rgreiner wrote:
I was making some tests with the freeradius 2 install, and found that
the creation schema for the badusers table for dialupadmin (in the
/dialup_admin/sql/mysql folder) has 2 problems:
[...]
Fixed in CVS. Thanks for the report.
--
Nicolas Baradakis
-
List info
(0x800d32000)
libthr.so.2 = /lib/libthr.so.2 (0x800e4c000)
libc.so.7 = /lib/libc.so.7 (0x800632000)
I don't see why you would need to add -pthread to the linker command line.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
the directory (it is empty anyway) or remove
--with-experimental-modules from the configure flags.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
should
never block. It's only there to catch a corner case where the file is
renamed before rlm_sql_log finishes writing.
I note rlm_sql_log and radsqlrelay are interacting exactly the same way
as rlm_detail and radrelay do.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http
Patrice Oliver wrote:
Frank Winkler a écrit :
On what platform are you compiling?
Debian.
I will try to build a packet.
That's the preferred approach.
See http://wiki.freeradius.org/Build#Building_Debian_packages
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http
to know how the calculate the new specs for the new
servers.
Any ordinary PC will do fine. The number of req/s will likely be
limited by the backend database.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
with the LSB functions for the Debian package.
You may look at debian/freeradius.init in CVS head.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
outdated. It doesn't make sense to use --with-static-modules=python
with current version of Python.
As posted to the list, the correct configure line is:
$ ./configure --with-experimental-modules
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list
no HTML to the list.
You might set Autz-Type in the users files to run different modules.
See http://freeradius.org/radiusd/doc/Autz-Type
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
snapshot
from the website tomorrow.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
#How_do_I_log_failed_login_attempts_in_a_SQL_database.3F
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
. They aren't hard-coded
in the config, that's why you can't see them in the debug output of
the parser.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
George Embrey wrote:
Has anybody published any FreeRadius 2.0 Debian (.deb) Packages yet ?
The wiki explains how to build a Debian package yourself from
a FreeRADIUS tarball.
http://wiki.freeradius.org/index.php?title=Build#Building_Debian_packages
--
Nicolas Baradakis
-
List info
you can write INSERT ... ON DUPLICATE KEY
UPDATE ... in a single statement. However I have no idea if this
syntax can work with other databases than MySQL.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
script.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
HAVE_SYS_SOCKET_H
+#include sys/socket.h
+#endif
+
#ifdef HAVE_UNISTD_H
#include unistd.h
#endif
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
systems.
This should be fixed in CVS, but unfortunately after the release
of 2.0.0-pre1. I think the problem you describe is the same as
bug #454 in the bugzilla.
http://bugs.freeradius.org/show_bug.cgi?id=454
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org
radiusd.conf.
This isn't the path set by dpkg-buildpackage during the build. Please
run which radwho to double check you aren't running a binary from
an older installation. I guess you have two binaries in /usr/bin/radwho
and /usr/local/bin/radwho.
--
Nicolas Baradakis
-
List info/subscribe
for example.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Arran Cudbard-Bell wrote:
Dynamic expansion of reply items in SQL is broken
in current cvs head.
Reply-Message = Welcome %{User-Name} At wherever
I'd suggest to try using back quotes in the table of reply items:
Reply-Message = `Welcome %{User-Name} At wherever`
--
Nicolas Baradakis
#Building_RedHat_packages
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
to get report it is the case before editing
the Depends line.
I also note there is a related report on the Debian BTS. However
the reporter didn't provide feedback whether dialupadmin works
with php5 or not.
http://bugs.debian.org/412701
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe
://wiki.freeradius.org/Build#Building_Debian_packages
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
be grateful.
Thanks for the feedback.
I've added in CVS the support for ./configure --without-docdir. The
change should be in 1.1.6.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
David Wood wrote:
In message [EMAIL PROTECTED], Nicolas
Baradakis [EMAIL PROTECTED] writes
David Wood wrote:
There's two other things I'm currently modifying the source to achieve,
on which I'd appreciate comments.
patch-doc::Makefile surrounds the contents of the install target
wanted.
Every downstream distribution has its own mechanism to handle the
config files. I don't know the opinion of the others, but I'm unsure
about a configure option that's useful for the FreeBSD port only.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org
Rob Wright wrote:
I'm trying to setup Freeradius 1.1.5 and I'm having a problem during 'make'.
