October 2012 - Freeradius-Devel - lists.freeradius.org

rlm_sql_ocioracle driver v. 0.1
by Ge＠＠ru 14 Mar '15

14 Mar '15

Hi, in attachment patch to add rlm_sql_ocioracle driver to freeradius 2.1.x tree (it seems work yet on 3.x tree). This drivers permit to use function/procedure with CURSOR (through :Ret_Cursor string) like for example: group_membership_query = "begin :Ret_Cursor := \ pkRadius.group_membership_query('%{SQL-User-Name}'); end;" TODO for next release: - add support to oracle connection pool instead of open a new connection for every socket on startup; - enhancement on handle error (through error callback) on do query; - add documentation. Module need oracle instantclient library and ocilib library (http://orclib.sourceforge.net/) Good luck to rlm_sql_ocioracle driver!! Geaaru

2 5

Proxy fixes
by Alan DeKok 08 Jan '13

08 Jan '13

I managed to find an hour or two in between various things. I've taken a look at the proxy code, and added some fixes in "master". To be polite, I didn't quite understand the previous code. So... I've deleted things, and simplified other things. The result is that the "zombie" home server detection should be better. I don't know if it fixes the "crash on dead home server" issue that people were seeing. I wasn't able to reproduce that. But, the relevant code is now different. So I hope it's fixed. As always, blame Arran for any bugs. :) Alan DeKok.

