Re: Segmentation fault on sigHUP

Hi Alan, On Wed, Apr 11, 2007 at 03:45:18PM +0200, Alan DeKok wrote: Milan Holub wrote: somewhere in this list there was already mentioned that current CVS version causes segmentation fault when received HUP signal(kill -HUP pid) - depending on the configuration it may survive 1st HUP

Re: Segmentation fault on sigHUP

/unsubscribe? See http://www.freeradius.org/list/users.html Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http://www.thenet.ch http

Segmentation fault for SNMP query

/radius_snmp.c 10 Apr 2007 14:21:24 - 1.31 +++ src/main/radius_snmp.c 11 Apr 2007 14:41:08 - @@ -194,6 +194,8 @@ RADCLIENT *c; int i, len; + return NULL; + len = *objid_len - v-namelen; if (!mainconfig.clients) Hope this helps someone. Milan

rlm_sql, readclients=yes: multiple NASes with same IP

15:36:19 - @@ -225,7 +225,7 @@ * Duplicate? */ if (!rbtree_insert(clients-trees[client-prefix], client)) { - return 0; + return 1; } #ifdef WITH_SNMP I hope it helps someone. Milan Holub holub (at) thenet (dot) ch

Re: rlm_sql, readclients=yes: multiple NASes with same IP

. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Milan Holub holub (at) thenet (dot) ch

Re: Generating AAA message for freeradius.

about php: http://cz2.php.net/manual/en/ref.radius.php) Regards, Prateek - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark

Re: Simultaneous-Use problem

info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http

Re: User never get disconnected (was Re: Simultaneous-Use problem)

://www.freeradius.org/list/users.html Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http://www.thenet.ch http://wlan.thenet.ch

Re: Segmentation fault for SNMP query

Hi Alan, On Wed, Apr 11, 2007 at 05:51:16PM +0200, Alan DeKok wrote: Milan Holub wrote: Hi all, when I've compiled in snmp support (--with-snmp) on current cvs head I got following segmentation fault(does not matter whether NAS are stored in DB or in clients.conf): I just

rlm_sql: read_groups parameter ignored

, offsetof(SQL_CONFIG,deletestalesessions), NULL, yes}, {num_sql_socks, PW_TYPE_INTEGER, I believe this could be finally added to CVS... Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018

rlm_sql: processing radcheck radgroupcheck

+*/ + return RLM_MODULE_REJECT; } } Hope this helps someone. Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http

Re: sql auth problems with 2.0.0-pre

for the user == post your radiusd.conf; you probably explicitly overrides the result of sqlauth by setting the Auth-Type to Local somewhere in your config... -- Sincerely Yours, Alexander - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Milan Holub holub

rlm_sql: Bug in stripping output of dynamic strings {sql:...}

((select count(*) from radacct where %username='%{SQL-User-Name}'),'\n')} ie: %{sql: select concat((your query), '\n')} I hope this could help someone until the code is fixed... Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im

Re: Segmentation fault for SNMP query

http://www.freeradius.org/list/users.html Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http://www.thenet.ch http://wlan.thenet.ch

Re: rlm_sql: Bug in stripping output of dynamic strings {sql:...}

Hi Alan, On Sat, Apr 14, 2007 at 03:26:11AM +0200, Alan DeKok wrote: Milan Holub wrote: Unfortunately I'm getting the output stripped by last character(byte): instead of getting 37 for session_count I get 3, instead of getting 1563 for noresetcounterflat I get 156, instead of getting S3H

Re: Segmentation fault for SNMP query

reload (good!) - with my config each reload eats additional 620k of memory per thread! Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http

rlm_sql: readclients segmentation fault

... Please advise. Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http://www.thenet.ch http://wlan.thenet.ch

Re: Segmentation fault for SNMP query

in memory than at the beginning(and it's incrementing lineary each HUP). Please advise. Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http

Re: rlm_sql: processing radcheck radgroupcheck

) module for the future. Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http://www.thenet.ch http://wlan.thenet.ch

Re: rlm_sql: readclients segmentation fault

tried but without any impact:-( Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http://www.thenet.ch http://wlan.thenet.ch

Re: Segmentation fault for SNMP query

0x0804f1f7 in cf_section_free () #4 0x08055b34 in read_mainconfig () #5 0x08058f5e in main () #6 0x4024714f in __libc_start_main () from /lib/libc.so.6 END DEBUG Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark

Re: rlm_sql: readclients segmentation fault

+ dictionaries on remote NAS with the freeradius built. Unfortunately problem persists. Oh and I forgot: when I move definition of localhost from clients.conf to nas table I'm getting segmentation fault also when sending test requests from localhost as well. Anyone else experience similar behaviour? Milan

Re: rlm_sql: readclients segmentation fault

+ valgrind: http://pastebin.ca/444719 Am I doing something wrong? Nobody else experience similar behaviour? Please advise. PS: I like this http://pastebin.ca - it keeps the mailing lists clean... Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG

Re: How to force the group processing?

