April 2007 - Freeradius-Users - lists.freeradius.org

RE: Freeradius-Users Digest, Vol 24, Issue 5
by khursheed Ahmed 03 Apr '07

03 Apr '07

Hi Jan like Radtest, But radtest is used for the test of Radius installation Could it will give me AVPs of Radius so that may I convert them for Diameter packets thnx >From: freeradius-users-request(a)lists.freeradius.org >Reply-To: freeradius-users(a)lists.freeradius.org >To: freeradius-users(a)lists.freeradius.org >Subject: Freeradius-Users Digest, Vol 24, Issue 5 >Date: Mon, 02 Apr 2007 11:15:13 +0200 > >Send Freeradius-Users mailing list submissions to > freeradius-users(a)lists.freeradius.org > >To subscribe or unsubscribe via the World Wide Web, visit > http://lists.freeradius.org/mailman/listinfo/freeradius-users >or, via email, send a message with subject or body 'help' to > freeradius-users-request(a)lists.freeradius.org > >You can reach the person managing the list at > freeradius-users-owner(a)lists.freeradius.org > >When replying, please edit your Subject line so it is more specific >than "Re: Contents of Freeradius-Users digest..." > > >Today's Topics: > > 1. Re: Radius Packet Simulator (Jan Mulders) > > >---------------------------------------------------------------------- > >Message: 1 >Date: Mon, 2 Apr 2007 10:15:03 +0100 >From: "Jan Mulders" <lastchancehotel(a)gmail.com> >Subject: Re: Radius Packet Simulator >To: "FreeRadius users mailing list" > <freeradius-users(a)lists.freeradius.org> >Message-ID: > <2dae841b0704020215v35e5c076y3b4922c3202a24eb(a)mail.gmail.com> >Content-Type: text/plain; charset="iso-8859-1" > >like Radtest, you mean? > >Jan > >On 02/04/07, khursheed Ahmed <khursheedahmedqau(a)hotmail.com> wrote: > > > > > > > > Hi All > > > > I need a RADIUS Packet simulator, which could simulate RADIUS packet > > for > > me, > > If is there any Plz tell me, > > As I needed it bcz I m developing a Translation Agent which could > > translate > > (convert) > > RADIS packet in to Diameter Packet. > > > > Is there any Idea Plz help me > > > > > > Khursheed Ahmed QAU > > > > > > > > > > >From: freeradius-users-request(a)lists.freeradius.org > > >Reply-To: freeradius-users(a)lists.freeradius.org > > >To: freeradius-users(a)lists.freeradius.org > > >Subject: Freeradius-Users Digest, Vol 24, Issue 3 > > >Date: Mon, 02 Apr 2007 07:59:28 +0200 > > > > > >Send Freeradius-Users mailing list submissions to > > > freeradius-users(a)lists.freeradius.org > > > > > >To subscribe or unsubscribe via the World Wide Web, visit > > > http://lists.freeradius.org/mailman/listinfo/freeradius-users > > >or, via email, send a message with subject or body 'help' to > > > freeradius-users-request(a)lists.freeradius.org > > > > > >You can reach the person managing the list at > > > freeradius-users-owner(a)lists.freeradius.org > > > > > >When replying, please edit your Subject line so it is more specific > > >than "Re: Contents of Freeradius-Users digest..." > > > > > > > > >Today's Topics: > > > > > > 1. Re: Attributes (Shawn Mitchell) > > > 2. Re: passing Calling-Station-ID (Adil Azmi Bikarbass) > > > 3. Re: Freeradius-Users Digest, Vol 24, Issue 2 (Arran >Cudbard-Bell) > > > 4. RE: Attributes [unclas] (Ranner, Frank MR) > > > 5. Re: Attributes [unclas] (Shawn Mitchell) > > > 6. RE: Anyone using dd-wrt for AP? (Aren Chua) > > > 7. EAP-AKA patch for Freeradius 1.1.2 (awaneesh kumar) > > > > > > > > >---------------------------------------------------------------------- > > > > > >Message: 1 > > >Date: Sun, 01 Apr 2007 16:45:22 -0500 > > >From: Shawn Mitchell <shawnm(a)iodamedia.net> > > >Subject: Re: Attributes > > >To: FreeRadius users mailing list > > > <freeradius-users(a)lists.freeradius.org> > > >Message-ID: <461027F2.3020605(a)iodamedia.net> > > >Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > > > > >Ok, here's what I'm doing: > > > > > >DEFAULT Client-IP-Address == xx.xx.xx.xx > > > Ascend-Data-Filter = "ip in forward tcp est", > > > Ascend-Data-Filter = "ip in forward dstip xx.xx.xx.0/24", > > > Ascend-Data-Filter = "ip in drop tcp dstport = 25", > > > Ascend-Data-Filter = "ip in forward", > > > Fall-Through = Yes > > > > > >I turned on logging of reply's, but all I'm seeing it send is: > > > > > >Sun Apr 1 16:31:21 2007 > > > Ascend-Data-Filter = "ip in forward tcp est" > > > > > >I put this into the 'users' file btw. > > > > > > > > > > > >Alan DeKok wrote: > > > > Shawn Mitchell wrote: > > > > > > > >> Where can I say "If client is 'x', then also send these attributes >to > > > >> users being authenticated..."? > > > >> > > > > > > > > In the "users" file. > > > > > > > > DEFAULT Client-IP-Address == 1.2.3.4 > > > > Reply-Message = "You're coming from 1.2.3.4" > > > > > > > > Alan DeKok. > > > > -- > > > > http://deployingradius.com - The web site of the book > > > > http://deployingradius.com/blog/ - The blog > > > > - > > > > List info/subscribe/unsubscribe? See > > >http://www.freeradius.org/list/users.html > > > > > > > > > > > > > > > >------------------------------ > > > > > >Message: 2 > > >Date: Sun, 01 Apr 2007 22:59:14 +0000 > > >From: Adil Azmi Bikarbass <adil(a)mtds.com> > > >Subject: Re: passing Calling-Station-ID > > >To: Alan DeKok <aland(a)deployingradius.com> > > >Cc: FreeRadius users mailing list > > > <freeradius-users(a)lists.freeradius.org> > > >Message-ID: <46103942.2070008(a)mtds.com> > > >Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > > > > >Hello All, > > > > > >Do i need to create a whole DB for only one filed that i will pass from > > >one NAS to another? > > > > > >Knowing that my Freeradius is running on Solaris 10 which DB you >suggest > > >to use? > > > > > >Thank you > > > > > > > > >Alan DeKok a ?crit : > > > > Adil Azmi Bikarbass wrote: > > > > > > > >> The issue is that we want the second NAS to get the > > calling-station-ID > > > >> from the "someuser" session on Radius > > > >> > > > > > > > > To do... what? > > > > > > > > > > > >> is there a way we can have this to work and pass this attribute >from > > >one > > > >> session to another? > > > >> > > > > > > > > Sure. Store the Calling-Station-Id in a database when you receive > > it > > > > from the first NAS, then pull it out of the DB, and send it to the > > > > second NAS. > > > > > > > > Alan DeKok. > > > > -- > > > > http://deployingradius.com - The web site of the book > > > > http://deployingradius.com/blog/ - The blog > > > > > > > > > > > > > >-- > > >|-Adil Bikarbass > > >|-IT Manager, MTDS > > >|-tel +212.3.767.4861 > > >|-fax +212.3.767.4863 > > >|-gsm +212.6.139. 4541 > > >|-14, rue 16 novembre > > >|-Rabat, Kingdom of Morocco > > > > > > > > > > > >------------------------------ > > > > > >Message: 3 > > >Date: Mon, 02 Apr 2007 00:00:43 +0100 > > >From: Arran Cudbard-Bell <A.Cudbard-Bell(a)sussex.ac.uk> > > >Subject: Re: Freeradius-Users Digest, Vol 24, Issue 2 > > >To: freeradius-users(a)lists.freeradius.org > > >Message-ID: <4610399B.6010008(a)sussex.ac.uk> > > >Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > > > > > > > > >> Does anyone have a draft list of which clients actually support the > > > >> Reply-Message and by which methods they can recieve them? > > > >> > > > > > > > > All clients will accept it. Very few will do anything useful with > > it. > > > > > > > > > > > >> The reason why I ask , it during initial tests (using chap) the >built > > >in > > > >> windows CHAP supplicant would display the reply-messages being sent > > >back > > > >> from the server. > > > >> Now we've moved on from CHAP to using EAP and the windows >supplicant > > no > > > >> longer displays the messages. > > > >> > > > > > > > > Yes. > > > > > > > > > > > >> Am I right in assuming that with EAP attributes from the > > access-accept > > > >> packet only