3 8

FR 3.0.0 crashes
by alan buxey 03 Nov '12

03 Nov '12

hi, have been seeing a few things that cause the server to crash and burn ... will need to run in full debug/devel mode to capture the main things...but hopefully some of these error messages will make sense...the server was compiled from GIT release from a couple of weeks ago - been having a look at the code changes that have taken place and none seem to touch the proxy/thread stuff: "Info: Loaded virtual server <default>" is the first line to appear in the log file when our monit process kicks the server due to it being dead: note - many of the first errors are all the same cause/issue - there are a couple of more later on /var/log/radius/radius.log-20120906-Wed Sep 5 18:42:12 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120906-Wed Sep 5 18:42:12 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120906-Wed Sep 5 18:42:12 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120906:Wed Sep 5 18:42:12 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120907-Thu Sep 6 10:31:16 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120907-Thu Sep 6 10:31:16 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120907-Thu Sep 6 10:31:16 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120907:Thu Sep 6 10:45:34 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120907-Thu Sep 6 11:34:06 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120907-Thu Sep 6 11:34:06 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120907-Thu Sep 6 11:34:06 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120907:Thu Sep 6 11:37:35 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120907-Thu Sep 6 11:43:19 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120907-Thu Sep 6 11:43:19 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120907-Thu Sep 6 11:43:19 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120907:Thu Sep 6 12:07:14 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120907-Thu Sep 6 13:14:00 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120907-Thu Sep 6 13:14:00 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120907-Thu Sep 6 13:14:00 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120907:Fri Sep 7 08:11:31 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120911-Mon Sep 10 08:16:50 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120911-Mon Sep 10 08:16:50 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120911-Mon Sep 10 08:16:50 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120911:Mon Sep 10 08:16:50 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120912-Tue Sep 11 08:16:38 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120912-Tue Sep 11 08:16:38 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120912-Tue Sep 11 08:16:38 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120912:Tue Sep 11 08:16:38 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120912-Tue Sep 11 08:16:55 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120912-Tue Sep 11 08:16:55 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120912-Tue Sep 11 08:16:55 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120912:Tue Sep 11 08:16:55 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120912-Tue Sep 11 08:32:46 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120912-Tue Sep 11 08:32:46 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120912:Tue Sep 11 08:33:59 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 08:35:09 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 08:35:09 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 08:35:09 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 08:35:09 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 19:39:33 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 19:39:33 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 19:39:33 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 19:39:34 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 19:46:30 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 19:46:30 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 19:46:30 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 19:46:30 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 19:52:07 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 19:52:07 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 19:52:07 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 19:52:07 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 20:10:28 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 20:10:28 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 20:10:28 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 20:10:29 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 20:25:04 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 20:25:04 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 20:25:04 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 20:25:04 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 20:37:45 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 20:37:45 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 20:37:45 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 20:37:45 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 20:43:28 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 20:43:28 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 20:43:28 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 20:43:29 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 20:54:11 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 20:54:11 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 20:54:11 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 20:54:11 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 21:16:19 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 21:16:19 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 21:16:19 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 21:16:19 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 21:28:59 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 21:28:59 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 21:28:59 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 21:28:59 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 21:32:15 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 21:32:15 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 21:32:15 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 21:32:15 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 21:41:56 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 21:41:56 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 21:41:56 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 21:41:56 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 21:54:51 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 21:54:51 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 21:54:51 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 21:54:51 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 21:58:56 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 21:58:56 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 21:58:56 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 21:58:56 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 22:02:56 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 22:02:56 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 22:02:56 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 22:03:17 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 22:05:07 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 22:05:07 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 22:05:07 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 22:05:18 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 22:17:34 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 22:17:34 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 22:17:34 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 22:17:34 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 22:26:43 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 22:26:43 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 22:26:43 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 22:26:43 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 22:39:59 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 22:39:59 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 22:39:59 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 22:40:00 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 22:55:30 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 22:55:30 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 22:55:30 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 22:55:31 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 22:57:38 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 22:57:38 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 22:57:38 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 22:57:38 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 23:13:36 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 23:13:36 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 23:13:36 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 23:13:36 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 23:16:42 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 23:16:42 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 23:16:42 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 23:16:42 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 23:31:50 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 23:31:50 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 23:31:50 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 23:31:51 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120914-Thu Sep 13 13:15:59 2012 : Error: TLS_connect: error in SSLv3 write client hello B /var/log/radius/radius.log-20120914-Thu Sep 13 13:15:59 2012 : Error: Failed to create a new socket for proxying requests. /var/log/radius/radius.log-20120914:Thu Sep 13 13:23:29 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120914-Thu Sep 13 13:28:31 2012 : Error: TLS_connect: error in SSLv3 write client hello B /var/log/radius/radius.log-20120914-Thu Sep 13 13:28:31 2012 : Error: Failed to create a new socket for proxying requests. /var/log/radius/radius.log-20120914-Thu Sep 13 13:28:31 2012 : Proxy: (105478192) ?????O?????????r#?????anonymous@lboro.ac.uk??40-a6-d9-49-19-5c??00-17-df-2c-e4-c0:eduroam?? : Failed to insert initial packet into the proxy list. /var/log/radius/radius.log-20120914:Thu Sep 13 13:35:16 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120922-Fri Sep 21 21:25:24 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120922-Fri Sep 21 21:25:24 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120922-Fri Sep 21 21:25:24 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120922:Fri Sep 21 21:25:25 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120928-Thu Sep 27 13:25:56 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120928-Thu Sep 27 13:25:56 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120928-Thu Sep 27 13:25:56 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120928:Thu Sep 27 13:26:10 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120928-Thu Sep 27 15:05:46 2012 : Error: (2610) Rejecting request (proxy Id 116) due to lack of any response from home server 217.33.140.201 port 1646 /var/log/radius/radius.log-20120928-Thu Sep 27 15:05:49 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120928-Thu Sep 27 15:05:49 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120928:Thu Sep 27 15:05:50 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120928-Thu Sep 27 16:33:50 2012 : Error: Ignoring request to authentication address * port 1812 from unknown client 194.83.56.233 port 32486 proto udp /var/log/radius/radius.log-20120928-Thu Sep 27 16:33:50 2012 : Error: WARNING: Unresponsive child for request 49839, in component authenticate module peap /var/log/radius/radius.log-20120928-Thu Sep 27 16:34:00 2012 : Error: ASSERT FAILED threads.c[461]: request->magic == REQUEST_MAGIC /var/log/radius/radius.log-20120928:Thu Sep 27 22:13:54 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120929-Fri Sep 28 09:34:51 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120929-Fri Sep 28 09:34:51 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120929-Fri Sep 28 09:34:51 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120929:Fri Sep 28 09:34:51 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120929-Fri Sep 28 09:41:04 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120929-Fri Sep 28 09:41:04 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120929-Fri Sep 28 09:41:04 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120929:Fri Sep 28 09:41:04 2012 : Info: Loaded virtual server <default> -- -- Mon Oct 1 14:14:52 2012 : Error: TLS_connect: error in SSLv3 write client hello B Mon Oct 1 14:14:52 2012 : Error: Failed to create a new socket for proxying requests. Mon Oct 1 14:14:52 2012 : Proxy: (425950048) Failed to insert initial packet into the proxy list. Mon Oct 1 14:37:15 2012 : Info: Loaded virtual server <default> -- Mon Oct 1 14:42:54 2012 : Error: TLS_connect: error in SSLv3 write client hello B Mon Oct 1 14:42:54 2012 : Error: Failed to create a new socket for proxying requests. Mon Oct 1 14:54:18 2012 : Info: Loaded virtual server <default> -- Mon Oct 1 15:00:37 2012 : Error: TLS_connect: error in SSLv3 write client hello B Mon Oct 1 15:00:37 2012 : Error: Failed to create a new socket for proxying requests. Mon Oct 1 15:00:55 2012 : Info: Loaded virtual server <default> -- Mon Oct 1 15:06:42 2012 : Error: TLS_connect: error in SSLv3 write client hello B Mon Oct 1 15:06:42 2012 : Error: Failed to create a new socket for proxying requests. Mon Oct 1 15:07:09 2012 : Info: Loaded virtual server <default> -- Mon Oct 1 15:12:31 2012 : Error: TLS_connect: error in SSLv3 write client hello B Mon Oct 1 15:12:31 2012 : Error: Failed to create a new socket for proxying requests. Mon Oct 1 15:15:48 2012 : Info: Loaded virtual server <default> -- Mon Oct 1 15:22:23 2012 : Error: TLS_connect: error in SSLv3 write client hello B Mon Oct 1 15:22:23 2012 : Error: Failed to create a new socket for proxying requests. Mon Oct 1 15:22:58 2012 : Info: Loaded virtual server <default> -- Mon Oct 1 15:29:19 2012 : Error: TLS_connect: error in SSLv3 write client hello B Mon Oct 1 15:29:19 2012 : Error: Failed to create a new socket for proxying requests. Mon Oct 1 15:30:08 2012 : Info: Loaded virtual server <default> -- Mon Oct 1 15:34:47 2012 : Error: TLS_connect: error in SSLv3 write client hello B Mon Oct 1 15:34:47 2012 : Error: Failed to create a new socket for proxying requests. Mon Oct 1 15:35:18 2012 : Info: Loaded virtual server <default> -- Mon Oct 1 15:47:00 2012 : Error: TLS_connect: error in SSLv3 write client hello B Mon Oct 1 15:47:00 2012 : Error: Failed to create a new socket for proxying requests. Mon Oct 1 15:47:29 2012 : Info: Loaded virtual server <default> alan

