Re: Accounting-Response with invalid signature

["Rio Yang" <rioyang.tw@gmail.com>]

Hi Milan,

 

Sorry~ I don't describ my architecture more detail.

 

NAS (Aptilo) --- FreeRADIUS --- JuniperSBR (Funk)

 

(FreeRadius proxy to JuniperSBR)
 

The error message occurred between FreeRADIUS and JuniperSBR.

 

In my thinking, there is no secret error in Accounting-Request why I got the secret error in Accounting-Response.

 

Rio
 

2007/5/23, Milan Holub <holub@thenet.ch>:

Hi Rio,

what type of NAS are you using?
I've experienced similar behaviour with nocat software.

The problem was that the NAS did not generate correct packet signature
according to rfc.

I have a simple patch to freeradius to bypass checking of signature of accounting
packets. Although the correct way is to fix your NAS to create the
signature according to rfc.

Anyway I can send you the patch for testing if needed.

Regards

Milan Holub
holub (at) thenet (dot) ch

--------------------------------------
TheNet-Internet Services AG,
im Bernertechnopark, Morgenstr. 129
CH-3018, Bern, Switzerland
031 998 4333, Fax 031 998 4330
http://www.thenet.ch
http://wlan.thenet.ch
--------------------------------------

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html