December 2012 - Freeradius-Devel - lists.freeradius.org

(no subject)
by JCA 26 Dec '12

26 Dec '12

I have a FreeRADIUS server 2.2.0 on a Linux box A, and a RADIUS client on a different Linux box B. The client in B has been constructed using as a basis one of the examples distributed with the FreeRADIUS 1.1.6 client code. The client uses the RADIUS library distributed with this code. Things seem to work fine, in that I can carry out authentications on A on behalf of B all right. I am having problems when trying to decode on B a vendor-specific attribute sent by A. Initially I had my users defined in /etc/freeradius/users in A along the following lines: user1 User-Password != "User1Password" user1 Cleartext-Password := "User1Password" Reply-Message = "Authentication successful." With this, the string associated with the Reply-Message attribute is sent by the server only when the authentication succeeds. On the FreeRADIUS 1.1.6 client the rc_send_server() function detects that the response payload contains more information than just the authentication diagnostic, and proceeds to decoding it by invoking rc_avpair_gen(), which in turn recognizes the Reply-Message attribute identifier and the associated string value without any problems. I would like to be able to use a vendor-specified attribute, rather than Reply-Message, and to that end I added the following entry to the dictionary files in both client and server: VENDOR MyVendorID 29688 BEGIN-VENDOR MyVendorID ATTRIBUTE Vendor-Attr 1 string END-VENDOR MyVendorID (the vendor ID used here is bogus.) I also changed my users on the server as follows: user1 User-Password != "User1Password" user1 Cleartext-Password := "User1Password" Vendor-Attr = "Authentication successful." After launching the server on A again, and attempting an authentication from B, debugging the client on B reveals that the server is indeed sending the Vendor-Attr attribute with the value specified in the users file. The rc_avpair_gen() function in the client code on B detects a vendor-specified attribute, and after properly identifying it as MyVendorID it attempts to decode the attribute that follows by recursively invoking itself. In more detail: The first few bytes of the data received from the server is 0x1a 0x1b 0x00 0x00 0x73 0xf8 0x01 0x15 rc_avpair_gen() correctly identifies that this is a vendor-specified attribute (byte 0x1a) and then extracts the vendor ID itself (bytes 0x73 0xf8, or 29688 in decimal.) After verifying that this is a vendor ID that it knows about, rc_avpair_gen() invokes itself recursively on the input data offset by 7 bytes (i.e. starting at the 0x01 byte that follows the 0xf8 byte) and with the 29688 vendor ID already retrieved. rc_avpair_gen() then executes the following line: attribute = ptr[0] | (vendorpec << 16) where ptr[0] is 0x01, and vendorpec is 0x73f8. After this, attribute takes the value 0x73f80001. The code then proceeds to invoking rc_dict_getattr() in order to get the attribute, using as arguments the dictionary data previously loaded when launching the client, plus the value of the attribute variable obtained above. rc_dict_getattr() will just loop over all entries in the dictionary data, trying to find a match. This is a very simple function: DICT_ATTR *rc_dict_getattr (const rc_handle *rh, int attribute) { DICT_ATTR *attr; attr = rh->dictionary_attributes; while (attr != NULL) { if (attr->value == attribute) { return attr; } attr = attr->next; } return NULL; } Now the attr entry for the matching attribute is $53 = {name = "Vendor-Attr", '\000' <repeats 19 times>, value = 1, type = 0, next = 0x804bc90} as obtained with gdb. The comparison in the loop above will not succeed, because attr->value is 1, whereas attribute is 0x73f80001. Therefore no match will be found, and rc_dict_getattr() will return a NULL pointer, thus causing rc_avpair_gen() to generate an error message as follows: received unknown VSA attribute 1, vendor 29688 of length xx where xx is the length of the "Authentication successful." string. Thus, it would seem that the data was received correctly, but can't somehow be decoded. Notice that fudging things with gdb so that the value of attribute is set to what it should be (1) also does not work, for in that case the attribute is identified as a User-Name, instead of the vendor-specific attribute Vendor-Attr. Anybody know what is going on here? I would be tempted to say that the rc_dict_getattr() implementation is wrong, but I find it difficult to believe that it is THAT wrong - this wouldn't be just a bug, but a huge implementation error. Therefore, I must be doing something wrong myself instead. But, what? How do I define my simple vendor-specific attribute so that rc_get_attr() can identify and decode it correctly?

