Hi
Netware 6.5, BM 3.8. NMAS 2.2 or 2.3.3.
Some users get authenticated, some not (within the same container). The
das object is associated to the container. The problem affects users from
different containers, etc.
Previous version of Radius (BMAS) worked OK. See the debug log:

[2004-06-08 01:12:56 PM] Debug logging enabled to file
sys:etc\radius\debug\raddbg.log
[2004-06-08 01:13:32 PM] (->)Cacher: NWDSReadObjectInfo
(radius_das2.serveis.sscc.autopistas), succeeded, time:5
[2004-06-08 01:13:58 PM] 290) [(ip) 10.210.207.2:3769], Received 58 Bytes
(Access-Request (1))
[2004-06-08 01:13:58 PM] [(total=290) (p=289) (d=0) (r=0) (acc=0)
(rej=0)]
[2004-06-08 01:13:58 PM] <5> Done GetNextMessage [(ip) 10.210.207.2:3769]:
time:16398177
[2004-06-08 01:13:58 PM] -------- START : (Access-Request (1)) [(ip)
10.210.207.2:3769]: time:-358282289---
[2004-06-08 01:13:58 PM] CACHE: CacheDomainListExist
(radius_das2.serveis.sscc.autopistas), using cache
[2004-06-08 01:13:58 PM] AuthRequestHandler(), Calling RequestHandler.
[2004-06-08 01:13:58 PM] CACHE: CacheReadSecretForNASAddress
(radius_das2.serveis.sscc.autopistas), using cache
[2004-06-08 01:13:58 PM] CACHE: CacheGetEnableCNLogin
(radius_das2.serveis.sscc.autopistas), using cache
[2004-06-08 01:13:58 PM] (->)CacheGetDNForName:NWDSReadObjectInfo
(ojulia), succeeded, time:10
[2004-06-08 01:13:58 PM] userName: ojulia
[2004-06-08 01:13:58 PM] userDN: OJULIA.Srvinfor.SSCC.Autopistas
[2004-06-08 01:13:58 PM] (->)NDSVerifyAttr:NWDSRead
(OJULIA.Srvinfor.SSCC.Autopistas,RADIUS:Dial Access Group) succeeded,
time:5
[2004-06-08 01:13:58 PM] User "OJULIA.Srvinfor.SSCC.Autopistas", does
not have "RADIUS:Dial Access Group" defined, trying
parent "Srvinfor.SSCC.Autopistas"
[2004-06-08 01:13:58 PM] (->)NWDSCompare:(Srvinfor.SSCC.Autopistas)
succeeded, time:13
[2004-06-08 01:13:58 PM] (->)NWDSRead
(OJULIA.Srvinfor.SSCC.Autopistas,RADIUS Enable Attr) failed, no such
attribute (-603), time:6
[2004-06-08 01:13:58 PM] (->)User "OJULIA.Srvinfor.SSCC.Autopistas",
Looking in (Srvinfor.SSCC.Autopistas) for (RADIUS:Enable Dial Access)
[2004-06-08 01:13:58 PM] (->)NWDSRead(Srvinfor.SSCC.Autopistas,RADIUS
Enable Attr) succeeded, time:3
[2004-06-08 01:13:58 PM] User Name: ojulia, User DN:
OJULIA.Srvinfor.SSCC.Autopistas, Domain: , Service Tag:
[2004-06-08 01:13:58 PM] (->)NADMAuthRequest()
[2004-06-08 01:13:58 PM] (->)NADMAuthRequest
(OJULIA.Srvinfor.SSCC.Autopistas) failed, -1688 (0xfffff968), time:53
[2004-06-08 01:13:58 PM] (->)Authenticate (0 policy, NDS pswd) (for
OJULIA.Srvinfor.SSCC.Autopistas), failed, -1688 (0xfffff968)
[2004-06-08 01:13:58 PM] (->)Authentication FAILED
[2004-06-08 01:13:58 PM] ->Sending Access-Reject (3) [(ip) 10.210.207.2
(3769)] count=20
[2004-06-08 01:13:58 PM] ->Inserting into RespQ , code(3) id(136).
