В общем проблема в следующем:
ОС - Linux Gentoo 2007
Netup Utm 5.2.1-001
pptp сервер на cisco 7206
radius.cfg на сервере
core_host=127.0.0.1
core_port=12758
radius_login=xxxxx
radius_password=xxxxx
radius_auth_mppe=enable
radius_card_autoadd=yes
radius_auth_vap=yes - стоит запрет на авторизацию заблокированным пользователям. А авторизация по vpn все равно проходит. как победить? Может обновиться до 5.2.1-004 вроде на форуме пишут - самая стабильно работающая версия Ниже лог радиуса:
?Debug : Jun 18 17:24:52 RadiusSocket: RADIUS packet successfully received
?Debug : Jun 18 17:24:52 RadiusSocket: RADIUS raw data obtained
?Debug : Jun 18 17:24:52 RADIUS Packet: Size <154>; HDR.Size <154>
?Debug : Jun 18 17:24:52 AuthServer: Recv...
?Debug : Jun 18 17:24:52 AuthServer: Packet from NAS <X.X.X.X>
?Debug : Jun 18 17:24:52 RADIUS DBA: NAS found. Data size <0>
?Debug : Jun 18 17:24:52 AuthServer: Packet from <X.X.X.X> packet dump: RPacket:
Code: 1; ID: 39
<Vendor: 0; Attr: 1>[4]: 74657374
<Vendor: 0; Attr: 4>[4]: c1da880e
<Vendor: 0; Attr: 5>[4]: 00000026
<Vendor: 0; Attr: 6>[4]: 00000002
<Vendor: 0; Attr: 7>[4]: 00000001
<Vendor: 0; Attr: 61>[4]: 00000005
<Vendor: 0; Attr: 87>[14]: 556e69712d536573732d49443338
<Vendor: 311; Attr: 11>[16]: 07d659139ebb8802538879088c7da7a1
<Vendor: 311; Attr: 25>[50]: 0100f62de98573cce2f6642d0b73006834d600000000000000002c08ca07b9ddf06382877c3a31ac9ac9530f73a2a9722e36
?Debug : Jun 18 17:24:52 AuthServer: User <test> connecting
?Debug : Jun 18 17:24:52 AuthServer: Session for sessionid <test> not found in <X.X.X.X> cache
?Debug : Jun 18 17:24:52 RADIUS DBA: Info for login <test> found. type <1>
?Debug : Jun 18 17:24:52 AuthServer: Auth scheme: MS-CHAPv2
?Debug : Jun 18 17:24:52 AuthServer: MS-CHAPv2: Authorized user <test>
?Debug : Jun 18 17:24:52 AuthServer: MS-CHAPv2: MPPE Keys send
?Debug : Jun 18 17:24:52 AuthServer: IP claimed: 0xc0a85002 (<192.168.80.2>)
?Debug : Jun 18 17:24:52 AuthServer: Calling fill radius attributes for service. Attr storage size <2>
?Debug : Jun 18 17:24:52 AuthServer: fill_radius_data Vendor:<9> Attr:<1> Val:<135153896> Size<99>
?Debug : Jun 18 17:24:52 AuthServer: fill_radius_data result <0> message <Success>
?Debug : Jun 18 17:24:52 AuthServer: fill_radius_data verifying packet. fetched val <lcp:interface-config#1=rate-limit input 64000 8000 8000 conform-action transmit exceed-action drop > size:<99>
?Debug : Jun 18 17:24:52 AuthServer: fill_radius_data Vendor:<9> Attr:<1> Val:<135153792> Size<100>
?Debug : Jun 18 17:24:52 AuthServer: fill_radius_data result <0> message <Success>
?Debug : Jun 18 17:24:52 AuthServer: fill_radius_data verifying packet. fetched val <lcp:interface-config#1=rate-limit input 64000 8000 8000 conform-action transmit exceed-action drop > size:<99>
?Debug : Jun 18 17:24:52 AuthServer: Calling fill radius attributes for slink. Attr storage size <0>
?Debug : Jun 18 17:24:52 AuthServer: Calling fill radius attributes for NAS. Attr storage size <0>
Notice: Jun 18 17:24:52 AuthServer: Login OK <test> from NAS <X.X.X.X> CLID <>
?Debug : Jun 18 17:24:52 AuthServer: Setting interim update interval from config
?Debug : Jun 18 17:24:52 AuthServer: Auth reply: RPacket:
Code: 2; ID: 39
<Vendor: 0; Attr: 6>[4]: 00000002
<Vendor: 0; Attr: 7>[4]: 00000001
<Vendor: 0; Attr: 8>[4]: c0a85002
<Vendor: 0; Attr: 9>[4]: ffffffff
<Vendor: 0; Attr: 10>[4]: 00000000
<Vendor: 0; Attr: 27>[4]: 00015180
<Vendor: 0; Attr: 85>[4]: 0000003c
<Vendor: 9; Attr: 1>[99]: 6c63703a696e746572666163652d636f6e66696723313d726174652d6c696d697420696e7075742036343030302038303030203830303020636f6e666f726d2d616374696f6e207472616e736d6974206578636565642d616374696f6e2064726f7020
<Vendor: 9(0); Attr: 1>[100]: 6c63703a696e746572666163652d636f6e66696723313d726174652d6c696d6974206f75747075742036343030302038303030203830303020636f6e666f726d2d616374696f6e207472616e736d6974206578636565642d616374696f6e2064726f7020
<Vendor: 311; Attr: 7>[4]: 00000001
<Vendor: 311; Attr: 8>[4]: 00000006
<Vendor: 311; Attr: 16>[34]: 822ad2c4df756add262c24a5f624b80000730ea2321a79edad01dfc8db8d23fe1882
<Vendor: 311; Attr: 17>[34]: 8e81ab5bf9e8820e773b0a8f272f9636d9dea5e7ab79dffa6dd11f06827bee79b11c
<Vendor: 311; Attr: 26>[43]: 81533d33383146393945423844363236304332313538303231423544353833434234393139443542343645
?Debug : Jun 18 17:24:52 RADIUS Packet: raw data constructed! size <436>
?Debug : Jun 18 17:24:52 RadiusSocket: Moving RADIUS packet into send queue
?Debug : Jun 18 17:24:52 AuthServer: Next...
