<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Arial Bold";
panose-1:2 11 7 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Arial Bold";
font-weight:bold;}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
pre
{margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
/* List Definitions */
@list l0
{mso-list-id:1061246082;
mso-list-template-ids:-1409141224;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><b><font size=3 face="Times New Roman"><span
style='font-size:12.0pt;font-family:"Times New Roman";font-weight:normal'>Hi
Alan,<o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=3 face="Times New Roman"><span
style='font-size:12.0pt;font-family:"Times New Roman";font-weight:normal'><o:p> </o:p></span></font></b></p>
<p class=MsoNormal><b><font size=3 face="Times New Roman"><span
style='font-size:12.0pt;font-family:"Times New Roman";font-weight:normal'>In my
actual deployment I have Radius client, RADIUS proxy and RADIUS Server.<o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=3 face="Times New Roman"><span
style='font-size:12.0pt;font-family:"Times New Roman";font-weight:normal'><o:p> </o:p></span></font></b></p>
<p class=MsoNormal><b><font size=3 face="Times New Roman"><span
style='font-size:12.0pt;font-family:"Times New Roman";font-weight:normal'>Accounting-Request
is originated form Radius client after success-full authentication.<o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=3 face="Times New Roman"><span
style='font-size:12.0pt;font-family:"Times New Roman"'>Accounting request
authenticator</span></font></b><font face="Times New Roman"><span
style='font-family:"Times New Roman";font-weight:normal'> is generated using </span></font><font
face="Times New Roman"><span style='font-family:"Times New Roman"'>RADIUS proxy
secret</span></font><font face="Times New Roman"><span style='font-family:"Times New Roman";
font-weight:normal'> in RADIUS client.<o:p></o:p></span></font></p>
<p class=MsoNormal><b><font size=3 face="Times New Roman"><span
style='font-size:12.0pt;font-family:"Times New Roman";font-weight:normal'>RADIUS
proxy functionality is to forward Accounting request to Remote Accounting
server. <o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=3 face="Times New Roman"><span
style='font-size:12.0pt;font-family:"Times New Roman";font-weight:normal'>While
doing proxy functionality </span></font></b><font face="Times New Roman"><span
style='font-family:"Times New Roman"'>Accounting-Request authenticator is
re-calculated using Remote Accounting server secret</span></font><font
face="Times New Roman"><span style='font-family:"Times New Roman";font-weight:
normal'> <o:p></o:p></span></font></p>
<p class=MsoNormal><b><font size=3 face="Times New Roman"><span
style='font-size:12.0pt;font-family:"Times New Roman";font-weight:normal'>and
updates he request with re-calculated value and the request is posted to remote
end.<o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=3 face="Times New Roman"><span
style='font-size:12.0pt;font-family:"Times New Roman";font-weight:normal'><o:p> </o:p></span></font></b></p>
<p class=MsoNormal><b><font size=3 face="Times New Roman"><span
style='font-size:12.0pt;font-family:"Times New Roman";font-weight:normal'>Please
tell me whether my understanding about Accounting-Request authenticator and
secret is correct.<o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=3 face="Times New Roman"><span
style='font-size:12.0pt;font-family:"Times New Roman";font-weight:normal'><o:p> </o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial;font-weight:normal'>Regards,<o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial;font-weight:normal'>Karthik</span></font></b><font
face="Times New Roman"><span style='font-family:"Times New Roman";font-weight:
normal'><o:p></o:p></span></font></p>
<div class=MsoNormal align=center style='text-align:center'><b><font size=3
face="Times New Roman"><span style='font-size:12.0pt;font-family:"Times New Roman";
font-weight:normal'>
<hr size=2 width="100%" align=center>
</span></font></b></div>
<p class=MsoNormal><b><font size=2 face="Courier New"><span style='font-size:
10.0pt;font-family:"Courier New";font-weight:normal'>Karthikeyan Gopal - ERS,
HCL Tech wrote:<o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 face="Courier New"><span style='font-size:
10.0pt;font-family:"Courier New";font-weight:normal'>> *My config:*<o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 face="Courier New"><span style='font-size:
10.0pt;font-family:"Courier New";font-weight:normal'>> *NAS shared secret =
testing123* <o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 face="Courier New"><span style='font-size:
10.0pt;font-family:"Courier New";font-weight:normal'>> *Accounting server
Secret = 123testing*<o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 face="Courier New"><span style='font-size:
10.0pt;font-family:"Courier New";font-weight:normal'><o:p> </o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 face="Courier New"><span style='font-size:
10.0pt;font-family:"Courier New";font-weight:normal'> The NAS is sending
accounting packets, too. There is no "NAS" secret<o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 face="Courier New"><span style='font-size:
10.0pt;font-family:"Courier New";font-weight:normal'>and "accounting"
secret. There may be different secrets for<o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 face="Courier New"><span style='font-size:
10.0pt;font-family:"Courier New";font-weight:normal'>authentication and
accounting, but the NAS will send both packets.<o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 face="Courier New"><span style='font-size:
10.0pt;font-family:"Courier New";font-weight:normal'><o:p> </o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 face="Courier New"><span style='font-size:
10.0pt;font-family:"Courier New";font-weight:normal'> Alan DeKok.<o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=2 face="Courier New"><span style='font-size:
10.0pt;font-family:"Courier New";font-weight:normal'><o:p> </o:p></span></font></b></p>
