Hello, Thank you for pushing the fixes to the v3.2.x branch. We cloned the repository, checked out the v3.2.x branch, and compiled/installed FreeRADIUS. However, we are encountering an error related to dictionary parsing when starting the server: FreeRADIUS Version 3.2.8 ... Starting - reading configuration files ... including dictionary file /usr/share/freeradius/dictionary Errors reading dictionary: dict_init: /usr/share/freeradius/dictionary.freeradius.internal[20]: invalid type "bool" This happens even before any authentication attempt. It seems the |bool| type is not recognized in the internal dictionary file. We haven't yet tested the dynamic filename feature itself due to this startup issue. Should we address the dictionary problem first, or is this unrelated to the dynamic filename expansion fix? Thank you Le 28/10/2025 à 13:00, freeradius-devel-request@lists.freeradius.org a écrit :
Send Freeradius-Devel mailing list submissions to freeradius-devel@lists.freeradius.org
To subscribe or unsubscribe via the World Wide Web, visit https://lists.freeradius.org/mailman/listinfo/freeradius-devel or, via email, send a message with subject or body 'help' to freeradius-devel-request@lists.freeradius.org
You can reach the person managing the list at freeradius-devel-owner@lists.freeradius.org
When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Devel digest..."
Today's Topics:
1. DPSK module Freeradius-Devel Digest (CERON Emile) 2. Re: DPSK module Freeradius-Devel Digest (Alan DeKok)
----------------------------------------------------------------------
Message: 1 Date: Mon, 27 Oct 2025 14:52:14 +0100 From: CERON Emile<e.ceron@ipefix.net> To:freeradius-devel@lists.freeradius.org Subject: DPSK module Freeradius-Devel Digest Message-ID:<5f8b63ba-55c5-4c0d-847c-a2ed51cfe4a7@ipefix.net> Content-Type: text/plain; charset=UTF-8; format=flowed
Hello,
I've been working on implementing dynamic PSK management and encountered the issue mentioned in the documentation: "The filename should be dynamically expanded if it has a '%' expansion in it."
We are trying to scale DPSK by splitting our PSK keys into separate CSV files, one per customer. According to the documentation, we should be able to use expansions like %{control:customer_code} directly in the filename directive within the dpsk module configuration.
Here is our desired configuration in /etc/freeradius/3.0/mods-enabled/dpsk:
dpsk {
? ? cache_size = 1024 ? ? cache_lifetime = 86400 ? ? filename = "/etc/freeradius/3.0/psk_files/%{control:customer_code}.csv" ? ? gen_pmk = yes
}
However, when we start FreeRADIUS with this configuration, we encounter the following error:
Unable to check file "/etc/freeradius/3.0/psk_files/%{control:customer_code}.csv": No such file or directory /etc/freeradius/3.0/mods-enabled/dpsk[66]: Failed parsing configuration item "filename" /etc/freeradius/3.0/mods-enabled/dpsk[66]: Invalid configuration for module "dpsk"
It appears that FreeRADIUS attempts to validate the path /etc/freeradius/3.0/psk_files/%{control:customer_code}.csv at startup, which fails because the variable %{control:customer_code} is not set at that time. So? the /etc/freeradius/3.0/psk_files/%{control:customer_code}.csv doesn't exist.
We have implemented a workaround where we use a static filename pointing to a symlink (current.csv) that we update dynamically via an exec module before calling dpsk in the authorize section. This approach works but feels less elegant than using the built-in dynamic filename expansion.
Could you please confirm if it's possible to use attribute expansions directly in the filename directive as suggested by the documentation? Or is the static symlink approach the recommended way to handle this scenario?
Any clarification or example configuration demonstrating the intended use of dynamic filenames would be greatly appreciated!
Thank you
Emile
------------------------------
Message: 2 Date: Mon, 27 Oct 2025 12:01:55 -0400 From: Alan DeKok<aland@deployingradius.com> To: FreeRadius developers mailing list <freeradius-devel@lists.freeradius.org> Subject: Re: DPSK module Freeradius-Devel Digest Message-ID:<4A24A0AB-6362-449F-BD18-1D135BFFFA99@deployingradius.com> Content-Type: text/plain; charset=utf-8
On Oct 27, 2025, at 9:52?AM, CERON Emile<e.ceron@ipefix.net> wrote:
I've been working on implementing dynamic PSK management and encountered the issue mentioned in the documentation: "The filename should be dynamically expanded if it has a '%' expansion in it."
We are trying to scale DPSK by splitting our PSK keys into separate CSV files, one per customer. According to the documentation, we should be able to use expansions like %{control:customer_code} directly in the filename directive within the dpsk module configuration. I've pushed some fixes to the v3.2.x branch. Please check them and see if they work for you.
Alan DeKok.
------------------------------
Subject: Digest Footer
- List info/subscribe/unsubscribe? Seehttp://www.freeradius.org/list/devel.html
------------------------------
End of Freeradius-Devel Digest, Vol 225, Issue 2 ************************************************