Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 04 Feb 2001 01:28:46 +0000
From:      Brian Somers <brian@Awfulhak.org>
To:        Mike Nowlin <mike@argos.org>
Cc:        Brian Somers <brian@Awfulhak.org>, freebsd-net@FreeBSD.ORG, brian@Awfulhak.org
Subject:   Re: PPP - CHAP failure after CHAP success??? 
Message-ID:  <200102040128.f141SkP72451@hak.lan.Awfulhak.org>
In-Reply-To: Message from Mike Nowlin <mike@argos.org>  of "Sat, 03 Feb 2001 01:45:35 EST." <Pine.LNX.4.21.0102030112190.31534-100000@jason.argos.org> 

next in thread | previous in thread | raw e-mail | index | archive | help
Hi,

> > I can't see how this can happen without any previous log lines saying 
> > that a chap packet has been received.
> > 
> > If this is repeatable, can you try doing a ``show timer'' right after 
> > the SUCCESS response has been sent ?  If the radius timer wasn't 
> > cleared properly this might result, but I can't see how that could 
> > happen...
> 
> Hmm...  Repeatable every time on the machine in question.  (Time passes
> while I configure the a similar on a completely different set of
> boxes.)  Yup - repeatable on another machine as well.
> 
> Two machines - core-1 and twikki.  Twikki is receiving the call.
> 
> I don't have the muscle trigger upgrade in my finger yet to be able to hit
> return right when the SUCCESS rsp comes through (goes by way too fast),
> but I did turn on timer debugging for these logs -- maybe it'll help.  If
> there's some way to trigger a "show timer" in the source at a certain
> point, I'd be happy to try that...
> 
> Thanks - Mike
[.....]

Err ok, on reflection that was a rather tricky thing to ask you to 
do...  Sorry :-/

I think I've figured out the problem though... can you try the latest 
version of ppp - should be available via 
http://www.Awfulhak.org/ppp.html RSN (the 010204 archive) if you 
don't get -current.

I think you're just missing an acct line in your radius config file.  
The bug in ppp is that it treats the accounting failure as something 
it needs to send an authentication failure about....
-- 
Brian <brian@Awfulhak.org>                        <brian@[uk.]FreeBSD.org>
      <http://www.Awfulhak.org>;                   <brian@[uk.]OpenBSD.org>
Don't _EVER_ lose your sense of humour !




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200102040128.f141SkP72451>