November 2012 - Freeradius-Devel - lists.freeradius.org

rlm_sql_ocioracle driver v. 0.1
by Ge＠＠ru 14 Mar '15

14 Mar '15

Hi, in attachment patch to add rlm_sql_ocioracle driver to freeradius 2.1.x tree (it seems work yet on 3.x tree). This drivers permit to use function/procedure with CURSOR (through :Ret_Cursor string) like for example: group_membership_query = "begin :Ret_Cursor := \ pkRadius.group_membership_query('%{SQL-User-Name}'); end;" TODO for next release: - add support to oracle connection pool instead of open a new connection for every socket on startup; - enhancement on handle error (through error callback) on do query; - add documentation. Module need oracle instantclient library and ocilib library (http://orclib.sourceforge.net/) Good luck to rlm_sql_ocioracle driver!! Geaaru

2 5

New build system
by Alan DeKok 21 Jan '13

21 Jan '13

After a few days of banging on it, it seems to work. I've just committed a few changes to address the last few problems. A "make -j 8" now works, with the new boilermake. All dependencies are tracked. Some of the dependencies aren't perfect, but they work. If there are no cries of pain, we'll spend the next few days deleting the old build system. Alan DeKok.

2 2

New LDAP module in "master"
by Alan DeKok 21 Jan '13

21 Jan '13

I've re-written the LDAP module in "master". The code is simpler, cleaner, and easier to understand. It is largely compatible in function with the old module, with the following differences: - the eDirectory code has been removed. I don't run eDir, and I can't test it. Patches to re-add it are welcome - the module uses the new connection pool API. As a result, its configuration is more in line with the rest of the server - the config items have been reorganized to make more sense. The names are similar, but they're grouped into sections I've tested it against a number of LDAP servers. It seems to be stable, and performs at 6K queries per second in sustained load. The old module was much less than that. The new connection pool also means that the module can re-use connections in more situations. Previously, the module would close and then re-open connections many times. Now, it does so much less often. The next steps are: - add eDir support (if people need it) - move "ldap.attrmap" to the module configuration. Alan DeKok.

3 5

Proxy fixes
by Alan DeKok 08 Jan '13

08 Jan '13

I managed to find an hour or two in between various things. I've taken a look at the proxy code, and added some fixes in "master". To be polite, I didn't quite understand the previous code. So... I've deleted things, and simplified other things. The result is that the "zombie" home server detection should be better. I don't know if it fixes the "crash on dead home server" issue that people were seeing. I wasn't able to reproduce that. But, the relevant code is now different. So I hope it's fixed. As always, blame Arran for any bugs. :) Alan DeKok.

3 8

Re: boilermake n stuff
by Alan Buxey 23 Nov '12

23 Nov '12

Hi, As per my emails from yesterday, when doing that I get a server that won't start due to library issues (using the build path instead of /usr/lib ) alan

2 1

boilermake n stuff
by Arran Cudbard-Bell 23 Nov '12

23 Nov '12

Just finished adding all.mk files to most of the modules, to finish the work Alan started a while back. This involved rebuilding all the autoconf files, which meant a huge version jump from the last time some of them were built. Can you all try and build the latest HEAD in master and report any issues. If you want to try out the new boilermake system (which is considerably faster on re-make as its not based around recursive make): ./configure --enable-boilermake and make/make install as normal The old build system will be going away soon, at which point everything will just default to the new system and hopefully carry on working, we just need to make sure everything builds and gets linked correctly with the new build system first. -Arran

4 36

EAP-PSK
by RuiQiang Huang 21 Nov '12

21 Nov '12

Hi, I just wondering what's the best way to get EAP-PSK working with freeRadius. I know that using eap2 and hostap can achieve this. But looks like for years no other people updating this, that it's on a very old version. I'm wondering can I modify one of the eap module, for example EAP-MD5, to achieve this? Any adviser is appreciated.

2 1

3.0 timeline
by Phil Mayers 20 Nov '12

20 Nov '12

I'm going to upgrade some of the instances of RADIUS to run on HEAD, to give it some soak testing (our eduroam IdP / home and SP / visted servers) and hopefully encourage a release ;o) Before I do that, are there any thoughts on a timeline to a 3.0 release, or any cautionary notes?

