September 2012 - Freeradius-Users - lists.freeradius.org

Freeradius 3.0.0 "Installation mode requires -rpath" during "sudo make install"
by YJ Zhang 21 Sep '12

21 Sep '12

Here's a new one to me: After cloning the latesting FR 3.0.0 github master branch, I ran into the following during "sudo make install": Making install in src... Making install in src/include... /Users/myuid/freeradius-server/install-sh -c -d -m 755 /usr/local/include/freeradius for i in autoconf.h conf.h conffile.h detail.h dhcp.h event.h hash.h heap.h ident.h libradius.h md4.h md5.h missing.h modcall.h modules.h packet.h rad_assert.h radius.h radiusd.h radpaths.h radutmp.h realms.h sha1.h stats.h sysutmp.h token.h udpfromto.h vmps.h vqp.h; do \ sed 's/^#include <freeradius-devel/#include <freeradius/' $i > .inst.$$ ; \ /Users/myuid/freeradius-server/install-sh -c -m 644 .inst.$$ /usr/local/include/freeradius/$i; \ rm -f .inst.$$ ; \ done Making install in src/lib... /Users/myuid/freeradius-server/install-sh -c -d -m 755 /usr/local/lib/freeradius /Users/myuid/freeradius-server/scripts/jlibtool --mode=install /Users/myuid/freeradius-server/install-sh -c -c libfreeradius-radius.la \ /usr/local/lib/freeradius/libfreeradius-radius.la Installation mode requires -rpath make[4]: *** [install] Error 1 make[3]: *** [lib] Error 2 make[2]: *** [install] Error 2 make[1]: *** [src] Error 2 make: *** [install] Error 2 It seems libtool/autoconf/automake related, but I don't know enough to make heads-or-tails out of how to get around this. Any advice? Thanks in advance. Y.J. Zhang

2 1

request_dequeue problems (recent 3.0, when home-server stalls)
by Brian Julin 20 Sep '12

