[RadiusNT Digest]

radiusnt-digest-request@iea-software.com
Tue, 23 Jun 1998 00:00:40 -0700

Message 1: SOS : Reject ID 6, CHAP
from "Kevin Tarn" <kevin_tarn@lexicomp.net>

Message 2: Re: SOS : Reject ID 6, CHAP
from "Graeme Slogrove" <graeme@fdd.net>

Message 3: Re: SOS : Reject ID 6, CHAP
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 4: RE: Problems with upgrade!
from "webmaster" <webmaster@skyquest.net>

Message 5: Re: Problems with upgrade!
from "Dale E. Reed Jr." <daler@iea-software.com>

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 1 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: SOS : Reject ID 6, CHAP
From: "Kevin Tarn" <kevin_tarn@lexicomp.net>
Date: Mon, 22 Jun 1998 16:35:41 +0800

This is a multi-part message in MIME format.

------=_NextPart_000_0005_01BD9DFB.CBCE02B0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Anyone can help, please.

I got the following log message when a user "jack" dial in. Does anyone =
can explain what it is ?
Thanks.

Kevin Tarn

-------------------------------------------------------------------

Resp Time: 30 Auth: 0/0 -> 1 Acct: 0/0/0 -> 0
radrecv: Request from host d2d0e403 code=3D1, id=3D6, length=3D68

User-Name =3D "jack"
Received unknown attribute 60
Challenge-Response =3D 70206764
Ascend-MPP-Idle-Percent =3D 1479218676
rad_authenticate_ODBC()

Challenge-Response =3D 70206764

SQL Statement: Select DateDiff('n', Now, DateAdd('d', ma.Extension+1, =
maExpireDate)), DateDiff('n', Now, DateAdd('d', ma.Extension+1, =
maExpireDate)), sa.AccountID, sa.AccountType, sa.Password, sa.Login, =
sa.Shell From MasterAccounts ma, SubAccounts sa Where =
(sa.Login=3D'jack' or sa.Shell=3D'jack') AND =
ma.CustomerID=3Dsa.CustomerID and sa.Active<>0 and ma.Active<>0

CHAP Password Comparison failure.
Sending Reject of id 6 to d2d0e403 (server3)

SQL Statement: INSERT INTO RadLogs(RadLogMsgID, LogDate, Username, =
Data) VALUES (11, Now, 'jack', '*CHAP*')

User: jack Bad Password

User: jack Bad Password

Resp Time: 50 Auth: 0/1 -> 2 Acct: 0/0/0 -> 0

------=_NextPart_000_0005_01BD9DFB.CBCE02B0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD W3 HTML//EN">

Anyone can help, =please.
 
 
I got the following log message when =a user=20"jack" dial in. Does anyone can explain what it is =?
Thanks.
 
 
Kevin Tarn
 
----------------------------------------------------------------=---
 
 
Resp Time: 30   Auth: 0/0 =->=201  Acct: 0/0/0 -> 0
radrecv: Request from host d2d0e403 =code=3D1, id=3D6,=20length=3D68
 
    User-Name =3D=20"jack"
Received unknown attribute 60
   =20Challenge-Response =3D 70206764
    =Ascend-MPP-Idle-Percent =3D=201479218676
rad_authenticate_ODBC()
 
    =Challenge-Response =3D=2070206764
 
 SQL Statement: Select =DateDiff('n', Now,=20DateAdd('d', ma.Extension+1, maExpireDate)), DateDiff('n', Now, =DateAdd('d',=20ma.Extension+1, maExpireDate)), sa.AccountID, sa.AccountType, =sa.Password,=20sa.Login, sa.Shell From MasterAccounts ma, SubAccounts sa  Where=20(sa.Login=3D'jack' or sa.Shell=3D'jack') AND =ma.CustomerID=3Dsa.CustomerID and=20sa.Active<>0 and ma.Active<>0
 
 CHAP Password Comparison=20failure.
Sending Reject of id 6 to d2d0e403 (server3)
 

 SQL Statement: INSERT INTO =RadLogs(RadLogMsgID, LogDate, Username, Data)  VALUES (11, Now, ='jack',=20'*CHAP*')
 
