On Sunday 12 December 2010 18:50:39 Josip Rodin wrote:
> On Sun, Dec 12, 2010 at 06:41:10PM +0100, Josip Rodin wrote:
> > On Sun, Dec 12, 2010 at 06:28:35PM +0100, Josip Rodin wrote:
> > > On Sun, Dec 12, 2010 at 04:19:37PM +0100, Georges wrote:
> > > > Package: freeradius
> > > > Version: 2.1.10+dfsg-2~bpo50+1
> > > > Severity: important
> > > >
> > > >
> > > > Configuring freeradius to also listen on a IPv6 interface (in this
> > > > case ::) does not work. Here is the error message I get when
> > > > starting freeradius in debug mode:
> > > >
> > > > -----------------------
> > > > listen {
> > > >
> > > > type = "auth"
> > > > ipv6addr = :: IPv6 address [::]
> > > > port = 0
> > > >
> > > > /etc/freeradius/radiusd.conf[312]: Error binding to port for :: port
> > > > 1812 -----------------------
> > > >
> > > > I confirm that there is _no_ other program using that port.
> > > > Configuring freeradius to _only_ listen on IPv6 doesn' work either, I
> > > > get the same error.
> > > >
> > > > I found this post, which might be realted to this problem:
> > > > http://lists.cistron.nl/pipermail/freeradius-users/2009-February/msg0
> > > > 0218.html
> > >
> > > The udpfromto stuff was supposed to be relevant for radclient(1),
> > > not for this... Alan?
> >
> > Actually, we've had it enabled since 2005,
> >
> > commit 3b6001041ef81c5007d6e80e79ee2a8d4b20315b
> > Author: phampson <phampson>
> > Date: Wed Aug 3 15:16:05 2005 +0000
> >
> > Forward port all the interesting things from FreeRADIUS 1.0.x in the
> > Debian archive to CVS HEAD.
> > This brings dpatch-2 support, even though there aren't any dpatches
> > needed yet.
> > (Changelog entry for 1.1.0~pre0~cvs has become long and unwieldly,
> > may need to refactor based on the 1.0.x debian-release changelogs.)
> >
> > debian/changelog | 54 +++++++++++++--
> > debian/control | 6 +-
> > debian/freeradius.examples | 1 +
> > debian/freeradius.init | 64 +++++++++--------
> > debian/rules | 162
> > +++++++++++++++++++++++++++----------------- 5 files changed, 184
> > insertions(+), 103 deletions(-)
> >
> > From the Debian changelog:
> >
> > freeradius (1.0.2-1) unstable; urgency=low
> >
> > * Enable udpfromto code so that replies come from the same address as
> >
> > the request arrived at
> >
> > -- Paul Hampson <[email protected]> Fri, 4 Mar 2005 09:30:40
> > +1100
>
> Looking at the code, it's supposed to make allowances for IPv6... the only
> recent change is:
>
> % git log -1 src/lib/udpfromto.c
> commit 50b90d2b4deeb0a24a30fc04ecd963cfa85d22c9
> Author: Alan T. DeKok <[email protected]>
> Date: Sat Mar 6 12:40:23 2010 +0100
>
> Check for AF_INET6, not HAVE_AF_INET6
>
> HAVE_AF_INET6 isn't defined, AF_INET6 is.
>
> % git diff 99b89c3fa013471745a8ac0984a1de0154a40605
> 50b90d2b4deeb0a24a30fc04ecd963cfa85d22c9 src/lib/udpfromto.c diff --git
> a/src/lib/udpfromto.c b/src/lib/udpfromto.c
> index a6e82f5..6a15012 100644
> --- a/src/lib/udpfromto.c
> +++ b/src/lib/udpfromto.c
> @@ -80,7 +80,7 @@ int udpfromto_init(int s)
> flag = IP_RECVDSTADDR;
> #endif
>
> -#ifdef HAVE_AF_INET6
> +#ifdef AF_INET6
> } else if (si.ss_family == AF_INET6) {
> #ifdef HAVE_IN6_PKTINFO
> /*
>
> This must have enabled that code path, since the new version looks like a
> no-op - it's always defined in src/include/missing.h if missing...
On a side note, I have freeradius-2.1.10+dfsg-2 running on a different system
with a similar config, and there IPv6+IPv4 does work.
It's a different architecture (ARM, v. x86-64 on the system where it does not
work), but that's probably not relevant.
--
regards,
Georges Toth
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