I'm using Debian Etch, with Perl 5.8.8.
FreeRADIUS compilation on Debian is covered in the wiki.
http://wiki.freeradius.org/Build#Building_Debian_packages
--
Nicolas Baradakis
-
List info
));
- PQfinish(pg_sock-conn);
+ sql_close(sqlsocket, config);
return SQL_DOWN;
}
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
that.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
think they're to be run by the load balancing server. They could
be run by general purpose supervision tools like Nagios.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Alan DeKok wrote:
Nicolas Baradakis wrote:
Keepalived will monitor the FreeRADIUS proxies. The health check is
configured with a MISC_CHECK stanza in keepalived.conf. You have
to run radclient and test whether the server returns Access-Accept,
that's all.
This is what Status-Server
.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
would definitely be appreciated.
I'd suggest to use LVS in a direct routing setup.
http://www.linuxvirtualserver.org/VS-DRouting.html
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
a manpage.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
install g++
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
#Building_Debian_packages
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
all the accounting
data at a fixed hour.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
database, so the accounting data
is written to a central database without slowing down the RADIUS
servers. radsqlrelay is to be found in the FreeRADIUS source tarball,
you could read the rlm_sql_log and radsqlrelay manpages for more
details.
--
Nicolas Baradakis
-
List info/subscribe
(5) manpage.
PS: Please don't reply to freeradius-devel, this is a question for
the freeradius-users mailing list.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Peter Nixon wrote:
On Mon 25 Sep 2006 19:05, Nicolas Baradakis wrote:
That has nothing to do with FreeRADIUS. The source address of an
outgoing UDP packet is chosen by the kernel according to the local
network configuration.
I had this problem previously with FreeRADIUS where radius had
Peter Nixon wrote:
On Tue 26 Sep 2006 11:55, Nicolas Baradakis wrote:
However, a proxy request is different, because it's a new outgoing
packet. In this case, we don't force the source IP in FreeRADIUS and
we shouldn't do so because the NAS and the realm server are possibly
this. Is there any way to do
it?
Why is this a problem?
I note RADIUS packets are using UDP, which means they're connectionless.
I think you don't want a machine from the cluster send a proxy request,
and a different machine get the proxy reply. This wouldn't work.
--
Nicolas Baradakis
-
List info
Angel L. Mateo wrote:
El lun, 25-09-2006 a las 14:46 +0200, Nicolas Baradakis escribió:
Angel L. Mateo wrote:
Freeradius is working fine with this configuration, except the proxy
module. The problema I have is that proxy requests are originated with
the IP address of the member
Trymp wrote:
I want to get FreeRadius 2.0.0 pre version.
$ cvs -d :pserver:[EMAIL PROTECTED]:/source checkout module-name
what is module-name??
Please no HTML to the list.
The module name is radiusd.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org
to build FreeRADIUS
using ./configure --without-rlm_perl
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
*result,
char *buffer, size_t buflen);
enum nss_status _nss_radius_getpwuid_r(uid_t uid, struct passwd *result, char
*buffer, size_t buflen);
More info in the glibc manual:
http://www.gnu.org/software/libc/manual/html_node/Name-Service-Switch.html
--
Nicolas Baradakis
-
List info/subscribe
Mitaine Yoann wrote:
the only problem is that preprocess is present in the authorize
section in the radiusd.conf file of the radius server A
You should check also the config of the radius server B.
And please stop posting with HTML to the mailing list.
--
Nicolas Baradakis
-
List info
in Access-Reject
packets per RFC 2865. (section 5.44)
See http://www.ietf.org/rfc/rfc2865.txt
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
with the
following commands:
$ configure --enable-developer
$ make
$ su -
# make install
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Jonathan Casiot wrote:
I've downloaded the most recent source, freeradius-1.1.3.tar.gz, and I'd
like to verify the file against the PGP signature but I can't find the
public key anywhere. Can someone point me to it's location?
http://freeradius.org/pgp/[EMAIL PROTECTED]
--
Nicolas
Yervand Petrosyan wrote:
Really, it would be reasonably to have this option
configurable.
As always, patches are welcome.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
(autoconf, libtool, libltld) have been upgraded to a recent
version.