User: jack Bad Password
 
User: jack Bad Password
 
Resp Time: 50   Auth: 0/1 =->=202  Acct: 0/0/0 -> 0
------=_NextPart_000_0005_01BD9DFB.CBCE02B0--..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 2 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: SOS : Reject ID 6, CHAPFrom: "Graeme Slogrove" Date: Mon, 22 Jun 1998 11:00:30 +0200On 22 Jun 98 at 16:35, Kevin Tarn wrote:> I got the following log message when a user "jack" dial in. Does> anyone can explain what it is ? Thanks.Jack is authenticating with CHAP - perhaps you haven't enabled CHAP on the NAS ?Regards, Graeme---Graeme Slogrove, BSc (Eng) Elec (Wits)FastLight Data Distribution cchttp://www.fdd.netTel: +27-(0)11-706-0212 Fax: +27-(0)11-706-0812..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 3 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: SOS : Reject ID 6, CHAPFrom: "Dale E. Reed Jr." Date: Mon, 22 Jun 1998 13:06:00 -0700> Kevin Tarn wrote:> > I got the following log message when a user "jack" dial in. Does> anyone can explain what it is ?> radrecv: Request from host d2d0e403 code=1, id=6, length=68> > User-Name = "jack"> Received unknown attribute 60> Challenge-Response = 70206764> Ascend-MPP-Idle-Percent = 1479218676This receive list is really bizzare. Check the type of yourChallenge-Response attribute in the RadAttrbiutes table. It shouldbe a string (0) and it looks like it might be an integer (1). -- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 4 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: RE: Problems with upgrade!From: "webmaster" Date: Tue, 23 Jun 1998 00:21:58 -0400When I run RadiusNT in debug mode (service stopped), I get the followingerrors at the DOS Prompt:0) EncryptPasswords: 01) IgnoreCase: 02) AuthPort: 16453) ReqAcctAuth: 04) AcctPort: 16465) Mode: 06) Options: 07) Debug: 08) ODBCDatasource: Radius9) DataDirectory: c:\radius10) AcctDirectory: c:\radius\accounting11) UsersFile: users12) Username:13) Password:14) CompanyName:15) License:16) TrimName: 017) AllowMalformed: 018) Proxy: 019) LogFile:20) AcctLogFile:21) AcctODBCDatasource:22) AcctUsername:23) AcctPassword:24) IPAddress: ###.###.###.##Param: Debug Level: 15Initializing Winsock... Client:###.###.###.##:###.###.###.##:????????: Loading users... User:ace User:????? User:????? User:????? User:????? User:????? User:????? User:????? User:????? User:????? User:????? User:????? User:????? User:????? User:????? User:????? User:????? User:????? User:????? User:????? User:????? User:????? User:abcd24 users loaded!RadiusNT Enterprise Initialized...radrecv: Request from host cd98a421 code=1, id=240, length=105 User-Name = "abcd" Challenge-Response = "\001\360V+\306S/y\2423[\237u\315C+E" NAS-IP-Address = ###.###.###.## NAS-Port = 20102 NAS-Port-Type = AsyncRequest from ###.###.###.## - Malformed PacketResp Time: 761 Auth: 0/0 -> 0 Acct: 0/0/0 -> 0radrecv: Request from host cd98a421 code=4, id=127, length=149 NAS-IP-Address = ###.###.###.## NAS-Port = 20102 NAS-Port-Type = Async Acct-Status-Type = Stop Acct-Delay-Time = 0 Acct-Session-Id = "266772490" Ascend-Disconnect-Cause = 185 Ascend-Connect-Progress = 65Received unknown attribute 255 Ascend-Data-Rate = 28800 Ascend-PreSession-Time = 30 Ascend-Pre-Input-Octets = 326 Ascend-Pre-Output-Octets = 197 Ascend-Pre-Input-Packets = 6 Ascend-Pre-Output-Packets = 7Received unknown attribute 120Received unknown attribute 121 Caller-Id = "###########" NAS-Port-DNIS = "#########"Sending Accounting Ack of id 127 to cd98a421 (205.152.164.33)Resp Time: 481 Auth: 0/0 -> 0 Acct: 1/0/0 -> 1radrecv: Request from host cd98a421 code=1, id=241, length=104 User-Name = "ace" Challenge-Response = "\001r\277D|k\355\245W\244\355P6\317\322\365\244" NAS-IP-Address = ###.###.###.## NAS-Port = 20102 NAS-Port-Type = AsyncRequest from ###.###.###.## - Malformed PacketResp Time: 901 Auth: 0/0 -> 0 Acct: 1/0/0 -> 1radrecv: Request from host cd98a421 code=1, id=241, length=104 User-Name = "ace" Challenge-Response = "\001r\277D|k\355\245W\244\355P6\317\322\365\244" NAS-IP-Address = ###.###.###.## NAS-Port = 20102 NAS-Port-Type = AsyncRequest from ###.###.###.## - Malformed PacketResp Time: 932 Auth: 0/0 -> 0 Acct: 1/0/0 -> 1radrecv: Request from host cd98a421 code=4, id=128, length=149 NAS-IP-Address = ###.###.###.## NAS-Port = 20102 NAS-Port-Type = Async Acct-Status-Type = Stop Acct-Delay-Time = 0 Acct-Session-Id = "266772491" Ascend-Disconnect-Cause = 185 Ascend-Connect-Progress = 65Received unknown attribute 255 Ascend-Data-Rate = 28800 Ascend-PreSession-Time = 32 Ascend-Pre-Input-Octets = 321 Ascend-Pre-Output-Octets = 197 Ascend-Pre-Input-Packets = 9 Ascend-Pre-Output-Packets = 7Received unknown attribute 120Received unknown attribute 121 Caller-Id = "########" NAS-Port-DNIS = "########"Sending Accounting Ack of id 128 to cd98a421 (###.###.###.##)Resp Time: 2403 Auth: 0/0 -> 0 Acct: 2/0/0 -> 2The #'s and ?'s added manually : )This is the message I receive from the RadiusNT server from accounting viathe logfile with the service stopped using radius -x15:C:\radius>Mon Jun 22 22:45:36 1998:RadiusNT Enterprise Initialized...Mon Jun 22 23:03:22 1998:RadiusNT Enterprise Initialized...Mon Jun 22 23:06:58 1998: Request from ###.