?Trace : Jun 18 17:24:52 AuthServer: Process loop step
?Debug : Jun 18 17:24:52 RadiusSocket: Waiting for RADIUS raw data
?Debug : Jun 18 17:24:52 RadiusSocket: RADIUS raw data sent
?Debug : Jun 18 17:24:52 RadiusSocket: RADIUS packet successfully received
?Debug : Jun 18 17:24:52 RadiusSocket: RADIUS raw data obtained
?Debug : Jun 18 17:24:52 RADIUS Packet: Size <170>; HDR.Size <170>
?Debug : Jun 18 17:24:52 AcctServer: Recv...
?Debug : Jun 18 17:24:52 AcctServer: Packet from <X.X.X.X> packet dump: RPacket:
Code: 4; ID: 191
<Vendor: 0; Attr: 1>[4]: 74657374
<Vendor: 0; Attr: 4>[4]: c1da880e
<Vendor: 0; Attr: 5>[4]: 00000026
<Vendor: 0; Attr: 6>[4]: 00000002
<Vendor: 0; Attr: 7>[4]: 00000001
<Vendor: 0; Attr: 40>[4]: 00000001
<Vendor: 0; Attr: 41>[4]: 00000000
<Vendor: 0; Attr: 44>[8]: 3030303030373231
<Vendor: 0; Attr: 45>[4]: 00000001
<Vendor: 0; Attr: 61>[4]: 00000005
<Vendor: 0; Attr: 65>[4]: 00000001
<Vendor: 0; Attr: 66>[11]: 31302e322e3132322e3533
<Vendor: 0; Attr: 67>[14]: 3139332e3231382e3133362e3134
<Vendor: 0; Attr: 82>[1]: 31
<Vendor: 0; Attr: 87>[14]: 556e69712d536573732d49443338
<Vendor: 9; Attr: 1>[24]: 636f6e6e6563742d70726f67726573733d43616c6c205570
?Debug : Jun 18 17:24:52 RADIUS DBA: NAS found. Data size <0>
?Debug : Jun 18 17:24:52 AcctServer: Acct packet with session ID: 00000721
?Debug : Jun 18 17:24:52 RADIUS DBA: NAS found. Data size <0>
?Debug : Jun 18 17:24:52 AcctServer: Acct-Start packet
?Debug : Jun 18 17:24:52 AcctServer: Setting interim interval <0> for session id <00000721>
?Debug : Jun 18 17:24:52 AcctServer: Acct-Start: User <test>
?Debug : Jun 18 17:24:52 AcctServer: Acct-Session-Time (46) not present in accountg packet ! Setting session_time_not_present flag ...
?Debug : Jun 18 17:24:52 AcctServer: No h323-setup-time (9, 25) attribute in accountig start packet. Setting to NOW <1213781092>!
?Debug : Jun 18 17:24:52 RADIUS DBA: Info for login <test> found. type <1>
?Debug : Jun 18 17:24:52 RADIUS DBA: info for user found. type <1> info addr <135262088>
?Debug : Jun 18 17:24:52 RADIUS DBA: search_user_info return info <135262088>
?Debug : Jun 18 17:24:52 RADIUS DBA: search_user_info return valid info
?Debug : Jun 18 17:24:52 RADIUS IPPool: Bind <0> : <c0a85002>
?Debug : Jun 18 17:24:52 RADIUS DBA: Calling send_session_log_init_sync ...
?Debug : Jun 18 17:24:52 RADIUS Stream[plugin]: send_session_log_init_sync
?Debug : Jun 18 17:24:52 RADIUS Stream[plugin]: init log id <1>
?Debug : Jun 18 17:24:52 AcctServer: Reply packet dump: RPacket:
Code: 5; ID: 191