3 5

MS-CHAPv2 change password not working in master
by Carlos Velasco 16 Nov '12

16 Nov '12

Hi, I downloaded git master yesterday to test the new MS-CHAPv2 change password functionality. My setup is a Cisco router with "passwd-expiry" setup with Cisco VPN client for login, with FreeRadius to Windows AD through Winbind. MS-CHAPv2 authentication works fine. Winbind and AD setup is right. But testing the new passchange functionality by selecting "User must change password at next logon" in the Windows user, the New password windows popup in Cisco VPN client, but the change password process fails: ntlm_auth said: Password-Change: No Password-Change-Error: Wrong Password . . Winbind logs also shows: NT_STATUS_WRONG_PASSWORD Looking into code I suppose the problem is something with the old NT hash, but not an expert here. Any help would be apreciated. In these logs the user is "NIMASTELECOM\testpw". The current password is "y58R41ut8W" (expired). And the new password used was "H6eEWu7r65tw38ert1". Some radius logs: === # radiusd -X radiusd: FreeRADIUS Version 3.0.0, for host x86_64-unknown-linux-gnu, built on Nov 16 2012 at 01:46:19 Copyright (C) 1999-2012 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License. For more information about these matters, see the file named COPYRIGHT. Starting - reading configuration files ... ...................................... Ready to process requests. rad_recv: Access-Request packet from host 10.112.14.2 port 1645, id=127, length=202 User-Name = "NIMASTELECOM\\testpw" Calling-Station-Id = "217.126.166.195" MS-CHAP-Challenge = 0xdd2a98d3c3c69fb959df2f561d50d025 MS-CHAP2-Response = 0x01007b0896de80c7098bac5566313c61d1b200000000000000003cc2724e1d2be6d1868df97bd0607859441dc99b5ef37af0 NAS-Port-Type = Virtual Cisco-NAS-Port = "85.112.6.36" NAS-Port = 0 NAS-Port-Id = "85.112.6.36" Service-Type = Login-User NAS-IP-Address = 10.112.14.2 Event-Timestamp = "Nov 16 2012 10:39:06 CET" (0) # Executing section authorize from file /etc/raddb/sites-enabled/vpn_nimas_tk (0) group authorize { (0) - entering group authorize {...} (0) mschap-vpn_nimas_tk : Found MS-CHAP attributes. Setting 'Auth-Type = mschap-vpn_nimas_tk' (0) [mschap-vpn_nimas_tk] = ok (0) ? if (!control:Auth-Type) (0) ? Evaluating !(control:Auth-Type) -> FALSE (0) ? if (!control:Auth-Type) -> FALSE (0) detail-vpn_nimas_tk-auth : expand: /var/log/radius/radacct/vpn_nimas_tk-auth-%Y%m%d -> /var/log/radius/radacct/vpn_nimas_tk-auth-20121116 (0) detail-vpn_nimas_tk-auth : /var/log/radius/radacct/vpn_nimas_tk-auth-%Y%m%d expands to /var/log/radius/radacct/vpn_nimas_tk-auth-20121116 (0) detail-vpn_nimas_tk-auth : expand: %t -> Fri Nov 16 10:39:06 2012 (0) [detail-vpn_nimas_tk-auth] = ok (0) Found Auth-Type = MSCHAP (0) # Executing group from file /etc/raddb/sites-enabled/vpn_nimas_tk (0) group MS-CHAP { (0) - entering group MS-CHAP {...} (0) mschap-vpn_nimas_tk : Creating challenge hash with username: testpw (0) mschap-vpn_nimas_tk : Client is using MS-CHAPv2 for testpw, we need NT-Password (0) mschap-vpn_nimas_tk : expand: --username=%{mschap-vpn_nimas_tk:User-Name} -> --username=testpw (0) mschap-vpn_nimas_tk : expand: --domain=%{mschap-vpn_nimas_tk:NT-Domain} -> --domain=NIMASTELECOM (0) mschap-vpn_nimas_tk : Creating challenge hash with username: testpw (0) mschap-vpn_nimas_tk : expand: --challenge=%{mschap-vpn_nimas_tk:Challenge:-00} -> --challenge=3550f7bf5746677f (0) mschap-vpn_nimas_tk : expand: --nt-response=%{mschap-vpn_nimas_tk:NT-Response:-00} -> --nt-response=3cc2724e1d2be6d1868df97bd0607859441dc99b5ef37af0 Exec-Program output: Must change password (0xc0000224) Exec-Program-Wait: plaintext: Must change password (0xc0000224) Exec-Program: returned: 1 (0) mschap-vpn_nimas_tk : ntlm_auth says Must change password (0xc0000224) (0) [mschap-vpn_nimas_tk] = reject (0) Failed to authenticate the user. (0) Login incorrect: [NIMASTELECOM\\testpw] (from client RMADTKNIMAS01 port 0 cli 217.126.166.195) (0) Using Post-Auth-Type Reject (0) WARNING: Unknown value specified for Post-Auth-Type. Cannot perform requested action. (0) Finished request 0. Waking up in 0.9 seconds. (0) Sending delayed reject Sending Access-Reject of id 127 from 85.112.8.156 port 1812 to 10.112.14.2 port 1645 MS-CHAP-Error = "\001E=648 R=0 C=47763c0a72e4fb2d546c9a413245f87b V=3 M=Password Expired" Waking up in 4.9 seconds. (0) Cleaning up request packet ID 127 