June 2013 - Freeradius-Users - lists.freeradius.org

Calling-Station-Id Not Getting Updated in radacct table
by Cholleti, Hanumantha 13 Jun '13

13 Jun '13

Hi We are on version 2.2.1 (github release). We noticed that Calling-Station-Id is not getting updated in radacct table if the NAS sends the Calling-Station-Id in octet format (ex: "\000\240\274/\370\260"). Based on the documentation below in default conf (sites-enabled/default) file under authorization section # # The WiMAX specification says that the Calling-Station-Id # is 6 octets of the MAC. This definition conflicts with # RFC 3580, and all common RADIUS practices. Un-commenting # the "wimax" module here means that it will fix the # Calling-Station-Id attribute to the normal format as # specified in RFC 3580 Section 3.21 wimax By Uncommenting the wimax above, this fixed the issue of Calling-Station-ID not getting updated in cui table, but accounting table (radacct) still show blank value. In the dialup.conf and cui.conf both use the same attribute %{Calling-Station-Id}. If NAS pass the Calling-Station-Id in String format (ex: "00-1C-B3-AA-AA-AA") both cui and radacct gets updated with Calling-Station-Id correctly. Similar to the above wimax configuration for authorize section, do we need to enable any setting for accounting to fix the Calling-Station-Id attribute that will populate the radacct correctly as string? Here is the debug log when the NAS sends the Calling Station Id in octet format Calling Station Id being sent by NAS is "\000\240\274/\370\260" ===================== Begin Debug Log ===================== Thread 3 handling request 16, (4 handled so far) [<thread>] # Executing section authorize from file /opt/freeradius/etc/raddb/sites-enabled/default [<thread>] +- entering group authorize {...} ++[preprocess] returns ok [auth_log] expand: %{Packet-Src-IP-Address} -> 75.104.249.138 [auth_log] expand: /opt/freeradius/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d -> /opt/freeradius/var/log/radius/radacct/75.104.249.138/auth-detail-20130613 [auth_log] /opt/freeradius/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /opt/freeradius/var/log/radius/radacct/75.104.249.138/auth-detail-20130613 [auth_log] expand: %t -> Thu Jun 13 08:49:13 2013 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop ++[digest] returns noop rlm_wimax: Fixing WiMAX binary Calling-Station-Id to 00-a0-bc-2f-f8-b0 *** As you can see based on the uncommenting of wimax in default config of authorize section, the Calling-Station-Id is fixed to string format ++[wimax] returns ok [suffix] Looking up realm "viasat-oss" for User-Name = "00A0BC2FF8B0@viasat-oss" [suffix] Found realm "viasat-oss" [suffix] Adding Stripped-User-Name = "00A0BC2FF8B0" [suffix] Adding Realm = "viasat-oss" [suffix] Authentication realm is LOCAL. ++[suffix] returns ok [eap] EAP packet type response id 6 length 6 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[files] returns noop [sql] expand: %{Stripped-User-Name} -> 00A0BC2FF8B0 [sql] expand: %{%{Stripped-User-Name}:-%{%{User-Name}:-DEFAULT}} -> 00A0BC2FF8B0 [sql] sql_set_user escaped user --> '00A0BC2FF8B0' rlm_sql (sql): Reserving sql socket id: 2 [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = '00A0BC2FF8B0' ORDER BY id rlm_sql_mysql: query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '00A0BC2FF8B0' ORDER BY id [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' OR (NOT EXISTS (select 1 from radreply where username='%{SQL-User-Name}') AND username='DEFAULT-ISF') ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = '00A0BC2FF8B0' OR (NOT EXISTS (select 1 from radreply where username='00A0BC2FF8B0') AND username='DEFAULT-ISF') ORDER BY priority rlm_sql_mysql: query: SELECT groupname FROM radusergroup WHERE username = '00A0BC2FF8B0' OR (NOT EXISTS (select 1 from radreply where username='00A0BC2FF8B0') AND username='DEFAULT-ISF') ORDER BY priority rlm_sql (sql): Released sql socket id: 2 [sql] User 00A0BC2FF8B0 not found ++[sql] returns notfound ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop Found Auth-Type = EAP # Executing group from file /opt/freeradius/etc/raddb/sites-enabled/default +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/tls [eap] processing type tls [tls] Authenticate [tls] processing EAP-TLS [tls] Received TLS ACK [tls] ACK handshake is finished [tls] eaptls_verify returned 3 [tls] eaptls_process returned 3 [tls] Adding user data to cached session [eap] Freeing handler ++[eap] returns ok # Executing section post-auth from file /opt/freeradius/etc/raddb/sites-enabled/default +- entering group post-auth {...