RadPerf '-A delay,lifetime' arg does not copy the 'Calling-Station-Id' from Accept-Request

Jim jbalatero at visp.net
Fri Mar 4 00:40:09 CET 2016


Thank you very much.

On 2016-03-03 15:24, freeradius-users-request at lists.freeradius.org 
wrote:

> Send Freeradius-Users mailing list submissions to
> freeradius-users at lists.freeradius.org
> 
> To subscribe or unsubscribe via the World Wide Web, visit
> http://lists.freeradius.org/mailman/listinfo/freeradius-users [1]
> or, via email, send a message with subject or body 'help' to
> freeradius-users-request at lists.freeradius.org
> 
> You can reach the person managing the list at
> freeradius-users-owner at lists.freeradius.org
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Freeradius-Users digest..."
> 
> Today's Topics:
> 
> 1. Re: RadPerf '-A delay, lifetime' arg does not copy the
> 'Calling-Station-Id' from Accept-Request (Alan DeKok)
> 2. linelog problem (Maja Wolniewicz)
> 3. Stripping prefix with unlang (Bernd)
> 4. Re: Stripping prefix with unlang (Herwin Weststrate)
> 5. Re: Stripping prefix with unlang (Alan DeKok)
> 6. Re: linelog problem (Alan DeKok)
> 
> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Thu, 3 Mar 2016 08:17:24 -0500
> From: Alan DeKok <aland at deployingradius.com>
> To: jbaltero at gmail.com, FreeRadius users mailing list
> <freeradius-users at lists.freeradius.org>
> Subject: Re: RadPerf '-A delay, lifetime' arg does not copy the
> 'Calling-Station-Id' from Accept-Request
> Message-ID: <D0CC71E0-6386-4864-A2A4-865E115DC78A at deployingradius.com>
> Content-Type: text/plain; charset=us-ascii
> 
> On Mar 2, 2016, at 11:24 PM, Jim <jbalatero at visp.net> wrote:
> 
>> As you can see on the Accounting-Request, there's no 
>> Calling-Station-Id. How do I get it to be included on the Accounting 
>> Packet?
> 
> We'll see if we can get a new version of radperf out soon to fix this.
> 
> Alan DeKok.
> 
> ------------------------------
> 
> Message: 2
> Date: Thu, 3 Mar 2016 14:28:45 +0100
> From: Maja Wolniewicz <mgw at umk.pl>
> To: FreeRadius users mailing list
> <freeradius-users at lists.freeradius.org>
> Subject: linelog problem
> Message-ID: <56D83C0D.5070709 at umk.pl>
> Content-Type: text/plain; charset="utf-8"; Format="flowed"
> 
> We are running freeradius 3.0.11 on CentOS 6.7.
> Recently we experienced a few radius process hangs - it didn't handle
> any request and in the log
> appeared only a lot of:
> 
> Thu Mar 3 08:48:24 2016 : Error: (187540) Ignoring duplicate packet
> from client CM port 1814 - ID: 118 due to unfinished request in
> component post-auth module eduroam_log
> Thu Mar 3 08:48:33 2016 : Error: (187814) Ignoring duplicate packet
> from client CM port 1814 - ID: 152 due to unfinished request in
> component <core> module <queue>
> 
> Our investigation showed that these problems start after requests
> containing a "strange" username
> Wed Mar 2 08:01:52 2016 : Auth: (127068) Login incorrect: [юз] (from
> client AP-UMK port 20526 cli 88-A7-3C-DB-35-02)
> Thu Mar 3 08:48:14 2016 : Auth: (187534) Login incorrect: [በᑱ] (from
> client AP-SPEC port 36865 cli 24-0A-64-1F-C1-D3)
> Thu Mar 3 09:38:19 2016 : Auth: (53871) Login incorrect: [юз] (from
> client AP-UMK port 20613 cli 88-A7-3C-DB-35-02)
> 
