possible ascend data filter problems

[Chuck]

On Tuesday 10 January 2006 06:41 pm, Alan DeKok wrote:
> Chuck <chuck at pathworx.com> wrote:
> > i have been working with our upstream dialup provider for a week now and 
he 
> > has come to the conclusion that freeradius is passing the data as ascii 
> > rather than abinary.
> 
>   Hmm... that shouldn't happen.  Which version are you running?
> 

below is the entire ebuild configuration/compile section in case there is 
something there that may cause this... it is freeradius 1.0.5.. also below 
this is the output from radtest if that might help too. the more i look into 
this the more i am confused as to why it isn't working properly.

---------------------------------------------------------

src_compile() {
#       export WANT_AUTOCONF=2.1
        autoconf

        local myconf=" \
                `use_with snmp` \
                `use_with frascend ascend-binary` \
                `use_with frxp experimental-modules` \
                `use_with udpfromto` \
                `use_with edirectory edir` "

        if useq frnothreads; then
                myconf="${myconf} --without-threads"
        fi
        #fix bug #77613
        if has_version app-crypt/heimdal; then
                myconf="${myconf} --enable-heimdal-krb5"
        fi

        # kill modules we don't use
        if ! use ssl; then
                einfo "removing rlm_eap_tls and rlm_x99_token (no use ssl)"
                rm -rf src/modules/rlm_eap/types/rlm_eap_tls 
src/modules/rlm_x99_token
        fi
        if ! use ldap; then
                einfo "removing rlm_ldap (no use ldap)"
                rm -rf src/modules/rlm_ldap
        fi
        if ! use kerberos; then
                einfo "removing rlm_krb5 (no use kerberos)"
                rm -rf src/modules/rlm_krb5
        fi
        if ! use pam; then
                einfo "removing rlm_pam (no use pam)"
                rm -rf src/modules/rlm_pam
        fi

        ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var \
                --mandir=/usr/share/man \
                --with-large-files --disable-ltdl-install --disable-static \
                ${myconf} || die
 
       make || die
}

-----------------------------------

plus, when i use radtest i get this result which seems to me to be either 
hex-text or the proper 'binary' they are  looking for? i am not familiar with 
this...

rad_recv: Access-Accept packet from host 64.113.39.5:1645, id=88, length=291
        Service-Type = Framed-User
        Framed-Protocol = PPP
        Port-Limit = 1
        Ascend-Data-Filter = 0x697020696e20666f72776172642074637020657374
        Ascend-Data-Filter = 
0x697020696e20666f72776172642064737469702036342e3131332e33342e302f32342030
        Ascend-Data-Filter = 
0x697020696e20666f72776172642064737469702036342e3131332e33362e34362f32382030
        Ascend-Data-Filter = 
0x697020696e2064726f702074637020647374706f7274203d203235
        Ascend-Data-Filter = 0x697020696e20666f72776172642030
        Ascend-Data-Filter = 
0x697020696e2064726f702074637020737263706f7374203d203830
        Ascend-Client-Assign-DNS = DNS-Assign-Yes
        Ascend-Client-Primary-DNS = 64.113.32.54
        Ascend-Client-Secondary-DNS = 64.113.39.4
        Session-Timeout = 14400




> > That too did not change anything. In my testing If I just plug the ascend
> > attributes in my users file as follows
> >        Ascend-data-filter += "ip in forward tcp est",
> >        Ascend-data-filter += "ip in forward dstip 64.113.34.0/24",
> >        Ascend-data-filter += "ip in drop tcp srcport = 80",
> >        Ascend-data-filter += "ip in drop tcp dstport = 25",
> >        Ascend-data-filter += "ip in forward",
> > And they translate to Abinary fine. This leads me to believe it has to
> > do with the way sql is passing it to you radius server.
> 
>   I don't see why.  The "users" file reads ascii strings, and they get
> packed as abinary stuff.  The SQL module should be doing exactly the
> same thing.
> 
>   Alan DeKok.
> - 
> List info/subscribe/unsubscribe? See 
http://www.freeradius.org/list/users.html
> 

-- 

Chuck

"Windows?? You mean the thirty-two bit extension and graphical shell to a 
sixteen-bit patch to an eight-bit operating system originally coded for a 
four-bit microprocessor which was written by a two-bit company that can't 
stand one bit of competition? Oh, that..." -- Lee Clarke