20 Sep '12

I'm currently hunting a problem that causes a recent checkout of FR3.0 to abort but which does not seem to be affecting an older revision (April 8th or so) of FR3.0 on another box. I do have a couple small in-house patches applied but they should probably not be relevant. The issue seems to happen when a home-server does not respond to a request, and then FR re-enqueues the request as a retransmit. The request then gets dequeued again, and at that point fails a REQUEST_MAGIC assert. That is, if I am reading the logs correctly... Logs are included, with a few added printfs thrown in. Anyone have any suggestions for good commits to bisect at? rad_recv: Access-Request packet from host 127.0.0.1 port 57940, id=104, length=2 63 request_enqueue 0x13d5220 Thread 1 got semaphore request_dequeue prequest before 0x13c0a00->(nil) Thread 3 got semaphore request_dequeue found request 0x13d5220 Thread 2 got semaphore request_dequeue prequest after 0x13c0a00->0x13d5220 request_dequeue prequest before 0x13c0b80->(nil) Thread 4 got semaphore Thread 2 exiting... Thread 1 handling request 258, (130 handled so far) request_dequeue prequest before 0x13c0e80->(nil) Thread 4 exiting... [... request dump ...] request_dequeue prequest before 0x13c0d00->(nil) Thread 3 exiting... (258) <thread> : # Executing section authorize from file /etc/raddb/eduroam_sp.c onf [... bunch of unlang/realm chatter ...] Sending Access-Request of id 38 to [... request dump ...] (258) Proxying request to home server ... Thread 1 exiting... Waking up in 0.2 seconds. request_enqueue 0x13d5220 Waking up in 0.2 seconds. Waking up in 0.4 seconds. Waking up in 0.7 seconds. Waking up in 1.1 seconds. rad_recv: Access-Request packet from host 127.0.0.1 port 57940, id=104, length=263 Discarding duplicate request from client EDUROAM_OUT port 57940 - ID: 104 due to unfinished request 258 Waking up in 0.9 seconds. Waking up in 1.4 seconds. rad_recv: Access-Request packet from host 127.0.0.1 port 57940, id=104, length=263 Discarding duplicate request from client EDUROAM_OUT port 57940 - ID: 104 due to unfinished request 258 Waking up in 0.4 seconds. (255) Cleaning up request packet ID 198 with timestamp +6868 Waking up in 0.2 seconds. (256) Cleaning up request packet ID 166 with timestamp +6868 Waking up in 0.2 seconds. (257) Cleaning up request packet ID 128 with timestamp +6868 Waking up in 2.1 seconds. rad_recv: Access-Request packet from host 127.0.0.1 port 57940, id=104, length=263 Discarding duplicate request from client EDUROAM_OUT port 57940 - ID: 104 due to unfinished request 258 Waking up in 1.1 seconds. Waking up in 3.7 seconds. rad_recv: Access-Request packet from host 127.0.0.1 port 57940, id=104, length=263 Discarding duplicate request from client EDUROAM_OUT port 57940 - ID: 104 due to unfinished request 258 Waking up in 2.9 seconds. rad_recv: Access-Request packet from host 127.0.0.1 port 57940, id=104, length=263 Discarding duplicate request from client EDUROAM_OUT port 57940 - ID: 104 due to unfinished request 258 Waking up in 0.9 seconds. Waking up in 5.6 seconds. Waking up in 8.5 seconds. Waking up in 12.8 seconds. Waking up in 19.2 seconds. Waking up in 28.8 seconds. (258) <queue> : Cleaning up request packet ID 104 with timestamp +6869 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 57940, id=125, length=254 request_enqueue 0x13c2080 Deleting thread 1 Deleting thread 2 Deleting thread 3 Deleting thread 4 Waking up in 0.3 seconds. Waking up in 0.4 seconds. Waking up in 0.7 seconds. Waking up in 1.1 seconds. Waking up in 1.6 seconds. Waking up in 2.5 seconds. Waking up in 3.7 seconds. Waking up in 5.6 seconds. Waking up in 8.5 seconds. Waking up in 12.8 seconds. Waking up in 19.2 seconds. Waking up in 28.8 seconds. (259) <queue> : Cleaning up request packet ID 125 with timestamp +10992 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 57940, id=228, length=254 request_enqueue 0x13c2080 Threads: total/active/spare threads = 0/0/0 Threads: Spawning 4 spares Thread spawned new child 5. Total threads in pool: 1 Thread spawned new child 6. Total threads in pool: 2 Thread spawned new child 7. Total threads in pool: 3 Thread 5 waiting to be assigned a request Thread 5 got semaphore request_dequeue prequest before 0x13c0e80->(nil) request_dequeue found request 0x13d5220 ASSERT FAILED threads.c[468]: request->magic == REQUEST_MAGIC Thread spawned new child 8. Total threads in pool: 4 Thread 7 waiting to be assigned a request Thread 6 waiting to be assigned a request Thread 6 got semaphore Thread 7 got semaphore

3 4

Re: error of segmentation during the implementation of eap2
by Arran Cudbard-Bell 20 Sep '12