with timestamp +14 Ready to process requests. rad_recv: Access-Request packet from host 10.112.14.2 port 1645, id=128, length=755 User-Name = "NIMASTELECOM\\testpw" MS-CHAP-Challenge = 0xf42a98d3c3c69fb959df2f561d50d025 MS-CHAP2-CPW = 0x070100000000000000000000000000000000b79a22699ae1dedc832935c8f5c5d7880000000000000000b0bfd263d6c0bbc0b2b28e085c072676857cf1f7c6f88a300000 MS-CHAP-NT-Enc-PW = 0x0601000176116065c54f9ef590a62a9e5d90a75e906e19b76954e1ff0deeb5f3a5212f64e16adf48e0f1e3bb2cd3c3889dac2d67b6584725b87c28d1612fdedf8268e3af3096a2c596ea8efb16697a10b5e726a86e457a84669c6ec82cfc67a301ff9d329b0ef45b96084d099823105412e0779971079efc9260b6ab1805df81b10f3fa65d4aa859beeaae01f0a2311f51bfc9c84f0168b595fa80273b6a08180e83ec63f03a6face5015ccb52114017 MS-CHAP-NT-Enc-PW = 0x060100025ddd392405df3b0952a11ad2158f1c26398cdd6f2eb4be40607ff1fe81fc1e4f335e9b1a8a8a4a081f4b6834fe8e8d024ae1c80da758057f9505f8dff2a0211dd68d67fea4cb6de33f582be526fb0698669878264cb7ab61883a4caa4e4bc60f5421496218319c3ad4c0210383edc4daf25f43a55002d8014c287659c32cdbc6a43e0dc01c2c2effc7aa43267a0cf5c2100b4d25de0408559dd012496716837562ff79032b2f1671cd85d582 MS-CHAP-NT-Enc-PW = 0x060100030c2cb9971bac6562e7e0615b9d89c703e7bbd4e0765af7c420590cd3b6d0149ab90d95b03f56e543759da80aea68ca44bf4b7514a1f2550fa2be6571c1639fd67738d2351a248f43f7ce4e1c552cf769416be4b6b78e7c1f49b32e5f2b7421acebab117a2009ccb87e0170cd30b31024a331920c5c2891a939ec22061af7fad85140a0bd99e89c3c6d56a3e9eb3a8025d5ef968ba7523c78f11bb43cd49936d2b28d289788d164b507a76fb6 NAS-Port-Type = Virtual Cisco-NAS-Port = "85.112.6.36" NAS-Port = 0 NAS-Port-Id = "85.112.6.36" Service-Type = Login-User NAS-IP-Address = 10.112.14.2 Event-Timestamp = "Nov 16 2012 10:39:20 CET" (1) # Executing section authorize from file /etc/raddb/sites-enabled/vpn_nimas_tk (1) group authorize { (1) - entering group authorize {...} (1) mschap-vpn_nimas_tk : Found MS-CHAP attributes. Setting 'Auth-Type = mschap-vpn_nimas_tk' (1) [mschap-vpn_nimas_tk] = ok (1) ? if (!control:Auth-Type) (1) ? Evaluating !(control:Auth-Type) -> FALSE (1) ? if (!control:Auth-Type) -> FALSE (1) detail-vpn_nimas_tk-auth : expand: /var/log/radius/radacct/vpn_nimas_tk-auth-%Y%m%d -> /var/log/radius/radacct/vpn_nimas_tk-auth-20121116 (1) detail-vpn_nimas_tk-auth : /var/log/radius/radacct/vpn_nimas_tk-auth-%Y%m%d expands to /var/log/radius/radacct/vpn_nimas_tk-auth-20121116 (1) detail-vpn_nimas_tk-auth : expand: %t -> Fri Nov 16 10:39:20 2012 (1) [detail-vpn_nimas_tk-auth] = ok (1) Found Auth-Type = MSCHAP (1) # Executing group from file /etc/raddb/sites-enabled/vpn_nimas_tk (1) group MS-CHAP { (1) - entering group MS-CHAP {...} (1) mschap-vpn_nimas_tk : MS-CHAPv2 password change request received (1) mschap-vpn_nimas_tk : Password change payload valid (1) mschap-vpn_nimas_tk : Doing MS-CHAPv2 password change via ntlm_auth helper (1) mschap-vpn_nimas_tk : expand: username: %{mschap-vpn_nimas_tk:User-Name} -> username: testpw (1) mschap-vpn_nimas_tk : expand: nt-domain: %{mschap-vpn_nimas_tk:NT-Domain} -> nt-domain: NIMASTELECOM (1) mschap-vpn_nimas_tk : ntlm_auth said: Password-Change: No Password-Change-Error: Wrong Password . . (1) mschap-vpn_nimas_tk : ntlm auth password change failed: Password-Change-Error: Wrong Password (1) mschap-vpn_nimas_tk : Password change failed (1) [mschap-vpn_nimas_tk] = reject (1) Failed to authenticate the user. (1) Login incorrect: [NIMASTELECOM\\testpw] (from client RMADTKNIMAS01 port 0) (1) Using Post-Auth-Type Reject (1) WARNING: Unknown value specified for Post-Auth-Type. Cannot perform requested action. (1) Finished request 1. Waking up in 0.2 seconds. Waking up in 0.7 seconds. (1) Sending delayed reject Sending Access-Reject of id 128 from 85.112.8.156 port 1812 to 10.112.14.2 port 1645 MS-CHAP-Error = "\001E=709 R=0 M=Password change failed" Waking up in 4.9 seconds. (1) Cleaning up request packet ID 128 with timestamp +28 Ready to process requests. === The mschap derived module is simple: === mschap mschap-vpn_nimas_tk { with_ntdomain_hack = yes ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username=%{mschap-vpn_nimas_tk:User-Name} --domain=%{mschap-vpn_nimas_tk:NT-Domain} --challenge=%{mschap-vpn_nimas_tk:Challenge:-00} --nt-response=%{mschap-vpn_nimas_tk:NT-Response:-00}" passchange { ntlm_auth = "/usr/bin/ntlm_auth -d 10 -l /var/log/samba --helper-protocol=ntlm-change-password-1" ntlm_auth_username = "username: %{mschap-vpn_nimas_tk:User-Name}" ntlm_auth_domain = "nt-domain: %{mschap-vpn_nimas_tk:NT-Domain}" retry_msg = "Re-enter (or reset) the password" } === Winbind logs: === [2012/11/16 10:39:06.810639, 6] winbindd/winbindd.c:794(new_connection) accepted socket 25 [2012/11/16 10:39:06.810793, 10] winbindd/winbindd.c:644(process_request) process_request: request fn INTERFACE_VERSION [2012/11/16 10:39:06.810841, 3] winbindd/winbindd_misc.c:384(winbindd_interface_version) [ 9918]: request interface version [2012/11/16 10:39:06.810906, 10] winbindd/winbindd.c:740(winbind_client_response_written) winbind_client_response_written[9918:INTERFACE_VERSION]: delivered response to client [2012/11/16 10:39:06.810964, 10] winbindd/winbindd.c:644(process_request) process_request: request fn WINBINDD_PRIV_PIPE_DIR [2012/11/16 10:39:06.811002, 3] winbindd/winbindd_misc.c:417(winbindd_priv_pipe_dir) [ 9918]: request location of privileged pipe [2012/11/16 10:39:06.811068, 10] winbindd/winbindd.c:740(winbind_client_response_written) winbind_client_response_written[9918:WINBINDD_PRIV_PIPE_DIR]: delivered response to client [2012/11/16 10:39:06.811117, 6] winbindd/winbindd.c:842(winbind_client_request_read) closing socket 25, client exited [2012/11/16 10:39:06.811171, 6] winbindd/winbindd.c:794(new_connection) accepted socket 25 [2012/11/16 10:39:06.811227, 10] winbindd/winbindd.c:617(process_request) process_request: Handling async request 9918:PAM_AUTH_CRAP [2012/11/16 10:39:06.811266, 3] winbindd/winbindd_pam_auth_crap.c:56(winbindd_pam_auth_crap_send) [ 9918]: pam auth crap domain: [NIMASTELECOM] user: testpw [2012/11/16 10:39:07.071142, 10] winbindd/winbindd.c:679(wb_request_done) wb_request_done[9918:PAM_AUTH_CRAP]: NT_STATUS_PASSWORD_MUST_CHANGE [2012/11/16 10:39:07.071243, 10] winbindd/winbindd.c:740(winbind_client_response_written) winbind_client_response_written[9918:PAM_AUTH_CRAP]: delivered response to client [2012/11/16 10:39:07.071320, 6] winbindd/winbindd.c:842(winbind_client_request_read) closing socket 25, client exited [2012/11/16 10:39:20.825567, 6] winbindd/winbindd.c:794(new_connection) accepted socket 25 [2012/11/16 10:39:20.825731, 10] winbindd/winbindd.c:644(process_request) process_request: request fn INTERFACE_VERSION [2012/11/16 10:39:20.825780, 3] winbindd/winbindd_misc.c:384(winbindd_interface_version) [ 9957]: request interface version [2012/11/16 10:39:20.825851, 10] winbindd/winbindd.c:740(winbind_client_response_written) winbind_client_response_written[9957:INTERFACE_VERSION]: delivered response to client [2012/11/16 10:39:20.825916, 10] winbindd/winbindd.c:644(process_request) process_request: request fn WINBINDD_PRIV_PIPE_DIR [2012/11/16 10:39:20.825960, 3] winbindd/winbindd_misc.c:417(winbindd_priv_pipe_dir) [ 9957]: request location of privileged pipe [2012/11/16 10:39:20.826035, 10] winbindd/winbindd.c:740(winbind_client_response_written) winbind_client_response_written[9957:WINBINDD_PRIV_PIPE_DIR]: delivered response to client [2012/11/16 10:39:20.826106, 6] winbindd/winbindd.c:842(winbind_client_request_read) closing socket 25, client exited [2012/11/16 10:39:20.826169, 6] winbindd/winbindd.c:794(new_connection) accepted socket 25 [2012/11/16 10:39:20.826235, 10] winbindd/winbindd.c:644(process_request) process_request: request fn DOMAIN_NAME [2012/11/16 10:39:20.826279, 3] winbindd/winbindd_misc.c:394(winbindd_domain_name) [ 9957]: request domain name [2012/11/16 10:39:20.826341, 10] winbindd/winbindd.c:740(winbind_client_response_written) winbind_client_response_written[9957:DOMAIN_NAME]: delivered response to client [2012/11/16 10:39:20.826497, 10] winbindd/winbindd.c:617(process_request) process_request: Handling async request 9957:PAM_CHNG_PSWD_AUTH_CRAP [2012/11/16 10:39:20.826544, 3] winbindd/winbindd_pam_chng_pswd_auth_crap.c:57(winbindd_pam_chng_pswd_auth_crap_send) [ 9957]: pam change pswd auth crap domain: NIMASTELECOM user: testpw [2012/11/16 10:39:20.856407, 10] winbindd/winbindd.c:679(wb_request_done) wb_request_done[9957:PAM_CHNG_PSWD_AUTH_CRAP]: NT_STATUS_WRONG_PASSWORD [2012/11/16 10:39:20.856498, 10] winbindd/winbindd.c:740(winbind_client_response_written) winbind_client_response_written[9957:PAM_CHNG_PSWD_AUTH_CRAP]: delivered response to client [2012/11/16 10:39:20.856674, 6] winbindd/winbindd.c:842(winbind_client_request_read) closing socket 25, client exited === Regards, Carlos Velasco

