From owner-freebsd-net Sat Feb 3 17:27:30 2001 Delivered-To: freebsd-net@freebsd.org Received: from Awfulhak.org (awfulhak.demon.co.uk [194.222.196.252]) by hub.freebsd.org (Postfix) with ESMTP id 6966237B4EC for ; Sat, 3 Feb 2001 17:27:10 -0800 (PST) Received: from hak.lan.Awfulhak.org (root@hak.lan.Awfulhak.org [172.16.0.12]) by Awfulhak.org (8.11.2/8.11.1) with ESMTP id f141R8t01011; Sun, 4 Feb 2001 01:27:08 GMT (envelope-from brian@lan.Awfulhak.org) Received: from hak.lan.Awfulhak.org (brian@localhost [127.0.0.1]) by hak.lan.Awfulhak.org (8.11.2/8.11.1) with ESMTP id f141SkP72451; Sun, 4 Feb 2001 01:28:46 GMT (envelope-from brian@hak.lan.Awfulhak.org) Message-Id: <200102040128.f141SkP72451@hak.lan.Awfulhak.org> X-Mailer: exmh version 2.3.1 01/18/2001 with nmh-1.0.4 To: Mike Nowlin Cc: Brian Somers , freebsd-net@FreeBSD.ORG, brian@Awfulhak.org Subject: Re: PPP - CHAP failure after CHAP success??? In-Reply-To: Message from Mike Nowlin of "Sat, 03 Feb 2001 01:45:35 EST." Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Sun, 04 Feb 2001 01:28:46 +0000 From: Brian Somers Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Hi, > > I can't see how this can happen without any previous log lines saying > > that a chap packet has been received. > > > > If this is repeatable, can you try doing a ``show timer'' right after > > the SUCCESS response has been sent ? If the radius timer wasn't > > cleared properly this might result, but I can't see how that could > > happen... > > Hmm... Repeatable every time on the machine in question. (Time passes > while I configure the a similar on a completely different set of > boxes.) Yup - repeatable on another machine as well. > > Two machines - core-1 and twikki. Twikki is receiving the call. > > I don't have the muscle trigger upgrade in my finger yet to be able to hit > return right when the SUCCESS rsp comes through (goes by way too fast), > but I did turn on timer debugging for these logs -- maybe it'll help. If > there's some way to trigger a "show timer" in the source at a certain > point, I'd be happy to try that... > > Thanks - Mike [.....] Err ok, on reflection that was a rather tricky thing to ask you to do... Sorry :-/ I think I've figured out the problem though... can you try the latest version of ppp - should be available via http://www.Awfulhak.org/ppp.html RSN (the 010204 archive) if you don't get -current. I think you're just missing an acct line in your radius config file. The bug in ppp is that it treats the accounting failure as something it needs to send an authentication failure about.... -- Brian Don't _EVER_ lose your sense of humour ! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message