} ++[exec] returns noop expand: %{User-Name} -> 00A0BC2FF8B0@viasat-oss ++[reply] returns noop [wimax] MIP-RK = 0x30c90a50cc4cfb9581304c0ed41256afe72a7f816ab9f305499a34a1acacadc925765b5ef82f1f7cfbb54de7c1547243c3ed0ac20073f77e76009e775e1f3399 [wimax] MIP-SPI = 716f70c5 [wimax] WARNING: WiMAX-MN-NAI was not found in the request or in the reply. [wimax] WARNING: We cannot calculate MN-HA keys. [wimax] WARNING: WiMAX-IP-Technology not found in reply. [wimax] WARNING: Not calculating MN-HA keys ++[wimax] returns updated [cui] expand: %{User-Name} -> 00A0BC2FF8B0@viasat-oss [cui] sql_set_user escaped user --> '00A0BC2FF8B0@viasat-oss' [cui] expand: INSERT IGNORE INTO cui (clientipaddress, callingstationid, username, cui, lastaccounting) VALUES ('%{Client-IP-Address}', '%{Calling-Station-Id}', '%{User-Name}', '%{reply:Chargeable-User-Identity}', NULL) ON DUPLICATE KEY UPDATE lastaccounting='0000-00-00 00:00:00', cui='%{reply:Chargeable-User-Identity}' -> INSERT IGNORE INTO cui (clientipaddress, callingstationid, username, cui, lastaccounting) VALUES ('75.104.249.138', '00-a0-bc-2f-f8-b0', '00A0BC2FF8B0@viasat-oss', '', NULL) ON DUPLICATE KEY UPDATE lastaccounting='0000-00-00 00:00:00', cui='' rlm_sql (cui) in sql_postauth: query is INSERT IGNORE INTO cui (clientipaddress, callingstationid, username, cui, lastaccounting) VALUES ('75.104.249.138', '00-a0-bc-2f-f8-b0', '00A0BC2FF8B0@viasat-oss', '', NULL) ON DUPLICATE KEY UPDATE lastaccounting='0000-00-00 00:00:00', cui='' *** As seen above, the cui is getting populated with Calling-Station-Id '00-a0-bc-2f-f8-b0' correctly based on the above fix rlm_sql (cui): Reserving sql socket id: 3 rlm_sql (cui): Released sql socket id: 3 ++[cui] returns ok Finished request 16. Going to the next request Thread 3 waiting to be assigned a request Waking up in 4.0 seconds. Cleaning up request 16 ID 193 with timestamp +375 Ready to process requests. Waking up in 0.9 seconds. Thread 4 got semaphore Thread 4 handling request 17, (4 handled so far) [<thread>] # Executing section preacct from file /opt/freeradius/etc/raddb/sites-enabled/default [<thread>] +- entering group preacct {...} ++[preprocess] returns ok [acct_unique] WARNING: Attribute NAS-Identifier was not found in request, unique ID MAY be inconsistent [acct_unique] Hashing 'NAS-Port = 5,,NAS-IP-Address = 75.104.249.138,Acct-Session-Id = "1009A5F",User-Name = "00A0BC2FF8B0@viasat-oss"' [acct_unique] Acct-Unique-Session-ID = "3e46e14b569e512c". ++[acct_unique] returns ok [suffix] Looking up realm "viasat-oss" for User-Name = "00A0BC2FF8B0@viasat-oss" [suffix] Found realm "viasat-oss" [suffix] Adding Stripped-User-Name = "00A0BC2FF8B0" [suffix] Adding Realm = "viasat-oss" [suffix] Accounting realm is LOCAL. ++[suffix] returns ok ++[files] returns noop # Executing section accounting from file /opt/freeradius/etc/raddb/sites-enabled/default +- entering group accounting {...} [detail] expand: %{Packet-Src-IP-Address} -> 75.104.249.138 [detail] expand: /opt/freeradius/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d -> /opt/freeradius/var/log/radius/radacct/75.104.249.138/detail-20130613 [detail] /opt/freeradius/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /opt/freeradius/var/log/radius/radacct/75.104.249.138/detail-20130613 [detail] Acquired filelock, tried 1 time(s) [detail] expand: %t -> Thu Jun 13 08:49:19 2013 ++[detail] returns ok [sql] expand: %{Stripped-User-Name} -> 00A0BC2FF8B0 [sql] expand: %{%{Stripped-User-Name}:-%{%{User-Name}:-DEFAULT}} -> 00A0BC2FF8B0 [sql] sql_set_user escaped user --> '00A0BC2FF8B0' [sql] expand: %{Acct-Delay-Time} -> [sql] ... expanding second conditional [sql] expand: INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay, xascendsessionsvrkey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', [sql] expand: /opt/freeradius/var/log/radius/sqltrace.sql -> /opt/freeradius/var/log/radius/sqltrace.sql rlm_sql (sql): Reserving sql socket id: 1 rlm_sql_mysql: query: INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay, xascendsessionsvrkey) VALUES ('1009A5F', '3e46e14b569e512c', '00A0BC2FF8B0', 'viasat-oss', '75.104.249.138', '5', 'Wireless-802.16', '2013-06-13 08:49:19', NULL, '0', '', '', '', '0', '0', '', '', '', '', '', '10.78.64.59', '0', '0', '') rlm_sql (sql): Released sql socket id: 1 *** Above you notice that the Calling-Station-Id in radacct is getting populated with empty '' string. ++[sql] returns ok [attr_filter.accounting_response] expand: %{User-Name} -> 00A0BC2FF8B0@viasat-oss attr_filter: Matched entry DEFAULT at line 12 ++[attr_filter.accounting_response] returns updated Finished request 17. Going to the next request ===================== End Debug Log ===================== We also did a quick radclient test by sending the following accounting data Packet-Type=4 Packet-Dst-Port=1813 Acct-Session-Id = "4D2BB8AC-00000098" Acct-Status-Type = Start Acct-Authentic = RADIUS User-Name = "Release2-build11@viasat-oss" User-Password = "password" NAS-Port = 100 Called-Station-Id = "00-02-6F-AA-AA-AA:My Wireless" Calling-Station-Id = "\000\240\274/\370\260" NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 48Mbps 802.11b" In above case since the Calling-Station-Id is in octet format, radacct calling station id was populated with blank value, but the cui table calling-station got updated correctly. If we replace the above Calling-Station-Id with String format value ("00-1C-B3-AA-AA-AA") both radacct and cui table were updated with the Calling Station Id correctly. Please let us know if you need additional information Thanks -Hanu

