Re: [RADIATOR] New Error messages

2013-01-18 Thread Michael Hulko
The changelog for version 4.8 says:
- Fixed an issue where truncated EAP-Message requests would cause a log
message like Could not load EAP module Radius::EAP_ . This is now
logged as invalid EAP type in EAP request and rejected. Reported by
Daniel Rocha.

Has this crept back into version 4.10 ??

MH


On 2013-01-17, at 12:31 PM, Alexander Hartmaier wrote:

 On 2013-01-17 17:31, Michael Hulko wrote:
 Lately I've been seeing these errors daily which were not there prior to the 
 new year:
 
 Jan  8 20:18:36 riptide-2.vm.its.uwo.pri /usr/bin/radiusd[23692]: Could
 not load EAP module Radius::EAP_66: Can't locate Radius/EAP_66.pm in @INC
 (@INC contains: . /usr/local/lib64/perl5 /usr/local/share/perl5
 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl
 /usr/lib64/perl5 /usr/share/perl5 .) at (eval 3683243) line 3, GEN1
 line 699827. Jan  8 21:35:18 riptide-5.vm.its.uwo.pri
 /usr/bin/radiusd[622]: Could not load EAP module Radius::EAP_155: Can't
 locate Radius/EAP_155.pm in @INC (@INC contains: . /usr/local/lib64/perl5
 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl
 /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5 .) at
 (eval 1968782) line 3, GEN1 line 352731. Jan  8 21:47:05
 riptide-5.vm.its.uwo.pri /usr/bin/radiusd[622]: Could not load EAP module
 Radius::EAP_180: Can't locate Radius/EAP_180.pm in @INC (@INC contains: .
 /usr/local/lib64/perl5 /usr/local/share/perl5
 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl
 /usr/lib64/perl5 /usr/share/perl5 .) at (eval 1977214) line 3, GEN1
 line 354206. Jan  8 22:04:02 riptide-5.vm.its.uwo.pri
 /usr/bin/radiusd[622]: Could not load EAP module Radius::EAP_29: Can't
 locate Radius/EAP_29.pm in @INC (@INC contains: . /usr/local/lib64/perl5
 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl
 /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5 .) at
 (eval 1989895) line 3, GEN1 line 356467. Jan  8 22:19:46
 riptide-5.vm.its.uwo.pri /usr/bin/radiusd[622]: Could not load EAP module
 Radius::EAP_232: Can't locate Radius/EAP_232.pm in @INC (@INC contains: .
 /usr/local/lib64/perl5 /usr/local/share/perl5
 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl
 /usr/lib64/perl5 /usr/share/perl5 .) at (eval 2000990) line 3, GEN1
 line 358402. Jan  9 00:02:52 riptide-5.vm.its.uwo.pri
 /usr/bin/radiusd[622]: Could not load EAP module Radius::EAP_239: Can't
 locate Radius/EAP_239.pm in @INC (@INC contains: . /usr/local/lib64/perl5
 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl
 /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5 .) at
 (eval 2074832) line 3, GEN1 line 371473. [11:17:45 slogr] grep Could
 not load EAP module Radius::EAP console Jan  9 10:26:05
 riptide-3.vm.its.uwo.pri /usr/bin/radiusd[27250]: Could not load EAP
 module Radius::EAP_57: Can't locate Radius/EAP_57.pm in @INC (@INC
 contains: . /usr/local/lib64/perl5 /usr/local/share/perl5
 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl
 /usr/lib64/perl5 /usr/share/perl5 .) at (eval 2742617) line 3, GEN1
 line 532256.
 
 can someone shed some lightwe are running Radiator version 10
 First, there is no version 10, the latest version is 4.11.
 The changelog for version 4.8 says:
 - Fixed an issue where truncated EAP-Message requests would cause a log
 message like Could not load EAP module Radius::EAP_ . This is now
 logged as invalid EAP type in EAP request and rejected. Reported by
 Daniel Rocha.
 
 So i guess you're running an older version than 4.8. Update and look if
 the errors are still present.
 
 Thanks
 
 Michael Hulko
 Network Analyst
 
 Western University Canada
 Network Operations Centre
 Information Technology Services
 1393 Western Road, SSB 3300CC
 London, Ontario  N6G 1G9
 
 tel: 519-661-2111 x81390
 e-mail: mihu...@uwo.ca mailto:mihu...@uwo.ca
 
 
 
 
 
 ___
 radiator mailing list
 radiator@open.com.au
 http://www.open.com.au/mailman/listinfo/radiator
 
 Best regards, Alexander Hartmaier
 
 
 
 ***
 T-Systems Austria GesmbH Rennweg 97-99, 1030 Wien
 Handelsgericht Wien, FN 79340b
 ***
 Notice: This e-mail contains information that is confidential and may be 
 privileged.
 If you are not the intended recipient, please notify the sender and then
 delete this e-mail immediately.
 ***
 ___
 radiator mailing list
 radiator@open.com.au
 http://www.open.com.au/mailman/listinfo/radiator



Michael Hulko
Network Analyst

Western University Canada
Network Operations Centre
Information Technology Services
1393 Western Road, SSB 3300CC
London, Ontario  N6G 1G9

tel: 519-661-2111 x81390
e-mail: mihu...@uwo.ca mailto:mihu...@uwo.ca





___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator

Re: [RADIATOR] New Error messages

2013-01-18 Thread Heikki Vatiainen
On 01/18/2013 10:29 PM, Michael Hulko wrote:

 The changelog for version 4.8 says:
 - Fixed an issue where truncated EAP-Message requests would cause a log
 message like Could not load EAP module Radius::EAP_ . This is now
 logged as invalid EAP type in EAP request and rejected. Reported by
 Daniel Rocha.
 
 Has this crept back into version 4.10 ??

No, that's a bit different. This fixed the case when EAP-Message was
truncated enough to not to have the type field at all.

http://tools.ietf.org/html/rfc3748#section-4.1

With radpwtst you can try this with something like:

% radpwtst -trace 4 -noacct -eaphex 01020005

This has only Code, Identifier and Length (0x01, 0x02 and 0x005
respectively) but no EAP Type such as PEAP, Identity, etc.


What you are seeing is the result of something like this:

% radpwtst -trace 4 -noacct -eaphex 0102000580

EAP type is present (0x80 or 128 in decimal), but since there is no such
EAP module in Radiator, you will get 'Can't locate Radius/EAP_128.pm
...' in the logs.

These are sometimes seen in the logs. The first EAP-Message attribute in
the request should always start with EAP request or response header that
specifies which EAP method (PEAP, TTLS, Identity, etc.) is in question.
If the message gets mangled, somehow rearranged or possibly split into
multiple messages, this will cause problems. For example, fragmentation
is not supported and any other kind of rearranging the order of
EAP-Message attributes will break the EAP message.

I would not worry about these if there are not too many of them. If it
looks like this warrants debugging, I would try to get full request
dumps and see e.g., if it's the certain NAS that is the source of the
broken messages.

Thanks,
Heikki


-- 
Heikki Vatiainen h...@open.com.au

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS,
NetWare etc.
___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator


[RADIATOR] New Error messages

2013-01-17 Thread Michael Hulko
Lately I've been seeing these errors daily which were not there prior to the 
new year:

Jan  8 20:18:36 riptide-2.vm.its.uwo.pri /usr/bin/radiusd[23692]: Could
not load EAP module Radius::EAP_66: Can't locate Radius/EAP_66.pm in @INC
(@INC contains: . /usr/local/lib64/perl5 /usr/local/share/perl5
/usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl
/usr/lib64/perl5 /usr/share/perl5 .) at (eval 3683243) line 3, GEN1
line 699827. Jan  8 21:35:18 riptide-5.vm.its.uwo.pri
/usr/bin/radiusd[622]: Could not load EAP module Radius::EAP_155: Can't
locate Radius/EAP_155.pm in @INC (@INC contains: . /usr/local/lib64/perl5
/usr/local/share/perl5 /usr/lib64/perl5/vendor_perl
/usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5 .) at
(eval 1968782) line 3, GEN1 line 352731. Jan  8 21:47:05
riptide-5.vm.its.uwo.pri /usr/bin/radiusd[622]: Could not load EAP module
Radius::EAP_180: Can't locate Radius/EAP_180.pm in @INC (@INC contains: .
/usr/local/lib64/perl5 /usr/local/share/perl5
/usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl
/usr/lib64/perl5 /usr/share/perl5 .) at (eval 1977214) line 3, GEN1
line 354206. Jan  8 22:04:02 riptide-5.vm.its.uwo.pri
/usr/bin/radiusd[622]: Could not load EAP module Radius::EAP_29: Can't
locate Radius/EAP_29.pm in @INC (@INC contains: . /usr/local/lib64/perl5
/usr/local/share/perl5 /usr/lib64/perl5/vendor_perl
/usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5 .) at
(eval 1989895) line 3, GEN1 line 356467. Jan  8 22:19:46
riptide-5.vm.its.uwo.pri /usr/bin/radiusd[622]: Could not load EAP module
Radius::EAP_232: Can't locate Radius/EAP_232.pm in @INC (@INC contains: .
/usr/local/lib64/perl5 /usr/local/share/perl5
/usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl
/usr/lib64/perl5 /usr/share/perl5 .) at (eval 2000990) line 3, GEN1
line 358402. Jan  9 00:02:52 riptide-5.vm.its.uwo.pri
/usr/bin/radiusd[622]: Could not load EAP module Radius::EAP_239: Can't
locate Radius/EAP_239.pm in @INC (@INC contains: . /usr/local/lib64/perl5
/usr/local/share/perl5 /usr/lib64/perl5/vendor_perl
/usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5 .) at
(eval 2074832) line 3, GEN1 line 371473. [11:17:45 slogr] grep Could
not load EAP module Radius::EAP console Jan  9 10:26:05
riptide-3.vm.its.uwo.pri /usr/bin/radiusd[27250]: Could not load EAP
module Radius::EAP_57: Can't locate Radius/EAP_57.pm in @INC (@INC
contains: . /usr/local/lib64/perl5 /usr/local/share/perl5
/usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl
/usr/lib64/perl5 /usr/share/perl5 .) at (eval 2742617) line 3, GEN1
line 532256.

can someone shed some lightwe are running Radiator version 10

Thanks

Michael Hulko
Network Analyst

Western University Canada
Network Operations Centre
Information Technology Services
1393 Western Road, SSB 3300CC
London, Ontario  N6G 1G9

tel: 519-661-2111 x81390
e-mail: mihu...@uwo.ca mailto:mihu...@uwo.ca





___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator


Re: [RADIATOR] New Error messages

2013-01-17 Thread Alexander Hartmaier
On 2013-01-17 17:31, Michael Hulko wrote:
 Lately I've been seeing these errors daily which were not there prior to the 
 new year:

 Jan  8 20:18:36 riptide-2.vm.its.uwo.pri /usr/bin/radiusd[23692]: Could
 not load EAP module Radius::EAP_66: Can't locate Radius/EAP_66.pm in @INC
 (@INC contains: . /usr/local/lib64/perl5 /usr/local/share/perl5
 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl
 /usr/lib64/perl5 /usr/share/perl5 .) at (eval 3683243) line 3, GEN1
 line 699827. Jan  8 21:35:18 riptide-5.vm.its.uwo.pri
 /usr/bin/radiusd[622]: Could not load EAP module Radius::EAP_155: Can't
 locate Radius/EAP_155.pm in @INC (@INC contains: . /usr/local/lib64/perl5
 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl
 /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5 .) at
 (eval 1968782) line 3, GEN1 line 352731. Jan  8 21:47:05
 riptide-5.vm.its.uwo.pri /usr/bin/radiusd[622]: Could not load EAP module
 Radius::EAP_180: Can't locate Radius/EAP_180.pm in @INC (@INC contains: .
 /usr/local/lib64/perl5 /usr/local/share/perl5
 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl
 /usr/lib64/perl5 /usr/share/perl5 .) at (eval 1977214) line 3, GEN1
 line 354206. Jan  8 22:04:02 riptide-5.vm.its.uwo.pri
 /usr/bin/radiusd[622]: Could not load EAP module Radius::EAP_29: Can't
 locate Radius/EAP_29.pm in @INC (@INC contains: . /usr/local/lib64/perl5
 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl
 /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5 .) at
 (eval 1989895) line 3, GEN1 line 356467. Jan  8 22:19:46
 riptide-5.vm.its.uwo.pri /usr/bin/radiusd[622]: Could not load EAP module
 Radius::EAP_232: Can't locate Radius/EAP_232.pm in @INC (@INC contains: .
 /usr/local/lib64/perl5 /usr/local/share/perl5
 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl
 /usr/lib64/perl5 /usr/share/perl5 .) at (eval 2000990) line 3, GEN1
 line 358402. Jan  9 00:02:52 riptide-5.vm.its.uwo.pri
 /usr/bin/radiusd[622]: Could not load EAP module Radius::EAP_239: Can't
 locate Radius/EAP_239.pm in @INC (@INC contains: . /usr/local/lib64/perl5
 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl
 /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5 .) at
 (eval 2074832) line 3, GEN1 line 371473. [11:17:45 slogr] grep Could
 not load EAP module Radius::EAP console Jan  9 10:26:05
 riptide-3.vm.its.uwo.pri /usr/bin/radiusd[27250]: Could not load EAP
 module Radius::EAP_57: Can't locate Radius/EAP_57.pm in @INC (@INC
 contains: . /usr/local/lib64/perl5 /usr/local/share/perl5
 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl
 /usr/lib64/perl5 /usr/share/perl5 .) at (eval 2742617) line 3, GEN1
 line 532256.

 can someone shed some lightwe are running Radiator version 10
First, there is no version 10, the latest version is 4.11.
The changelog for version 4.8 says:
- Fixed an issue where truncated EAP-Message requests would cause a log
message like Could not load EAP module Radius::EAP_ . This is now
logged as invalid EAP type in EAP request and rejected. Reported by
Daniel Rocha.

So i guess you're running an older version than 4.8. Update and look if
the errors are still present.

 Thanks

 Michael Hulko
 Network Analyst

 Western University Canada
 Network Operations Centre
 Information Technology Services
 1393 Western Road, SSB 3300CC
 London, Ontario  N6G 1G9

 tel: 519-661-2111 x81390
 e-mail: mihu...@uwo.ca mailto:mihu...@uwo.ca





 ___
 radiator mailing list
 radiator@open.com.au
 http://www.open.com.au/mailman/listinfo/radiator

Best regards, Alexander Hartmaier



***
T-Systems Austria GesmbH Rennweg 97-99, 1030 Wien
Handelsgericht Wien, FN 79340b
***
Notice: This e-mail contains information that is confidential and may be 
privileged.
If you are not the intended recipient, please notify the sender and then
delete this e-mail immediately.
***
___
radiator mailing list
radiator@open.com.au
http://www.open.com.au/mailman/listinfo/radiator