Re: Problems with radzap: radclient:: failed to get value
On 12/19/2011 04:03 PM, Alan Buxey wrote: you talk to the server using the servers secretnot the NAS with the NAS secret, so send a radzap command to your FR server with its secret from the session you are on (eg on localhost thats testing123 by default..) Ah hah, ok, thanks! This pointer plus the pointer from one of my associates that it doesn't actually log the user out, it just modifies the radutmp. The problem ended up being (beyond trying to talk to the NAS rather than the server): We had both radutmp and sradutmp defined, so it was writing to both locations. radwho -R is reporting a blank Framed-IP-Address = line, which causes radclient to choke (that was the source of the failed to get value messages). So, if I modify the radzap script to grep -v '^Framed-IP-Address', that should work. Thanks! Sean - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Problems with radzap: radclient:: failed to get value
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm trying to run a radzap and having no luck. For example, if I try: radzap -d /etc/raddb -N $NAS_IP -P 1 -u las $NAS_IP $NAS_PW radclient:: failed to get value radclient: Nothing to send. I've also tried it with the NAS name (52a2, from /etc/raddb/naslist) rather than IP: radzap -d /etc/raddb -N $NAS_IP -P 1 -u las 52a2 $NAS_PW radclient: Failed to find IP address for host 52a2: Success If I run radwho: radwho -ZR -N 216.138.63.130 -P 1 -u las I get a reasonable-looking: User-Name = las Acct-Session-Id = 01C1 Acct-Status-Type = Stop NAS-IP-Address = $NAS_IP NAS-Port = 1 Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = Acct-Session-Time = 239370 However, if I pipe that through radclient: radclient -x -d /etc/raddb -f - $NAS_IP acct $NAS_PW I get the error above: radclient:: failed to get value radclient: Nothing to send. I've been trying various combinations of both the output of radwho, and commands for radclient to log a user out, based on searches on the Internet including things like sending the packet of disconnect (PoD), including things on this page: http://wiki.freeradius.org/Disconnect_Messages including trying sending to ports 1700 and 3799, using commands like disconnect and 40, using packets like: Acct-Session-Id = 01C1 User-Name = las NAS-IP-Address = $NAS_IP Using the above packet looks most promising, in that I don't get an error, it just hangs a few seconds and then fails with no response from server for ID 141 socket 3 or similar. Any pointers on this? The version of FreeRADIUS is 2.1.10 from CentOS. There are a couple of micro version updates I could do, but I didn't see any mention in the changelog of anything related to this issue being resolved. Thanks, Sean -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iD8DBQFO774BxUhyMYEjVX0RAu4aAJ0R/vUb8XSKO2J0lCW9UKsq0jUgVwCeJF7a 8wxcDliE2oHyfqtDzJrgA00= =II6m -END PGP SIGNATURE- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Problems with radzap: radclient:: failed to get value
Hi, -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm trying to run a radzap and having no luck. For example, if I try: radzap -d /etc/raddb -N $NAS_IP -P 1 -u las $NAS_IP $NAS_PW radclient:: failed to get value radclient: Nothing to send. I've also tried it with the NAS name (52a2, from /etc/raddb/naslist) rather than IP: radzap -d /etc/raddb -N $NAS_IP -P 1 -u las 52a2 $NAS_PW radclient: Failed to find IP address for host 52a2: Success If I run radwho: radwho -ZR -N 216.138.63.130 -P 1 -u las man radzap radzap [-d raddb_directory] [-h] [-N nas_ip_address] [-P nas_port] [-u user] [-U user] [-x] server[:port] secret you talk to the server using the servers secretnot the NAS with the NAS secret, so send a radzap command to your FR server with its secret from the session you are on (eg on localhost thats testing123 by default..) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap: Nothing to send
El 16/11/11 16:54, xgiova escribió: I'm havig the same problem on my Centos server. Can you explain how did you solve? The problem was related with virtual servers. The virtual server assigned to the client running radzap was incorrect. -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica_(___V Tfo: 868887590 Fax: 86337 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap: Nothing to send
Il 23/11/2011 10.18, Angel L. Mateo ha scritto: El 16/11/11 16:54, xgiova escribió: I'm havig the same problem on my Centos server. Can you explain how did you solve? The problem was related with virtual servers. The virtual server assigned to the client running radzap was incorrect. I'm running radzap from server and I have only the default virtual server. Where did you define the association between client and virtual server? is it in clients.conf? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap: Nothing to send
I'm havig the same problem on my Centos server. Can you explain how did you solve? Thanks in advance. Giovanni -- View this message in context: http://freeradius.1045715.n5.nabble.com/radzap-Nothing-to-send-tp4822106p4998155.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap: Nothing to send
I'm havig the same problem on my Centos server. Can you explain how did you solve? Thanks in advance. Giovanni -- View this message in context: http://freeradius.1045715.n5.nabble.com/radzap-Nothing-to-send-tp4822106p4998169.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap: Nothing to send
Hello, I have solved my problem. The problem was really related with virtual servers. -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica_(___V Tfo: 868887590 Fax: 86337 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
radzap: Nothing to send
Hello, I have a script using radzap to zap clients. This script with freeradius 1.1.7 worked, but since I updated to 2.1.10 it didn't work. The command I run is: root@vulpes21:~/scripts/radius# radzap -P 9937 -u user -N 10.57.112.8 localhost secret radclient: Nothing to send. The output for this user in radwho -R is: User-Name = user Acct-Session-Id = 2CC6 NAS-IP-Address = 10.57.112.8 NAS-Port = 9938 Service-type = Login-User Framed-IP-Address = Acct-Session-Time = 92 Calling-Station-Id = 9084.0d64.2d83 Any idea? One difference between my 1.1.7 config and the new one is that now I'm using virtual servers? Could it be the reason? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica_(___V Tfo: 868887590 Fax: 86337 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Problem with radzap
xsad wrote: Everything is working fine with Freeradius 2.1.7 running on Debian 5 but everytime I try to use the radzap command i get this error: # radzap -u the_username 127.0.0.1:1813 the_secret radclient:: failed to get value radclient: Nothing to send. Here is the output of the radwho -R command: # radwho -R User-Name = 00011000 Acct-Session-Id = NAS-IP-Address = Your NAS isn't sending the information that radzap needs. NAS-Port = 0 Service-type = Login-User Framed-IP-Address = 192.168.182.8 Acct-Session-Time = 4 Calling-Station-Id = 00-25-56-71-80- I see that the value of Calling-Station-Id is truncated and NAS-IP-Address is empty, could it be the cause of radzap issue? Yes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Problem with radzap
Pierre-Henri Baraffe wrote:
Hello,
I have a mistake with my freeradius. On server with 1.1.7 the command :
radzap -u username -P port-nas 127.0.0.1 secret work with no problem
On a new server with FR 2.0.5, with the same command i have this error
radclient:: failed to get value
I have no more message with the -x option and nothing in the log.
I have the same things if i replace 127.0.0.1 by localhost
my client.conf
client localhost {
ipaddr = 127.0.0.1
secret = secret
require_message_authenticator = no
shortname = localhost
nastype = other # localhost isn't usually a NAS...
}
I don't understand.
Thanks for your help.
ph
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
Hi, this is an old post but I'm having the same issue mentioned.
Everything is working fine with Freeradius 2.1.7 running on Debian 5 but
everytime I try to use the radzap command i get this error:
# radzap -u the_username 127.0.0.1:1813 the_secret
radclient:: failed to get value
radclient: Nothing to send.
Here is the output of the radwho -R command:
# radwho -R
User-Name = 00011000
Acct-Session-Id =
NAS-IP-Address =
NAS-Port = 0
Service-type = Login-User
Framed-IP-Address = 192.168.182.8
Acct-Session-Time = 4
Calling-Station-Id = 00-25-56-71-80-
I see that the value of Calling-Station-Id is truncated and
NAS-IP-Address is empty, could it be the cause of radzap issue?
Thanks in advance, any help would be appreciated.
--
View this message in context:
http://www.nabble.com/Problem-with-radzap-tp19223340p25684274.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Problem with radzap
Pierre-henri Baraffe wrote: I have a mistake with my freeradius. On server with 1.1.7 the command : radzap -u username -P port-nas 127.0.0.1 secret work with no problem On a new server with FR 2.0.5, with the same command i have this error radclient:: failed to get value Hmm... that *should* work. The radzap program is just a script around radwho and radclient. It hasn't really changed since 1.1.7. I don't understand. Try running the commands manually. See the radzap script for what it's doing. You can run the commands manually, and see which part is failing. Maybe you don't have permission to read the radutmp file? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Problem with radzap
Hello,
I have a mistake with my freeradius. On server with 1.1.7 the command :
radzap -u username -P port-nas 127.0.0.1 secret work with no problem
On a new server with FR 2.0.5, with the same command i have this error
radclient:: failed to get value
I have no more message with the -x option and nothing in the log.
