS NULL)>>>> ODBC Error:07001:-3010:>> [Microsoft][ODBC Microsoft Access 97 Driver] Too few parameters.Expected>> 2.>>I shouldn't copy those triggers so exact. Alright. I fixed this problem>in 2.5.116.>>-->Dale E. Reed Jr. (daler@iea-software.com)>_________________________________________________________________> IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs> Internet Solutions for Today | http://www.iea-software.com>..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 17 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: static IP and AS5200 problemFrom: Christian Simard Date: Fri, 29 May 1998 16:17:33 -0400Hi!!I'v assigned a static IP Address to a user in the Radconfigs table.Without a static IP, there is no problem to get authentified bythe CISCO AS5200 but with the static IP, the user get disconnectedimmediatly after "Framed-Address". Here is a the radius debug screensnapshoot and a debug of AAA made on the CISCO AS5200:I use Radius NT 1.16 with SQL server but I have the same problem with 2.2thank you for your help!RADIUS NT:=========Allocating Statement... SQL Statement: Select ra.RadAttributeID, Name, Data, Value, Type FromRadConfigs rc, RadAttributes ra Where ra.RadAttributeID=rc.RadAttributeID ANDrc.AccountID=659 Framed-Address = 207.139.145.150 (1)Freeing SQL Statement...Sending Ack of id 181 to cf8b9105 (cisco5-2.netc.net) Framed-Address = 207.139.145.150Response Time: 230CISCO AS5200:============AAA/AUTHEN/START (0): port='Async36' list='' action=LOGIN service=PPPAAA/AUTHEN/START (0): using "default" listAAA/AUTHEN/START (397743627): Method=RADIUSAAA/AUTHEN (397743627): status = GETPASSAAA/AUTHEN/CONT (397743627): continue_loginAAA/AUTHEN (397743627): status = GETPASSAAA/AUTHEN (397743627): Method=RADIUSAAA/AUTHEN (397743627): status = PASSAAA/AUTHOR/LCP: authorize LCPAAA/AUTHOR (0): user='simardc'AAA/AUTHOR (0): send AV service=pppAAA/AUTHOR (0): send AV protocol=lcpAAA/AUTHOR (623322683): Method=RADIUSAAA/AUTHOR (623322683): Post authorization status = ERRORSame login with Livingston RADIUS:=================================%LINK-3-UPDOWN: Interface Async26, changed state to upAAA/AUTHEN: create_user user='simardc' ruser='' port='Async26'rem_addr='async/8718373' authen_type=2 service=3 priv=1AAA/AUTHEN/START (0): port='Async26' list='' action=LOGIN service=PPPAAA/AUTHEN/START (0): using "default" listAAA/AUTHEN/START (511843121): Method=RADIUSAAA/AUTHEN (511843121): status = GETPASSAAA/AUTHEN/CONT (511843121): continue_loginAAA/AUTHEN (511843121): status = GETPASSAAA/AUTHEN (511843121): Method=RADIUSAAA/AUTHEN (511843121): status = PASSAAA/AUTHOR/LCP: authorize LCPAAA/AUTHOR (0): user='simardc'AAA/AUTHOR (0): send AV service=pppAAA/AUTHOR (0): send AV protocol=lcpAAA/AUTHOR (638391897): Method=RADIUSAAA/AUTHOR (638391897): Post authorization status = PASS_REPLAAA/AUTHOR/LCP: Async26: Processing AV routing*trueAAA/AUTHOR/FSM (0): can we start IPCP?AAA/AUTHOR (0): user='simardc'AAA/AUTHOR (0): send AV service=pppAAA/AUTHOR (0): send AV protocol=ipAAA/AUTHOR (62202857): Method=RADIUSAAA/AUTHOR (62202857): Post authorization status = PASS_REPLAAA/AUTHOR/FSM: we can start IPCP for protocol 0x8021AAA/AUTHOR/IPCP: Async26: start: her address 0.0.0.0, we want 207.139.145.169AAA/AUTHOR/IPCP: Async26: Processing AV addr=207.139.145.150AAA/AUTHOR/IPCP: Async26: Processing AV routing*trueAAA/AUTHOR/IPCP: Async26: set routing to TRUEAAA/AUTHOR/IPCP: Async26: authorization succeededAAA/AUTHOR/IPCP: Async26: done: her address 0.0.0.0, we want 207.139.145.150AAA/AUTHOR/IPCP: Async26: authorization succeededAAA/AUTHOR/IPCP: Async26: start: her address 0.0.0.0, we want 207.139.145.150AAA/AUTHOR/IPCP: Async26: Processing AV addr=207.139.145.150AAA/AUTHOR/IPCP: Async26: Processing AV routing*true..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 18 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: static IP and AS5200 problemFrom: "Dale E. Reed Jr." Date: Fri, 29 May 1998 13:36:21 -0700Christian Simard wrote:> > I'v assigned a static IP Address to a user in the Radconfigs table.> Without a static IP, there is no problem to get authentified by> the CISCO AS5200 but with the static IP, the user get disconnected> immediatly after "Framed-Address". Here is a the radius debug screen> snapshoot and a debug of AAA made on the CISCO AS5200:You most likely need more than just Framed-Address. Try addingUser-Service=Framed-User, and Framed-Protocol=PPP as well.RadiusNT does NOT add the RadConfigs entries to the RadATConfigsentries. Its one or the other. > I use Radius NT 1.16 with SQL server but I have the same problem with 2.2> > thank you for your help!> > RADIUS NT:> =========> > Allocating Statement...> > SQL Statement: Select ra.RadAttributeID, Name, Data, Value, Type From> RadConfig> s rc, RadAttributes ra Where ra.RadAttributeID=rc.RadAttributeID AND> rc.AccountI> D=659> > Framed-Address = 207.139.145.150 (1)> Freeing SQL Statement...