(Fwd) (Fwd) Re: Seg Fault - radius 3.0 Debug
The debug mode said anything - No errors. My variable is in the SQLIPPOOL.conf file and called with "%{Huntgroup-Name}" No values were returned. With 2.1.11 - Same directory, dic files, etc , i have a value. --- Forwarded message follows --- Breuer Nicolas wrote: > but.. Maybe variables have changed but since 3.0 version the variable > %{Huntgroup-Name} > is no more recognized. It should work. The git "master" branch hasn't changed any of that functionality. And (as always) what does debug mode say? Alan DeKok. --- Forwarded message follows --- From: Breuer Nicolas To: freeradius-users@lists.freeradius.org Subject:(Fwd) Re: Seg Fault - radius 3.0 Debug Date sent: Fri, 18 Mar 2011 12:45:23 +0100 Hello, I finally solved my issue. It was a problem of linking mysql libs. I'm sorry . Apologies to all but.. Maybe variables have changed but since 3.0 version the variable %{Huntgroup-Name} is no more recognized. tested on version 2.1.11 - Works perfectly Any ideas ? Thanks --- Forwarded message follows --- Date sent: Thu, 17 Mar 2011 21:20:20 + From: Alan Buxey To: "nicolas.bre...@belcenter.biz" , FreeRadius users mailing list Subject: Re: Seg Fault - radius 3.0 Debug Hi, > Here is my debug file with gbd on the seg fault > [Thread debugging using libthread_db enabled] > [New Thread 0x7600b700 (LWP 23433)] > [Thread 0x7600b700 (LWP 23433) exited] > Program received signal SIGSEGV, Segmentation fault. > 0x76032890 in mysql_field_count () from > /usr/lib64/mysql/libmysqlclient_r.so.16 > Missing separate debuginfos, use: debuginfo-install > glibc-2.13-1.x86_64 suggest you follow the information given to get more debugging info out alan --- End of forwarded message --- --- End of forwarded message --- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
(Fwd) Re: Seg Fault - radius 3.0 Debug
Hello, I finally solved my issue. It was a problem of linking mysql libs. I'm sorry . Apologies to all but.. Maybe variables have changed but since 3.0 version the variable %{Huntgroup-Name} is no more recognized. tested on version 2.1.11 - Works perfectly Any ideas ? Thanks --- Forwarded message follows --- Date sent: Thu, 17 Mar 2011 21:20:20 + From: Alan Buxey To: "nicolas.bre...@belcenter.biz" , FreeRadius users mailing list Subject:Re: Seg Fault - radius 3.0 Debug Hi, > Here is my debug file with gbd on the seg fault > [Thread debugging using libthread_db enabled] >[New Thread 0x7600b700 (LWP 23433)] >[Thread 0x7600b700 (LWP 23433) exited] >Program received signal SIGSEGV, Segmentation fault. >0x76032890 in mysql_field_count () from >/usr/lib64/mysql/libmysqlclient_r.so.16 >Missing separate debuginfos, use: debuginfo-install >glibc-2.13-1.x86_64 suggest you follow the information given to get more debugging info out alan --- End of forwarded message --- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re : Seg Fault - radius 3.0 Debug
0\000\225%C\000\000\000\000\000\000\000\000\000\n\000\000\000 P\321\377\377\377\177\000\000p\321\377\377\377\177\000\000\220\024y", '\000' , "l\312\071X\000\000\000\000\242\226`\234\061", '\000' , "\005", '\000' , "\001\000\000\000\377\177\000\000\220\024y\000\000\000\000\000\005\000\000\000\377\1 77\000\000\000\000\000\000\000\000\000\000\310t\335\367\377\177", '\000' "\350, \027y\000\000\000\000\000\360\320\377\377\377\177\000\000\001\000\000\000\000\000\00 0\000\020\321\377\377ל377\177\000\000\265=a\234\001" #6 0x0041afd9 in call_modsingle (component=7, c=0x8c4a40, request=) at modcall.c:297 myresult = #7 modcall (component=7, c=0x8c4a40, request=) at modcall.c:670 myresult = stack = {pointer = 2, priority = {0 }, result = {0 }, children = { }, start = { }} parent = 0x8c5840 child = 0x8c6500 if_taken = 0 was_if = 1 #8 0x00419d45 in indexed_modcall (comp=7, idx=0, request=0x8d5b20) at modules.c:759 rcode = list = server = #9 0x00408495 in rad_postauth (request=0x8d5b20) at auth.c:422 result = postauth_type = vp = 0x0 #10 0x00408afb in rad_authenticate (request=0x8d5b20) at auth.c:812 namepair = 0x8d7500 check_item = 0x0 auth_item = 0x8d5e90 module_msg = tmp = result = 0 password = 0x436e91 "" autz_retry = autz_type = #11 0x00429813 in radius_handle_request (request=0x8d5b20, fun=0x4084e0 ) at event.c:4243 No locals. #12 0x00420a55 in thread_pool_addrequest (request=0x8d5b20, fun=0x4084e0 ) at threads.c:900 No locals. #13 0x0042746d in event_socket_handler (xel=, fd=, ctx=0x8d5580) at event.c:3957 listener = 0x8d5580 fun = 0x4084e0 request = 0x8d5b20 #14 0x77df0fdf in fr_event_loop (el=0x8c7a80) at event.c:413 ef = i = rcode = 1 maxfd = 26 when = {tv_sec = 0, tv_usec = 0} wake = read_fds = {fds_bits = {33554432, 0 }} master_fds = {fds_bits = {109051904, 0 }} #15 0x0041d434 in main (argc=, argv=) at radiusd.c:408 rcode = argval = spawn_flag = 0 dont_fork = 1 flag = 0 act = {__sigaction_handler = {sa_handler = 0x41cef0 , --- End of forwarded message --- Breuer Nicolas Network Supervisor Sales Executive BELCENTER sprl/bvba Avenue Henri Consciencelaan, 94 Bruxelles 1140 Brussel T. : +32 (0)2 403 04 60 F. : +32 (0)2 403 04 63 M. :+32 (0)486 50 27 87 E. : nicolas.bre...@belcenter.biz W. : http://www.BelCenter.be | http://www.BelCenter.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Seg Fault - radius 3.0 Debug