/message/20070412.100026.8b3bc4a9.en.html Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http://www.thenet.ch http://wlan.thenet.ch

Re: rlm_sql: readclients segmentation fault

Hi Alan, On Tue, Apr 17, 2007 at 03:54:25PM +0200, Milan Holub wrote: Hi Alan, On Tue, Apr 17, 2007 at 11:45:28AM +0200, Alan DeKok wrote: *Please* run the server under valgrind to find the source of these problems. == finally I managed to compile valgrind and can give you thus its

Re: rlm_sql: readclients segmentation fault

* Don't replace the entry. 252 */ (gdb) print Data $1 = (void *) 0x8276748 (gdb) print Current-Data Cannot access memory at address 0x29 == if you need more debug outpu then let me know... Milan Holub holub (at) thenet (dot) ch

rlm_perl: perl 5.6 segmentation fault when reloaded

; LEAVE; } +#endif #ifdef USE_ITHREADS } #endif Hope this can help someone... Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031

configurable failover segmentation fault when reloaded

... Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http://www.thenet.ch http://wlan.thenet.ch

Re: configurable failover segmentation fault when reloaded

Hi Alan, On Thu, Apr 19, 2007 at 10:46:51AM +0200, Alan DeKok wrote: I couldn't reproduce it, but I did track down and fix the underlying problem. == And I can confirm it's fixed. Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG

Re: rlm_sql: readclients segmentation fault

Hi Alan, On Thu, Apr 19, 2007 at 10:26:36AM +0200, Alan DeKok wrote: Ok... I've added more code to re-set pointers on cleanup, and create them on creation. == and yes it helped! no segmentation fault anymore Milan Holub holub (at) thenet (dot) ch

snmp accounting/statistic queries

radiusAccServUpTime` `snmpwalk -Cc -v 1 -m /devel/freeradius/cvs/work/mibs/RADIUS-STAT-MIB.txt -c verysecret localhost radiusStatUpTime` I remember all MIBs worked a week before or so... Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im

Re: snmp accounting/statistic queries

: radiusd SMUX open password: verysecret SMUX SMUX register oid: 1.3.6.1.2.1.67.1.1.1.1 SMUX register priority: -1 SMUX register operation: 2 SMUX SMUX register oid: 1.3.6.1.2.1.67.2.1.1.1 SMUX register priority: -1 SMUX register operation: 2 but statistics MIBs not registered/working yet... Milan Holub

rlm_sql: %{sql:long query} - length limit

configuration? Please advise. Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http://www.thenet.ch http://wlan.thenet.ch

Re: rlm_sql: %{sql:long query} - length limit

On Fri, Apr 20, 2007 at 01:25:05PM +0200, Milan Holub wrote: Is there a way how to specify more complex(longer) sql queries in freeradius configuration? == I've increased the value of MAX_STRING_LEN to 1024. Here is a patch: ndex: src/include/libradius.h

typo in raddb/Makefile

\ $(INSTALL) -m 640 certs/$$i $(R)$(raddbdir)/certs; \ done; \ fi Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http

Re: typo in raddb/Makefile

Hi Alan, On Wed, Apr 25, 2007 at 03:08:40PM +0200, Alan DeKok wrote: Milan Holub wrote: due to missing `;` and typo in variable in raddb/Makefile you can't build *deb package. Thanks. Try the following on a fresh checkout of the CVS head, if you're using any of the EAP types

Re: Accept users by NAS-IP-Address

| ++---+++-+ then if your your user will be in group called config_common(whatever you choose) then checkval module will perform checking base on multiple values found for NAS-IP-Address. Please mind the op field especially! Milan Holub

Re: typo in raddb/Makefile

= 2)) { struct stat buf; if ((stat(conf-make_cert_command, buf) == 0) Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax

request from unknown NAS vulnerability

43508 Server does not react on HUPs and stops responding to NASes defined correctly in NAS table. Is there something wrong with request cleanup for unknown client? Please advise. Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im

Accounting packets segmentation fault

-sockfd Cannot access memory at address 0x1016e33 (gdb) print packet-timestamp Cannot access memory at address 0x1016e7f Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031

checkrad + NoCat

to be allowed in NAS firewall to access http://$nas_ip:$nas_port/status NAS iptables -A INPUT -p tcp --dport $nas_port -s $radius_server -j ACCEPT I hope this can help someone... Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im

return code of session section ignored?

fails(eg. because of firewall) then by default we assume that the user is logged in... Please advise. PS: Observed on cvs head from Apr 30 but I've checked changes since then and I do not think this was fixed. Milan Holub holub (at) thenet (dot) ch

Re: dyndns.org domain in Clients.conf

Hi, just a guess: Ensure that you have following line radiusd.conf: hostname_lookups = yes Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998

Re: return code of session section ignored?