2 1

rlm_rediswho with spaces
by Brian Candler 01 Nov '12

01 Nov '12

There appears to be a bit of a problem with rlm_rediswho and attributes which contain spaces. rlm_redis_query() calls underlying redisCommand(dissocket->conn, query) in libhiredis. However this API separates arguments by spaces, and does not allow any spaces embedded with arguments, not even with quoting. If you try something like this: start-insert = "LPUSH \"%{User-Name}\" \"%{attr},%{attr},...\"" then it actually pushes keys and values with surrounding double quotes. As far as I can see, you are supposed to call redisCommand(context, "SET %s %s", key, value) if key and/or value contain spaces. https://github.com/redis/hiredis https://groups.google.com/forum/?fromgroups=#!topic/redis-db/SeDznDcXQiw Possible solutions I can see: * Add a safe-characters array like sql_xlat, and don't include space (so it expands to =20). Icky. * Parse the string, if it contains quoted words then break into %s substitutions before passing to redisCommand. This would be the most transparent solution I think. * Change rlm_rediswho so that it has template and value, e.g. alive-insert = "LPUSH %s %s" alive-insert-0 = "%{User-Name}" alive-insert-1 = "%l,%{Acct-Session-Id},%{NAS-IP-Address},%{Acct-Session-Time},%{Framed-IP-Address},%{Acct-Input-Gigawords:-0},%{Acct-Output-Gigawords:-0},%{Acct-Input-Octets:-0},%{Acct-Output-Octets:-0}" Icky again. Any one have any better ideas? Regards, Brian.

