[RADIATOR] Mac Startup

2010-06-22 Thread Adam Gerson
I am following the instructions in INSTALL.MacOSX. That startup item uses /usr/bin/radiusd which I believe conflicts with the default installation of FreeRadius on Mac Server 10.4.6. sidekick:~ sadmin$ /Library/StartupItems/Radiator/Radiator start Starting Radiator RADIUS server /Library/Startu

Re: [RADIATOR] Mac Startup

2010-06-22 Thread Hugh Irvine
Hello Adam - I always suggest using the fully qualified pathnames so you know what is going on. Ie: /usr/bin/perl -I ….. …../radiusd -config_file /etc/radiator/radius.cfg where "….." is the path to your Radiator source directory. On my machine here I would do something like this:

[RADIATOR] Radiator CoA

2010-06-22 Thread Subash Comerica (subashtc)
Hi All, I am trying to send a CoA message using Radiator. I tried searching but couldn't find any documentation on how to do it. Can somebody please point me to any documentation? Does Radiator CoA support Message Authenticator as well? Thanks & Regards, . . . . Subash Changing the Wa

Re: [RADIATOR] Radiator CoA

2010-06-22 Thread Hugh Irvine
Hello Subash - You can use the radpwtst utulity included with Radiator to generate any RADIUS request, including Disconnect-Request and Change-Filter-Request. Something like this (using whatever attributes are required by your NAS equipment): perl radpwtst -noauth -noacct -s n.n.n.n

Re: [RADIATOR] Radiator CoA

2010-06-22 Thread Subash Comerica (subashtc)
Hi Hugh, Thanks. Any idea about the MA attribute? I will give this a shot. How do I raise a bug on RADIATOR? Thanks & Regards, . . . . Subash Changing the Way We Live, Work, Play and Learn -Original Message- From: Hugh Irvine [mailto:h...@open.com.au] Sent: Tuesday, June 22, 2010

Re: [RADIATOR] Radiator CoA

2010-06-22 Thread Hugh Irvine
Hello Subash - The Message-Authenticator attribute is supported. If you find any problems let me know and I will get them fixed. And please let me know the results of your tests - I can add a FAQ item with your findings. regards Hugh On 22 Jun 2010, at 13:57, Subash Comerica (subashtc) wro

Re: [RADIATOR] Radiator CoA

2010-06-22 Thread Subash Comerica (subashtc)
Hi Hugh, Sure I will get back with some logs for others reference/FAQ. How do I make radpwtst utility send the MA attribute? Thanks & Regards, . . . . Subash Changing the Way We Live, Work, Play and Learn -Original Message- From: Hugh Irvine [mailto:h...@open.com.au] Sent: Tuesd

[RADIATOR] AuthBy SQL result: IGNORE, User database access error

2010-06-22 Thread Adam Gerson
Well, nothing has changed in my config file and my database is still up and working. I have not used Radiator for a week or two. I started it today to test it and now it cannot contact the database. I got an email saying my trail had experienced, but at startup Radiator reports its good until 2

Re: [RADIATOR] AuthBy SQL result: IGNORE, User database access error

2010-06-22 Thread Hugh Irvine
Hello Adam - The error message you show below indicates your database is not running (or is unreachable for some reason). regards Hugh On 22 Jun 2010, at 15:03, Adam Gerson wrote: > Well, nothing has changed in my config file and my database is still up > and working. I have not used Radia

Re: [RADIATOR] Radiator CoA

2010-06-22 Thread Søren Schrøder
Hi. I'm using Radiator to do CoA DM Against NAS-boxes from Juniper (BRAS), Errisson (SASN) and Starent (GGSN) They all differ a bit on what AVP's they need for the CoA DM message. For example, the Starent GGSN needs the following AVP's: Acct-Session-Id Event-Timestamp These are available from t

Re: [RADIATOR] Radiator CoA

2010-06-22 Thread Hugh Irvine
Hello Subash - As mentioned in my previous email: perl radpwtst -noauth -noacct -s n.n.n.n -secret blah -code Change-Filter-Request User-Name=whatever Message-Authenticator=x . where "….." are whatever attributes your NAS equipment expects in this type of request. regards Hu

Re: [RADIATOR] Radiator CoA

2010-06-22 Thread Subash Comerica (subashtc)
Hi Soren, Thanks for the details. I am aware of corresponding attributes to be sent in CoA Ack/Nak as per NAS's requirements. My question is mainly due to the fact that Message Authenticator is computed over the complete packet and is Radiator able to compute MA if the input attribute pa

Re: [RADIATOR] Radiator CoA

2010-06-22 Thread Subash Comerica (subashtc)
Hi Hugh, If I pass MA=0 will Radiator compute it for me since I don't want to compute the hash over the complete packet. For Eg: Freeradius radclient accepts MA=0 and computes it. Thanks & Regards, . . . . Subash Changing the Way We Live, Work, Play and Learn -Original Message- F

Re: [RADIATOR] Radiator CoA

2010-06-22 Thread Subash Comerica (subashtc)
Hi Hugh, I just verified and found it to work fine when MA=0 is sent. Thanks & Regards, . . . . Subash Changing the Way We Live, Work, Play and Learn -Original Message- From: Hugh Irvine [mailto:h...@open.com.au] Sent: Wednesday, June 23, 2010 12:54 AM To: Subash Comerica (subashtc)

Re: [RADIATOR] Radiator CoA

2010-06-22 Thread Subash Comerica (subashtc)
Hi Hugh, I jumped the gun. Actually when passed zero radpwtst is sending an invalid size MA(size=03). May be there is a bug in this utility. Please find attached the logs. Thanks & Regards, . . . . Subash Changing the Way We Live, Work, Play and Learn -Original Message- From: Hug