> Sending Ack of id 181 to cf8b9105 (cisco5-2.netc.net)> Framed-Address = 207.139.145.150> > Response Time: 230> > CISCO AS5200:> ============> > AAA/AUTHEN/START (0): port='Async36' list='' action=LOGIN service=PPP> AAA/AUTHEN/START (0): using "default" list> AAA/AUTHEN/START (397743627): Method=RADIUS> AAA/AUTHEN (397743627): status = GETPASS> AAA/AUTHEN/CONT (397743627): continue_login> AAA/AUTHEN (397743627): status = GETPASS> AAA/AUTHEN (397743627): Method=RADIUS> AAA/AUTHEN (397743627): status = PASS> AAA/AUTHOR/LCP: authorize LCP> AAA/AUTHOR (0): user='simardc'> AAA/AUTHOR (0): send AV service=ppp> AAA/AUTHOR (0): send AV protocol=lcp> AAA/AUTHOR (623322683): Method=RADIUS> AAA/AUTHOR (623322683): Post authorization status = ERROR> > Same login with Livingston RADIUS:> =================================> > %LINK-3-UPDOWN: Interface Async26, changed state to up> AAA/AUTHEN: create_user user='simardc' ruser='' port='Async26'> rem_addr='async/8> 718373' authen_type=2 service=3 priv=1> AAA/AUTHEN/START (0): port='Async26' list='' action=LOGIN service=PPP> AAA/AUTHEN/START (0): using "default" list> AAA/AUTHEN/START (511843121): Method=RADIUS> AAA/AUTHEN (511843121): status = GETPASS> AAA/AUTHEN/CONT (511843121): continue_login> AAA/AUTHEN (511843121): status = GETPASS> AAA/AUTHEN (511843121): Method=RADIUS> AAA/AUTHEN (511843121): status = PASS> AAA/AUTHOR/LCP: authorize LCP> AAA/AUTHOR (0): user='simardc'> AAA/AUTHOR (0): send AV service=ppp> AAA/AUTHOR (0): send AV protocol=lcp> AAA/AUTHOR (638391897): Method=RADIUS> AAA/AUTHOR (638391897): Post authorization status = PASS_REPL> AAA/AUTHOR/LCP: Async26: Processing AV routing*true> AAA/AUTHOR/FSM (0): can we start IPCP?> AAA/AUTHOR (0): user='simardc'> AAA/AUTHOR (0): send AV service=ppp> AAA/AUTHOR (0): send AV protocol=ip> AAA/AUTHOR (62202857): Method=RADIUS> AAA/AUTHOR (62202857): Post authorization status = PASS_REPL> AAA/AUTHOR/FSM: we can start IPCP for protocol 0x8021> AAA/AUTHOR/IPCP: Async26: start: her address 0.0.0.0, we want 207.139.145.169> AAA/AUTHOR/IPCP: Async26: Processing AV addr=207.139.145.150> AAA/AUTHOR/IPCP: Async26: Processing AV routing*true> AAA/AUTHOR/IPCP: Async26: set routing to TRUE> AAA/AUTHOR/IPCP: Async26: authorization succeeded> AAA/AUTHOR/IPCP: Async26: done: her address 0.0.0.0, we want 207.139.145.150> AAA/AUTHOR/IPCP: Async26: authorization succeeded> AAA/AUTHOR/IPCP: Async26: start: her address 0.0.0.0, we want 207.139.145.150> AAA/AUTHOR/IPCP: Async26: Processing AV addr=207.139.145.150> AAA/AUTHOR/IPCP: Async26: Processing AV routing*true-- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 19 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: iPass Support?From: Steve Spesard Date: Fri, 29 May 1998 14:52:11 -0600Just a thought,We run V2.2 and radius is not compatible, but IPASS will authenticatedirectly to a NT database. This allows us to run IPASS and still useour existing IEA Radius. I would have like to have done it throughradius, but this was a very viable solution for us.Steve SpesardPostman Account wrote:> Any idea as to when RadiusNT will support iPass? I noticed> there is future plans for this in the RadiusNT v2.5 docs...------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 20 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: Accounting ErrorsFrom: "Dale E. Reed Jr." Date: Fri, 29 May 1998 13:50:01 -0700John Rickabaugh wrote:> > Is it posted in the directory?I am putting a new distribution together with SNMP functionalitybuilt in. I will be moving it up there RSN. > Thanks,> > John> > -----Original Message-----> From: Dale E. Reed Jr. > To: radiusnt@iea-software.com > Date: Friday, May 29, 1998 3:11 AM> Subject: Re: Accounting Errors> > >John Rickabaugh wrote:> >>> >> Ever since the last beta, currently running the full zip downloaded today> >> from the ftp site, I have been unable to get the calls online to update.> >> Here is a snip from the accounting debug log:> >> >> >> SQL Statement: UPDATE CallsOnline Set> >> Username='info4you',AcctStatusType=1, CallDate=Now(), FramedAddress=NULL> >> WHERE NASIdentifier='DU' and NASPort=2 AND (DateAdd('s',> >> 0-i.AcctDelayTime, i.CallDate) >= CallDate OR CallDate IS NULL)> >>> >> ODBC Error:07001:-3010:> >> [Microsoft][ODBC Microsoft Access 97 Driver] Too few parameters.> Expected> >> 2.> >> >I shouldn't copy those triggers so exact. Alright. I fixed this problem> >in 2.5.116.> >> >--> >Dale E. Reed Jr. (daler@iea-software.com)> >_________________________________________________________________> > IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs> > Internet Solutions for Today | http://www.iea-software.com> >-- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 21 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: logfile not logging incorrect passwordsFrom: "Beverly Wise" Date: Fri, 29 May 1998 17:14:21 -0400I remember using the log file to see if someone was typing their passwordincorrectly. Now, it is not doing that. The last log I have is for 5/22/98when my NT machine had some problems. I restarted radius and all was ok.But since I have started, the logfile has not logged when the user wasdenied for either wrong user name or password. Is there some setting I ammissing?Beverly L. WiseSystems OperatorFalls City Net Serviceshttp://www.fallscity.net..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 22 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Disconnection of usersFrom: PSS Date: Fri, 29 May 1998 17:36:19 -0400We are using radiusNt with livingston portmasters and would like to know ifit is possible to automatically dsiconnect a user who has been connectedfor say 5 hours in certain user profiles. If so how does one do this.ThanksDamian ..