Subject: net/radiusd-cistron works in i386 but fails in amd64
To: None <pkgsrc-users@NetBSD.org>
From: Heron Gallegos <gallegos@csxxi.net.mx>
List: pkgsrc-users
Date: 01/30/2007 21:11:24
Hello everybody

1) Our old radius server: NetBSD/i386 1.6.2_RC3 Jan 2004,
running radiusd-cistron-1.6.7 (Jan 2004)
In production... working fine, too old and needs to be
replaced by an amd64/NetBSD-3.1

2) Our new radius server: NetBSD/amd64 3.1 and pkgsrc-2006Q4.tar.gz
radiusd-cistron-1.6.7nb1 fails... It seems like it can not do auth.
Also tested with pkgsrc.tar.gz from December 19, also tested with
ftp://ftp.netbsd.org/pub/pkgsrc/packages/NetBSD-3.0/amd64/All/radiusd-cistron-1.6.7nb1.tgz
and tested with two other pkgsrc.tar.gz from nov and october.
It is the same problem in all cases.

More tests:
3) My office computer NetBSD/i386 3.1 and pkgsrc from nov 2006
radiusd-cistron-1.6.7nb1 works fine

4) Our new mail server NetBSD/amd64 3.1 tested with
ftp://ftp.netbsd.org/pub/pkgsrc/packages/NetBSD-3.0/amd64/All/radiusd-cistron-1.6.7nb1.tgz
fails.

In all cases, I untar the backup file in /usr/pkg/etc/raddb

This is the radius.log with amd64:
Tue Jan 30 20:39:56 2007: Info: Starting - reading configuration files ...
Tue Jan 30 20:39:56 2007: Info: Ready to process requests.
Tue Jan 30 20:42:49 2007: Auth: Login OK: [Cyclades-Enquiry-Request] (from nas RAS/S205)
Tue Jan 30 20:42:49 2007: Info: NAS ras.example.com restarted (Accounting-On packet seen)
Tue Jan 30 20:42:49 2007: Info: NAS ras.example.com rebooted (Accounting-Off packet seen)
Tue Jan 30 20:42:54 2007: Auth: Login OK: [Cyclades-Enquiry-Request] (from nas RAS/S205)
Tue Jan 30 20:42:59 2007: Auth: Login OK: [Cyclades-Enquiry-Request] (from nas RAS/S205)
Tue Jan 30 20:43:04 2007: Auth: Login OK: [Cyclades-Enquiry-Request] (from nas RAS/S205)
Tue Jan 30 20:43:09 2007: Auth: Login OK: [Cyclades-Enquiry-Request] (from nas RAS/S205)
Tue Jan 30 20:43:14 2007: Auth: Login OK: [Cyclades-Enquiry-Request] (from nas RAS/S205)
Tue Jan 30 20:43:19 2007: Auth: Login OK: [Cyclades-Enquiry-Request] (from nas RAS/S205)
Tue Jan 30 20:43:24 2007: Auth: Login OK: [Cyclades-Enquiry-Request] (from nas RAS/S205)
Tue Jan 30 20:43:29 2007: Auth: Login OK: [Cyclades-Enquiry-Request] (from nas RAS/S205)
Tue Jan 30 20:43:34 2007: Auth: Login OK: [Cyclades-Enquiry-Request] (from nas RAS/S205)
Message every five seconds