3 16

Complete authorize & accounting redis module
by Manuel Guesdon 31 Oct '12

31 Oct '12

Hi, I've adapted rlm_sql to REDIS (http://redis.io/) key-store database. It handle authorize, accounting, checksimul and post-auth (only authorize is deeply tested). Authorize works like rlm_sql with groups, etc... Files are here: http://free.oxymium.net/freeradius/rlm_redisn/ Available as .tgz here: http://free.oxymium.net/freeradius/rlm_redisn-20111112-001.tgz Manuel -- ______________________________________________________________________ Manuel Guesdon - OXYMIUM

4 11

..compiling HEAD
by alan buxey 29 Oct '12

29 Oct '12

hi, further to last post...tried to get the current GIT HEAD...but failure during compilation (after usual ./configure stage). this happens with ot without BOILER=yes dhcp.c: In function ‘fr_dhcp_add_arp_entry’: dhcp.c:1568: warning: dereferencing pointer ‘sin’ does break strict-aliasing rules dhcp.c:1567: warning: dereferencing pointer ‘sin’ does break strict-aliasing rules dhcp.c:1566: note: initialized from here CC tcp.c LINK libfreeradius-radius.la dict.lo filters.lo hash.lo hmac.lo hmacsha1.lo isaac.lo log.lo misc.lo missing.lo md4.lo md5.lo print.lo radius.lo rbtree.lo sha1.lo snprintf.lo strlcat.lo strlcpy.lo token.lo udpfromto.lo valuepair.lo fifo.lo packet.lo event.lo getaddrinfo.lo vqp.lo heap.lo dhcp.lo tcp.lo *** glibc detected *** /usr/local/src/freeradius-server/scripts/jlibtool: malloc: top chunk is corrupt: 0x0000000000ea01e0 *** *** glibc detected *** /usr/local/src/freeradius-server/scripts/jlibtool: malloc: top chunk is corrupt: 0x0000000000ea1030 *** *** glibc detected *** /usr/local/src/freeradius-server/scripts/jlibtool: malloc: top chunk is corrupt: 0x0000000000ec2030 *** *** glibc detected *** /usr/local/src/freeradius-server/scripts/jlibtool: malloc: top chunk is corrupt: 0x0000000000ee3030 *** *** glibc detected *** /usr/local/src/freeradius-server/scripts/jlibtool: malloc: top chunk is corrupt: 0x0000000000f04030 *** *** glibc detected *** /usr/local/src/freeradius-server/scripts/jlibtool: malloc: top chunk is corrupt: 0x0000000000f25030 *** Making all in src/modules... Making all in src/modules/rlm_acctlog... CC rlm_acctlog.c LINK rlm_acctlog.la rlm_acctlog.lo *** glibc detected *** /usr/local/src/freeradius-server/scripts/jlibtool: malloc: top chunk is corrupt: 0x00000000009a81e0 *** *** glibc detected *** /usr/local/src/freeradius-server/scripts/jlibtool: malloc: top chunk is corrupt: 0x00000000009a9030 *** *** glibc detected *** /usr/local/src/freeradius-server/scripts/jlibtool: malloc: top chunk is corrupt: 0x00000000009ca030 *** *** glibc detected *** /usr/local/src/freeradius-server/scripts/jlibtool: malloc: top chunk is corrupt: 0x00000000009eb030 *** *** glibc detected *** /usr/local/src/freeradius-server/scripts/jlibtool: malloc: top chunk is corrupt: 0x0000000000a0c030 *** *** glibc detected *** /usr/local/src/freeradius-server/scripts/jlibtool: malloc: top chunk is corrupt: 0x0000000000a2d030 *** Can not find suitable library for /usr/local/src/freeradius-server/src/lib/libfreeradius-radius.la gmake[6]: *** [rlm_acctlog.la] Error 1 gmake[5]: *** [rlm_acctlog] Error 2 gmake[4]: *** [all] Error 2 gmake[3]: *** [modules] Error 2 gmake[2]: *** [all] Error 2 gmake[1]: *** [src] Error 2 make: *** [all] Error 2 hints? alan

4 4

v2.1.x branch renamed to v2.x.x
by Arran Cudbard-Bell 29 Oct '12

29 Oct '12

Someone was complaining about the branch name v2.1.x being confusing now were on 2.2.0. There's no point in maintaining a branch for v2.1.x because there's never going to be further development. To fixup branches in your fork: git branch -m v2.1.x v2.x.x git config branch.v2.x.x.merge refs/head/v2.x.x git push origin v2.x.x git push origin :v2.1.x -Arran