It was reported to work out of the box on Mac OS 10.4.7 (ie ./configure
make and make install)
http://lists.freeradius.org/pipermail/freeradius-devel/2006-August/010131.html
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe
/doc/variables.txt
If you want to pass the characters % to MySQL, you must use the
following syntax: %%H:%%i:%%S
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Alexander Serkin wrote:
Nicolas Baradakis wrote:
Please create a patch with diff -u radsqlrelay.orig radsqlrelay
and post it to the list. I'll add it in version 1.1.3.
Here it is:
--- radsqlrelay.orig2006-08-16 15:40:58.220277000 +0400
+++ radsqlrelay 2006-08-16 17:53
--with-experimental modules as a configure option in it cause i need the
sqlcounter.
sqlcounter is in the stable modules list in versions = 1.1.0.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
, but...
Will the accounting table partitioning help?
Maybe you could use radsqlrelay for accounting data, so FreeRADIUS
doesn't interact with the database anymore. See the manpages for
rlm_sql_log(5) and radsqlrelay(8) for more details.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http
Alexander Serkin wrote:
Nicolas Baradakis wrote:
Maybe you could use radsqlrelay for accounting data, so FreeRADIUS
doesn't interact with the database anymore. See the manpages for
rlm_sql_log(5) and radsqlrelay(8) for more details.
didn't think about this yet. Is it possible
Alexander Serkin wrote:
Finally radsqlrelay works for me with oracle too after patching 2
strings as you said.
Please create a patch with diff -u radsqlrelay.orig radsqlrelay
and post it to the list. I'll add it in version 1.1.3.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See
the FreeRADIUS modules.
$ cvs -d :pserver:[EMAIL PROTECTED]:/source login
CVS password: anoncvs
$ cvs -d :pserver:[EMAIL PROTECTED]:/source checkout -r branch_1_1 radiusd
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
differences.
Would that make it a good idea to authenticate thru LDAP *but* the
accounting is handled thru mySQL ? Anybody have done this or am I
talking nonsense here?
This is common to use OpenLDAP for auth and MySQL for acct.
http://freeradius.org/radiusd/doc/ldap_howto.txt
--
Nicolas
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
libmysqlclient_r.so, the thread safe
version of the client library.
Either configure MySQL with --enable-thread-safe-client, or configure
FreeRADIUS with --without-threads.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
://wiki.freeradius.org/index.php/FreeRADIUS_Wiki:FAQ
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
: anoncvs
$ cvs -d :pserver:[EMAIL PROTECTED]:/source checkout -r branch_1_1 radiusd
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
/eap_tls.h:138: warning: no semicolon at end of struct or union
./../libeap/eap_tls.h:141: parse error before '*' token
...
What could be wrong?
There is a few problems in the autoconf tests in version 1.1.1.
Please try 1.1.2.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe
if you could backport
the changes from CVS to 1.1.2, run tests to check the new code, and
send unified diff to the list.
http://freeradius.org/radiusd/doc/DIFFS
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Matt wrote:
There are no DB handles available instead of reconnecting... the
only way I've found to reconnect, is to restart...
Any comments or thoughts on this problem?
Please upgrade FreeRADIUS to version 1.1.2.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http
right, but unfortunately you didn't pick up the easiest method.
This question has been asked so many many times on the mailing list
that now it's in the FAQ. (but it appears people are too lazy to read
the FAQ)
http://wiki.freeradius.org/index.php/FreeRADIUS_Wiki:FAQ
Nicolas Baradakis
--
A: Yes
://freeradius.org/radiusd/doc/rlm_sql
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-Name == bar, Proxy-To-Realm :=
foo.net
Using attr_filter isn't an option since this only filters replys.
The attr_filter module can be used in both pre-proxy and post-proxy
sections.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
:)
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
AcctSessionId = '%{Acct-Session-Id}' \
AND UserName = '%{User-Name}' \
AND NASIPAddress= '%{NAS-IP-Address}';
You're missing a '\' at the end of the 4th line.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Ross Hosman wrote:
Just thought I'd let you know your email goes into my yahoo spam folder...
And please no HTML to the list.
http://freeradius.org/list/users.html
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
OpenLDAP/include dir and I have a libldap_r directory in my
OpenLDAP/libraries dir.