> It turned out that it is caused by linelog module. After we removed
> %{User-Name} from this line
> 
> Access-Reject = "%S
> eduroam-auth#ORG=%{request:Realm}#USER=%{User-Name}#CSI=%{%{Calling-Station-Id}:-Unknown
> Caller Id}#NAS=%{%{request:NAS-IP-Address}:-No NAS
> IP}#CUI=%{%{reply:Chargeable-User-Identity}:-Unknown}#MSG=%{%{reply:Reply-Message}:-No
> Failure Reason}#RESULT=FAIL#"
> 
> the problem disappeared and strange usernames are handled smoothly.
> 
> It looks like a linelog bug.
> 
> Maja
> 
> --
> Maja Gorecka-Wolniewicz mgw at umk.pl
> Uczelniane Centrum Information & Communication
> Informatyczne Technology Centre
> Uniwersytet Mikolaja Kopernika Nicolaus Copernicus University
> Coll. Maximum, pl. Rapackiego 1, 87-100 Torun, Poland
> tel.: +48 56-611-27-40 fax: +48 56-622-18-50 tel. kom.: +48-693032574
> 
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: smime.p7s
> Type: application/pkcs7-signature
> Size: 5087 bytes
> Desc: Kryptograficzna sygnatura S/MIME
> URL: 
> <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20160303/64c2eefb/attachment-0001.bin 
> [2]>
> 
> ------------------------------
> 
> Message: 3
> Date: Thu, 03 Mar 2016 15:34:17 +0100
> From: Bernd <bernd at kroenchenstadt.de>
> To: freeradius-users at lists.freeradius.org
> Subject: Stripping prefix with unlang
> Message-ID: <76dd220490223c3795907fb5a728d553 at kroenchenstadt.de>
> Content-Type: text/plain; charset=UTF-8; format=flowed
> 
> Hi,
> 
> I am pulling my hears for two hours now. I'd like to strip a prefix off
> a request and I'm trying to use unlang in policy.d/filter to do that.
> 
> if (User-Name =~
> /adsl-bla/([^%%]+)%%adsl-bla.kroenchenstadt.de/) {
> update request {
> User-Name := "([^%%]+)%%adsl-sbt.kroenchenstadt.de/"
> }
> }
> 
> doesn't work, as
> 
> if (User-Name =~ /adsl-bla/ {
> update request {
> User-Name -= "adsl-bla/"
> }
> }
> 
> also refuses to be that what I need.
> 
> I just need to strip ``adsl-bla/'' off the login request.
> 
> Help much appreciated -- thanks!
> 
> Bernd
> 
> ------------------------------
> 
> Message: 4
> Date: Thu, 3 Mar 2016 16:16:56 +0100
> From: Herwin Weststrate <herwin at quarantainenet.nl>
> To: FreeRadius users mailing list
> <freeradius-users at lists.freeradius.org>
> Subject: Re: Stripping prefix with unlang
> Message-ID: <56D85568.6030401 at quarantainenet.nl>
> Content-Type: text/plain; charset=utf-8
> 
> On 03-03-16 15:34, Bernd wrote:
> 
>> Hi, I am pulling my hears for two hours now. I'd like to strip a 
>> prefix off a request and I'm trying to use unlang in policy.d/filter 
>> to do that. if (User-Name =~ 
>> /adsl-bla/([^%%]+)%%adsl-bla.kroenchenstadt.de/) { update request { 
>> User-Name := "([^%%]+)%%adsl-sbt.kroenchenstadt.de/" } } doesn't work, 
>> as if (User-Name =~ /adsl-bla/ { update request { User-Name -= 
>> "adsl-bla/" } } also refuses to be that what I need.
> 
> That last one contains at least two errors that make it fail to start: 
> a
> missing / and a missing ) at the regex statement.
> 
> There is no need to escape the hypen in regexes, and you should use the
> matches of the regex to fix it. I assumed you wanted to strip adsl-bla/
> only if it the username starts with it.
> 
> # Match everything except adsl-bla/ in (.*)
