Re: Login failing

Sanket Desai <[email protected]>
Newsgroups gmane.network.nocat
Message-ID <[email protected]>
Hi Matt,
 As far I know, Nocat identifies a client by its IP address and moreover
that its MAC address. So, even if you use different user name as far as
machine is same you are very likely to get into the trouble, which I have
described in previous mail.
 regards,
 Sanket.

 On 9/28/05, Matt Courtney - PCTronix <[email protected]> wrote:
>
>  Hi Sanket,
>
>  I have a number of usernames setup so I'm always careful to use a
> different one each time until the other one has timed out for sure.
>
>  Matt
>  ------------------------------
>
> *From:* Sanket Desai [mailto:[email protected]]
> *Sent:* Wednesday, 28 September 2005 5:13 p.m.
> *To:* Matt Courtney - PCTronix
> *Subject:* Re: [NoCat] Login failing
>
>   Hi Matt,
>
>  One more thing, do you frequently login and logout ? Because once you get
> login in Nocat, for logout ( I mean removal of IP table rule) it takes
> amount of time equals to login timeout. So, if your case it like login and
> then after few minutes (before renewal) you logout and then again try to
> login (immediately i.e. login timeout has not occured yet), then you may
> get this type of behaviour of Nocat.
>
>  Just let me know whether your case is like the above described?
>
>  regards,
>
>  Sanket.
>
>  On 9/28/05, *Matt Courtney - PCTronix* <[email protected]> wrote:
>
> Hi Sanket,
>
>  Thanks for your response. I don't think it's a trustedkeys.gpg issue as
> discussed in the link you gave me as it logs in successfully 90% of the
> time….
>
> I will search the mailing list and see if I find any other ideas.
>
>  Thanks,
>
>  Matt
>
>   ------------------------------
>
> *From:* Sanket Desai [mailto: [email protected]]
> *Sent:* Wednesday, 28 September 2005 4:42 p.m.
> *To:* [email protected]
> *Cc:* Matt Courtney - PCTronix
> *Subject:* Re: [NoCat] Login failing
>
>  Hi there,
>
>  please refer to
> http://lists.nocat.net/pipermail/nocat/2004-October/005280.html
>
>  This type of problem is discussed several times in this lists. So, I
> think you will get your answer by searching in archives.
>
>  All the best!
>
>  Sanket.
>
>  On 9/28/05, *Matt Courtney - PCTronix* < [email protected]>
> wrote:
>
> Hi All,
>
> I'm having trouble with a NoCatAuth installation, both the gw and the auth
> server are on the same machine (yes, I know this isn't recommended)
>
> Basically what happens is about 1 in every 10 times you login the login
> doesn't work properly, it says that you have been logged in and will be
> redirected, but takes you back to the login page. No error messages are
> given and the logs look fairly normal. (See extract of a failed attempt
> below)
>
> [2005-09-28 14:44:09] Unknown ID notify from 192.168.0.173<http://192.168.0.173/>
> !
> [2005-09-28 14:44:09] Capturing 192.168.0.173 <http://192.168.0.173/> for
>
> http://192.168.0.254:5280/?ticket=owGbwMvMwCQ42%2f732jOh1z4wnt6QxOBsxRzom5qb
>
> lFrE6ZFfkpOZl83lm5jMaWhppGdoZqFnoGdobswVWgyUNrQwMs21MKkotCwz5QrJz07N41QxVDG3
> MDE2MjYwV6ksdrFMLA3M8PYJ0vP1CPb0yE%2f0cjfgCkpNySxKTS7hzCgpKbDS1y%2fOSSzOSMkv
>
> 0csvStfnckwuyczP4wxILcrNLOEKycxNzUlNK%2bE0NObyzU9J5czJT8%2fMAwvnl5Zwmhlwddgz
>
>
> s4KdDPODIBPLM4b5VYd2%2foguEy535ptx83Ews0fszg%2ftDPOT96%2bPciyLfO%2bZO4PPICT%
> 2f2eyItacB%3dwu%2bj
> [2005-09-28 14:44:09] Notifying parent of Capture on peer 192.168.0.173<http://192.168.0.173/>
> [2005-09-28 14:44:09] Got notification Capture of peer 192.168.0.173<http://192.168.0.173/>
> [2005-09-28 14:44:09] Child process returned 1
> [2005-09-28 14:45:19] Expiring connection from 192.168.0.173<http://192.168.0.173/>. (should
> there be a space between the IP and the decimal point?)
> [2005-09-28 14:45:19] Denying peer without prior permit.
>
> I've tried setting IgnoreMAC to 1 and increasing the timeout for the
> redirect (up to a huge 30 seconds!!), neither of these attempted solutions
> have helped. I'm at my wits end, has anyone else experienced similar
> problems? Does anyone have any ideas?
>
> Looking forward to your replies,
>
> Matt
>
> _______________________________________________
> NoCat mailing list
> [email protected]
> http://lists.nocat.net/mailman/listinfo/nocat
>
>

_______________________________________________
NoCat mailing list
[email protected]
http://lists.nocat.net/mailman/listinfo/nocat
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.