I have the same things if i replace 127.0.0.1 by localhost
my client.conf
client localhost {
ipaddr = 127.0.0.1
secret = secret
require_message_authenticator = no
shortname = localhost
nastype = other # localhost isn't usually a NAS...
}
I don't understand.
Thanks for your help.
ph
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radwho radzap problem
Hi again, I think i found a solution I dont know why but i had to give -d parameter to show the default config path, my config path is under freeradius but it searches for radiusd so..it made the problem. So is there a way to change default path for radzap/radwho etc? Hello, I am using rlm_perl script for authentication. And logging radacct in sql. But it is strange that, i couldnt use radwho radzap radlast etc for a while.. had the error file not found etc.. So i manually created the files with touch. Now i can see theres records inside files, but still i cant see any data with radwho or radlast commands. And also, i can not zap staled sessions too with radzap, even i tried to clean sql log with a cleanstale.php script , some of my users still seem online. I am attaching the radiusd.conf file and i wonder if smbody can help me about this situation. Thanks a lot.- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radwho radzap problem
Oguzhan Kayhan wrote: Hello, I am using rlm_perl script for authentication. And logging radacct in sql. But it is strange that, i couldnt use radwho radzap radlast etc for a while.. had the error file not found etc.. So i manually created the files with touch. Now i can see theres records inside files, but still i cant see any data with radwho or radlast commands. The contents of the files are created from accounting packets. Those packets are required to have certain data for them to go in radutmp/radwtmp. See debug mode for more information. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
radwho radzap problem
Hello, I am using rlm_perl script for authentication. And logging radacct in sql. But it is strange that, i couldnt use radwho radzap radlast etc for a while.. had the error file not found etc.. So i manually created the files with touch. Now i can see theres records inside files, but still i cant see any data with radwho or radlast commands. And also, i can not zap staled sessions too with radzap, even i tried to clean sql log with a cleanstale.php script , some of my users still seem online. I am attaching the radiusd.conf file and i wonder if smbody can help me about this situation. Thanks a lot. radiusd.conf Description: Binary data - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
clean stale sessions with radzap?
I use FR + mysqlI try to clean some stale sessions from NAS's with dynamic ip's.I 'm logged in on the server and use radzap this way:radius1:~# radzapUsage: radzap [options] server[:port] secretSo i try: radius1:~# radzap -u john localhost:1812 mysecretBut this doesn't seem to be the right way?tnx yves - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
radzap not working
Hello all, I have installed freeradius 1.0.5 in freebsd 6. I am authenticating pppoe users to my remote freeradius server. I tried to delete the stale session from radutmp file with radzap coammand but it doesnot work; radwho shows the following login information: #radwho Login Name What TTY When From Location test testaccount PPP S11 Sun 14:58 192.168.0 192.168.0.100 #radzap -u test 192.168.0.5:S11 secret PPPOE and freeradius are running in different freebsd server. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RadZap
When I run radwho -r to get all the information of a login. rod,Rodney Rumley,PPP,S406,Tue 17:46,63.215.26.177,4.240.144.66 I need to clean this one out of the list. I get all this below and have tried several commands but it keeps returning me to this with no real reason why it didn't work. Usage: radzap [options] server[:port] secret -d raddb_directory: directory where radiusd.conf is located -N nas_ip_address: IP address of the NAS to zap. -P nas_port: NAS port that the user is logged into. -u username: Name of user to zap (case insensitive). -U username: like -u, but case-sensitive. -x : more debugging output I have in the radius.conf to remove stale connections, but they seem to always remain and these peopel are not conencted. Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
Radius [EMAIL PROTECTED] wrote: I get all this below and have tried several commands but it keeps returning me to this with no real reason why it didn't work. You didn't say what you typed in as the command-line for radzap. Try reading the man pages for radzap radwho. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
When radhow -r reads rod,Rodney Rumley,PPP,S406,Tue 17:46,63.215.26.177,4.240.144.66 I would type radzap -N 63.215.26.177 S406 secret I also tried radzap -N 4.240.144.66 S406 secret It keeps telling me it can't locate that IP address. Tried the man page, that's why I sent the request, it was about 47 lines long and had about the same information in it that the help of radzap. - Original Message - From: Alan DeKok [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Thursday, December 01, 2005 12:30 PM Subject: Re: RadZap Radius [EMAIL PROTECTED] wrote: I get all this below and have tried several commands but it keeps returning me to this with no real reason why it didn't work. You didn't say what you typed in as the command-line for radzap. Try reading the man pages for radzap radwho. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
Radius [EMAIL PROTECTED] wrote: I would type radzap -N 63.215.26.177 S406 secret Which is wrong. Please READ the help the man page. It keeps telling me it can't locate that IP address. Yes, you're using the command incorrectly. S406 is NOT the IP address of the RADIUS server. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
I know Don't think I'm that stupid about an IP address. That was the port. I also tried radzap -N 63.215.26.177 -P S406 -U rod secret This only gives the help again. The man file does not give an example of the command line. I guess I'l have to google for someones example. - Original Message - From: Alan DeKok [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Thursday, December 01, 2005 1:06 PM Subject: Re: RadZap Radius [EMAIL PROTECTED] wrote: I would type radzap -N 63.215.26.177 S406 secret Which is wrong. Please READ the help the man page. It keeps telling me it can't locate that IP address. Yes, you're using the command incorrectly. S406 is NOT the IP address of the RADIUS server. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
Radius [EMAIL PROTECTED] wrote: Don't think I'm that stupid about an IP address. That was the port. So... where did you type in the IP address of the RADIUS server? The answer is nowhere, which is your mistake. I guess I'l have to google for someones example. Uh... right. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
It was in the command line I sent. 63.215.26.177 is an IP address. I would type radzap -N 63.215.26.177 S406 secret - Original Message - From: Alan DeKok [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Thursday, December 01, 2005 2:19 PM Subject: Re: RadZap Radius [EMAIL PROTECTED] wrote: Don't think I'm that stupid about an IP address. That was the port. So... where did you type in the IP address of the RADIUS server? The answer is nowhere, which is your mistake. I guess I'l have to google for someones example. Uh... right. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
Your man says this. radzap [-d raddb_directory] [-N nas_ip_address] [-P nas_port] [-u user] [-U user] server[:port] secret radzap -d /usr/local/etc/raddb -N 63.215.26.177 -P S406 -u rod 1645 secret Still brings me back to the help screen. - Original Message - From: Alan DeKok [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Thursday, December 01, 2005 1:06 PM Subject: Re: RadZap Radius [EMAIL PROTECTED] wrote: I would type radzap -N 63.215.26.177 S406 secret Which is wrong. Please READ the help the man page. It keeps telling me it can't locate that IP address. Yes, you're using the command incorrectly. S406 is NOT the IP address of the RADIUS server. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
You're not typing in the IP address of the server; 1645 is not the IP address of the server! -N 63.215.26.177 is the IP address of the NAS. On 12/1/05, Radius [EMAIL PROTECTED] wrote: Your man says this. radzap [-d raddb_directory] [-N nas_ip_address] [-P nas_port] [-u user] [-U user] server[:port] secret radzap -d /usr/local/etc/raddb -N 63.215.26.177 -P S406 -u rod 1645 secret Still brings me back to the help screen. - Original Message - From: Alan DeKok [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Thursday, December 01, 2005 1:06 PM Subject: Re: RadZap Radius [EMAIL PROTECTED] wrote: I would type radzap -N 63.215.26.177 S406 secret Which is wrong. Please READ the help the man page. It keeps telling me it can't locate that IP address. Yes, you're using the command incorrectly. S406 is NOT the IP address of the RADIUS server. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: RadZap