> if (User-Name =~ /^adsl-bla/(.*)/) {
> update request {
> # Use the match of (.*) as the result
> &User-Name := "%{1}"
> }
> }
> 
> There may be even simpler solutions, since it looks a lot like a realm.
> The config for rlm_realm and the examples in policy.d/ can be a source
> of inspiration
> 
> --
> Herwin Weststrate
> 
> ------------------------------
> 
> Message: 5
> Date: Thu, 3 Mar 2016 10:23:29 -0500
> From: Alan DeKok <aland at deployingradius.com>
> To: FreeRadius users mailing list
> <freeradius-users at lists.freeradius.org>
> Subject: Re: Stripping prefix with unlang
> Message-ID: <AC23B57D-34A8-45ED-B445-AAA8CB45732F at deployingradius.com>
> Content-Type: text/plain; charset=us-ascii
> 
> On Mar 3, 2016, at 9:34 AM, Bernd <bernd at kroenchenstadt.de> wrote:
> 
>> I am pulling my hears for two hours now. I'd like to strip a prefix 
>> off a request and I'm trying to use unlang in policy.d/filter to do 
>> that. if (User-Name =~ 
>> /adsl-bla/([^%%]+)%%adsl-bla.kroenchenstadt.de/) {
> 
> That's good.
> 
>> update request { User-Name := "([^%%]+)%%adsl-sbt.kroenchenstadt.de/"
> 
> That's not. You're setting the value of User-Name to... a regular 
> expression? Why?
> 
> You need to set it to the value captured from the regular expression.
> 
>> I just need to strip ``adsl-bla/'' off the login request.
> 
> if (User-Name =~ /^adsl-/(.+)$/) {
> update request {
> User-Name := "%{1}"
> }
> }
> 
> i.e. you don't need to escape the "-". You do need to escape the "/'. 
> And then you just grab everything to the right of that.
> 
> Alan DeKok.
> 
> ------------------------------
> 
> Message: 6
> Date: Thu, 3 Mar 2016 10:24:28 -0500
> From: Alan DeKok <aland at deployingradius.com>
> To: FreeRadius users mailing list
> <freeradius-users at lists.freeradius.org>
> Subject: Re: linelog problem
> Message-ID: <CE5F6468-D87D-4BDB-AD85-2E7DB851B7A9 at deployingradius.com>
> Content-Type: text/plain; charset=us-ascii
> 
> On Mar 3, 2016, at 8:28 AM, Maja Wolniewicz <mgw at umk.pl> wrote:
> 
>> We are running freeradius 3.0.11 on CentOS 6.7. Recently we 
>> experienced a few radius process hangs - it didn't handle any request 
>> and in the log appeared only a lot of: Thu Mar 3 08:48:24 2016 : 
>> Error: (187540) Ignoring duplicate packet from client CM port 1814 - 
>> ID: 118 due to unfinished request in component post-auth module 
>> eduroam_log Thu Mar 3 08:48:33 2016 : Error: (187814) Ignoring 
>> duplicate packet from client CM port 1814 - ID: 152 due to unfinished 
>> request in component <core> module <queue>
> 
> A fix has already been pushed to the v3.0.x branch. It will be in 
> 3.0.12.
> 
> Alan DeKok.
> 
> ------------------------------
> 
> Subject: Digest Footer
> 
> -
> List info/subscribe/unsubscribe? See 
> http://www.freeradius.org/list/users.html [3]
> 
> ------------------------------
> 
> End of Freeradius-Users Digest, Vol 131, Issue 6
> ************************************************


Links:
------
[1] http://lists.freeradius.org/mailman/listinfo/freeradius-users
[2] 
http://lists.freeradius.org/pipermail/freeradius-users/attachments/20160303/64c2eefb/attachment-0001.bin
[3] http://www.freeradius.org/list/users.html


More information about the Freeradius-Users mailing list