Any idea of what is wrong ? Is it a version problem and so, should I
try with older versions ? Did I miss something important ?
Please look for error messages in src/modules/rlm_ldap/config.log
--
Nicolas
RobertB wrote:
At present it is not possible to do something like: try sql, if not
available try sql1.
Did you try to put the module in a redundant or a group stanza?
http://freeradius.org/radiusd/doc/configurable_failover
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http
in the documentation? There is already an
entry How do I log failed login attempts in a SQL database? in
the FAQ.
http://wiki.freeradius.org/index.php/FreeRADIUS_Wiki:FAQ
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Glenn Swonk wrote:
When I configure with the following:
./configure --prefix=/Radius
make all
make install
the 'make install' fails.
Any ideas?
It's a known bug, and it'll be fixed in 1.1.2.
http://bugs.freeradius.org/show_bug.cgi?id=354
--
Nicolas Baradakis
-
List
/FreeRADIUS_Wiki:FAQ
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
://wiki.freeradius.org/index.php/FreeRADIUS_Wiki:FAQ
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
out there have any ideas?
It looks like bug #98.
http://bugs.freeradius.org/show_bug.cgi?id=98
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
freeradius on my
debian system?
Use dpkg-buildpackage, as explained in the FAQ.
http://wiki.freeradius.org/index.php/FreeRADIUS_Wiki:FAQ
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
a known problem, and it'll be fixed in 1.1.2.
Just add this in src/lib/Makefile:
install:
$(INSTALL) -d -m 755 $(R)$(libdir)
...
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
.
http://wiki.freeradius.org/index.php/FreeRADIUS_Wiki:FAQ
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Jonathan De Graeve wrote:
I want to publish my enhancements to dialupadmin to the freeradius
devels.
How can I do this?
Please post your patches to the bugzilla.
http://bugs.freeradius.org/
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list
Luca Corti wrote:
On Tue, 2006-04-11 at 18:46 +0200, Nicolas Baradakis wrote:
You need to specify Acct-Type during preacct. It's doable if you
can write an acct_users file to set the Acct-Type.
Did you try to write an acct_users file? Try to distinguish your
group with the value of one
can write an acct_users file to set the Acct-Type.
If you need to do it with MySQL, I've seen a patch on the bugzilla.
http://bugs.freeradius.org/show_bug.cgi?id=264
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
of such an example, it'd help)
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
maintaining the necessary files to build the
Debian packages in our CVS. Anybody can easily build a Debian package
of the freeradius-postgresql module from a sources tarball with a
single command line. (dpkg-buildpackage)
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http
(admittedly with it's own set of problems) would be an official freeradius
apt repository.
This doesn't solve anything. The problem is that such packages aren't
distributable in binary form. If someone provides a repository, he
becomes an outlaw. (exaggeratedly)
--
Nicolas Baradakis
-
List info
.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
mailing list a few weeks ago, and we
planed to add support for GnuTLS, which is released under the LGPL.
It will take more time to write source code than to edit the license,
but I believe it's a better solution in the long term.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http
in production environment for more than a year and never had any problem,
even under heavy load. (unlike radrelay)
In version 1.1.x there are manpages for radsqlrelay and rlm_sql_log.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
explains how
to do this:
http://wiki.freeradius.org/index.php/FreeRADIUS_Wiki:FAQ
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-rw-r--r-- 1 root wheel 105640 Apr 5 10:39 libnisam.a
-rw-r--r-- 1 root wheel5472 Apr 5 10:39 libvio.a
I don't see the file libmysqlclient_r.so in your setup.
Re-install MySQL with thread support, or configure FreeRADIUS without
thread support.
--
Nicolas Baradakis
-
List info
/licenses/license-list.html#GPLIncompatibleLicenses
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
freeradius
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Franck wrote:
I have the error with the version 1.1.1, and the snapshot-20060604.
I have the log available for people who want to have a look.
Please copy the log on some website, and post the URL to the list.
You should also tell us the operating system you're using.
--
Nicolas Baradakis
or download
a new snapshot tomorrow.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Luca wrote:
What i need is a tipical ldap account ldif layout, 'cause this is the
first time i work with ldap and i hope to do my best.
There're LDAP schema examples in the version 1.1.1 tarball under the
doc/examples directory.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See
1 - 100 of 331 matches
Mail list logo