[Top] [Table Of Contents] [Prev] [Next] [Index]
14 out of 18 total pages
 

RADIUS for UNIX Error Messages   B


  This appendix presents error messages that can be generated by RADIUS for UNIX and explains each message. Actions you can take to correct the error are recommended wherever possible. Error messages are likely to change between releases of RADIUS for UNIX.

  Note ¯ If no action is recommended, do the following before you contact Lucent InterNetworking Systems Technical Support: Write down the error message exactly and record the output of radiusd -v  and uname -a .

 

       Accounting

  The following error messages are related to RADIUS accounting.

 

 

  accounting: client Ipaddress/Portnumber sent accounting-request with invalid request authenticator

  Explanation

  RADIUS received an accounting packet with an invalid Request-Authenticator on port Portnumber from a RADIUS client at Ipaddress.

  Recommended Action

  Check that the shared secret on the client and the server are exactly the same. Case is significant. If the secrets match, next check the version of ComOS on the client if it is a PortMaster. Lucent InterNetworking Systems recommends that you run ComOS 3.3.1 or later with RADIUS 2.1 accounting. If any of your PortMaster clients are running ComOS 3.3 or earlier, run radiusd  with the -o  option. If this message results from a client that is not a PortMaster, then the client is not compliant with RFC 2139.

 

 

  accounting: could not append to file Filename

  Explanation

  RADIUS was not able to add additional information to the end of the accounting detail  file, Filename.

  Recommended Action

  Check permissions and ownership of the detail  file and its directory. Verify that the hard disk has not run out of available storage space.

 

 

  accounting: from Client - unknown client ignored

  Explanation

  An accounting packet was received from a network access server (NAS) that is not identified in the clients  file.

  Recommended Action

  Add client to clients  file if appropriate. Otherwise, apply a filter to prevent access requests from the NAS.

 

 

  acct bind error Errormessage

  Explanation

  At startup, radiusd  was unable to bind RADIUS accounting on UDP socket 1646 and returned an error message.

  Recommended Action

  Verify that radiusd  is not already running. Use netstat -a  to determine whether UDP port 1646 is in use by some other process. Kill the process that bound the port and restart radiusd .

 

 

  acct socket error Errormessage

  Explanation

  At startup, radiusd  was unable to open RADIUS accounting UDP socket 1646 and returned an error message.

  Recommended Action

  Verify that radiusd  is not already running. Use netstat -a  to determine whether UDP port 1646 is in use by some other process. Kill the process that bound the port and restart radiusd .

 

 

  could not fork to spawn accounting daemon

  Explanation

  An operating system error prevented RADIUS from starting the accounting daemon from radiusd .

  Recommended Action

  Consult your system administrator or the UNIX man  pages.

 
 

       Authentication

  The following error messages are related to RADIUS authentication.

 

 

  auth: access-request from NAS (<Ipaddress>) denied for unknown user Username

  Explanation

  RADIUS did not authenticate user Username attempting access from server NAS at IP address Ipaddress.

 

 

  auth: access-request from NAS ignored; no user name

  Explanation

  RADIUS received an access request with no username from server NAS. this message can result from a malformed authentication request or from the dial-up software.

  Recommended Action

  Check the client.

 

 

  auth: access-request from unknown client NAS ignored; user name Username

  Explanation

  RADIUS ignored an access-request by user Username from server NAS. Any request coming from a NAS not specifically configured in the clients  file is ignored.

  Recommended Action

  Add the NAS hostname or IP address to the clients  file if appropriate. Otherwise, apply a filter to prevent access requests from the NAS.

 

 

  auth bind error Errormessage

  Explanation

  At startup, radiusd  was unable to bind RADIUS authentication on UDP socket 1645 and returned an error message.

  Recommended Action

  Verify that radiusd  is not already running. Use netstat -a  to determine whether UDP port 1645 is in use by some other process. Kill the process that bound the port and restart radiusd .

 

 

  auth socket error Errormessage

  Explanation

  At startup, radiusd  was unable to open RADIUS authentication UDP socket 1645 and returned an error message.

  Recommended Action

  Verify that radiusd  is not already running. Use netstat -a  to determine whether UDP port 1645 is in use by some other process. Kill the process that bound the port and restart radiusd .

 

 

  dropping duplicate request for id Idnumber from NAS

  Explanation

  RADIUS dropped packet Idnumber from server NAS. Each request contains an ID number. This message is generated if RADIUS receives a request with an ID to which it has already responded in the last five seconds.

  Recommended Action

  Do the following:

  Explanation

  RADIUS is dropping the request for ID Idnumber because the queue has grown too large. Number indicates the number of requests already in the queue.