<div class=MsoNormal align=center style='text-align:center'><b><font size=3
face="Arial Bold"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center>
</span></font></b></div>
<b><font size=3 face="Arial Bold"><span style='font-size:12.0pt;font-family:
"Arial Bold";font-weight:bold'>
<ul type=disc>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l0 level1 lfo1'><em><i><font face="Arial Bold"><span
style='font-family:"Arial Bold"'><!--X-Subject-Header-End--><!--X-Head-of-Message-->To</span></font></i></em>:
"<a href="mailto:freeradius-users%40lists.freeradius.org">freeradius-users@lists.freeradius.org</a>"
<<a href="mailto:freeradius-users%40lists.freeradius.org">freeradius-users@lists.freeradius.org</a>>
<o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l0 level1 lfo1'><em><i><font face="Arial Bold"><span
style='font-family:"Arial Bold"'>Subject</span></font></i></em>: Reg:
Accounting RequestAuthenticator Secret <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l0 level1 lfo1'><em><i><font face="Arial Bold"><span
style='font-family:"Arial Bold"'>From</span></font></i></em>:
"Karthikeyan Gopal - ERS, HCL Tech" <<a
href="mailto:g_karthikeyan%40hcl.in">g_karthikeyan@hcl.in</a>> <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l0 level1 lfo1'><em><i><font face="Arial Bold"><span
style='font-family:"Arial Bold"'>Date</span></font></i></em>: Mon, 26 Jul
2010 20:50:47 +0530 <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l0 level1 lfo1'><em><i><font face="Arial Bold"><span
style='font-family:"Arial Bold"'>Accept-language</span></font></i></em>:
en-US <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l0 level1 lfo1'><em><i><font face="Arial Bold"><span
style='font-family:"Arial Bold"'>Acceptlanguage</span></font></i></em>:
en-US <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l0 level1 lfo1'><em><i><font face="Arial Bold"><span
style='font-family:"Arial Bold"'>Reply-to</span></font></i></em>:
FreeRadius users mailing list <<a
href="mailto:freeradius-users%40lists.freeradius.org">freeradius-users@lists.freeradius.org</a>>
<o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l0 level1 lfo1'><em><i><font face="Arial Bold"><span
style='font-family:"Arial Bold"'>Thread-index</span></font></i></em>:
Acss1h+3WmRLIuT+TCu3f/mEc2d7qw== <o:p></o:p></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l0 level1 lfo1'><em><i><font face="Arial Bold"><span
style='font-family:"Arial Bold"'>Thread-topic</span></font></i></em>: Reg:
Accounting RequestAuthenticator Secret <o:p></o:p></li>
</ul>
</span></font></b>
<div class=MsoNormal align=center style='text-align:center'><b><font size=3
face="Arial Bold"><span style='font-size:12.0pt'>
<hr<!--X-Head-of-Message-End--><!--X-Head-Body-Sep-Begin--> size=2 width="100%"
align=center>
</span></font></b></div>
<table class=MsoNormalTable border=0 cellpadding=0 width="100%"
style='width:100.0%'>
<tr>
<td style='padding:.75pt .75pt .75pt .75pt;a: link { color: blue } a:visited { color: purple }'>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><!--/htdig_noindex--><!--X-Head-Body-Sep-End--><!--X-Body-of-Message-->Hi,<O:P></O:P></span></font><o:p></o:p></b></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><O:P> </O:P></span></font><o:p></o:p></b></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>I have one
basic question in generating Accounting-Request and Response Authenticator
generation.<O:P></O:P></span></font><o:p></o:p></b></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><O:P> </O:P></span></font><o:p></o:p></b></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial;font-weight:
normal'>My config:<O:P></O:P></span></font></b><o:p></o:p></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>NAS shared
secret = testing123<O:P></O:P></span></font><o:p></o:p></b></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Accounting
server Secret = 123testing<O:P></O:P></span></font><o:p></o:p></b></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><O:P> </O:P></span></font><o:p></o:p></b></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>While
generating Accounting-Request Authenticator which secret to use?<O:P></O:P></span></font><o:p></o:p></b></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>NAS or
Acct server secret?<O:P></O:P></span></font><o:p></o:p></b></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><O:P> </O:P></span></font><o:p></o:p></b></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>In
Accounting Response: Which secret should be used to generate accounting
response authenticator? <O:P></O:P></span></font><o:p></o:p></b></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><O:P> </O:P></span></font><o:p></o:p></b></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Regards,<O:P></O:P></span></font><o:p></o:p></b></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Karthik<O:P></O:P></span></font><o:p></o:p></b></p>
</td>
</tr>
</table>
<p class=MsoNormal><b><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial;font-weight:normal'><o:p> </o:p></span></font></b></p>
</div>
</body>
</html>
<table><tr><td bgcolor=#ffffff><font color=#000000><pre>DISCLAIMER:
-----------------------------------------------------------------------------------------------------------------------
The contents of this e-mail and any attachment(s) are confidential and intended for the named recipient(s) only.
It shall not attach any liability on the originator or HCL or its affiliates. Any views or opinions presented in
this email are solely those of the author and may not necessarily reflect the opinions of HCL or its affiliates.
Any form of reproduction, dissemination, copying, disclosure, modification, distribution and / or publication of
this message without the prior written consent of the author of this e-mail is strictly prohibited. If you have
received this email in error please delete it and notify the sender immediately. Before opening any mail and
attachments please check them for viruses and defect.
-----------------------------------------------------------------------------------------------------------------------</pre></font></td></tr></table>