radiusd: FreeRADIUS Version 3.0.0, for host i686-pc-linux-gnu, built on Mar 24 2011 at 15:45:30 I'm on a bit of a limb here, but I think I might have found a bug. Far from sure though, so please don't kill me if I'm wrong. Example of authentication reply: Sending Access-Accept of id 162 to 192.168.106.240 port 1812 WiMAX-R3-IF-Name = "KRIS" 01 06 4b 52 49 53 WiMAX-PDFID = 1 02 04 00 01 *WiMAX-R3-IF-Descriptor = ...*<- *Perfect* 1a 13 000060b5 (24757) 8b 0d 00 01 06 4b 52 49 53 02 04 00 01 WiMAX-Packet-Data-Flow-Id = 1 01 04 00 01 WiMAX-Direction = Bi-Directional 04 03 03 WiMAX-Transport-Type = Ethernet 06 03 03 WiMAX-Uplink-QOS-Id = 1 07 03 01 WiMAX-Downlink-QOS-Id = 1 08 03 01 WiMAX-ClassifierID = 1 01 03 01 WiMAX-Classifier-Priority = 1 02 03 01 WiMAX-Classifier-Direction = Bi-Directional 04 03 03 WiMAX-VLAN-ID = 50 09 04 00 32 *WiMAX-Classifier = ...* <- *Perfect* 0b 0f 01 03 01 02 03 01 04 03 03 09 04 00 32 WiMAX-QoS-Id = 1 01 03 01 WiMAX-Schedule-Type = Best-Effort 04 03 02 WiMAX-Traffic-Priority = 1 05 03 01 WiMAX-Maximum-Sustained-Traffic-Rate = 2000000 06 06 00 1e 84 80 WiMAX-Packet-Flow-Descriptor = ... 1a 37 000060b5 (24757) 1c 31 00 01 04 00 01 04 03 03 06 03 03 07 03 01 08 03 01 *0b 0f 01 03 01 02 03 01 04 03 03 09 04 00 32 01 *<-Our classifier has been packed in the flow descriptor 03 01 04 03 02 05 03 01 06 06 00 1e 84 80 Calling-Station-Id = "00-10-E7-AA-40-C4" 1f 13 30 30 2d 31 30 2d 45 37 2d 41 41 2d 34 30 2d 43 34 EAP-Message = 0x03070004 4f 06 03 07 00 04 Message-Authenticator = 0x00000000000000000000000000000000 50 12 ... User-Name = "{am=1}34f1c6d378383b0a78a50d1d61c14976" 01 28 7b 61 6d 3d 31 7d 33 34 66 31 63 36 64 33 37 38 33 38 33 62 30 61 37 38 61 35 30 64 31 64 36 31 63 31 34 39 37 36 WiMAX-AAA-Session-Id = 0x3635613865393037626230306231653539633164643033626162353832353630 1a 29 000060b5 (24757) 04 23 00 36 35 61 38 65 39 30 37 62 62 30 30 62 31 65 35 39 63 31 64 64 30 33 62 61 62 35 38 32 35 36 30 WiMAX-MSK = 0xbb7ceda36bf48308924b3c134c73a576e4f0a290ee7e099070d0b6efe09a98032a0a4f93e626a3a1c803ca964d0288da345587f2c8b64d76c39957e482662b4a 1a 5b 000060b5 (24757) 05 55 00 87 2b dc 67 b2 50 8a 3f 02 95 25 c3 d2 c2 52 d2 07 50 3b a1 a9 e0 53 48 3a a2 74 3f 86 5c 22 17 a2 a6 72 64 c9 0e de 93 53 a7 18 a4 92 40 79 6e 54 d3 81 c5 9e c7 3c ac 2c 53 12 c8 b0 63 81 a5 8e ca ed c4 f8 ed 05 29 42 4a 40 98 56 8b 34 8b b5 2f Code: 2 Id: 162 Length: 309 Vector: 8b8551e57f89b4247daf7b2f0d312efa Data: 