  Recommended Action

  Do the following:

  Explanation

  RADIUS ran out of memory while receiving a packet and shut down.

 

 

  radrecv: request from client Client claimed length Number, only Number2 bytes found

  Explanation

  RADIUS received a packet from client Client that was reported to be Number of bytes in length but was Number2 of bytes instead.

  Recommended Action

  Check client; this message can result from a malformed or corrupted packet.

 

 

  rad_request: child Number not found

  Explanation

  Child process ID Number was not found.

 

 

  rad_request: dropped duplicate ID Number

  Explanation

  RADIUS dropped an authentication request with ID Number because it had responded to an earlier request with this ID within the last five seconds. A NAS sends duplicate requests if it does not receive a response within three seconds.

  Recommended Action

  Do the following:

  Explanation

  RADIUS received a request from Ipaddress2 in response to an access-challenge sent to Ipaddress, but the addresses do not match.

 

 

  rad_request: error: msgget for key Hexvalue for id Number returned error Number

  Explanation

  The msgget  function for the authentication key with a hexadecimal value of Hexvalue for packet ID Number failed and returned error message Number.

 

 

  rad_request: error: msgsnd for key Hexvalue for id Number returned error Number

  Explanation

  The msgsend  function for the authentication key with a hexadecimal value of Hexvalue for packet ID Number failed and returned error message Number.

 

 

  unix_group: getgrnam(Group) for "Username" failed

  Explanation

  RADIUS failed to get the group name Group from UNIX for user Username.

 

 

  unix_group: getpwnam for "Username" failed

  Explanation

  RADIUS failed to get the password name from UNIX for user Username.

 

       Clients

  The following error messages are related to RADIUS clients.

 

 

  child_authenticate: msgctl for msgid Number returned error: Errormessage

  Explanation

  During the authentication process, the msgctl  function for message ID Number returned an error message.

 

 

  child_authenticate: msgget for key Hexvalue for id Number returned error: Errormessage

  Explanation

  During the authentication process, the msgget  function for the authentication key with a hexadecimal value of Hexvalue for packet ID Number failed and returned an error message.

 

 

  child_authenticate: msgrcv for msgid Number returned error: Errormessage

  Explanation

  During the authentication process, the msgrcv  function for message ID Number returned an error message.

 

 

  client Ipaddress not found in client cache

  Explanation

  The IP address Ipaddress for a client NAS was not found in the client cache that is generated from the clients  file.

  Recommended Action

  Verify that clients  file contains this client's IP address.

 

 

  client cache entry for Client could not be parsed

  Explanation

  A syntax error occurred in the clients  file for the client Client.

 

 

  could not cache client datum for host Hostname

  Explanation

  RADIUS could not resolve Hostname found in the clients  file into an IP address, or there are multiple entries in the clients  file for the same client.

  Recommended Action

  Remove duplicate hosts from the clients  file.

 

 

  Error: clients file Filename not found

  Explanation

  RADIUS could not find the clients file Filename, which is read into memory and cached whenever it changes.

 

 

  Error: could not create temporary client cache file Filename

  Explanation

  RADIUS could not create a temporary client cache file Filename.

  Recommended Action

  Verify that radiusd  has write permission to /etc/raddb  (or the directory specified with the -d  option) and that the hard disk has not run out of available storage space.

 

 

  Error: could not read clients file Filename

  Explanation

  RADIUS cannot open the clients  file Filename for reading.

  Recommended Action

  Check the permissions on the clients  file.

 
 

       Dictionary

  The following error messages are related to the RADIUS dictionary.

 

 

  attribute has non-numeric value on line Number of dictionary Filename

  Explanation

  When parsing the dictionary file Filename, RADIUS found an attribute that did not have an associated number on line Number of the dictionary.

  Recommended Action

  Correct the attribute in the dictionary.

 

 

  attribute has unknown type on line Number of dictionary Filename

  Explanation

  When parsing the dictionary file Filename, RADIUS found an unrecognizable attribute line Number of the dictionary.

  Recommended Action

  Correct the attribute in the dictionary.

 

 

  attribute name too long on line Number of dictionary Filename

  Explanation

  When parsing the dictionary file Filename, RADIUS found an attribute name on line Number of the dictionary that was more that 31 characters long.

  Recommended Action

  Correct the attribute name in the dictionary.

 

 

  could not read dictionary file Filename

  Explanation

  RADIUS could not open the dictionary file Filename for reading.

  Recommended Action

  Check permissions for the dictionary file.

 

 

  invalid attribute on line Number of dictionary file Filename

  Explanation

  When parsing the dictionary file Filename, RADIUS found an invalid attribute on line Number of the dictionary.

