Re: [RADIATOR] Radiator 4.11: WARNING: Could not find AuthBy clause with Identifier ...

2013-07-06 Thread Karl Gaissmaier
Am 05.07.2013 23:53, schrieb a.l.m.bu...@lboro.ac.uk:
 Hi,

 there must be something wrong in your installation or even your config.

 check the config doesnt have wierd characters in it I guess... 'cat -v 
 /tmp/radiator-config'

 there were some changes as the move to 4.11 occured to deal with the config 
 strings
 in better ways -

done, no non-printing chars in the file.

The next test on monday is a fresh, newer perl installation.
What perl version do you have on solaris?

Best Regards
 Charly
___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator


Re: [RADIATOR] Radiator 4.11: WARNING: Could not find AuthBy clause with Identifier ...

2013-07-06 Thread A . L . M . Buxey
Hi,

 The next test on monday is a fresh, newer perl installation.
 What perl version do you have on solaris?

perl 5, version 12, subversion 2 (v5.12.2)

alan
___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator


Re: [RADIATOR] Radiator 4.11: WARNING: Could not find AuthBy clause with Identifier ...

2013-07-06 Thread Karl Gaissmaier
Hi,

Am 05.07.2013 23:15, schrieb Christian Kratzer:
 Hi,

 just verified your minimal configuration with a clean Radiator-4.11 plus
 patches installation:

thank you very much!

 there must be something wrong in your installation or even your config.

the cfg is clean, 4.9 is working fine

 # radiusd -c -log_stdout -trace 5 -config_file /tmp/radiator-config
 Fri Jul  5 18:30:30 2013: WARNING: Could not find AuthBy clause with
 Identifier myinternal
 Fri Jul  5 18:30:30 2013: DEBUG: Finished reading configuration file
 '/tmp/radiator-config'

 You might want to reverify the minimal configuration.

done


 I typoed Identifier myself a couple of days ago.

also checked, and see the minimal stripped down cfg


 Is above also the error message you get from your full configuration ?

the same error messages, for the identifiers in the orig cfg,
not only AuthBy identifiers:


 Sat Jul  6 10:02:34 2013: WARNING: Could not find AuthBy clause with 
 Identifier LDAP-KIZ
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthBy clause with 
 Identifier INTERNAL-SUCCESS
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthBy clause with 
 Identifier LDAP-AKAD
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier authlogger
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier authlogger-syslog
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthBy clause with 
 Identifier GAST
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier authlogger
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier authlogger-syslog
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthBy clause with 
 Identifier KIZ
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier authlogger
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier authlogger-syslog
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier authlogger
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier authlogger-syslog
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier authlogger
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier authlogger-syslog
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier authlogger
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier authlogger-syslog
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier authlogger
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier authlogger-syslog
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier authlogger
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier authlogger-syslog
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthBy clause with 
 Identifier KIZ
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier authlogger
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier authlogger-syslog
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthBy clause with 
 Identifier KIZ
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier authlogger
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier authlogger-syslog
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthBy clause with 
 Identifier INTERNAL-SUCCESS
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthBy clause with 
 Identifier AUTH-EDUROAM
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier eduroam-inner-logger
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier eduroam-inner-logger-syslog
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthBy clause with 
 Identifier GAST
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier eduroam-inner-logger
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier eduroam-inner-logger-syslog
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthBy clause with 
 Identifier INTERNAL-REJECT
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier eduroam-inner-logger
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier eduroam-inner-logger-syslog
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthBy clause with 
 Identifier AUTH-MAC-BLACKLIST
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthBy clause with 
 Identifier AUTH-EAP-OUTER
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier eduroam-outer-logger
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthLog clause with 
 Identifier eduroam-outer-logger-syslog
 Sat Jul  6 10:02:35 2013: WARNING: Could not find AuthBy 

Re: [RADIATOR] Radiator 4.11: WARNING: Could not find AuthBy clause with Identifier ...

