missing required dictionary attributes for standard pppd

Bug #706036 reported by Igor A Tarasov
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
radiusclient-ng (Debian)
Fix Released
Unknown
radiusclient-ng (Ubuntu)
Fix Committed
Undecided
Unassigned

Bug Description

Dictionary included with package radusclient-ng missing required attributes for pppd.
When pppd receive attribute, which is not defined in dictionary it DROP CONNECTION !!!

Steps to reproduce:
1) configure pppd for radius authentication
2) configure radius accounting with Acct-Interim-Interval at radius server

After first interval, pppd send AccountingRequest packet and drop connection with 'unknown attribute'

To fix this, need to include attributes, used by pppd to dictionary:

# RFC 2869
ATTRIBUTE Acct-Interim-Interval 85 integer

# Limit session traffic
ATTRIBUTE Session-Octets-Limit 227 integer

# What to assume as limit - 0 in+out, 1 in, 2 out, 3 max(in,out)
ATTRIBUTE Octets-Direction 228 integer

# Octets-Direction
VALUE Octets-Direction Sum 0
VALUE Octets-Direction Input 1
VALUE Octets-Direction Output 2
VALUE Octets-Direction MaxOveral 3
VALUE Octets-Direction MaxSession 4

Also, pppd unable to authenticate with radius, when Mictosoft MS-CHAPv2 authentication is configured because of no of this attributes defined in dictionary.

All this problems is very simple to fix - just include all attributes, used by pppd to dictionary.

I attached dictionaries for pppd and microsoft attributes.
To include it, please add this to /etc/radiusclient-ng/dictionary:

INCLUDE dictionary.pppd
INCLUDE dictionary.microsoft

Patch attached.

Revision history for this message
Igor A Tarasov (dicr) wrote :
Revision history for this message
Igor A Tarasov (dicr) wrote :

Standard attributes, using by pppd in separate dictionary file.

Revision history for this message
Igor A Tarasov (dicr) wrote :

Standard attributes, using by pppd for MS* authentication.

tags: added: patch
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package radiusclient-ng - 0.5.6-1.1ubuntu1

---------------
radiusclient-ng (0.5.6-1.1ubuntu1) oneiric; urgency=low

  * Apply patch from Igor A Tarasov resolving dropped connections
    in pppd when radiusclient-ng is missing required attributes.
    (LP: #706036)
    - Adjust etc/Makefile.* to include fix.
 -- Daniel T Chen <email address hidden> Sun, 21 Aug 2011 21:25:44 -0400

Changed in radiusclient-ng (Ubuntu):
status: New → Fix Released
Daniel T Chen (crimsun)
tags: added: patch-forwarded-debian
removed: patch
Changed in radiusclient-ng (Debian):
status: Unknown → New
Revision history for this message
Igor A Tarasov (dicr) wrote :

SYSLOG:
Dec 29 16:48:23 router pppd[384]: rc_read_dictionary: couldn't open dictionary dictionary.pppd: No such file or directory
Dec 29 16:48:23 router pppd[384]: RADIUS: Can't read dictionary file /etc/radiusclient-ng/dictionary

PATCH /etc/libradiusclient-ng/dictionary
241,242c241,242
< INCLUDE dictionary.pppd
< INCLUDE dictionary.microsoft
---
> INCLUDE /etc/radiusclient-ng/dictionary.pppd
> INCLUDE /etc/radiusclient-ng/dictionary.microsoft

Changed in radiusclient-ng (Ubuntu):
status: Fix Released → Fix Committed
Changed in radiusclient-ng (Debian):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.