Dear all, Here is my debug file with gbd on the seg fault [Thread debugging using libthread_db enabled] [New Thread 0x7600b700 (LWP 23433)] [Thread 0x7600b700 (LWP 23433) exited] Program received signal SIGSEGV, Segmentation fault. 0x76032890 in mysql_field_count () from /usr/lib64/mysql/libmysqlclient_r.so.16 Missing separate debuginfos, use: debuginfo-install glibc-2.13-1.x86_64 keyutils-libs-1.2- 6.fc12.x86_64 krb5-libs-1.8.2-7.fc14.x86_64 libcom_err-1.41.12-6.fc14.x86_64 libgcc-4.5.1- 4.fc14.x86_64 libselinux-2.0.96-6.fc14.1.x86_64 mysql-libs-5.1.55-1.fc14.x86_64 nss- softokn-freebl-3.12.9-2.fc14.x86_64 openssl-1.0.0d-1.fc14.x86_64 zlib-1.2.5-2.fc14.x86_64 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Seg Fault - 3.0 - More Info needed
Hello Alan, Could you precise wich infos you need to go further ? Thanks --- End of forwarded message --- Hello I discovered a Seg Fault on the release 3.0 on the GIT server. Seems happening on the first auth. (30) Login OK: [XXX] (from client XXX) (30) # Executing section post-auth from file /etc/XXX.conf (30) +- entering group post-auth {...} (30) ++? if (reply:Framed-IP-Address) (30) ? Evaluating (reply:Framed-IP-Address) -> FALSE (30) ++? if (reply:Framed-IP-Address) -> FALSE (30) ++- entering else else {...} rlm_sql (ACCOUNTING-01): Reserving sql socket id: 14 (30) [IP-POOLING-01] expand: %{User-Name} -> XXX (30) [IP-POOLING-01] sql_set_user escaped user --> 'XXX' (30) [IP-POOLING-01] expand: BEGIN -> BEGIN (30) [IP-POOLING-01] expand: COMMIT -> COMMIT (30) [IP-POOLING-01] expand: SELECT ip_address FROM radippool WHERE pool_name = '%{reply:Pool-Suffix}*%{Huntgroup-Name}' AND expiry_time < NOW() ORDER BY rand(), pool_name, expiry_time LIMIT 1 FOR UPDATE -> SELECT ip_address FROM radippool WHERE pool_name = 'BC*' AND expiry_time < NOW() ORDER BY rand(), pool_name, expiry_time LIMIT 1 FOR UPDATE Segmentation fault I see the expand of variable HuntGroup-Name didn't get any values... Maybe the reason of Seg fault ? --- End of forwarded message --- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
(Fwd) Seg Fault - 3.0
--- Forwarded message follows --- From: Breuer Nicolas To: freeradius-de...@lists.freeradius.org Subject:Seg Fault - 3.0 Date sent: Wed, 16 Mar 2011 15:23:22 +0100 Hello I discovered a Seg Fault on the release 3.0 on the GIT server. Seems happening on the first auth. (30) Login OK: [XXX] (from client XXX) (30) # Executing section post-auth from file /etc/XXX.conf (30) +- entering group post-auth {...} (30) ++? if (reply:Framed-IP-Address) (30) ? Evaluating (reply:Framed-IP-Address) -> FALSE (30) ++? if (reply:Framed-IP-Address) -> FALSE (30) ++- entering else else {...} rlm_sql (ACCOUNTING-01): Reserving sql socket id: 14 (30) [IP-POOLING-01] expand: %{User-Name} -> XXX (30) [IP-POOLING-01] sql_set_user escaped user --> 'XXX' (30) [IP-POOLING-01] expand: BEGIN -> BEGIN (30) [IP-POOLING-01] expand: COMMIT -> COMMIT (30) [IP-POOLING-01] expand: SELECT ip_address FROM radippool WHERE pool_name = '%{reply:Pool-Suffix}*%{Huntgroup-Name}' AND expiry_time < NOW() ORDER BY rand(), pool_name, expiry_time LIMIT 1 FOR UPDATE -> SELECT ip_address FROM radippool WHERE pool_name = 'BC*' AND expiry_time < NOW() ORDER BY rand(), pool_name, expiry_time LIMIT 1 FOR UPDATE Segmentation fault I see the expand of variable HuntGroup-Name didn't get any values... Maybe the reason of Seg fault ? --- End of forwarded message --- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Install problems
Hello I just do that. MAKE= /usr/bin/gmake CC = gcc RANLIB = ranlib INCLUDE = CFLAGS = $(INCLUDE) -g -O2 -D_REENTRANT - D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG - DIE_LIBTOOL_DIE Same error libtool: compile: gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall - D_GNU_SOURCE -DNDEBUG -DIE_LIBTOOL_DIE -I/var/instapp/freeradius-server- 2.1.10/src -DHOSTINFO=\"x86_64-unknown-linux-gnu\" -DRADIUSD_VERSION=\"2.1.10\" -DNO_OPENSSL -c detail.c -fPIC -DPIC -o .libs/detail.o libtool: compile: gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall - D_GNU_SOURCE -DNDEBUG -DIE_LIBTOOL_DIE -I/var/instapp/freeradius-server- 2.1.10/src -DHOSTINFO=\"x86_64-unknown-linux-gnu\" -DRADIUSD_VERSION=\"2.1.10\" -DNO_OPENSSL -c detail.c -o detail.o >/dev/null 2>&1 /usr/bin/libtool --mode=link gcc -export-dynamic -dlopen self \ -o radiusd acct.lo auth.lo client.lo conffile.lo crypt.lo exec.lo files.lo listen.lo log.lo mainconfig.lo modules.lo modcall.lo radiusd.lo stats.lo session.lo threads.lo util.lo valuepair.lo version.lo xlat.lo event.lo realms.lo evaluate.lo vmps.lo detail.lo \ /var/instapp/freeradius-server-2.1.10/src/lib/libfreeradius-radius.la -lnsl -lresolv - lpthread \ -lcrypt /var/instapp/freeradius-server-2.1.10/libltdl/libltdl.la libtool: link: rm -f .libs/radiusd.nm .libs/radiusd.nmS .libs/radiusd.nmT libtool: link: (cd .libs && gcc -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic -fPIC -c -fno-builtin "radiusdS.c") libtool: link: rm -f ".libs/radiusdS.c" ".libs/radiusd.nm" ".libs/radiusd.nmS" ".libs/radiusd.nmT" libtool: link: gcc .libs/radiusdS.o -o .libs/radiusd .libs/acct.o .libs/auth.o .libs/client.o .libs/conffile.o .libs/crypt.o .libs/exec.o .libs/files.o .libs/listen.o .libs/log.o .libs/mainconfig.o .libs/modules.o .libs/modcall.o .libs/radiusd.o .libs/stats.o .libs/session.o .libs/threads.o .libs/util.o .libs/valuepair.o .libs/version.o .libs/xlat.o .libs/event.o .libs/realms.o .libs/evaluate.o .libs/vmps.o .libs/detail.o -Wl,--export-dynamic /var/instapp/freeradius- server-2.1.10/src/lib/.libs/libfreeradius-radius.so -lnsl -lresolv -lpthread -lcrypt /var/instapp/freeradius-server-2.1.10/libltdl/.libs/libltdl.so -ldl -Wl,-rpath - Wl,/usr/local/lib/freeradius2 .libs/modules.o: In function `setup_modules': /var/instapp/freeradius-server-2.1.10/src/main/modules.c:1372: undefined reference to `lt_preloaded_symbols' collect2: ld returned 1 exit status gmake[4]: *** [radiusd] Error 1 gmake[4]: Leaving directory `/var/instapp/freeradius-server-2.1.10/src/main' gmake[3]: *** [main] Error 2 gmake[3]: Leaving directory `/var/instapp/freeradius-server-2.1.10/src' gmake[2]: *** [all] Error 2 Date sent: Mon, 17 Jan 2011 11:57:47 +0100 From: Alan DeKok To: nicolas.bre...@belcenter.biz, FreeRadius users mailing list Subject:Re: Install problems > Breuer Nicolas wrote: > > I can't install the last freeradius to our new server > > > > ./configure --libdir=/usr/local/lib/freeradius2 > > --with-mysql-lib-dir=/usr/lib64/mysql --disable-libltdl-install > > --with-system-libtool --without-openssl > ... > > /var/instapp/freeradius-server-2.1.10/src/main/modules.c:1372: undefined > > reference to `lt_preloaded_symbols' > > Edit the Make.inc file, and find the line starting with "CFLAGS". Add > a " -DIE_LIBTOOL_DIE" to the end. Do "make clean", followed by "make". > > Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Install problems
Hello I can't install the last freeradius to our new server ./configure --libdir=/usr/local/lib/freeradius2 --with-mysql-lib-dir=/usr/lib64/mysql --disable- libltdl-install --with-system-libtool --without-openssl libtool: link: rm -f .libs/radiusd.nm .libs/radiusd.nmS .libs/radiusd.nmT libtool: link: (cd .libs && gcc -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic -fPIC -c -fno-builtin "radiusdS.c") libtool: link: rm -f ".libs/radiusdS.c" ".libs/radiusd.nm" ".libs/radiusd.nmS" ".libs/radiusd.nmT" libtool: link: gcc .libs/radiusdS.o -o .libs/radiusd .libs/acct.o .libs/auth.o .libs/client.o .libs/conffile.o .libs/crypt.o .libs/exec.o .libs/files.o .libs/listen.o .libs/log.o .libs/mainconfig.o .libs/modules.o .libs/modcall.o .libs/radiusd.o .libs/stats.o .libs/session.o .libs/threads.o .libs/util.o .libs/valuepair.o .libs/version.o .libs/xlat.o .libs/event.o .libs/realms.o .libs/evaluate.o .libs/vmps.o .libs/detail.o -Wl,--export-dynamic /var/instapp/freeradius- server-2.1.10/src/lib/.libs/libfreeradius-radius.so -lnsl -lresolv -lpthread -lcrypt /var/instapp/freeradius-server-2.1.10/libltdl/.libs/libltdl.so -ldl -Wl,-rpath - Wl,/usr/local/lib/freeradius2 .libs/modules.o: In function `setup_modules': /var/instapp/freeradius-server-2.1.10/src/main/modules.c:1372: undefined reference to `lt_preloaded_symbols' collect2: ld returned 1 exit status gmake[4]: *** [radiusd] Error 1 gmake[4]: Leaving directory `/var/instapp/freeradius-server-2.1.10/src/main' gmake[3]: *** [main] Error 2 gmake[3]: Leaving directory `/var/instapp/freeradius-server-2.1.10/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/var/instapp/freeradius-server-2.1.10/src' gmake[1]: *** [src] Error 2 gmake[1]: Leaving directory `/var/instapp/freeradius-server-2.1.10' make: *** [all] Error 2 What's the solution ? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
(Fwd) (Fwd) Re: Accounting Log
Hello Alexandre, Just in that case, if you not send the STOP in case Sess time =0 The Session will stay opened in the accounting table. and never be closed --- Forwarded message follows --- From: Breuer Nicolas To: freeRadius users mailing list Subject:(Fwd) Re: Accounting Log Send reply to: nicolas.bre...@belcenter.biz Date sent: Mon, 08 Nov 2010 23:00:40 +0100 From: Alexandre Chapellon I have the very same behaviour here on my FR2.1.6 setup with PGSQL accoutning. It produce noisy logs but nothing unacceptable. You can change this by not doing accouting for Stop Accounting packet that show up null session-time: in your acccouting section: if (Acct-Status-Type == Stop && Session-Time != 0) { sql_accounting_module_name } Maybe relying on Session-Time is not a good idea. Try finding out another relevant attribute. Cdt Nice idea, i will try :) Attachments: C:\Users\Nico\AppData\Local\Temp\WPM$2D83.PM$ --- End of forwarded message --- Breuer Nicolas Network Supervisor Sales Executive BELCENTER sprl/bvba Avenue Henri Consciencelaan, 94 Bruxelles 1140 Brussel T. : +32 (0)2 403 04 60 F. : +32 (0)2 403 04 63 M. :+32 (0)486 50 27 87 E. : nicolas.bre...@belcenter.biz W. : http://www.BelCenter.be | http://www.BelCenter.net WPM$2BF5.PM$ Description: Mail message body - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