2013-07-06 Thread Heikki Vatiainen
On 07/06/2013 11:04 AM, Karl Gaissmaier wrote:

 the cfg is clean, 4.9 is working fine

 # radiusd -c -log_stdout -trace 5 -config_file /tmp/radiator-config

Can you add -foreground option to the options too? And be extra careful
to not to miss any complaints that come to stdout only and for that
reason won't be visible in the log file afterwards.

 Fri Jul  5 18:30:30 2013: WARNING: Could not find AuthBy clause with
 Identifier myinternal
 Fri Jul  5 18:30:30 2013: DEBUG: Finished reading configuration file
 '/tmp/radiator-config'

 You might want to reverify the minimal configuration.

I just tried goodies/minimal.cfg with freshly installed Solaris 11.1,
September 2012. Perl is 5.12.4 that comes with the system. Radiator is
unpatched 4.11.

% perl -I /opt/radiator/current /opt/radiator/current/radiusd
-dictionary /opt/radiator/current/dictionary -foreground -log_stdout
-config /opt/radiator/current/goodies/simple.cfg
Sat Jul  6 11:20:05 2013: DEBUG: Finished reading configuration file
'/opt/radiator/current/goodies/simple.cfg'
Sat Jul  6 11:20:05 2013: DEBUG: Reading dictionary file
'/opt/radiator/current/dictionary'
Sat Jul  6 11:20:05 2013: DEBUG: Creating authentication port 0.0.0.0:1645
Sat Jul  6 11:20:05 2013: DEBUG: Creating accounting port 0.0.0.0:1646
Sat Jul  6 11:20:05 2013: NOTICE: Server started: Radiator 4.11 on solaris11


Thanks,
Heikki

-- 
Heikki Vatiainen h...@open.com.au

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS,
NetWare etc.
___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator


Re: [RADIATOR] Radiator 4.11: WARNING: Could not find AuthBy clause with Identifier ...

2013-07-06 Thread Karl Gaissmaier
Hi Heikki,

thanks for working an saturday. The Radiator team is as usaual great!

Am 06.07.2013 10:21, schrieb Heikki Vatiainen:
 On 07/06/2013 11:04 AM, Karl Gaissmaier wrote:

 the cfg is clean, 4.9 is working fine

 # radiusd -c -log_stdout -trace 5 -config_file /tmp/radiator-config

 Can you add -foreground option to the options too? And be extra careful
 to not to miss any complaints that come to stdout only and for that
 reason won't be visible in the log file afterwards.

 Fri Jul  5 18:30:30 2013: WARNING: Could not find AuthBy clause with
 Identifier myinternal
 Fri Jul  5 18:30:30 2013: DEBUG: Finished reading configuration file
 '/tmp/radiator-config'

 You might want to reverify the minimal configuration.

 I just tried goodies/minimal.cfg with freshly installed Solaris 11.1,
 September 2012. Perl is 5.12.4 that comes with the system. Radiator is
 unpatched 4.11.

but in the goodies/simple.cfg is no 'Identifier' used.
Please add an Identifier and try it again.

 % perl -I /opt/radiator/current /opt/radiator/current/radiusd
 -dictionary /opt/radiator/current/dictionary -foreground -log_stdout
 -config /opt/radiator/current/goodies/simple.cfg
 Sat Jul  6 11:20:05 2013: DEBUG: Finished reading configuration file
 '/opt/radiator/current/goodies/simple.cfg'
 Sat Jul  6 11:20:05 2013: DEBUG: Reading dictionary file
 '/opt/radiator/current/dictionary'
 Sat Jul  6 11:20:05 2013: DEBUG: Creating authentication port 0.0.0.0:1645
 Sat Jul  6 11:20:05 2013: DEBUG: Creating accounting port 0.0.0.0:1646
 Sat Jul  6 11:20:05 2013: NOTICE: Server started: Radiator 4.11 on solaris11



