(RADIATOR) Re: Remote access ACL control with Radius

2001-11-01 Thread Hugh Irvine
Hello Manoj - What does a trace 4 debug from Radiator show? Is the reply attribute actually being sent in the reply correctly? If it is in the reply, you will then have to check on the Cisco to see what the Cisco is doing with the reply. You can use the debug command on the Cisco to see what

(RADIATOR) "Bad authenticator in request" read the FAQ's still not working

2001-11-01 Thread Andrew Kaplan
I'm trying to setup another 3COM Total Control Chassis. The first config works and is the first chassis. The second one fails with "WARNING: Bad authenticator in request from 209.113.232.252 (209. 113.232.252)" Please see bottom. Both NAS appear to be setup identically. Any suggestions would be gr

Re: (RADIATOR) Re: Remote access ACL control with Radius

2001-11-01 Thread rik . nagtegaal
Yep, You'll have to use the cisco-avpair (you should be able to find the exact syntax to use in Radiator - I'm sure Hugh can help you with that). The syntax for the cisco is as follows (we're using the AS5350, and this works like a champ): ip:dns-servers=20.1.20.21 20.1.20.23 ip:inacl#1=permit i

(RADIATOR) AcctLogFileFormat

2001-11-01 Thread William Hernandez
Hello everyone, I have the following in radius.cfg: AcctLogFileFormat \ %U \ %{NAS-IP-Address} \ %{NAS-Identifier} \ %{Acct-Status-Type} \ %{Acct-Session-Id} \ %{Acct-Delay-Time} \

(RADIATOR) Multiple accounting methods

2001-11-01 Thread Barry Andersson
Hi, Is it possible to record accounting data to the standard detail fiel as well as a mySQL database? We are currently logging just to the detail file but would like to change over to mySQL eventually so would like to log to both in the meantime while we rewrite the billing software to cope. Fol

Re: (RADIATOR) Multiple accounting methods

2001-11-01 Thread Hugh Irvine
Hello Barry - Yes this is very simple to do. # define AuthBy clauses Identifier SQLAccounting DBSource . DBUsername . DBAuth . AuthSelect AccountingTable ACCOUNTING AcctCloumnDef . . Identifier Chec

Re: (RADIATOR) "Bad authenticator in request" read the FAQ'sstill not working

2001-11-01 Thread Hugh Irvine
Hello Andrew - It looks to me like the shared secrets are different between the NAS and the Client clause. You only show an accounting request and if this is only happening with accounting requests (ie. authentication requests are working) then it is likely a software bug in the NAS that the

Re: (RADIATOR) Multiple accounting methods

2001-11-01 Thread Barry Andersson
Hi Hugh, I still want to authenticate by the UNIX passwd file for the time being but write accounting records to mySQL. Is thsi the correct config for that scenario? Barry - Original Message - From: "Hugh Irvine" <[EMAIL PROTECTED]> To: "Barry Andersson" <[EMAIL PROTECTED]> Cc: <[EMAIL

Re: (RADIATOR) AcctLogFileFormat

2001-11-01 Thread Hugh Irvine
Hello William - >Hello everyone, > >I have the following in radius.cfg: > AcctLogFileFormat \ > %U \ > %{NAS-IP-Address} \ > %{NAS-Identifier} \ > %{Acct-Status-Type} \ > %{Acct-Session-Id} \ >

Re: (RADIATOR) Multiple accounting methods

2001-11-01 Thread Hugh Irvine
Hello Barry - Yes it is - note the empty AuthSelect in the AuthBy SQL clause that disables authentication. Also note the AuthByPolicy in the AuthBy GROUP clause which will either authenticate through the AuthBy SYTEM -or- the AuthBy FILE (if this is not what you want you can change it). rega