Below is an example of the problem I am having. A user logs in, gets a
rejected in ODBC mode, then TEXT mode authenticates him. Notice, below in
AUTH.LOG, the username being passed to WINNT, FramedProtocol. Sometimes
it's characters like this, 0]z. Then user is then auth. "Sending Ack of id
10 to d1d264bd (PM2E)"
The next entry in the log file is "radrecv: Request from host d1d264bd
code=1, id=10, length=78". Well, since the user just auth and is online
they fails for a concurrent violation. They remain online but everyday I
get a ton of these entries in the RADLOG table.
Thanks for the help,
Jeff Hopkins
radadmin@agalis.net
System config:
> NT4 SP4
> IIS4
> Exchange Server 5.5
> PM2 with 15-ports active
> Emerald ver 2.5.261
> MS SQL 6.5
> RadiusNT 2.5.160 (Emerald Standard)
AUTH.LOG
RadiusNT 2.5.160 (Emerald Standard) Initialized...
radrecv: Request from host d1d264bd code=1, id=10, length=78
User-Name = "mdonfarm"
Password = "\011\240U-}\226\021S\030\363\342t,H\346H"
NAS-Identifier = 209.210.100.189
NAS-Port = 3
NAS-Port-Type = Async
User-Service = Framed-User
Framed-Protocol = PPP
rad_authenticate_ODBC()
Password = "\011\240U-}\226\021S\030\363\342t,H\346H"
SQL Statement: Select DateDiff(Minute, GetDate(), DateAdd(Day,
(ma.Extension+ma.OverDue+1),
maExpireDate)), DateDiff(Minute, GetDate(), DateAdd(Day, sa.Extension+1,
saExpireDate)),
sa.AccountID, sa.AccountType, sa.Password, sa.Login, sa.Shell,
sa.LoginLimit, ma.Balance,
ma.OverLimit From MasterAccounts ma, SubAccounts sa Where
(sa.Login='mdonfarm' or
sa.Shell='mdonfarm' or sa.Email='mdonfarm') AND
ma.CustomerID=sa.CustomerID and sa.Active<>0
and ma.Active<>0
Decrypted Password: wilma
Database Password: WINNT
(WINNT) User:FramedProtocol Domain: Password:wilma
Not Found in ODBC, Checking users file...
Checking user record PW_PASSWORD type authPapPwd chkPwd->strvalue is WINNT
decrypted pwd is wilma (WINNT) User:mdonfarm Domain: Password:wilma
Sending Ack of id 10 to d1d264bd (PM2E)
User-Service = Framed-User
Framed-Protocol = PPP
Framed-Compression = Van-Jacobsen-TCP-IP
Framed-MTU = 1500
Resp Time: 3855 Auth: 4/0 -> 3 Acct: 4/0/0 -> 4
radrecv: Request from host d1d264bd code=1, id=10, length=78
User-Name = "mdonfarm"
Password = "\011\240U-}\226\021S\030\363\342t,H\346H"
NAS-Identifier = 209.210.100.189
NAS-Port = 3
NAS-Port-Type = Async
User-Service = Framed-User
Framed-Protocol = PPP
rad_authenticate_ODBC()
Password = "\011\240U-}\226\021S\030\363\342t,H\346H"
SQL Statement: Select DateDiff(Minute, GetDate(), DateAdd(Day,
(ma.Extension+ma.OverDue+1),
maExpireDate)), DateDiff(Minute, GetDate(), DateAdd(Day, sa.Extension+1,
saExpireDate)),
sa.AccountID, sa.AccountType, sa.Password, sa.Login, sa.Shell,
sa.LoginLimit, ma.Balance,
ma.OverLimit From MasterAccounts ma, SubAccounts sa Where
(sa.Login='mdonfarm' or
sa.Shell='mdonfarm' or sa.Email='mdonfarm') AND
ma.CustomerID=sa.CustomerID and sa.Active<>0
and ma.Active<>0
Decrypted Password: wilma
Database Password: WINNT
(WINNT) User:mdonfarm Domain: Password:wilma
Checking for duplicate logins.
SQL Statement: RadCheckOnline 'mdonfarm'
mdonfarm found on-line 1 time(s).
Sending Reject of id 10 to d1d264bd (PM2E) User: mdonfarm already logged
onto system 1 time(s).
User: mdonfarm already logged onto system 1 time(s).
SQL Statement: INSERT INTO RadLogs(RadLogMsgID, LogDate, Username, Data,
CallerID)
VALUES (14, GetDate(), 'mdonfarm', '1', NULL)
Thank you,
Jeff Hopkins
429-2701 or 307-7479
-------------------- Agalis Internet Service ----------------