March 2009 - Freeradius-Devel - lists.freeradius.org

GIT Log for 2009-03-17 00:33 GMT
by aland＠deployingradius.com 16 Mar '09

16 Mar '09

commit 762ebba5b9f7f5773f3ae844ebb6d370fccce35a Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Mar 16 08:42:46 2009 +0100 Print more descriptive error messages Files changed: src/modules/rlm_ldap/rlm_ldap.c | 52 +++++++++++++------------------------- 1 files changed, 18 insertions(+), 34 deletions(-) ====================================================================== commit 0d10b6427977e75944a4834df8fef79891a27fe3 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Mar 15 10:26:18 2009 +0100 Added a "do not respond" policy Files changed: raddb/policy.conf | 12 ------------ 1 files changed, 0 insertions(+), 12 deletions(-) ====================================================================== commit 8b9982bb61550a9b7ac191d1bfc568b05cf424ce Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sat Mar 14 18:19:02 2009 +0100 Cleaned up, based on a patch from Norbert Wegener. Files changed: suse/freeradius.spec | 8 +++++++- 1 files changed, 7 insertions(+), 1 deletions(-) ======================================================================

1 0

Possible issue with copy-acct-to-home-server relaying
by Chris Moules 15 Mar '09

15 Mar '09

Hi, I have been seeing a strange phenomenon over the past week with my RADIUS system. Alan, the server is no longer crashing with the patches that you supplied but it is also not 100% stable. I am trying to figure our exactly what is going on. I have my assumptions, but no evidence. The issue is with a 'copy-acct-to-home-server' style setup. The issue manifests its self with the radiusd (or freeradius) process eventually no longer responding to incoming packets. Also the process slowly, over hours, is using more and more CPU time. If I try to analyse the process, it is running and polling the logfile for requests to proxy. I have noted that at the beginning of running the process, in debug, it will poll and sleep, poll and sleep. After proxying for a while the polling seems to become faster and I don't see the "Waking up in 0.8 seconds." messages any more. What I do see is "Polling for detail file" messages going up the screen very fast. In the systems 'normal' state I have a virtual server processing and writing the log file and another reading it. A couple of times this past week I have had warnings from the NAS units that the RADIUS server is not responding any more. Looking on the server show the system running but no new requests arriving. All I see the system doing is "Polling for detail file". I have now split the system so that I have one instance of the server doing authentication and local accounting. This is also writing the proxy log. I have another instance which only 'listens' for the log file and does the proxying. After a few hours I see this proxy process using up to 10% of the CPU for up to a minute at a time. It will go back down to 0% but often hovers about 6% at the moment. The main freeradius process that is doing all the work (db lokups / some auth proxying / logging / etc) is sitting at 0% CPU but using more memory: >From 'top' -- PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 11380 freerad 20 0 45700 4124 1732 S 7 0.1 6:52.59 freeradius 11398 freerad 20 0 177m 4416 1628 S 0 0.1 0:02.75 freeradius -- The last time I was able to observe a lock-up (NAS reports no responce) of the server process the CPU rating for freeradius was 99%. I am hoping that the splitting of the jobs will keep my system up and running and also help locate the issue. Does anyone have any ideas? Regards Chris

2 1

GIT Log for 2009-03-15 00:33 GMT
by aland＠deployingradius.com 14 Mar '09

14 Mar '09

commit aded41844c52c7522314ccae1b794c390da08201 Author: Bjørn Mork <bjorn(a)mork.no> Date: Wed Mar 11 20:33:54 2009 +0100 Add a number of new VSAs and use ipv6addr type for two VSAs Signed-off-by: Bjørn Mork <bjorn(a)mork.no> Files changed: share/dictionary.erx | 111 +------------------------------------------------- 1 files changed, 2 insertions(+), 109 deletions(-) ====================================================================== commit 760871bedbfe6b2bd2ec0c5969bb5e39dd32a420 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Mar 13 09:26:36 2009 +0100 If we have no response, don't send one on client retransmit Files changed: src/main/event.c | 8 -------- 1 files changed, 0 insertions(+), 8 deletions(-) ======================================================================

1 0

[PATCH] dictionary.erx: Add new VSAs and use ipv6addr where applicable
by Bjørn Mork 14 Mar '09