(Fwd) Re: Accounting Log
From: Alexandre Chapellon I have the very same behaviour here on my FR2.1.6 setup with PGSQL accoutning. It produce noisy logs but nothing unacceptable. You can change this by not doing accouting for Stop Accounting packet that show up null session-time: in your acccouting section: if (Acct-Status-Type == Stop && Session-Time != 0) { sql_accounting_module_name } Maybe relying on Session-Time is not a good idea. Try finding out another relevant attribute. Cdt Nice idea, i will try :) Breuer Nicolas Network Supervisor Sales Executive BELCENTER sprl/bvba Avenue Henri Consciencelaan, 94 Bruxelles 1140 Brussel T. : +32 (0)2 403 04 60 F. : +32 (0)2 403 04 63 M. :+32 (0)486 50 27 87 E. : nicolas.bre...@belcenter.biz W. : http://www.BelCenter.be | http://www.BelCenter.net WPM$2D83.PM$ Description: Mail message body - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Accounting Log
Breuer Nicolas wrote: > > Accounting-01 thinks that stop packet with zero session length is an error > and tried to connect to Accounting-02 sql server. > > Is it the correct behaviour ? Yes. see doc/configurable_failover for how to change redundant groups. Alan DeKok. Alan, I know that this is the correct behaviour concerning redundant groups but for me a Stop with zero session length isn't a SQL issue that needs to go on secondary SQL servers. Breuer Nicolas Network Supervisor Sales Executive BELCENTER sprl/bvba Avenue Henri Consciencelaan, 94 Bruxelles 1140 Brussel T. : +32 (0)2 403 04 60 F. : +32 (0)2 403 04 63 M. :+32 (0)486 50 27 87 E. : nicolas.bre...@belcenter.biz W. : http://www.BelCenter.be | http://www.BelCenter.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Accounting Log
Hello All, We used the Freeradius 2.X version. We use the accounting SQL module and i remark something. When a user is rejected (Wrong password), i always have this error in radius.log Mon Nov 8 18:07:40 2010 : Auth: Login incorrect: [BCgXXX] Mon Nov 8 18:07:41 2010 : Info: [ACCOUNTING-01] stop packet with zero session length. Mon Nov 8 18:07:41 2010 : Info: rlm_sql (ACCOUNTING-02): Attempting to connect rlm_sql_mysql #13 Mon Nov 8 18:07:41 2010 : Info: rlm_sql_mysql: Starting connect to MySQL server for #13 Mon Nov 8 18:07:41 2010 : Info: rlm_sql (ACCOUNTING-02): Connected new DB handle, #13 Mon Nov 8 18:07:41 2010 : Info: [ACCOUNTING-02] stop packet with zero session length. Accounting-01 thinks that stop packet with zero session length is an error and tried to connect to Accounting-02 sql server. Is it the correct behaviour ? Is it possible to remove this "logging". Thanks Breuer Nicolas Network Supervisor Sales Executive BELCENTER sprl/bvba Avenue Henri Consciencelaan, 94 Bruxelles 1140 Brussel T. : +32 (0)2 403 04 60 F. : +32 (0)2 403 04 63 M. :+32 (0)486 50 27 87 E. : nicolas.bre...@belcenter.biz W. : http://www.BelCenter.be | http://www.BelCenter.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Redundant SQLIPPOOL > NOK
Dear, Redundant config seems not working. Conf : LIVE-SYSTEM-01 { fail=1 } if (!ok) { LIVE-SYSTEM-02 } >> LIVE SYSTEM = SQLIPPOOL When database was down it works but when radius received a 1017 error, it doesn't go to the second module. I checked the same thing with the accounting (sql module) > OK. Receive an Alive packet so Start the SQLIPPOOL module (in our config - not very standart) ++? if (!ok) ? Evaluating !(ok) -> TRUE ++? if (!ok) -> FALSE rlm_sql (ACCOUNTING-01): Reserving sql socket id: 1 expand: %{User-Name} -> [EMAIL PROTECTED] rlm_sql (ACCOUNTING-01): sql_set_user escaped user --> '[EMAIL PROTECTED]' expand: BEGIN -> BEGIN expand: %{User-Name} -> [EMAIL PROTECTED] rlm_sql (ACCOUNTING-01): sql_set_user escaped user --> '[EMAIL PROTECTED]' expand: UPDATE radippool SET nas_ip_address = '%{NAS-IP-Address}', rb_path='%{Calling-Station-Id}', calling_station_id = '%{User-Name}', expiry_time = DATE_ADD(NOW(), INTERVAL 86400 SECOND) WHERE ip_address = '%{Framed-IP- Address}' -> UPDATE radippool SET nas_ip_address = '217.112.179.1', rb_path='*xxx*14/1*35*272', calling_station_id = '[EMAIL PROTECTED]', expiry_time = DATE_ADD(NOW(), INTERVAL 86400 SECOND) WHERE ip_address = '217.112.179.x' > ERROR RECEIVED rlm_sql_mysql: MYSQL check_error: 1017 received sqlippool_command: database query error in: 'UPDATE radippool SET nas_ip_address = '217.112.179.1', rb_path='*vxx4/1*35*272', calling_station_id = '[EMAIL PROTECTED]', expiry_time = DATE_ADD(NOW(), INTERVAL 