[2004-06-08 01:13:58 PM] -------- END : (Access-Request (1)) [(ip)
10.210.207.2:3769]: time:-358282186---
[2004-06-08 01:14:18 PM] Debug logging disabled
[2004-06-08 01:26:46 PM] Debug logging enabled to file
sys:etc\radius\debug\raddbg.log
[2004-06-08 01:26:59 PM] 299) [(ip) 10.200.110.2:3253], Received 48 Bytes
(Access-Request (1))
[2004-06-08 01:26:59 PM] [(total=299) (p=298) (d=0) (r=0) (acc=0)
(rej=0)]
[2004-06-08 01:26:59 PM] <4> Done GetNextMessage [(ip) 10.200.110.2:3253]:
time:1294958
[2004-06-08 01:26:59 PM] -------- START : (Access-Request (1)) [(ip)
10.200.110.2:3253]: time:-350470241---
[2004-06-08 01:26:59 PM] CACHE: CacheDomainListExist
(radius_das2.serveis.sscc.autopistas), using cache
[2004-06-08 01:26:59 PM] AuthRequestHandler(), Calling RequestHandler.
[2004-06-08 01:26:59 PM] CACHE: CacheReadSecretForNASAddress
(radius_das2.serveis.sscc.autopistas), using cache
[2004-06-08 01:26:59 PM] CACHE: CacheGetEnableCNLogin
(radius_das2.serveis.sscc.autopistas), using cache
[2004-06-08 01:26:59 PM] (->)CacheGetDNForName:NWDSReadObjectInfo
(jsanchem), succeeded, time:10
[2004-06-08 01:26:59 PM] userName: jsanchem
[2004-06-08 01:26:59 PM] userDN: JSANCHEM.Srvinfor.SSCC.Autopistas
[2004-06-08 01:26:59 PM] (->)NDSVerifyAttr:NWDSRead
(JSANCHEM.Srvinfor.SSCC.Autopistas,RADIUS:Dial Access Group) succeeded,
time:6
[2004-06-08 01:26:59 PM] (->)NWDSCompare:
(JSANCHEM.Srvinfor.SSCC.Autopistas) succeeded, time:3
[2004-06-08 01:26:59 PM] (->)NWDSRead
(JSANCHEM.Srvinfor.SSCC.Autopistas,RADIUS Enable Attr) failed, no such
attribute (-603), time:5
[2004-06-08 01:26:59 PM] (->)User "JSANCHEM.Srvinfor.SSCC.Autopistas",
Looking in (Srvinfor.SSCC.Autopistas) for (RADIUS:Enable Dial Access)
[2004-06-08 01:26:59 PM] (->)NWDSRead(Srvinfor.SSCC.Autopistas,RADIUS
Enable Attr) succeeded, time:3
[2004-06-08 01:26:59 PM] User Name: jsanchem, User DN:
JSANCHEM.Srvinfor.SSCC.Autopistas, Domain: , Service Tag:
[2004-06-08 01:26:59 PM] (->)NADMAuthRequest()
[2004-06-08 01:27:00 PM] (->)NADMAuthRequest
(JSANCHEM.Srvinfor.SSCC.Autopistas) succeeded, time:1714
[2004-06-08 01:27:00 PM] (->)Authenticate (0 policy, NDS pswd) (for
JSANCHEM.Srvinfor.SSCC.Autopistas), succeeded
[2004-06-08 01:27:00 PM] (->)NDSReadData:NWDSRead
(JSANCHEM.Srvinfor.SSCC.Autopistas,RADIUS:Concurre nt Limit) failed, no
such attribute (-603), time:9
[2004-06-08 01:27:00 PM] CACHE: CacheGetConcurrentLimit
(radius_das2.serveis.sscc.autopistas), using cache
[2004-06-08 01:27:00 PM] User:JSANCHEM.Srvinfor.SSCC.Autopistas, Current
Login:0, Login Limit:-1, succeeded
[2004-06-08 01:27:00 PM] (->)Authentication SUCCEEDED
[2004-06-08 01:27:00 PM] ->Sending Access-Accept (2) [(ip) 10.200.110.2
(3253)] count=20
[2004-06-08 01:27:00 PM] ->Inserting into RespQ , code(2) id(12).
