insering the 3 record in radius db my using openser+radius+mysql

[Stefan Winter]

Hi,

> rad_recv: Accounting-Request packet from host 192.168.2.55:35094,
> id=151, length=220
>        Acct-Status-Type = Failed
>        Service-Type = Sip-Session
>        Sip-Response-Code = 0
>        Sip-Method = INVITE
>        User-Name =
> "666 at 192.168.2.55<https://email.secureserver.net/view.php?folder=INBOX.Sent
>_Items&uid=70#Compose> "
>        Calling-Station-Id =
> "sip:666 at 192.168.2.55<https://email.secureserver.net/view.php?folder=INBOX.
>Sent_Items&uid=70#Compose> "
>        Called-Station-Id =
> "sip:555 at 192.168.2.55<https://email.secureserver.net/view.php?folder=INBOX.
>Sent_Items&uid=70#Compose> "
>        Sip-Translated-Request-URI =
> "sip:555 at 192.168.2.55<https://email.secureserver.net/view.php?folder=INBOX.
>Sent_Items&uid=70#Compose> "
>        Acct-Session-Id =
> "893D5817-07A7-40D2-B0A8-987237749015 at 192.168.2.20<https://email.secureserv
>er.net/view.php?folder=INBOX.Sent_Items&uid=70#Compose> "
>        Sip-To-Tag = "n/a"
>        Sip-From-Tag = "757680932"
>        Sip-Cseq = "18235"
>        NAS-Port = 5060
>        Acct-Delay-Time = 0
>        NAS-IP-Address = 192.168.2.55

This request looks incredibly messy. My guess is that something is very wrong 
on the NAS device.

>    rlm_realm: Looking up realm "192.168.2.55" for User-Name =
> "666 at 192.168.2.55<https://email.secureserver.net/view.php?folder=INBOX.Sent
>_Items&uid=70#Compose> "
>    rlm_realm: No such realm "192.168.2.55"
>  modcall[preacct]: module "suffix" returns noop for request 2

Hm, this is a server behaivour I don't understand. Why does the server think 
the realm ends at the "<" character? It's the suffix module after all. 
Everything but @ should be opaque?

> rlm_radutmp: NAS radiusdtest port 5060 unknown packet type 15)
>  modcall[accounting]: module "radutmp" returns noop for request 2
> rlm_sql (sql): Unsupported Acct-Status-Type = 15
>  modcall[accounting]: module "sql" returns noop for request 2
> modcall: leaving group accounting (returns ok) for request 2
> Sending Accounting-Response of id 151 to 192.168.2.55 port 35094
> Finished request 2
> Going to the next request

Well, Acct-Status-Type = 15 is nothing the server can interpret. 15 stands for 
failed. Your NAS admitted itself that something went incredibly wrong. Here's 
what RFC 2866 says about this attribute:

   Value

      The Value field is four octets.

       1      Start
       2      Stop
       3      Interim-Update
       7      Accounting-On
       8      Accounting-Off
       9-14   Reserved for Tunnel Accounting
      15      Reserved for Failed

So, your NAS shouldn't even send 15: it's _reserved_.

Conclusion: go get a sane NAS device.

-- 
Stefan WINTER

Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de 
la Recherche - Ingénieur de recherche

6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg