December 2013 - Freeradius-Users - lists.freeradius.org

Version 2.2.3 has been released
by Alan DeKok 11 Dec '13

11 Dec '13

We've just released version 2.2.3. This release fixes all known problems in the 2.2.x release series. Alan DeKok. ChangeLog: Feature improvements * Added dictionary.efficientip, dictionary.alcatel-lucent-aaa * Allow zero length DN strings in rlm_ldap. * If Password-With-Header has no header, assume it is Cleartext-Password. Bug fixes * Make the server build when DHCP is enabled * Don't crash if there's no Post-Proxy-Type Reject. * Use correct fields for X509 attributes in certificates * Install threads.h making it possible to link against the installed headers again. * Initialize SSL once in "main", instead of rlm_eap_tls. Some client libraries may need SSL.

1 0

cisco device enable authentication via radius/ldap
by Les Stott 10 Dec '13

10 Dec '13

Hi, I have a Freeradius Server in front of a FreeIPA backend configured to do LDAP Authentication via group. This works fine. I can login to my cisco switch as an ordinary user (who belongs to an ldap group cisco_admins) in user exec mode. Users in this group are assigned privilege level 15. /etc/raddb/users DEFAULT Ldap-Group == "cn=cisco_admins,cn=groups,cn=accounts,dc=mydomain,dc=com" Reply-Message="You have been authenticated", Auth-Type := System, Service-Type = "NAS-Prompt-User", Cisco-AVPair = "shell:priv-lvl=15", Fall-Through = No I figured out that I'd need to rewrite $enab15$ to have enable passwords authenticated via ldap also. This is working fine too. /etc/raddb/modules/attr_rewrite # Rewrite Usernames for enable mode on Cisco attr_rewrite rewriteenablemodeuser { attribute = User-Name searchin = packet searchfor = ".enab15." replacewith = "admin" append = no However this means that, for this configuration, I need to use the "admin" user password in ldap to enter enable mode. While I can authenticate as admin to access enable mode I was hoping for a way to be able to authenticate via an ordinary user for enable mode. i.e. normal user uses the same password for user mode and enable mode. Is there a way that the attr_rewrite can be something like... Repalcewith = "current_id_of_user" Or is there another way? Thanks, Les

1 1

how to change the radius default "testing123" password
by Clint Petty 10 Dec '13

10 Dec '13

I changed all instances of the password "testing123", to a random password on both the StrongSwan server and the Radius server, and restarted the strongswan and radiusd services. However, this broke the connection to authenticate to the LDAP server, so I had to put it back to "testing123" to get it to work again. How can I change the radius default "testing123" password? Is there a command I need to run to do this? Thanks for any help with this.

8 29

freeradius like proxy radius
by JEAN-JACQUES SIQUET 09 Dec '13

09 Dec '13

3 3

sqlippool duplicated IP assignments
by Antonio Modesto Amaral Sousa 09 Dec '13

09 Dec '13

Hi everyone, I'm using freeradius-2.1.12_1 with MySQL 5.1 and sqlippool configured to assign IP's to my PPPoE clients, I redistribute these routes with iBGP, until yesterday it was working fine, the problem started after a blackout that happened last night. I have a lot of clients that are being assigned duplicated IP addresses and I just don't know why, I've configured a long lease time for each assignment so that the NAS has a good time frame to transmit the interim updates, my radippool table is using the engine InnoDB and I think the select lock should be working fine. Any suggestions?

