unsubscribe

unsuscribe - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Segmentation fault on sigHUP

unused memory will be revisited and thus this workaround won't be needed anymore. Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998

Re: Segmentation fault on sigHUP

Hi Alan, On Wed, Apr 11, 2007 at 03:45:18PM +0200, Alan DeKok wrote: > Milan Holub wrote: > > somewhere in this list there was already mentioned that current CVS > > version causes segmentation fault when received HUP signal(kill -HUP pid) - > > depending on > > the c

Re: Segmentation fault on sigHUP

The web site of the book > http://deployingradius.com/blog/ - The blog > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Berne

Segmentation fault for SNMP query

!mainconfig.clients) Hope this helps someone. Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http://www.thenet.ch http://wlan.thenet.ch -

rlm_sql, readclients=yes: multiple NASes with same IP

- 1.53 +++ src/main/client.c 11 Apr 2007 15:36:19 - @@ -225,7 +225,7 @@ * Duplicate? */ if (!rbtree_insert(clients->trees[client->prefix], client)) { - return 0; + return 1; } #ifdef WITH_SNMP I hope it helps someone

Re: rlm_sql, readclients=yes: multiple NASes with same IP

asname, shortname, type, secret FROM ${nas_table} group by nasname I hope this helps someone. > > Alan DeKok. > -- > http://deployingradius.com - The web site of the book > http://deployingradius.com/blog/ - The blog > - > List info/subscribe/uns

Re: Generating AAA message for freeradius.

so libraries for various programming languages available(I know at least about php: http://cz2.php.net/manual/en/ref.radius.php) > > Regards, > Prateek > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Milan Holub holub (at) thenet (dot) ch

Re: Simultaneous-Use problem

le to login at the same time on different > terminal / pc > > I already try to change the op on radcheck from '==' become ':=' or > '=' but the same problem still persist > > What could be wrong ? > > TIA > > PD > > - > L

Re: User never get disconnected (was Re: Simultaneous-Use problem)

gt; TIA > > PD > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland

Re: Segmentation fault for SNMP query

Hi Alan, On Wed, Apr 11, 2007 at 05:51:16PM +0200, Alan DeKok wrote: > Milan Holub wrote: > > Hi all, > > > > when I've compiled in snmp support (--with-snmp) on current cvs head I got > > following segmentation fault(does not matter whether NAS are stor

rlm_sql: read_groups parameter ignored

}, {"deletestalesessions", PW_TYPE_BOOLEAN, offsetof(SQL_CONFIG,deletestalesessions), NULL, "yes"}, {"num_sql_socks", PW_TYPE_INTEGER, I believe this could be finally added to CVS... Milan Holub holub (at) thenet (dot) ch -

rlm_sql: processing radcheck & radgroupcheck

;request->config_items, &check_tmp); + } else { + /* +* check items did not match; do not process groups; return REJECT immediately +*/ + return RLM_MODULE_REJECT;

Re: sql auth problems with 2.0.0-pre

ype Local > auth: No password configured for the user ==> post your radiusd.conf; you probably explicitly overrides the result of sqlauth by setting the Auth-Type to Local somewhere in your config... > > > -- > Sincerely Yours, > Alexander > - > List info/subscribe

rlm_sql: Bug in stripping output of dynamic strings {sql:...}

uration). My workaround for this was to output some additional dummy character from within mysql by surrounding the queries by mysql concat function: %{sql:select concat((select count(*) from radacct where %username='%{SQL-User-Name}'),'\n')} ie: %{sql: select concat((), '\n&#

Re: Segmentation fault for SNMP query

( If you have some ideas, then please advise. > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-301

Re: rlm_sql: Bug in stripping output of dynamic strings {sql:...}

Hi Alan, On Sat, Apr 14, 2007 at 03:26:11AM +0200, Alan DeKok wrote: > Milan Holub wrote: > > Unfortunately I'm getting the output stripped by last character(byte): > > instead of getting 37 for session_count I get 3, instead of getting 1563 > > for noresetcounter

Re: Segmentation fault for SNMP query

this thread) == snmp not working after reload - debug flags survive reload (good!) - with my config each reload eats additional 620k of memory per thread! Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgens

rlm_sql: readclients segmentation fault

y there must be something rotten in latest cvs commits... Please advise. Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 433