86400 SECOND) WHERE ip_address = '217.112.179.5'' expand: %{User-Name} -> [EMAIL PROTECTED] rlm_sql (ACCOUNTING-01): sql_set_user escaped user --> '[EMAIL PROTECTED]' expand: COMMIT -> COMMIT rlm_sql (ACCOUNTING-01): Released sql socket id: 1 ++[LIVE-SYSTEM-01] returns ok Returns OK but >> sqlippool_command: database query error in For info : i paste the same scenario on the sql module (accounting) , who works : +- entering group accounting expand: %{User-Name} -> [EMAIL PROTECTED] rlm_sql (ACCOUNTING-01): sql_set_user escaped user --> '[EMAIL PROTECTED]' expand: INSERT into radacct rlm_sql (ACCOUNTING-01): Reserving sql socket id: 0 rlm_sql_mysql: MYSQL check_error: 1017 received > Alternate query: expand: UPDATE radacct SET AcctStartTime . rlm_sql_mysql: MYSQL check_error: 1017 received rlm_sql_mysql: MYSQL check_error: 1017 received rlm_sql_mysql: Cannot store result ++[ACCOUNTING-01] returns fail OK!!! > Go to Second database.. ++? if (!ok) ? Evaluating !(ok) -> FALSE ++? if (!ok) -> TRUE ++- entering if (!ok) expand: %{User-Name} -> [EMAIL PROTECTED] rlm_sql (ACCOUNTING-02): But On the SQLIPPOOL on the post auth section it works (same table) ... Hum , Strange rlm_sql_mysql: MYSQL check_error: 1017 received sqlippool_query1: database query error expand: %{User-Name} -> [EMAIL PROTECTED] rlm_sql (ACCOUNTING-01): sql_set_user escaped user --> '[EMAIL PROTECTED]' expand: COMMIT -> COMMIT rlm_sql (ACCOUNTING-01): Released sql socket id: 2 rlm_sqlippool: IP address could not be allocated. expand: IP Allocation FAILED from XXX +++[LIVE-SYSTEM-01] returns noop >>> NOop so NOT OK , > Go to the 2nd db : +++? if (!ok) ? Evaluating !(ok) -> FALSE +++? if (!ok) -> TRUE +++- entering if (!ok) rlm_sql (ACCOUNTING-02): Reserving sql socket id: 2 etc... Allocated IP: 217.112.186.180 from ip_pooling (did cli port user [EMAIL PROTECTED]) [LIVE-SYSTEM-02] returns ok - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Check Items on launch
Just a question, Is it normal that warning on the launch of the radiusd [users]:28 WARNING! Check item "Pool-Suffix" found in reply item list for user "DEFAULT".This attribute MUST go on the first line with the other check items This attribute is an internal reply attribute Added in local Dictionnary... ATTRIBUTE Pool-Suffix3000string If it's only a warning OK but this is not a CHECK item but a REPLY item :) Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
(Fwd) Error on Accounting SQL
Hello , Seems to have a bug on 2.0.4 WARNING: Deprecated conditional expansion ":-". See "man unlang" for details WARNING: Deprecated conditional expansion ":-". See "man unlang" for details The accounting is stored into the SQL. Paste the debug here : ++[files] returns noop +- entering group accounting expand: %{User-Name} -> BCXXX rlm_sql (sql): sql_set_user escaped user --> 'BCXXX' TRIED THE UPDATE RADACCT . expand: UPDATE radacct SET FramedIPAddress = '%{Framed-IP-Address}', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Octets- 64}', AcctOutputOctets = '%{Acct-Output-Octets-64}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress= '%{NAS-IP-Address}' -> UPDATE radacct SET FramedIPAddress = '', AcctSessionTime = '', AcctInputOctets = '', AcctOutputOctets = '' WHERE AcctSessionId = '0D3F280001EB-483E2C69' AND UserName = 'BCXXX' AND NASIPAddress= '217.112.179.x' rlm_sql (sql): Reserving sql socket id: 3 NOT POSSIBLE because the line doesn't exists so Alternate SQL query should be used. >> WARNING: Deprecated conditional expansion ":-". See "man unlang" for details WARNING: Deprecated conditional expansion ":-". See "man unlang" for details > What's this error below ? ALTERNATE QUERY expand: INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId,NASPortType, AcctStartTime, AcctSessionTime, AcctAuthentic,ConnectInfo_start, AcctInputOctets, AcctOutputOctets, CalledStationId,CallingStationId, ServiceType, FramedProtocol, FramedIPAddress,AcctStartDelay) values('%{Acct-Session-Id}', '%{Acct-Unique-Session- Id}','%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}','%{NAS-Port- Type}', DATE_SUB('%S',INTERVAL (%{Acct-Session-Time:-0} +%{Acct-Delay-Time:-0}) SECOND), '%{Acct-Session-Time}', '%{Acct-Authentic}','', '%{Acct-Input-Octets-64}', '%{Acct- Output-Octets-64}', '%{Called-Station-Id}','%{Calling-Station-Id}', '%{Service- Type}','%{Framed-Protocol}-1','%{Framed-IP-Address}', '0') -> INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId,NASPortType, AcctStartTime, AcctSessionTime, AcctAuthentic,ConnectInfo_start, AcctInputOctets, AcctOutputOctets, CalledStationId,CallingStationId, ServiceType, FramedProtocol, FramedIPAddress,AcctStartDelay) values('0D3F280001EB-483E2C69', '5c28bc24233262ac','BCXXX', '', '217.112.179.X', '3777167632','Virtual', DATE_SUB('2008- 06-04 17:36:58',INTERVAL (0 +0) SECOND), '', '','', '', '', '','', 'Framed-User','PPP-1','', '0') rlm_sql (sql): Released sql socket id: 3 OK ++[sql] returns ok ++? if (!ok) ? --- End of forwarded message --- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Redundant SQL