get to the NAS and that the NAS will strip out of the >EAP > > > >> message > > > >> and pass it on to the supplicant and thats all the supplicant will > > ever > > >get? > > > >> > > > > > > > > Yes. > > > > > > > > > > > >> In which case, although the Reply-Message attribute is also >supported > > >in > > > >> PoD the client will never actually recieve it when using EAP ? > > > >> > > > > > > > > Yes. > > > > > > > > Alan DeKok. > > > > > > >Ahh, Thanks for clearing that up ! > > > > > >Don't suppose EAP supports encoding the equivalent of a Reply-Message ? > > > > > >P.S Well done for understanding my poorly punctuated morning ramblings >:) > > > > > >Arran > > > > > > > > > > > >------------------------------ > > > > > >Message: 4 > > >Date: Mon, 2 Apr 2007 11:14:47 +1000 > > >From: "Ranner, Frank MR" <Frank.Ranner(a)defence.gov.au> > > >Subject: RE: Attributes [unclas] > > >To: "FreeRadius users mailing list" > > > <freeradius-users(a)lists.freeradius.org> > > >Message-ID: > > > <3497E314EE23D54EACE26B5CFFD896980A6125(a)drnrxm01.drn.mil.au> > > >Content-Type: text/plain; charset="US-ASCII" > > > > > >Use the += operator, eg Ascend-Data-Filter += "ip in forward dstip > > >xx.xx.xx.0/24", to append to > > >a multi-valued list. > > > > > >FR > > > > > > > -----Original Message----- > > > > From: > > > > freeradius-users-bounces+frank.ranner=defence.gov.au(a)lists.fre > > > > eradius.org > > > > [mailto:freeradius-users-bounces+frank.ranner=defence.gov.au@l > > > > ists.freeradius.org] On Behalf Of Shawn Mitchell > > > > Sent: Monday, 2 April 2007 07:45 > > > > To: FreeRadius users mailing list > > > > Subject: Re: Attributes > > > > > > > > Ok, here's what I'm doing: > > > > > > > > DEFAULT Client-IP-Address == xx.xx.xx.xx > > > > Ascend-Data-Filter = "ip in forward tcp est", > > > > Ascend-Data-Filter = "ip in forward dstip xx.xx.xx.0/24", > > > > Ascend-Data-Filter = "ip in drop tcp dstport = 25", > > > > Ascend-Data-Filter = "ip in forward", > > > > Fall-Through = Yes > > > > > > > > I turned on logging of reply's, but all I'm seeing it send is: > > > > > > > > Sun Apr 1 16:31:21 2007 > > > > Ascend-Data-Filter = "ip in forward tcp est" > > > > > > > > I put this into the 'users' file btw. > > > > > > > > > > > > > > > > Alan DeKok wrote: > > > > > Shawn Mitchell wrote: > > > > > > > > > >> Where can I say "If client is 'x', then also send these > > > > attributes to > > > > >> users being authenticated..."? > > > > >> > > > > > > > > > > In the "users" file. > > > > > > > > > > DEFAULT Client-IP-Address == 1.2.3.4 > > > > > Reply-Message = "You're coming from 1.2.3.4" > > > > > > > > > > Alan DeKok. > > > > > -- > > > > > http://deployingradius.com - The web site of the book > > > > > http://deployingradius.com/blog/ - The blog > > > > > - > > > > > List info/subscribe/unsubscribe? See > > > > > http://www.freeradius.org/list/users.html > > > > > > > > > > > > > - > > > > List info/subscribe/unsubscribe? See > > > > http://www.freeradius.org/list/users.html > > > > > > > > > > > > > > > >------------------------------ > > > > > >Message: 5 > > >Date: Sun, 01 Apr 2007 20:44:05 -0500 > > >From: Shawn Mitchell <shawnm(a)iodamedia.net> > > >Subject: Re: Attributes [unclas] > > >To: FreeRadius users mailing list > > > <freeradius-users(a)lists.freeradius.org> > > >Message-ID: <46105FE5.3090904(a)iodamedia.net> > > >Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > > > > >Thanks! > > > > > >That seems to have fixed it > > > > > >radtest blarg blarg localhost 111 testing123 > > > > > >Sending Access-Request of id 145 to 127.0.0.1:1812 > > > User-Name = "blarg" > > > User-Password = "blarg" > > > NAS-IP-Address = xxxxxxxxxxxxxx > > > NAS-Port = 111 > > >rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=145, > > length=180 > > > Ascend-Data-Filter = "ip in forward tcp est" > > > Ascend-Data-Filter = "ip in forward dstip xx.xx.xx.0/24 0" > > > Ascend-Data-Filter = "ip in drop tcp dstport = 25" > > > Ascend-Data-Filter = "ip in forward 0" > > > > > > > > >Ranner, Frank MR wrote: > > > > Use the += operator, eg Ascend-Data-Filter += "ip in forward dstip > > > > xx.xx.xx.0/24", to append to > > > > a multi-valued list. > > > > > > > > FR > > > > > > > > > > > >> -----Original Message----- > > > >> From: > > > >> freeradius-users-bounces+frank.ranner=defence.gov.au(a)lists.fre > > > >> eradius.org > > > >> [mailto:freeradius-users-bounces+frank.ranner=defence.gov.au@l > > > >> ists.freeradius.org] On Behalf Of Shawn Mitchell > > > >> Sent: Monday, 2 April 2007 07:45 > > > >> To: FreeRadius users mailing list > > > >> Subject: Re: Attributes > > > >> > > > >> Ok, here's what I'm doing: > > > >> > > > >> DEFAULT Client-IP-Address == xx.xx.xx.xx > > > >> Ascend-Data-Filter = "ip in forward tcp est", > > > >> Ascend-Data-Filter = "ip in forward dstip xx.xx.xx.0/24", > > > >> Ascend-Data-Filter = "ip in drop tcp dstport = 25", > > > >> Ascend-Data-Filter = "ip in forward", > > > >> Fall-Through = Yes > > > >> > > > >> I turned on logging of reply's, but all I'm seeing it send is: > > > >> > > > >> Sun Apr 1 16:31:21 2007 > > > >> Ascend-Data-Filter = "ip in forward tcp est" > > > >> > > > >> I put this into the 'users' file btw. > > > >> > > > >> > > > >> > > > >> Alan DeKok wrote: > > > >> > > > >>> Shawn Mitchell wrote: > > > >>> > > > >>> > > > >>>> Where can I say "If client is 'x', then also send these > > > >>>> > > > >> attributes to > > > >> > > > >>>> users being authenticated..."? > > > >>>> > > > >>>> > > > >>> In the "users" file. > > > >>> > > > >>> DEFAULT Client-IP-Address == 1.2.3.4 > > > >>> Reply-Message = "You're coming from 1.2.3.4" > > > >>> > > > >>> Alan DeKok. > > > >>> -- > > > >>> http://deployingradius.com - The web site of the book > > > >>> http://deployingradius.com/blog/ - The blog > > > >>> - > > > >>> List info/subscribe/unsubscribe? See > > > >>> http://www.freeradius.org/list/users.html > > > >>> > > > >>> > > > >> - > > > >> List info/subscribe/unsubscribe? See > > > >> http://www.freeradius.org/list/users.html > > > >> > > > >> > > > > > > > > - > > > > List info/subscribe/unsubscribe? See > > >http://www.freeradius.org/list/users.html > > > > > > > > > > > > > > > >------------------------------ > > > > > >Message: 6 > > >Date: Mon, 2 Apr 2007 03:03:25 +0000 > > >From: Aren Chua <cclian18(a)hotmail.com> > > >Subject: RE: Anyone using dd-wrt for AP? > > >To: FreeRadius users mailing list > > > <freeradius-users(a)lists.freeradius.org> > > >Message-ID: <BAY130-W126EC141C8DD048BA432ECCC600(a)phx.gbl> > > >Content-Type: text/plain; charset="iso-8859-1" > > > > > > > > >Ian Truelsen > > > > > >you can try the hotspot(chillispot) under DD-WRT firmware to configure > > your > > >AP to authenticate against the radius server. > > >Regards, > > >Aren Chua> Date: Sun, 1 Apr 2007 10:16:25 +0200> From: > > >aland(a)deployingradius.com> To: freeradius-users(a)lists.freeradius.org> > > >Subject: Re: Anyone using dd-wrt for AP?> > Ian Truelsen wrote:> >> > > > >Hopefully that is not the case. The freeradius server is on an >external> > > > > > >machine. I am trying to get the AP to authenticate against that >server,> > > > > > >but I am having trouble sorting out how to get it to do this.> > There > > >should be a RADIUS server configuration. But you'll have to> enable > > 802.1x > > >authentication, too.> > Alan DeKok.> --> http://deployingradius.com - >The > > >web site of the book> http://deployingradius.com/blog/ - The blog> - > > > List > > >info/subscribe/unsubscribe? See >http://www.freeradius.org/list/users.html > > >_________________________________________________________________ > > >Your friends are close to you.?Keep them that way. > > >http://spaces.live.com/signup.aspx > > >

