Access-Accept BUT no connection

[Clement Ogedengbe]

The reply-log of the Main server and the backup server to the NAS is similar as below: (You could see that the same NAS (10.255.253.2) is involved in both connections.

Reply from the backup server to the NAS -> with this user gets online
=================================================================
10.255.253.2 Returned from 193.62.48.60 for User xxxx - Tue Jan 28 09:19:35 2014
        Packet-Type = Access-Accept
        MS-CHAP2-Success = 0x00533d44363743314134363437423344393546414538463137443441333743334335454134373036414433
        MS-MPPE-Recv-Key = 0xd233362f60149491fff8e1009d0f7940
        MS-MPPE-Send-Key = 0x2cb6ef890950e98f530dabec5dfffe91
        MS-MPPE-Encryption-Policy = 0x00000002
        MS-MPPE-Encryption-Types = 0x00000004

Reply from the Main server to the NAS -> with this user UNABLE to get online
=================================================================
10.255.253.2 Returned from 193.62.48.61 for User xxxx - Tue Jan 28 09:51:57 2014
        Packet-Type = Access-Accept
        MS-CHAP2-Success = 0x00533d44303538334343433436373339323643313033343843413135463643373637333639373241423130
        MS-MPPE-Recv-Key = 0xc4c255e279235d1abc4128569b4391b6
        MS-MPPE-Send-Key = 0x3773e3518d6620d5d8f85e158848c601
        MS-MPPE-Encryption-Policy = 0x00000002
        MS-MPPE-Encryption-Types = 0x00000004



-----Original Message-----
From: freeradius-users-bounces+c.ogedengbe=worc.ac.uk at lists.freeradius.org [mailto:freeradius-users-bounces+c.ogedengbe=worc.ac.uk at lists.freeradius.org] On Behalf Of Arran Cudbard-Bell
Sent: 28 January 2014 10:21
To: FreeRadius users mailing list
Subject: Re: Access-Accept BUT no connection


> Below is the extract of post-authentication reply log from the Main RADIUS server to the NAS, but users are not getting online.

Compare the output of the backup and primary RADIUS servers.

> 10.255.253.2 Returned from 193.62.48.61 for User xxxx - Tue Jan 28 09:51:57 2014
>        Packet-Type = Access-Accept
>        MS-CHAP2-Success = 0x00533d44303538334343433436373339323643313033343843413135463643373637333639373241423130
>        MS-MPPE-Recv-Key = 0xc4c255e279235d1abc4128569b4391b6
>        MS-MPPE-Send-Key = 0x3773e3518d6620d5d8f85e158848c601
>        MS-MPPE-Encryption-Policy = 0x00000002
>        MS-MPPE-Encryption-Types = 0x00000004

Then blame the NAS :)

Arran Cudbard-Bell <a.cudbardb at freeradius.org> FreeRADIUS Development Team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2