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 23 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Default NASPortFrom: Michael Whisenant Date: Fri, 29 May 1998 17:19:02 -0500 I know the problem is that I need to add a default value for the NASPort.I have tried and tried to do this in SQL Enterprise Manager, yet every timeI enter the default value, stop and restart radius it never sees that andthen I get bombarded with these request. It is like this feature is aBorg.... "resistance is futile....". This is slowing down the response time and causing the Calls Online tablenot to update properly as sometimes the server will be trying to processthese request for several minutes before the other packets will get through.radrecv: Request from host cff25105 code=4, id=223, length=109 User-Name = "xxxxxxxxxxxxx" NAS-Identifier = 207.242.xxx.xxx Acct-Status-Type = Start Acct-Session-Id = "xxxxxxxxxxxxx39694" Acct-Delay-Time = 170280 Acct-Authentic = Local User-Service = Shell-User NAS-Port-Type = 5 Login-Service = Telnet Login-TCP-Port = 1519 Login-Host = 207.120.51.28 SQL Statement: INSERT INTO Calls (CallDate,UserName,NASIdentifier,AcctStatusTe,AcctSessionId,AcctDelayTime,UserService,NASPortType) VALUES(GetDate(),'xxxxxxxxxxxxx','207.242.xxx.xxx',1,'xxxxxxxxxxx',170280,6,5)ODBC Error:23000:233: [Microsoft][ODBC SQL Server Driver][SQL Server]The column NASPort in table Cas may not be null.Resp Time: 170 Auth: 0/0 -> 0 Acct: 1940/3110/42 -> 5092Michael J. WhisenantVice-President, OperationsAIRnet Internet Services, Inc.ph: (256) 704-4692 fax: (256) 704-2329..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 24 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: Error 650 on dial upFrom: "Josh Hillman" Date: Fri, 29 May 1998 18:23:21 -0400From: Lorri Thomas We are running Radius (ver. 2.02.41) on an NT server for authenticationonly. My customers (and even myself on occasion) get an error 650 whendialing in. I searched MS KB & it says to disable PPTP, however, we don'teven have that installed. Has anyone experienced this? I found nothing inthe archives.Are you tracking accounting STOP records at all? If so, check out thedisconnect causes. What type of NAS are you using? The error messagesthat come back from Windows aren't nearly as descriptive or conclusive aswhat the NAS reports in the accounting STOP records.Josh Hillmanhillman@talstar.com..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 25 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: Default NASPortFrom: Brian Lube Date: Fri, 29 May 1998 18:31:18 -0400Make sure that you have the default value for NASPort in the _calls_ table. I personally set it to (9999) in order for it to have a default. Thisshould clear this up quite nicely from my experience.Brian LubeMPInetAt 05:19 PM 5/29/98 -0500, you wrote:> I know the problem is that I need to add a default value for the NASPort.>I have tried and tried to do this in SQL Enterprise Manager, yet every time>I enter the default value, stop and restart radius it never sees that and>then I get bombarded with these request. It is like this feature is a>Borg.... "resistance is futile....".>> This is slowing down the response time and causing the Calls Online table>not to update properly as sometimes the server will be trying to process>these request for several minutes before the other packets will get through.>>>radrecv: Request from host cff25105 code=4, id=223, length=109> User-Name = "xxxxxxxxxxxxx"> NAS-Identifier = 207.242.xxx.xxx> Acct-Status-Type = Start> Acct-Session-Id = "xxxxxxxxxxxxx39694"> Acct-Delay-Time = 170280> Acct-Authentic = Local> User-Service = Shell-User> NAS-Port-Type = 5> Login-Service = Telnet> Login-TCP-Port = 1519> Login-Host = 207.120.51.28>> SQL Statement: INSERT INTO Calls(CallDate,UserName,NASIdentifier,AcctStatusT>e,AcctSessionId,AcctDelayTime,UserService,NASPortType) VALUES>(GetDate(),'xxxxxxxxxxxxx','207.242.xxx.xxx',1,'xxxxxxxxxxx',170280,6,5)>>ODBC Error:23000:233:> [Microsoft][ODBC SQL Server Driver][SQL Server]The column NASPort intable Ca>s may not be null.>>>Resp Time: 170 Auth: 0/0 -> 0 Acct: 1940/3110/42 -> 5092>Michael J. Whisenant>Vice-President, Operations>AIRnet Internet Services, Inc.>ph: (256) 704-4692 fax: (256) 704-2329> ..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 26 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: PPTP and RadiusNTFrom: Michael Whisenant Date: Fri, 29 May 1998 17:29:40 -0500 I want to issue a value for certain users upon dialin to set their framedprotocol to PPTP and their default host to a particular value. ie PPTP atthe dial-in. This would prevent a user from having to configure a PPTPadapter and make many companies I deal with happier. I use the USR TCchassis. Does anyone else do this? I am running radiusnt 2.5 and 2.41 Ido not have these values loaded in as options, so if available, I wouldappreciate detailed information as to how to load them into the SQLdatabase and how to implement. Also for reference only does anyone chargeany additional for offering the PPTP in the chassis?Michael J. WhisenantVice-President, OperationsAIRnet Internet Services, Inc.ph: (256) 704-4692 fax: (256) 704-2329..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 27 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: RE: radius upgradeFrom: eric@valleynetworking.com (Eric Cowperthwaite)Date: Fri, 29 May 1998 15:49:30 -0700Dale,I don't see a new database in the ftp site. Am I missingsomething? The two that I see there look like the sameones that have always been there.Eric CowperthwaiteThe basic database layout for 2.5 hasn't changed from an MS Access perspective. You might want to look at the radius97.mdb databasethough. There are some new tables for advanced features.-- ..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 28 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: Default NASPortFrom: Michael Whisenant Date: Fri, 29 May 1998 18:07:09 -0500Brian, We have talked about this before. Here is what I have done. I went intoEnterprise Manager to the Database-table-calls and in the Default forNASPort I typed 9999 and exited out. It asked to save, which I saidyes.... then I went back and the default shows (9999). I have threeentries for the last month (3 out of probable 1000 logins) and the rest arejust running rampant.... I physically see the default is set, yet I wonderis there a script that can be run that reports the default value? If so Iwould like to run this and make sure. At 06:31 PM 5/29/98 -0400, you wrote:>Make sure that you have the default value for NASPort in the _calls_ table.