1 1

Fwd: checkrad patch to support Juniper's BRAS
by Guilherme Franco 15 Nov '12

15 Nov '12

Hi, As bugs.freeradius.org is not working, I'm posting it here: I would like to submit a new version of this Patch, which uses snmpget instead of snmpwalk (to increase performance). It also fixes a problem with checkrad complaining about lack of $ in the "out" variable: +++ C:/Users/brgufr1/Downloads/checkrad.pl.in.txt Tue Nov 13 20:00:06 2012 @@ -24,7 +24,7 @@ # digitro_rusers 1.1 Author: accdias(a)sst.com.br # cyclades_snmp 1.0 Author: accdias(a)sst.com.br # usrhiper_snmp 1.0 Author: igor(a)ipass.net -# juniper_e_snmp 1.0 Author: guilhermefranco(a)gmail.com +# juniper_e_snmp 1.1 Author: guilhermefranco(a)gmail.com # multitech_snmp 1.0 Author: ehonzay(a)willmar.com # netserver_telnet 1.0 Author: mts(a)interplanet.es # versanet_snmp 1.0 Author: support(a)versanetcomm.com @@ -467,19 +467,24 @@ } # -# Check the subscriber name on a Juniper JunosE E-Series BRAS (ERX, E120, E320 ) +# Check the subscriber name on a Juniper JunosE E-Series BRAS (ERX, E120, E320). Requires "radius acct-session-id-format decimal" configuration in the BRAS. # # Author: Guilherme Franco <guilhermefranco(a)gmail.com> # sub juniper_e_snmp { + #receives acct_session + my $temp = $ARGV[4]; + #removes the leading 0s + my $clean_temp = int $temp; -out=snmpwalk($ARGV[1],$cmmty_string,".1.3.6.1.4.1.4874.2.2.20.1.8.4.1.2"); + $out=snmpget($ARGV[1], $cmmty_string, ".1.3.6.1.4.1.4874.2.2.20.1.8.4.1.2.$clean_temp"); if($out=~/\"$ARGV[3]\"/){ return 1; }else{ return 0; } + } # Thank you. Regards, Guilherme de Oliveira Franco guilhermefranco(a)gmail.com On Wed, Jun 13, 2012 at 8:30 PM, Guilherme Franco <guilhermefranco(a)gmail.com > wrote: > Hello, > > I would like to submit a patch to checkrad (freeradius-server-2.1.12), > adding support for Juniper's E-Series BRAS (ERX, E120, E320). > > It adds the possibility to query the subscriber's username using SNMP. > If the subscriber is found, it returns 1 "Returning 1 (double > detected)", else, returns 0 "Returning 0 (login ok)". > > On clients.conf, the nastype should be set to juniper. > > --- > C:/Users/brgufr1/Downloads/freeradius-server-2.1.12/freeradius-server-2.1.12/src/main/ > checkrad.pl.in > Fri > Sep 30 11:12:07 2011 > +++ C:/Users/brgufr1/Desktop/checkrad Wed Jun 13 18:49:32 2012 > @@ -24,6 +24,7 @@ > # digitro_rusers 1.1 Author: accdias(a)sst.com.br > # cyclades_snmp 1.0 Author: accdias(a)sst.com.br > # usrhiper_snmp 1.0 Author: igor(a)ipass.net > +# juniper_e_snmp 1.0 Author: guilhermefranco(a)gmail.com > # multitech_snmp 1.0 Author: ehonzay(a)willmar.com > # netserver_telnet 1.0 Author: mts(a)interplanet.es > # versanet_snmp 1.0 Author: support(a)versanetcomm.com > @@ -466,6 +467,21 @@ > } > > # > +# Check the subscriber name on a Juniper JunosE E-Series BRAS ( > ERX, E120, E320 ) > +# > +# Author: Guilherme Franco <guilhermefranco(a)gmail.com> > +# > +sub juniper_e_snmp { > + > + > $out=snmpwalk($ARGV[1],$cmmty_string,".1.3.6.1.4.1.4874.2.2.20.1.8.4.1.2"); > + if($out=~/\"$ARGV[3]\"/){ > + return 1; > + }else{ > + return 0; > + } > +} > + > +# > # Check a MultiTech CommPlete Server ( CC9600 & CC2400 ) > # > # Author: Eric Honzay of Bennett Office Products < > ehonzay(a)willmar.com> > @@ -1434,6 +1450,8 @@ > $ret = &cisco_snmp; > } elsif ($ARGV[0] eq 'cvx') { > $ret = &cvx_snmp; > +} elsif ($ARGV[0] eq 'juniper') { > + $ret = &juniper_e_snmp; > } elsif ($ARGV[0] eq 'multitech') { > $ret = &multitech_snmp; > } elsif ($ARGV[0] eq 'computone') { > > Regards, > > Guilherme de Oliveira Franco > guilhermefranco(a)gmail.com >

2 3

--with-MODULE vs. --with-experimental-modules
by Phil Mayers 15 Nov '12

15 Nov '12

AFAICT, --with-module doesn't do anything; you have to supply --with-experimental-modules to let non-stable modules build, and that pulls all of them in. Am I missing something? How might I, for example, compile the server with all stable modules plus rlm_redis?