Hello I'm using a redundant config for the module ip_pooling # Get an address from the IP Pool. redundant { ip_pooling ip_pooling2 handled } If ip_pooling failed > go to ip_pooling2 using the sql2 connection to an other mysql server. SQL2 is correctly loaded I started radius. Ok - on SQL1. If i kill mysqld without restarting the server. rlm_sql_mysql: MYSQL check_error: 2002 received sqlippool_command: database query error in: 'COMMIT' rlm_sql (sql): Released sql socket id: 2 rlm_sqlippool: IP address could not be allocated. +++[ip_pooling] returns noop IP Allocation FAILED from ip_pooling (did cli port user XXX) The system doesn't load the SQL2. I need to restart the radius to have the sql2 working and the ip allocated. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Unlang SQL
Hello, I'm using an unlang into my post-auth section using the module sql3 (based on sql module but with a different database) if ("%{sql3:Select type from XXX where username='%{User-Name}' }" == "22") { } but the function is not working unless i declare the sql3 module before the unlang. Is it normal ? The problem was also the sql3 module call the sql module with the radacct logging and it's not very clean to call once more this file to just use an unlang function... Breuer Nicolas Content & Marketing Manager. Network Supervisor. BELCENTER ISP & PORTALS Avenue Henri Conscience, 94 B -1140 Bruxelles Tél. :+32 2 243 0 243 Fax :+32 2 243 0 244 Mobile :+32 486 50 27 87 E-Mail : [EMAIL PROTECTED] http://www.BelCenter.be | http://www.BelCenter.net http://www.BelCenter.lu | http://www.BelCenter.nl - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Need to check Freeradius V1.1.4
Dear all, I need to perform some changes in our post-auth process. We need to check a value in a sql database. If value = XX , i need to add a reply item. We already have links to the radius database for ip-pool but we need to connect to an other database to achieve this. Do you have an idea ? I didn't find any modules to achieve this. Maybe i can modify the sqlippool module, but i need some help I can create a sql query in the sqlippool.conf and connect in the sqlippool.c like this. > sqlippool_command(data->stop_begin, sqlsocket, instance, request, (char *) NULL, 0); > but is it possible to directly connect to the database and the table in this sqlippool_command ? adding the sql_db after the sqlsocket ? Any others ideas? Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Compile Error on FreeR 2.0.3
I've an error on compilation : MYSQL 4.1 - FC 7 ./configure --without-threads --with-mysql-lib-dir=/usr/lib64/ gcc -g -O2 -Wall -D_GNU_SOURCE -DNDEBUG -I/var/instapp/freeradius- server-2.0.3/src -DHOSTINFO=\"x86_64-unknown-linux-gnu\" - DRADIUSD_VERSION=\"2.0.3\" -DOPENSSL_NO_KRB5 -c xlat.c -o xlat.o >/dev/null 2>&1 /var/instapp/freeradius-server-2.0.3/libtool --mode=compile gcc -g -O2 -Wall -D_GNU_SOURCE -DNDEBUG -I/var/instapp/freeradius-server-2.0.3/src - DHOSTINFO=\"x86_64-unknown-linux-gnu\" - DRADIUSD_VERSION=\"2.0.3\" -DOPENSSL_NO_KRB5 -c event.c gcc -g -O2 -Wall -D_GNU_SOURCE -DNDEBUG -I/var/instapp/freeradius- server-2.0.3/src -DHOSTINFO=\"x86_64-unknown-linux-gnu\" - DRADIUSD_VERSION=\"2.0.3\" -DOPENSSL_NO_KRB5 -c event.c -fPIC - DPIC -o .libs/event.o event.c: In function 'event_socket_handler': event.c:2305: error: 'argval' undeclared (first use in this function) event.c:2305: error: (Each undeclared identifier is reported only once event.c:2305: error: for each function it appears in.) gmake[4]: *** [event.lo] Error 1 gmake[4]: Leaving directory `/var/instapp/freeradius-server-2.0.3/src/main' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/var/instapp/freeradius-server-2.0.3/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/var/instapp/freeradius-server-2.0.3/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/var/instapp/freeradius-server-2.0.3' gmake: *** [all] Error 2 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hints, Attr_rewrite - Add session timeout with Framed IP
Hello all, Any others suggestions ? I've made a small script into the rlm _sqlippool to add the session time-out attribue... --- Forwarded message follows --- From: Breuer Nicolas <[EMAIL PROTECTED]> To: freeradius-users@lists.freeradius.org Subject:Hints, Attr_rewrite - Add session timeout with Framed IP? Send reply to: [EMAIL PROTECTED] Date sent: Mon, 23 Oct 2006 12:02:03 +0200 Hello I'm looking for a solution to add in the accept packets a session timeout value when framed ip address is assigned in the users file. I tried to add "hints" rules but doesn't seems to work. I also tried to rewrite the packet : not works. Can you help me to do this ? --- End of forwarded message --- WPM$223B.PM$ Description: Mail message body - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hints, Attr_rewrite - Add session timeout with Framed IP?
