December 2011 - Freeradius-Devel - lists.freeradius.org

rlm_sql_ocioracle driver v. 0.1
by Ge＠＠ru 14 Mar '15

14 Mar '15

Hi, in attachment patch to add rlm_sql_ocioracle driver to freeradius 2.1.x tree (it seems work yet on 3.x tree). This drivers permit to use function/procedure with CURSOR (through :Ret_Cursor string) like for example: group_membership_query = "begin :Ret_Cursor := \ pkRadius.group_membership_query('%{SQL-User-Name}'); end;" TODO for next release: - add support to oracle connection pool instead of open a new connection for every socket on startup; - enhancement on handle error (through error callback) on do query; - add documentation. Module need oracle instantclient library and ocilib library (http://orclib.sourceforge.net/) Good luck to rlm_sql_ocioracle driver!! Geaaru

2 5

Complete authorize & accounting redis module
by Manuel Guesdon 31 Oct '12

31 Oct '12

Hi, I've adapted rlm_sql to REDIS (http://redis.io/) key-store database. It handle authorize, accounting, checksimul and post-auth (only authorize is deeply tested). Authorize works like rlm_sql with groups, etc... Files are here: http://free.oxymium.net/freeradius/rlm_redisn/ Available as .tgz here: http://free.oxymium.net/freeradius/rlm_redisn-20111112-001.tgz Manuel -- ______________________________________________________________________ Manuel Guesdon - OXYMIUM

4 11

new regex code in GIT
by Alan Buxey 20 Dec '11

20 Dec '11

hi, noted the changelog: Date: Tue Nov 29 12:15:52 2011 +0100 Clean up regex code Convert it to use pairmake_xlat, which is better. Better ifdef's for regex support. boot-time check for invalid regular expressions and yes, when i went to run our local GIT version I get this.. /etc/raddb/attrs[128]: Parse error (reply) for entry company.co.uk: No regular expression found in Tunnel-Private-Group-Id Errors reading /etc/raddb/attrs /etc/raddb/modules/attr_filter[12]: Instantiation failed for module "attr_filter.post-proxy" ERROR: Cannot find a configuration entry for module "attr_filter". /etc/raddb/sites-enabled/default[692]: Failed to find "attr_filter.post-proxy" in the "modules" section. /etc/raddb/sites-enabled/default[681]: Errors parsing post-proxy section. the /etc/raddb/attr entry has the following: company.co.uk Service-Type == Framed-User, Service-Type == Login-User, Login-Service == Telnet, Login-Service == Rlogin, Login-Service == TCP-Clear, Login-TCP-Port <= 65536, Framed-IP-Address == 255.255.255.254, Framed-IP-Netmask == 255.255.255.255, Framed-Protocol == PPP, Framed-Protocol == SLIP, Framed-Compression == Van-Jacobson-TCP-IP, Framed-MTU >= 576, Framed-Filter-ID =* ANY, Reply-Message =* ANY, Proxy-State =* ANY, EAP-Message =* ANY, MS-MPPE-Recv-Key =* ANY, MS-MPPE-Send-Key =* ANY, MS-CHAP-MPPE-Keys =* ANY, State =* ANY, Session-Timeout <= 28800, Idle-Timeout <= 600, Tunnel-Medium-Type == IEEE-802, Tunnel-Type == VLAN, Tunnel-Private-Group-Id =~ liss-, Message-Authenticator =* ANY, Calling-Station-Id =* ANY, Called-Station-Id =* ANY, Port-Limit <= 2 I'm guessing the "Tunnel-Private-Group-Id =~ liss-," isnt right in some way - its always worked before though... alan

2 1

More attributes in dictionary.manzara
by Stacy 16 Dec '11

16 Dec '11

Hello all! As a maintainer for manzara VSAs I'd like to inform anyone who may be interested, that the following attributes were added to the dictionary: ATTRIBUTE Manzara-Map-Name 10 string ATTRIBUTE Manzara-Map-Key 11 string ATTRIBUTE Manzara-Map-Value 12 string ATTRIBUTE Manzara-Map-Error 13 string ATTRIBUTE Manzara-Service-Type 14 string Regards, Stacy.

2 1

Query related to ldap group containing space
by Verma Anurag-VNF673 12 Dec '11

12 Dec '11

Hi, I am using freeeRADIUS 2.1.12 and found that group search does not happen for LDAP group in Active Directory that has space. Once bind-dn happens and user is found, then next thing freeRADIUS should do is to do group-search which is not happening. Is there any known issue with group containing space? Thanks, Anurag

2 1

Query regarding redundant module and configurable failover codes
by Shweta Khadse 11 Dec '11

11 Dec '11

> > I have a question regarding the configurable failover codes. > > Our accounting module is defined as follows > > Detail… > > Detail_hour_ae1 > > … > > … > > Redundant{ > > > > Sql2 { > > Fail=1 > > … > > … > > } > > Sql2_redundant { > > Fail= return > > … > > … > > } > > > > *Sql_update_xxxx* > * * > > *Sql_update_yyyy* > > > } > > The last two sql updates ie *"Sql_update_xxxx" and **"Sql_update_yyyy" *do > not have a redundant module defined. The actions of these statement is not > very critical. However we observe that if the radius is unable to execute > these the radius drops the session and returns a FAIL. > > One way to avoid this session disconnection is to implement a redundant > module for the last two statements as well. > > We are looking at a possibility of this second solution. And require help > in this regard. > If we modify our configuration to something like this > > Redundant{ > > Sql{ > > Ok=2 > > } > > Sql2 > > { > > Ok=3 > > } > > } > > > Group{ > > * Sql_update_xxxx* > * * > > * Sql_update_yyyy* > > … > > Fail =1 > > } > > } > > > > *Ok will override Fail because the priority is higher.* > * * > > *So the accounting module will not return failure because of the third > module (atleast in theory).* > > > Does anyone have a solution/suggestions for this kind of a problem. > > > Thanks & Regards > > Shweta >

1 0

Please add me for posting to the email list
by Shweta Khadse 11 Dec '11

11 Dec '11

Thanks & Regards Shweta

1 0

rlm_perl issues, patch
by Eike Dehling 01 Dec '11

01 Dec '11

Hi List, we use freeradius for authentication wireless users and use rlm_perl to integrate perl scripts which determine e.g. vlan info from our database and lookup the users password. I was having some issues with freeradius segfaulting. In debug mode (-X) everything worked, but normal mode (multithreaded) it segfaults. The segfault would be at a seemingly random place in the perl library. The solution was in the way rlm_perl calls perl_clone (for creating perl-threads). The perl docs say this must be done one after the other, not in parallel. By adding a mutex around the perl_clone calls, the problem went away. I have attached a patch which solved the problem for me. Perhaps this patch is of use to someone else. Suggestions and improvements are welcome? Eike Dehling Quarantainenet

2 1