1a 13 000060b5 (24757) 8b 0d 00 01 06 4b 52 49 53 02 04 00 01 1a 37 000060b5 (24757) 1c 31 00 01 04 00 01 04 03 03 06 03 03 07 03 01 08 03 01 0b 0f 01 03 01 02 03 01 04 03 03 09 04 00 32 01 03 01 04 03 02 05 03 01 06 06 00 1e 84 80 1f 13 30 30 2d 31 30 2d 45 37 2d 41 41 2d 34 30 2d 43 34 4f 06 03 07 00 04 50 12 b5 7e 69 23 2f d4 52 d0 5b 8d de e2 83 41 c3 22 01 28 7b 61 6d 3d 31 7d 33 34 66 31 63 36 64 33 37 38 33 38 33 62 30 61 37 38 61 35 30 64 31 64 36 31 63 31 34 39 37 36 1a 29 000060b5 (24757) 04 23 00 36 35 61 38 65 39 30 37 62 62 30 30 62 31 65 35 39 63 31 64 64 30 33 62 61 62 35 38 32 35 36 30 1a 5b 000060b5 (24757) 05 55 00 87 2b dc 67 b2 50 8a 3f 02 95 25 c3 d2 c2 52 d2 07 50 3b a1 a9 e0 53 48 3a a2 74 3f 86 5c 22 17 a2 a6 72 64 c9 0e de 93 53 a7 18 a4 92 40 79 6e 54 d3 81 c5 9e c7 3c ac 2c 53 12 c8 b0 63 81 a5 8e ca ed c4 f8 ed 05 29 42 4a 40 98 56 8b 34 8b b5 2f Fri Mar 25 09:15:51 2011 : Info: (6) Finished request. The problem here though, is that the following attributes: *WiMAX-QoS-Id* = 1 01 03 01 *WiMAX-Schedule-Type* = Best-Effort 04 03 02 *WiMAX-Traffic-Priority* = 1 05 03 01 *WiMAX-Maximum-Sustained-Traffic-Rate* = 2000000 Should really be packed into a WiMAX-QoS-Descriptor,as far as I can see? Cut'n'paste from Dictionary: ATTRIBUTE WiMAX-QoS-Descriptor 29 tlv ATTRIBUTE WiMAX-QoS-Id 29.1 byte ATTRIBUTE WiMAX-Global-Service-Class-Name 29.2 string # 6 octets ATTRIBUTE WiMAX-Service-Class-Name 29.3 string ATTRIBUTE WiMAX-Schedule-Type 29.4 byte ATTRIBUTE WiMAX-Traffic-Priority 29.5 byte ATTRIBUTE WiMAX-Maximum-Sustained-Traffic-Rate 29.6 integer ATTRIBUTE WiMAX-Minimum-Reserved-Traffic-Rate 29.7 integer ATTRIBUTE WiMAX-Maximum-Traffic-Burst 29.8 integer ATTRIBUTE WiMAX-Tolerated-Jitter 29.9 integer ATTRIBUTE WiMAX-Maximum-Latency 29.10 integer ATTRIBUTE WiMAX-Reduced-Resources-Code 29.11 byte ATTRIBUTE WiMAX-Media-Flow-Type 29.12 byte ATTRIBUTE WiMAX-Unsolicited-Grant-Interval 29.13 short ATTRIBUTE WiMAX-SDU-Size 29.14 short ATTRIBUTE WiMAX-Unsolicited-Polling-Interval 29.15 short ATTRIBUTE WiMAX-Media-Flow-Description-SDP 29.16 string And should most definately *not* be included in the WiMAX-Packet-Flow-Descriptor. Am I messing up something here, or could there be a bug in the encoder? - Kristoffer Milligan
On 03/25/2011 09:59 AM, Alan DeKok wrote:
Kristoffer Milligan wrote:
Am I messing up something here, or could there be a bug in the encoder? Bug in the encoder. Fixed&& pushed to "git".