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Radius Sent: Thursday, December 01, 2005 1:44 PM To: FreeRadius users mailing list Subject: Re: RadZap Your man says this. radzap [-d raddb_directory] [-N nas_ip_address] [-P nas_port] [-u user] [-U user] server[:port] secret radzap -d /usr/local/etc/raddb -N 63.215.26.177 -P S406 -u ^ Isn't that an S instead of 5? rod 1645 secret Still brings me back to the help screen. - Original Message - From: Alan DeKok [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Thursday, December 01, 2005 1:06 PM Subject: Re: RadZap Radius [EMAIL PROTECTED] wrote: I would type radzap -N 63.215.26.177 S406 secret Which is wrong. Please READ the help the man page. It keeps telling me it can't locate that IP address. Yes, you're using the command incorrectly. S406 is NOT the IP address of the RADIUS server. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
User-Name = rod Acct-Session-Id = 04036884 NAS-IP-Address = 63.215.26.177 NAS-Port = 406 Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = 4.240.144.66 Acct-Session-Time = 766846 radzap -N 63.215.26.177 -P S406 -u rod (server:port) 1646 secret - Original Message - From: Scott O'Connell [EMAIL PROTECTED] To: 'FreeRadius users mailing list' freeradius-users@lists.freeradius.org Sent: Thursday, December 01, 2005 2:56 PM Subject: RE: RadZap -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Radius Sent: Thursday, December 01, 2005 1:44 PM To: FreeRadius users mailing list Subject: Re: RadZap Your man says this. radzap [-d raddb_directory] [-N nas_ip_address] [-P nas_port] [-u user] [-U user] server[:port] secret radzap -d /usr/local/etc/raddb -N 63.215.26.177 -P S406 -u ^ Isn't that an S instead of 5? rod 1645 secret Still brings me back to the help screen. - Original Message - From: Alan DeKok [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Thursday, December 01, 2005 1:06 PM Subject: Re: RadZap Radius [EMAIL PROTECTED] wrote: I would type radzap -N 63.215.26.177 S406 secret Which is wrong. Please READ the help the man page. It keeps telling me it can't locate that IP address. Yes, you're using the command incorrectly. S406 is NOT the IP address of the RADIUS server. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
S406 is an S and not a 5 -N is for the Nas IP (according to the man.) - Original Message - From: Scott O'Connell [EMAIL PROTECTED] To: 'FreeRadius users mailing list' freeradius-users@lists.freeradius.org Sent: Thursday, December 01, 2005 2:56 PM Subject: RE: RadZap -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Radius Sent: Thursday, December 01, 2005 1:44 PM To: FreeRadius users mailing list Subject: Re: RadZap Your man says this. radzap [-d raddb_directory] [-N nas_ip_address] [-P nas_port] [-u user] [-U user] server[:port] secret radzap -d /usr/local/etc/raddb -N 63.215.26.177 -P S406 -u ^ Isn't that an S instead of 5? rod 1645 secret Still brings me back to the help screen. - Original Message - From: Alan DeKok [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Thursday, December 01, 2005 1:06 PM Subject: Re: RadZap Radius [EMAIL PROTECTED] wrote: I would type radzap -N 63.215.26.177 S406 secret Which is wrong. Please READ the help the man page. It keeps telling me it can't locate that IP address. Yes, you're using the command incorrectly. S406 is NOT the IP address of the RADIUS server. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
Yikes :) Lookee here... radzap -N 63.215.26.177 -P S406 -u rod XXX.XXX.XXX.XXX:1646 secret XXX.XXX.XXX.XXX should be your *RADIUS* server IP. Not NAS, not client and, FWIW, secret should be the secret configured in your clients.conf. And I definitely think that -P S406 should just be -P 406 Laker --- Radius [EMAIL PROTECTED] wrote: S406 is an S and not a 5 -N is for the Nas IP (according to the man.) - Original Message - From: Scott O'Connell [EMAIL PROTECTED] To: 'FreeRadius users mailing list' freeradius-users@lists.freeradius.org Sent: Thursday, December 01, 2005 2:56 PM Subject: RE: RadZap -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Radius Sent: Thursday, December 01, 2005 1:44 PM To: FreeRadius users mailing list Subject: Re: RadZap Your man says this. radzap [-d raddb_directory] [-N nas_ip_address] [-P nas_port] [-u user] [-U user] server[:port] secret radzap -d /usr/local/etc/raddb -N 63.215.26.177 -P S406 -u ^ Isn't that an S instead of 5? rod 1645 secret Still brings me back to the help screen. - Original Message - From: Alan DeKok [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Thursday, December 01, 2005 1:06 PM Subject: Re: RadZap Radius [EMAIL PROTECTED] wrote: I would type radzap -N 63.215.26.177 S406 secret Which is wrong. Please READ the help the man page. It keeps telling me it can't locate that IP address. Yes, you're using the command incorrectly. S406 is NOT the IP address of the RADIUS server. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __ Start your day with Yahoo! - Make it your home page! http://www.yahoo.com/r/hs - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
But his man said [-N nas_ip_address], so the man is wrong? I have the secret right. I just put it that way so I didn't broadcast it. User-Name = rod Acct-Session-Id = 04036884 NAS-IP-Address = 63.215.26.177 NAS-Port = 406 Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = 4.240.144.66 Acct-Session-Time = 766846 I'll give it a try. Thanks - Original Message - From: Laker Netman [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Thursday, December 01, 2005 4:00 PM Subject: Re: RadZap Yikes :) Lookee here... radzap -N 63.215.26.177 -P S406 -u rod XXX.XXX.XXX.XXX:1646 secret XXX.XXX.XXX.XXX should be your *RADIUS* server IP. Not NAS, not client and, FWIW, secret should be the secret configured in your clients.conf. And I definitely think that -P S406 should just be -P 406 Laker --- Radius [EMAIL PROTECTED] wrote: S406 is an S and not a 5 -N is for the Nas IP (according to the man.) - Original Message - From: Scott O'Connell [EMAIL PROTECTED] To: 'FreeRadius users mailing list' freeradius-users@lists.freeradius.org Sent: Thursday, December 01, 2005 2:56 PM Subject: RE: RadZap -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Radius Sent: Thursday, December 01, 2005 1:44 PM To: FreeRadius users mailing list Subject: Re: RadZap Your man says this. radzap [-d raddb_directory] [-N nas_ip_address] [-P nas_port] [-u user] [-U user] server[:port] secret radzap -d /usr/local/etc/raddb -N 63.215.26.177 -P S406 -u ^ Isn't that an S instead of 5? rod 1645 secret Still brings me back to the help screen. - Original Message - From: Alan DeKok [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Thursday, December 01, 2005 1:06 PM Subject: Re: RadZap Radius [EMAIL PROTECTED] wrote: I would type radzap -N 63.215.26.177 S406 secret Which is wrong. Please READ the help the man page. It keeps telling me it can't locate that IP address. Yes, you're using the command incorrectly. S406 is NOT the IP address of the RADIUS server. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __ Start your day with Yahoo! - Make it your home page! http://www.yahoo.com/r/hs - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
OK, thank you. That worked. - Original Message - From: Laker Netman [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Thursday, December 01, 2005 4:00 PM Subject: Re: RadZap Yikes :) Lookee here... radzap -N 63.215.26.177 -P S406 -u rod XXX.XXX.XXX.XXX:1646 secret XXX.XXX.XXX.XXX should be your *RADIUS* server IP. Not NAS, not client and, FWIW, secret should be the secret configured in your clients.conf. And I definitely think that -P S406 should just be -P 406 Laker --- Radius [EMAIL PROTECTED] wrote: S406 is an S and not a 5 -N is for the Nas IP (according to the man.) - Original Message - From: Scott O'Connell [EMAIL PROTECTED] To: 'FreeRadius users mailing list' freeradius-users@lists.freeradius.org Sent: Thursday, December 01, 2005 2:56 PM Subject: RE: RadZap -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Radius Sent: Thursday, December 01, 2005 1:44 PM To: FreeRadius users mailing list Subject: Re: RadZap Your man says this. radzap [-d raddb_directory] [-N nas_ip_address] [-P nas_port] [-u user] [-U user] server[:port] secret radzap -d /usr/local/etc/raddb -N 63.215.26.177 -P S406 -u ^ Isn't that an S instead of 5? rod 1645 secret Still brings me back to the help screen. - Original Message - From: Alan DeKok [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Thursday, December 01, 2005 1:06 PM Subject: Re: RadZap Radius [EMAIL PROTECTED] wrote: I would type radzap -N 63.215.26.177 S406 secret Which is wrong. Please READ the help the man page. It keeps telling me it can't locate that IP address. Yes, you're using the command incorrectly. S406 is NOT the IP address of the RADIUS server. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __ Start your day with Yahoo! - Make it your home page! http://www.yahoo.com/r/hs - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Problem with radzap