3 3

Git repository (Unstaged changes)
by Manuel Argüelles 14 Nov '12

14 Nov '12

Hello, I'm new in the list and just trying to get into freeradius. I tried to clone the repository and found this: $ git clone git://git.freeradius.org/freeradius-server.git Cloning into 'freeradius-server'... remote: Counting objects: 81887, done. remote: Compressing objects: 100% (17052/17052), done. remote: Total 81887 (delta 64675), reused 81796 (delta 64618) Receiving objects: 100% (81887/81887), 13.14 MiB | 463 KiB/s, done. Resolving deltas: 100% (64675/64675), done. $ cd freeradius-server $ git status # On branch master # Changes not staged for commit: # (use "git add <file>..." to update what will be committed) # (use "git checkout -- <file>..." to discard changes in working directory) # # modified: dialup_admin/htdocs/help/filter_id_help.html # modified: dialup_admin/htdocs/help/framed_protocol_help.html # modified: dialup_admin/htdocs/help/service_type_help.html # modified: raddb/sql/oracle/msqlippool.txt # modified: share/dictionary.freeswitch # modified: src/modules/rlm_ruby/rlm_ruby.c # modified: src/modules/rlm_securid/Makefile # modified: src/modules/rlm_securid/rlm_securid.c # no changes added to commit (use "git add" and/or "git commit -a") >From man gitattributes: ident When the attribute ident is set for a path, git replaces $Id$ in the blob object with $Id:, followed by the 40-character hexadecimal blob object name, followed by a dollar sign $ upon checkout. Any byte sequence that begins with $Id: and ends with $ in the worktree file is replaced with $Id$ upon check-in And at the end of git diff, there are multiple changes similar to: - * Version: $Id: $ + * Version: $Id$ Sorry if this was already reported.

5 10

non-FF merge from master
by Phil Mayers 13 Nov '12

13 Nov '12

All, I just had another "update (forced)" pull when I did "get fetch --all" on the master branch, followed by a failure to "git merge" onto my local master. As mentioned previously, my "master" branch is pristine, and should be unchanged from upstream "master". Is someone doing "rebase" on master? If so, can I cast a vote for "please don't"?

2 3

configure/build system
by Arran Cudbard-Bell 07 Nov '12

07 Nov '12

Hi All, Over the past few days i've been making modifications to the autoconf scripts to fix some long standing issues. Previously autoconf.h would be installed along with the library files, and #included from <freeradius-server/libradius.h>, this meant programs and libraries that included libradius.h and their own autoconf headers could get annoying redefinition warnings, and depending on the order of inclusion, may have had their autoconf values overridden. With the new system, header files that require values from autoconf.h are preprocessed to substitute the autoconf values before they're used or installed. Unfortunately this caused issues at build time, where modules or library files were relying on the inclusion of libradius.h to provide autoconf.h definitions. The fix for this was to change CFLAGS to include -imacros src/include/features.h and src/include/autoconf.h. This means the definitions from features.h (all the WITH_* defines like WITH_DHCP, WITH_TCP etc..) and from autoconf.h (all the HEAD_* defines) are available everwhere, but are never emitted. This makes life a bit simpler when writing modules, and means anyone wanting to build against the libraries FreeRADIUS installs, can now do so without issues. Please can you check the server still builds correctly, you'll probably want to reconfigure before hand. -Arran

3 6

--with-developer
by Arran Cudbard-Bell 06 Nov '12

06 Nov '12

Behaviour of --with-developer is changing. When --with-developer=yes compiler optimisation will now be disabled, and -g3 will be set, so gcc emitts the most complete debugging info (should include the value preprocessor macros and other useful things). --with-developer=yes is automatically set if you're building from a git repo. So if you happen to be stress testing or pushing a pre-release version into production, you will want to set --with-developer=no, which will re-enable optimisation and set -g (2). This will only be changed in master branch, because of issues with package maintainers passing --enable-developer when building binary packages. In other news, ident has been enabled in the main repo, so all the little $Id$ tags that were left over from CVS will now be expanded on checkout to contain the latest commit hash for the file. The format of RADIUSD_VERSION has now also changed. Previously it was the raw value from VERSION <major>.<minor>.<incremental> now it's a 6 digit integer <major><minor><incremental>. This is because the C preprocessor can't do comparisons between floats, only integers, so if you needed to make your custom module build with multiple versions of the server, you couldn't. Alan dislikes this approach and thinks it should die with fire, but if you don't like it, don't use it. There's also a new xlat expansion %{dhcp_options:}. Some switch vendors offer DHCP to RADIUS gateways, but don't define their own VSAs to represent DHCP options, so include the DHCP options from the DHCP packet as an opaque blob of binary data packed into a single VSA. Seeing as the server already has the code to parse dhcp options, it seemed like a fun hack to expose it as an xlat function. %{dhcp_options:} takes an attribute reference with qualifiers, and expands to the number of options in the blob. During expansion it adds all the options it finds in the blob to the request list with +=, using the FR DHCP dictionary. If anyone knows of other vendors besides the lazy lazy French one doing this, please let me know. -Arran

5 16

Re: FR 3.0.0 crashes
by Alan Buxey 03 Nov '12

03 Nov '12

Well, this code is getting old.. I was hoping that some things have been fixed but, as you can see from my other thread, I can't actually build the latest code alan

