I see no place where this code is wrong. So I've pushed the fix. On Mar 31, 2015, at 1:36 PM, Sam Hartman <hartmans@mit.edu> wrote:

if (!trustrouter || (strcmp(trustrouter, "none") == 0))

Stefan, can you confirm that this helps your problem and especially that it doesn't break trustrouter usage?

I'll add this to the package and spin a build... Then I can check, yes. :-) Stefan Paetow Moonshot Industry & Research Liaison Coordinator t: +44 (0)1235 822 125 gpg: 0x3FCE5142 xmpp: stefanp@jabber.dev.ja.net skype: stefan.paetow.janet jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc¹s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Collections and Janet Ltd. is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under Company No. number 2881024, VAT No. GB 197 0632 86. The registered office is: Lumen House, Library Avenue, Harwell, Didcot, Oxfordshire, OX11 0SG. T 01235 822200.

I'm at a conference and have nothing to do this evening apart from write a couple of lightning talks about FreeRADIUS... so when I've

I didn't per chance see you at the Imperial in Exeter earlier, did I? ;-) Stefan Paetow Moonshot Industry & Research Liaison Coordinator t: +44 (0)1235 822 125 gpg: 0x3FCE5142 xmpp: stefanp@jabber.dev.ja.net skype: stefan.paetow.janet jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc¹s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Collections and Janet Ltd. is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under Company No. number 2881024, VAT No. GB 197 0632 86. The registered office is: Lumen House, Library Avenue, Harwell, Didcot, Oxfordshire, OX11 0SG. T 01235 822200.

Hi,

I'm at a conference and have nothing to do this evening apart from write a couple of lightning talks about FreeRADIUS... so when I've done that I'll try and tidy up the elasticsearch stuff I've been working on for detail logs. As one of the talks is about that, it would be good to get in if possible. Nothing complicated - a short logstash config and readme.

drats.... i'll have to go to the lightning talk session now ;-) alan

On Wed, Apr 01, 2015 at 08:44:22AM +0000, Stefan Paetow wrote:

...

drats.... i'll have to go to the lightning talk session now ;-)

Hee hee hee. :-)

I'll be there... Sponge^H^H^H^H^H^HSoak up more FR knowledge ;-)

Don't worry, it's nothing that hasn't been mentioned on this list before - ntlm_auth/AD stuff, and logging with elasticsearch. Just trying to push people with enough reasons to upgrade to v3... Networkshop is a good time to hit lots of universities in one go, just a shame the deadline for proper talk submissions is such a rediculously long time before the conference. Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>

Hi,

What workshop and where? Do you have internet live feed?

Here our federation is receiving live data to feed their redis/elastic search through an unlang linelog routine I wrote to syslog+a daemon to parse the resulting logs. I believe with FR 3.x that configuration can be improved, haven't looked yet at it.

networkshop 43 - JISC annual networking conference, being hed in Exeter, UK. no live streams alan

Hi,

I had four such "empty" statements in one of my modules, but only got three warnings like:

My also empty "authorize_repply_query" went through the config check unnoticed.

Ah, it's actually something else. My config erroneously contains *two* such config items, and one of them is empty: authorize_reply_query = \ "SELECT * FROM reply_aai_firstname WHERE username='%{SQL-User-Name}' \ UNION ALL \ SELECT * FROM reply_aai_lastname WHERE username='%{SQL-User-Name}' \ UNION ALL \ SELECT * FROM reply_aai_mail WHERE username='%{SQL-User-Name}' \ UNION ALL \ SELECT * FROM reply_aai_eduPersonAffiliation WHERE username='%{SQL-User-Name}' \ UNION ALL \ SELECT * FROM reply_aai_fullname WHERE username='%{SQL-User-Name}' \ UNION ALL \ SELECT * FROM reply_aai_commonname WHERE username='%{SQL-User-Name}' \ UNION ALL \ SELECT id, username, 'RESTENA-AAI-Attribute', CONCAT('urn:oid:1.3.6.1.4.1.23735.100.3=',id), '+=' FROM check_aai_ssha1 WHERE username='%{SQL-User-Name}' \ " authorize_reply_query = "" I guess the server would spit out the warning if the latter entry was the only one. But this makes me think: would it be nice to introduce a config WARNING level output that an entry is duplicate? And I always thought later entries overwrite previous ones. But funny enough, I do get all those attributes. Oh well. Stefan -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

On Apr 1, 2015, at 3:25 AM, Stefan Winter <stefan.winter@restena.lu> wrote:

So here's a real issue. We use TLS session caching on persistent storage. After the update to today's GIT, I get:

Error: /var/log/radius/tlscache-eduroam-users/a319a7e33299be31688cd787330c3a5660314ef758b397266a03c72b392004ca.vps[4]: Invalid comma after the reply attributes. Please delete it.

This file contains the comma at the end ...

I've pushed a fix for the session state code. The complaint comes from a re-write of the "users" file parsing code. Old code: WTF? New code: Hm...that makes sense. And better errors, too. Alan DeKok.