POD not work with radclient
Dear guys I am comming with new problem now i have enable POD packet of disconnet on cisco router and now i m trying to disconnect user with radclient command but i got this output [root@radius ~]# cat packet.txt Acct-Session-Id=0000C476 User-Name=mlpm607 X-Ascend-Session-Svr-Key=396830D9 NAS-IP-Address=192.168.1.1 [root@radius ~]# cat packet.txt | radclient -x 192.168.1.1:1700 disconnect tulip786 Sending Disconnect-Request of id 115 to 192.168.1.1 port 1700 Acct-Session-Id = "0000C476" User-Name = "mlpm607" X-Ascend-Session-Svr-Key = "396830D9" NAS-IP-Address = 192.168.1.1 rad_recv: Disconnect-NAK packet from host 192.168.1.1:1700, id=115, length=41 Reply-Message = "No Matching Session" why user not disconnect from NAS but user still login on NAS ????? $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers
On Wed 28 Mar 2007 16:30, satish patel wrote:
Dear guys
I am comming with new problem now i have enable POD packet of disconnet on cisco router and now i m trying to disconnect user with radclient command but i got this output
-snip-
rad_recv: Disconnect-NAK packet from host 192.168.1.1:1700, id=115, length=41 Reply-Message = "No Matching Session"
Thats a pretty easy to understand error message sent back by your NAS... -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
but why this is not working for me everything is configure correctly but still error NO match session ??? Peter Nixon <listuser@peternixon.net> wrote: On Wed 28 Mar 2007 16:30, satish patel wrote:
Dear guys
I am comming with new problem now i have enable POD packet of disconnet on cisco router and now i m trying to disconnect user with radclient command but i got this output
-snip-
rad_recv: Disconnect-NAK packet from host 192.168.1.1:1700, id=115, length=41 Reply-Message = "No Matching Session"
Thats a pretty easy to understand error message sent back by your NAS... -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers
Well I suppose would need to see what information you are sending it and what it is expecting. Nobody can see that except yourself so there is no way we can probably understand why it is not working. I would suggest you double check the ascend-session-key and not the unique session field. _____ From: freeradius-users-bounces+cory=cmi.net.au@lists.freeradius.org [mailto:freeradius-users-bounces+cory=cmi.net.au@lists.freeradius.org] On Behalf Of satish patel Sent: Thursday, 29 March 2007 2:58 PM To: FreeRadius users mailing list Subject: Re: POD not work with radclient but why this is not working for me everything is configure correctly but still error NO match session ??? Peter Nixon <listuser@peternixon.net> wrote: On Wed 28 Mar 2007 16:30, satish patel wrote:
Dear guys
I am comming with new problem now i have enable POD packet of disconnet on cisco router and now i m trying to disconnect user with radclient command but i got this output
-snip-
rad_recv: Disconnect-NAK packet from host 192.168.1.1:1700, id=115, length=41 Reply-Message = "No Matching Session"
Thats a pretty easy to understand error message sent back by your NAS... -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com _____ Here's a new way to find what you're looking for - Yahoo! <http://us.rd.yahoo.com/mail/in/yanswers/*http:/in.answers.yahoo.com/> Answers
Am Mittwoch, den 28.03.2007, 14:30 +0100 schrieb satish patel:
why user not disconnect from NAS but user still login on NAS ?????
Maybe you've been hit by this bug? http://www.cisco.com/en/US/products/hw/routers/ps133/prod_release_note09186a... CSCee16150 Previously, the router did not respond to valid packet of disconnect (PoD) packets by disconnecting the user. Instead, the router returned a RADIUS-format packet with a Code of Disconnect-Request-NAKed (42 in decimal) and a Reply-Message attribute with a value set to the string "No Matching Session." This problem occurred when you used PoD to disconnect users, and have aaa pod server ... auth-type all ... configured, and used a PoD server that included an exact copy of RADIUS attribute 151 from an earlier accounting request in the PoD packet. In RADIUS accounting packets, Cisco IOS generates attribute 151 values as a string of hexadecimal digits, corresponding to a 32-bit integer. When running an IOS version affected by this bug, the router IOS expects a copy of that 32-bit unsigned integer as a 32-bit unsigned integer, rather than as a string of ASCII characters representing a hexadecimal number. In Cisco IOS versions where the fix for this bug has been integrated, Cisco IOS will accept either the string which IOS sent out, or the 32-bit unsigned integer which unfixed versions accept. Regards Stephan
participants (4)
-
Cory Robson -
Peter Nixon -
satish patel -
Stephan Jaeger