[RadiusNT Digest]

radiusnt-digest-request@iea-software.com
Tue, 7 Jul 1998 00:00:48 -0700

Message 1: Re: USR Upagrde problem
from "2Day Internet" <peter@2day.net.nz>

Message 2: RE: USR Upagrde problem
from Chris Thomas <ChrisT@mbcom.com.au>

Message 3: RE: USR Upgrade problem
from "Paul Smith" <pjsmith@microtech.co.gg>

Message 4: Re: USR Upgrade problem
from "2Day Internet" <peter@2day.net.nz>

Message 5: RE: USR Upgrade problem
from Chris Thomas <ChrisT@mbcom.com.au>

Message 6: StartTime and StopTime not functioning
from "Mauro J. Jaskelioff" <mauro@citynet.net.ar>

Message 7: Problem with start Radius.exe
from "tech" <tech@gsig-net.qc.ca>

Message 8: OK, any online docs on populating serverports table?
from "Jason Chimney" <jason@cnx.net>

Message 9: RE: *reload*
from "greg Lowthian" <greg@isat.com>

Message 10: IPAD server problem
from "James B. Hrdy" <jhrdy@greensoft.com>

Message 11: Login with E-Mail address
from "greg Lowthian" <greg@isat.com>

Message 12: Emerald Accounting
from Glen Harvy <root@aquarius.com.au>

Message 13: Calls table primary key
from "2Day Internet" <peter@2day.net.nz>

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 1 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Re: USR Upagrde problem
From: "2Day Internet" <peter@2day.net.nz>
Date: Mon, 6 Jul 1998 19:32:44 +1200

>This could be an issue with IP Addresses. Using the latest RadiusNT,
>go into the Admin and choose your primary IP address from the list.
>Does the USR have any kind of debug to see what the issue is? It
>looks like RadiusNT is working fine.

Progress, have 3Com engineer on phone.. I have it authenticating (more on
this later)

Back to accounting issue. The Netserver is sending AcctSessionID of
username-xxxx every time.

i.e. Its a long string which is not incrementing. Surely this is not right?
SQL server wont insert the record due to a primary key constraint.

First call gets logged then forget the rest.

Does 3COM read RFC's?

regards

Peter Mott
Chief Enthusiast
2Day Internet Limited.

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 2 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: RE: USR Upagrde problem
From: Chris Thomas <ChrisT@mbcom.com.au>
Date: Mon, 6 Jul 1998 15:46:17 +0800

> -----Original Message-----
> From: 2Day Internet [mailto:peter@2day.net.nz]
> Sent: Monday, 6 July 1998 15:33
> To: radiusnt@iea-software.com
> Subject: Re: USR Upagrde problem
>
>
> >This could be an issue with IP Addresses. Using the latest RadiusNT,
> >go into the Admin and choose your primary IP address from the list.
> >Does the USR have any kind of debug to see what the issue is? It
> >looks like RadiusNT is working fine.
>
> Progress, have 3Com engineer on phone.. I have it
> authenticating (more on
> this later)
>
> Back to accounting issue. The Netserver is sending AcctSessionID of
> username-xxxx every time.
>
> i.e. Its a long string which is not incrementing. Surely
> this is not right?
> SQL server wont insert the record due to a primary key constraint.

This is what we saw as well. When I spoke with 3Com techs, they were
suprised and said that they didn't think it followed RFC, but it seems
that that is the way it's done in NS Plus. We increased the SQL record
size for that field and the problem was solved.

> First call gets logged then forget the rest.
>
> Does 3COM read RFC's?

Not in this case it seems.

Chris

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 3 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: RE: USR Upgrade problem
From: "Paul Smith" <pjsmith@microtech.co.gg>
Date: Mon, 6 Jul 1998 08:46:43 +0100

We had lot of problem like this. Worst of all the Box would intermittently
stop answering calls. We tried this upgrade on 4 different boxes under
3coms guidance. Every time there were BIG problems afterwards.

To anyone contemplating upgrade to V4... Don't!

-----Original Message-----
From: radiusnt-request@iea-software.com
[mailto:radiusnt-request@iea-software.com]On Behalf Of 2Day Internet
Sent: 06 July 1998 06:57
To: radiusnt@iea-software.com
Subject: Re: USR Upagrde problem

>exist. RadiusNT 2.5.124 and higher default to allowing the 0 length
>malformed packet problem. The others it still doesn't allow. If you
>use "radius -x15 -X" in the foreground, RadiusNT will dump the packet.
>If you send that dump to me, I'll tell you why the packet is
>malformed.