1 0

MSChapV2 change-password packet request
by Serate 25 Dec '12

25 Dec '12

Hi! I am working around a CISCO ACS server to authorize users access in a web application. All is done and working but i would like now to support the password expiry procedure trought the MSChapV2 protocol. I edit a user on the server with the password expiration and when i connect with his credentials i receive the correct message from server: a AccessReject packet with in MS CHAP ERROR the string with the code 648 (Password expiry). I studied the RF2759 and it said that the change-password packet (id =7) should now be sent to change the old password with a new one. I am using jradius to communicate with the server but nothing i found on internet about it and the use of the change-password packet (examples or something other). Actually i found some sources (es. http://www.opensource.apple.com/source/eap8021x/eap8021x-100/EAP8021X.fproj…) and i am tring to implement them converting the logic from C to java but it is going to be a very hard work. Does somebody know something (examples, sources, libraries) about the change-password packet sending? Thanks, bye Emanuel

2 1

Commit report for v2.x.x branch
by announce＠freeradius.org 23 Dec '12

23 Dec '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Move postauth call for Accept into post_handler (same as 3.0) Arran Cudbard-Bell@2012-12-23T21:06:41Z Files modified: * src/main/auth.c * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a00c44328013f0e16663… ====== -- This commit summary was generated @2012-12-24T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 21 Dec '12

21 Dec '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Always respect Response-Packet-Type for authentication requests Arran Cudbard-Bell@2012-12-21T14:31:21Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d5915c75462998810780… ====== -- This commit summary was generated @2012-12-22T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 21 Dec '12

21 Dec '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Always respect Response-Packet-Type for authentication requests Arran Cudbard-Bell@2012-12-21T16:13:11Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1cb6a4ee304bff7664ad… ====== Minor cleanups Added documentation on new data types. Re-arranged dictionaries to make a bit more sense. Alan T. DeKok@2012-12-21T13:43:52Z Files modified: * share/dictionary * share/dictionary.iana Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/360c0397b5548927722e… ====== Move Message-Authenticator code from a generic place to a better place Alan T. DeKok@2012-12-21T13:16:04Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/aebdd33b7b171718ae8e… ====== Can't compare pairs of two different types Alan T. DeKok@2012-12-21T12:54:56Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d7c35f3fbd796fe2121a… ====== -- This commit summary was generated @2012-12-22T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 20 Dec '12

