Re: Deployment

2009-09-08 Thread Alan DeKok
tech.subscripti...@shepherdhill.biz wrote: I have done the gdb and valgrind dumps. They are on: http://www.leadservers.com/gdb-radiusd.log http://www.leadservers.com/valgrind-radiusd.log It looks like an issue that was fixed in 2.1.7. Alan DeKok. - List info/subscribe/unsubscribe? See

Freeradius using binary perl module

2009-09-08 Thread Leon
Hi, am new with freeradius. would like to know, if i use a binary perl module? ie, in raddb/modules/perl: perl { module = ${confdir}/some_binary.pl } i a currently using: ~# radiusd -v radiusd: FreeRADIUS Version 2.1.6, for host x86_64-unknown-linux-gnu, built on Aug 6 2009 at

Re: Freeradius using binary perl module

2009-09-08 Thread Alan DeKok
Leon wrote: would like to know, if i use a binary perl module? What's a binary perl module? ie, in raddb/modules/perl: perl { module = ${confdir}/some_binary.pl } Or... you could use the perl module in the way that it's documented to work. Alan DeKok. - List

Re: Pre-release of 2.1.7

2009-09-08 Thread Alan DeKok
Garber, Neal wrote: Build it, install it, and see if there are issues. On FreeBSD 7.2 with libtool 2.2.6a: - Built - Installed - Tested EAP-PEAP/MSCHAPv2, rlm_perl with no issues so far Thanks. No LD_PRELOAD needed for libperl.so with libtool 2.2.6. That's nice! Do you think

Re: Freeradius + MySQL At System Boot = Freeradius Failure

2009-09-08 Thread Ivan Kalik
There needs to be a wait-on-mysql option for radiusd startup - surely?? No. Your problem is not freeradius. It's your operating system startup script. Read instructions for that. You had been given guidance and examples for that already. Ivan Kalik Kalik Informatika ISP - List

Re: Freeradius possible memory leak

2009-09-08 Thread Szymon Roczniak
On Fri, Sep 04, 2009 at 02:27:13PM +0200, Alan DeKok wrote: Can you re-build the rlm_sql module with debugging symbols? (-g, and DELETE any -O2 flags you find). That way, it will print out line numbers like the following: I can't make valgrind print file lines from modules for some reason.

Re: MAC Address Validation for phones

2009-09-08 Thread Matthieu Lazaro
Ivan Kalik a écrit : I tried to put this in the users file: Unlang goes into virtual server configuration, not users file. if ( %{User-Name} =~ 00030BCA[0-9A-F]+ ) { update control { Cleartext-Password == %{User-Name} }

freeradius + monit

2009-09-08 Thread Sokvantha Youk
Dear All, I am new to Freeradius server. I wish to get it restart automatically when its process is hang by using monit. I have no idea how to get monit restart freeradius server automatically. Please kindly advice me. --- Best Regards, sokvantha

Re: MAC Address Validation for phones

2009-09-08 Thread Marinko Tarlac
Please ask here for Wiki account. Then you'll be able to create pages and add content. best regards Marinko Matthieu Lazaro wrote: Furthermore, I would like to suggest or edit parts of this page http://freeradius.org/radiusd/man/unlang.html , so that we have a detailed list of where and how

Re: freeradius + monit

2009-09-08 Thread Ivan Kalik
I am new to Freeradius server. I wish to get it restart automatically when its process is hang by using monit. I have no idea how to get monit restart freeradius server automatically. Have you tried reading monit documentation? Is there an example for a different process? You are asking your

noresetcounter + NULL radacct records (First Connection)

2009-09-08 Thread Neville
Hi, On occasions sqlcounter does not seem to work correctly, especially for NEW User that have no radacct details. After doing some digging, I've identified the issue only to happen on the first ever connect of the user in a new account. As you will see from the sql below, if no integer is

Re: freeradius + monit

2009-09-08 Thread nf-vale
On Tuesday 08 September 2009 11:00:35 Sokvantha Youk wrote: Dear All, I am new to Freeradius server. I wish to get it restart automatically when its process is hang by using monit. I have no idea how to get monit restart freeradius server automatically. Please kindly advice me. --- Best

mix user storage

2009-09-08 Thread Rakotomandimby Mihamina
Hi all Using freeradius 2.x for AAA, is it possible to mix LDAP and xxxSQL? I mean one of those cases (the only difference is about the credit): case #1: LDAP: - username - password - MAC Address - NAS (the user is tied to that NAS) - credit (credit left)

Re: noresetcounter + NULL radacct records (First Connection)

2009-09-08 Thread Ivan Kalik
On occasions sqlcounter does not seem to work correctly, especially for NEW User that have no radacct details. After doing some digging, I've identified the issue only to happen on the first ever connect of the user in a new account. As you will see from the sql below, if no integer is

Re: MAC Address Validation for phones

2009-09-08 Thread Alan DeKok
Matthieu Lazaro wrote: Furthermore, I would like to suggest or edit parts of this page http://freeradius.org/radiusd/man/unlang.html , so that we have a detailed list of where and how we can use unlang. $ man unlang That text is already in 2.1.6. The web page wasn't updated. Alan DeKok.