The WARNING comes *only* with the -c (config file check):

foobar# /radiator/perl-5.12.4/bin/perl -I 
/radiator/install-4.11/lib/site_perl/ 
/radiator/install-4.11/bin/radiusd -log_stdout -trace 5 -config_file 
/tmp/radiator-config

Sat Jul  6 11:37:53 2013: DEBUG: Finished reading configuration file 
'/tmp/radiator-config'
Sat Jul  6 11:37:53 2013: DEBUG: Reading dictionary file './dictionary'
Sat Jul  6 11:37:53 2013: DEBUG: Creating authentication port 0.0.0.0:1645
Sat Jul  6 11:37:53 2013: DEBUG: Creating accounting port 0.0.0.0:1646
Sat Jul  6 11:37:53 2013: NOTICE: Server started: Radiator 4.11 on mizar

BUT now with -c

foobar# /radiator/perl-5.12.4/bin/perl -I 
/radiator/install-4.11/lib/site_perl/ 
/radiator/install-4.11/bin/radiusd -c -log_stdout -trace 5 -config_file 
/tmp/radiator-config
Sat Jul  6 11:38:56 2013: WARNING: Could not find AuthBy clause with 
Identifier myinternal
Sat Jul  6 11:38:56 2013: DEBUG: Finished reading configuration file 
'/tmp/radiator-config'

Thanks for your help!
 Charly
___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator


Re: [RADIATOR] Radiator 4.11: WARNING: Could not find AuthBy clause with Identifier ...

2013-07-06 Thread A . L . M . Buxey
Hi,

to confirm this via my own tests:

on Solaris:

Sat Jul  6 13:01:00 2013: WARNING: Could not find AuthBy clause with Identifier 
myinternal
Sat Jul  6 13:01:00 2013: DEBUG: Finished reading configuration file 'test.cfg'


on Linux:

Sat Jul  6 12:59:22 2013: DEBUG: Finished reading configuration file 
'/tmp/test.cfg'


curious.

alan

___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator


Re: [RADIATOR] Radiator 4.11: WARNING: Could not find AuthBy clause with Identifier ...

2013-07-06 Thread A . L . M . Buxey
Hi,

  I just tried goodies/minimal.cfg with freshly installed Solaris 11.1,
  September 2012. Perl is 5.12.4 that comes with the system. Radiator is
  unpatched 4.11.
 
 but in the goodies/simple.cfg is no 'Identifier' used.
 Please add an Identifier and try it again.

goodies/safeword.cfg

that fails in the same way (its a naked Handler statement instead of a 
Realm statement - but still has an identifier that is not recognised)

alan
___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator


Re: [RADIATOR] Radiator 4.11: WARNING: Could not find AuthBy clause with Identifier ...

2013-07-06 Thread Heikki Vatiainen
On 07/06/2013 03:25 PM, a.l.m.bu...@lboro.ac.uk wrote:

 goodies/safeword.cfg
 
 that fails in the same way (its a naked Handler statement instead of a 
 Realm statement - but still has an identifier that is not recognised)

safeword.cfg fails here too but the reason is missing module. Also,
there's no Identifier or Handler in my goodies/safeword.cfg, it uses
Handler DEFAULT. Is that really goodies/safeword.cfg or something else?

I played around with goodies/simple.cfg too. I first added an
Identifier. Then I lifted the AuthBy from the realm and moved it to top
level and referenced it from Realm with 'AuthBy identifiervalue'.
Unfortunately(?) I could not make it to fail.

-- 
Heikki Vatiainen h...@open.com.au

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS,
NetWare etc.
___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator


Re: [RADIATOR] Radiator 4.11: WARNING: Could not find AuthBy clause with Identifier ...