Re: Segmentation fault for SNMP query

space in memory than at the beginning(and it's incrementing lineary each HUP). Please advise. Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031

Re: rlm_sql: processing radcheck & radgroupcheck

eful) module for the future. Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http://www.thenet.ch http://wlan.thene

Re: rlm_sql: readclients segmentation fault

and i'm binding to a single ip instead of wildcarding. ==> I've tried but without any impact:-( Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4

Re: Segmentation fault for SNMP query

ia HUP or snmp-write) ==> that's great! Thanks a lot, Alan. Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http://www.thenet.ch http

Re: Segmentation fault for SNMP query

ee () #2 0x0804f0c5 in cf_section_free () #3 0x0804f1f7 in cf_section_free () #4 0x08055b34 in read_mainconfig () #5 0x08058f5e in main () #6 0x4024714f in __libc_start_main () from /lib/libc.so.6 >>>END DEBUG Milan Holub holub (at) thenet (dot) ch

Re: rlm_sql: readclients segmentation fault

ne else experience similar behaviour? Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http://www.thenet.ch http://wlan.thenet.ch ---

Re: rlm_sql: readclients segmentation fault

ponding NAS is stored in mysql nas table) ==> full -X debug output + valgrind: http://pastebin.ca/444719 Am I doing something wrong? Nobody else experience similar behaviour? Please advise. PS: I like this http://pastebin.ca - it keeps the mailing lists clean... Milan Holub holub (at) thenet (do

Re: How to force the group processing?

o link to wiki): http://archives.free.net.ph/message/20070412.100026.8b3bc4a9.en.html Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http://www.thenet.ch

Re: rlm_sql: readclients segmentation fault

Hi Alan, On Tue, Apr 17, 2007 at 03:54:25PM +0200, Milan Holub wrote: > Hi Alan, > On Tue, Apr 17, 2007 at 11:45:28AM +0200, Alan DeKok wrote: > > *Please* run the server under valgrind to find the source of these > > problems. > > ==> finally I managed to compil

Re: rlm_sql: readclients segmentation fault

if (result == 0) { 250 /* 251 * Don't replace the entry. 252 */ (gdb) print Data $1 = (void *) 0x8276748 (gdb) print Current->Data Cannot access memory at address 0x29 ==> i

rlm_perl: perl 5.6 & segmentation fault when reloaded

1277,7 @@ FREETMPS; LEAVE; } +#endif #ifdef USE_ITHREADS } #endif Hope this can help someone... Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerl

configurable failover & segmentation fault when reloaded

807d858 "fix_sqlcounter_reply" (gdb) ==> I wonder especially where the $1 = 0x81fda70 "instance`" comes from... This should be probably fixed before 2.0 released... Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Ser

Re: configurable failover & segmentation fault when reloaded

Hi Alan, On Thu, Apr 19, 2007 at 10:46:51AM +0200, Alan DeKok wrote: > I couldn't reproduce it, but I did track down and fix the underlying > problem. ==> And I can confirm it's fixed. Milan Holub holub (at) thenet (dot) ch -- TheNet-I

Re: rlm_sql: readclients segmentation fault

Hi Alan, On Thu, Apr 19, 2007 at 10:26:36AM +0200, Alan DeKok wrote: > Ok... I've added more code to re-set pointers on cleanup, and create > them on creation. ==> and yes it helped! no segmentation fault anymore Milan Holub holub (at) t

snmp accounting/statistic queries

lhost radiusAccServUpTime` `snmpwalk -Cc -v 1 -m /devel/freeradius/cvs/work/mibs/RADIUS-STAT-MIB.txt -c verysecret localhost radiusStatUpTime` I remember all MIBs worked a week before or so... Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG

Re: snmp accounting/statistic queries

UX open progname: radiusd SMUX open password: verysecret SMUX SMUX register oid: 1.3.6.1.2.1.67.1.1.1.1 SMUX register priority: -1 SMUX register operation: 2 SMUX SMUX register oid: 1.3.6.1.2.1.67.2.1.1.1 SMUX register priority: -1 SMUX register operation: 2 but statistics MIBs not registered/worki