> I personally set it to (9999) in order for it to have a default. This>should clear this up quite nicely from my experience.>>Brian Lube>MPInet>>At 05:19 PM 5/29/98 -0500, you wrote:>> I know the problem is that I need to add a default value for the NASPort.>>I have tried and tried to do this in SQL Enterprise Manager, yet every time>>I enter the default value, stop and restart radius it never sees that and>>then I get bombarded with these request. It is like this feature is a>>Borg.... "resistance is futile....".>>>> This is slowing down the response time and causing the Calls Online table>>not to update properly as sometimes the server will be trying to process>>these request for several minutes before the other packets will getthrough.>>>>>>radrecv: Request from host cff25105 code=4, id=223, length=109>> User-Name = "xxxxxxxxxxxxx">> NAS-Identifier = 207.242.xxx.xxx>> Acct-Status-Type = Start>> Acct-Session-Id = "xxxxxxxxxxxxx39694">> Acct-Delay-Time = 170280>> Acct-Authentic = Local>> User-Service = Shell-User>> NAS-Port-Type = 5>> Login-Service = Telnet>> Login-TCP-Port = 1519>> Login-Host = 207.120.51.28>>>> SQL Statement: INSERT INTO Calls>(CallDate,UserName,NASIdentifier,AcctStatusT>>e,AcctSessionId,AcctDelayTime,UserService,NASPortType) VALUES>>(GetDate(),'xxxxxxxxxxxxx','207.242.xxx.xxx',1,'xxxxxxxxxxx',170280,6,5)>>>>ODBC Error:23000:233:>> [Microsoft][ODBC SQL Server Driver][SQL Server]The column NASPort in>table Ca>>s may not be null.>>>>>>Resp Time: 170 Auth: 0/0 -> 0 Acct: 1940/3110/42 -> 5092>>Michael J. Whisenant>>Vice-President, Operations>>AIRnet Internet Services, Inc.>>ph: (256) 704-4692 fax: (256) 704-2329>> > Michael J. WhisenantVice-President, OperationsAIRnet Internet Services, Inc.ph: (256) 704-4692 fax: (256) 704-2329..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 29 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: radius upgradeFrom: "Dale E. Reed Jr." Date: Fri, 29 May 1998 16:52:16 -0700Eric Cowperthwaite wrote:> > I don't see a new database in the ftp site. Am I missing> something? The two that I see there look like the same> ones that have always been there.The radius97.mdb that is included in the full RadiusNT 2.5distribution in the database I am referring to. I do not thinkthat it is on the ftp site seperately. > Eric Cowperthwaite> > The> basic database layout for 2.5 hasn't changed from an MS Access> perspective. You might want to look at the radius97.mdb database> though. There are some new tables for advanced features.> > ---- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 30 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: Disconnection of usersFrom: "Dale E. Reed Jr." Date: Fri, 29 May 1998 16:58:36 -0700PSS wrote:> > We are using radiusNt with livingston portmasters and would like to know if> it is possible to automatically dsiconnect a user who has been connected> for say 5 hours in certain user profiles.> > If so how does one do this.What you are looking for is the Session-Timeout value. You need toinclude that as one of the attributes for the customer (or a defaultor an account type for the customer to be assigned).-- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 31 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Emerald Mailing ListFrom: Glen Harvy Date: Sat, 30 May 1998 11:06:23 +1000Hi,Does the above mailing list exist?I just tried to subscribe as per the instructions at the website and wasinformed the list wasn't known.Glen.--------------------------------------------------------------------AQUARIUS Communications for all your Internet<>Fidonet needs <>Full ISP services<>FrontDoor Commercial<>TransX Internet/FTSC Mailervoice(02)9907-9295<>fax(02)9948-1998<>bbs(02)9948-9122<>3:714/930http://www.aquarius.com.au <> mailto:sales@aquarius.com.au ..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 32 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Installing EmeraldFrom: Glen Harvy Date: Sat, 30 May 1998 11:15:07 +1000Hi,I'm trying to evaluate Emerald. The installation instructions page locationat the website reports a Error 404.Running the install program on the SQL Server indicated that whilst itthought there was insufficient disk space, that it nevertheless installed OK.I ran Emerald Administrator to create the database as per instructions butI got an error box saying the "insttabs.sql" file couldn't be found. "Checkyour emerald.ini SQLPath= Setting" There is no emerald.ini file anywhere onmy HD.I then read the install.txt file [that can only be read after it is createdduring the install process] and it tells me to install the client first.I un installed emerald and then re-installed only this time I tried tocheck only the client box. This was disabled so I had to install the lotagain.Is there a separate "Emerald Client" installation / distribution?Any help will be appreciated.Glen.--------------------------------------------------------------------AQUARIUS Communications for all your Internet<>Fidonet needs <>Full ISP services<>FrontDoor Commercial<>TransX Internet/FTSC Mailervoice(02)9907-9295<>fax(02)9948-1998<>bbs(02)9948-9122<>3:714/930http://www.aquarius.com.au <> mailto:sales@aquarius.com.au ..