hello!. I have experienced with freeradius, but i updated to 1.0.1 on Fedora Core 3 and when i use radzap i get this error: Error: There appears to be another RADIUS server running on the authentication port 1812 i launch this command: radzap '' 34 user456 even, replacing '' with NAS ip. can anyone help me? (i'm searching on google and freeradius-list archive but nothing help me) Thanks -- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Problem with radzap
Andoni Ayala wrote: I have experienced with freeradius, but i updated to 1.0.1 on Fedora Core 3 and when i use radzap i get this error: Error: There appears to be another RADIUS server running on the authentication port 1812 It looks like bug #185. http://bugs.freeradius.org/show_bug.cgi?id=185 Upgrade to the newest version of FreeRADIUS and it should be fine. -- Nicolas Baradakis - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Problem with radzap
Ok, many thanks, i update to 1.0.5 and works perfectly. Another one question; i use this command to 'zap' one user: radzap -x -N [NAS_IP] -u [USER] -P [PORT] 127.0.0.1 [secret] this works fine BUT, the stop packet are writen in 127.0.0.1 detail file, i need that this stop accounting packet write on NAS_IP detail file, how i do this?. i launch the command in same machine where are the radius server. Sorry, for my poor english. Nicolas Baradakis escribió: Andoni Ayala wrote: I have experienced with freeradius, but i updated to 1.0.1 on Fedora Core 3 and when i use radzap i get this error: Error: There appears to be another RADIUS server running on the authentication port 1812 It looks like bug #185. http://bugs.freeradius.org/show_bug.cgi?id=185 Upgrade to the newest version of FreeRADIUS and it should be fine. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap Still given (negative Port)
I compiled the cvs update and still get [EMAIL PROTECTED] root]# radiusd -v radiusd: FreeRADIUS Version 1.0.4, for host , built on Aug 17 2005 at 23:01:39 Copyright (C) 2000-2003 The FreeRADIUS server project. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License. For more information about these matters, see the file named COPYRIGHT. [EMAIL PROTECTED] root]# radwho -r 1291,1291,shell,S2148532295,Thu 09:27,192.116.123.117,10.10.11.250 [EMAIL PROTECTED] root]# radwho -RZ -u 1291 User-Name = 1291 Acct-Session-Id = 80100047 Acct-Status-Type = Stop NAS-IP-Address = 192.116.123.117 NAS-Port = -2146435001 Service-type = Login-User Framed-IP-Address = 10.10.11.250 Acct-Session-Time = 21400 Calling-Station-Id = 00:11:5B:38:1F: Thanks Sarky Alan DeKok wrote: Sarkis Gabriel [EMAIL PROTECTED] wrote: After installing the CVS although not the latest one as of today but it was suppose to have the fix for the Negative port. cvs update Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RadZap Still given (negative Port)
After installing the CVS although not the latest one as of today but it was suppose to have the fix for the Negative port. radwho -ZR -N 192.116.123.118 -u74347 User-Name = 74347 Acct-Session-Id = 80ad Acct-Status-Type = Stop NAS-IP-Address = 192.116.123.118 NAS-Port = -2136997875 Service-type = Login-User Framed-IP-Address = 10.10.13.254 Acct-Session-Time = 21495 Calling-Station-Id = 00:11:43:79:E7: radwho -r 74347,74347,shell,S2157969421,Tue 08:58,192.116.123.118,10.10.13.254 The difference now is that a simple radwho -r used to show the S-21... but now it doesnt and if you do a radwho -ZR it shows a negative port. Thanks SArky - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap Still given (negative Port)
Sarkis Gabriel [EMAIL PROTECTED] wrote: After installing the CVS although not the latest one as of today but it was suppose to have the fix for the Negative port. cvs update Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap problem
Dear Alan, Thanks, you are right and now it's working. --- Alan DeKok [EMAIL PROTECTED] wrote: Soheb Ahmed [EMAIL PROTECTED] wrote: Thanks for your reply. I have used port collection of FreeBSD on line to install freeradius. So? My statement is still true. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Thanks Md. Soheb Ahmed 708 Shahidbagh (First Floor), Dhaka 1217, Bangladesh. Email: [EMAIL PROTECTED],[EMAIL PROTECTED] http://www.geocities.com/soheb707/ Start your day with Yahoo! - make it your home page http://www.yahoo.com/r/hs - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
radzap problem
Hi, I am running FreeBSD5.4 and freeradius 1.0.4 is working fine with radwho and radlast.Problem is when I issue radzap command to any logged user, I geterror like " Starting reading configuration file.port 1813 is used by another radius server". Please help. Thanks Md. Soheb Ahmed 708 Shahidbagh (First Floor), Dhaka 1217, Bangladesh. Email: [EMAIL PROTECTED],[EMAIL PROTECTED] http://www.geocities.com/soheb707/ __Do You Yahoo!?Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap problem
Soheb Ahmed [EMAIL PROTECTED] wrote: I am running FreeBSD5.4 and freeradius 1.0.4 is working fine with radwho and radlast. Problem is when I issue radzap command to any logged user, I get error like Starting reading configuration file.port 1813 is used by another radius server. Please help. You're not using the version of radzap included with 1.0.4. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap problem
Hi, Thanks for your reply. I have used port collection of FreeBSD on line to install freeradius.Alan DeKok [EMAIL PROTECTED] wrote: Soheb Ahmed <[EMAIL PROTECTED]>wrote: I am running FreeBSD5.4 and freeradius 1.0.4 is working fine with radwho and radlast. Problem is when I issue radzap command to any logged user, I get error like " Starting reading configuration file.port 1813 is used by another radius server". Please help.You're not using the version of radzap included with 1.0.4.Alan DeKok.- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Thanks Md. Soheb Ahmed 708 Shahidbagh (First Floor), Dhaka 1217, Bangladesh. Email: [EMAIL PROTECTED],[EMAIL PROTECTED] http://www.geocities.com/soheb707/ __Do You Yahoo!?Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap problem
Soheb Ahmed [EMAIL PROTECTED] wrote: Thanks for your reply. I have used port collection of FreeBSD on line to install freeradius. So? My statement is still true. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Problem with RadZap in version 1.0.4
Hi all
I am trying to zap users but for some reason it is giving an error Port
not found, i will paste all the necessary details below.
johny,johny,shell,S-2140143609,Tue 09:47,192.116.123.117,10.10.11.251
henry,henry,shell,S-2140143606,Tue 12:23,192.116.123.117,10.10.11.254
radzap -N 192.116.123.117 -P -2140143609 -u johny -x
192.116.123.115:1813 password
Sending Accounting-Request of id 113 to 192.116.123.115:1813
User-Name = johny
Acct-Session-Id = 8077
Acct-Status-Type = Stop
NAS-IP-Address = 192.116.123.117
rad_recv: Accounting-Response packet from host 192.116.123.115:1813,
id=113, length=20
Ready to process requests.
rad_recv: Accounting-Request packet from host 192.116.123.115:32813,
id=113, length=49
User-Name = johny
Acct-Session-Id = 8077
Acct-Status-Type = Stop
NAS-IP-Address = 192.116.123.117
Processing the preacct section of radiusd.conf
modcall: entering group preacct for request 0
modcall[preacct]: module preprocess returns noop for request 0
rlm_acct_unique: WARNING: Attribute NAS-Port was not found in request,
unique ID MAY be inconsistent
rlm_acct_unique: Hashing ',Client-IP-Address =
192.116.123.115,NAS-IP-Address = 192.116.123.117,Acct-Session-Id =
8077,User-Name = johny'
rlm_acct_unique: Acct-Unique-Session-ID = 40280b49c7d3093a.
modcall[preacct]: module acct_unique returns ok for request 0
rlm_realm: No '@' in User-Name = johny, looking up realm NULL
rlm_realm: No such realm NULL
modcall[preacct]: module suffix returns noop for request 0
modcall[preacct]: module files returns noop for request 0
modcall: group preacct returns ok for request 0
Processing the accounting section of radiusd.conf
modcall: entering group accounting for request 0
radius_xlat: '/var/log/radius/radacct/192.116.123.115/detail-20050726'
rlm_detail: /var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d
expands to /var/log/radius/radacct/192.116.123.115/detail-20050726
modcall[accounting]: module detail returns ok for request 0
modcall[accounting]: module unix returns noop for request 0
radius_xlat: '/var/log/radius/radutmp'
radius_xlat: 'johny'
rlm_radutmp: No NAS-Port seen. Cannot do anything.
rlm_radumtp: WARNING: checkrad will probably not work!