4 6

Sqlcounter Max-Octets doesn't reset
by Sigfrido 03 Apr '07

03 Apr '07

Hi all, freeradius 1.1.0 on Ubuntu Dapper all's going but the counter below is not resetting: sqlcounter volumelimitcounter { counter-name = Total-Max-Octets check-name = Max-Octets reply-name = ChilliSpot-Max-Total-Octets sqlmod-inst = sql key = User-Name reset = daily query = "SELECT SUM(AcctOutputOctets) FROM radacct where UserName ='%{%k}'" } I would like to reset, everyday at 00:00, the Max-Octets (in radcheck table) to 0 but it seems not working. I tried also the "hourly" reset, with same results. Any idea ? It's a bug or what ? TIA -- Email.it, the professional e-mail, gratis per te: http://www.email.it/f Sponsor: Problemi di Liquiditÿ? Con Logos Finanziaria 30.000 ÿ in 24 ore a dipendenti e lavoratori autonomi con rimborsi fino a 120 mesi clicca qui * Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=2907&d=2-4

2 2

Cleartext-Password with rlm_sql problem
by Fabio Pedretti 03 Apr '07

03 Apr '07

Hi, I just upgraded my freeradius 1.1.3 to 1.1.5, which I am using with a MySQL db for storing users password. I did a diff from original 1.1.3 raddb vs my modified raddb and applied it to 1.1.5 raddb. All worked fine. After that I see in the users file that User-Password was replaced with Cleartext-Password, so I replaced in the radcheck all "User-Password" with "Cleartext-Password": after doing that, my users can't no more authenticate. I get this in radius.log: Tue Apr 3 12:29:35 2007 : Info: rlm_sql (sql_main): No matching entry in the database for request from user [user1] Tue Apr 3 12:29:35 2007 : Info: rlm_eap_mschapv2: Issuing Challenge Tue Apr 3 12:29:35 2007 : Info: rlm_sql (sql_main): No matching entry in the database for request from user [user1] Tue Apr 3 12:29:35 2007 : Auth: Login incorrect: [user1@mydomain] (from client localhost port 29) Tue Apr 3 12:29:35 2007 : Auth: Login incorrect: [user1@mydomain] (from client ap-1 port 29) Backing to "User-Password" worked again. What wrong? Is it correct to replace "User-Password" to "Cleartext-Password" with users in a MySQL db, as done in users file? Thanks

2 3

Can't connect to remote freeradius server
by A B 03 Apr '07

03 Apr '07

I've installed freeradius 1.1.5 and am able to run radtest successfully on the machine that freeradius is installed on. However, when I try to run radtest (or NTRadPing or radius test client) it is unable to connect to the server. Does anyone have any ideas? I do have the servers I'm running radtest on listed in clients.conf Here is the output from NTRadPing (IP address removed by me): Sending authentication request to server XX.XXX.XXX.XXX:1812 Transmitting packet, code=1 id=0 length=67 recvfrom() error, WSAGetLastError() = 10054 could not receive a response from the server Any suggestions would be appreciated.