WiMAX is *weird*.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Wohoo! I managed to spot something! :)
Anyway, ~/freeradius-server# git pull Already up-to-date. Did it push to production?
If you are working on a VPWS service flow in an Alvarion 4-Motion base station you will have to do some steps to fix the NAS. 1. Update to the latest version for 2.2 2. Define the R3 attributes in a separate dictionary. 3. Update the main dictionary.wimax to make sure all of the Alvarion WiMAX- attributes are added to that dictionary 4. Let me know any success as I have yet to get the NAS to properly accept the service flow. Let me know if you need any dictionary files for that NAS. David From: freeradius-users-bounces+david.peterson=acc-corp.net@lists.freeradius.org [mailto:freeradius-users-bounces+david.peterson=acc-corp.net@lists.freeradiu s.org] On Behalf Of Kristoffer Milligan Sent: Friday, March 25, 2011 4:26 AM To: FreeRadius users mailing list Subject: Wrong packing of attributes? radiusd: FreeRADIUS Version 3.0.0, for host i686-pc-linux-gnu, built on Mar 24 2011 at 15:45:30 I'm on a bit of a limb here, but I think I might have found a bug. Far from sure though, so please don't kill me if I'm wrong. Example of authentication reply: Sending Access-Accept of id 162 to 192.168.106.240 port 1812 WiMAX-R3-IF-Name = "KRIS" 01 06 4b 52 49 53 WiMAX-PDFID = 1 02 04 00 01 WiMAX-R3-IF-Descriptor = ...<- Perfect 1a 13 000060b5 (24757) 8b 0d 00 01 06 4b 52 49 53 02 04 00 01 WiMAX-Packet-Data-Flow-Id = 1 01 04 00 01 WiMAX-Direction = Bi-Directional 04 03 03 WiMAX-Transport-Type = Ethernet 06 03 03 WiMAX-Uplink-QOS-Id = 1 07 03 01 WiMAX-Downlink-QOS-Id = 1 08 03 01 WiMAX-ClassifierID = 1 01 03 01 WiMAX-Classifier-Priority = 1 02 03 01 WiMAX-Classifier-Direction = Bi-Directional 04 03 03 WiMAX-VLAN-ID = 50 09 04 00 32 WiMAX-Classifier = ... <- Perfect 0b 0f 01 03 01 02 03 01 04 03 03 09 04 00 32 WiMAX-QoS-Id = 1 01 03 01 WiMAX-Schedule-Type = Best-Effort 04 03 02 WiMAX-Traffic-Priority = 1 05 03 01 WiMAX-Maximum-Sustained-Traffic-Rate = 2000000 06 06 00 1e 84 80 WiMAX-Packet-Flow-Descriptor = ... 1a 37 000060b5 (24757) 1c 31 00 01 04 00 01 04 03 03 06 03 03 07 03 01 08 03 01 0b 0f 01 03 01 02 03 01 04 03 03 09 04 00 32 01 <-Our classifier has been packed in the flow descriptor 03 01 04 03 02 05 03 01 06 06 00 1e 84 80 Calling-Station-Id = "00-10-E7-AA-40-C4" 1f 13 30 30 2d 31 30 2d 45 37 2d 41 41 2d 34 30 2d 43 34 EAP-Message = 0x03070004 4f 06 03 07 00 04 Message-Authenticator = 0x00000000000000000000000000000000 50 12 ... User-Name = "{am=1}34f1c6d378383b0a78a50d1d61c14976" 01 28 7b 61 6d 3d 31 7d 33 34 66 31 63 36 64 33 37 38 33 38 33 62 30 61 37 38 61 35 30 64 31 64 36 31 63 31 34 39 37 36 WiMAX-AAA-Session-Id = 0x3635613865393037626230306231653539633164643033626162353832353630 1a 29 000060b5 (24757) 04 23 00 36 35 61 38 65 39 30 37 62 62 30 30 62 31 