Malformed packet problem gone away now...

Sorry, bad hair day. I should *never* have believed 3Com when they said to
upgrade firmware on Netserver from v3.2.5.3 to v4.1.7

I am happy RadiusNT is performing ok, so my bleating is inappropriate for
this list. If there are any Netserver saavy people subscribed I would
appreciate a private email. I have been off the air for 8 hours now, any
any clues would be appreciated.

NAS no longer authenticates using Radius but ok with local. I see radius
debug of

Sending Ack of id 7 to cb621a82 (akl-netserv1.2day.net.nz)

User-Service = Framed-User
Framed-Protocol = PPP
Framed-Compression = Van-Jacobsen-TCP-IP

Resp Time: 491 Auth 2/0 -> 2 Acct: 0/0/0 -> 0

Win95 client gets error "Dailup networking could not negotiate a compatible
set of network protocols ..."

It also appears the NAS wont accept framed-address settings for specified IP
addresses on other user profiles (just as serious problem!)

regards

Peter Mott
Chief Enthusiast
2Day Internet Limited.

QUIT

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 4 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Re: USR Upgrade problem
From: "2Day Internet" <peter@2day.net.nz>
Date: Mon, 6 Jul 1998 20:01:38 +1200

To my fellow victims of 3Com stupidity..

>We had lot of problem like this. Worst of all the Box would intermittently
>stop answering calls. We tried this upgrade on 4 different boxes under
>3coms guidance. Every time there were BIG problems afterwards.

Have just given up trying to talk to Hong Kong service engineer (he was my
last hope for help in this part of the world - esculated to US now!)

Following are required it you want Netserver to allocate an IP address from
its pool.

Framed-IP-Address 255.255.255.254
Framed-IP-Netmask 255.255.255.255

I didnt have them (not needed in v3.2.5.3)

My big problem now is that if I specify a static IP address for a particular
account (something within my class c network) Netserver logs this to
console..

Facility "IP", Level "Critical":: User xxxx is configured for an existing IP
network address

Anybody know why it might be saying this?

I have users that *must* have a static IP address by tomorrow or I am dead
in the water!

regards

Peter Mott
Chief Enthusiast
2Day Internet Limited.

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 5 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: RE: USR Upgrade problem
From: Chris Thomas <ChrisT@mbcom.com.au>
Date: Mon, 6 Jul 1998 16:19:09 +0800

I have to agree. We've just finished 6 months of problems with Netserver
Plus. We've given up and gone to the faultless TCH's for all our POPs.
If I was forced to stay with Netserver, I would be going back to V3.x to
save the problems.

Chris

> -----Original Message-----
> From: Paul Smith [mailto:pjsmith@microtech.co.gg]
> Sent: Monday, 6 July 1998 15:47
> To: radiusnt@iea-software.com
> Subject: RE: USR Upgrade problem
>
>
> We had lot of problem like this. Worst of all the Box would
> intermittently
> stop answering calls. We tried this upgrade on 4 different
> boxes under
> 3coms guidance. Every time there were BIG problems afterwards.
>
> To anyone contemplating upgrade to V4... Don't!
>
> -----Original Message-----
> From: radiusnt-request@iea-software.com
> [mailto:radiusnt-request@iea-software.com]On Behalf Of 2Day Internet
> Sent: 06 July 1998 06:57
> To: radiusnt@iea-software.com
> Subject: Re: USR Upagrde problem
>
>
> >exist. RadiusNT 2.5.124 and higher default to allowing the 0 length
> >malformed packet problem. The others it still doesn't allow. If you
> >use "radius -x15 -X" in the foreground, RadiusNT will dump
> the packet.
> >If you send that dump to me, I'll tell you why the packet is
> >malformed.
>
> Malformed packet problem gone away now...
>
> Sorry, bad hair day. I should *never* have believed 3Com
> when they said to
> upgrade firmware on Netserver from v3.2.5.3 to v4.1.7
>
> I am happy RadiusNT is performing ok, so my bleating is
> inappropriate for
> this list. If there are any Netserver saavy people subscribed I would
> appreciate a private email. I have been off the air for 8
> hours now, any
> any clues would be appreciated.
>
> NAS no longer authenticates using Radius but ok with local.
> I see radius
> debug of
>
> Sending Ack of id 7 to cb621a82 (akl-netserv1.2day.net.nz)
>
> User-Service = Framed-User
> Framed-Protocol = PPP
> Framed-Compression = Van-Jacobsen-TCP-IP
>
> Resp Time: 491 Auth 2/0 -> 2 Acct: 0/0/0 -> 0
>
> Win95 client gets error "Dailup networking could not
> negotiate a compatible
> set of network protocols ..."
>
> It also appears the NAS wont accept framed-address settings
> for specified IP
> addresses on other user profiles (just as serious problem!)
>
> regards
>
> Peter Mott
> Chief Enthusiast
> 2Day Internet Limited.
>
>
>
>
> QUIT
>