2 3

realms in my Postgres DB
by Santiago Balaguer García 03 Apr '07

03 Apr '07

2 1

radius accounting and syslog
by Archie Holland 03 Apr '07

03 Apr '07

I'm preparing to transition from NavisRadius to FreeRadius. NavisRadius allowed me to log stop/start events via syslog. Is there any _EASY_ way to emulate this behavior in FreeRadius? -- ========================= The Net That Works! ======================== Archie Holland http://www.blue.net 1(270)735-3553 Bluegrass Network LLC 1(270)765-6361, ext6220 Senior Systems Administrator Fax: 1(270)737-0580 ========================= The AdminBlue Team ========================= Archie Holland Mitzi Reynolds Douglas Lamb Tommy Chism Cheryl Ruckriegel Keith Corbin ===================== mailto:adminblue@blue.net ======================

3 2

passing Calling-Station-ID
by Adil Azmi Bikarbass 03 Apr '07

03 Apr '07

Hello All, We would like to get your input on an issue we are facing: We are using two NASs and one FreeRadius 1.1.5, the first NAS authenticate the user "someuser" through Radius and assign an IP address with no problem. we can see the accounting start record with the calling-station-ID and other attributes. The issue is that we want the second NAS to get the calling-station-ID from the "someuser" session on Radius is there a way we can have this to work and pass this attribute from one session to another? Thank you -- |-Adil Azmi Bikarbass |-IT Manager |-MTDS S.A. |-tel +212.3.767.4861 |-fax +212.3.767.4863 |-gsm +212.6.139. 4541 |-14, rue 16 novembre |-Rabat, Kingdom of Morocco

3 5

Re : Anyone using dd-wrt for AP?
by Eshun Benjamin 02 Apr '07

02 Apr '07

The settings below will help: SETUP Internet connection: IP on WAN Under Optional Settings Host Name: MyWireless (Name of your client-AP) Domain Name: yourdomain.com (Your own domain) MTU: Auto Under Network Setup Router Local IP: 192.168.1.1 Subnet: 255.255.255.0 Gateway: 0.0.0.0 DHCP DHCP Server: enabled WIRELESS Under Basic settings; Wireless mode: AP wireless Network Mode: Mixed Wireless Network Name: MyWireless (Name of your client-AP) Wireless Channel: 11-2.462GHz Wireless SSID Broadcast: enable Sensitivity Range: 2000 Under Radius MAC Radius Client: enable MAC format : aabbcc-ddeeff Radius Server Address: your radius server IP Radius Server port: 1812 MUU: Password format: shared key Radius shared secret: the secret of your cliet (AP) Wireless Security Security Mode: WPA Radius WPA Algorithms: TKIP+AES Radius Server Address: Your radius server IP Radius Server port: 1812 WPA shared key: the secret of your cliet (AP) key renewal interval: 3600 ADMINISTRATION management Routing: enable 802.1x : enable Make sure you have your client(AP) information in radius: client.conf ( AP IP , MyWireless, Shared Key) configure eap.conf and radius.conf as well. All the best. ================================================== Benjamin K. Eshun ----- Message d'origine ---- De : Ian Truelsen <ian.truelsen(a)gmail.com> À : FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Envoyé le : Dimanche, 1 Avril 2007, 3h56mn 39s Objet : Anyone using dd-wrt for AP? I am trying to set up dd-wrt to use freeradius for authentication with EAP-TLS, however, I have run into a problem: there doesn't seem to be an option under the WPA encryption system for entering the freeradius secret. If anyone has got this working, can you let me know the where and how? The dd-wrt forums have been pretty silent on the issue. -- Ian Truelsen s/v Sting Email: ian.truelsen(a)gmail.com AIM: ihtruelsen MSN: ihtruelsen(a)hotmail.com Google Talk: ian.truelsen(a)gmail.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com

