[Serusers] Radius Server sending reply to another machine!!!
Ashutosh Kumar
ashutoshk at chetu.com
Tue Aug 30 15:04:48 CEST 2005
Many thanks Jan,
Adding bindaddr directive to radiusclient.conf worked!!!!.
Now, the problem remains as to why is the radiusclient/ser picking up the
dictionary.ascend, when I have included the dictionary.ser at the end of my
dictionary file. Also, I have auth_radius:service_type modparamed' to value
of 15.
Please guide.
Regards,
Ashutosh Kumar
-----Original Message-----
From: Jan Janak [mailto:jan at iptel.org]
Sent: Tuesday, August 30, 2005 2:40 PM
To: Ashutosh Kumar
Cc: serusers at lists.iptel.org
Subject: Re: [Serusers] Radius Server sending reply to another machine!!!
Check the configuration file of the radius client library, perhaps you
have set the bindaddr parameter to the wrong IP address ?
Jan.
On 30-08-2005 03:57, Ashutosh Kumar wrote:
> Hi,
> I am facing a strange bewildering problem out here. Earlier I was
> running ser -0.9 on machine a.b.c.116. Now we shifted it to a.b.c.113 for
> testing for radius testing purposes.
> But in the radius packet dump, it is showing as the radius packet still
> originating from a.b.c.116 machine, despite the fact, my new revised
ser.cfg
> doesn't contain any listen address or alias for .116 box.
> Also, the /etc/hosts doesn't mention .116 address. Also, it is not the
case
> that .116 and .113 are IPs homes on same machine. My ser.cfg code for
radius
> authorization is as follows.
>
> ...
> .....
>
> if (!radius_www_authorize("")) {
> # if (!www_authorize("","subscriber")) {
> www_challenge("","0");
> break;
> };
> ...
> .....
>
> In the DB also, there is no table . The Domains table has no records. But
> still SER is usng .116 address to send radius packets from. Here is the
> radius packet dump.
>
> [root at sip radiusclient]# tcpdump -i eth1 -s 1500 -w - udp | raddump
> -vvvvvvvvvvvvvvvvvvvvvsn
> tcpdump: listening on eth1
> Looks like a(n) libpcap/tcpdump packet trace
> 17:45:13.051205 radius a.b.c.113:50912 > p.q.r.s:1812 Access-Request 180
> User-Name = test at a.b.c.112
> Ascend-PW-Warntime = 168195173
> Ascend-PW-Warntime = 17774137
> Ascend-PW-Warntime = 36320307
> Ascend-PW-Warntime = 68383593
> Ascend-PW-Warntime = 51008069
> Ascend-Menu-Item = 75dd216d3efa9bfb9c2d7e013d54f7bb
> Service-Type = 15 (unknown)
> Ascend-PW-Lifetime = 1952805748
> NAS-IP-Address = a.b.c.116
> NAS-Port = 5060
>
> (Is there any table /file in ser other than ser.cfg or mysql://ser that
> contains the domain information that might have been lying there unchanged
> since machine migration?)
>
> Also, why is SER using incorrect SER dictionary NAS client (Ascend)(
> shouldn't it have been Cisco or sometinhg like that). I have included the
> dictionary.ser included in ser-0.9 source in the radiusclient conf file.
>
> Help me, its driving me crazy.
>
>
> Regards,
> Ashutosh Kumar
>
>
> _______________________________________________
> Serusers mailing list
> serusers at lists.iptel.org
> http://lists.iptel.org/mailman/listinfo/serusers
More information about the sr-users
mailing list