Conference irocz::netrider

532.0. "DRAS Server crashes when Accounting used" by CSC32::R_BUCK (Authenticated and assimilated) Tue Apr 01 1997 19:38

    Have a report of a very strange situation with DNAS and DRAS.
    
    
    DRAS Server
    OpenVMS V6.1 (VAX)
    Windows NT V3.51
    Windows 95
    
    DRAS and DNAS installed and configured on multiple DECserver 700's. 
    DRAS Server running on OpenVMS and Windows NT.  Authentication working
    fine with either DRAS Server. Events are being recorded and can be
    viewed with DRAS Manager utility on WNT or Windows 95.  Command line
    utility on OpenVMS also working as expected.  Believe all public
    patches have been applied.
    
    
    Whenever Accounting is enabled on the DECserver 700, the DRAS Server on
    the target host "crashes" with the first attempt to login.  In the case
    of the OpenVMS system, the log file has the following text:
    
    CMA-F-EXCCOOP
    
    Exception raised; VMS condition code follows
    -SYSTEM-F-ACCVIO, Access Violation, reason mask = 00, VA = 00000000
    PC = 0005D6B2,PSL = 0BC00000
    
    On Windows NT, the DRAS server service has to be restarted.  Gets a Dr.
    Watson box that signals the error.
    
    So, based on this little bit of information, would anyone be willing to
    hazard a guess as to what the heck is going on?? Does the PC point to
    anything significant?
    
    Went over the DRAS installation. Everything sure looks solid to me. 
    Pretty much matches LAB configurations here.  User record that is being
    authenticated uses Password Authentication, has everything turned on
    except dialout, and is configured for NAS Prompt.  No time
    restrictions, specified session or other extented attributes.  It is a
    Digital employee on a consulting job that has setup the systems and has
    been doing testing prior to deployment.
    
    RADIUS setup on the DECserver looks fine.  No change in port numbers
    for accounting and/or authentication.  Realm name is the same as the
    customer DNS realm, but it is not included for authentication.  Again,
    all testing of DRAS Authentication works fine.  Only when Accounting is
    enabled does the problem occur.
    
    Steps described to reproduce are:
    Configue DRAS and DNAS.
    CHANGE RADIUS REALM X.Y.Z ACCOUNTING HOST 1.2.3.4
    Login with a valid Username and Password
    Authentication completes
    DRAS server crashes
    
    --------------------------
    Any ideas, troubleshooting techniques??  I am thinking that a network
    trace is just about mandatory to get an ideas of what is actually being
    sent from the Network Access Server to the DRAS server that would cause
    the DRAS server to crash.  Meanwhile, I guess we can try and recreate
    the problem....
    
    Randall Buck
    MCS - Network Support

    Solution (kind of)::
    
    We isolated the win/nt 3.51 box and the ds700-16 on their own segment.
    Put ds700 to factory and setup manually and now the wnt box does
    authenticate us, but on the terminal on the ds700 port we get the catch
    all 1107 local error. Put back on network and setup to authenticate to
    the vms system with DRAS (password authen) and it works now, even with
    the vms system being the accounting host. With or without accounting
    setup to the wnt system we got the local 1107 error, but again the wnt
    system thinks we authenticated fine. Since the customer wants it
    running on the vms system for authentication, we will not pursue this
    anymore.
    
    Darrell Shavey
    CSC32::D_SHAVEY