We proxy some authentication and accounting to another
company.
After installing freeradius version 2.0.1 they have said
they are getting errors in their log file:
02/13/2008 00:01:06 Missing Acct-Status-Type attribute in
request
02/13/2008 00:01:06 Request has invalid syntax (e.g. invalid, missing or
duplicate attributes), Silently discarding
We get the accounting info fine in our sql database.
Here is the part from the debugging that sends the
accounting info to the other company.
Wed Feb 13 15:17:00 2008 : Debug: rlm_sql (sql): Released
sql socket id: 4
Wed Feb 13 15:17:00 2008 : Debug:
modsingle[accounting]: returned from sql (rlm_sql) for request 0
Wed Feb 13 15:17:00 2008 : Debug: ++[sql] returns ok
Wed Feb 13 15:17:00 2008 : Debug: modsingle[accounting]:
calling attr_filter.accounting_response (rlm_attr_filter) for request 0
Wed Feb 13 15:17:00 2008 :
Debug: expand: %{User-Name} ->
user1@dsl.realm1.co.uk
Wed Feb 13 15:17:00 2008 : Debug: attr_filter: Matched
entry DEFAULT at line 12
Wed Feb 13 15:17:00 2008 : Debug:
modsingle[accounting]: returned from attr_filter.accounting_response
(rlm_attr_filter) for request 0
Wed Feb 13 15:17:00 2008 : Debug:
++[attr_filter.accounting_response] returns updated
Wed Feb 13 15:17:00 2008 : Debug: +- entering group
pre-proxy
Wed Feb 13 15:17:00 2008 : Debug:
modsingle[pre-proxy]: calling pre_proxy_log (rlm_detail) for request 0
Wed Feb 13 15:17:00 2008 :
Debug: expand:
/usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d
-> /usr/local/var/log/radius/radacct/192.168.1.88/pre-proxy-detail-20080213
Wed Feb 13 15:17:00 2008 : Debug: rlm_detail:
/usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d
expands to /usr/local/var/log/radius/radacct/192.168.1.88/pre-proxy-detail-20080213
Wed Feb 13 15:17:00 2008 :
Debug: expand: %t -> Wed Feb 13 15:17:00
2008
Wed Feb 13 15:17:00 2008 : Debug:
modsingle[pre-proxy]: returned from pre_proxy_log (rlm_detail) for request 0
Wed Feb 13 15:17:00 2008 : Debug: ++[pre_proxy_log] returns
ok
Wed Feb 13 15:17:00 2008 : Debug: proxy: allocating
destination 10.0.3.4 port 1646 - Id 128
Sending Accounting-Request of id 128 to 10.0.3.4 port 1646
Cisco-AVPair =
"connect-progress=LAN Ses Up"
Cisco-AVPair =
"nas-tx-speed=2261000"
Cisco-AVPair =
"nas-rx-speed=2261000"
Proxy-State =
0x313235
Wed Feb 13 15:17:00 2008 : Debug: Proxying request 0 to home
server 10.0.3.4 port 1646
Sending Accounting-Request of id 128 to 10.0.3.4 port 1646
Cisco-AVPair =
"connect-progress=LAN Ses Up"
Cisco-AVPair =
"nas-tx-speed=2261000"
Cisco-AVPair =
"nas-rx-speed=2261000"
Realm =
"dsl.realm1.co.uk"
Proxy-State =
0x313235
It does seem to be sending the correct info.
The version of freeradius we had installed before used to
send:
Sending Accounting-Request of id 0 to 10.0.3.4:1646
Acct-Session-Id =
"0016CCEC"
Tunnel-Type:0 =
L2TP
Tunnel-Medium-Type:0 = IP
Tunnel-Server-Endpoint:0 = "192.168.1.88"
Tunnel-Client-Endpoint:0 = "212.248.197.74"
Tunnel-Assignment-Id:0 = "1"
Tunnel-Client-Auth-Id:0 = "RTMAN-HATH-BROAD-05"
Tunnel-Server-Auth-Id:0 = " VPDN1-ADSL"
Acct-Tunnel-Connection = "2931893097"
Framed-Protocol =
PPP
Framed-IP-Address
= 85.92.161.203
User-Name =
"user1@dsl.realm1.co.uk"
Cisco-AVPair =
"connect-progress=LAN Ses Up"
Cisco-AVPair =
"nas-tx-speed=5088000"
Cisco-AVPair =
"nas-rx-speed=5088000"
Acct-Session-Time
= 50249
Acct-Input-Octets
= 123755364
Acct-Output-Octets = 3820769896
Acct-Input-Packets = 1905005
Acct-Output-Packets = 2718597
Acct-Authentic =
RADIUS
Acct-Status-Type
= Alive
NAS-Port-Type =
Virtual
NAS-Port = 1349
NAS-Port-Id =
"Uniq-Sess-ID1349"
Class =
0x5342522d434c20444e3d22323034393136222041543d22323030222055533d22222053493d22383139362200
Service-Type =
Framed-User
NAS-IP-Address =
192.168.1.88
Acct-Delay-Time =
5
Proxy-State =
0x3936
Any help appreciated.
Thanks
Tony