2013-07-06 Thread Karl Gaissmaier
Hi together,

I tried it now with 4.11 *without* patches. All other parameters are
identical, and now the config file check with Identifiers work.

 mizar:.../tmp# /radiator/perl-5.12.4/bin/perl -I 
 /radiator/install-4.11/lib/site_perl/  /radiator/install-4.11/bin/radiusd -c 
 -log_stdout -trace 5 -config_file /tmp/radiator-config
 Sat Jul  6 15:09:02 2013: DEBUG: Finished reading configuration file 
 '/tmp/radiator-config'


The bug must be introduced by the patches 4.11.

Best Regards
Charly
___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator


Re: [RADIATOR] Radiator 4.11: WARNING: Could not find AuthBy clause with Identifier ...

2013-07-06 Thread A . L . M . Buxey
Hi,

 safeword.cfg fails here too but the reason is missing module. Also,
 there's no Identifier or Handler in my goodies/safeword.cfg, it uses
 Handler DEFAULT. Is that really goodies/safeword.cfg or something else?

the version that comes with 4.11 but running radiator 4.11 with patches


however, I've now updated the Linux box with the patches-4.11 and
it now fails too:

Sat Jul  6 14:43:05 2013: WARNING: Could not find AuthBy clause with Identifier 
myinternal
Sat Jul  6 14:43:05 2013: DEBUG: Finished reading configuration file 
'/tmp/test.cfg'

the previous patchfile I had installed was from January

-rw-r--r-- 1 root root146903 Jan 14 13:28 patches-4.11.tar.gz

looking at that patchset,

# tar -tvf patches-4.11.tar.gz 
-rw-r--r-- mikem/users 219 2013-01-13 05:59:43 patches/PATCHFILES
-rw-r--r-- mikem/users   18990 2013-01-13 05:59:44 patches/index.html
-rw-r--r-- mikem/users3322 2013-01-13 05:59:44 Radius/EAP_4.pm
-rw-r--r-- mikem/users  420251 2013-01-13 05:59:45 dictionary
-rw-r--r-- mikem/users   11774 2013-01-13 05:59:45 Radius/AuthACE.pm
-rw-r--r-- mikem/users   92825 2013-01-13 05:59:45 Radius/AuthGeneric.pm
-rw-r--r-- mikem/users   27026 2013-01-13 05:59:45 Radius/AuthSQL.pm
-rw-r--r-- mikem/users8050 2013-01-13 05:59:45 goodies/sql.cfg
-rw-r--r-- mikem/users4840 2013-01-13 05:59:45 Radius/AuthLogSYSLOG.pm
-rw-r--r-- mikem/users   48085 2013-01-13 05:59:45 Radius/AuthRADIUS.pm
-rw-r--r-- mikem/users   32279 2013-01-13 05:59:45 Radius/AuthRADSEC.pm
-rw-r--r-- mikem/users   25124 2013-01-13 05:59:45 Radius/TLS.pm

This is patch set $Revision: 1.1500 $


so, something since then appears to have made something interesting happen

alan
___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator


Re: [RADIATOR] Radiator 4.11: WARNING: Could not find AuthBy clause with Identifier ...

2013-07-06 Thread A . L . M . Buxey
Hi,


2013-04-30 Configurable.pm
   Configuration file check no longer activates clauses which could cause 
spurious error messages.
   Requested by Garry Shtern.

?

could it just be that the configuration checker has a b0rkeness
as the server runs okay when NOT using '-c' ?

alan
___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator


Re: [RADIATOR] Radiator 4.11: WARNING: Could not find AuthBy clause with Identifier ...

2013-07-06 Thread Karl Gaissmaier
Am 06.07.2013 15:51, schrieb a.l.m.bu...@lboro.ac.uk:
 Hi,


 2013-04-30 Configurable.pm
 Configuration file check no longer activates clauses which could cause 
 spurious error messages.
 Requested by Garry Shtern.