3 3

Combining EAP, MSCHAP and LDAP
by David Hartburn 09 Dec '13

09 Dec '13

Hi, Can anyone help advise if FreeRADIUS is suitable without any other changes to the existing infrastructure at my institution? If so, any advice on the best way to implement would be appreciated. I am looking at options for replacing MS NPS with basically something better that works and is debuggable. FreeRadius looks the best option. Our setup is a little complicated. Wireless users authenticate with EAP type PEAP, the inner authentication being done via MSCHAPv2. At the backend, we have a *nix based LDAP server with a particular attribute set for if a user is permitted to access the wireless network. Passwords are stored in an encrypted format. When a user binds, they can not see the resource attribute saying if they are permitted to use wireless. The LDAP information is pushed into active directory, where a wireless user group is created and populated by those who have the wireless flag set. Currently NPS authenticates against AD and checks this group. My preference would be to leave any windows stuff out of the equation. I followed a couple of online guides and have had FreeRadius successfully authenticate users against AD, however I then found something saying if I wanted to check groups I would have to use LDAP. Following the information in the Dirk van der Walt book, it states that you can bind to LDAP as a user but are limited to PAP authentication or you can read the userPassword attribute which must be plain text if MSCHAP is needed. Neither sounds suitable for what I need. Is it possible for FreeRadius to use EAP, MSCHAP, check a LDAP attribute and an encrypted password? As the password is encrypted and of little use, our LDAP expert suggested that we bind using a system account to check the account exists and has rights for wireless (I have this bit working), then to authenticate a bind is made as the user. Does this sound reasonable? Would binding to the AD server as an LDAP server offer any better avenue? As this is currently a proof-of-concept lab exercise, we do not want to make any changes to our existing infrastructure if possible. If that is required, giving users permission to see their wireless attribute in LDAP seems like the least painful. Sorry for the rambling posts, I'm in the newbie situation of being faced with many paths open to me, and not really knowing the best one to take. Yours DaveH

4 4

diffrent services from same IP
by SkyDiablo 07 Dec '13

07 Dec '13

hi, i have running a freeradius, all works fine... but now, i need to handle two diffrent services from the same IP in diffrent virtual server. in detail: i have a VPN server and one or more coova chilli systeme. all this freeradius clients will running on the same system (localhost) but if i load the client configs, it throws the error "Failed to add duplicate client". of course, all client will have the same IP, all client running under localhost. it is possible to handle this ? diffrent services/clients on the same IP ? greez & thx, volker...

3 3

Help with Chap and ldap
by P K 06 Dec '13

06 Dec '13

Hi, I'm using openldap and phpldapadmin to create account. The interface allows me to store "clear" password. When I do an ldapsearch commandline, I get base64 password. I don't see an option in phpldapadmin to store "clear-text" type. I've configured freeradius to use ldap and I'm using radtest to test but chap always fails. Is it failing because of base64? It seems to have decoded fine looking at the logs. Why is CHAP failing? Please help. Here's my log. radtest -t chap boris password01 localhost 0 testing123 Sending Access-Request of id 74 to 127.0.0.1 port 1812 User-Name = "boris" CHAP-Password = 0x4ab32d3fc82d3d59528ca82338d3ed40aa NAS-IP-Address = 127.0.1.1 NAS-Port = 0 rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=74, length=20 Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnel Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 37517, id=74, length=58 User-Name = "boris" CHAP-Password = 0x4ab32d3fc82d3d59528ca82338d3ed40aa NAS-IP-Address = 127.0.1.1 NAS-Port = 0 # Executing section authorize from file /etc/freeradius/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok [auth_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/freeradius/radacct/127.0.0.1/auth-detail-20131205 [auth_log] /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/127.0.0.1/auth-detail-20131205 [auth_log] expand: %t -> Thu Dec 5 23:31:12 2013 ++[auth_log] returns ok [chap] Setting 'Auth-Type := CHAP' ++[chap] returns ok ++[mschap] returns noop ++[digest] returns noop [suffix] No '@' in User-Name = "boris", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop [files] expand: %{NAS-IP-Address} -> 127.0.1.1 [files] expand: %{NAS-IP-Address} -> 127.0.1.1 [files] users: Matched entry DEFAULT at line 23 ++[files] returns ok [ldap] performing user authorization for boris [ldap] expand: %{Stripped-User-Name} -> [ldap] ... expanding second conditional [ldap] expand: %{User-Name} -> boris [ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=boris) [ldap] expand: dc=example,dc=int -> dc=example,dc=int [ldap] ldap_get_conn: Checking Id: 0 [ldap] ldap_get_conn: Got Id: 0 [ldap] attempting LDAP reconnection [ldap] (re)connect to 127.0.0.1:389, authentication 0 [ldap] bind as cn=admin,dc=example,dc=int/P0intBlank to 127.0.0.1:389 [ldap] waiting for bind result ... [ldap] Bind was successful [ldap] performing search in dc=example,dc=int, with filter (uid=boris) [ldap] No default NMAS login sequence [ldap] looking for check items in directory... [ldap] userPassword -> Password-With-Header == "password01" [ldap] looking for reply items in directory... [ldap] user boris authorized to use remote access [ldap] ldap_release_conn: Release Id: 0 ++[ldap] returns ok ++[expiration] returns noop ++[logintime] returns noop [pap] Failed to decode Password-With-Header = "password01" [pap] WARNING: Auth-Type already set. Not setting to PAP ++[pap] returns noop Found Auth-Type = CHAP # Executing group from file /etc/freeradius/sites-enabled/default +- entering group CHAP {...} [chap] login attempt by "boris" with CHAP password [chap] Cleartext-Password is required for authentication ++[chap] returns invalid Failed to authenticate the user. Using Post-Auth-Type Reject # Executing group from file /etc/freeradius/sites-enabled/default +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> boris attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 74 to 127.0.0.1 port 37517 Waking up in 4.9 seconds. Cleaning up request 0 ID 74 with timestamp +22 Ready to process requests. ^C