3 2

Re: Freeradius-Users Digest, Vol 24, Issue 10
by Arran Cudbard-Bell 02 Apr '07

02 Apr '07

> Message: 2 > Date: Mon, 02 Apr 2007 20:20:47 +0200 > From: Alan DeKok <aland(a)deployingradius.com> > Subject: Re: HUP in freeradius-1.1.5 + CVS results in process death. > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Message-ID: <4611497F.3000500(a)deployingradius.com> > Content-Type: text/plain; charset=ISO-8859-1 > > Arran Cudbard-Bell wrote: > >> I know theres a bug report for this already, >> but when I HUP the process freeradius doesn't die in the same place. >> > > If it's an issue due to incorrectly free'd memory, the crashes will be > random. > > There may be a fix in 1.1.6, but I'm not sure. > > Alan DeKok. > -- > http://deployingradius.com - The web site of the book > http://deployingradius.com/blog/ - The blog > Looks more like a bug in rlm_tls . Dies every time on HUP, deffinatly not random... Just wondered if anyone else had this error, to check it's not something weird in how i've set up the eap-tls module. Incidently whats the best route into contributing to freeRADIUS . I've never contributed to an opensource project before but as contributing to freeRADIUS and my day to day job seem to mesh together quite well , seems like a useful thing to do :) I've got pretty extensive knowledge of PHP & MySQL and am currently learning C (I'm basically a web programmer leaning towards the less fluffy languages :) ). Oh also had subversion experience but not CVS (which is the other way round to most people) . Thanks, Arran