[2004-06-08 01:27:00 PM] -------- END : (Access-Request (1)) [(ip)
10.200.110.2:3253]: time:-350468469---
[2004-06-08 01:27:10 PM] 300) [(ip) 10.200.110.2:3254], Received 46 Bytes
(Access-Request (1))
[2004-06-08 01:27:10 PM] [(total=300) (p=299) (d=0) (r=0) (acc=0)
(rej=0)]
[2004-06-08 01:27:10 PM] <5> Done GetNextMessage [(ip) 10.200.110.2:3254]:
time:1275741
[2004-06-08 01:27:10 PM] -------- START : (Access-Request (1)) [(ip)
10.200.110.2:3254]: time:-350361566---
[2004-06-08 01:27:10 PM] CACHE: CacheDomainListExist
(radius_das2.serveis.sscc.autopistas), using cache
[2004-06-08 01:27:10 PM] AuthRequestHandler(), Calling RequestHandler.
[2004-06-08 01:27:10 PM] CACHE: CacheReadSecretForNASAddress
(radius_das2.serveis.sscc.autopistas), using cache
[2004-06-08 01:27:10 PM] CACHE: CacheGetEnableCNLogin
(radius_das2.serveis.sscc.autopistas), using cache
[2004-06-08 01:27:10 PM] (->)CacheGetDNForName:NWDSReadObjectInfo
(ojulia), succeeded, time:10
[2004-06-08 01:27:10 PM] userName: ojulia
[2004-06-08 01:27:10 PM] userDN: OJULIA.Srvinfor.SSCC.Autopistas
[2004-06-08 01:27:10 PM] (->)NDSVerifyAttr:NWDSRead
(OJULIA.Srvinfor.SSCC.Autopistas,RADIUS:Dial Access Group) succeeded,
time:5
[2004-06-08 01:27:10 PM] User "OJULIA.Srvinfor.SSCC.Autopistas", does
not have "RADIUS:Dial Access Group" defined, trying
parent "Srvinfor.SSCC.Autopistas"
[2004-06-08 01:27:10 PM] (->)NWDSCompare:(Srvinfor.SSCC.Autopistas)
succeeded, time:3
[2004-06-08 01:27:10 PM] (->)NWDSRead
(OJULIA.Srvinfor.SSCC.Autopistas,RADIUS Enable Attr) failed, no such
attribute (-603), time:4
[2004-06-08 01:27:10 PM] (->)User "OJULIA.Srvinfor.SSCC.Autopistas",
Looking in (Srvinfor.SSCC.Autopistas) for (RADIUS:Enable Dial Access)
[2004-06-08 01:27:10 PM] (->)NWDSRead(Srvinfor.SSCC.Autopistas,RADIUS
Enable Attr) succeeded, time:3
[2004-06-08 01:27:10 PM] User Name: ojulia, User DN:
OJULIA.Srvinfor.SSCC.Autopistas, Domain: , Service Tag:
[2004-06-08 01:27:10 PM] (->)NADMAuthRequest()
[2004-06-08 01:27:11 PM] (->)NADMAuthRequest
(OJULIA.Srvinfor.SSCC.Autopistas) failed, -1688 (0xfffff968), time:1442
[2004-06-08 01:27:11 PM] (->)Authenticate (0 policy, NDS pswd) (for
OJULIA.Srvinfor.SSCC.Autopistas), failed, -1688 (0xfffff968)
[2004-06-08 01:27:11 PM] (->)Authentication FAILED
[2004-06-08 01:27:11 PM] ->Sending Access-Reject (3) [(ip) 10.200.110.2
(3254)] count=20
[2004-06-08 01:27:11 PM] ->Inserting into RespQ , code(3) id(13).