14 Mar '09

Looks like Juniper added lots of new VSAs lately. I've not tested all of these. Some of them might use more specific types. The format of the ERX-Ipv6-*-Dns follows that of the ipv6addr type. Use it. Signed-off-by: Bjørn Mork <bjorn(a)mork.no> --- share/dictionary.erx | 111 +++++++++++++++++++++++++++++++++++++++++++++++++- 1 files changed, 109 insertions(+), 2 deletions(-) diff --git a/share/dictionary.erx b/share/dictionary.erx index 038d3cc..0192e60 100644 --- a/share/dictionary.erx +++ b/share/dictionary.erx @@ -87,8 +87,8 @@ ATTRIBUTE ERX-Output-Gigapkts 43 integer ATTRIBUTE ERX-Tunnel-Interface-Id 44 string ATTRIBUTE ERX-IpV6-Virtual-Router 45 string ATTRIBUTE ERX-IpV6-Local-Interface 46 string -ATTRIBUTE ERX-Ipv6-Primary-Dns 47 string -ATTRIBUTE ERX-Ipv6-Secondary-Dns 48 string +ATTRIBUTE ERX-Ipv6-Primary-Dns 47 ipv6addr +ATTRIBUTE ERX-Ipv6-Secondary-Dns 48 ipv6addr ATTRIBUTE Sdx-Service-Name 49 string ATTRIBUTE Sdx-Session-Volume-Quota 50 string ATTRIBUTE Sdx-Tunnel-Disconnect-Cause-Info 51 string @@ -127,6 +127,67 @@ ATTRIBUTE ERX-IPv6-Mcast-Adm-Bw-Limit 80 integer ATTRIBUTE ERX-Qos-Parameters 82 string ATTRIBUTE ERX-Service-Session 83 string +ATTRIBUTE ERX-Mobile-IP-Algorithm 84 integer +ATTRIBUTE ERX-Mobile-IP-SPI 85 integer +ATTRIBUTE ERX-Mobile-IP-Key 86 string +ATTRIBUTE ERX-Mobile-IP-Replay 87 integer +ATTRIBUTE ERX-Mobile-IP-Access-Control 88 string +ATTRIBUTE ERX-Mobile-IP-Lifetime 89 integer + +ATTRIBUTE ERX-L2TP-Resynch-Method 90 integer + +ATTRIBUTE ERX-Tunnel-Switch-Profile 91 string + +ATTRIBUTE ERX-L2c-Up-Stream-Data 92 string +ATTRIBUTE ERX-L2c-Down-Stream-Data 93 string + +ATTRIBUTE ERX-Tunnel-Tx-Speed-Method 94 integer + +ATTRIBUTE ERX-IGMP-Query-Interval 95 integer +ATTRIBUTE ERX-IGMP-Max-Resp-Time 96 integer +ATTRIBUTE ERX-IGMP-Immediate-Leave 97 integer +ATTRIBUTE ERX-MLD-Query-Interval 98 integer +ATTRIBUTE ERX-MLD-Max-Resp-Time 99 integer +ATTRIBUTE ERX-MLD-Immediate-Leave 100 integer +ATTRIBUTE ERX-IP-Block-Multicast 101 integer + +ATTRIBUTE ERX-IGMP-Explicit-Tracking 102 integer +ATTRIBUTE ERX-IGMP-No-Tracking-V2-Grps 103 integer +ATTRIBUTE ERX-MLD-Explicit-Tracking 104 integer +ATTRIBUTE ERX-MLD-No-Tracking-V1-Grps 105 integer + +ATTRIBUTE ERX-Acc-Loop-Cir-Id 110 string +ATTRIBUTE ERX-Acc-Aggr-Cir-Id-Bin 111 hexadecimal +ATTRIBUTE ERX-Acc-Aggr-Cir-Id-Asc 112 string +ATTRIBUTE ERX-Act-Data-Rate-Up 113 integer +ATTRIBUTE ERX-Act-Data-Rate-Dn 114 integer +ATTRIBUTE ERX-Min-Data-Rate-Up 115 integer +ATTRIBUTE ERX-Min-Data-Rate-Dn 