HP-UX AAA Server A.08.02.10 Administrator's Guide HP-UX 11i v3 (T1428-90093, November 2013)

Table 100 Common Configuration Problems
TroubleshootingProblem
Request from unknown client <client IP or hostname>
dropped. Configure client in /etc/opt/aaa/clients or Access
Devices screen in Server Manager.
Log MessageRequest dropped
The HP-UX AAA Server is not configured to receive requests from
the RADIUS client.
Cause
Solution 1. Ensure that the RADIUS client is sending requests to the correct
HP-UX AAA Server.
2. If the client is configured correctly, configure the HP-UX AAA
Server to receive requests from the client using the Access
Devices screen of the Server Manager.
3. If the HP-UX AAA Server receives the request from a proxy
server, configure the proxy server using the Proxies screen of
the Server Manager.
For information about configuring RADIUS clients, see Configuring
RADIUS Client Using the Access Devices Screen on page 89.
get_radrequest: Request dropped. Unknown RADIUS packet
'invalid(66)' received from client 'example.com:50390
Log MessageRequest dropped
Or
get_radrequest: ill formed packet from <server> [55421] - code
= 1, vers = 1, len(hdr) = 1000, len(rcvd) = 56
Or
get_radrequest: NO a/v pairs from <server> [55697] - access
(type 1), len = 20
Or
Request from 'example.com: port' dropped. Invalid RADIUS request
received from '<client-name>' [udp-port = '<udp-port>''] of type
'<type>' (type-code = '<type-code>'), version = '<version>' and
length = '<length>'
The HP-UX AAA Server received a bad RADIUS request that did
not contain correct information, or did not conform to the RADIUS
protocol.
Cause
Solution 1. Ensure that the RADIUS client transmits packets that conform
to the RADIUS protocol standards. See HP-UX AAA Server
A.08.02.10 Release Notes for a list of supported RADIUS
protocol RFCs.
2. Ensure that the RADIUS client is current with the latest patches.
3. Perform a packet trace using the raddbginc utility or
Wireshark.
For information on the raddbginc utility and the debug file, see
“The raddbginc Utility: For Setting Debug Output Levels”
(page 375).
For more information on WireShark, see the documentation for
Internet Express at www.docs.hp.com.
Unable to execute <exit> command. Attributes are not valid
arguments for the <exit> command. Pre-defined events or events
Log MessageRequest dropped
defined in the FSM file should be specified within quotes as
argument to <exit>
This error message occurs if a string is specified without quotes.
If the string is specified as an attribute, then it is not defined in the
Cause
dictionary file. If the string is specified as a string constant,
then it is not enclosed in quotes.
358 Troubleshooting Procedures