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 33 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: ANNOUNCEMENT: RadiusNT 2.5 ReleasesFrom: Sheryl Stover Date: Fri, 29 May 1998 18:34:52 -0700 (PDT)INTRODUCING RADIUSNT 2.5!IEA Software is proud to announce the official release of RadiusNTVersion 2.5. In addition to the RadiusNT Standard, we are alsopleased to introduce RadiusNT ENTERPRISE Edition. All editions of RadiusNT 2.5 include the following new enhancements: * Dual thread design separates authentication and accountingprocesses, improving performance.* Debugging information can be logged to a file while RadiusNT isrunning as a service under Windows NT.* Spaces can be trimmed from both the front and rear of user names forauthentication and accounting.* Trims a "domain\" entry from DUN authentication attempts against ausers file, or* When authenticating against the NT SAM, uses the "domain\" sectionto find the correct domain in which to authenticate.* RadiusNT Administrator's users and clients file editing options havebeen added.* Promiscuous mode has been added to allow requests from any clientwith the correct global secret.* Documentation has been updated to include common problems andfrequently asked questions.The following ODBC features have been enhanced: * Separate ODBC DSN settings are allowed for the authentication andaccounting threads (as well as debug log files). * New advanced Server/Port Access controls, including time of dayrestrictions.* ODBC Support for Sybase and Oracle SQL databases has been added. * DNIS based authentication restrictions. * Now supports the use of stored procedures with SQL Server forenhanced flexibility and more configuration of database behavior.* Improved Manual Update for Concurrency control for out of orderaccounting packets.*********************************************************************RadiusNT ENTERPRISE Edition also includes the following new features:********************************************************************** SNMP statistics are available for authentication and accountingrequests according to the RADIUS SERVER MIB proposal.* Real-Time SNMP concurrency verification to prevent invalid userrejection when calls-online is not correct.* User based proxy by forwarding authentication/accounting requests toanother RADIUS server based on the domain of the username. * Server based proxy by forwarding authentication/accounting requeststo another RADIUS server based on the port or server the requestoriginates from.* Ability to configure a specific set of RADIUS attributes for remoteproxy authenticated users (overriding the proxy returned set). Modifications and Corrections from previous versions of RadiusNT: * The ports now correctly default to 1645/1646 if the services filehas not been updated.* Username lengths of up to 128 characters are supported. * Password lengths of up to 128 characters are supported. * RadiusNT by default will only allow the correct type of request onthe authentication and accounting ports, respectively. Therefore if anaccounting request is received on the authentication port, it isdropped/ignored. There is a flag to disable this option.* Support of a NULL MasterAccounts ExpireDate (non-expiring account).Current owners of RadiusNT 2.x may upgrade to RadiusNT 2.5 Standard atno cost. The new version can be downloaded fromftp.iea-software.com/radiusnt, and running the installation willautomatically use your existing database and license key. There is anSQL update script also located on the FTP site for those customersusing SQL and ODBC mode.Current owners of the Emerald Internet Management Suite 2.x canupgrade to the RadiusNT Enterprise Edition at no cost. Downloadingand installing the new 2.5 version in place of your old version ofRadiusNT will pick up your Emerald key and enable the Enterprisefunctions. If you have not yet purchased RadiusNT, current pricing on the website will be valid for RadiusNT 2.5 Standard until June 8, 1998.After June 8, the price of RadiusNT 2.5 Standard will be US$895.00.RadiusNT 2.5 Enterprise Edition is US$1,395.00. The cost to upgrade toRadiusNT 2.5 Enterprise from a previous version of RadiusNT 2.x isUS$550.00.Any questions regarding new features, licensing, or upgrading shouldbe directed to the e-mail address "sales@iea-software.com". You canalso contact our sales department at 509-444-2455 ext. 51.--Sheryl D. Stover sds@iea-software.comIEA Software Sales http://www.iea-software.com509.444.2455 x 51 (voice) Emerald ISP Management Suite509.624.9903 (fax) RadiusNT..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 34 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: Slightly OT: Portmaster questionFrom: "Danny Sinang" Date: Sat, 30 May 1998 09:40:20 +0800Hey, that's great !!Just curious though - is there also a default/any mode in ODBC ?- Danny-----Original Message-----From: Dale E. Reed Jr. To: radiusnt@iea-software.com Date: Saturday, May 30, 1998 3:38 AMSubject: Re: Slightly OT: Portmaster question>Danny Sinang wrote:>>>> I am considering buying a PM-2, but I need to know some facts first.>>>> Does a PM-2 have an "Accept-All-Logins" feature ? I might need thisfeature>> whenever I'm doing some maintenance on my ODBC database.>>No, but RadiusNT does (DEFAULT/ANY combination in text mode).>>-->Dale E. Reed Jr. (daler@iea-software.com)>_________________________________________________________________> IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs> Internet Solutions for Today | http://www.iea-software.com..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 35 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: Slightly OT: Portmaster questionFrom: "Dale E. Reed Jr." Date: Fri, 29 May 1998 18:56:45 -0700Danny Sinang wrote:> > Hey, that's great !!> > Just curious though - is there also a default/any mode in ODBC ?No. The "ANY" password works for user entries in the database, buthere is not a default user in ODBC mode (unless you are in both).