Hello I'm looking for a solution to add in the accept packets a session timeout value when framed ip address is assigned in the users file. I tried to add "hints" rules but doesn't seems to work. I also tried to rewrite the packet : not works. Can you help me to do this ? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Problem Seg Fault
I've found a problem... configure: warning: mysql libraries not found. Use --with-mysql-lib- dir=. configure: warning: sql submodule 'mysql' disabled i've used : ./configure --with-mysql-lib-dir=/usr/local/lib/mysql/ and in this dir , i have libdbug.a libmerge.a libmyisammrg.alibmysqlclient.la libmysqlclient.so.14 libmystrings.a libnisam.a libheap.a libmyisam.a libmysqlclient.a libmysqlclient.so libmysqlclient.so.14.0.0 libmysys.a libvio.a On 9 Feb 2006 at 21:30, Breuer Nicolas wrote: From: "Breuer Nicolas" <[EMAIL PROTECTED]> Organization: BELCENTER ISP&PORTALS To: freeradius-users@lists.freeradius.org Date sent: Thu, 09 Feb 2006 21:30:38 +0100 Priority: normal Subject:Problem Seg Fault Send reply to: [EMAIL PROTECTED], FreeRadius users mailing list <mailto:[EMAIL PROTECTED]> <mailto:[EMAIL PROTECTED]> > > Hello > > I've just installed Fedora 4 with MYSQL 4.1.18 > > I tried to install the last version of freeradius > and i 've a big error at the startup > > Mysql is correctly installed into the system.. > > startup with -X > > Module: Loaded SQL > sql: driver = "rlm_sql_mysql" > sql: server = "xxx.yyy.be" > sql: port = "" > sql: login = "" > sql: password = "" > sql: radius_db = "radius" > sql: acct_table = "radacct" > sql: acct_table2 = "radacct" > sql: authcheck_table = "radcheck" > sql: authreply_table = "radreply" > sql: groupcheck_table = "radgroupcheck" > sql: groupreply_table = "radgroupreply" > sql: usergroup_table = "usergroup" > sql: nas_table = "nas" > sql: dict_table = "dictionary" > sql: sqltrace = no > sql: sqltracefile = "/var/log//sqltrace.sql" > sql: readclients = no > sql: deletestalesessions = yes > sql: num_sql_socks = 5 > sql: sql_user_name = "%{User-Name}" > sql: default_user_profile = "" > sql: query_on_not_found = no > sql: authorize_check_query = "SELECT id,UserName,Attribute,Value,op > FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY > id" > sql: authorize_reply_query = "SELECT id,UserName,Attribute,Value,op > FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id" > > > > > sql: postauth_table = "radpostauth" > sql: postauth_query = "INSERT into radpostauth (id, user, pass, > reply, > date) values ('', '%{User-Name}', '%{User-Password:-Chap-Password}', > '%{reply:Packet-Type}', NOW())" > sql: safe-characters = > "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ012 > 3456789.-_: /" > Segmentation fault > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Problem Seg Fault
Hello I've just installed Fedora 4 with MYSQL 4.1.18 I tried to install the last version of freeradius and i 've a big error at the startup Mysql is correctly installed into the system.. startup with -X Module: Loaded SQL sql: driver = "rlm_sql_mysql" sql: server = "xxx.yyy.be" sql: port = "" sql: login = "" sql: password = "" sql: radius_db = "radius" sql: acct_table = "radacct" sql: acct_table2 = "radacct" sql: authcheck_table = "radcheck" sql: authreply_table = "radreply" sql: groupcheck_table = "radgroupcheck" sql: groupreply_table = "radgroupreply" sql: usergroup_table = "usergroup" sql: nas_table = "nas" sql: dict_table = "dictionary" sql: sqltrace = no sql: sqltracefile = "/var/log//sqltrace.sql" sql: readclients = no sql: deletestalesessions = yes sql: num_sql_socks = 5 sql: sql_user_name = "%{User-Name}" sql: default_user_profile = "" sql: query_on_not_found = no sql: authorize_check_query = "SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_reply_query = "SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: postauth_table = "radpostauth" sql: postauth_query = "INSERT into radpostauth (id, user, pass, reply, date) values ('', '%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', NOW())" sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ012 3456789.-_: /" Segmentation fault - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
(Fwd) Detail Filter method
In /etc/raddb/acct_users file: DEFAULT Acct-Status-Type == Interim-Update, Acct-Type := empty And in /etc/raddb/radiusd.conf: modules { always ok { rcode = ok } ... } ... accounting { # Log start & stop detail Acct-Type empty { ok } } -- Nicolas Baradakis Can i also put the empty section only in detail module because i have a sql line in account (to log everything) I wouldlike only to disable it in detail accounting. --- Forwarded message follows --- From: Breuer Nicolas <[EMAIL PROTECTED]> To: freeradius-users@lists.freeradius.org Subject: Detail Filter method Send reply to: [EMAIL PROTECTED] Date sent: Fri, 03 Feb 2006 10:54:43 +0100 Hello all, I'm using the "detailled" logs with FreeRadius. I wouldlike to filter the interim updates to not logged them. Is it possible ?? I wouldlike to only have a logs files with start & stop.. It would be a nice option, i think.. --- End of forwarded message --- Breuer Nicolas Content & Marketing Manager. Network Supervisor. BELCENTER ISP & PORTALS Avenue Henri Conscience, 94 B -1140 Bruxelles Tél. :+32 2 243 0 243 Fax :+32 2 243 0 244 Mobile :+32 486 50 27 87 E-Mail : [EMAIL PROTECTED] http://www.BelCenter.be | http://www.BelCenter.net http://www.BelCenter.lu | http://www.BelCenter.nl - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Detail Filter method