1 0

error on start up
by Jackson Jerry-NPC637 02 Apr '07

02 Apr '07

Hello - I hope I haven't missed something obvious, but am having trouble getting radius to start after installing/configure/make...running Fedora core 5. Note - I'm not an Linux expert, so bear with me. This is the error - [root@LinuxServer freeradius-1.1.5]# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib *** glibc detected *** radiusd: double free or corruption (fasttop): 0x08b30140 *** ======= Backtrace: ========= /lib/libc.so.6[0x8d6f18] /lib/libc.so.6(__libc_free+0x79)[0x8da41d] /usr/local/lib/libltdl.so.3[0x5736bb] /usr/local/lib/libltdl.so.3(lt_dlopenext+0xbe)[0x57404e] radiusd(find_module_instance+0x317)[0xf571a7] radiusd(setup_modules+0x1d8)[0xf57758] radiusd(main+0x45c)[0xf5ad8c] /lib/libc.so.6(__libc_start_main+0xdc)[0x8887e4] radiusd[0xf4ecd1] ======= Memory map: ======== 00111000-00123000 r-xp 00000000 fd:00 976235 /usr/lib/libz.so.1.2.3 00123000-00124000 rwxp 00011000 fd:00 976235 /usr/lib/libz.so.1.2.3 00124000-00127000 r-xp 00000000 fd:00 976261 /usr/lib/libkrb5support.so.0.0 00127000-00128000 rwxp 00002000 fd:00 976261 /usr/lib/libkrb5support.so.0.0 0016d000-0017e000 r-xp 00000000 fd:00 18515580 /lib/libnsl-2.4.so 0017e000-0017f000 r-xp 00010000 fd:00 18515580 /lib/libnsl-2.4.so 0017f000-00180000 rwxp 00011000 fd:00 18515580 /lib/libnsl-2.4.so 00180000-00182000 rwxp 00180000 00:00 0 001d3000-001d4000 r-xp 001d3000 00:00 0 [vdso] 002e1000-002f6000 r-xp 00000000 fd:00 959556 /usr/local/lib/libradius-1.1.5.so 002f6000-002f7000 rwxp 00014000 fd:00 959556 /usr/local/lib/libradius-1.1.5.so 002f7000-002f8000 rwxp 002f7000 00:00 0 00345000-00347000 r-xp 00000000 fd:00 18515584 /lib/libcom_err.so.2.1 00347000-00348000 rwxp 00001000 fd:00 18515584 /lib/libcom_err.so.2.1 0037a000-0037c000 r-xp 00000000 fd:00 976373 /usr/local/lib/rlm_exec-1.1.5.so 0037c000-0037d000 rwxp 00001000 fd:00 976373 /usr/local/lib/rlm_exec-1.1.5.so 003fe000-00400000 r-xp 00000000 fd:00 18515576 /lib/libdl-2.4.so 00400000-00401000 r-xp 00001000 fd:00 18515576 /lib/libdl-2.4.so 00401000-00402000 rwxp 00002000 fd:00 18515576 /lib/libdl-2.4.so 00455000-0046d000 r-xp 00000000 fd:00 976264 /usr/lib/libgssapi_krb5.so.2.2 0046d000-0046e000 rwxp 00017000 fd:00 976264 /usr/lib/libgssapi_krb5.so.2.2 004d6000-004db000 r-xp 00000000 fd:00 18515589 /lib/libcrypt-2.4.so 004db000-004dc000 r-xp 00004000 fd:00 18515589 /lib/libcrypt-2.4.so 004dc000-004dd000 rwxp 00005000 fd:00 18515589 /lib/libcrypt-2.4.so 004dd000-00504000 rwxp 004dd000 00:00 0 00570000-00575000 r-xp 00000000 fd:00 955078 /usr/local/lib/libltdl.so.3.1.4 00575000-00576000 rwxp 00004000 fd:00 955078 /usr/local/lib/libltdl.so.3.1.4 005c9000-005e2000 r-xp 00000000 fd:00 18515573 /lib/ld-2.4.so 005e2000-005e3000 r-xp 00018000 fd:00 18515573 /lib/ld-2.4.so 005e3000-005e4000 rwxp 00019000 fd:00 18515573 /lib/ld-2.4.so 006f9000-0073a000 r-xp 00000000 fd:00 18515586 /lib/libssl.so.0.9.8a 0073a000-0073e000 rwxp 00040000 fd:00 18515586 /lib/libssl.so.0.9.8a 0073e000-0085d000 r-xp 00000000 fd:00 18515585 /lib/libcrypto.so.0.9.8a 0085d000-00870000 rwxp 0011e000 fd:00 18515585 /lib/libcrypto.so.0.9.8a 00870000-00873000 rwxp 00870000 00:00 0 00873000-0099f000 r-xp 00000000 fd:00 18515574 /lib/libc-2.4.so 0099f000-009a2000 r-xp 0012b000 fd:00 18515574 /lib/libc-2.4.so 009a2000-009a3000 rwxp 0012e000 fd:00 18515574 /lib/libc-2.4.so 009a3000-009a6000 rwxp 009a3000 00:00 0 009e2000-009eb000 r-xp 00000000 fd:00 18513961 /lib/libnss_files-2.4.so 009eb000-009ec000 r-xp 00008000 fd:00 18513961 /lib/libnss_files-2.4.so 009ec000-009ed000 rwxp 00009000 fd:00 18513961 /lib/libnss_files-2.4.so 00aaf000-00aba000 r-xp 00000000 fd:00 18515578 /lib/libgcc_s-4.1.0-20060304.so.1 00aba000-00abb000 rwxp 0000a000 fd:00 18515578 /lib/libgcc_s-4.1.0-20060304.so.1 00d0d000-00d31000 r-xp 00000000 fd:00 976262 /usr/lib/libk5crypto.so.3.0 00d31000-00d32000 rwxp 00024000 fd:00 976262 /usr/lib/libk5crypto.so.3.0 00d45000-00db8000 r-xp 00000000 fd:00 976263 /usr/lib/libkrb5.so.3.2 00db8000-00dba000 rwxp 00073000 fd:00 976263 /usr/lib/libkrb5.so.3.2 00ed5000-00ee4000 r-xp 00000000 fd:00 18515583 /lib/libresolv-2.4.so 00ee4000-00ee5000 r-xp 0000e000 fd:00 18515583 /lib/libresolv-2.4.so 00ee5000-00ee6000 rwxp 0000f000 fd:00 18515583 /lib/libresolv-2.4.so 00ee6000-00ee8000 rwxp 00ee6000 00:00 0 00f4a000-00f68000 r-xp 00000000 fd:00 976487 /usr/local/sbin/radiusd 00f68000-00f69000 rwxp 0001d000 fd:00 976487 /usr/local/sbin/radiusd 00f69000-00f6a000 rwxp 00f69000 00:00 0 00f8e000-00f9e000 r-xp 00000000 fd:00 18515575 /lib/libpthread-2.4.so 00f9e000-00f9f000 r-xp 0000f000 fd:00 18515575 /lib/libpthread-2.4.so 00f9f000-00fa0000 rwxp 00010000 fd:00 18515575 /lib/libpthread-2.4.so 00fa0000-00fa2000 rwxp 00fa0000 00:00 0 08ac0000-08ba7000 rw-p 08ac0000 00:00 0 [heap] b7e00000-b7e21000 rw-p b7e00000 00:00 0 b7e21000-b7f00000 ---p b7e21000 00:00 0 b7f2a000-b7f2f000 rw-p b7f2a000 00:00 0 b7f3f000-b7f40000 rw-p b7f3f000 00:00 0 bfb0e000-bfb40000 rw-p bfb0e000 00:00 0 [stack] Aborted Thanks for your help. Jerry J.

1 0