4 7

Commit report for master branch
by announce＠freeradius.org 27 Oct '12

27 Oct '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== More fixes to make it work with system libtool && jlibtool Alan T. DeKok@2012-10-27T17:57:19Z Files modified: * Make.inc.in * src/lib/Makefile * src/modules/rlm_eap/libeap/Makefile * src/modules/rlm_sql/drivers/rules.mak * src/modules/rules.mak Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/18d09fae538b74cfac05… ====== Try to fix "home server dead" code It was pretty horrific, and didn't make sense. This simplification seems to work Alan T. DeKok@2012-10-27T13:47:02Z Files modified: * src/include/realms.h * src/main/command.c * src/main/process.c * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d3a825d3548f907b378… ====== Minor formatting fixes Arran Cudbard-Bell@2012-10-27T12:26:35Z Files modified: * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1a7f30764908b00527cf… ====== Merge pull request #118 from philmayers/cache-locking add locking to rlm_cache Arran Cudbard-Bell@2012-10-27T12:14:55Z Files modified: * src/modules/rlm_cache/rlm_cache.c * share/dictionary.proxim Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0569523d3eab69bde29f… ====== add locking to rlm_cache Phil Mayers@2012-10-27T10:38:02Z Files modified: * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97b9bd5e630ad6f7ce54… ====== After running it through the formatter Alan T. DeKok@2012-10-27T10:00:36Z Files modified: * share/dictionary.proxim Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/af92d92268a8a901914d… ====== Fixes to work with system libtool Alan T. DeKok@2012-10-27T09:08:18Z Files modified: * Make.inc.in * src/modules/rlm_sql/drivers/rules.mak * src/modules/rules.mak Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/15433acd6429d37f0bff… ====== Remove last shred of libtool WARNING: don't do "autoreconf", as it adds libtool back! Instead, do "autoconf". Alan T. DeKok@2012-10-27T08:59:06Z Files modified: * aclocal.m4 * configure Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9ffe113bbe5a3cbad511… ====== -- This commit summary was generated @2012-10-27T18:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.1.x branch
by announce＠freeradius.org 27 Oct '12

27 Oct '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Note more changes Arran Cudbard-Bell@2012-10-27T12:53:08Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b50a6fb10a5c1557ae43… ====== Minor formatting fixes Arran Cudbard-Bell@2012-10-27T12:27:49Z Files modified: * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e03f2af5086975b03ecc… ====== Merge pull request #117 from philmayers/cache-locking-v21x add locking to rlm_cache Arran Cudbard-Bell@2012-10-27T12:15:06Z Files modified: * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5d7188eabafc4e5e90f3… ====== add locking to rlm_cache Phil Mayers@2012-10-27T10:35:58Z Files modified: * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/102534fb15f862e0d16b… ====== -- This commit summary was generated @2012-10-27T18:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

xlat performance / "compile time" parsing?
by Phil Mayers 27 Oct '12

27 Oct '12

I recently made some changes to our FreeRADIUS logging config, inspired by Matthew Newton's creative use of linelog as discussed on the -users list. The config uses a wrapping unlang policy, along with quite a bit of conditional expansion. Since deploying it, I've noticed the CPU use of our FreeRADIUS server has jumped, at lot. Hotspot profiling with "oprofile" tells me that almost all the time is being spent inside a few critical functions: radius_xlat rad_copy_variable radius_evaluate_condition I've stared at the code for the first two a bit, and I think I understand why it's so expensive; it essentially parses the input string one character at a time, every time, and in the case of a conditional attribute, it walks over the input twice (or more). A roughly similar thing happens wth radius_evaluate_condition. This set me to wondering about some kind of parser cache. The idea would be that a string like: "var %{%{foo}:-%{%{bar}:-baz}}" ...would be parsed into some kind of linked-list / tree, like so: v[0].type = LITERAL v[0].value = "var " v[1].type = CONDITIONAL v[1].value = struct { left.type = EXPANSION left.value = "foo" right.type = CONDITIONAL right.value = struct { left.type = EXPANSION left.value = "bar" right.type = LITERAL right.value = "baz" } } The parsing would be done transparently by radius_xlat the first time it saw an input template, and cached for the lifetime of the process - though I haven't yet figured out how to do this without locking. Once parsed, the expansion function should be both very simple, and very fast. If we wanted to go even further, the EXPANSION values could be the attribute number rather than name, but I am having trouble reasoning out whether this might lead to problems with changing xlat or attribute registrations e.g. on HUP or similar. Something similar could be done for radius_evaluate_condition, except it's even easier there - only the unlang code calls uses conditions, so we can just compile it - no need to transparently convert the string. Before I embark on this to see if it helps - is this even a reasonable approach? Cheers, Phil

2 1