Hi Alan, On Thu, May 03, 2007 at 01:26:47PM +0200, Milan Holub wrote: As you can see group session returned REJECT but the user is accepted! == just politely wonder whether you've find some time to look at this issue... Milan Holub holub (at) thenet (dot) ch

radrelay.conf - can't parse properly

/freeradius/radrelay.conf[111]: No detail file specified in listen section Program exited with code 01. Please advise. Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031

Acct-Type behaviour

attr_filter.accounting_response } Is this a bug or a feature? Please advise. Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http://www.thenet.ch

Re: radrelay.conf - can't parse properly

:) == what would you suggest to people willing to use freeradius 2.0-preX and radrelay functionality? The old radrelay program was removed. My idea is to take a radrelay binary from freeradius 1.X and run it separately on the detail file created by freeradius 2.0. What's your opinion? Milan Holub

DB handles dying slowly

handles again and works fine for another several hours up to days... Please advise. Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http

Re: DB handles dying slowly

Hi all, On Wed, May 16, 2007 at 02:05:09PM +0200, Milan Holub wrote: Currently the only thing which helps is to restart freeradius. It creates the DB handles again and works fine for another several hours up to days... I have following nasty workaround which react on rlm_sql module

Re: radrelay.conf - can't parse properly

received signal SIGSEGV, Segmentation fault. [Switching to Thread 1024 (LWP 25154)] 0x08053826 in detail_recv (listener=0x8150fa8, pfun=0xbfffe9dc, prequest=0xbfffe9e0) at listen.c:1134 1134(*prequest)-simul_max = free_slot; (gdb) print (*prequest)-simul_max $1 = 775053123 Milan Holub

Re: DB handles dying slowly

head again) Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http://www.thenet.ch http://wlan.thenet.ch

Client-IP-Address not logged in detail

binary) radrelay-detail I've compiled --without-udpfromto option - not sure whether it might have any impact. Is there something screwed with my config or the Client-IP-Address attribute is really missing? Thanks for reply. Milan Holub holub (at) thenet (dot) ch

radrelay patch for 1.1.6

- stats.startup; fprintf(stderr, %s: Running and Processing Records.\n,progname); I believe it should be fixed in 1.X... Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr

Freeradius-Proxied-To, radrelay and 2.0

, in module server-core component server-core ... ERROR: Failed to find live home server for realm A Finished request 449 state 6 ... Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern

Re: Accounting-Response with invalid signature

the correct way is to fix your NAS to create the signature according to rfc. Anyway I can send you the patch for testing if needed. Regards Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern

missing entry for evaluate.c in Makefile.in

+ $(LIBTOOL) --mode=compile $(CC) $(CFLAGS) -c evaluate.c + # # Helper programs # Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http

Re: rlm_sql: processing radcheck radgroupcheck

Hi All, On Thu, Apr 12, 2007 at 12:00:26PM +0200, Milan Holub wrote: Here is my patch which enables read_groups option and targets the issue above(rejects user immediately if it's found that the radcheck failed): == it looks like nobody was interested... but anyway the patch contained a bug

Re: DB handles dying slowly

Hi all, However any comments/experience/suggestions to the cause of DB handles dying are welcome! == mea culpa! just to make clear: I was using slightly hacked rlm_sql.c and I did not release the socket when returning from the function... Milan Holub holub (at) thenet (dot) ch

Re: DB handles dying slowly

Hi Alan, On Wed, May 16, 2007 at 03:38:27PM +0200, Milan Holub wrote: == only during (re)-start I'm getting following message: ERROR: Cannot find a configuration entry for module sql_restart. == with latest CVS head the garbage ERROR message is no more present thanks:) Milan Holub holub

Re: Freeradius-Proxied-To, radrelay and 2.0

Hi Alanothers, On Mon, May 21, 2007 at 04:57:51PM +0200, Alan Dekok wrote: Milan Holub wrote: I wonder whether there is any use for Freeradius-Proxied-To attribute with freeradius 2.0. It should be there for backwards compatibility, but there are likely better ways of achieving

Re: Freeradius-Proxied-To, radrelay and 2.0

, home server FOREIGN_HOMESERVER_IP port 1813 Is this a bug with preproxy_users or it's just a feature? Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax

variables expansion in config files

, shortname, type, secret FROM ${nas_table} where secret 'DISABLED' group by ipaddr ... It's related at least to all variables defined in sql.conf. Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH

Re: variables expansion in config files

Hi Alan, On Tue, May 29, 2007 at 11:37:15AM +0200, Alan Dekok wrote: The fix has already been committed. == yes, it works, thanks:) Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern

Segmentation fault on conflicting packet

the sensitive part is receiving duplicate packet during the processing of original packet. Any ideas? Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax

cvs.freeradius.org failure?

time cvs [login aborted]: received interrupt signal == killed by ctrl-c Please advise. With regards. Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax

Re: cvs.freeradius.org failure?

Hi Alan, On Mon, Jun 25, 2007 at 11:08:31AM +0200, Alan DeKok wrote: Milan Holub wrote: is it possible that something is wrong with freeradius cvs? Yes. I think the machine's disk is full again. I'll ping the admin. == thanks. In any case, I think the conflicting packet problem