modcall[accounting]: module radutmp returns noop for request 0
radius_xlat: 'johny'
rlm_sql (sql): sql_set_user escaped user -- 'johny'
radius_xlat: 'UPDATE radacct SET AcctStopTime = '2005-07-26 12:32:23',
AcctSessionTime = '', AcctInputOctets = '', AcctOutputOctets = '',
AcctTerminateCause = '', AcctStopDelay = '', ConnectInfo_stop = '' WHERE
AcctSessionId = '8077' AND UserName = 'johny' AND NASIPAddress =
'192.116.123.117''
rlm_sql (sql): Reserving sql socket id: 4
rlm_sql (sql): Released sql socket id: 4
modcall[accounting]: module sql returns ok for request 0
modcall: group accounting returns ok for request 0
Sending Accounting-Response of id 113 to 192.116.123.115:32813
Finished request 0
Going to the next request
--- Walking the entire request list ---
Cleaning up request 0 ID 113 with timestamp 42e61f47
Nothing to do. Sleeping until we see a request.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Problem with RadZap in version 1.0.4
Sarkis Gabriel [EMAIL PROTECTED] wrote: radzap -N 192.116.123.117 -P -2140143609 -u johny -x A negative number for the port? That isn't nice. Hmm... The numbers should be printed as unsigned int's, and the input to radzap should be unsigned int's. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Problem with RadZap in version 1.0.4
Hi Alan I do not know what to do with it, it is coming as a negative number the Nas Type is a Mikrotik and when radwho -r is issued i get this. johny,johny,shell,S-2140143609,Tue 09:47,192.116.123.117,10.10.11.251 Any idea why it is giving a negative number? Thanks sarky Alan DeKok wrote: Sarkis Gabriel [EMAIL PROTECTED] wrote: radzap -N 192.116.123.117 -P -2140143609 -u johny -x A negative number for the port? That isn't nice. Hmm... The numbers should be printed as unsigned int's, and the input to radzap should be unsigned int's. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Problem with RadZap in version 1.0.4
Sarkis Gabriel [EMAIL PROTECTED] wrote: johny,johny,shell,S-2140143609,Tue 09:47,192.116.123.117,10.10.11.251 Any idea why it is giving a negative number? It looks like a bug in radwho. It will be fixed in 1.0.5 (if and when it gets released) Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Problem with RadZap in version 1.0.4
Thanks alan for the reply just wondering if there is any workaround to kill those connections? if there is no workaround are all Freeradius 1.0.0 have that bug in radwho? Thanks again Sarky Alan DeKok wrote: Sarkis Gabriel [EMAIL PROTECTED] wrote: johny,johny,shell,S-2140143609,Tue 09:47,192.116.123.117,10.10.11.251 Any idea why it is giving a negative number? It looks like a bug in radwho. It will be fixed in 1.0.5 (if and when it gets released) Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
I have installed freeradius from CVS and i found out that radzap in that is a bin file and it is giving Segmentation Fault, I just want a confirmation if there was any changes made on cvs? Also The Version of radwho.c is 1.44.2.1, and Changelog states that it is the candidate for 1.0.3 Thank you Sarky -- Original Message --- From: Sarkis Gabriel [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Tue, 10 May 2005 00:12:20 +0200 Subject: Re: RadZap Okie i got the CVS once more, i think the way i got it the first time was wrong hence i got the ./configure error. I noticed that i was talking about another email in the archive and not the one originated from you, now i got the cvs and compiled it tomorrow when my brain is functioning properly i will install and configure and play around with radzap. Sorry for the confusion, and thanks for the help. Sarky -- Original Message --- From: Alan DeKok [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Mon, 09 May 2005 17:19:13 -0400 Subject: Re: RadZap Sarkis Gabriel [EMAIL PROTECTED] wrote: The CVS command i used was the one advising someone else to use and i got radiusd, copied the files and got a compile error when it got to radwho.c If you grab the 1.0.x candidate from CVS, you don't have to copy over radwho.c. The previous messages in the list archive say that. And didn't you say in your previous message that it failed in configure? Are you sure you know what's going on in your system? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html --- End of Original Message --- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html --- End of Original Message --- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
Sarkis Gabriel [EMAIL PROTECTED] wrote: I have installed freeradius from CVS and i found out that radzap in that is a bin file and it is giving Segmentation Fault, I just want a confirmation if there was any changes made on cvs? That's fixed. Do a cvs update Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
Sarkis Gabriel [EMAIL PROTECTED] wrote: I have just checked out 1.0.2 and found out RadZap does not work i even did what was said to copy the radzap.c from CVS to 1.0.2 and compile it, but still no Joy with radzap and i do rely on that on a daily bases. You couldn't have copied radzap.c from the CVS head to 1.0.2, because it doesn't exist in the CVS head. Copy radwho.c radzap. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
Sorry i meant radzap and radwho.c, i copied them both and did ./configure --with- experimental-modules and then make but i noticed it broke during the make process and that is what i got during the weekend. /usr/include/bits/socket.h:275: parse error before '' token In file included from /usr/include/_G_config.h:44, from /usr/include/libio.h:32, from /usr/include/stdio.h:72, from ../include/libradius.h:30, from ../include/radiusd.h:10, from radwho.c:51: /usr/include/gconv.h: At top level: /usr/include/gconv.h:72: parse error before size_t /usr/include/gconv.h:88: parse error before size_t /usr/include/gconv.h:97: parse error before size_t /usr/include/gconv.h:174: parse error before size_t /usr/include/gconv.h:177: parse error before '}' token In file included from /usr/include/libio.h:32, from /usr/include/stdio.h:72, from ../include/libradius.h:30, from ../include/radiusd.h:10, from radwho.c:51: /usr/include/_G_config.h:47: field `__cd' has incomplete type /usr/include/_G_config.h:50: field `__cd' has incomplete type /usr/include/_G_config.h:52: confused by earlier errors, bailing out gmake[4]: *** [radwho.o] Error 1 gmake[4]: Leaving directory `/root/freeradius-1.0.2/src/main' gmake[3]: *** [common] Error 1 Anyideas? -- Original Message --- From: Alan DeKok [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Mon, 09 May 2005 13:30:15 -0400 Subject: Re: RadZap Sarkis Gabriel [EMAIL PROTECTED] wrote: I have just checked out 1.0.2 and found out RadZap does not work i even did what was said to copy the radzap.c from CVS to 1.0.2 and compile it, but still no Joy with radzap and i do rely on that on a daily bases. You couldn't have copied radzap.c from the CVS head to 1.0.2, because it doesn't exist in the CVS head. Copy radwho.c radzap. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html --- End of Original Message --- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
Sarkis Gabriel [EMAIL PROTECTED] wrote: Sorry i meant radzap and radwho.c, i copied them both and did ./configure --with- experimental-modules and then make but i noticed it broke during the make process and that is what i got during the weekend. shrug Try grabbing a copy of the pre-release for 1.0.3 from CVS. See recent messages on the list for details. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
Sarkis Gabriel [EMAIL PROTECTED] wrote: just to confirm is it this cvs command cvs -d :pserver:[EMAIL PROTECTED]:/source checkout -j release_1_0 radiusd No. that is the one i got and i tried to compile it from scratch but it fails on ./configure I hate playing twenty questions. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
To be honest i have spent a lot of time working out cvs and i do not know how to check for the version on cvs the only thing i found in the archive about cvs and 1.0.3 is the one below posted few days back and pointing out that it is the current candidate for the official 1.0.3 and it is called release_1_0. I know you dont like playing twenty question but if i have not tried, I would not be asking, i just need to get this new system compiled and working so i can drop version 0.9.3. Thank you once more Sarky -- Original Message --- From: Alan DeKok [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Mon, 09 May 2005 14:53:24 -0400 Subject: Re: RadZap Sarkis Gabriel [EMAIL PROTECTED] wrote: just to confirm is it this cvs command cvs -d :pserver:[EMAIL PROTECTED]:/source checkout -j release_1_0 radiusd No. that is the one i got and i tried to compile it from scratch but it fails on ./configure I hate playing twenty questions. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html --- End of Original Message --- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
Sarkis Gabriel [EMAIL PROTECTED] wrote: To be honest i have spent a lot of time working out cvs and i do not know how to check for the version on cvs the only thing i found in the archive about cvs and 1.0.3 is the one below posted few days back and pointing out that it is the current candidate for the official 1.0.3 and it is called release_1_0. It will work if you follow the instructions in that message. I know you dont like playing twenty question but if i have not tried, I would not be asking, i just need to get this new system compiled and working so i can drop version 0.9.3. I would like to be able to help you, but you keep saying something went wrong, and giving NO information. I'm not a mind reader, and I *hate* having to play the twenty questions game. if you want someone to help you, then give them enough information so that they can understand what you're doing. If you don't, then you're forcing people to ask you question after question of OK, and what EXACTLY went wrong? If you never say anything other than something went wrong, then no one will be able to help you. Ever. And no one will want to help you, either. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