20 Dec '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add descriptive error messages Alan T. DeKok@2012-12-20T20:07:47Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/314b8fe884f6b160565c… ====== Add missing "break" Alan T. DeKok@2012-12-20T20:07:09Z Files modified: * src/lib/rbtree.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ba69f55b1876d555a7ba… ====== Document new types Alan T. DeKok@2012-12-20T19:30:40Z Files modified: * man/man5/dictionary.5 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1c1e68f810797541ffd1… ====== Forcibly clear out prefixes in ipv4prefix If the other guy sends 127.0.0.1/8, it really means 127.0.0.0/8 Alan T. DeKok@2012-12-20T19:25:46Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f818f644785dd7577892… ====== Fix typo in ipv4prefix size Alan T. DeKok@2012-12-20T19:25:29Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f12751dc66e6c6f3f720… ====== Enforce dots in realm only if a realm exists Otherwise the historic "bob / bob" test user doesn't work Alan T. DeKok@2012-12-20T15:44:47Z Files modified: * raddb/policy.d/filter Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f72edfbe73abe5cfee84… ====== Added "++" to keep in sync with src/include/token.h This is why new enum fields are added at the END of the enum! Alan T. DeKok@2012-12-20T15:44:15Z Files modified: * src/lib/print.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6b03a7b62df0ba0de58b… ====== Add IPv4prefix data type for RFC 6572 Alan T. DeKok@2012-12-20T15:44:09Z Files modified: * share/dictionary.rfc6572 * src/include/libradius.h * src/include/radius.h * src/lib/dict.c * src/lib/print.c * src/lib/radius.c * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2b8b811c3e0487899128… ====== Dictionary for RFC 6572 Alan T. DeKok@2012-12-20T14:05:19Z Files modified: * doc/rfc/rfc6572.txt * share/dictionary * share/dictionary.rfc6572 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b1aa664e26202f94b7ee… ====== Dictionary for RFC 6519 Alan T. DeKok@2012-12-20T14:03:19Z Files modified: * doc/rfc/rfc6519.txt * share/dictionary * share/dictionary.rfc6519 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/383a99718178a597ef0d… ====== SETFD for O_NONBLOCK >From Debian Bug #696250 Alan T. DeKok@2012-12-20T13:10:01Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5a1f9a3616726f65bc9a… ====== Merge pull request #158 from olivierbeytrison/master missing space in rlm_eap/mem.c Arran Cudbard-Bell@2012-12-20T08:19:59Z Files modified: * src/modules/rlm_eap/mem.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/55f0e263d5120ddea14c… ====== fix-typo Olivier Beytrison@2012-12-20T07:59:22Z Files modified: * src/modules/rlm_eap/mem.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d866c5df3043711fb07… ====== -- This commit summary was generated @2012-12-21T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 20 Dec '12

20 Dec '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Dictionary for RFC 6572 Alan T. DeKok@2012-12-20T14:01:40Z Files modified: * doc/rfc/rfc6572.txt * share/dictionary * share/dictionary.rfc6572 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8cc6e5a04d6a7f74b532… ====== Dictionary for RFC 6519 Alan T. DeKok@2012-12-20T14:01:40Z Files modified: * doc/rfc/rfc6519.txt * share/dictionary * share/dictionary.rfc6519 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9a0473ca7ee09c3ac5f0… ====== Update doc/ChangeLog Arran Cudbard-Bell@2012-12-20T13:55:05Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ecd3448f9a4879ef1ec8… ====== Note recent changes Alan T. DeKok@2012-12-20T13:09:26Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/adc91e46be476cc2b035… ====== SETFD for O_NONBLOCK >From Debian Bug #696250 Alan T. DeKok@2012-12-20T13:09:25Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/315b70ac7d380f633f9e… ====== Port fix from master branch %{1} is a regex. %{3GPP-Foo} is an attribute Alan T. DeKok@2012-12-20T13:09:25Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b5b82b6bb00b3bda90dc… ====== -- This commit summary was generated @2012-12-21T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 19 Dec '12

19 Dec '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Set Post-Proxy-Type Reject if the request was rejected by the proxy server Arran Cudbard-Bell@2012-12-19T19:55:33Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/09018dee1c56fe9584b2… ====== Attempt to reconnect all the connections Attempt to reconnect on modify Arran Cudbard-Bell@2012-12-19T19:55:32Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1cdf0cb852728c73fb92… ====== -- This commit summary was generated @2012-12-20T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 19 Dec '12

19 Dec '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Set Post-Proxy-Type Reject if the request was rejected by the proxy server Arran Cudbard-Bell@2012-12-19T19:06:21Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4b9d3255154ac03381cd… ====== -- This commit summary was generated @2012-12-20T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Re: Re: radsqlrelay performance issues with network latency
by Dr. Uwe Meyer-Gruhl 19 Dec '12