3 3

rlm_ldap (ldap): Could not start TLS: Connect error
by Hachmer, Tobias 05 Dec '13

05 Dec '13

Hello list, in my further tests with FreeRADIUS v3 (rpmbuild from v3.0.x branch) I have a problem with the ldap module and start_tls. This is definitely working: - Ldap connect with ldap utils (ldapsearch -ZZ and so on) via port 389 with starttls - Ldap connect with FreeRADIUS 2.1.12 via port 389 (start_tls = yes and require_cert = "demand") This is not working: - FR 3 ldap module isn't able to connect to ldap server via port 389 + start_tls=yes - FR debug error: # Loaded module rlm_ldap # Instantiating module "ldap" from file /etc/raddb/mods-enabled/ldap ldap { server = "fqdn" (matches CN in ldap server certificate) port = 389 password = "xxx" identity = "xxx" valuepair_attribute = "radiusVSA" read_clients = yes user { filter = "(&(uid=%{%{Stripped-User-Name}:-%{User-Name}})(objectClass=radiusProfile))" scope = "sub" base_dn = "xxx" access_attribute = "radiusAccountStatus" access_positive = yes } group { filter = "(objectClass=groupOfNames)" scope = "sub" base_dn = "xxx" name_attribute = "cn" membership_attribute = "memberOf" membership_filter = "(member=%{control:Ldap-UserDn})" cacheable_name = no cacheable_dn = yes } client { filter = "(objectClass=radiusClient)" scope = "sub" base_dn = "xxx" attribute { identifier = "radiusClientIdentifier" shortname = "radiusClientShortname" nas_type = "radiusClientType" secret = "radiusClientSecret" virtual_server = "radiusClientVirtualServer" require_message_authenticator = "radiusClientRequireMa" } } profile { filter = "(objectclass=radiusObjectProfile)" attribute = "radiusGroupName" default = "xxx" } options { ldap_debug = 597 chase_referrals = yes rebind = yes net_timeout = 1 res_timeout = 20 srv_timelimit = 20 idle = 60 probes = 3 interval = 3 } tls { ca_file = "/etc/raddb/certs/rootca_cert.pem" start_tls = yes require_cert = "demand" (also tested with never, same result) } } accounting { reference = "%{tolower:type.%{Acct-Status-Type}}" } post-auth { reference = "." } rlm_ldap (ldap): Initialising connection pool pool { start = 5 min = 4 max = 10 spare = 3 uses = 0 lifetime = 0 cleanup_delay = 5 idle_timeout = 60 spread = no } rlm_ldap (ldap): Opening additional connection (0) rlm_ldap (ldap): Connecting to fqdn:389 rlm_ldap (ldap): Could not start TLS: Connect error rlm_ldap (ldap): Opening connection failed (0) rlm_ldap (ldap): Removing connection pool /etc/raddb/mods-enabled/ldap[8]: Instantiation failed for module "ldap" - openldap debug log: Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: activity on 1 descriptor Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: activity on: Nov 28 11:21:00 radiusv3test slapd[7737]: Nov 28 11:21:00 radiusv3test slapd[7737]: slap_listener_activate(7): Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=7 busy Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=8 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=9 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=10 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=11 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: >>> slap_listener(ldap:///) Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: listen=7, new connection on 16 Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: activity on 1 descriptor Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: activity on: Nov 28 11:21:00 radiusv3test slapd[7737]: Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=7 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=8 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=9 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=10 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=11 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: added 16r (active) listener=(nil) Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: activity on 2 descriptors Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: activity on: Nov 28 11:21:00 radiusv3test slapd[7737]: 16r Nov 28 11:21:00 radiusv3test slapd[7737]: Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: read active on 16 Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=7 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=8 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=9 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: connection_get(16) Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=10 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: connection_get(16): got connid=1003 Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=11 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: connection_read(16): checking for input on id=1003 Nov 28 11:21:00 radiusv3test slapd[7737]: op tag 0x77, time 1385634060 Nov 28 11:21:00 radiusv3test slapd[7737]: conn=1003 op=0 do_extended Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: activity on 1 descriptor Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: activity on: Nov 28 11:21:00 radiusv3test slapd[7737]: do_extended: oid=1.3.6.1.4.1.1466.20037 Nov 28 11:21:00 radiusv3test slapd[7737]: Nov 28 11:21:00 radiusv3test slapd[7737]: send_ldap_extended: err=0 oid= len=0 Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=7 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: send_ldap_response: msgid=1 tag=120 err=0 Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=8 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=9 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=10 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=11 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: activity on 1 descriptor Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: activity on: Nov 28 11:21:00 radiusv3test slapd[7737]: 16r Nov 28 11:21:00 radiusv3test slapd[7737]: Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: read active on 16 Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=7 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=8 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=9 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=10 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=11 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: connection_get(16) Nov 28 11:21:00 radiusv3test slapd[7737]: connection_get(16): got connid=1003 Nov 28 11:21:00 radiusv3test slapd[7737]: connection_read(16): checking for input on id=1003 Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: activity on 1 descriptor Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: activity on: Nov 28 11:21:00 radiusv3test slapd[7737]: Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=7 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=8 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=9 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=10 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=11 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: activity on 1 descriptor Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: activity on: Nov 28 11:21:00 radiusv3test slapd[7737]: 16r Nov 28 11:21:00 radiusv3test slapd[7737]: Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: read active on 16 Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=7 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=8 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=9 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=10 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: connection_get(16) Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=11 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: connection_get(16): got connid=1003 Nov 28 11:21:00 radiusv3test slapd[7737]: connection_read(16): checking for input on id=1003 Nov 28 11:21:00 radiusv3test slapd[7737]: connection_read(16): TLS accept failure error=-1 id=1003, closing Nov 28 11:21:00 radiusv3test slapd[7737]: connection_closing: readying conn=1003 sd=16 for close Nov 28 11:21:00 radiusv3test slapd[7737]: connection_close: conn=1003 sd=16 Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: removing 16 Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: activity on 1 