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 6 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: StartTime and StopTime not functioning
From: "Mauro J. Jaskelioff" <mauro@citynet.net.ar>
Date: Mon, 06 Jul 1998 09:34:01

I can't get the StartTime and StopTime to work. In -x15 mode I can see
Radius using the RadCheckPort Procedure, but radius seems to ignore the
startime and stoptime fields.
Example:
I wan't to limit from 6AM to 6PM
StartTime-------- 120
StopTime----------1080
CurrentTime-------686

But the user is allowed to login.

What I am doing wrong?

************************
* Mauro J. Jaskelioff *
* mauro@citynet.net.ar *
* Depto T=E9cnico *
* Citynet S.A. *
************************

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 7 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Problem with start Radius.exe
From: "tech" <tech@gsig-net.qc.ca>
Date: Mon, 6 Jul 1998 14:54:31 -0400

This is a multi-part message in MIME format.

------=_NextPart_000_0016_01BDA8ED.FBAA4F00
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hello! I install radiusNT program with Access program, when i start the =
radiusNt service i have a Dr.Watson error: An application error has =
occurred and an application error log is being generated. Radius.exe =
Exception: access violation (0xc0000005), Address: 0x77f6cc66.

And a message with services is Could not start the RadiusNt service on =
my server. Error 1067: The process terminated unexpectedly.

In DOS mode radiusNT is correct, but the CallsOnline, Calls is not =
fonctionnal. Radlogs is OK.

Tech@gsig-net.qc.ca

------=_NextPart_000_0016_01BDA8ED.FBAA4F00
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD W3 HTML//EN">

Hello! I install radiusNT program =with Access=20program, when i start the radiusNt service i have a Dr.Watson error: An=20application error has occurred and an application error log is being=20generated.   Radius.exe  Exception: access violation=20(0xc0000005), Address: 0x77f6cc66.
 
And a message with services is Could =not start=20the RadiusNt service on my server.  Error 1067: The process =terminated=20unexpectedly.
 
In DOS mode radiusNT is correct, but =the=20CallsOnline, Calls is not fonctionnal.  Radlogs is OK.
 
Tech@gsig-net.qc.ca
<=/BODY>------=_NextPart_000_0016_01BDA8ED.FBAA4F00--..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 8 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: OK, any online docs on populating serverports table?From: "Jason Chimney" Date: Mon, 6 Jul 1998 12:20:24 -0700This is a multi-part message in MIME format.------=_NextPart_000_0036_01BDA8D8.74149470Content-Type: text/plain; charset="iso-8859-1"Content-Transfer-Encoding: quoted-printableAll seems to be going well on the authenticating side of things. Now I =have turned my attention to accounting. My calls table works fine, but =my calls online query doesn't, I realize this is due to the fact that my =serverports table is empty.Anyone care to give any insight on populating this table. I look at the =calls table but each port seems to be bound to more than 1 IP address =(i.e. calls coming in on any given port are not always assigned the same =IP address, is this ok?)Thanks for any help you can offer.Jason------=_NextPart_000_0036_01BDA8D8.74149470Content-Type: text/html; charset="iso-8859-1"Content-Transfer-Encoding: quoted-printable
All seems to be going well on the =authenticating=20side of things. Now I have turned my attention to accounting. My calls =table=20works fine, but my calls online query doesn't, I realize this is due to =the fact=20that my serverports table is empty.
 
Anyone care to give any insight on =populating=20this table. I look at the calls table but each port seems to be bound to =more=20than 1 IP address (i.e. calls coming in on any given port are not always =assigned the same IP address, is this ok?)
 
Thanks for any help you can =offer.
 