19 Dec '12

Yes, you can safely use it: Such INSERT statements will not be collected, however, since they do not match the specified regex pattern /^\s*insert\s+into\s+`?\w+`?\s+(?:$.*?$\s+)? values\s*$.*$\s*;\s*$/ix because of the characters "ON DUPLICATE KEY UPDATE ..." trailing the brackets after the VALUES. Thus, they are handled as any other non-INSERT statements by the script: they are copied verbatim. I think there is no point in making the script recognize this special case, since the timestamps most probably differ on every line. Even if they were the same, I do not know whether the SQL syntax allows for a multi-row INSERT with "ON DUPLICATE KEY UPDATE". Regards, Uwe Meyer-Gruhl am 19.12.2012 12:00 schrieb freeradius-devel-request(a)lists.freeradius.org: > Message: 1 > Date: Tue, 18 Dec 2012 14:11:59 +0100 > From: Stefan Winter <stefan.winter(a)restena.lu> > To: freeradius-devel(a)lists.freeradius.org, > freeradius_email(a)congenio.de > Subject: Re: radsqlrelay performance issues with network latency > Message-ID: <50D06B9F.4000508(a)restena.lu> > Content-Type: text/plain; charset="iso-8859-1" > > Hi, > > that's a very interesting script, thanks! > > We've been looking for ways to improve radsqlrelay's performance on our > side, too, and this certainly comes in handy. > > One question though: our statements are like: > > INSERT INTO lastusage (username, service, type) VALUES ( > 'username', 'IMAP', 'Access-Accept') ON DUPLICATE KEY UPDATE > last_seen='2012-12-18 14:04:44' > > Not being a Perl expert (so I can't read the code and make sense of it), > I wonder if the algorithm that detects "similar" statements is also > prepared to cope with such statements with a suffix ON DUPLICATE ... . > > Can I safely use the new radsqlrelay for these statements? > > Greetings, > > Stefan Winter > > On 13.12.2012 14:47, Dr. Uwe Meyer-Gruhl wrote: >> Hi, >> >> >> as probably most of you know, the rlm_sql_log/radsqlrelay pair of >> programs was invented to solve to problem of intermittent database >> downtimes. Furthermore, it is supposed to make FreeRADIUS answer faster >> because of the decoupling of the database operations. >> >> However, I found out that with latency of 25ms between a MySQL database >> server and the FreeRADIUS machine, there still is a performance problem: >> In our large-scale installation with > 100 log entries per seconds, we >> saw that the sqlrelay log file was constantly growing. It grew faster >> than radsqlrelay was able to shift the data to the database server. >> Another FreeRADIUS instance with < 1ms latency had no problem. >> >> The root cause is that each SQL statement is handled individually within >> radsqlrelay. So, with a network latency of 25ms, there can be at most >> 1000ms/25ms = 40 database operations per second, while with 1ms latency, >> there can be 1000 per second. >> >> Since the rlm_sql_log output consists mainly of INSERT statements to the >> same table and with the same structure, we can collect several INSERT >> statements into one with multiple rows. This can be done by the >> radsqlrelay Perl script very elegantly, since Perl was invented for such >> purposes. I have appended a modified version of radsqlrelay which >> collects up to 100 consecutive INSERT statements into one before doing >> the actual database submittal. >> >> I have only tested the script for MySQL. It cannot optimize in this way >> for Oracle databases, since Oracle does not conform to the SQL standard >> for multi-row