Re: freeradius + monit

2009-09-08 Thread Alan DeKok
nf-vale wrote: and restart monit. Unfortunately monit does not yet support RADIUS protocol checks. I took a look a while back at adding it. It's hard. Monit doesn't even support run external program and check it's return code. Adding that is hard, too. Alan DeKok. - List

Re: Freeradius possible memory leak

2009-09-08 Thread Alan DeKok
Szymon Roczniak wrote: The one that uses leaking memory returns Auth-Type : Accept from : ? What's that? authorize_check_query = SELECT 1,'notused','Auth-Type','Accept',':' FROM That's the issue. The operator is wrong. Use :=, not : It shouldn't leak memory, so that still needs to

Re: Freeradius possible memory leak

2009-09-08 Thread Alan DeKok
Szymon Roczniak wrote: It's odd, but it looks like it doesn't matter what operator is used in this place. In fact it still works even without one (I've just tested it with some random 'operators' and with the operator field set to ). Yes... I saw that, and just fixed it. There are some

Re: EAP-TTLS with mschapv2 and edirectory

2009-09-08 Thread Alan DeKok
Michael Fischer wrote: I'm trying to set up 802.1x authentication on my Enterasys AccessPoints using freeradius and eDirectory. Freeradius and eDirectory work like a charm when I use it for Cisco-VPN authentication. Which is likely PAP (i.e. clear-text password). rlm_ldap: Error

Re: Freeradius possible memory leak

2009-09-08 Thread Szymon Roczniak
On Tue, Sep 08, 2009 at 01:59:05PM +0200, Alan DeKok wrote: Szymon Roczniak wrote: authorize_check_query = SELECT 1,'notused','Auth-Type','Accept',':' FROM That's the issue. The operator is wrong. Use :=, not : That's an error, the production configuration has ':=' in the operator

Re: Freeradius + MySQL At System Boot = Freeradius Failure

2009-09-08 Thread John Dennis
On 09/07/2009 07:51 PM, James Duffy wrote: Marinko This sounds like a race will take place between the two processes if there is no co-ordination. If (as you say) you are able to start mysqld after radiusd then I think if you look at tail of /var/log/radius/radius.log you will see something

EAP-TTLS with mschapv2 and edirectory

2009-09-08 Thread Michael Fischer
Hi, I'm trying to set up 802.1x authentication on my Enterasys AccessPoints using freeradius and eDirectory. Freeradius and eDirectory work like a charm when I use it for Cisco-VPN authentication. This is the debug-output: rad_recv: Access-Request packet from host 10.3.4.10:1088, id=153,

Re: Pre-release of 2.1.7

2009-09-08 Thread Arran Cudbard-Bell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/09/2009 16:45, Garber, Neal wrote: It won't make 2.1.8. Please submit a bug report and attach the patch. My preference for the patch is to split it into 2-3 pieces. Bug # 17 created with separate attachments for each file changed.

Re: Pre-release of 2.1.7

2009-09-08 Thread Arran Cudbard-Bell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/09/2009 17:11, Arran Cudbard-Bell wrote: On 08/09/2009 16:45, Garber, Neal wrote: It won't make 2.1.8. Please submit a bug report and attach the patch. My preference for the patch is to split it into 2-3 pieces. Bug # 17 created with

RE: Pre-release of 2.1.7

2009-09-08 Thread Garber, Neal
Does it apply cleanly to the current git head? I created it about 2 weeks ago against the then current git head. It changes rlm_eap_mschapv2.c, rlm_mschap.c radius.h. I don't believe any of these have changed in the past 2 weeks, so it should still apply cleanly. I've been running with it

RE: Pre-release of 2.1.7

2009-09-08 Thread Garber, Neal
It won't make 2.1.8. Please submit a bug report and attach the patch. My preference for the patch is to split it into 2-3 pieces. Bug # 17 created with separate attachments for each file changed. Messing with functionality in the MSCHAP module is a bit worrisome, as it's pretty core to a

Re: mix user storage

2009-09-08 Thread Ivan Kalik
Using freeradius 2.x for AAA, is it possible to mix LDAP and xxxSQL? Yes. I mean one of those cases (the only difference is about the credit): Both are fine. case #1: LDAP: - username - password - MAC Address - NAS (the user is tied to that NAS)

Re: Pre-release of 2.1.7

2009-09-08 Thread Thor Spruyt
Hi, Compiles and runs smoothly on Centos 4.6 32-bit... Using postgresql backends and exec module for both auth and acct packets home_server status_check = none ok, need this ;-) I've been away from FR evolution for a while... I must say I'm really surprised what's possible now with 2.1.7

Re: Pre-release of 2.1.7

2009-09-08 Thread Alan DeKok
Thor Spruyt wrote: I've been away from FR evolution for a while... I must say I'm really surprised what's possible now with 2.1.7 compared to 1.1.7 (still running in production), nice job! 2.1.x is amazing compared to 1.1.x. I'm sad every time I have to use 1.x, and depressed whenever I

Re: EAP-TTLS with mschapv2 and edirectory

2009-09-08 Thread Peter Lambrechtsen
On 9/09/2009, at 2:43 AM, Alan DeKok al...@deployingradius.com wrote: Michael Fischer wrote: I'm trying to set up 802.1x authentication on my Enterasys AccessPoints using freeradius and eDirectory. Freeradius and eDirectory work like a charm when I use it for Cisco- VPN authentication.

Re: Pre-release of 2.1.7

2009-09-08 Thread Arran Cudbard-Bell
Alan DeKok wrote: Thor Spruyt wrote: I've been away from FR evolution for a while... I must say I'm really surprised what's possible now with 2.1.7 compared to 1.1.7 (still running in production), nice job! 2.1.x is amazing compared to 1.1.x. I'm sad every time I have to