[RadiusNT Digest]

radiusnt-digest-request@iea-software.com
Sat, 11 Jul 1998 00:00:53 -0700

Message 1: Accounts and ODBC
from "Reid Sutherland" <reid@isys.ca>

Message 2: problem with Call
from "tech" <tech@gsig-net.qc.ca>

Message 3: Re: problem with Call
from hostmaster@interaxs.net

Message 4: Re: Accounts and ODBC
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 5: Re: problem with Call
from "Dale E. Reed Jr." <daler@iea-software.com>

Message 6: Re: Malformed Packet? ISDN Users
from "Dale E. Reed Jr." <daler@iea-software.com>

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 1 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Accounts and ODBC
From: "Reid Sutherland" <reid@isys.ca>
Date: Fri, 10 Jul 1998 11:52:28 -0400

Don't ask me why, but when I load radius in -x15 and see if it loads my
users from ODBC, it says 0 users loaded. And reverts to text. I disable
text. Same thing. My tables are correct. I'm using the enhanced.zip
database.

Any ideas?

Reid Sutherland
Network Administrator
ISYS Technology Inc.
http://www.isys.ca

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 2 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: problem with Call
From: "tech" <tech@gsig-net.qc.ca>
Date: Fri, 10 Jul 1998 14:21:22 -0400

This is a multi-part message in MIME format.

------=_NextPart_000_0034_01BDAC0E.03AC8740
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

When I load radius in -x15.=20

0) Mode:1
1) EncryptPasswords: 0
2) IgnoreCase: 0
3) AuthPort: 1645
4) ReqAcctAuth: 1
5) AcctPort: 1646
6) Options: 0
7) Debug: 15
8) ODBCDatasource: Radius
9) DataDirectory: c:\radius\data
10) AcctDirectory: c:\radius\data
11) UserFile: usagers.mdb
12) Username: xxx
13) Password: xxx
14) CompanyName:
15) Licence:

Param: Debug Level: 15
Initializing Winsock...
ODBC Datasource: 'radius'...
Making ODBC Connection...
MS Access Mode Enabled=20
Licensed MBRs: 200
Allocating Statement...

Radius: No such service: radius/udp in your services file.
Defaulting to port 1645 for RADIUS Authentication.
radius: No such service: radacct/udp in your services file.
Defaulting to port 27911 for radius Authentification.

If I check Radlogs, is OK
But if I check Call, is empty, and CallOnline too.

Help me!!
tech@gsig-net.qc.ca

------=_NextPart_000_0034_01BDAC0E.03AC8740
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD W3 HTML//EN">

When I load radius in -x15. =
 
0) Mode:1
1) =EncryptPasswords:=200
2) IgnoreCase: 0
3) AuthPort: 1645
4) ReqAcctAuth: 1
5) AcctPort: 1646
6) Options: 0
7) Debug: 15
8) ODBCDatasource: Radius
9) DataDirectory: c:\radius\data
10) AcctDirectory: c:\radius\data
11) UserFile: usagers.mdb
12) Username: xxx
13) Password: xxx
14) CompanyName:
15) Licence:
 
Param: Debug Level: 15
Initializing Winsock...
ODBC Datasource: 'radius'...
Making ODBC Connection...
MS Access Mode Enabled
Licensed MBRs: 200
Allocating Statement...
 
Radius: No such service: radius/udp =in your=20services file.
Defaulting to port 1645 for RADIUS=20Authentication.
radius: No such service: radacct/udp in your =services=20file.
Defaulting to port 27911 for radius=20Authentification.
 
If I check Radlogs, is OK
But if I check Call, is empty, and CallOnline=20too.
 
 
Help me!!
tech@gsig-net.qc.ca
------=_NextPart_000_0034_01BDAC0E.03AC8740--..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 3 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: problem with CallFrom: hostmaster@interaxs.netDate: Fri, 10 Jul 1998 14:42:14 -0400You need to make the following entries in the Services file:
c:\winnt\system32\drivers\etc

radius 1645/udp radiusd
radacct 1646/udp

You may have to reboot--not certain.

Jim

At 02:21 PM 7/10/98 -0400, you wrote:
When I load radius in -x15.
=A0
0) Mode:1
1) EncryptPasswords: 0
2) IgnoreCase: 0
3) AuthPort: 1645
4) ReqAcctAuth: 1
5) AcctPort: 1646
6) Options: 0
7) Debug: 15
8) ODBCDatasource: Radius
9) DataDirectory: c:\radius\data
10) AcctDirectory: c:\radius\data
11) UserFile: usagers.mdb
12) Username: xxx
13) Password: xxx
14) CompanyName:
15) Licence:
=A0
Param: Debug Level: 15
Initializing Winsock...
ODBC Datasource: 'radius'...
Making ODBC Connection...
MS Access Mode Enabled
Licensed MBRs: 200
Allocating Statement...
=A0
Radius: No such service: radius/udp in your servicesfile.
Defaulting to port 1645 for RADIUS Authentication.
radius: No such service: radacct/udp in your services file.
Defaulting to port 27911 for radius Authentification.
=A0
If I check Radlogs, is OK
But if I check Call, is empty, and CallOnline too.
=A0
=A0
Help me!!
tech@gsig-net.qc.ca


----------------------------
hostmaster@interaxs.net
InterNet Access Network
18 McDaniel Street
Dayton, OH 45405-4816
Voice: 937-461-3660 Fax:937-228-2773

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.
| Message 4 |
'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'
Subject: Re: Accounts and ODBC
From: "Dale E. Reed Jr." <daler@iea-software.com>
Date: Fri, 10 Jul 1998 11:46:46 -0700

Reid Sutherland wrote:
>
> Don't ask me why, but when I load radius in -x15 and see if it loads my
> users from ODBC, it says 0 users loaded. And reverts to text. I disable
> text. Same thing. My tables are correct. I'm using the enhanced.zip
> database.

RadiusNT doesn't load users from the database when it starts up (atleast
not yet :) ). It checks in real time with the database during
authentication. If you are both mode, it will try to load the users
file
into memory, though. That is most likely what you are seeing.

Have you tried to use Radlogin to test an authentication?

-- Dale E. Reed Jr.  (daler@iea-software.com)_________________________________________________________________       IEA Software, Inc.      |  RadiusNT, Emerald, and NT FAQs Internet Solutions for Today  |   http://www.iea-software.com

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 5 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: problem with CallFrom: "Dale E. Reed Jr." <daler@iea-software.com>Date: Fri, 10 Jul 1998 15:14:58 -0700

Upgrading to RadiusNT 2.5 will resolve the problem.

> Radius: No such service: radius/udp in your services file.> Defaulting to port 1645 for RADIUS Authentication.> radius: No such service: radacct/udp in your services file.> Defaulting to port 27911 for radius Authentification.> > If I check Radlogs, is OK> But if I check Call, is empty, and CallOnline too.

-- Dale E. Reed Jr.  (daler@iea-software.com)_________________________________________________________________       IEA Software, Inc.      |  RadiusNT, Emerald, and NT FAQs Internet Solutions for Today  |   http://www.iea-software.com

..------ ------ ------ ------ ------ ------ ------ ------ ------ ------.| Message 6 |'------ ------ ------ ------ ------ ------ ------ ------ ------ ------'Subject: Re: Malformed Packet? ISDN UsersFrom: "Dale E. Reed Jr." <daler@iea-software.com>Date: Fri, 10 Jul 1998 16:13:48 -0700

Nick Feinberg wrote:> > We are running 2.5.124. So I guess it is a malformed packet, right? Could you> tell me what a malformed packet it?

Its a packet that doesn't follow the RFC specifications. RADIUS packetsinclude what are known as Attribute-Value pairs (AV pairs). EachAV Pair has an identifier (the attribute), a length, and then the data.The type of the data is determined by the type of the attribute (whichis specified in the dictionary for each attribute).

A typical malformed packet that has recently becoming common is where thedata portion will not be included, and the length specified is 2 (itincludes the attribute and length bytes in the length field). AllRADIUS attributes (according to the RFC) require >= 3 for the length.This is the kind of malformed packet RadiusNT can work around and notby default accepts (although I don'y really like it).

Livingston had a bug that was putting a length specified in that waslower than the actual length of the avpair itself, which was causingproblems when a RADIUS server tried to parse the request. That is themost common type of "true" malformed request. If you run RadiusNT in -x15 -X debug, you'll see the av pairs debugged.Its the second set of numerical numbers (in hex). If you capture thatfrom the request RadiusNT says is malformed, I can interpret it andtell you whats malformed about it.

-- Dale E. Reed Jr.  (daler@iea-software.com)_________________________________________________________________       IEA Software, Inc.      |  RadiusNT, Emerald, and NT FAQs Internet Solutions for Today  |   http://www.iea-software.com