Re: failed to receive Accounting Response
If you mean when I type a some command on cisco shell, in the cisco console already I show you (much more), else you mean a radius server then I must disappoint you there is a silent, nothing to do! If you consider for important all debug information on radius when user login-run some command-log rad_recv: Access-Request packet from host 192.168.255.10 port 1812, id=91, length=77 NAS-IP-Address = 192.168.255.10 NAS-Port = 1 NAS-Port-Type = Virtual User-Name = "userA" Calling-Station-Id = "192.168.255.116" User-Password = "passwA" +- entering group authorize {...} ++[preprocess] returns ok [suffix] No '@' in User-Name = "userA", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [files] users: Matched entry userA at line 7 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns updated Found Auth-Type = PAP +- entering group PAP {...} [pap] login attempt with password "passwA" [pap] Using clear text password "passwA" [pap] User authenticated successfully ++[pap] returns ok Login OK: [userA/passwA] (from client csp port 1 cli 192.168.255.116) +- entering group post-auth {...} ++[exec] returns noop Sending Access-Accept of id 91 to 192.168.255.10 port 1812 Service-Type = NAS-Prompt-User Cisco-AVPair = "shell:priv-lvl=1" Finished request 0. Going to the next request Waking up in 4.9 seconds. rad_recv: Accounting-Request packet from host 192.168.255.10 port 1813, id=92, length=93 NAS-IP-Address = 192.168.255.10 NAS-Port = 1 NAS-Port-Type = Virtual User-Name = "userA" Calling-Station-Id = "192.168.255.116" Acct-Status-Type = Start Acct-Authentic = RADIUS Service-Type = NAS-Prompt-User Acct-Session-Id = "00000108" Acct-Delay-Time = 0 +- entering group preacct {...} ++[preprocess] returns ok [acct_unique] Hashing 'NAS-Port = 1,Client-IP-Address = 192.168.255.10,NAS-IP-Address = 192.168.255.10,Acct-Session-Id = "00000108",User-Name = "userA"' [acct_unique] Acct-Unique-Session-ID = "37c9ff46441cf46b". ++[acct_unique] returns ok [suffix] No '@' in User-Name = "userA", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop ++[files] returns noop +- entering group accounting {...} [detail] expand: /var/log/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/radacct/192.168.255.10/detail-20090307 [detail] /var/log/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/radacct/192.168.255.10/detail-20090307 [detail] expand: %t -> Sat Mar 7 02:26:33 2009 ++[detail] returns ok rlm_counter: We only run on Accounting-Stop packets. ++[daily] returns noop [radutmp] expand: /var/log/radutmp -> /var/log/radutmp [radutmp] expand: %{User-Name} -> userA ++[radutmp] returns ok [sradutmp] expand: /var/log/sradutmp -> /var/log/sradutmp [sradutmp] expand: %{User-Name} -> userA ++[sradutmp] returns ok [attr_filter.accounting_response] expand: %{User-Name} -> userA attr_filter: Matched entry DEFAULT at line 12 ++[attr_filter.accounting_response] returns updated Sending Accounting-Response of id 92 to 192.168.255.10 port 1813 Finished request 1. Cleaning up request 1 ID 92 with timestamp +20 Going to the next request Waking up in 4.9 seconds. Cleaning up request 0 ID 91 with timestamp +20 Ready to process requests. rad_recv: Accounting-Request packet from host 192.168.255.10 port 1813, id=93, length=105 NAS-IP-Address = 192.168.255.10 NAS-Port = 1 NAS-Port-Type = Virtual User-Name = "userA" Calling-Station-Id = "192.168.255.116" Acct-Status-Type = Stop Acct-Authentic = RADIUS Service-Type = NAS-Prompt-User Acct-Session-Id = "00000108" Acct-Terminate-Cause = User-Request Acct-Session-Time = 14 Acct-Delay-Time = 0 +- entering group preacct {...} ++[preprocess] returns ok [acct_unique] Hashing 'NAS-Port = 1,Client-IP-Address = 192.168.255.10,NAS-IP-Address = 192.168.255.10,Acct-Session-Id = "00000108",User-Name = "userA"' [acct_unique] Acct-Unique-Session-ID = "37c9ff46441cf46b". ++[acct_unique] returns ok [suffix] No '@' in User-Name = "userA", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop ++[files] returns noop +- entering group accounting {...} [detail] expand: /var/log/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/radacct/192.168.255.10/detail-20090307 [detail] /var/log/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/radacct/192.168.255.10/detail-20090307 [detail] expand: %t -> Sat Mar 7 02:26:47 2009 ++[detail] returns ok rlm_counter: Packet Unique ID = '37c9ff46441cf46b' rlm_counter: This Service-Type is not allowed. Returning NOOP. ++[daily] returns noop [radutmp] expand: /var/log/radutmp -> /var/log/radutmp [radutmp] expand: %{User-Name} -> userA ++[radutmp] returns ok [sradutmp] expand: /var/log/sradutmp -> /var/log/sradutmp [sradutmp] expand: %{User-Name} -> userA ++[sradutmp] returns ok [attr_filter.accounting_response] expand: %{User-Name} -> userA attr_filter: Matched entry DEFAULT at line 12 ++[attr_filter.accounting_response] returns updated Sending Accounting-Response of id 93 to 192.168.255.10 port 1813 Finished request 2. Cleaning up request 2 ID 93 with timestamp +34 Going to the next request Ready to process requests.
If you mean when I type a some command on cisco shell, in the cisco console already I show you (much more), else you mean a radius server then I must disappoint you there is a silent, nothing to do!
If you consider for important all debug information on radius when user login-run some command-log
Yes, radius debug is important. It shows that radius server is sending Accounting-Response now:
rad_recv: Accounting-Request packet from host 192.168.255.10 port 1813, id=92, length=93 NAS-IP-Address = 192.168.255.10 NAS-Port = 1 NAS-Port-Type = Virtual User-Name = "userA" Calling-Station-Id = "192.168.255.116" Acct-Status-Type = Start Acct-Authentic = RADIUS Service-Type = NAS-Prompt-User Acct-Session-Id = "00000108" Acct-Delay-Time = 0 .. Sending Accounting-Response of id 92 to 192.168.255.10 port 1813 Finished request 1. .. rad_recv: Accounting-Request packet from host 192.168.255.10 port 1813, id=93, length=105 NAS-IP-Address = 192.168.255.10 NAS-Port = 1 NAS-Port-Type = Virtual User-Name = "userA" Calling-Station-Id = "192.168.255.116" Acct-Status-Type = Stop Acct-Authentic = RADIUS Service-Type = NAS-Prompt-User Acct-Session-Id = "00000108" Acct-Terminate-Cause = User-Request Acct-Session-Time = 14 Acct-Delay-Time = 0 .. Sending Accounting-Response of id 93 to 192.168.255.10 port 1813 Finished request 2.
Time to check firewall and routing and find out why is it not getting back to the NAS. Ivan Kalik Kalik Informatika ISP
participants (2)
-
"Николай Г. Петров" -
tnt@kalik.net