> - Danny> > -----Original Message-----> From: Dale E. Reed Jr. > To: radiusnt@iea-software.com > Date: Saturday, May 30, 1998 3:38 AM> Subject: Re: Slightly OT: Portmaster question> > >Danny Sinang wrote:> >>> >> I am considering buying a PM-2, but I need to know some facts first.> >>> >> Does a PM-2 have an "Accept-All-Logins" feature ? I might need this> feature> >> whenever I'm doing some maintenance on my ODBC database.> >> >No, but RadiusNT does (DEFAULT/ANY combination in text mode).-- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 36 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Fw: ANNOUNCEMENT: RadiusNT 2.5 ReleasesFrom: "WebWiz" Date: Fri, 29 May 1998 22:50:29 -0400I'll be damned....all this wait for Enterprise Edtion and no NTMailAuthenticator DLL as promised.Why am I not surprised......and the cost is unbelieveable.Thanks but no thanksWW-----Original Message-----From: Sheryl Stover To: radiusnt@iea-software.com Cc: emerald@iea-software.com ;ntisp@iea-software.com Date: Friday, May 29, 1998 9:37 PMSubject: ANNOUNCEMENT: RadiusNT 2.5 Releases>INTRODUCING RADIUSNT 2.5!>>IEA Software is proud to announce the official release of RadiusNT>Version 2.5. In addition to the RadiusNT Standard, we are also>pleased to introduce RadiusNT ENTERPRISE Edition.>>>>All editions of RadiusNT 2.5 include the following new enhancements:>>* Dual thread design separates authentication and accounting>processes, improving performance.>>* Debugging information can be logged to a file while RadiusNT is>running as a service under Windows NT.>>* Spaces can be trimmed from both the front and rear of user names for>authentication and accounting.>>* Trims a "domain\" entry from DUN authentication attempts against a>users file, or>>* When authenticating against the NT SAM, uses the "domain\" section>to find the correct domain in which to authenticate.>>* RadiusNT Administrator's users and clients file editing options have>been added.>>* Promiscuous mode has been added to allow requests from any client>with the correct global secret.>>* Documentation has been updated to include common problems and>frequently asked questions.>>>The following ODBC features have been enhanced:>>* Separate ODBC DSN settings are allowed for the authentication and>accounting threads (as well as debug log files).>>* New advanced Server/Port Access controls, including time of day>restrictions.>>* ODBC Support for Sybase and Oracle SQL databases has been added.>>* DNIS based authentication restrictions.>>* Now supports the use of stored procedures with SQL Server for>enhanced flexibility and more configuration of database behavior.>>* Improved Manual Update for Concurrency control for out of order>accounting packets.>>>>*********************************************************************>RadiusNT ENTERPRISE Edition also includes the following new features:>*********************************************************************>>* SNMP statistics are available for authentication and accounting>requests according to the RADIUS SERVER MIB proposal.>>* Real-Time SNMP concurrency verification to prevent invalid user>rejection when calls-online is not correct.>>* User based proxy by forwarding authentication/accounting requests to>another RADIUS server based on the domain of the username.>>* Server based proxy by forwarding authentication/accounting requests>to another RADIUS server based on the port or server the request>originates from.>>* Ability to configure a specific set of RADIUS attributes for remote>proxy authenticated users (overriding the proxy returned set).>>>>Modifications and Corrections from previous versions of RadiusNT:>>* The ports now correctly default to 1645/1646 if the services file>has not been updated.>>* Username lengths of up to 128 characters are supported.>>* Password lengths of up to 128 characters are supported.>>* RadiusNT by default will only allow the correct type of request on>the authentication and accounting ports, respectively. Therefore if an>accounting request is received on the authentication port, it is>dropped/ignored. There is a flag to disable this option.>>* Support of a NULL MasterAccounts ExpireDate (non-expiring account).>>>>>Current owners of RadiusNT 2.x may upgrade to RadiusNT 2.5 Standard at>no cost. The new version can be downloaded from>ftp.iea-software.com/radiusnt, and running the installation will>automatically use your existing database and license key. There is an>SQL update script also located on the FTP site for those customers>using SQL and ODBC mode.>>Current owners of the Emerald Internet Management Suite 2.x can>upgrade to the RadiusNT Enterprise Edition at no cost. Downloading>and installing the new 2.5 version in place of your old version of>RadiusNT will pick up your Emerald key and enable the Enterprise>functions.>>If you have not yet purchased RadiusNT, current pricing on the web>site will be valid for RadiusNT 2.5 Standard until June 8, 1998.>After June 8, the price of RadiusNT 2.5 Standard will be US$895.00.>>RadiusNT 2.5 Enterprise Edition is US$1,395.00. The cost to upgrade to>RadiusNT 2.5 Enterprise from a previous version of RadiusNT 2.x is>US$550.00.>>Any questions regarding new features, licensing, or upgrading should>be directed to the e-mail address "sales@iea-software.com". You can>also contact our sales department at 509-444-2455 ext. 51.>>-->Sheryl D. Stover sds@iea-software.com>IEA Software Sales http://www.iea-software.com>509.444.2455 x 51 (voice) Emerald ISP Management Suite>509.624.9903 (fax) RadiusNT>>>..