I think it is best to start all over again. I have been using 0.9.3 basicaly since that was the current version and it is working fine, now i want to upgrade and go for the newer version so i downloaded 1.0.2 and found out that radzap is not working properly. After looking in the MAN pages found out that radzap is a script which uses radwho/radclient to do its job Simple Term that is. So checking up on it, found out that few users had similar problem and in the archive I located a message stating that it will be fixed in 1.0.3 or you can download the cvs and swap files then compile once more. The CVS command i used was the one advising someone else to use and i got radiusd, copied the files and got a compile error when it got to radwho.c I recently downloaded the snapshot - freeradius-snapshot-20050509.tar.gz - and compiled it, bearing in mind the version which is still on the system is 0.9.3. I copied over radzap, radwho, radclient thinking that it might work in place of original radzap so i can see if it works with the current version then change all the scripts i already have in place to the new command line before the upgrade, but no joy, i think it is incompatibility. Sorry once more to go on and on but i think the above gives a better view of what i have done . Sarky -- Original Message --- From: Alan DeKok [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Mon, 09 May 2005 16:51:23 -0400 Subject: Re: RadZap Sarkis Gabriel [EMAIL PROTECTED] wrote: To be honest i have spent a lot of time working out cvs and i do not know how to check for the version on cvs the only thing i found in the archive about cvs and 1.0.3 is the one below posted few days back and pointing out that it is the current candidate for the official 1.0.3 and it is called release_1_0. It will work if you follow the instructions in that message. I know you dont like playing twenty question but if i have not tried, I would not be asking, i just need to get this new system compiled and working so i can drop version 0.9.3. I would like to be able to help you, but you keep saying something went wrong, and giving NO information. I'm not a mind reader, and I *hate* having to play the twenty questions game. if you want someone to help you, then give them enough information so that they can understand what you're doing. If you don't, then you're forcing people to ask you question after question of OK, and what EXACTLY went wrong? If you never say anything other than something went wrong, then no one will be able to help you. Ever. And no one will want to help you, either. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html --- End of Original Message --- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
Sarkis Gabriel [EMAIL PROTECTED] wrote: The CVS command i used was the one advising someone else to use and i got radiusd, copied the files and got a compile error when it got to radwho.c If you grab the 1.0.x candidate from CVS, you don't have to copy over radwho.c. The previous messages in the list archive say that. And didn't you say in your previous message that it failed in configure? Are you sure you know what's going on in your system? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RadZap
Okie i got the CVS once more, i think the way i got it the first time was wrong hence i got the ./configure error. I noticed that i was talking about another email in the archive and not the one originated from you, now i got the cvs and compiled it tomorrow when my brain is functioning properly i will install and configure and play around with radzap. Sorry for the confusion, and thanks for the help. Sarky -- Original Message --- From: Alan DeKok [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Mon, 09 May 2005 17:19:13 -0400 Subject: Re: RadZap Sarkis Gabriel [EMAIL PROTECTED] wrote: The CVS command i used was the one advising someone else to use and i got radiusd, copied the files and got a compile error when it got to radwho.c If you grab the 1.0.x candidate from CVS, you don't have to copy over radwho.c. The previous messages in the list archive say that. And didn't you say in your previous message that it failed in configure? Are you sure you know what's going on in your system? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html --- End of Original Message --- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RadZap
Hi All I have just checked out 1.0.2 and found out RadZap does not work i even did what was said to copy the radzap.c from CVS to 1.0.2 and compile it, but still no Joy with radzap and i do rely on that on a daily bases. can anyone suggest anything i have not tried? Thank you sarky - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
radzap
I'm triing to use radzap but it seems that i'm doing something wrong. radwho -r Login Name What TTY WhenFromLocation testadsl,testadsl,PPP, S-1875771310, Thu 15:33, 192.168.240.2 , 192.168.241.23 radzap 192.168.241.23 S-1875771310 testadsl If I execute this command nothing happens. Can anyone help me with this? I'm using freeradius-1.0.2. Thank you! http://www.email.si/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap
mlgjd mlgjd [EMAIL PROTECTED] wrote: I'm triing to use radzap but it seems that i'm doing something wrong. radzap doesn't work in 1.0.2. There will be a fix in 1.0.3, which I guess we should release sometime soon... Alan Dekok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap
On Monday 25 of April 2005 22:27, Alan DeKok wrote: mlgjd mlgjd [EMAIL PROTECTED] wrote: I'm triing to use radzap but it seems that i'm doing something wrong. radzap doesn't work in 1.0.2. There will be a fix in 1.0.3, which I guess we should release sometime soon... Alan Dekok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html I have the same problem with 1.0.1. Is it possible that in version 1.0.1 radzap doesn't work too? Micko - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap
Micko [EMAIL PROTECTED] wrote: I have the same problem with 1.0.1. Is it possible that in version 1.0.1 radzap doesn't work too? Yes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Anyone using radzap?
The latest CVS snapshot should contain fixed radwho radzap. They should work if you copy them to a 1.0.2 distribution, and re-build. Thanks Alan, I'll grab them and give it a try. Cheers, Mike - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Anyone using radzap?
Mike Cisar [EMAIL PROTECTED] wrote: The latest CVS snapshot should contain fixed radwho radzap. They should work if you copy them to a 1.0.2 distribution, and re-build. Thanks Alan, I'll grab them and give it a try. I've also put them into the 1.0.x distribution, if we ever choose to release 1.0.3: cvs -d :pserver:[EMAIL PROTECTED] checkout -r release_1_0 radiusd And you'll get a snapshot of what will be 1.0.3. radwho radzap are there, and seem to work for me. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Anyone using radzap?
Mike Cisar [EMAIL PROTECTED] wrote: Can't say as I've been using it, for the obvious reasons... but I've wanted to several times in the past couple months :-) The latest CVS snapshot should contain fixed radwho radzap. They should work if you copy them to a 1.0.2 distribution, and re-build. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Anyone using radzap?
Hi Alan, So far as I can tell, radzap hasn't worked for a while. If so, I'll poke it, and see if I can't get it to work. This may, however, involve changing the command-line options... Can't say as I've been using it, for the obvious reasons... but I've wanted to several times in the past couple months :-) Cheers, Mike - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Anyone using radzap?
So far as I can tell, radzap hasn't worked for a while. If so, I'll poke it, and see if I can't get it to work. This may, however, involve changing the command-line options... Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Anyone using radzap?
So far as I can tell, radzap hasn't worked for a while. If so, I'll poke it, and see if I can't get it to work. This may, however, involve changing the command-line options... Hmm... a little bit of work on radwho turns it into a front-end for radzap. $ radwho -Z blah... | radclient -f - localhost acct testing123 Has radwho print the radutmp information in the form of RADIUS attributes, and add the appropriate Acct-Status-Type attribute to zap the record. That should simplify things a LOT. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Radius wrote: Maybe you need to (sometime a .)/usr/local/freeradius/bin/radzap etc. My not working below is not a command not files, but it show the result after it run. But when I'm running radwho to see who is online still the old result I'm getting... Example. 1) 1st time running radwho, this is the zombie users... (disconnect but still with an open session) [EMAIL PROTECTED] root]# radwho Login Name What TTY When From Location [EMAIL PROTECTED] dcmwaiATocesb.com. shell S145 Thu 18:05 192.168.0 2) Running radzap and need to kill this zombies session... [EMAIL PROTECTED] root]# radzap 192.168.0.16 S:S145 [EMAIL PROTECTED] Sat Mar 12 03:19:07 2005 : Info: Starting - reading configuration files ... 3) radzap finished, running radwho again... the same users still there.. [EMAIL PROTECTED] root]# radwho Login Name What TTY When From Location [EMAIL PROTECTED] dcmwaiATocesb.com. shell S145 Thu 18:05 192.168.0 I do know one way to kill off all users connection but still it will leave the sql DB with an open account... that is to remove radutmp and radwtmp but it don't really help if you only want to remove the users on one NAS switch instate of all of them. Regards, Chan Min Wai Chan Min Wai wrote: Radius wrote: Radzap is mainly for the stale radwho that are not there but still showing loged in. Yep that user is already logout due to a power cycle/reboot in the NAS. So radzap is the right tools to get the zombie users off radius. radwho first to see the one you want. then do a radwho -r to get the detailed . radzap 111.111.111.111 S560 [EMAIL PROTECTED] Ok it is not working 111.111.111.111 is the NAS switch iP. S560 is the Connection Port. [EMAIL PROTECTED] is the userlogin name. Well, any other debug message or anything I should before continue? I really want to get this function working... Regards, Thank you Chan Min Wai - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFCM7wxV0p9slMZLW4RAsYSAKDDsbQeCz5G8hszibUkp4lkEZM20gCcDHU2 Lrl34Z2CqcDSJRyIoqY4Y8k= =9pre -END PGP SIGNATURE- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap...