Hello all, I'm using the "detailled" logs with FreeRadius. I wouldlike to filter the interim updates to not logged them. Is it possible ?? I wouldlike to only have a logs files with start & stop.. It would be a nice option, i think.. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: CPU - FR1.0.5
No i checked everything but seems the threads are the cause because with -s, that works ! On 30 Nov 2005 at 23:46, Alan DeKok wrote: From: "Alan DeKok" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED], FreeRadius users mailing list Date sent: Wed, 30 Nov 2005 23:46:54 -0500 Copies to: Subject:Re: CPU - FR1.0.5 Send reply to: FreeRadius users mailing list <mailto:[EMAIL PROTECTED]> <mailto:[EMAIL PROTECTED]> > "Breuer Nicolas" <[EMAIL PROTECTED]> wrote: > > i've installed FR1.0.5 and radiusd take all CPU !! > > after a while, requests aren't more served.. > > That's a bad sign. Is there any extra information as to what causes > the problem? > > Alan DeKok. > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
CPU - FR1.0.5
Hello all, I've a problem with FR 1.0.5. I've installed it on an old server Pentium Intel 3 (no multi-threading) i've installed FR1.0.5 and radiusd take all CPU !! after a while, requests aren't more served.. kernel : Linux 2.6.9-1.667 #1 When i launch radiusd with -s option there is no problem.. Do you have an explication ? kernel is compiled with no multi-threading. I've an other radiusd on a pentium 4 with multi-threading and i have no problems on this server.. Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Clients.conf attributes, multiples users files.
Hello all, I wouldlike to have only one instance of freeradiusd but with multiples "users" files. For the moment i've differents process of freeradiusd with multiples users files. I think that it's not possible for the moment but do you think it can be a possible feature for the future ? I think the easiest way is to configure the name of the auth files into the clients.conf NAS1 : file: users NAS2 : file: users2, etc.. With this type of config, we can easily manage multiple type of users/ auth with one radiusd on one port.. Nico - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
(Fwd) (Fwd) New Redback Attribute
Hello, Please add to Dictionnary Redback ATTRIBUTE RB-Attr-144 144 integer Redback ATTRIBUTE RB-Client-Mac 145 string Redback Don't know what's attr 144 , it return a number .. Can you search what's attr 144 Thanks --- End of forwarded message --- --- End of forwarded message --- BREUER NICOLAS Content & Marketing Manager - Support Team - Avenue Henri Conscience, 94 B -1140 Bruxelles Tél. :+32 2 243 0 243 Fax :+32 2 243 0 244 Mobile :+32 486 50 27 87 E-Mail : [EMAIL PROTECTED] Support Team E-Mail : [EMAIL PROTECTED] Support Phone : 0902/40.120 - 0903/40.120 http://www.BelCenter.com | http://www.BelCenter.net http://www.LuxCenter.net | http://www.BulkSMS.be - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
no pool name
Error when i run IpPool.. Output debug modcall[authenticate]: module "chap" returns ok for request 2 modcall: group Auth-Type returns ok for request 2 modcall: entering group post-auth for request 2 rlm_ippool: Could not find Pool-Name attribute. modcall[post-auth]: module "main_pool" returns noop for request 2 modcall: group post-auth returns noop for request 2 What can i do ? Nico BREUER NICOLAS Content & Marketing Manager ** BELCENTER ISP & PORTALS ** Avenue Henri Conscience, 94 B -1140 Bruxelles ** HelpDesk : 0902/40.120 ** Tél. :+32 2 243 0 243 Fax :+32 2 243 0 244 E Mail : [EMAIL PROTECTED] http://www.BelCenter.com | http://www.BelCenter.net http://www.LuxCenter.net | http://www.BulkSMS.be
Freeradius 0.9.3 Needhelp
I have the same problem , i run ip pool and when the server do post auth, i have error 'Could'nt find pool name'.. What can i do ? Nico Hi all, I have installed the Freeradius Server 0.9.3 with MySQL on Redhat Linux 9. When I run the radiusd -XX, I am getting below these errors. 1. MySQL Check_Error:2013, returning SQL_DOWN 2. Could not find pool-name attribute 3. Unknown attribute Framed-IP-Address 4. Error getting data from database Pls anyone can help me. Thanks Nagesh.Boyina Hello, I have checked with radtest command it is accepting fine, but the problem is I am getting the errors in debug when i sent a request from radtest. When I debug the radius I am not getting any errors without before sending the request. So pls kindly help me for these problems. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Help with RLM MYSQL
Hum.. checked and package MySQL-client-4.0.16-0 is already installed package MySQL-devel-4.0.16-0 is already installed Hmm, You probably forgot to install the mysql devel rpm. Cheers Patrick