116 integer +ATTRIBUTE ERX-Att-Data-Rate-Up 117 integer +ATTRIBUTE ERX-Att-Data-Rate-Dn 118 integer +ATTRIBUTE ERX-Max-Data-Rate-Up 119 integer +ATTRIBUTE ERX-Max-Data-Rate-Dn 120 integer +ATTRIBUTE ERX-Min-LP-Data-Rate-Up 121 integer +ATTRIBUTE ERX-Min-LP-Data-Rate-Dn 122 integer +ATTRIBUTE ERX-Max-Interlv-Delay-Up 123 integer +ATTRIBUTE ERX-Act-Interlv-Delay-Up 124 integer +ATTRIBUTE ERX-Max-Interlv-Delay-Dn 125 integer +ATTRIBUTE ERX-Act-Interlv-Delay-Dn 126 integer +ATTRIBUTE ERX-DSL-Line-State 127 integer +ATTRIBUTE ERX-DSL-Type 128 integer + +ATTRIBUTE ERX-IPv6-NdRa-Prefix 129 ipv6prefix +ATTRIBUTE ERX-Qos-Set-Name 130 string + +ATTRIBUTE ERX-Service-Acct-Interval 140 integer has_tag + +ATTRIBUTE ERX-DownStream-Calc-Rate 141 integer +ATTRIBUTE ERX-UpStream-Calc-Rate 142 integer +ATTRIBUTE ERX-Max-Clients-Per-Interface 143 integer + +ATTRIBUTE ERX-PPP-Monitor-Ingress-Only 144 integer + + # # Values Attribute Name Number # @@ -194,4 +255,50 @@ VALUE ERX-Service-Statistics disabled 0 VALUE ERX-Service-Statistics time 1 VALUE ERX-Service-Statistics time-volume 2 +VALUE ERX-L2TP-Resynch-Method disable 0 +VALUE ERX-L2TP-Resynch-Method failover 1 +VALUE ERX-L2TP-Resynch-Method silent-failover 2 +VALUE ERX-L2TP-Resynch-Method failover-with-silent-backup 3 + +VALUE ERX-Tunnel-Tx-Speed-Method static-layer2 1 +VALUE ERX-Tunnel-Tx-Speed-Method dynamic-layer2 2 +VALUE ERX-Tunnel-Tx-Speed-Method qos 3 +VALUE ERX-Tunnel-Tx-Speed-Method actual 4 + +VALUE ERX-IGMP-Immediate-Leave disabled 0 +VALUE ERX-IGMP-Immediate-Leave enabled 1 + +VALUE ERX-MLD-Immediate-Leave disabled 0 +VALUE ERX-MLD-Immediate-Leave enabled 1 + +VALUE ERX-IP-Block-Multicast disabled 0 +VALUE ERX-IP-Block-Multicast enabled 1 + +VALUE ERX-IGMP-Explicit-Tracking disabled 0 +VALUE ERX-IGMP-Explicit-Tracking enabled 1 + +VALUE ERX-IGMP-No-Tracking-V2-Grps disabled 0 +VALUE ERX-IGMP-No-Tracking-V2-Grps enabled 1 + +VALUE ERX-MLD-Explicit-Tracking disabled 0 +VALUE ERX-MLD-Explicit-Tracking enabled 1 + +VALUE ERX-MLD-No-Tracking-V1-Grps disabled 0 +VALUE ERX-MLD-No-Tracking-V1-Grps enabled 1 + +VALUE ERX-DSL-Line-State SHOWTIME 1 +VALUE ERX-DSL-Line-State IDLE 2 +VALUE ERX-DSL-Line-State SILENT 3 + +VALUE ERX-DSL-Type ADSL1 1 +VALUE ERX-DSL-Type ADSL2 2 +VALUE ERX-DSL-Type ADSL2PLUS 3 +VALUE ERX-DSL-Type VDSL1 4 +VALUE ERX-DSL-Type VDSL2 5 +VALUE ERX-DSL-Type SDSL 6 +VALUE ERX-DSL-Type UNKNOWN 7 + +VALUE ERX-PPP-Monitor-Ingress-Only disabled 0 +VALUE ERX-PPP-Monitor-Ingress-Only enabled 1 + END-VENDOR ERX -- 1.5.6.5

