Problems -- rad_verify: invalid signature (err=2)！ （shared secret is incorrect）
Hi all, I am using Fedora 12 and Freeradius 1.2.9 to do some COA test. When AAA sends Disconnect-request to my AGW, the AGW reply with a Disconnect-ACK, and my MS disconnects. But the rad_verify says: ----------------------------------------------------------------------- Received Disconnect-ACK packet from clinet 100.1.6.4 port 3799 with invalid signature (err=2)! (shared secret is incorrect. ----------------------------------------------------------------------- In fact the shared secret is correct!!! My disconnect packt.txt is like: ----------------------------------------------------------------------- Acct-Session-Id="00000001" Calling-Station-Id="001E310008CC" User-Name="wimax@zte.com" X-Ascend-Session-Svr-Key="0123456789" NAS-IP-Address=100.1.6.4 NAS-Identifier=CATR WiMAX-DM-Action-Code="0xffff" WiMAX-AAA-Session-Id="00000002" ----------------------------------------------------------------------- I don’t know how to solve this problem, can you please give any suggestions? Thanks a lot! Xiaochen @ a WiMAX Lab
Xiaochen wrote:
Hi all, I am using Fedora 12 and Freeradius 1.2.9
What is "1.2.9" ?
to do some COA test. When AAA sends Disconnect-request to my AGW, the AGW reply with a Disconnect-ACK, and my MS disconnects. But the rad_verify says: ----------------------------------------------------------------------- Received Disconnect-ACK packet from clinet 100.1.6.4 port 3799 with invalid signature (err=2)! (shared secret is incorrect. ----------------------------------------------------------------------- In fact the shared secret is correct!!!
No... it's not. Either the shared secret is incorrect, *or* the RADIUS server doesn't implement MD5 correctly, *or* the RADIUS client doesn't implement MD5 correctly. There are no other choices. Alan DeKok.
On 25/10/10 04:06, Xiaochen wrote:
Hi all, I am using Fedora 12 and Freeradius 1.2.9 to do some COA test. When AAA sends Disconnect-request to my AGW, the AGW reply with a Disconnect-ACK, and my MS disconnects. But the rad_verify says: ----------------------------------------------------------------------- Received Disconnect-ACK packet from clinet 100.1.6.4 port 3799 with invalid signature (err=2)! (shared secret is incorrect. ----------------------------------------------------------------------- In fact the shared secret is correct!!!
No it is not. The error message is unambiguous. You have made an error with the shared secret. Fix it.
participants (3)
-
Alan DeKok -
Phil Mayers -
Xiaochen