[2004-06-08 01:27:11 PM] -------- END : (Access-Request (1)) [(ip)
10.200.110.2:3254]: time:-350360087---
[2004-06-08 01:27:19 PM] 301) [(ip) 10.200.110.2:3255], Received 46 Bytes
(Access-Request (1))
[2004-06-08 01:27:19 PM] [(total=301) (p=300) (d=0) (r=0) (acc=0)
(rej=0)]
[2004-06-08 01:27:19 PM] <3> Done GetNextMessage [(ip) 10.200.110.2:3255]:
time:1249810
[2004-06-08 01:27:19 PM] -------- START : (Access-Request (1)) [(ip)
10.200.110.2:3255]: time:-350277185---
[2004-06-08 01:27:19 PM] CACHE: CacheDomainListExist
(radius_das2.serveis.sscc.autopistas), using cache
[2004-06-08 01:27:19 PM] AuthRequestHandler(), Calling RequestHandler.
[2004-06-08 01:27:19 PM] CACHE: CacheReadSecretForNASAddress
(radius_das2.serveis.sscc.autopistas), using cache
[2004-06-08 01:27:19 PM] CACHE: CacheGetEnableCNLogin
(radius_das2.serveis.sscc.autopistas), using cache
[2004-06-08 01:27:19 PM] (->)CacheGetDNForName:NWDSReadObjectInfo
(ojulia), succeeded, time:12
[2004-06-08 01:27:19 PM] userName: ojulia
[2004-06-08 01:27:19 PM] userDN: OJULIA.Srvinfor.SSCC.Autopistas
[2004-06-08 01:27:19 PM] (->)NDSVerifyAttr:NWDSRead
(OJULIA.Srvinfor.SSCC.Autopistas,RADIUS:Dial Access Group) succeeded,
time:6
[2004-06-08 01:27:19 PM] User "OJULIA.Srvinfor.SSCC.Autopistas", does
not have "RADIUS:Dial Access Group" defined, trying
parent "Srvinfor.SSCC.Autopistas"
[2004-06-08 01:27:19 PM] (->)NWDSCompare:(Srvinfor.SSCC.Autopistas)
succeeded, time:42
[2004-06-08 01:27:19 PM] (->)NWDSRead
(OJULIA.Srvinfor.SSCC.Autopistas,RADIUS Enable Attr) failed, no such
attribute (-603), time:7
[2004-06-08 01:27:19 PM] (->)User "OJULIA.Srvinfor.SSCC.Autopistas",
Looking in (Srvinfor.SSCC.Autopistas) for (RADIUS:Enable Dial Access)
[2004-06-08 01:27:19 PM] (->)NWDSRead(Srvinfor.SSCC.Autopistas,RADIUS
Enable Attr) succeeded, time:3
[2004-06-08 01:27:19 PM] User Name: ojulia, User DN:
OJULIA.Srvinfor.SSCC.Autopistas, Domain: , Service Tag:
[2004-06-08 01:27:19 PM] (->)NADMAuthRequest()
[2004-06-08 01:27:19 PM] (->)NADMAuthRequest
(OJULIA.Srvinfor.SSCC.Autopistas) failed, -1688 (0xfffff968), time:1541
[2004-06-08 01:27:19 PM] (->)Authenticate (0 policy, NDS pswd) (for
OJULIA.Srvinfor.SSCC.Autopistas), failed, -1688 (0xfffff968)
[2004-06-08 01:27:19 PM] (->)Authentication FAILED
[2004-06-08 01:27:19 PM] ->Sending Access-Reject (3) [(ip) 10.200.110.2
(3255)] count=20
[2004-06-08 01:27:19 PM] ->Inserting into RespQ , code(3) id(14).
[2004-06-08 01:27:19 PM] -------- END : (Access-Request (1)) [(ip)
10.200.110.2:3255]: time:-350275562---
[2004-06-08 01:27:26 PM] Debug logging disabled


User "jsanchem" logged on OK, user "ojulia" don't. You can see two
attempts of ojulia, one of them wrong password.

Please advice.

Jesus.