65 35 39 63 31 64 64 30 33 62 61 62 35 38 32 35 36 30 WiMAX-MSK = 0xbb7ceda36bf48308924b3c134c73a576e4f0a290ee7e099070d0b6efe09a98032a0a4f93e6 26a3a1c803ca964d0288da345587f2c8b64d76c39957e482662b4a 1a 5b 000060b5 (24757) 05 55 00 87 2b dc 67 b2 50 8a 3f 02 95 25 c3 d2 c2 52 d2 07 50 3b a1 a9 e0 53 48 3a a2 74 3f 86 5c 22 17 a2 a6 72 64 c9 0e de 93 53 a7 18 a4 92 40 79 6e 54 d3 81 c5 9e c7 3c ac 2c 53 12 c8 b0 63 81 a5 8e ca ed c4 f8 ed 05 29 42 4a 40 98 56 8b 34 8b b5 2f Code: 2 Id: 162 Length: 309 Vector: 8b8551e57f89b4247daf7b2f0d312efa Data: 1a 13 000060b5 (24757) 8b 0d 00 01 06 4b 52 49 53 02 04 00 01 1a 37 000060b5 (24757) 1c 31 00 01 04 00 01 04 03 03 06 03 03 07 03 01 08 03 01 0b 0f 01 03 01 02 03 01 04 03 03 09 04 00 32 01 03 01 04 03 02 05 03 01 06 06 00 1e 84 80 1f 13 30 30 2d 31 30 2d 45 37 2d 41 41 2d 34 30 2d 43 34 4f 06 03 07 00 04 50 12 b5 7e 69 23 2f d4 52 d0 5b 8d de e2 83 41 c3 22 01 28 7b 61 6d 3d 31 7d 33 34 66 31 63 36 64 33 37 38 33 38 33 62 30 61 37 38 61 35 30 64 31 64 36 31 63 31 34 39 37 36 1a 29 000060b5 (24757) 04 23 00 36 35 61 38 65 39 30 37 62 62 30 30 62 31 65 35 39 63 31 64 64 30 33 62 61 62 35 38 32 35 36 30 1a 5b 000060b5 (24757) 05 55 00 87 2b dc 67 b2 50 8a 3f 02 95 25 c3 d2 c2 52 d2 07 50 3b a1 a9 e0 53 48 3a a2 74 3f 86 5c 22 17 a2 a6 72 64 c9 0e de 93 53 a7 18 a4 92 40 79 6e 54 d3 81 c5 9e c7 3c ac 2c 53 12 c8 b0 63 81 a5 8e ca ed c4 f8 ed 05 29 42 4a 40 98 56 8b 34 8b b5 2f Fri Mar 25 09:15:51 2011 : Info: (6) Finished request. The problem here though, is that the following attributes: WiMAX-QoS-Id = 1 01 03 01 WiMAX-Schedule-Type = Best-Effort 04 03 02 WiMAX-Traffic-Priority = 1 05 03 01 WiMAX-Maximum-Sustained-Traffic-Rate = 2000000 Should really be packed into a WiMAX-QoS-Descriptor,as far as I can see? Cut'n'paste from Dictionary: ATTRIBUTE WiMAX-QoS-Descriptor 29 tlv ATTRIBUTE WiMAX-QoS-Id 29.1 byte ATTRIBUTE WiMAX-Global-Service-Class-Name 29.2 string # 6 octets ATTRIBUTE WiMAX-Service-Class-Name 29.3 string ATTRIBUTE WiMAX-Schedule-Type 29.4 byte ATTRIBUTE WiMAX-Traffic-Priority 29.5 byte ATTRIBUTE WiMAX-Maximum-Sustained-Traffic-Rate 29.6 integer ATTRIBUTE WiMAX-Minimum-Reserved-Traffic-Rate 29.7 integer ATTRIBUTE WiMAX-Maximum-Traffic-Burst 29.8 integer ATTRIBUTE WiMAX-Tolerated-Jitter 29.9 integer ATTRIBUTE WiMAX-Maximum-Latency 29.10 integer ATTRIBUTE WiMAX-Reduced-Resources-Code 29.11 byte ATTRIBUTE WiMAX-Media-Flow-Type 29.12 byte ATTRIBUTE WiMAX-Unsolicited-Grant-Interval 29.13 short ATTRIBUTE WiMAX-SDU-Size 29.14 short ATTRIBUTE WiMAX-Unsolicited-Polling-Interval 29.15 short ATTRIBUTE WiMAX-Media-Flow-Description-SDP 29.16 string And should most definately *not* be included in the WiMAX-Packet-Flow-Descriptor. Am I messing up something here, or could there be a bug in the encoder? - Kristoffer Milligan
David Peterson wrote:
1. Update to the latest version for 2.2
It's now "pre-3.0"