Re: rlm_perl: perl 5.6 & segmentation fault when reloaded

= detach" and defined the empty detach function(in perl_module.pm: "sub detach {}" ==> but the same negative result:( Which means I have to stay with my patch... Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, i

rlm_sql: %{sql:} - length limit

ocket id: 2 I did not test yet but I think the string length limit is common for all %{sql:} dynamic strings(not only for those in [rad|group][check|reply] tables.). Is there a way how to specify more complex(longer) sql queries in freeradius configuration? Please advise. Milan Holub holu

Re: rlm_sql: %{sql:} - length limit

On Fri, Apr 20, 2007 at 01:25:05PM +0200, Milan Holub wrote: > Is there a way how to specify more complex(longer) sql queries in freeradius > configuration? ==> I've increased the value of MAX_STRING_LEN to 1024. Here is a patch: ndex: src/inclu

typo in raddb/Makefile

f; do \ $(INSTALL) -m 640 certs/$$i $(R)$(raddbdir)/certs; \ done; \ fi Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330

Re: typo in raddb/Makefile

Hi Alan, On Wed, Apr 25, 2007 at 03:08:40PM +0200, Alan DeKok wrote: > Milan Holub wrote: > > due to missing `;` and typo in variable in raddb/Makefile you can't build > > *deb package. > > Thanks. > > Try the following on a fresh checkout of the CVS head,

Re: Accept users by NAS-IP-Address

IP-Address | += | 1.2.3.5 | ++---+++-+ then if your your user will be in group called "config_common"(whatever you choose) then checkval module will perform checking base on multiple values found for NAS-IP-Address. Please mind

Re: typo in raddb/Makefile

(conf->make_cert_command && (debug_flag >= 2)) { struct stat buf; if ((stat(conf->make_cert_command, &buf) == 0) && Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechn

request from unknown NAS vulnerability

react on HUPs and stops responding to NASes defined correctly in NAS table. Is there something wrong with request cleanup for unknown client? Please advise. Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr

Accounting packets & segmentation fault

3 (gdb) print packet->sockfd Cannot access memory at address 0x1016e33 (gdb) print packet->timestamp Cannot access memory at address 0x1016e7f Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 C

checkrad + NoCat

and your freeradius server has to be allowed in NAS firewall to access http://$nas_ip:$nas_port/status NAS> iptables -A INPUT -p tcp --dport <$nas_port> -s <$radius_server> -j ACCEPT I hope this can help someone... Milan Holub holub (at) thenet (dot) ch ---

return code of "session" section ignored?

y above I wanted to assure that when the checkrad fails(eg. because of firewall) then by default we assume that the user is logged in... Please advise. PS: Observed on cvs head from Apr 30 but I've checked changes since then and I do not think this was fi

Re: dyndns.org domain in Clients.conf

Hi, just a guess: Ensure that you have following line radiusd.conf: hostname_lookups = yes Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998

Re: return code of "session" section ignored?

Hi Alan, On Thu, May 03, 2007 at 01:26:47PM +0200, Milan Holub wrote: > As you can see "group session" returned REJECT but the user is accepted! ==> just politely wonder whether you've find some time to look at this issue... Milan Holub holub

radrelay.conf - can't parse properly

0, 0, 0, 0, 0, 0, 0}, u6_addr32 = {0, 0, 0, 0} (gdb) print data->max_outstanding $8 = 100 (gdb) print data->outstanding $9 = (int *) 0x0 (gdb) continue Continuing. /etc/freeradius/radrelay.conf[111]: No detail file specified in listen section Program exited with code 01. Pleas

Acct-Type behaviour

} detail sql attr_filter.accounting_response } Is this a bug or a feature? Please advise. Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4

Re: radrelay.conf - can't parse properly

d by freeradius 2.0. What's your opinion? Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http://www.thenet.ch http://wlan.thenet.ch ---

DB handles dying slowly

thing which helps is to restart freeradius. It creates the DB handles again and works fine for another several hours up to days... Please advise. Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018

Re: DB handles dying slowly

Hi all, On Wed, May 16, 2007 at 02:05:09PM +0200, Milan Holub wrote: > Currently the only thing which helps is to restart freeradius. It > creates the DB handles again and works fine for another several hours up to > days... > I have following nasty "workaround" which r

Re: radrelay.conf - can't parse properly

equest)->simul_max $1 = 775053123 Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http://www.thenet.ch http://wlan.thenet.ch ---

Re: DB handles dying slowly

y 10 the message might/might not be there with current cvs head...(I'll let you know when I do the build against cvs head again) Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129

