(RADIUS) Re: RADIUS and USR Total Control Netserver

L. M. Marchese (lmais@africaonline.co.ci)
Sun, 05 Apr 1998 20:23:58 +0100

We purchased our NetServer/26 V.35 a while back before 3Com had taken
over. I like the product itself and have no problems when I use it to
authenticate users. Unfortunately, this is not practical, and I would
like to use radius to do that.

I cannot yet determine whether NetServer or Radius is at fault here. I
am still trying with the help of others to figure out a time-out message
I get from radiusd when I use the testuser utility.

Does USR (or 3Com for that matter) sell their own version of Radius. If
so does anyone know the cost.

Cheers

Robert Hiltibidal wrote:

> We're having similar probles with a 3com/usr box. So far 3coms techs
> are
> telling us its the radius version we're using. Which is Livingston's
> 2.0.1
> running on Linux 2.0 33
>
> The previous usr boxes we bought before 3com took over USR are working
> like
> a champ. This new box doesn't run a licensed version of comos. It runs
>
> something different. If 3com thinks we're going to sit here with a
> 10,000$
> box that doesn't work we'll send the damn thing back and probally sue
> as
> well. The question in my mind is why take a perfectly good product and
>
> screw it up? Then release the damn thing?
>
> I think we're both looking at a product recall here.
>
> Most of our pop sites are running Livingston pm2' and 2er's. Most of
> our
> market is x2 and not k56flex so we went with the usr. The first 4
> boxes we
> bought we really haven't had a problem with them (One had a
> provisioning
> problem that was almost miniscule and difficult to catch) These boxes
> are
> running an os sinmilar to Livingstons comos. In any event I simply
> will not
> buy its our version of Radius causing the porblems. Especially since
> over
> 8000 customers are using it and not having a problem. This is a strong
>
> indicator the product is not up to snuff.
>
> We're not changing our authentication system.
>
> One pattern that is different... Users that are using scripts get
> logged
> in, users using pap and chap do not. 3com/usr hasn't a clue as to why.
>
> If you come across a solution I will be happy to hear it. However it
> sounds
> like you have similar problems with a different version of radius.
>
> -Rob
>
> At 12:43 AM 4/5/98 +0100, L. M. Marchese wrote:
> >I just einstalled RH 4.2, radius and the radius utility testuser. I
> have
> >been having problems with authenticating users dialing into a USR
> Total
> >Control Netserver through radius. I always got "incorrect password."
>
> >To make a story short:
> >
> >I start radiusd with the -x option. I run testuser (on the same
> machine
> >as radiusd) right after starting radiusd, I get the following
> messages:
> >
> > recv. timeout
> >
> >then testuser prompts me again to enter the username. After a minute
> or
> >so, radiusd responds with a successful authentication.
> >
> >If I wait a couple of minutes after starting radiusd then start
> testuser
> >and enter the username and password, I get the following response
> from
> >testuser: ( please note the the text in brackets are my comments)
> >
> >Received ACK (displayed right away)
> > Service-Type = Framed-User (displayed right away)
> > Framed-Protocol = PPP (after one minute)
> > Framed-IP-Address = 255.255.255.254 (after another
> minute
> >
> >or two)
> > Frame-MTU = 1500 (later on)
> >
> >testuser then prompts me for username and password again.
> >
> >With the USR Netserver, I can't get anywhere. I always get the
> >incorrect password
> >message by radiusd. I suspect that this is due to some kind of
> timeout
> >or so. I have changed the network card and put another one (I had a
> >3COM, now I am using an SMC card), nothing changed, same problem.
> >
> >Any suggestions,
> >Thanks.
> >
> >
> >
> >
> >-
> >To unsubscribe, email 'majordomo@livingston.com' with
> >'unsubscribe portmaster-radius' in the body of the message.
> >Searchable list archive:
> <URL:http://www.livingston.com/Tech/archive/>
> >
> >
>
> ##########################################################
> Robert Hiltibidal Office 217-544-2775
> Systems Programmer Fax 217-527-3550
> FGInet, Inc
> rob@fgi.net
> morgan@springpatch.com

-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-radius' in the body of the message.
Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>