2. Define the R3 attributes in a separate dictionary.
Already in share/dictionary.alvarion.wimax.v2_2
3. Update the main dictionary.wimax to make sure all of the Alvarion WiMAX- attributes are added to that dictionary
Already in share/dictionary.wimax.alvarion
4. Let me know any success as I have yet to get the NAS to properly accept the service flow.
Some fixes went in recently for encoding WiMAX attributes. The new "-Xxx" feature is very useful for debugging the detailed contents of packets. Alan DeKok.
Excellent! I just ran a git pull but not sure if I am set up correctly. Here is the output I received.
From git://git.freeradius.org/freeradius-server 03f1be4..92caaa4 master -> origin/master 2ae298a..14f534a v2.1.x -> origin/v2.1.x
Should I make some changes to my git setup? David -----Original Message----- From: Alan DeKok [mailto:aland@deployingradius.com] Sent: Friday, March 25, 2011 8:44 AM To: David Peterson-WirelessConnections; FreeRadius users mailing list Subject: Re: Wrong packing of attributes? David Peterson wrote:
1. Update to the latest version for 2.2
It's now "pre-3.0"
2. Define the R3 attributes in a separate dictionary.
Already in share/dictionary.alvarion.wimax.v2_2
3. Update the main dictionary.wimax to make sure all of the Alvarion WiMAX- attributes are added to that dictionary
Already in share/dictionary.wimax.alvarion
4. Let me know any success as I have yet to get the NAS to properly accept the service flow.
Some fixes went in recently for encoding WiMAX attributes. The new "-Xxx" feature is very useful for debugging the detailed contents of packets. Alan DeKok.
You want the master branch mate, git clone git://git.freeradius.org/freeradius-server.git http://git.freeradius.org/ On 03/25/2011 02:06 PM, David Peterson wrote:
Excellent!
I just ran a git pull but not sure if I am set up correctly. Here is the output I received.
From git://git.freeradius.org/freeradius-server 03f1be4..92caaa4 master -> origin/master 2ae298a..14f534a v2.1.x -> origin/v2.1.x
Should I make some changes to my git setup?
David
-----Original Message----- From: Alan DeKok [mailto:aland@deployingradius.com] Sent: Friday, March 25, 2011 8:44 AM To: David Peterson-WirelessConnections; FreeRadius users mailing list Subject: Re: Wrong packing of attributes?