###.###.## - Malformed PacketMon Jun 22 23:07:08 1998: Request from ###.###.###.## - Malformed PacketMon Jun 22 23:07:18 1998: Request from ###.###.###.## - Malformed PacketMon Jun 22 23:07:28 1998: Request from ###.###.###.## - Malformed PacketMon Jun 22 23:39:23 1998:RadiusNT Enterprise Initialized...Mon Jun 22 23:43:58 1998: Request from ###.###.###.## - Malformed PacketMon Jun 22 23:44:08 1998: Request from ###.###.###.## - Malformed PacketMon Jun 22 23:46:38 1998:RadiusNT Enterprise Initialized...Mon Jun 22 23:06:58 1998: Request from###.###.###.## - Malformed PacketHere are some excerpts from the users file:ace Password = "????????????" User-Service = Framed-User, Framed-Protocol = PPP, Framed-Address = 0.0.0.0abcd Password = "?????????????" User-Service = Framed-User, Framed-Protocol = PPP, Framed-Address = 0.0.0.0These same settings worked without a hitch in v2.2. Our modem racks areusing V.90 software, could that be causing the Malformed Packet entry? Forthe DOS Prompt data, there was no logfile entry. This was pasted directlyout of the dos screen! The logfile was with logfile declared!Thanks : )> -----Original Message-----> From: radiusnt-request@iea-software.com> [mailto:radiusnt-request@iea-software.com]On Behalf Of Dale E. Reed Jr.> Sent: Sunday, June 21, 1998 2:56 AM> To: radiusnt@iea-software.com> Subject: Re: Problems with upgrade!>>> webmaster wrote:> >> > I have upgraded RadiusNT from v2.2 to 2.5. What is the user> limit for this> > version if unregistered and running in text mode? I have read> in you online> > documentation that the ODBC mode allows 100 logins. What happens after> > that?>> You can trial RadiusNT in text mode with up to 100 users or ODBC mode> for up to 100 authentications. You can send a reuqest to sales for a> temp key if you need to more than that.>> > The system has started acting erratically, for example:> >> > We had a several users who couldn't log on. We tried several> things in an> > attempt to get one user logged on. This included retyping his> entry to make> > sure the spacing and tabs were in order, no success. Adding a> sample user,> > no success. We then cut and pasted the one user at the top of> the list, and> > he was accepted. I went into the debug mode and noticed an> error for one of> > the entries above this user. I have since then corrected this.> The server> > though still will not authenticate users. We have since then> moved the user> > list to the MAX's internal user and password list. Is the unregistered> > software situation the problem, or has the upgrade changed> features that I> > am not use to?>> If RadiusNT reads an error in the users file, it stops reading the users> file. Run RadiusNT in -x15 debug mode and it will show the users being> read from the users file, and also show if there were any errors> (and which> user it has a problem with).>> > Also, I know to use debug, you must stop the service. Okay,> after running> > the debug, the last line reads that the Radius Enterprise> initialized... Is> > this OK instead of "waiting for requests"? Is CTRL C the> escape from this> > mode? If so, then can you just restart the RadiusNT service?>> Remove the logfile entry. RadiusNT 2.5 logs to the logfile rather than> the screen if you have a logfile defined.>> --> Dale E. Reed Jr. (daler@iea-software.com)> _________________________________________________________________> IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs> Internet Solutions for Today | http://www.iea-software.com>..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 5 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: Problems with upgrade!From: "Dale E. Reed Jr." Date: Mon, 22 Jun 1998 23:34:30 -0700webmaster wrote:> > RadiusNT Enterprise Initialized...> > radrecv: Request from host cd98a421 code=1, id=240, length=105> User-Name = "abcd"> Challenge-Response = "\001\360V+\306S/y\2423[\237u\315C+E"> NAS-IP-Address = ###.###.###.##> NAS-Port = 20102> NAS-Port-Type = Async> Request from ###.###.###.## - Malformed PacketIf you update to RadiusNT 2.5.124, it allows Malformed Packets bydefualt. The earlier versions require you to add a registry setting,which is noted in the release notes for RadiusNT 2.5. > Here are some excerpts from the users file:> ace Password = "????????????"> User-Service = Framed-User,> Framed-Protocol = PPP,> Framed-Address = 0.0.0.0Framed-Address of 0.0.0.0 is most likely incorrect. If you want dynamicassigned addresses, use 255.255.255.254. > These same settings worked without a hitch in v2.2. Our modem racks are> using V.90 software, could that be causing the Malformed Packet entry? For> the DOS Prompt data, there was no logfile entry. This was pasted directly> out of the dos screen! The logfile was with logfile declared!RadiusNT 2.5 is much more strict and RADIUS compliant. 2.2 was morerelaxed. -- Dale E. Reed Jr. (daler@iea-software.com)_________________________________________________________________ IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs Internet Solutions for Today | http://www.iea-software.com