This is the radius.log with i386:
Mon Jan 29 13:02:59 2007: Info: Starting - reading configuration files ...
Mon Jan 29 13:02:59 2007: Info: Ready to process requests.
Mon Jan 29 13:04:49 2007: Auth: Login OK: [Cyclades-Enquiry-Request] (from nas RAS/S205)
Mon Jan 29 13:04:49 2007: Info: NAS RAS restarted (Accounting-On packet seen)
Mon Jan 29 13:04:49 2007: Info: NAS RAS rebooted (Accounting-Off packet seen)
Mon Jan 29 13:08:10 2007: Auth: Login incorrect: [erika/erika1975] (from nas RAS/S202)
Mon Jan 29 13:08:59 2007: Auth: Login incorrect: [erika/erika1975] (from nas RAS/S202)
Mon Jan 29 13:12:33 2007: Auth: Login incorrect: [erika/erika1975] (from nas RAS/S202)
Mon Jan 29 17:20:46 2007: Auth: Login OK: [olucio] (from nas RAS/S201)
Mon Jan 29 17:49:40 2007: Auth: Login OK: [coor01] (from nas RAS/S201)
Mon Jan 29 19:43:00 2007: Auth: Login OK: [erika] (from nas RAS/S202)
Mon Jan 29 20:13:17 2007: Auth: Login incorrect: [insp08/08LKJ08] (from nas RAS/S202)
Mon Jan 29 20:14:24 2007: Auth: Login incorrect: [insp08/08LKJ08] (from nas RAS/S202)
Mon Jan 29 20:14:29 2007: Auth: Login incorrect: [insp08/08LKJ08] (from nas RAS/S202)
Mon Jan 29 20:14:30 2007: Auth: Login incorrect: [insp08/08LKJ08] (from nas RAS/S202)
Mon Jan 29 20:16:35 2007: Auth: Login OK: [coor01] (from nas RAS/S202)
Mon Jan 29 20:19:20 2007: Auth: Login OK: [insp08] (from nas RAS/S202)
Mon Jan 29 20:30:27 2007: Auth: Login OK: [insp08] (from nas RAS/S202)
Mon Jan 29 21:15:35 2007: Auth: Login OK: [erika] (from nas RAS/S203)
Mon Jan 29 21:54:24 2007: Auth: Login incorrect: [erika/erika1975] (from nas RAS/S201)
Tue Jan 30 09:28:45 2007: Auth: Login incorrect: [erika/erika1975] (from nas RAS/S201)
Tue Jan 30 09:29:42 2007: Auth: Login incorrect: [erika/<NO-PASSWORD>] (from nas RAS/S201)
(The lines of login incorrect are ok... bad password)

Please see the Info lines are differents:
amd64: NAS ras.example.com (It seems FQDN)
i386: NAS RAS

The file /var/log/radacct/RAS/detail (amd64)
Tue Jan 30 20:42:49 2007
         NAS-IP-Address = 172.16.2.20
         Acct-Authentic = RADIUS
         Acct-Status-Type = Accounting-On
         Client-IP-Address = 172.16.2.20
         Timestamp = 1170211369
         Request-Authenticator = Unverified

Tue Jan 30 20:42:49 2007
         NAS-IP-Address = 172.16.2.20
         Acct-Authentic = RADIUS
         Acct-Status-Type = Accounting-Off
         Client-IP-Address = 172.16.2.20
         Timestamp = 1170211369
         Request-Authenticator = Unverified

First lines of file /var/log/radacct/RAS/detail (i386)
Mon Jan 29 13:04:49 2007
         NAS-IP-Address = 172.16.2.20
         Acct-Authentic = RADIUS
         Acct-Status-Type = Accounting-On
         Client-IP-Address = 172.16.2.20
         Timestamp = 1170097489
         Request-Authenticator = Verified

Mon Jan 29 13:04:49 2007
         NAS-IP-Address = 172.16.2.20
         Acct-Authentic = RADIUS
         Acct-Status-Type = Accounting-Off
         Client-IP-Address = 172.16.2.20
         Timestamp = 1170097489
         Request-Authenticator = Verified

Mon Jan 29 17:20:46 2007
         User-Name = "olucio"
         NAS-IP-Address = 172.16.2.20
         NAS-Port = 201
         NAS-Port-Type = Async
         Acct-Authentic = RADIUS
         Service-Type = Framed-User
         Framed-Protocol = PPP
         Framed-IP-Address = 172.16.1.20
         Acct-Delay-Time = 0
         Acct-Status-Type = Start
         Acct-Session-Id = "RAS-057000000025"
         Connect-Info = "V90 28800 52000 LAPM/V42Bis"
         Client-IP-Address = 172.16.2.20
         Timestamp = 1170112846
         Request-Authenticator = Verified

Does somebody can give me some idea in order to radiusd-cistron work in amd64?
Thanks in advance

Heron Gallegos
Saltillo Coahuila Mexico