Jason
------=_NextPart_000_0036_01BDA8D8.74149470--..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 9 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: RE: *reload*From: "greg Lowthian" Date: Mon, 6 Jul 1998 15:15:03 -0700Dale any ideas.> > So did I do something wrong or did the *reload* stop working in> 2.5> > ..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 10 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: IPAD server problemFrom: "James B. Hrdy" Date: Mon, 6 Jul 1998 17:25:45 +0000Hi, I was wondering if anyone has an IPAD setup with radiusNT AND has the IPAD pointing to the NT box for authentication and accounting. Right now, I have IPAD pointed at the IP and port of the NT box for accounting. With the debug on, I do not see anything at all. Thanks in advance for any help :)James B. Hrdyemail: jhrdy@greensoft.comweb: http://www.greensoft.com/billingGreenSoft Solutions, Inc.Voice: 785.843.8683 ext 2032317 Ponderosa DriveFax: 785.840.0055Lawrence, Ks.United States of America..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 11 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Login with E-Mail addressFrom: "greg Lowthian" Date: Mon, 6 Jul 1998 18:25:13 -0700I had a customer logged in as janp@isat.com as the username so I started looking and found that with Emerald 2.2.38 and RadiusNT 2.5.124 a user can login with the E-Mail address that's in Emerald.Problem The user can now login twice with a login limit of 1 once with the username and once with the E-Mail address. Also if the E-Mail address is different from the username it will allow login.Bug or Feature?Also what's up with the *reload* command.---------ISAT------Internet Services and Training--------- Greg Lowthian greg@isat.com 619-574-4832 www.isat.com ..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 12 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Emerald AccountingFrom: Glen Harvy Date: Tue, 07 Jul 1998 14:49:58 +1000Hi Dale,I have Radius 2.5 Authentication working fine however Accounting isn't.When I access the record for my "test" user, no details of his connectionsare recorded. The User-on-line doesn't work either.Here's an excerpt from my accounting log:-radrecv: Request from host cb3a192e code=4, id=20, length=139 Acct-Status-Type = Start Acct-Session-Id = "35A19CC7D6" Acct-Delay-Time = 0 User-Name = "terry" NAS-Identifier = "comserv2" NAS-Port = 3 NAS-Port-Type = Async User-Service = Framed-User Framed-Protocol = PPP Framed-Address = 203.58.25.47 Framed-Routing = Broadcast-Listen Framed-MTU = 1500 Framed-Compression = Van-Jacobsen-TCP-IP Framed-Compression = 2 Framed-IPX-Network = 0 Framed-AppleTalk-Network = 0 Idle-Timeout = 600 Session-Timeout = 0 SQL Statement: INSERT INTO Calls(CallDate,AcctStatusType,AcctSessionId,AcctDelayTime,UserName,NASIdentifier,NASPort,NASPortType,UserService,FramedProtocol,FramedAddress) VALUES(GetDate(),1,'35A19CC7D6',0,'terry','comserv2',3,0,2,1,'203.58.25.47')Sending Accounting Ack of id 20 to cb3a192e (comserv2)Resp Time: 50 Auth: 3/2 -> 5 Acct: 5/0/0 -> 5radrecv: Request from host cb3a192e code=4, id=21, length=103 Acct-Status-Type = Stop Acct-Session-Id = "35A19CC7D6" Acct-Delay-Time = 0 User-Name = "terry" NAS-Identifier = "comserv2" NAS-Port = 3 Acct-Input-Octets = 3006 Acct-Output-Octets = 5365 Acct-Input-Packets = 29 Acct-Output-Packets = 46 Acct-Session-Time = 93 Acct-Terminate-Cause = 0 SQL Statement: INSERT INTO Calls(CallDate,AcctStatusType,AcctSessionId,AcctDelayTime,UserName,NASIdentifier,NASPort,AcctInputOctets,AcctOutputOctets,AcctSessionTime,AcctTerminateCause) VALUES (GetDate(),2,'35A19CC7D6',0,'terry','comserv2',3,3006,5365,93,0)Sending Accounting Ack of id 21 to cb3a192e (comserv2)Resp Time: 30 Auth: 3/2 -> 5 Acct: 6/0/0 -> 6I remember reading some documentation on SQL Security setup but cannot findthe documentation again. I suspect I have not set the privledges properly.Glen.--------------------------------------------------------------------AQUARIUS Communications for all your Internet<>Fidonet needs <>Full ISP services<>FrontDoor Commercial<>TransX Internet/FTSC Mailervoice(02)9977-3788<>fax(02)9977-3844<>bbs(02)9977-2855<>3:714/930http://www.aquarius.com.au <> mailto:sales@aquarius.com.au ..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 13 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Calls table primary keyFrom: "2Day Internet" Date: Tue, 7 Jul 1998 18:30:07 +1200Is there any reason the calls table usesNASIdentifierNASPortAcctSessionIDAcctStatusTypeas a primary key rather than a seeded integer?Now that my Netserver/8i produces AcctSessionID's up to 30-35 chars in len,I thought I might change the schema to get that column out of the primarykey.regardsPeter MottChief Enthusiast2Day Internet Limited.