[Issues] [mod_auth_xradius 0000062]: patch for management of RAD_NAS_IDENTIFIER and RAD_NAS_IP_ADDRESS attributes

Mantis Bug Tracker issues at outoforder.cc
Mon Dec 15 05:15:26 EST 2008


The following issue requires your FEEDBACK. 
====================================================================== 
http://issues.outoforder.cc/view.php?id=62 
====================================================================== 
Reported By:                Andy Igoshin
Assigned To:                
====================================================================== 
Project:                    mod_auth_xradius
Issue ID:                   62
Category:                   Apache Integration
Reproducibility:            always
Severity:                   minor
Priority:                   normal
Status:                     feedback
Apache Version:             unspecified 
====================================================================== 
Date Submitted:             2006-05-27 07:37 EDT
Last Modified:              2008-12-15 05:15 EST
====================================================================== 
Summary:                    patch for management of RAD_NAS_IDENTIFIER and
RAD_NAS_IP_ADDRESS attributes
Description: 
patch for management of RAD_NAS_IDENTIFIER and RAD_NAS_IP_ADDRESS
attributes

====================================================================== 

---------------------------------------------------------------------- 
 (0000137) olv (reporter) - 2008-12-15 05:15
 http://issues.outoforder.cc/view.php?id=62#c137 
---------------------------------------------------------------------- 
Hi,

I am not to sure how to proceed with this as I am not a developper.

My radius request are always rejected because of the lack of the
NAS_IP_ADDRESS parameter which is mandatory in this configuration. I have
patched the sources with this patch to no avail, I am still getting
rejects from the server.
I have been looking (for *days*) for a solution and don't know what to do
anymore.

Here is the server log (before I patched the sources) :

12/12/2008 08:43:25
-----------------------------------------------------------
12/12/2008 08:43:25 Authentication Request
12/12/2008 08:43:25 Received From: ip=192.168.242.166 port=50854
12/12/2008 08:43:25 Packet : Code = 0x1 ID = 0x88
12/12/2008 08:43:25 Client Name = 192.168.242.166 Dictionary Name =
Radius.dct
12/12/2008 08:43:25 Vector =
12/12/2008 08:43:25 000: 4a065abe 8ba095e1 57a5bb74 6968f403
|J.Z.....W..tih..|
12/12/2008 08:43:25 Parsed Packet =
12/12/2008 08:43:25 Service-Type : Integer Value = 8
12/12/2008 08:43:25 NAS-Port-Type : Integer Value = 5
12/12/2008 08:43:25 User-Name : String Value = test.user
12/12/2008 08:43:25 NAS-Identifier : String Value = 192.168.242.166
12/12/2008 08:43:25 User-Password : Value =
12/12/2008 08:43:25 000: 2c89b29f 493143b8 765d1233 814b7e6d
|,...I1C.v].3.K~m|
12/12/2008 08:43:25
-----------------------------------------------------------
12/12/2008 08:43:25 Determining if this radius should act as a proxy
12/12/2008 08:43:25 Missing checklist attribute NAS-IP-Address for user
TEST.USER
12/12/2008 08:43:25 request items don't match user/profile items,
Rejecting

----------------------------------------------

Server log after patching :

Authentication Request
12/15/2008 09:27:11 Received From: ip=192.168.241.198 port=60054
12/15/2008 09:27:11 Packet : Code = 0x1 ID = 0x88
12/15/2008 09:27:11 Client Name = <ANY> Dictionary Name = Radius.dct
12/15/2008 09:27:11 Vector =
12/15/2008 09:27:11 000: 44724f5e 33be7b86 75c93934 796ee1e6
|DrO3.{.u.94yn..|
12/15/2008 09:27:11 Parsed Packet =
12/15/2008 09:27:11 Service-Type : Integer Value = 8
12/15/2008 09:27:11 NAS-Port-Type : Integer Value = 5
12/15/2008 09:27:11 User-Name : String Value = test.user
12/15/2008 09:27:11 User-Password : Value =
12/15/2008 09:27:11 000: 4bb87177 eaf775b6 d788e87b b38af1c3
|K.qw..u....{....|
12/15/2008 09:27:11 NAS-IP-Address : IPAddress = 0.0.0.0
12/15/2008 09:27:11 NAS-Identifier : String Value = 192.168.241.198
12/15/2008 09:27:11
-----------------------------------------------------------
12/15/2008 09:27:11 Determining if this radius should act as a proxy
12/15/2008 09:27:11 VASCO ERROR : (Code Replay Attempt).
12/15/2008 09:27:11 User test.user firmly rejected by Digipass auth
method
12/15/2008 09:27:11 Unable to find user test.user with matching password
12/15/2008 09:27:11
-----------------------------------------------------------
12/15/2008 09:27:11 Authentication Response (reject)
12/15/2008 09:27:11 Packet : Code = 0x3 ID = 0x88
12/15/2008 09:27:11 Vector =
12/15/2008 09:27:11 000: 3285b769 4248b517 0da02b08 fabee932
|2..iBH....+....2| 

now the NAS IP ADDRESS parameter is set to 0.0.0.0

The radtest CLI utility works perfectly with this same configuration from
the same computer.

This is not a simple issue to solve as I do not have access to server
(it's not mine). This configuration used to work with apache 1.3 +
mod_auth_radius and now the systems have been updated to apache 2.2 and
mod_auth_xradius.

My configuration :
OS : Gentoo
Apache 2.2.9
mod_auth_xradius 0.4.6 + patch

Do you have any hint to solve quickly this issue ? ..as this is blocking a
production application.

Thank you, best regards.

O.V. 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2006-05-27 07:37 Andy Igoshin   New Issue                                    
2006-05-27 07:37 Andy Igoshin   File Added: mod_auth_xradius-0.4.6-ai.diff      
             
2006-05-27 07:37 Andy Igoshin   Apache Version            => unspecified     
2007-05-11 05:03 step           File Added: literotica.html                    
2008-12-15 05:15 olv            Note Added: 0000137                          
2008-12-15 05:15 olv            Status                   new => feedback     
======================================================================




More information about the Issues mailing list