Problem with proxying request

BALSIANOK, Peter Peter.Balsianok at orange.sk
Tue Dec 18 14:11:00 CET 2012


Hi,

I try to send proxy request via freeradius-2.2.0, but as i can see in the debug output, freeradius didn`t process Accounting Response ( tcpdump shows, that server got response )

rad_recv: Accounting-Request packet from host 127.0.0.1 port 49935, id=13, length=202
                X-Ascend-Dial-Number != "<U+0557>\331\025"
                Acct-Session-Id != "d597d91572f51ab3"
                Service-Type != Framed-User
                Called-Station-Id != "orangewap"
                Acct-Link-Count != 1
                X-Ascend-Metric != 1928665779
                Acct-Authentic != Local
                Acct-Status-Type != Start
                NAS-IP-Address != 10.64.192.1
                X-Ascend-PRI-Number-Type != 8
                3GPP-SGSN-Address != 213.151.252.35
                Calling-Station-Id != "421905012405"
                X-Ascend-IPX-Alias != 4294967295
                Framed-Protocol != GPRS-PDP-Context
                User-Name != "421905012405"
                NAS-Identifier != "ggsn-01-bb1.orange.sk"
                Acct-Multi-Session-Id != "d597d9153962de6b"
                Framed-IP-Address != 10.10.1.1
(2) # Executing section preacct from file /app/radius/raddb/ggsn//sites-enabled/default
(2)   group preacct {
(2)  - entering group preacct {...}
(2)   [preprocess] = ok
(2) linelog :         escape: 'Start' -> 'Start'
(2) linelog :         expand: '%{Acct-Status-Type}' -> 'Start'
(2) linelog :         expand: 'Accounting-Request.%{%{Acct-Status-Type}:-unknown}' -> 'Accounting-Request.Start'
(2) linelog :         expand: '/app_log/radius/ggsn/ggsn-acct.dat' -> '/app_log/radius/ggsn/ggsn-acct.dat'
(2) linelog :         escape: 'Start' -> 'Start'
(2) linelog :         escape: '421905012405' -> '421905012405'
(2) linelog :         escape: '10.10.1.1' -> '10.10.1.1'
(2) linelog :         escape: 'orangewap' -> 'orangewap'
(2) linelog :         escape: '10.64.192.1' -> '10.64.192.1'
(2) linelog :         escape: '213.151.252.35' -> '213.151.252.35'
(2) linelog :         escape: 'd597d9153962de6b' -> 'd597d9153962de6b'
(2) linelog :         expand: '%{Acct-Status-Type}:%{Calling-Station-Id}:%{Framed-IP-Address}:%{Called-Station-Id}:%{NAS-IP-Address}:%{3GPP-SGSN-Address}:%{Acct-Multi-Session-Id}:%l' -> 'Start:421905012405:10.10.1.1:orangewap:10.64.192.1:213.151.252.35:d597d9153962de6b:1355835824'
(2)   [linelog] = ok
(2) suffix : No '@' in User-Name = "421905012405", looking up realm NULL
(2) suffix : No such realm "NULL"
(2)   [suffix] = noop
(2) files : acct_users: Matched entry DEFAULT at line 25
(2)   [files] = ok
(2) # Executing section accounting from file /app/radius/raddb/ggsn//sites-enabled/default
(2)   group accounting {
(2)  - entering group accounting {...}
(2) attr_filter.accounting_response :     expand: '%{User-Name}' -> '421905012405'
(2) attr_filter.accounting_response : Matched entry DEFAULT at line 103
(2)   [attr_filter.accounting_response] = updated
(2) # Executing section pre-proxy from file /app/radius/raddb/ggsn//sites-enabled/default
(2)   group pre-proxy {
(2)  - entering group pre-proxy {...}
(2) files : preproxy_users: Matched entry DEFAULT at line 33
(2) files :              expand: '%{Called-Station-Id}.%{3GPP-SGSN-Address}' -> 'orangewap.213.151.252.35'
(2)   [files] = ok
(2) Proxying request to home server 213.151.250.149 port 1813
Sending Accounting-Request of id 93 from 255.255.255.255 port 56347 to 213.151.250.149 port 1813
                X-Ascend-Dial-Number != "<U+0557>\331\025"
                Acct-Session-Id != "d597d91572f51ab3"
                Service-Type != Framed-User
                Called-Station-Id = "orangewap.213.151.252.35"
                Acct-Link-Count != 1
                X-Ascend-Metric != 1928665779
                Acct-Authentic != Local
                Acct-Status-Type != Start
                NAS-IP-Address != 10.64.192.1
                X-Ascend-PRI-Number-Type != 8
                3GPP-SGSN-Address != 213.151.252.35
                Calling-Station-Id != "421905012405"
                X-Ascend-IPX-Alias != 4294967295
                Framed-Protocol != GPRS-PDP-Context
                User-Name != "421905012405"
                NAS-Identifier != "ggsn-01-bb1.orange.sk"
                Acct-Multi-Session-Id != "d597d9153962de6b"
                Framed-IP-Address != 10.10.1.1
                Event-Timestamp != "Dec 18 2012 14:03:44 CET"
                Proxy-State != 0x3133
Waking up in 0.3 seconds.
Waking up in 0.4 seconds.
(2) Expecting proxy response no later than 14 seconds from now
Waking up in 13.1 seconds.
(2) No proxy response, giving up on request and marking it done
(2) Failing request due to lack of any response from home server 213.151.250.149 port 1813
No Post-Proxy-Type Fail: ignoring
(2) Cleaning up request packet ID 13 with timestamp +323
Ready to process requests.