Client-IP-Address not logged in detail

fix) add_clientip # create detail file for radrelay(1.X binary) radrelay-detail I've compiled --without-udpfromto option - not sure whether it might have any impact. Is there something screwed with my config or the Client-IP-Address attribute is really missing? Thanks fo

radrelay patch for 1.1.6

rtup == now) ? 1 : now - stats.startup; fprintf(stderr, "%s: Running and Processing Records.\n",progname); I believe it should be fixed in 1.X... Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 1

Re: radrelay patch for 1.1.6

Hi Alan, On Thu, May 17, 2007 at 05:56:06PM +0200, Alan DeKok wrote: > Milan Holub wrote: > > Here is my tested patch: > > Are you sure? > > ... > > } while(0); > > - if (r_args->

Freeradius-Proxied-To, radrelay and 2.0

Failed to find live home server for realm A ... Rejecting request 438 due to lack of any response from home server port 1813 FAILURE: Marking home server port 1813 as dead. WARNING: Unresponsive child (id 0) for request 438, in module component ... ERROR: Failed to

Re: Accounting-Response with invalid signature

h the correct way is to fix your NAS to create the signature according to rfc. Anyway I can send you the patch for testing if needed. Regards Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018,

missing entry for evaluate.c in Makefile.in

+ $(LIBTOOL) --mode=compile $(CC) $(CFLAGS) -c evaluate.c + # # Helper programs # Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http

Re: rlm_sql: processing radcheck & radgroupcheck

Hi All, On Thu, Apr 12, 2007 at 12:00:26PM +0200, Milan Holub wrote: > Here is my patch which enables read_groups option and targets the issue > above(rejects user immediately if it's found that the radcheck failed): > ==> it looks like nobody was interested... but anyway the

Re: DB handles dying slowly

Hi all, > > However any comments/experience/suggestions to the cause of "DB handles > > dying" are welcome! ==> mea culpa! just to make clear: I was using slightly hacked rlm_sql.c and I did not release the socket when returning from the function... Milan Holub h

Re: DB handles dying slowly

Hi Alan, On Wed, May 16, 2007 at 03:38:27PM +0200, Milan Holub wrote: > ==> only during (re)-start I'm getting following message: > ERROR: Cannot find a configuration entry for module "sql_restart". ==> with latest CVS head the garbage ERROR message is no more pre

Re: Freeradius-Proxied-To, radrelay and 2.0

Hi Alan&others, On Mon, May 21, 2007 at 04:57:51PM +0200, Alan Dekok wrote: > Milan Holub wrote: > > I wonder whether there is any use for Freeradius-Proxied-To attribute > > with freeradius 2.0. > > It should be there for backwards compatibility, but there ar

Re: Freeradius-Proxied-To, radrelay and 2.0

here was an attempt to send the packet to remote home_server: Proxying request 0 to realm LOCAL, home server port 1813 Is this a bug with "preproxy_users" or it's just a feature? Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG

variables expansion in config files

nded in sql/mysql-dialup.conf" ... nas_query = "SELECT id, ipaddr, shortname, type, secret FROM ${nas_table} where secret <> 'DISABLED' group by ipaddr" ... It's related at least to all variables defined in sql.conf. Milan Holub holub (at) thenet (dot) ch ---

Re: variables expansion in config files

Hi Alan, On Tue, May 29, 2007 at 11:37:15AM +0200, Alan Dekok wrote: > The fix has already been committed. ==> yes, it works, thanks:) Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 C

Segmentation fault on conflicting packet

packet after 0.000696 sec. Which I think was a duplicate packet due to some network problem. Packet 11920 was in the middle of processing(finished writing into detail file, but not yet written to database). Segmentation fault occured when another request was received. I was not able to simulate by se

cvs.freeradius.org failure?

ns for a long time cvs [login aborted]: received interrupt signal ==> killed by ctrl-c Please advise. With regards. Milan Holub holub (at) thenet (dot) ch -- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 99

Re: cvs.freeradius.org failure?

Hi Alan, On Mon, Jun 25, 2007 at 11:08:31AM +0200, Alan DeKok wrote: > Milan Holub wrote: > > is it possible that something is wrong with freeradius cvs? > > Yes. I think the machine's disk is full again. I'll ping the admin. ==> thanks. > > In any cas