David Peterson wrote:
1. Update to the latest version for 2.2 It's now "pre-3.0"
2. Define the R3 attributes in a separate dictionary. Already in share/dictionary.alvarion.wimax.v2_2
3. Update the main dictionary.wimax to make sure all of the Alvarion WiMAX- attributes are added to that dictionary Already in share/dictionary.wimax.alvarion
4. Let me know any success as I have yet to get the NAS to properly accept the service flow. Some fixes went in recently for encoding WiMAX attributes. The new "-Xxx" feature is very useful for debugging the detailed contents of packets.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thanks! OK I am now getting this on compile... I must have screwed something up: make[4]: Entering directory `/usr/src/freeradius-server/freeradius-server/src/ma in' /usr/src/freeradius-server/freeradius-server/libtool --mode=compile gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wshadow -Wpointe r-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-p rototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef - I/usr/src/freeradius-server/freeradius-server/src -DHOSTINFO=\"i686-pc-linux-gnu \" -DRADIUSD_VERSION=\"3.0.0\" -DOPENSSL_NO_KRB5 -c acct.c mkdir .libs gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wsha dow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-dec ls -Wundef -I/usr/src/freeradius-server/freeradius-server/src -DHOSTINFO=\"i686- pc-linux-gnu\" -DRADIUSD_VERSION=\"3.0.0\" -DOPENSSL_NO_KRB5 -c acct.c -fPIC -D PIC -o .libs/acct.o gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wsha dow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-dec ls -Wundef -I/usr/src/freeradius-server/freeradius-server/src -DHOSTINFO=\"i686- pc-linux-gnu\" -DRADIUSD_VERSION=\"3.0.0\" -DOPENSSL_NO_KRB5 -c acct.c -o acct.o
/dev/null 2>&1 /usr/src/freeradius-server/freeradius-server/libtool --mode=compile gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wshadow -Wpointe r-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-p rototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef - I/usr/src/freeradius-server/freeradius-server/src -DHOSTINFO=\"i686-pc-linux-gnu \" -DRADIUSD_VERSION=\"3.0.0\" -DOPENSSL_NO_KRB5 -c auth.c gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wsha dow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-dec ls -Wundef -I/usr/src/freeradius-server/freeradius-server/src -DHOSTINFO=\"i686- pc-linux-gnu\" -DRADIUSD_VERSION=\"3.0.0\" -DOPENSSL_NO_KRB5 -c auth.c -fPIC -D PIC -o .libs/auth.o auth.c: In function 'auth_name': auth.c:51: error: too few arguments to function 'pairfind' make[4]: *** [auth.lo] Error 1
-----Original Message----- From: Kristoffer Milligan [mailto:kristoffer@nextnet.no] Sent: Friday, March 25, 2011 9:42 AM To: David Peterson-WirelessConnections; FreeRadius users mailing list Subject: Re: Wrong packing of attributes? You want the master branch mate, git clone git://git.freeradius.org/freeradius-server.git http://git.freeradius.org/ On 03/25/2011 02:06 PM, David Peterson wrote:
Excellent!
I just ran a git pull but not sure if I am set up correctly. Here is the output I received.
From git://git.freeradius.org/freeradius-server 03f1be4..92caaa4 master -> origin/master 2ae298a..14f534a v2.1.x -> origin/v2.1.x
Should I make some changes to my git setup?
David
-----Original Message----- From: Alan DeKok [mailto:aland@deployingradius.com] Sent: Friday, March 25, 2011 8:44 AM To: David Peterson-WirelessConnections; FreeRadius users mailing list Subject: Re: Wrong packing of attributes?
David Peterson wrote:
1. Update to the latest version for 2.2 It's now "pre-3.0"
2. Define the R3 attributes in a separate dictionary. Already in share/dictionary.alvarion.wimax.v2_2
3. Update the main dictionary.wimax to make sure all of the Alvarion WiMAX- attributes are added to that dictionary Already in share/dictionary.wimax.alvarion
4. Let me know any success as I have yet to get the NAS to properly accept the service flow. Some fixes went in recently for encoding WiMAX attributes. The new "-Xxx" feature is very useful for debugging the detailed contents of packets.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
That fixed it. Thanks! David -----Original Message----- From: Alan DeKok [mailto:aland@deployingradius.com] Sent: Friday, March 25, 2011 10:32 AM To: David Peterson-WirelessConnections; FreeRadius users mailing list Subject: Re: Wrong packing of attributes? David Peterson wrote:
OK I am now getting this on compile... I must have screwed something up:
"git pull" again. Dang API differences between 2.1 and 3.0. Alan DeKok.
participants (3)
-
Alan DeKok -
David Peterson -
Kristoffer Milligan