
Diagnostic Parameters and Commands
Using diagnostics-related DO commands
MAX Administration Guide
B-29
RADACCT-147:_endRadAcct: STOP was delayed
Diag RadIF
Description: Displays RADIUS-related messages. Diag RadIF is a powerful diagnostic
command, because it displays RADIUS messages that the MAX unit receives and messages
that it sends. Output from Diag RadIF, in conjunction with running your RADIUS daemon in
diagnostic mode (using the
-x
option), gives you virtually all the information you need to
clarify issues relating to user authentication.
You can use this command to validate the IP port that you have configured (or think you have
configured), and the username that is being sent by the client.
The command is a toggle that alternately enables and disables the diagnostic display.
Usage: Enter
diag radif
at the command prompt.
Example: Following are messages you might see for a successful RADIUS authentication:
RADIF: authenticating <8:my_name> with PAP
RADIF: _radiusRequest: id 41, user name <9:my_name>
RADIF: _radiusRequest: challenge len = <0>
The RADIUS Daemon IP address and authentication port appear:
RADIF: _radiusRequest: socket 5 len 89 ipaddr 01010101 port
65534->1645
RADIF: _radCallback
RADIF: _radCallback, buf = B05BBFA0
The response is sent back from RADIUS. In this case, the user
my_name
has passed
authentication. Following is a list of the most common responses:
1 - Authentication Request
2 - Positive Acknowledgment
3 - Rejection
4 - Accounting Request
5 - Accounting Response
7 - Password Change Request
8 - Password Change Positive Acknowledgment
9 - Password Change Rejection
11 - Access Challenge
29 - Password - next code
30 - Password New PIN
31 - Password Terminate Session
32 - Password Expired
RADIF: _radCallback, authcode = 2
RADIF: Authentication Ack
After authenticating a user, the RADIUS daemon sends the attributes from the user profile to
the MAX unit. The unit creates the user’s Connection profile from these attributes, and
RadIF
displays them. (For a complete list of attribute numbers, see the TAOS RADIUS Guide and
Reference.)
RADIF: attribute 6, len 6, 00 00 00 02
RADIF: attribute 7, len 6, 00 00 00 01