Господа! Ну проблема сама собой не рассасывается!
Меня очень беспокоит следующее:
В конфигурации устройства стоит:
Код:
# Коды ошибок, при которых отвечать Access-Accept в состоянии disable (rejectToAccept)
radius.disable.accessCodes=1,12
1) Сервис в договоре в статусе "Отключен", баланс > лимита. На попытку авторизации получаю:
Код:
08-14/09:31:57 INFO [rdsLstnr-p-9-t-4] InetNas - Found agentDevice:69
08-14/09:31:57 INFO [rdsLstnr-p-9-t-4] InetNas - Search serv on deviceId=69; interfaceId=3
08-14/09:31:57 INFO [rdsLstnr-p-9-t-4] InetRadiusProcessor - [username=0006001fce109dc5:000e0064000701515445431309000403] Authenticated as inetServId:161
08-14/09:31:57 INFO [rdsLstnr-p-9-t-4] InetApplication - inetServ[id=161] status not active (accessCode=0).
08-14/09:31:57 INFO [rdsLstnr-p-9-t-4] InetRadiusProcessor - Return code=20
08-14/09:31:57 INFO [rdsLstnr-p-9-t-4] InetRadiusProcessor - RESPONSE_BEFORE_POSTPROCESS:
Packet type: Access-Reject
Identifier: 121
Authenticator: {}
Attributes:
Reply-Message=20
Process time auth: 45
08-14/09:31:57 INFO [rdsLstnr-p-9-t-4] InetRadiusListenerWorker - RESPONSE:
Packet type: Access-Reject
Identifier: 121
Authenticator: {86 61 CD 73 60 4A 98 31 0D 85 20 4D 68 90 BE DE}
Attributes:
Reply-Message=20
2) Сервис в договоре в статусе "Заблокирован", баланс > лимита. На попытку авторизации получаю:
Код:
08-14/09:34:26 INFO [rdsLstnr-p-9-t-2] InetNas - Found agentDevice:69
08-14/09:34:26 INFO [rdsLstnr-p-9-t-2] InetNas - Search serv on deviceId=69; interfaceId=3
08-14/09:34:26 INFO [rdsLstnr-p-9-t-2] InetRadiusProcessor - [username=0006001fce109dc5:000e0064000701515445431309000403] Authenticated as inetServId:161
08-14/09:34:26 INFO [rdsLstnr-p-9-t-2] InetApplication - inetServ[id=161] status not active (accessCode=0).
08-14/09:34:26 INFO [rdsLstnr-p-9-t-2] InetRadiusProcessor - Return code=20
08-14/09:34:26 INFO [rdsLstnr-p-9-t-2] InetRadiusProcessor - RESPONSE_BEFORE_POSTPROCESS:
Packet type: Access-Reject
Identifier: 139
Authenticator: {}
Attributes:
Reply-Message=20
Process time auth: 42
08-14/09:34:26 INFO [rdsLstnr-p-9-t-2] InetRadiusListenerWorker - RESPONSE:
Packet type: Access-Reject
Identifier: 139
Authenticator: {B5 61 02 1B B6 5C FA 24 36 7E D1 DC 5C 33 E7 4C}
Attributes:
Reply-Message=20
На обе ситуации я получаю один и тот же accessCode=0 Return code=20
Устанавливаю в конфигурации устройства:
Код:
radius.disable.accessCodes=1,12,20
3) Сервис в договоре в статусе "Отключен", баланс > лимита. На попытку авторизации получаю:
Код:
08-14/09:47:21 INFO [rdsLstnr-p-9-t-3] InetNas - Found agentDevice:69
08-14/09:47:21 INFO [rdsLstnr-p-9-t-3] InetNas - Search serv on deviceId=69; interfaceId=3
08-14/09:47:21 INFO [rdsLstnr-p-9-t-3] InetRadiusProcessor - [username=0006001fce109dc5:000e0064000701515445431309000403] Authenticated as inetServId:161
08-14/09:47:21 INFO [rdsLstnr-p-9-t-3] InetApplication - inetServ[id=161] status not active (accessCode=0).
08-14/09:47:22 INFO [rdsLstnr-p-9-t-3] InetRadiusProcessor - Write new waiting connection to DB
08-14/09:47:22 INFO [rdsLstnr-p-9-t-3] InetRadiusProcessor - New connection id=44956
08-14/09:47:22 INFO [rdsLstnr-p-9-t-3] InetRadiusProcessor - Return code=0
08-14/09:47:22 INFO [rdsLstnr-p-9-t-3] InetConnectionKeyMap - Put auth accept 192.168.172.183
08-14/09:47:22 INFO [rdsLstnr-p-9-t-3] InetDhcpHelperProcessor - Put auth accept 2:69:3:001FCE5D99A5
08-14/09:47:22 INFO [rdsLstnr-p-9-t-3] InetRadiusProcessor - RESPONSE_BEFORE_POSTPROCESS:
Packet type: Access-Accept
Identifier: 140
Authenticator: {}
Attributes:
Reply-Message=20
Framed-IP-Address=192.168.172.183
DHCP-Max-Leases=1
Service-Name:1=RSE-SVC-EXT
Service-Options:1=1
Service-Parameter:1=Rate=1000 Burst=250000
IP-Interface-Name=NOAUTH
4) Сервис в договоре в статусе "Заблокирован", баланс > лимита. На попытку авторизации получаю:
Код:
08-14/09:50:14 INFO [rdsLstnr-p-9-t-4] InetNas - Found agentDevice:69
08-14/09:50:14 INFO [rdsLstnr-p-9-t-4] InetNas - Search serv on deviceId=69; interfaceId=3
08-14/09:50:14 INFO [rdsLstnr-p-9-t-4] InetRadiusProcessor - [username=0006001fce109dc5:000e0064000701515445431309000403] Authenticated as inetServId:161
08-14/09:50:14 INFO [rdsLstnr-p-9-t-4] InetApplication - inetServ[id=161] status not active (accessCode=0).
08-14/09:50:14 INFO [rdsLstnr-p-9-t-4] InetRadiusProcessor - Write new waiting connection to DB
08-14/09:50:14 INFO [rdsLstnr-p-9-t-4] InetRadiusProcessor - New connection id=44958
08-14/09:50:14 INFO [rdsLstnr-p-9-t-4] InetRadiusProcessor - Return code=0
08-14/09:50:14 INFO [rdsLstnr-p-9-t-4] InetConnectionKeyMap - Put auth accept 192.168.172.184
08-14/09:50:14 INFO [rdsLstnr-p-9-t-4] InetDhcpHelperProcessor - Put auth accept 2:69:3:001FCE5D99A5
08-14/09:50:14 INFO [rdsLstnr-p-9-t-4] InetRadiusProcessor - RESPONSE_BEFORE_POSTPROCESS:
Packet type: Access-Accept
Identifier: 141
Authenticator: {}
Attributes:
Reply-Message=20
Framed-IP-Address=192.168.172.184
DHCP-Max-Leases=1
Service-Name:1=RSE-SVC-EXT
Service-Options:1=1
Service-Parameter:1=Rate=1000 Burst=250000
IP-Interface-Name=NOAUTH
Вопрос ребром! Ну почему отработал RehectToAccept!? Нет же кода 20 в accesCode!? И почему на статус "Отключен" и "Заблокирован" одинаковый accesCode?
Есть ли возможность сделать как раньше было:
Если статус:
"Отключен" то accesCode = 20 -> делать RejectToAcept
"Заблокирован" то accesCode = 10 -> делать Reject