Here is tcp dump of the communication between freeradius and 3rdparty radius server:

14:03:44.828028 IP (tos 0x0, ttl  64, id 16529, offset 0, flags [none], proto: UDP (17), length: 255) tdrad1.vas.orange.sk.56347 > dial-250-149.orange.sk.radius-acct: [bad udp cksum 9e40!] RADIUS, length: 227
                Accounting Request (4), id: 0x5d, Authenticator: 872eb1da3e3ae0c483a4ee7eec20d78c
                  Unknown Attribute (227), length: 12, Value:
                    0x0000:  3c55 2b30 3535 373e d915
                  Accounting Session ID Attribute (44), length: 18, Value: d597d91572f51ab3
                    0x0000:  6435 3937 6439 3135 3732 6635 3161 6233
                  Service Type Attribute (6), length: 6, Value: Framed
                    0x0000:  0000 0002
                  Called Station Attribute (30), length: 26, Value: orangewap.213.151.252.35
                    0x0000:  6f72 616e 6765 7761 702e 3231 332e 3135
                    0x0010:  312e 3235 322e 3335
                  Accounting Link Count Attribute (51), length: 6, Value: 1
                    0x0000:  0000 0001
                  Unknown Attribute (225), length: 6, Value:
                    0x0000:  72f5 1ab3
                  Accounting Authentication Attribute (45), length: 6, Value: Local
                    0x0000:  0000 0002
                  Accounting Status Attribute (40), length: 6, Value: Start
                    0x0000:  0000 0001
                  NAS IP Address Attribute (4), length: 6, Value: 10.64.192.1
                    0x0000:  0a40 c001
                  Unknown Attribute (226), length: 6, Value:
                    0x0000:  0000 0008
                  Vendor Specific Attribute (26), length: 12, Value: Vendor: 3GPP (10415)
                    Vendor Attribute: 6, Length: 4, Value: ...#
                    0x0000:  0000 28af 0606 d597 fc23
                  Calling Station Attribute (31), length: 14, Value: 421905012405
                    0x0000:  3432 3139 3035 3031 3234 3035
                 Unknown Attribute (224), length: 6, Value:
                    0x0000:  ffff ffff
                  Framed Protocol Attribute (7), length: 6, Value: #7
                    0x0000:  0000 0007
                  Username Attribute (1), length: 14, Value: 421905012405
                    0x0000:  3432 3139 3035 3031 3234 3035
                  NAS ID Attribute (32), length: 23, Value: ggsn-01-bb1.orange.sk
                    0x0000:  6767 736e 2d30 312d 6262 312e 6f72 616e
                    0x0010:  6765 2e73 6b
                  Accounting Multilink Session ID Attribute (50), length: 18, Value: d597d9153962de6b
                    0x0000:  6435 3937 6439 3135 3339 3632 6465 3662
                  Framed IP Address Attribute (8), length: 6, Value: 10.10.1.1
                    0x0000:  0a0a 0101
                  Event Timestamp Attribute (55), length: 6, Value: Tue Dec 18 14:03:44 2012
                    0x0000:  50d0 69b0
                  Proxy State Attribute (33), length: 4, Value: 13
                    0x0000:  3133
14:03:44.832901 IP (tos 0x0, ttl  56, id 0, offset 0, flags [DF], proto: UDP (17), length: 52) dial-250-149.orange.sk.radius-acct > tdrad1.vas.orange.sk.56347: [udp sum ok] RADIUS, length: 24
                Accounting Response (5), id: 0x5d, Authenticator: d2521d74f782356ebf2d752e94dbfc82
                  Proxy State Attribute (33), length: 4, Value: 13
                    0x0000:  3133

Peter Balšianok
Data Service Operation Coordinator,
Voice & Data Services Operations
Orange Slovensko, a. s.
Metodova 8, 821 08 Bratislava
tel: +421 908 00 2405
mobil: +421 905 012 405
e-mail: peter.balsianok at orange.sk<mailto:peter.balsianok at orange.sk>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20121218/ab14304e/attachment-0001.html>


More information about the Freeradius-Users mailing list