20 Sep '12

On 20 Sep 2012, at 12:23, Tatiana DIBANDA <tdibanda31(a)yahoo.fr> wrote: > Arran, > > Test for this first segmentation fault : > reading pairlist file /usr/local/etc/raddb/hints > Module: Linked to module rlm_realm > Module: Instantiating module "suffix" from file /usr/local/etc/raddb/modules/realm > realm suffix { > > > > format = "suffix" > > delimiter = "@" > > ignore_default = no > > ignore_null = no > } > Erreur de segmentation > -original config : In the default and inner-tunnel file we had eap2 {ok = return} in the Authorize section,allowed eap2 in the authentication section and eap2 in the post-process. > - remove '-O2' from CFLAGS in Make.inc > - rebuild freeradius > - GDB trace in gdb-radiusd1.log (attached to this mail) > > Test for this second segmentation fault: > ++[pap] returns noop > Found Auth-Type = eap2 > # Executing group from file /usr/local/etc/raddb/sites-enabled/default > +- entering group authenticate {...} > Erreur de segmentation > > - config: in default and inner-tunnel file just allowed eap2 in authentication section > - remove '-O2' from CFLAGS in Make.inc > -rebuild freeradius > -GDB trace in gdb-radiusd2.log (attached to this mail) > > PS: in the two cases have this in default file if (EAP-Message) { update control { Auth-Type:=eap2}} and in users file added this line: user Cleartext-Password := "password". Both traces are with an older binary that was built with optimizations turned on. Program received signal SIGSEGV, Segmentation fault. 0x080529d3 in cf_log_err (ci=0x0, fmt=0x8085210 "\"%s\" modules aren't allowed in '%s' sections -- they have no such method.") at conffile.c:2641 warning: Source file is more recent than executable. GDB also complains of this... Please ensure you're using the new binary. You should not see "<value optimized out>" appearing in the GDB output. -Arran

1 0

WARNING: Child is hung for request xxx in component <core> module <queue>
by ramakrishna 20 Sep '12

20 Sep '12

Hi I am using freeRADIUS 2.1.12 and i am facing one problem with the load of Requests coming from RADIUS client. I see the error "WARNING: Child is hung for request xxx in component <core> module <queue>" in radius.log file. Please find the radiusd.conf configuration i am using. Please suggest how to get rid of the error. max_request_time = 5 cleanup_delay = 5 max_requests = 1024 thread pool { start_servers = 3 max_servers = 32 min_spare_servers = 3 max_spare_servers = 10 # max_queue_size = 65536 max_requests_per_server = 0 } I have run the server in debug mode but i cudnt find any logs related the above problem. Please lemme know whats going wrong. Please lemme know if u need any more configuration or logs. -- Best Regards, M.Rama Krishna Prasad,

3 2

Re: error of segmentation during the implementation of eap2
by Arran Cudbard-Bell 19 Sep '12

19 Sep '12

On 19 Sep 2012, at 14:33, Tatiana DIBANDA <tdibanda31(a)yahoo.fr> wrote: > Arran > My first configuration: > In the default and inner-tunnel file we had eap2 {ok = return} in the Authorize section,allowed eap2 in the authentication section and eap2 in the post-process. > When we started my server: segmentation fault as you can see to output-segfault file attached to this mail. > The gdb's ouput is in the ouput_gdb-radius.log file also attached to this mail. You have reported two separate segfaults. I need you to test with your original config to check that the fix I added for the *first* segfault works. reading pairlist file /usr/local/etc/raddb/hints Module: Linked to module rlm_realm Module: Instantiating module "suffix" from file /usr/local/etc/raddb/modules/realm realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } Erreur de segmentation I need you to provide another GDB trace for the *second* segfault, so I can look at the cause. ++[pap] returns noop Found Auth-Type = eap2 # Executing group from file /usr/local/etc/raddb/sites-enabled/default +- entering group authenticate {...} Erreur de segmentation It would be helpful, before you provide the second GDB trace, to edit Make.inc and remove '-O2' from CFLAGS and rebuild, so that we can see the values that were optimized out. -Arran

1 0

users file case sensitive
by Gregg Douglas 19 Sep '12

19 Sep '12

> > > > Hi, > > > > Background: > > > > FreeRadius Version: 2.1.1-7.10.1 > > Users are stored in LDAP, I am using the users file to assign static > > IP Addresses to certain users. > > > > > > It seems that the users file is case sensitive, I found a few articles > > on the net regarding this, but none really supplied a definitive answer. > > > > Is there a way to prevent the users file from being case sensitive ? If > > not, what is the recommended method to elegantly avoid this problem. > > >>files myfiles { > >> key = "%{lower:%{User-Name}}" > >> ... > >>} > > >>...or something similar. > >>>Sorry, where do I implement this ?