Try radwho -r to make sure your geting the full S port number. radzap does not drop their connection, it only deletes stale entries listed in radwho that are no longer connected Chan Min Wai wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Radius wrote: Maybe you need to (sometime a .)/usr/local/freeradius/bin/radzap etc. My not working below is not a command not files, but it show the result after it run. But when I'm running radwho to see who is online still the old result I'm getting... Example. 1) 1st time running radwho, this is the zombie users... (disconnect but still with an open session) [EMAIL PROTECTED] root]# radwho Login Name What TTY When From Location [EMAIL PROTECTED] dcmwaiATocesb.com. shell S145 Thu 18:05 192.168.0 2) Running radzap and need to kill this zombies session... [EMAIL PROTECTED] root]# radzap 192.168.0.16 S:S145 [EMAIL PROTECTED] Sat Mar 12 03:19:07 2005 : Info: Starting - reading configuration files ... 3) radzap finished, running radwho again... the same users still there.. [EMAIL PROTECTED] root]# radwho Login Name What TTY When From Location [EMAIL PROTECTED] dcmwaiATocesb.com. shell S145 Thu 18:05 192.168.0 I do know one way to kill off all users connection but still it will leave the sql DB with an open account... that is to remove radutmp and radwtmp but it don't really help if you only want to remove the users on one NAS switch instate of all of them. Regards, Chan Min Wai Chan Min Wai wrote: Radius wrote: Radzap is mainly for the stale radwho that are not there but still showing loged in. Yep that user is already logout due to a power cycle/reboot in the NAS. So radzap is the right tools to get the zombie users off radius. radwho first to see the one you want. then do a radwho -r to get the detailed . radzap 111.111.111.111 S560 [EMAIL PROTECTED] Ok it is not working 111.111.111.111 is the NAS switch iP. S560 is the Connection Port. [EMAIL PROTECTED] is the userlogin name. Well, any other debug message or anything I should before continue? I really want to get this function working... Regards, Thank you Chan Min Wai - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFCM7wxV0p9slMZLW4RAsYSAKDDsbQeCz5G8hszibUkp4lkEZM20gCcDHU2 Lrl34Z2CqcDSJRyIoqY4Y8k= =9pre -END PGP SIGNATURE- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Radius wrote: Sure does. We use it from time to time, when our wholesale connections don't send a good disconnect. radzap IP-Address S:port [EMAIL PROTECTED] ... Hum ... Not working.. [EMAIL PROTECTED] root]# radwho Login Name What TTY When From Location [EMAIL PROTECTED] dcmwaiATocesb.com. shell S145 Thu 18:05 192.168.0 [EMAIL PROTECTED] root]# radzap 192.168.0.16 S:S145 [EMAIL PROTECTED] Sat Mar 12 03:19:07 2005 : Info: Starting - reading configuration files ... [EMAIL PROTECTED] root]# radwho Login Name What TTY When From Location [EMAIL PROTECTED] dcmwaiATocesb.com. shell S145 Thu 18:05 192.168.0 [EMAIL PROTECTED] root]# Any idea/guide? Regards Chan Min Wai Chan Min Wai wrote: Hello all, I found that this script isn't working for me, so wonder if this script is still working? What does this script check anyway? did this scrip need checkrad to work? Just wonder anyone have the guide to patch checkrad to work with another oid with snmp way? regards. Thank You Chan Min Wai - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFCMe+OV0p9slMZLW4RAhtuAKCWaH6ma+tUb2R5a18XXQjcKj8zbACdFmBW /k6/583BCcC5dONf3zqZGlo= =ZQ4r -END PGP SIGNATURE- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap...
Radius wrote: Radzap is mainly for the stale radwho that are not there but still showing loged in. Yep that user is already logout due to a power cycle/reboot in the NAS. So radzap is the right tools to get the zombie users off radius. radwho first to see the one you want. then do a radwho -r to get the detailed . radzap 111.111.111.111 S560 [EMAIL PROTECTED] Ok it is not working 111.111.111.111 is the NAS switch iP. S560 is the Connection Port. [EMAIL PROTECTED] is the userlogin name. Well, any other debug message or anything I should before continue? I really want to get this function working... Regards, Thank you Chan Min Wai - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap...
Maybe you need to (sometime a .)/usr/local/freeradius/bin/radzap etc. Chan Min Wai wrote: Radius wrote: Radzap is mainly for the stale radwho that are not there but still showing loged in. Yep that user is already logout due to a power cycle/reboot in the NAS. So radzap is the right tools to get the zombie users off radius. radwho first to see the one you want. then do a radwho -r to get the detailed . radzap 111.111.111.111 S560 [EMAIL PROTECTED] Ok it is not working 111.111.111.111 is the NAS switch iP. S560 is the Connection Port. [EMAIL PROTECTED] is the userlogin name. Well, any other debug message or anything I should before continue? I really want to get this function working... Regards, Thank you Chan Min Wai - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap...
Sure does. We use it from time to time, when our wholesale connections don't send a good disconnect. radzap IP-Address S:port [EMAIL PROTECTED] Chan Min Wai wrote: Hello all, I found that this script isn't working for me, so wonder if this script is still working? What does this script check anyway? did this scrip need checkrad to work? Just wonder anyone have the guide to patch checkrad to work with another oid with snmp way? regards. Thank You Chan Min Wai - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap in FreeBSD
[EMAIL PROTECTED] wrote: Because there's a bug in the source code which prevents it from working when you're trying to run it on the same server on which the server is running - no matter what OS that box is using? You mentioned on the same server. I also tried to radzap from a remote server, where no radiusd runs, but wasn't successfull. I made entries of the remote server in the clients.conf and and naslist as usual on the radius and used the command similar to this: remoteserver:~# radzap -r target-radius-IP terminalserver-IP terminalserver-userport Tue Jan 11 16:19:17 2005 : Info: Starting - reading configuration files ... radzap: zapping termserver x.x.x.x, port xx Entry not found The radutmp-session was not zapped, checked with radwho -ir. Is anybody able to use radzap remotely? Thx Oliver - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap in FreeBSD
I don't know if this has anything to do with it but the UTMP on FreeBSD is slightly different than many other platforms. I came across these differences a number of years ago, when I was having problems. The main consequence I came across was that FreeBSD truncates the nas/port information. If radutmp on FreeBSD is using a standard structure on all platforms rather than the platform standard, this may be a mute point. On Tue, 2005-11-01 at 13:53 +0100, [EMAIL PROTECTED] wrote: Luiz Gustavo Anflor Pereira schrieb: There is some problem about radzap 0.9.1 in a FreeBSD system? Why it does not zap the users from radutmp? Because there's a bug in the source code which prevents it from working when you're trying to run it on the same server on which the server is running - no matter what OS that box is using? Didn't we have some detailled description of the problem in the past weeks? Regards, Stefan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Guy Fraser Network Administrator The Internet Centre 1-888-450-6787 (780)450-6787 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap in FreeBSD
Maybe you are correct. But when we use radwho -r, we can use the port number we see. I copied the radutmp file to a linux/freeradius test server, and i can zap the user. The problem is in the real server, the server that runs FreeBSD. It seems that radzap does not find the radiusd server, but they are on the same machine. It is not that problem of port already in use, the release i am using is 0.9.1. thanks, Luiz Gustavo I don't know if this has anything to do with it but the UTMP on FreeBSD is slightly different than many other platforms. I came across these differences a number of years ago, when I was having problems. The main consequence I came across was that FreeBSD truncates the nas/port information. If radutmp on FreeBSD is using a standard structure on all platforms rather than the platform standard, this may be a mute point. On Tue, 2005-11-01 at 13:53 +0100, [EMAIL PROTECTED] wrote: Luiz Gustavo Anflor Pereira schrieb: There is some problem about radzap 0.9.1 in a FreeBSD system? Why it does not zap the users from radutmp? Because there's a bug in the source code which prevents it from working when you're trying to run it on the same server on which the server is running - no matter what OS that box is using? Didn't we have some detailled description of the problem in the past weeks? Regards, Stefan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Guy Fraser Network Administrator The Internet Centre 1-888-450-6787 (780)450-6787 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
radzap in FreeBSD
Hello all There is some problem about radzap 0.9.1 in a FreeBSD system? Why it does not zap the users from radutmp? Do you know anything about freeradius-snapshot-20030514? thank you very much! Luiz Gustavo - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap problem
Hello guys I would like to know if there is some difference in the source code of freeradiusd 0.9.1, or in compilation options, between linux and freeBSD, because when i run radzap, compiled by the same code, in linux it works, in FreeBSD does not. thanks very much, Luiz Gustavo - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap problem
Oliver Zimmermann [EMAIL PROTECTED] wrote: The only thing radzap needs from the configuration files is the location of the radutmp file, and that can easily be specified on the command line of radzap. No, radzap from 0.7 had no directory-parameters: Umm... I know that. It had the directory hard-coded in it. And in radzap from 1.0.0 one can specify the general raddb dir: Because radzap reads radiusd.conf. But that's all not the point. The point is, radzap from 1.0.0 does not work, due to some socket related problems when a radiusd is running on the machine (as Luiz Gustavo wrote). Yes, I know. The reason there are socket issues is that the read radiusd.conf code is there for radiusd, not for radzap. radzap should probably NOT be reading radiusd.conf, for a whole number of reasons. And so did the previous versions i know (except 0.7), which makes me wonder, that only a few people use radzap really. But to kill lost sessions, radzap is really essential for us and the problem in the C-code is documented in the beginning of thread. I understand. The longer term solution is to fix radzap so it takes the path to the radutmp file as a parameter, and calls radclient to send the packets. That way there's less code, and it doesn't need to read radiusd.conf. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap problem