  Recommended Action

  Check for syntax errors in the dictionary file. Download the latest dictionary file from ftp://ftp.livingston.com/pub/le/radius/dictionary .

 

 

  Invalid value entry on line Number of dictionary Filename

  Explanation

  When parsing the dictionary file Filename, RADIUS found an invalid value for an attribute on line Number of the dictionary.

  Recommended Action

  Check for syntax errors in the dictionary file. Download the latest dictionary file from ftp://ftp.livingston.com/pub/le/radius/dictionary .

 

 

  ran out of memory after reading line Number of dictionary Filename

  Explanation

  RADIUS ran out of memory after reading line Number of the dictionary file Filename.

  Recommended Action

  Either exit any non-RADIUS processes running on the RADIUS server or upgrade server memory.

 

 

  value has non-numeric value on line Number of dictionary Filename

  Explanation

  When parsing the dictionary file Filename, RADIUS found a nonnumeric value on line Number of the dictionary.

 

 

  value name too long on line Number of dictionary Filename

  Explanation

  When parsing the dictionary file Filename, RADIUS found a value that was more that 31 characters long on line Number of the dictionary.

 

       Menu

  The following error messages are related to RADIUS menus.

 

 

  parse error for menu Filename

  Explanation

  RADIUS had trouble analyzing the data found in the menu file Filename.

 
 

       Miscellaneous

  The following are miscellaneous error messages.

 

 

  exit on signal Number

  Explanation

  RADIUS quit because a fatal error occurred on signal number Number.

 

 

  sending SIGHUP signal to unresponsive child process Number

  Explanation

  RADIUS terminated the child process ID Number because the process had not exited.

  Recommended Action

  Run radiusd -s  to force RADIUS to run in single-process mode.

 

 

  setexp: system error: out of memory

  Explanation

  The operating system hosting the RADIUS server does not have enough memory for RADIUS to run.

  Recommended Action

  Either exit any non-RADIUS processes running on the RADIUS server or upgrade server memory.

 

 

  system error: could not fork at startup

  Explanation

  RADIUS is unable to fork a process during startup.

  Recommended Action

  Do one of the following:

  Explanation

  RADIUS ignored a request from server NAS because it could not identify the request type Number.

  Recommended Action

  Check the client.

 

       SecurID

  The following error messages are related to SecurID.

 

 

  securid: cannot initialize connection to SecurID server

  Explanation

  RADIUS could not connect to the SecurID server.

  Recommended Action

  Do the following:

  Explanation

  The SecurID configuration file could not be opened for reading

 
 

  securid: SecurID server returned unknown code Number for user Username

  Explanation

  The SecurID server returned an unknown code Number for user Username.

  Recommended Action

  Use the SecurID documentation to identify the unknown code.

 

 

  securid: unexpected STATE="State"

  Explanation

  The State attribute sent in the access-request does not match the one sent in the access-challenge. Most likely the client is doing something wrong.

 

       Users

  The following error messages are related to RADIUS users.

 

 

  user_find: unable to parse check-items for user Username

  Explanation

  RADIUS found a syntax error in the first line of the user profile in the users  file for either user Username or the user who attempted access immediately before Username.

  Recommended Action

  Do the following in the user profile for Username and the previous user:

  Explanation

  RADIUS found a syntax error in the first line of the user profile for user Username in the DBM database generated from the users  file.

 

 

  user_find: unable to parse reply-items in dbm entry for user Username

  Explanation

  RADIUS found a syntax error in the reply items of the user profile for user Username in the DBM database generated from the users  file.

 

 

  user_find: unable to parse reply-items for user Username

  Explanation

  RADIUS found a syntax error in the reply items of the user profile in the users  file for user Username.

  Recommended Action

  Do the following in the reply items in the user profile for Username:

  Explanation

  The user profile in the users  file for user Username is Number characters in size and exceeds the maximum number of characters Max allowed for the profile.

 

 

  user_find: zero length username rejected

  Explanation

  RADIUS rejected a username with no characters.

 

 

  user_open: could not read user dbm file Filename

  Explanation

  RADIUS could not open the DBM users database Filename for reading.

 

 

  user_open: could not read user file Filename

  Explanation

  RADIUS could not open the users  file Filename for reading.

 

 

  userparse: system error: out of memory

  Explanation

  RADIUS ran out of memory while parsing the user profile.

 

[Top] [Table Of Contents] [Prev] [Next] [Index]
14 out of 18 total pages
spider@livingston.com
Copyright © 1999, Lucent Technologies. All rights reserved.