 ?

 could it just be that the configuration checker has a b0rkeness
 as the server runs okay when NOT using '-c' ?

yep, found in Configurable.pm

 #
 # Load a particular class module and construct and return an instance
 # return undef if it didnt work
 sub load
 {
 my ($file, $class, @args) = @_;

 my $ret;
 return unless eval(require $class)  ($ret = $class-new($file, 
 @args));
 $ret-activate() unless $ret-isCheckingConfiguration();
 return $ret;
 }

The object does no longer get activated if we are in check config mode, 
and the WARNING comes from findAndUse() later on.

Best Regards
Charly
___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator


Re: [RADIATOR] Radiator 4.11: WARNING: Could not find AuthBy clause with Identifier ...

2013-07-06 Thread A . L . M . Buxey
Hi,

 yep, found in Configurable.pm
 
 #
 # Load a particular class module and construct and return an instance
 # return undef if it didnt work
 sub load
 {
 my ($file, $class, @args) = @_;
 
 my $ret;
 return unless eval(require $class)  ($ret = $class-new($file, 
  @args));
 $ret-activate() unless $ret-isCheckingConfiguration();
 return $ret;
 }
 
 The object does no longer get activated if we are in check config
 mode, and the WARNING comes from findAndUse() later on.

confirmed. adjusting to older format:

$ret-activate();

the server passes the '-c' check with this config again.  

so...whats the issue with having 'activate' in config checking mode? what does
this reversion expose us to? :-)

alan
___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator


Re: [RADIATOR] Radiator 4.11: WARNING: Could not find AuthBy clause with Identifier ...

2013-07-06 Thread Garry Shtern
When you have activate() in config checking some of the modules, namely all of 
the ones extending StreamServer will attempt to bind to a port.  Obviously, if 
you have nothing running when doing config check, this is really not a big 
deal. However, if you simply want to check configuration before restarting your 
instance, it will cause spurious errors.

Thanks.

-Original Message-
From: radiator-boun...@open.com.au [mailto:radiator-boun...@open.com.au] On 
Behalf Of a.l.m.bu...@lboro.ac.uk
Sent: Saturday, July 06, 2013 1:35 PM
To: Karl Gaissmaier
Cc: radiator@open.com.au
Subject: Re: [RADIATOR] Radiator 4.11: WARNING: Could not find AuthBy clause 
with Identifier ...

Hi,

 yep, found in Configurable.pm
 
 #
 # Load a particular class module and construct and return an instance 
 # return undef if it didnt work sub load {
 my ($file, $class, @args) = @_;
 
 my $ret;
 return unless eval(require $class)  ($ret = $class-new($file, 
  @args));
 $ret-activate() unless $ret-isCheckingConfiguration();
 return $ret;
 }
 
 The object does no longer get activated if we are in check config 
 mode, and the WARNING comes from findAndUse() later on.

confirmed. adjusting to older format:

$ret-activate();

the server passes the '-c' check with this config again.  

so...whats the issue with having 'activate' in config checking mode? what does 
this reversion expose us to? :-)

alan
___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator
___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator


Re: [RADIATOR] Radiator 4.11: WARNING: Could not find AuthBy clause with Identifier ...

2013-07-06 Thread Karl Gaissmaier
Hi,

until now I checked my old cfg for new Radiaror versions before I 
upgraded to the newer version in production.

With this bug it's not possible to do this any more.
Worse, if the AuthBy clause is really missing, the warning is the same.


Am 06.07.2013 19:53, schrieb Garry Shtern:
 When you have activate() in config checking some of the modules, namely all 
 of the ones extending StreamServer will attempt to bind to a port.  
 Obviously, if you have nothing running when doing config check, this is 
 really not a big deal. However, if you simply want to check configuration 
 before restarting your instance, it will cause spurious errors.


To overcome the spurious errors in config check mode they have to find
a different solution instead of not activating the modules, sorry.

For me it's important to check my complex config without getting wrong 
errors.

I'm sure, the Radiator team will find a solution for both problems.


Best Regards and thanks for all the responses and help
Charly
___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator