rlm_sql bug in 64-bit architecture ?

tnt at kalik.co.yu tnt at kalik.co.yu
Wed Jul 25 00:53:02 CEST 2007


If you have:

somegroup   User-Name = "whatever"

That is normal. Huntgroup check item should have operator == not = and
server is "clever" enough to fix it. But it will grumble in the log so
you can change incorrect entries.

Ivan Kalik
Kalik Informatika ISP


Dana 24/7/2007, "Chris Bell" <CBell at thig.com> piše:

>I would love to know what the:
>
>Invalid operator for item Expiration: reverting to '=='
>
>I get them like so:
>
>Invalid operator for item User-name: reverting to '=='
>
>All three of my server logs are filled with them and I've been unable to
>find the reason why.  All the username's listed in the huntgroup can
>successfully authenticate.
>
>-----Original Message-----
>From: freeradius-users-bounces+cbell=thig.com at lists.freeradius.org
>[mailto:freeradius-users-bounces+cbell=thig.com at lists.freeradius.org]On
>Behalf Of Richard Cotrina
>Sent: Tuesday, July 24, 2007 2:57 PM
>To: FreeRadius users mailing list
>Subject: rlm_sql bug in 64-bit architecture ?
>
>
>Hi everyone :
>
>I've been searching for the possible causes of a problem, that appears when
>sqlcounter is enabled, and just in 64-bits plattforms (FreeBSD/Sparc64). The
>radius_xlat function performed by rlm_sql seems to not reading well some
>attributes like "Expiration" and always complains about "Invalid Operator",
>not matter what operator is put [1].
>
>Note the big difference between the responses obtained in the 64-bit and
>32-bit arch, using radtest and running radiusd in debug mode: rlm_sql can't
>read neither the value nor the operator for Expiration attribute, despite
>the fact that in both cases, the database used is the same. (rlm_sql debug
>options enabled in rlm_sql.c).
>
>freeradius 1.1.6 / FreeBSD Sparc64
>==========================
>
>radius_xlat:  'prueba at test.com'
>rlm_sql (sql): [snip]
>radius_xlat:  [snip]
>rlm_sql:  check items
>     User-Password := "prueba"
>     Auth-Type := Local
>     Simultaneous-Use := 1
>     Max-Daily-Session := 3600
>     Expiration <INVALID-TOKEN> "Dec 31 1969 19:00:00 PET"     <--- Notice
>this (where this value come from ?)
>rlm_sql:  reply items
>     Framed-Protocol = PPP
>     Framed-IP-Address = 255.255.255.254
>     Framed-IP-Netmask = 255.255.255.255
>     Framed-MTU = 1500
>     Service-Type = Framed-User
>     Idle-Timeout = 300
>Invalid operator for item Expiration: reverting to '=='
>Invalid operator for item Expiration: reverting to '=='
>Invalid operator for item Expiration: reverting to '=='
>Invalid operator for item Expiration: reverting to '=='
>Invalid operator for item Expiration: reverting to '=='
>Invalid operator for item Expiration: reverting to '=='
>Invalid operator for item Expiration: reverting to '=='
>rlm_sql (sql): No matching entry in the database for request from user
>[prueba at test.com]
>  modcall[authorize]: module "sql" returns notfound for request 9
>rlm_sqlcounter: Entering module authorize code
>rlm_sqlcounter: Could not find Check item value pair
>  modcall[authorize]: module "dailycounter" returns noop for request 9
>[snip]
>
>--> Got an Access-Reject response
>
>
>freeradius 1.1.6 / FreeBSD i386
>=======================
>
>radius_xlat:  'prueba at test.com'
>rlm_sql (sql): [snip]
>radius_xlat:  [snip]
>rlm_sql:  check items
>     User-Password := "prueba"
>     Auth-Type := Local
>     Simultaneous-Use := 1
>     Max-Daily-Session := 3600
>     Expiration := "Sep 24 2007 11:30:00 PET"       <--- get the correct
>'op' and 'value'
>rlm_sql:  reply items
>     Framed-Protocol = PPP
>     Framed-IP-Address = 255.255.255.254
>     Framed-IP-Netmask = 255.255.255.255
>     Framed-MTU = 1500
>     Service-Type = Framed-User
>     Idle-Timeout = 300
>  modcall[authorize]: module "sql" returns ok for request 0
>rlm_sqlcounter: Entering module authorize code
>[snip]
>
>--> Got an Access-Accept response
>
>
>What could be going wrong with rlm_sql ? Is there any bug in freeradius code
>related to 64-bit architectures ?
>
>
>I'd appreciate any suggestion to solve this.
>
>
>Richard Cotrina
>
>[1]. http://archives.free.net.ph/message/20070517.165523.c7432a23.en.html
>
>-
>List info/subscribe/unsubscribe? See
>http://www.freeradius.org/list/users.html
>
>
>
>
>CONFIDENTIAL NOTICE: This email including any attachments, contains
>confidential information belonging to the sender. It may also be
>privileged or otherwise protected by work product immunity or other
>legal rules. This information is intended only for the use of the
>individual or entity named above.  If you are not the intended
>recipient, you are hereby notified that any disclosure, copying,
>distribution or the taking of any action in reliance on the contents
>of this emailed information is strictly prohibited.  If you have
>received this email in error, please immediately notify us by
>reply email of the error and then delete this email immediately.
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>




More information about the Freeradius-Users mailing list