Luiz Gustavo Anflor Pereira [EMAIL PROTECTED] wrote: I would like to know if there is some difference in the source code of freeradiusd 0.9.1, or in compilation options, between linux and freeBSD, because when i run radzap, compiled by the same code, in linux it works, in FreeBSD does not. No. It is the same source code. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap problem
Oliver Zimmermann [EMAIL PROTECTED] wrote: But now I have a problem. We added some new querie statements in the radiusd.conf/sql.conf, which radzap (0.7) can't parse any longer, when it reads these confs at start-up. So it probably shouldn't be reading the configuration files. The only thing radzap needs from the configuration files is the location of the radutmp file, and that can easily be specified on the command line of radzap. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap problem
On Mon, 03 Jan 2005 16:01:50 -0500 Alan DeKok [EMAIL PROTECTED] wrote: Oliver Zimmermann [EMAIL PROTECTED] wrote: But now I have a problem. We added some new querie statements in the radiusd.conf/sql.conf, which radzap (0.7) can't parse any longer, when it reads these confs at start-up. So it probably shouldn't be reading the configuration files. The only thing radzap needs from the configuration files is the location of the radutmp file, and that can easily be specified on the command line of radzap. No, radzap from 0.7 had no directory-parameters: radzap [-p acct_port] [-r servername|serverip] termserver [port] [user] And in radzap from 1.0.0 one can specify the general raddb dir: # radzap Usage: radzap [-d raddb] [-p acct_port] [-r servername|serverip] termserver [port] [user] ...where: -d raddbSet the raddb directory (default is /usr/local/etc/raddb) But that's all not the point. The point is, radzap from 1.0.0 does not work, due to some socket related problems when a radiusd is running on the machine (as Luiz Gustavo wrote). And so did the previous versions i know (except 0.7), which makes me wonder, that only a few people use radzap really. But to kill lost sessions, radzap is really essential for us and the problem in the C-code is documented in the beginning of thread. Bye, Oliver - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
radzap problem
Hi, we are using freeradius-1.0.0, but to kill user sessions on the radius server manually, I always used radzap from freeradius-0.7. No other radzap-version since then - including 1.0.0 - ever worked in my setups. But now I have a problem. We added some new querie statements in the radiusd.conf/sql.conf, which radzap (0.7) can't parse any longer, when it reads these confs at start-up. So I would like to get radzap (1.0.0) to run. Therefore I started the debug mode with radiusd -X. When I use the old radzap, I see the generated stop-packet coming in - that is the expected behaviour. But when I use radzap from release 1.0.0 (in the same way), there is NO incoming stop-packet in the debug log. - And the invoked command shows the following: test-radius:# radzap 211.34.61.119 268566633 Thu Dec 30 16:40:08 2004 : Info: Starting - reading configuration files ... test-radius:# It seems, the radzap command instantly quits while reading some configuration files. What is wrong with the newer radzap versions? I'm not a C-programmer - is the only solution for me, to build a workaround with radclient, which imitates radzap? Regards, Oliver - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap problem
Hello I had this problem too. I found that in the newer versions of freeradius, the read_mainconfig function (in the src/main/mainconfig.c) tests if the port of radiusd is free. If it is not, then exits the program. The problem is that radzap uses the same function. So, radiusd is running, you try to run radzap, then the function exits because the port is already in use. In older version there was no such test. I solved this issue copying the entire function to a new one, and the new function does not exit the program. Then the radzap calls the new function, say read_mainconfig_zap. Hope it will help you. bye, Luiz Gustavo Hi, we are using freeradius-1.0.0, but to kill user sessions on the radius server manually, I always used radzap from freeradius-0.7. No other radzap-version since then - including 1.0.0 - ever worked in my setups. But now I have a problem. We added some new querie statements in the radiusd.conf/sql.conf, which radzap (0.7) can't parse any longer, when it reads these confs at start-up. So I would like to get radzap (1.0.0) to run. Therefore I started the debug mode with radiusd -X. When I use the old radzap, I see the generated stop-packet coming in - that is the expected behaviour. But when I use radzap from release 1.0.0 (in the same way), there is NO incoming stop-packet in the debug log. - And the invoked command shows the following: test-radius:# radzap 211.34.61.119 268566633 Thu Dec 30 16:40:08 2004 : Info: Starting - reading configuration files ... test-radius:# It seems, the radzap command instantly quits while reading some configuration files. What is wrong with the newer radzap versions? I'm not a C-programmer - is the only solution for me, to build a workaround with radclient, which imitates radzap? Regards, Oliver - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap problem
On Thu, 30 Dec 2004 14:21:37 -0200 (BRST)
Luiz Gustavo Anflor Pereira [EMAIL PROTECTED] wrote:
Hello
I had this problem too. I found that in the newer versions of freeradius, the
read_mainconfig function (in the src/main/mainconfig.c) tests if the port of
radiusd is free. If it is not, then exits the program. The problem is that
radzap uses the same function.
So, radiusd is running, you try to run radzap, then the function exits
because the port is already in use. In older version there was no such test.
I solved this issue copying the entire function to a new one, and the new
function does not exit the program. Then the radzap calls the new function,
say read_mainconfig_zap.
Hope it will help you.
bye, Luiz Gustavo
Hello Luiz Gustavo,
thank you very much. You surely are right, because in the strace of
radzap-1.0.0 I found something about Address already in use and an error
message at the end:
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 3
bind(3, {sa_family=AF_INET, sin_port=htons(1812),
sin_addr=inet_addr(0.0.0.0)}, 16) = -1 EADDRINUSE (Address already in use)
close(3)= 0
open(/usr/local/var/log/radius/radius.log, O_WRONLY|O_APPEND|O_CREAT, 0666) =
3 fstat64(3, {st_mode=S_IFREG|0644, st_size=161614, ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x40019000 fstat64(3, {st_mode=S_IFREG|0644, st_size=161614, ...}) = 0
_llseek(3, 161614, [161614], SEEK_SET) = 0
time(NULL) = 1104422506
write(3, Thu Dec 30 17:01:46 2004 : Error..., 116) = 116
close(3)= 0
munmap(0x40019000, 4096)= 0
munmap(0x40018000, 4096)= 0
exit_group(1) = ?
Happy new year,
Oliver
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
radzap 0.9.1 in FreeBSD
Hello all I have been exchanging emails with you about my problemas with radzap and the dependent libraries. I think I should explain my goals better. What do i need to do? :-) We have freeradius 0.9.1 running on FreeBSD. In this server we cannot zap the users, radzap does not work. I installed the release 1.0.1 in a linux machine to understand a radius server, because i am new in my office. I understood all the radzap and radiusd stuff, and after that i installed the release 0.9.1, copying the sources from the FreeBSD machine, finding then the dependent libraries problem. Then i realized that the drivers were not correct, so i kept the source that i have downloaded from the FreeBSD, but change the src/modules/rlm_sql/drivers directory to that one that i downloaded from freeradius.org. It works again, and the radzap is ok. Now my questions is: there is some problem about radzap 0.9.1 in a FreeBSD? Why it does not zap the users from radutmp? thanks a lot, again! Luiz Gustavo - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: RADZAP
Geoffrey Cauchi [EMAIL PROTECTED] wrote: We are running Free Radius 1Pre3 and wanted to delete a user entry from radutmp using radzap. The user entry is not being deleted though! Other people have said the same thing. Anyone knows about issues with radzap? Not really. i.e. Set up a *tiny* test system. Use radclient to send a fake accounting start packet, to create a radutmp entry. Use radwho to check that the user is marked as logged in. Then, use radzap to zap their session. You can also use radclient to send a fake accounting stop packet. That should cause the entry to be deleted. That will give you not only simple debugging output, but you will be able to see what *does* cause the entry to be deleted, and that will give you an indication as to what's wrong with radzap. In the long run, radzap should probably be moved to a shell script around radclient, and the server should be updated to accept those zap sessions from a trusted client, like localhost. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Version 1. Pre3 RadZap
Hi all Just wondering did anything change with the way Radzap works on the latest version? I have installed it on a test system, and i have noticed i can not radzap the users on the system with radzap -p 1813 -r localhost 'nasip' Thank you Sarky - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Version 1. Pre3 RadZap
sarky [EMAIL PROTECTED] wrote: Just wondering did anything change with the way Radzap works on the latest version? Not that I recall. I have installed it on a test system, and i have noticed i can not radzap the users on the system with radzap -p 1813 -r localhost 'nasip' As always, run the server in debugging mode to see what it's doing, and why. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