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 37 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: Emerald Mailing ListFrom: "Dale E. Reed Jr." Date: Fri, 29 May 1998 19:49:22 -0700Glen Harvy wrote:> > Hi,> > Does the above mailing list exist?> > I just tried to subscribe as per the instructions at the website and was> informed the list wasn't known.Send the request to emerald-request@iea-software.com. I'm in the processof updating the portions of the website with the correct information.-- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 38 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: Emerald Mailing ListFrom: "Dale E. Reed Jr." Date: Fri, 29 May 1998 19:49:22 -0700Glen Harvy wrote:> > Hi,> > Does the above mailing list exist?> > I just tried to subscribe as per the instructions at the website and was> informed the list wasn't known.Send the request to emerald-request@iea-software.com. I'm in the processof updating the portions of the website with the correct information.-- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 39 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: Fw: ANNOUNCEMENT: RadiusNT 2.5 ReleasesFrom: "Dale E. Reed Jr." Date: Fri, 29 May 1998 19:58:27 -0700WebWiz wrote:> > I'll be damned....all this wait for Enterprise Edtion and no NTMail> Authenticator DLL as promised.Actually, the DLL is not in the announcement, but the emerauth DLL willwork with the Enterprise key. I haven't put the Emerauth DLL togetheroutside of the Emerald 2.5 distribution but anyone with an Enterpriselicense can send a request to me while I am working on it and I willsend it to them *as promised*. Don't jump to conclusions to fast. :(> Why am I not surprised......and the cost is unbelieveable.Yeah, we are suprised that we stay at 1/2 the price of ourcompetitors which are typically $2000 plus dollars. -- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 40 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: RadiusNT 2.5From: "Lamar Townsend" Date: Fri, 29 May 1998 23:25:08 -0500Dale, I downloaded the latest and greatest Radius 2.5 tonight right afteryou uploaded it (Kurt and I were having trouble downloading it so he calledyou about it) and during the installation everything went smoothe. But,after the install I went to install it as a service since I have beenrunning it in -x15 mode for the past few weeks and it lost ALL of thesettings in Radius Administrator after I told it to install service. I donot know if this is a problem or just one of those things but it just kindaseemed weird and I figured I would post it to the list. Also, can I runcall consolidation now that I am running Emerald 2.1.11 and RadiusNT 2.5?Lamar TownsendMicrogear Computers & Microgear.Netlamar@microgear.netlamar@shuttle.com..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 41 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: AcctSessionTime questionFrom: "Danny Sinang" Date: Sat, 30 May 1998 12:53:11 +0800Dale,Is AcctSessionTime supposed to be exactly equal to ( Logoff Time - LogonTime ) ?RRAS's Hotfix 2 was just releasedftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP3/rras20-fix/ ) and it now returns the AcctSessionTime, but it issometimes over by 2 seconds ( sometimes 3 seconds ) as compared to thedifference between Logoff Time and Logon Time.Do you think its a RRAS bug ? Do other NASes return accurateAcctSessionTime's ?Danny SinangPresident - Uplink Technologies, Inc.( Provider of "Clean" Internet Access )www.uplink.com.phdanny@uplink.com.ph..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 42 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: RadiusNT 2.5From: "Dale E. Reed Jr." Date: Fri, 29 May 1998 21:51:59 -0700Lamar Townsend wrote:> > I downloaded the latest and greatest Radius 2.5 tonight right after> you uploaded it (Kurt and I were having trouble downloading it so he called> you about it) and during the installation everything went smoothe. But,> after the install I went to install it as a service since I have been> running it in -x15 mode for the past few weeks and it lost ALL of the> settings in Radius Administrator after I told it to install service. I do> not know if this is a problem or just one of those things but it just kinda> seemed weird and I figured I would post it to the list. Also, can I run> call consolidation now that I am running Emerald 2.1.11 and RadiusNT 2.5?Did you previously have it installed as a service? It should not havelet you if so. I believe the only setting that RadiusNT itself setswhen you install it as a service is mode, but I thought we removed eventhat. Did you possibly do a -remove on 2.2 or 2.5? That might causethe problems you are referencing. There is no need to do a -installfor the service unless you install 2.5 into another directory.-- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 43 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: server portsFrom: iml@interconnect.netDate: Fri, 29 May 1998 23:55:37 -0500Hey Dale I see this mentioned in the 2.5 Radius list* New advanced Server/Port Access controls, including time of dayrestrictions.I sent message earlier about setting port types you mentioned in 2.5(i.e. ISDN and analog users)By the docs in Chapter 9 I assume this is the DNIS function?Also, how do you work with the time of day restrictions? I didn't seeany mention in the docs about time of day restrictions. Will all thiswork with Emerald we have been wanting to offer a daytime only accountfor sometime now...