ACE RADIUS Server not responding
2 years ago
Originally Published: 2002-02-20
Article Number
000054895
Applies To
RSA ACE/Server 5.0.x (no longer supported as of 8-15-2004)
Microsoft Windows
UNIX (AIX, HP-UX, Solaris)
Issue
ACE RADIUS Server not responding
RADIUS debug log shows the following:

rc//radius/ace_radius/ace_radius_dbapi.cpp(133): Preparing...
rc//radius/ace_radius/ace_radius_dbapi.cpp(150): Connecting...
rc//radius/ace_radius/ace_radius_dbapi.cpp(206): Connected successfully
rc//radius/ace_radius/ace_radius_database.cpp(1681): Search for challenge profile
rc//radius/ace_radius/ace_radius_dbapi.cpp(1352): No challenge profile found
rc//radius/ace_radius/ace_radius_receive.cpp(174): Received auth packet
rc//radius/ace_radius/ace_radius_database.cpp(415): Attribute 1 Length 7
rc//radius/ace_radius/ace_radius_database.cpp(415): Attribute 3 Length 19
rc//radius/ace_radius/ace_radius_database.cpp(544): No user or password in the packet
rc//radius/ace_radius/ace_radius_database.cpp(551): Discarding invalid packet
rc//radius/ace_radius/ace_radius_receive.cpp(174): Received auth packet
rc//radius/ace_radius/ace_radius_receive.cpp(185): Discarded auth packet
rc//radius/ace_radius/ace_radius_receive.cpp(174): Received auth packet
rc//radius/ace_radius/ace_radius_receive.cpp(185): Discarded auth packet

Note that "No user or password in the packet" is a good indication that the RADIUS packet being received by the ACE RADIUS contains CHAP information.
 
Cause
Router or communication device is configured to use CHAP when sending RADIUS authentications
Resolution
CHAP is not a supported protocol with RSA's ACE RADIUS implementation. Please use PAP which is supported by the RSA ACE RADIUS.