Hello Doug -
This is actually a NAS problem, due to a recent upgrade to the CVX software.
The Acct-Session-Id is defined as a string (check the RFC), and the CVX is now sending binary data instead.
You should check with your vendor to find out what they are sending and how to interpret it.
In the meantime, you may be able to redfine the Acct-Session-Id as binary in the Radiator dictionary.
ATTRIBUTE Acct-Session-Id 44 binary
Please let me know if the above works for you, as other people have been having the same problem.
regards
Hugh
On Thursday, October 24, 2002, at 09:42 PM, Doug Clements wrote:
Greetings. I'm getting the following error in my radius log:NB: I am travelling this week, so there may be delays in our correspondence.
Thu Oct 24 11:21:38 2002: ERR: There is no value named Á-#×ز for attribute Acct-Session-Id. Using 0.
Thu Oct 24 11:23:13 2002: ERR: There is no value named Á-#×Ôo for attribute Acct-Session-Id. Using 0.
Thu Oct 24 11:23:21 2002: ERR: There is no value named Á-#×× for attribute Acct-Session-Id. Using 0.
Thu Oct 24 11:23:24 2002: ERR: There is no value named Á-#×ص for attribute Acct-Session-Id. Using 0.
Thu Oct 24 11:23:26 2002: ERR: There is no value named Á-#××i for attribute Acct-Session-Id. Using 0.
The value changes each time, so I think maybe the problem might just be that our NAS is thinking Acct-Session-Id is of a different type than what Radiator is expecting.
The NAS is a CVX 600. I'm running Radiator-3.3.
Here is what I believe to be the most relevant configuration snippet:
<AuthBy EMERALD>
Identifier SimpleSQLAuth
DBSource dbi:Sybase:xxxxx
DBUsername xxxxx
DBAuth xxxxx
# use the LoginLimit from the emerald database
#AuthSelect ,sa.LoginLimit
#AuthColumnDef 0,Simultaneous-Use,check
AccountingTable Calls
AcctColumnDef UserName,User-Name
AcctColumnDef CallDate,Timestamp,integer-date
AcctColumnDef AcctStatusType,Acct-Status-Type,integer
AcctColumnDef AcctDelayTime,Acct-Delay-Time,integer
AcctColumnDef AcctInputOctets,Acct-Input-Octets,integer
AcctColumnDef AcctOutputOctets,Acct-Output-Octets,integer
#AcctColumnDef AcctSessionId,Acct-Session-Id,integer
AcctColumnDef AcctSessionTime,Acct-Session-Time,integer
AcctColumnDef AcctTerminateCause,Acct-Terminate-Cause,integer
AcctColumnDef FramedAddress,Framed-IP-Address
AcctColumnDef FramedProtocol,Framed-Protocol,integer
AcctColumnDef NASIdentifier,NAS-Identifier
AcctColumnDef NASIdentifier,NAS-IP-Address
AcctColumnDef NASPort,NAS-Port,integer
</AuthBy>
# Check the Platypus database for everyone who has nowhere else to go
<Realm DEFAULT>
# remove everything after the @, including the @
RewriteUsername s/^([^@]+).*/$1/
PasswordLogFileName %L/password.log
AuthBy SimpleSQLAuth
# AuthByPolicy ContinueAlways
# AuthBy Acct-only-Database
# AuthBy Auth-only-Database
</Realm>
We have many more Realms, but they are all in the same format as this (and we log to a local database, but proxy radius to customers):
<Realm xxxxxx.com>
PasswordLogFileName %L/password.log
AuthByPolicy ContinueAlways
AuthBy Acct-only-Database
AuthBy xxxxxRadius
</Realm>
<AuthBy EMERALD>
Identifier Acct-only-Database
AuthSelect
DBSource dbi:Sybase:xxxx
DBUsername xxxxx
DBAuth xxxxx
AccountingTable Calls
AcctColumnDef UserName,User-Name
AcctColumnDef CallDate,Timestamp,integer-date
AcctColumnDef AcctStatusType,Acct-Status-Type,integer
AcctColumnDef AcctDelayTime,Acct-Delay-Time,integer
AcctColumnDef AcctInputOctets,Acct-Input-Octets,integer
AcctColumnDef AcctOutputOctets,Acct-Output-Octets,integer
AcctColumnDef AcctSessionId,Acct-Session-Id,string
AcctColumnDef AcctSessionTime,Acct-Session-Time,integer
AcctColumnDef AcctTerminateCause,Acct-Terminate-Cause,integer
AcctColumnDef FramedAddress,Framed-IP-Address
AcctColumnDef FramedProtocol,Framed-Protocol,integer
AcctColumnDef NASIdentifier,NAS-Identifier
AcctColumnDef NASIdentifier,NAS-IP-Address
AcctColumnDef NASPort,NAS-Port,integer
</AuthBy>
Thanks for any ideas!
--Doug
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