2 1

FR 3.0.0 crashes
by alan buxey 03 Nov '12

03 Nov '12

hi, have been seeing a few things that cause the server to crash and burn ... will need to run in full debug/devel mode to capture the main things...but hopefully some of these error messages will make sense...the server was compiled from GIT release from a couple of weeks ago - been having a look at the code changes that have taken place and none seem to touch the proxy/thread stuff: "Info: Loaded virtual server <default>" is the first line to appear in the log file when our monit process kicks the server due to it being dead: note - many of the first errors are all the same cause/issue - there are a couple of more later on /var/log/radius/radius.log-20120906-Wed Sep 5 18:42:12 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120906-Wed Sep 5 18:42:12 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120906-Wed Sep 5 18:42:12 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120906:Wed Sep 5 18:42:12 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120907-Thu Sep 6 10:31:16 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120907-Thu Sep 6 10:31:16 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120907-Thu Sep 6 10:31:16 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120907:Thu Sep 6 10:45:34 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120907-Thu Sep 6 11:34:06 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120907-Thu Sep 6 11:34:06 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120907-Thu Sep 6 11:34:06 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120907:Thu Sep 6 11:37:35 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120907-Thu Sep 6 11:43:19 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120907-Thu Sep 6 11:43:19 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120907-Thu Sep 6 11:43:19 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120907:Thu Sep 6 12:07:14 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120907-Thu Sep 6 13:14:00 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120907-Thu Sep 6 13:14:00 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120907-Thu Sep 6 13:14:00 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120907:Fri Sep 7 08:11:31 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120911-Mon Sep 10 08:16:50 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120911-Mon Sep 10 08:16:50 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120911-Mon Sep 10 08:16:50 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120911:Mon Sep 10 08:16:50 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120912-Tue Sep 11 08:16:38 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120912-Tue Sep 11 08:16:38 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120912-Tue Sep 11 08:16:38 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120912:Tue Sep 11 08:16:38 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120912-Tue Sep 11 08:16:55 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120912-Tue Sep 11 08:16:55 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120912-Tue Sep 11 08:16:55 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120912:Tue Sep 11 08:16:55 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120912-Tue Sep 11 08:32:46 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120912-Tue Sep 11 08:32:46 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120912:Tue Sep 11 08:33:59 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 08:35:09 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 08:35:09 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 08:35:09 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 08:35:09 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 19:39:33 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 19:39:33 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 19:39:33 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 19:39:34 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 19:46:30 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 19:46:30 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 19:46:30 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 19:46:30 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 19:52:07 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 19:52:07 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 19:52:07 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 19:52:07 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 20:10:28 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 20:10:28 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 20:10:28 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 20:10:29 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 20:25:04 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 20:25:04 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 20:25:04 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 20:25:04 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 20:37:45 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 20:37:45 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 20:37:45 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 20:37:45 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 20:43:28 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 20:43:28 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 20:43:28 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 20:43:29 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 20:54:11 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 20:54:11 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 20:54:11 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 20:54:11 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 21:16:19 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 21:16:19 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 21:16:19 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 21:16:19 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 21:28:59 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 21:28:59 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 21:28:59 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 21:28:59 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 21:32:15 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 21:32:15 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 21:32:15 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 21:32:15 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 21:41:56 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 21:41:56 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 21:41:56 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 21:41:56 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 21:54:51 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 21:54:51 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 21:54:51 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 21:54:51 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 21:58:56 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 21:58:56 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 21:58:56 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 21:58:56 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 22:02:56 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 22:02:56 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 22:02:56 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 22:03:17 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 22:05:07 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 22:05:07 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 22:05:07 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 22:05:18 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 22:17:34 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 22:17:34 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 22:17:34 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 22:17:34 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 22:26:43 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 22:26:43 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 22:26:43 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 22:26:43 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 22:39:59 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 22:39:59 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 22:39:59 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 22:40:00 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 22:55:30 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 22:55:30 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 22:55:30 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 22:55:31 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 22:57:38 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 22:57:38 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 22:57:38 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 22:57:38 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 23:13:36 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 23:13:36 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 23:13:36 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 23:13:36 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 23:16:42 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 23:16:42 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 23:16:42 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 23:16:42 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120913-Wed Sep 12 23:31:50 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120913-Wed Sep 12 23:31:50 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120913-Wed Sep 12 23:31:50 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120913:Wed Sep 12 23:31:51 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120914-Thu Sep 13 13:15:59 2012 : Error: TLS_connect: error in SSLv3 write client hello B /var/log/radius/radius.log-20120914-Thu Sep 13 13:15:59 2012 : Error: Failed to create a new socket for proxying requests. /var/log/radius/radius.log-20120914:Thu Sep 13 13:23:29 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120914-Thu Sep 13 13:28:31 2012 : Error: TLS_connect: error in SSLv3 write client hello B /var/log/radius/radius.log-20120914-Thu Sep 13 13:28:31 2012 : Error: Failed to create a new socket for proxying requests. /var/log/radius/radius.log-20120914-Thu Sep 13 13:28:31 2012 : Proxy: (105478192) ?????O?????????r#?????anonymous@lboro.ac.uk??40-a6-d9-49-19-5c??00-17-df-2c-e4-c0:eduroam?? : Failed to insert initial packet into the proxy list. /var/log/radius/radius.log-20120914:Thu Sep 13 13:35:16 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120922-Fri Sep 21 21:25:24 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120922-Fri Sep 21 21:25:24 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120922-Fri Sep 21 21:25:24 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120922:Fri Sep 21 21:25:25 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120928-Thu Sep 27 13:25:56 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120928-Thu Sep 27 13:25:56 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120928-Thu Sep 27 13:25:56 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120928:Thu Sep 27 13:26:10 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120928-Thu Sep 27 15:05:46 2012 : Error: (2610) Rejecting request (proxy Id 116) due to lack of any response from home server 217.33.140.201 port 1646 /var/log/radius/radius.log-20120928-Thu Sep 27 15:05:49 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120928-Thu Sep 27 15:05:49 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120928:Thu Sep 27 15:05:50 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120928-Thu Sep 27 16:33:50 2012 : Error: Ignoring request to authentication address * port 1812 from unknown client 194.83.56.233 port 32486 proto udp /var/log/radius/radius.log-20120928-Thu Sep 27 16:33:50 2012 : Error: WARNING: Unresponsive child for request 49839, in component authenticate module peap /var/log/radius/radius.log-20120928-Thu Sep 27 16:34:00 2012 : Error: ASSERT FAILED threads.c[461]: request->magic == REQUEST_MAGIC /var/log/radius/radius.log-20120928:Thu Sep 27 22:13:54 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120929-Fri Sep 28 09:34:51 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120929-Fri Sep 28 09:34:51 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120929-Fri Sep 28 09:34:51 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120929:Fri Sep 28 09:34:51 2012 : Info: Loaded virtual server <default> -- /var/log/radius/radius.log-20120929-Fri Sep 28 09:41:04 2012 : Info: Signalled to terminate /var/log/radius/radius.log-20120929-Fri Sep 28 09:41:04 2012 : Info: Exiting normally. /var/log/radius/radius.log-20120929-Fri Sep 28 09:41:04 2012 : Error: ASSERT FAILED modcall.c[107]: (p->type > MOD_SINGLE) && (p->type <= MOD_POLICY) /var/log/radius/radius.log-20120929:Fri Sep 28 09:41:04 2012 : Info: Loaded virtual server <default> -- -- Mon Oct 1 14:14:52 2012 : Error: TLS_connect: error in SSLv3 write client hello B Mon Oct 1 14:14:52 2012 : Error: Failed to create a new socket for proxying requests. Mon Oct 1 14:14:52 2012 : Proxy: (425950048) Failed to insert initial packet into the proxy list. Mon Oct 1 14:37:15 2012 : Info: Loaded virtual server <default> -- Mon Oct 1 14:42:54 2012 : Error: TLS_connect: error in SSLv3 write client hello B Mon Oct 1 14:42:54 2012 : Error: Failed to create a new socket for proxying requests. Mon Oct 1 14:54:18 2012 : Info: Loaded virtual server <default> -- Mon Oct 1 15:00:37 2012 : Error: TLS_connect: error in SSLv3 write client hello B Mon Oct 1 15:00:37 2012 : Error: Failed to create a new socket for proxying requests. Mon Oct 1 15:00:55 2012 : Info: Loaded virtual server <default> -- Mon Oct 1 15:06:42 2012 : Error: TLS_connect: error in SSLv3 write client hello B Mon Oct 1 15:06:42 2012 : Error: Failed to create a new socket for proxying requests. Mon Oct 1 15:07:09 2012 : Info: Loaded virtual server <default> -- Mon Oct 1 15:12:31 2012 : Error: TLS_connect: error in SSLv3 write client hello B Mon Oct 1 15:12:31 2012 : Error: Failed to create a new socket for proxying requests. Mon Oct 1 15:15:48 2012 : Info: Loaded virtual server <default> -- Mon Oct 1 15:22:23 2012 : Error: TLS_connect: error in SSLv3 write client hello B Mon Oct 1 15:22:23 2012 : Error: Failed to create a new socket for proxying requests. Mon Oct 1 15:22:58 2012 : Info: Loaded virtual server <default> -- Mon Oct 1 15:29:19 2012 : Error: TLS_connect: error in SSLv3 write client hello B Mon Oct 1 15:29:19 2012 : Error: Failed to create a new socket for proxying requests. Mon Oct 1 15:30:08 2012 : Info: Loaded virtual server <default> -- Mon Oct 1 15:34:47 2012 : Error: TLS_connect: error in SSLv3 write client hello B Mon Oct 1 15:34:47 2012 : Error: Failed to create a new socket for proxying requests. Mon Oct 1 15:35:18 2012 : Info: Loaded virtual server <default> -- Mon Oct 1 15:47:00 2012 : Error: TLS_connect: error in SSLv3 write client hello B Mon Oct 1 15:47:00 2012 : Error: Failed to create a new socket for proxying requests. Mon Oct 1 15:47:29 2012 : Info: Loaded virtual server <default> alan