5 20

Re: error of segmentation during the implementation of eap2
by Arran Cudbard-Bell 19 Sep '12

19 Sep '12

Use your first config to test whether the patch worked (it should generate an error and exit). You now appear to be getting a different segfault Please provide a backtrace for this segfault. -Arran

1 0

account activate datetime
by SkyDiablo 19 Sep '12

19 Sep '12

hiho, i search a solution to set a "activate datetime" for a account? in the end, i want a possebility to set a timespan where the account is active? from -> datetime to -> dateime any tips for me ? greez & thx, sky...

3 6

Re: Using username@example.com and plain username
by Kriston 19 Sep '12

19 Sep '12

On Tue, September 18, 2012 17:34, Arran Cudbard-Bell wrote: > > On 18 Sep 2012, at 22:22, "Kriston" <me(a)kriston.net> wrote: > >> I have users who log in as "username(a)example.com" and just as "username". >> How do I append @example.com only to those users who don't have >> @example.com >> already? I have a fairly generic FreeRADIUS 2.1.10 installation that >> connects to a MySQL server. >> >> I've tried a number of different things in dialup.conf but none have >> worked. >> >> Example 1: >> sql_user_name = >> "{%{Stripped-User-Name}:-%{User-Name}}@{%{Realm}:-example.com}" >> >> This results in a string in the SQL queries for User-Name that looks like >> "=7B:-username=7D@=7B:-example.com=7D". > > Look at all those lonely lonely left hand curly braces, don't you think they > might appreciate another character to snuggle up to? What do you think that > character might be? While this comment is clever, would you provide a corrected example? >> Example 2: >> I have also tried regular expressions like this: >> if ( %{User-Name} !~ /.example\.com/i) { >> sql_user_name = "%{User-Name}(a)example.com" >> } >> But this one results in a blank string for in the SQL queries that use >> sql_user_name. >> >> I'm open to any and all comments. > > Read man unlang, stop inventing syntax. Why not post the correct syntax and show us? This mailing list could be so much more useful if people could provide actual answers instead of invectives. Reading the archives makes me feel embarrassed for the rest of the FreeRADIUS project. Kriston

4 3

RE: unlang time / date comparison
by Franks Andy (RLZ) IT Systems Engineer 19 Sep '12

19 Sep '12

Thanks Arran, I'll give it a try. I did find something to do with %1 / %I (can't remember which) and dividing by "epoch" so may be able to use that too? If in doubt give it a go eh? Thanks Andy -----Original Message----- From: freeradius-users-bounces+andy.franks=sath.nhs.uk(a)lists.freeradius.org [mailto:freeradius-users-bounces+andy.franks=sath.nhs.uk@lists.freeradiu s.org] On Behalf Of Arran Cudbard-Bell Sent: 18 September 2012 23:05 To: FreeRadius users mailing list Subject: Re: unlang time / date comparison On 18 Sep 2012, at 22:38, "Franks Andy $RLZ$ IT Systems Engineer" <Andy.Franks(a)sath.nhs.uk> wrote: > Hi, > > Hopefully a simple question. I've looked around for a while but can't find the answer to this. > > I'd like to be able to take a date/time from a sql database, use unlang (not a module) to compare it to the current time and make a decision based on the fact that it's, for example, less or more than 3600 seconds/60 minutes/1 hour etc ago. Use one of the SQL functions (UNIX_TIMESTAMP()) to pull the date field value out as an integer and do a straight comparison with "%{l}". Or if you write a SQL timestamp string into a date type attribute, it might be smart enough to parse it for you, and then you can do "%{integer:Timestamp-Attr}" and compare with "%{l}". Not 100% sure the code is there to do that though... -Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1