descriptor Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: activity on: Nov 28 11:21:00 radiusv3test slapd[7737]: Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=7 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=8 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=9 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=10 active_threads=0 tvp=zero Nov 28 11:21:00 radiusv3test slapd[7737]: daemon: epoll: listen=11 active_threads=0 tvp=zero FreeRADIUS 3: # ldd /usr/sbin/radiusd linux-vdso.so.1 => (0x00007fff8c1ff000) libfreeradius-server.so => /usr/lib64/freeradius/libfreeradius-server.so (0x00007f224b44b000) libfreeradius-radius.so => /usr/lib64/freeradius/libfreeradius-radius.so (0x00007f224b21b000) libfreeradius-eap.so => /usr/lib64/freeradius/libfreeradius-eap.so (0x00007f224b011000) libpcre.so.0 => /lib64/libpcre.so.0 (0x00007f224ade0000) libpcreposix.so.0 => /usr/lib64/libpcreposix.so.0 (0x00007f224abdd000) libtalloc.so.2 => /usr/lib64/libtalloc.so.2 (0x00007f224a9d3000) libcrypto.so.10 => /usr/lib64/libcrypto.so.10 (0x00007f224a639000) libssl.so.10 => /usr/lib64/libssl.so.10 (0x00007f224a3db000) libnsl.so.1 => /lib64/libnsl.so.1 (0x00007f224a1c2000) libresolv.so.2 => /lib64/libresolv.so.2 (0x00007f2249fa8000) libdl.so.2 => /lib64/libdl.so.2 (0x00007f2249da3000) libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f2249b86000) libreadline.so.6 => /lib64/libreadline.so.6 (0x00007f2249943000) libcrypt.so.1 => /lib64/libcrypt.so.1 (0x00007f224970b000) libc.so.6 => /lib64/libc.so.6 (0x00007f2249378000) /lib64/ld-linux-x86-64.so.2 (0x00007f224b66d000) librt.so.1 => /lib64/librt.so.1 (0x00007f2249170000) libz.so.1 => /lib64/libz.so.1 (0x00007f2248f59000) libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007f2248d15000) libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007f2248a2f000) libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007f224882a000) libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007f22485fe000) libtinfo.so.5 => /lib64/libtinfo.so.5 (0x00007f22483dd000) libfreebl3.so => /lib64/libfreebl3.so (0x00007f2248170000) libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007f2247f65000) libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007f2247d62000) libselinux.so.1 => /lib64/libselinux.so.1 (0x00007f2247b42000) FreeRADIUS v2.1.12 (default RPM from official CentOS Repo): # ldd /usr/sbin/radiusd linux-vdso.so.1 => (0x00007fffa9980000) libfreeradius-radius-2.1.12.so => /usr/lib64/freeradius/libfreeradius-radius-2.1.12.so (0x00007fb0297b0000) libnsl.so.1 => /lib64/libnsl.so.1 (0x00007fb029591000) libresolv.so.2 => /lib64/libresolv.so.2 (0x00007fb029377000) libpthread.so.0 => /lib64/libpthread.so.0 (0x00007fb02915a000) libcrypt.so.1 => /lib64/libcrypt.so.1 (0x00007fb028f22000) libltdl.so.7 => /usr/lib64/libltdl.so.7 (0x00007fb028d19000) libssl.so.10 => /usr/lib64/libssl.so.10 (0x00007fb028abc000) libcrypto.so.10 => /usr/lib64/libcrypto.so.10 (0x00007fb028721000) libc.so.6 => /lib64/libc.so.6 (0x00007fb02838e000) /lib64/ld-linux-x86-64.so.2 (0x00007fb029c1e000) libfreebl3.so => /lib64/libfreebl3.so (0x00007fb028122000) libdl.so.2 => /lib64/libdl.so.2 (0x00007fb027f1d000) libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007fb027cd9000) libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007fb0279f3000) libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007fb0277ee000) libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007fb0275c2000) libz.so.1 => /lib64/libz.so.1 (0x00007fb0273ac000) libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007fb0271a0000) libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007fb026f9d000) libselinux.so.1 => /lib64/libselinux.so.1 (0x00007fb026d7d000) Thanks in advance for any help and please let me know if further information is needed. Kind regards, Tobias Hachmer

3 14

sqltrace.sql
by Sanity Computers 04 Dec '13

04 Dec '13

Ok thanks, the sqltrace feature is handy, it was a display error as the trace looks to be perfect. Now its enabled the display shows the full query. Thanks for the help.

1 0