2 1

rlm_rediswho with spaces
by Brian Candler 01 Nov '12

01 Nov '12

There appears to be a bit of a problem with rlm_rediswho and attributes which contain spaces. rlm_redis_query() calls underlying redisCommand(dissocket->conn, query) in libhiredis. However this API separates arguments by spaces, and does not allow any spaces embedded with arguments, not even with quoting. If you try something like this: start-insert = "LPUSH \"%{User-Name}\" \"%{attr},%{attr},...\"" then it actually pushes keys and values with surrounding double quotes. As far as I can see, you are supposed to call redisCommand(context, "SET %s %s", key, value) if key and/or value contain spaces. https://github.com/redis/hiredis https://groups.google.com/forum/?fromgroups=#!topic/redis-db/SeDznDcXQiw Possible solutions I can see: * Add a safe-characters array like sql_xlat, and don't include space (so it expands to =20). Icky. * Parse the string, if it contains quoted words then break into %s substitutions before passing to redisCommand. This would be the most transparent solution I think. * Change rlm_rediswho so that it has template and value, e.g. alive-insert = "LPUSH %s %s" alive-insert-0 = "%{User-Name}" alive-insert-1 = "%l,%{Acct-Session-Id},%{NAS-IP-Address},%{Acct-Session-Time},%{Framed-IP-Address},%{Acct-Input-Gigawords:-0},%{Acct-Output-Gigawords:-0},%{Acct-Input-Octets:-0},%{Acct-Output-Octets:-0}" Icky again. Any one have any better ideas? Regards, Brian.

3 16