Radius +NOCAT

Chan Min Wai <[email protected]>
Newsgroups gmane.network.nocat
Message-ID <[email protected]>
Greeting all,

I'm trying to work Radius with NOCAT.
Thank to http://www.pogozone.net/projects/nocat/?#RADIUS

And I follow the list below, make some modification
http://lists.nocat.net/pipermail/nocat/2004-March/004554.html
And also for the 404 Problem
http://lists.nocat.net/pipermail/nocat/2003-October/003902.html

However now after Modification of only allow member to login,
No one can login.

I've also configure the nocat.dictionary for the freeradius.
As Below.

dictionary.nocat
===================
VENDOR          NoCat   32767
BEGIN-VENDOR    NoCat
ATTRIBUTE       NoCat-Groups            1       string  # Space
delimited list of groups
ATTRIBUTE       NoCat-Groups-Admin      2       string  # Space
delimited list of groups user is admin of
END-VENDOR NoCat

ldap.attrmap
===================
replyItem       NoCat-Groups                    radiusLoginLATGroup

Anyone can clear me up somehow?
I'm That close to the finishing line.

Below is the log from freeradius. [Snipped]
==================================
modcall: group post-auth returns ok for request 0
Sending Access-Accept of id 71 to 192.168.0.23:32775
        NoCat-Groups = "Member"
        Idle-Timeout = 300
        Framed-MTU = 1500
        Service-Type = Framed-User
Finished request 0

Below is the log of nocat after login with member=1 or disabled
==============================================
[2005-02-19 13:13:13] Gateway running on port 5280.
[2005-02-19 13:13:26] Spawning child process 7431.
[2005-02-19 13:13:26] Connection to 202.73.8.65 from 202.73.8.126
[2005-02-19 13:13:26] Received notify from 202.73.8.126
[2005-02-19 13:13:26] gpg --decrypt --homedir=/usr/local/nocat/pgp
--keyring trustedkeys.gpg --no-tty --no-secmem-warning -o- returned
error message:
gpg: WARNING: unsafe ownership on homedir "/usr/local/nocat/pgp"
gpg: Signature made Sat Feb 19 13:13:22 2005 MYT using DSA key ID 25E23B88
gpg: Good signature from "AUTHCAT <[email protected]>"
[2005-02-19 13:13:26] Got auth msg:
Member  ^@^@^?ÿ^A^HMember
Mac     202.73.8.126
User    [email protected]
Token   $1$55860487$TpgoUoJ6Mh8nh03lBuLM8/
Sessiontimeout  0
Redirect        http://www.redhat.com/
Idletimeout     300
Action  Permit
Mode    login
Timeout 300
[2005-02-19 13:13:26] Unknown ID notify from 202.73.8.126!
[2005-02-19 13:13:26] Capturing  202.73.8.126  for
http://202.73.8.65:5280/?ticket=owGbwMvMwCR4XtknSvWRdQfj6QPCSQxOYqc%2b%2babmJqUWcTIw1P9n5IBwuHwTkzmNDIz0zI31LPQMjcy4QouBSlKSc8sTMx3yk1OLk%2fSS83P1ciu5QvKzU%2fM4VQxVTE0tzAxMLMxVQgrS80Pzvcx8MyzyMgyMc5xKfXwt9LmCU4uLM%2fPzSjJzU%2fNLSzgNuIJSUzKLUpNLODNKSgqs9PXLy8v1ilJTMhJLQGbrc3mm5KTCVBsbGHA5JpcA9XMGpBblZpZw%2beanpHLm5Kdn5nGFICnqsGdmBfsK5k9BpmfpDPOsZsybuWXvTVOWd088xX8KX2IvenCLYX7yelYGjqV1HnV%2bVTe2avXrrbtjEwsA%3d75dy
[2005-02-19 13:13:26] Notifying parent of Capture on peer 202.73.8.126
[2005-02-19 13:13:26] Got notification Capture of peer 202.73.8.126
[2005-02-19 13:13:26] Child process returned 1


Log for no member restriction access
==========================================
[2005-02-19 13:22:13] Connection to 202.73.8.65 from 202.73.8.126
[2005-02-19 13:22:13] Received notify from 202.73.8.126
[2005-02-19 13:22:13] Spawning child process 7575. [2005-02-19 13:22:14]
gpg --decrypt --homedir=/usr/local/nocat/pgp --keyring trustedkeys.gpg
--no-tty --no-secmem-warning -o- returned error message:
gpg: WARNING: unsafe ownership on homedir "/usr/local/nocat/pgp"
gpg: Signature made Sat Feb 19 13:22:03 2005 MYT using DSA key ID 25E23B88
gpg: Good signature from "AUTHCAT <[email protected]>"
[2005-02-19 13:22:14] Got auth msg:
Member  ^@^@^?ÿ^A^HMember
Mac     202.73.8.126
User    [email protected]
Token   $1$40608397$8AiBmaBGYmvNlbvV6pHaN1
Sessiontimeout  0
Redirect        http://www.scl.ameslab.gov/netpipe/paper/full.html
Idletimeout     300
Action  Permit
Mode    login
Timeout 300
[2005-02-19 13:22:14] User (Member Any) v. trusted (Any Member)
[2005-02-19 13:22:14] User  [email protected]  permitted in class Member
[2005-02-19 13:22:14] Gathering stats from firewall with cmd='stats.fw
202.73.8.126'.
[2005-02-19 13:22:14] Connecting to RADIUS server 203.115.210.254 with
Timeout 5
[2005-02-19 13:22:14] Argument "Location-ID" isn't numeric in int at
/usr/local/nocat/bin//../lib/Authen/Radius.pm line 328.
[2005-02-19 13:22:14] Use of uninitialized value in string eq at
/usr/local/nocat/bin//../lib/Authen/Radius.pm line 330.
[2005-02-19 13:22:14] Use of uninitialized value in string eq at
/usr/local/nocat/bin//../lib/Authen/Radius.pm line 330.
[2005-02-19 13:22:14] Use of uninitialized value in string eq at
/usr/local/nocat/bin//../lib/Authen/Radius.pm line 330.
[2005-02-19 13:22:14] Argument "Location-Name" isn't numeric in int at
/usr/local/nocat/bin//../lib/Authen/Radius.pm line 328.
[2005-02-19 13:22:14] Use of uninitialized value in string eq at
/usr/local/nocat/bin//../lib/Authen/Radius.pm line 330.
[2005-02-19 13:22:14] Use of uninitialized value in string eq at
/usr/local/nocat/bin//../lib/Authen/Radius.pm line 330.
[2005-02-19 13:22:14] Use of uninitialized value in string eq at
/usr/local/nocat/bin//../lib/Authen/Radius.pm line 330.

Regards,
Chan Min Wai
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.