------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 44 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: Installing EmeraldFrom: "Dale E. Reed Jr." Date: Fri, 29 May 1998 21:54:57 -0700Glen Harvy wrote:> > Running the install program on the SQL Server indicated that whilst it> thought there was insufficient disk space, that it nevertheless installed OK.These is only a problem is there is more tha 2gb free of diskspace and canbe ignored. > I ran Emerald Administrator to create the database as per instructions but> I got an error box saying the "insttabs.sql" file couldn't be found. "Check> your emerald.ini SQLPath= Setting" There is no emerald.ini file anywhere on> my HD.Clear the SQL Path text box at the bottom of the screen and it shouldcreate fine. > Is there a separate "Emerald Client" installation / distribution?No. I believe what you probably read was that you have to installthe SQL client, then Emerald.-- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 45 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: iPass Support?From: "Dale E. Reed Jr." Date: Fri, 29 May 1998 22:00:00 -0700Postman Account wrote:> > Any idea as to when RadiusNT will support iPass? I noticed> there is future plans for this in the RadiusNT v2.5 docs.As I have noted several times, the hooks are in 2.5, its just a matterof getting iPass to finish the DLL that we originally agreeded upon.We are at the mercy of them for the support.-- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 46 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: AcctSessionTime questionFrom: "Dale E. Reed Jr." Date: Fri, 29 May 1998 22:51:25 -0700Danny Sinang wrote:> > Dale,> > Is AcctSessionTime supposed to be exactly equal to ( Logoff Time - Logon> Time ) ?No. But it should be really close to:(LogOffTime-AcctDelayTime)-(LogonTime=AcctDelayTime)AcctSessionTime is authorative from the NAS and is not timestampcalculated.> RRAS's Hotfix 2 was just released> > ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-po> stSP3/rras20-fix/ ) and it now returns the AcctSessionTime, but it is> sometimes over by 2 seconds ( sometimes 3 seconds ) as compared to the> difference between Logoff Time and Logon Time.Thats really not a big deal. RADIUS accounting packets can backup and if you are storing to an Access database, thetime for the record to get from RRAS, to RadiusNT to Acceess(Access being the slowest) could easily be a second or two. > Do you think its a RRAS bug ? Do other NASes return accurate> AcctSessionTime's ?I think you are worrying to much about it. :)-- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 47 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: AcctSessionTime questionFrom: "Danny Sinang" Date: Sat, 30 May 1998 14:16:11 +0800Dale,Yeah, I might be worrying too much, but my users might find it odd if Iovercharge them. These few seconds could add up to a substantial amount oftime for which they might get billed extra.Do you mean I only have to specify an AcctDelayTime in RadiusNT to subtract2 or 3 seconds from the AcctSessionTime ?Or is the NAS supposed to return AcctDelayTime ?- Danny-----Original Message-----From: Dale E. Reed Jr. To: radiusnt@iea-software.com Date: Saturday, May 30, 1998 2:00 PMSubject: Re: AcctSessionTime question>Danny Sinang wrote:>>>> Dale,>>>> Is AcctSessionTime supposed to be exactly equal to ( Logoff Time - Logon>> Time ) ?>>No. But it should be really close to:>>(LogOffTime-AcctDelayTime)-(LogonTime=AcctDelayTime)>>AcctSessionTime is authorative from the NAS and is not timestamp>calculated.>>> RRAS's Hotfix 2 was just released>>>>ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-po>> stSP3/rras20-fix/ ) and it now returns the AcctSessionTime, but it is>> sometimes over by 2 seconds ( sometimes 3 seconds ) as compared to the>> difference between Logoff Time and Logon Time.>>Thats really not a big deal. RADIUS accounting packets can>backup and if you are storing to an Access database, the>time for the record to get from RRAS, to RadiusNT to Acceess>(Access being the slowest) could easily be a second or two.>>> Do you think its a RRAS bug ? Do other NASes return accurate>> AcctSessionTime's ?>>I think you are worrying to much about it. :)>>-->Dale E. Reed Jr. (daler@iea-software.com)>_________________________________________________________________> IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs> Internet Solutions for Today | http://www.iea-software.com..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 48 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: UUCP type cutomersFrom: "Dale E. Reed Jr." Date: Fri, 29 May 1998 23:19:25 -0700Lawrence Watkins Work wrote:> > We have a number of UUCP customers that are currently not> dialing into our Portmster3s. We are running RadiusNT2.5 on> NT4 SP3 +hotfixes. Was wondering if anyone has done this> using RadiusNT to authenticate the users. Any information> would be helpful.A long time ago, someone explained how to do this on theLivingston list. Basically, it requires a unix box runningUUCP, and the daemon listening on a port. Then you specifythat machine and port in the Login-host and Lost-Host-portattributes for the UUCP user.I'm not sure if a special version of the UUCP daemon was reqiredor not, though.-- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 49 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: AcctSessionTime questionFrom: "Dale E. Reed Jr." Date: Fri, 29 May 1998 23:44:07 -0700Danny Sinang wrote:> > Yeah, I might be worrying too much, but my users might find it odd if I> overcharge them. These few seconds could add up to a substantial amount of> time for which they might get billed extra.Do you bill by the second or minute?> Do you mean I only have to specify an AcctDelayTime in RadiusNT to subtract> 2 or 3 seconds from the AcctSessionTime ?> > Or is the NAS supposed to return AcctDelayTime ?The NAS does.-- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com