Error: ERROR: Tunnel-Password attribute in request: Cannot decrypt it.

[B Thompson]

Hi

We are seeing a problem with RADIUS accounting from some of our Colubris AP's. 
We are getting the following errors in /var/log/radius/radius.log :-

Tue Oct 24 14:02:59 2006 : Error: ERROR: Tunnel-Password attribute in request: Cannot decrypt it.

Could someone explain a bit more about what this means and whether it is likely 
to be a problem with the NAS?

We are running FreeRADIUS 1.0.1.

Here is the tcpdump print out of the packet which caused the above message :-

14:02:59.913634 IP (tos 0x0, ttl  64, id 0, offset 0, flags [DF], proto 17, length: 323) nasphysap0.york.ac.uk.32770 > nasaaa2.york.ac.uk.radius-acct: [udp sum ok] RADIUS, length: 295
        Accounting Request (4), id: 0xa7, Authenticator: 7f79db43885d7e9745205662885af3bc
          Accounting Session ID Attribute (44), length: 19, Value: 94c34058-00000007
            0x0000:  3934 6333 3430 3538 2d30 3030 3030 3030
            0x0010:  37
          NAS Port Attribute (5), length: 6, Value: 10
            0x0000:  0000 000a
          NAS Port Type Attribute (61), length: 6, Value: Wireless - IEEE 802.11
            0x0000:  0000 0013
          NAS ID Attribute (32), length: 12, Value: nasphysap0
            0x0000:  6e61 7370 6879 7361 7030
          NAS IP Address Attribute (4), length: 6, Value: nasphysap0.york.ac.uk
            0x0000:  9020 c4b8
          Framed MTU Attribute (12), length: 6, Value: 1496
            0x0000:  0000 05d8
          Username Attribute (1), length: 18, Value: xy506 at york.ac.uk
            0x0000:  7879 3530 3640 796f 726b 2e61 632e 756b
          Calling Station Attribute (31), length: 19, Value: 00:0c:f1:1b:47:7b
            0x0000:  3030 3a30 633a 6631 3a31 623a 3437 3a37
            0x0010:  62
          Called Station Attribute (30), length: 19, Value: 00:03:52:dc:e5:31
            0x0000:  3030 3a30 333a 3532 3a64 633a 6535 3a33
            0x0010:  31
          Accounting Status Attribute (40), length: 6, Value: Stop
            0x0000:  0000 0002
          Accounting Session Time Attribute (46), length: 6, Value: 18 secs
            0x0000:  0000 0012
          Accounting Input Packets Attribute (47), length: 6, Value: 30
            0x0000:  0000 001e
          Accounting Output Packets Attribute (48), length: 6, Value: 34
            0x0000:  0000 0022
          Accounting Input Octets Attribute (42), length: 6, Value: 2181
            0x0000:  0000 0885
          Accounting Output Octets Attribute (43), length: 6, Value: 7541
            0x0000:  0000 1d75
          Accounting Termination Cause Attribute (49), length: 6, Value: Lost Carrier
            0x0000:  0000 0002
          Accounting Delay Attribute (41), length: 6, Value: 289:15:29 hours
            0x0000:  000f e3b1
          Vendor Specific Attribute (26), length: 58, Value: Vendor: Microsoft (311)
            Vendor Attribute: 17, Length: 52, Value: .]......D?...D7.?}v.X.x....S.)/..7.).Z. .SiG...:
            0x0000:  0000 0137 1134 945d bea2 85ee bfde 443f
            0x0010:  e6c6 d544 37a6 3f7d 7608 58f1 78cb cca7
            0x0020:  fd53 0429 2fd8 0437 c529 845a ae20 c653
            0x0030:  077f 6947 e27f e8c1
          Vendor Specific Attribute (26), length: 58, Value: Vendor: Microsoft (311)
            0x0000:  0000 0137 1034 9f5b 63ae ecb4 7e23 af47
            0x0010:  7be9 c08b 5cbd b35f 7f8d 9b11 1a08 a52f
            0x0020:  b52c 09c5 f5ca 5e2c 8d53 8390 0d8f 24fb
            0x0030:  3e39 1668 6858 af32
        0x0000:  0030 4883 9880 0003 5204 635a 0800 4500  .0H.....R.cZ..E.
        0x0010:  0143 0000 4000 4011 8fb5 9020 c4b8 9020  .C.. at .@.........
        0x0020:  c4fb 8002 0715 012f 922a 04a7 0127 7f79  ......./.*...'.y
        0x0030:  db43 885d 7e97 4520 5662 885a f3bc 2c13  .C.]~.E.Vb.Z..,.
        0x0040:  3934 6333 3430 3538 2d30 3030 3030 3030  94c34058-0000000
        0x0050:  3705 0600 0000 0a3d 0600 0000 1320 0c6e  7......=.......n
        0x0060:  6173 7068 7973 6170 3004 0690 20c4 b80c  asphysap0.......
        0x0070:  0600 0005 d801 1278 7935 3036 4079 6f72  .......xy506 at yor
        0x0080:  6b2e 6163 2e75 6b1f 1330 303a 3063 3a66  k.ac.uk..00:0c:f
        0x0090:  313a 3162 3a34 373a 3762 1e13 3030 3a30  1:1b:47:7b..00:0
        0x00a0:  333a 3532 3a64 633a 6535 3a33 3128 0600  3:52:dc:e5:31(..
        0x00b0:  0000 022e 0600 0000 122f 0600 0000 1e30  ........./.....0
        0x00c0:  0600 0000 222a 0600 0008 852b 0600 001d  ...."*.....+....
        0x00d0:  7531 0600 0000 0229 0600 0fe3 b11a 3a00  u1.....)......:.
        0x00e0:  0001 3711 3494 5dbe a285 eebf de44 3fe6  ..7.4.]......D?.
        0x00f0:  c6d5 4437 a63f 7d76 0858 f178 cbcc a7fd  ..D7.?}v.X.x....
        0x0100:  5304 292f d804 37c5 2984 5aae 20c6 5307  S.)/..7.).Z...S.
        0x0110:  7f69 47e2 7fe8 c11a 3a00 0001 3710 349f  .iG.....:...7.4.
        0x0120:  5b63 aeec b47e 23af 477b e9c0 8b5c bdb3  [c...~#.G{...\..
        0x0130:  5f7f 8d9b 111a 08a5 2fb5 2c09 c5f5 ca5e  _......./.,....^
        0x0140:  2c8d 5383 900d 8f24 fb3e 3916 6868 58af  ,.S....$.>9.hhX.
        0x0150:  32 



--

Many Thanks

Ben Thompson