INSERTs, but the script automatically reduces the maximum >> number of collected statements to 1 in that case. PostgreSQL databases >> should be able to cope with multi-row INSERTs as well and benefit likewise. >> >> The theoretical number of INSERT statements per second is lifted by a >> factor of 100 by this adapted script. In our own scenario, there will be >> no bottlenecks any more, even if the latency increased to 250ms. >> >> Maybe this improvement can be included in one of the next FreeRADIUS >> releases. >> >> >> Kind regards, >> >> >> Uwe Meyer-Gruhl >> >> >> --- >> #!/usr/bin/perl >> ## >> ## radsqlrelay.pl This program tails a SQL logfile and forwards >> ## the queries to a database server. Used to >> ## replicate accounting records to one (central) >> ## database, even if the database has extended >> ## downtime. >> ## >> ## Version: $Id$ >> ## >> ## Author: Nicolas Baradakis <nicolas.baradakis(a)cegetel.net> >> ## >> ## Copyright (C) 2005 Cegetel >> ## >> ## This program is free software; you can redistribute it and/or >> ## modify it under the terms of the GNU General Public License >> ## as published by the Free Software Foundation; either version 2 >> ## of the License, or (at your option) any later version. >> ## >> ## This program is distributed in the hope that it will be useful, >> ## but WITHOUT ANY WARRANTY; without even the implied warranty of >> ## MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the >> ## GNU General Public License for more details. >> ## >> ## You should have received a copy of the GNU General Public License >> ## along with this program; if not, write to the Free Software >> ## Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA >> 02110-1301, USA >> ## >> >> use DBI; >> use Fcntl; >> use Getopt::Std; >> use POSIX qw(:unistd_h :errno_h); >> >> use warnings; >> use strict; >> >> my $maxcollect = 100; # tunable, works for MySQL! >> >> my $lastinsert; >> my @values; >> >> my $need_exit = 0; >> >> sub got_signal() >> { >> $need_exit = 1; >> } >> >> # /!\ OS-dependent structure >> # Linux struct flock >> # short l_type; >> # short l_whence; >> # off_t l_start; >> # off_t l_len; >> # pid_t l_pid; >> # c2ph says: typedef='s2 l2 i', sizeof=16 >> my $FLOCK_STRUCT = 's2l2i'; >> >> sub setlock($;$$) >> { >> my ($fh, $start, $len) = @_; >> $start = 0 unless defined $start; >> $len = 0 unless defined $len; >> >> #type whence start till pid >> my $packed = pack($FLOCK_STRUCT, F_WRLCK, SEEK_SET, $start, $len, 0); >> if (fcntl($fh, F_SETLKW, $packed)) { return 1 } >> else { return 0 } >> } >> >> sub usage() >> { >> print STDERR <<HERE; >> usage: radsqlrelay [options] file_path >> options: >> -? Print this help message. >> -1 One-shot mode: push the file to database and exit. >> -b database Name of the database to use. >> -d sql_driver Driver to use: mysql, pg, oracle. >> -f file Read password from file, instead of command line. >> -h host Connect to host. >> -P port Port number to use for connection. >> -p passord Password to use when connecting to server. >> -u user User for login. >> -x Turn on debugging. >> HERE >> } >> >> sub connect_wait($) >> { >> my $dbinfo = shift; >> my $dbh; >> while (!$dbh) { >> $dbh = DBI->connect($dbinfo->{base}, $dbinfo->{user}, $dbinfo->{pass}, >> { RaiseError => 0, PrintError => 0, >> AutoCommit => 1 }); >> sleep (1) if !$dbh; >> exit if $need_exit; >> } >> $dbinfo->{handle} = $dbh; >> } >> >> >> >> sub process_file($$) >> { >> my ($dbinfo, $path) = @_; >> >> sub do_inserts($) { >> my $dbinfo = shift; >> if (scalar(@values) > 0) { >> my $query = $lastinsert . " "; >> $query .