2 4

Automatic report from sources (radiusclient) between 13.03.2009 - 14.03.2009 GMT
by Automatic cvs log generator 14 Mar '09

14 Mar '09

CVS log entries from 13.03.2009 (Fri) 07:00:00 - 14.03.2009 (Sat) 07:00:00 GMT ===================================================== Summary by authors ===================================================== Author: sobomax File: radiusclient/etc/dictionary; Revisions: 1.6 ===================================================== Log entries ===================================================== Description: Add more values from RFC2865/RFC2866 and remove some bogus ones. Prompted by: Bogdan-Andrei Iancu <bogdan(a)voice-system.ro> Obtained from: http://coast.cs.purdue.edu/pub/tools/unix/netutils/radius/dictionary Modified files: File: radiusclient/etc/dictionary; Revision: 1.6; Date: 2009/03/13 20:38:29; Author: sobomax; Lines: (+26 -1) ===================================================== Summary of modified files ===================================================== File: radiusclient/etc/dictionary Revisions: 1.6 Authors: sobomax (+26 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/rc-new_makelog.pl

1 0

GIT Log for 2009-03-13 00:33 GMT
by aland＠deployingradius.com 13 Mar '09

13 Mar '09

commit 31b122089aec06530a00a16e3665b14d97f58e44 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Mar 11 11:25:40 2009 +0100 Include more RFC dictionaries Files changed: share/dictionary | 2 -- 1 files changed, 0 insertions(+), 2 deletions(-) ====================================================================== commit fbaba7d9a6e735c23f41a23ad21d4e207e240d79 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Mar 11 04:09:48 2009 +0100 More VQP wrappers Files changed: src/main/listen.c | 2 -- 1 files changed, 0 insertions(+), 2 deletions(-) ====================================================================== commit cf0a584ca3fa8bfffff7eee9bb7bfe322043876e Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Mar 11 03:41:30 2009 +0100 Don't use -1 for size_t Noted by John Center Files changed: src/main/mainconfig.c | 12 ++++++------ 1 files changed, 6 insertions(+), 6 deletions(-) ======================================================================

2 1

GIT Log for 2009-03-12 00:33 GMT
by aland＠deployingradius.com 11 Mar '09

11 Mar '09

commit 7c81c61f48d40b8e5ffb8630cc48dbaaabb83089 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Mar 11 03:26:50 2009 +0100 Don't refer to local files scripts/raddebug | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-)

1 0

GIT Log for 2009-03-11 00:33 GMT
by aland＠deployingradius.com 10 Mar '09

10 Mar '09

commit 4164f9480d5e0164167a9640b2c1c47fa21655a6 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Mar 10 17:09:29 2009 +0100 Removed useless target Files changed: src/modules/rlm_smsotp/Makefile.in | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 6ef32021a5ae1adaa598e386972ed09a517f61a1 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Mar 10 17:04:05 2009 +0100 Fix data types. Patch from John Dennis Files changed: .../drivers/rlm_sql_unixodbc/sql_unixodbc.c | 9 ++++----- 1 files changed, 4 insertions(+), 5 deletions(-) ====================================================================== commit 9fef338356dc00a4845dc3c1609cb50c87670d0a Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Mar 10 17:03:20 2009 +0100 otp.conf is no longer here. It's in raddb/modules Files changed: raddb/Makefile | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 10428a7301058b4122cbd2b3396e3c55bd1026b6 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Mar 10 17:03:09 2009 +0100 Fixed typo Files changed: src/include/rad_assert.h | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 7eec5792074e7daecd78dfe999008e2753d1ccd2 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Mar 10 12:31:05 2009 +0100 Automate more work Files changed: Makefile | 4 ---- 1 files changed, 0 insertions(+), 4 deletions(-) ====================================================================== commit 4913f622a5aa01f183b69462d241c5346b9061b9 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Mar 10 04:01:26 2009 +0100 Silently ignore duplicate clients Files changed: src/main/client.c | 32 +------------------------------- 1 files changed, 1 insertions(+), 31 deletions(-) ====================================================================== commit 2a97f68a6ccdcd7bcac40da827e54481912ffa80 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Mar 10 03:54:14 2009 +0100 Check for including the same file twice. Files changed: src/main/conffile.c | 10 ++-------- 1 files changed, 2 insertions(+), 8 deletions(-) ======================================================================

1 0

MySQL with BDB
by Sourav Chakraborty 10 Mar '09

10 Mar '09

Hi, .I have downloaded mysql 5.0.77 source code and have used ./configure --with-berkeley-db='/usr/local/berkeleydb' --with-berkeley-db-libs='/usr/local/berkeleydb/lib' --with-berkeley-db-includes='/usr/local/berkeleydb/include' But I got- configure: WARNING: unrecognized options: --with-berkeley-db,--with-berkeley-db-libs,--with-berkeley-db-includes" Pls suggest what to do rgds Sourav

2 1

GIT Log for 2009-03-10 00:33 GMT
by aland＠deployingradius.com 09 Mar '09

09 Mar '09

commit 2e4ba7435ca22daf44ae3c6672558728e6bdc25f Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Mar 9 08:04:56 2009 +0100 Minor cleanups Files changed: src/main/evaluate.c | 20 +++++++------------- 1 files changed, 7 insertions(+), 13 deletions(-) ====================================================================== commit f526b2f9043edd36895dfe0cbc33f396898a2a45 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Mar 9 08:04:18 2009 +0100 More explanations to help end users Files changed: src/modules/frs_control/frs_control.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ======================================================================

1 0