> Sorry to post a Radius question to the portmaster-users list, but I've
> posted to both usr-totalcontrol and radius-users earlier, with no response
> to my question. I'm hoping that someone here has been through this before...
Sorry, must have missed it on radius-users.
> I have not found the correct command for the Hiper unit to stop the
> following message:
>
> Apr 3 06:31:24 artemis radius[5618]: accounting: client 199.217.72.34/1646
> sent accounting-request with invalid request authenticator
Your RADIUS client (i.e. your Hiper unit) is sending accounting packets
that are contructed/signed differently from the way that your RADIUS
server is expecting. If you want to stop getting this message every time
you get an accounting request, you should do one of the following:
1) Upgrade the OS on the Hiper unit to something that signs/contructs
accounting requests along the lines of the new RADIUS RFC.
2) Turn off accounting request signing (I don't think RADIUS 2.1 has a
problem with un-signed requests).
3) Hack the source to surpress these messages. Because RADIUS 2.1 betas
aren't distributed as full source I don't know if this is possible. Even
if it was, I don't really think its desireable to surpress errors but you
said that you wanted rid of them.
> 3COM support said to issue the following command to the HiperARC card:
>
> set accounting log_unauthenticated_calls FALSE
>
> It did not seem to make a difference.
Correct, it won't make any difference because the 3con unit isn't the one
making the syslog entries - it's your RADIUS daemon.
> Sooo, am I correct in that the -o switch is necessary, or is there another
> command for the 3com unit to stop these messages?
Unknown. Like I said above, try asking them if there is a command to get
the unit to stop signing the accounting packets altogether.
-- Richard Morrell richard@ednet.co.uk System Administrator - edNET: Internet Access for Edinburgh - www.ednet.co.uk
- To unsubscribe, email 'majordomo@livingston.com' with 'unsubscribe portmaster-users' in the body of the message. Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>