= join(" ), ( ",@values); >> $query .= " );"; >> do_query($dbinfo,$query); >> } >> @values = (); >> } >> >> sub do_query($$) { >> my ($dbinfo,$query) = @_; >> until ($dbinfo->{handle}->do($query)) { >> print $dbinfo->{handle}->errstr."\n"; >> if ($dbinfo->{handle}->ping) { >> sleep (1); >> } else { >> print "error: Lost connection to database\n"; >> $dbinfo->{handle}->disconnect; >> connect_wait($dbinfo); >> } >> } >> } >> >> >> >> unless (-e $path.'.work') { >> until (rename($path, $path.'.work')) { >> if ($! == ENOENT) { >> sleep(1); >> return if $need_exit; >> } else { >> print STDERR "error: Couldn't move $path to $path.work: $!\n"; >> exit 1; >> } >> } >> } >> >> open(FILE, "+< $path.work") or die "error: Couldn't open $path.work: >> $!\n"; >> setlock(\*FILE) or die "error: Couldn't lock $path.work: $!\n"; >> >> $lastinsert = ""; >> @values = (); >> >> while (<FILE>) { >> chomp (my $line = $_); >> >> if (!($line =~ /^\s*insert\s+into\s+`?\w+`?\s+(?:$.*?$\s+)? >> values\s*$.*$\s*;\s*$/ix)) { >> # This is no INSERT, so start new collection >> do_inserts($dbinfo); >> $lastinsert = ""; >> # must output this line >> do_query($dbinfo, "$line"); >> } >> else { >> # This is an INSERT, so collect it >> my $insert = $line; >> my $values = $line; >> $insert =~ s/^\s*(insert\s+into\s+`?\w+`?\s+(?:$.*?$\s+)? >> values\s*$).*$\s*;\s*$/$1/ix; >> $values =~ s/^\s*insert\s+into\s+`?\w+`?\s+(?:$.*?$\s+)? >> values\s*$(.*)$\s*;\s*$/$1/ix; >> >> if (($lastinsert ne "") && ($insert ne $lastinsert)) { >> # This is different from the last one >> do_inserts($dbinfo); >> } >> push(@values, $values); >> $lastinsert = $insert; # start new collection >> } >> >> # limit to $maxcollect collected lines >> if (scalar(@values) >= $maxcollect) { >> do_inserts($dbinfo); >> } >> } >> >> # Cleanup >> do_inserts($dbinfo); >> >> unlink($path.'.work'); >> close(FILE); # and unlock >> } >> >> # sub main() >> >> my %args = ( >> b => 'radius', >> d => 'mysql', >> h => 'localhost', >> p => 'radius', >> u => 'radius', >> ); >> my $ret = getopts("b:d:f:h:P:p:u:x1?", \%args); >> if (!$ret or @ARGV != 1) { >> usage(); >> exit 1; >> } >> if ($args{'?'}) { >> usage(); >> exit 0; >> } >> >> my $data_source; >> if (lc($args{d}) eq 'mysql') { >> $data_source = "DBI:mysql:database=$args{b};host=$args{h}"; >> } elsif (lc($args{d}) eq 'pg') { >> $data_source = "DBI:Pg:dbname=$args{b};host=$args{h}"; >> } elsif (lc($args{d}) eq 'oracle') { >> $data_source = "DBI:Oracle:$args{b}"; >> # Oracle does not conform to the SQL standard for multirow INSERTs >> $maxcollect = 1; >> } else { >> print STDERR "error: SQL driver not supported yet: $args{d}\n"; >> exit 1; >> } >> $data_source .= ";port=$args{P}" if $args{'P'}; >> >> my $pw; >> if($args{f}) { >> open(FILE, "< $args{f}") or die "error: Couldn't open $args{f}: $!\n"; >> $pw = <FILE>; >> chomp($pw); >> close(FILE); >> } else { >> # args{p} is always defined. >> $pw = $args{p}; >> } >> >> $SIG{INT} = \&got_signal; >> $SIG{TERM} = \&got_signal; >> >> my %dbinfo = ( >> base => $data_source, >> user => $args{u}, >> pass => $pw, >> ); >> connect_wait(\%dbinfo); >> >> my $path = shift @ARGV; >> >> until ($need_exit) { >> process_file(\%dbinfo, $path); >> last if ($args{1} || $need_exit); >> sleep(10); >> } >> >> $dbinfo{handle}->disconnect; >> >> >> - >> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/devel.html >

1 0