2 2

Exec problems in FR3.0
by Franks Andy (RLZ) IT Systems Engineer 13 Jun '13

13 Jun '13

Sorry to send yet more emails with issues. I've moved to FR3 to test SQL stuff and am having some problems with getting exec modules I previously used to work. I know I could rewrite these in perl, but they worked before in FR2.2.1 and I want to solve why they won't work now. I have an exec module thus : exec mactodelimitedmac { wait = yes input_pairs = config output_pairs = config shell_escape = yes program = "/usr/local/etc/raddb/mactodelimitedmac.sh %{User-Name} :" } It just takes a mac address and adds a delimited to each component of the address, updating the control value "DelimitedMac" via the standard echo Variable := \"value\"" I used to instantiate it in radiusd.conf and then call it directly from, say, the post-auth section Mactodelimitedmac Which updated that value. If I do it that way now it gives : (0) WARNING: mactodelimitedmac : List "<INVALID>" is not available LITERAL: %{User-Name} LITERAL: %{User-Name} --> %{User-Name} EXPANSION: %{User-Name} Looking for attribute name in User-Name xlat aprint 3 expand attr User-Name --> '0023ae604b02' (0) mactodelimitedmac : expand: '%{User-Name}' -> '0023ae604b02' (0) mactodelimitedmac : Program output is (0) ERROR: mactodelimitedmac : Abnormal child exit: Success (0) [mactodelimitedmac] = reject (0) Using Post-Auth-Type Reject If I instead do Update control { DelimitedMac := "%{mactodelimitedmac:/etc/freeradius/mactodelimitedmac.sh %{user-name} :}" } And change the script so that it just returns the bare variable it says : expand mod mactodelimitedmac --> '/usr/local/etc/raddb/mactodelimitedmac.sh 0023ae604b02 :' (0) Executing /usr/local/etc/raddb/mactodelimitedmac.sh 0023ae604b02 : (0) Program output is ?[1m?[33m(0) WARNING: Failed to execute /usr/local/etc/raddb/mactodelimitedmac.sh: Bad address?[0m (0) ERROR: Child returned error 1 (0) result 1 --> '?[1m?[33m(0) WARNING: Failed to execute /usr/local/etc/raddb/mactodelimitedmac.sh: Bad address?[0m ' Again, I'm struggling. Sorry to be a pain. Andy

3 2

unlang and update section
by Bill Schoolfield 13 Jun '13

13 Jun '13

Can update sections contain if conditions? I get the following error: /etc/raddb/sites-enabled/default[573]: "update" sections cannot have subsections /etc/raddb/sites-enabled/default[465]: Errors parsing post-auth section. The documentation says "The only contents permitted in an "update" section are attributes and values which I assume is the issue. Please confirm. Bill

5 8

RE: MSSQL using unixodbc and truncation of characters
by Franks Andy (RLZ) IT Systems Engineer 13 Jun '13

13 Jun '13

Hi Aaran, The Sybase driver works for a simple "select 123456", but then any real value gives, .e.g : rlm_sql (sql_test_mssql): Executing query: 'Select NetworkCardID from Audit_NetworkCard where macaddress='9C:B7:0D:84:0D:09'' Sybase Server message: number(208) severity(16) state(1) line(1) Invalid object name 'Audit_NetworkCard'. rlm_sql_sybase(sql_select_query): Unexpected result type from query rlm_sql (sql_test_mssql): Database query error '' This is because it doesn't properly set the database to the one asked for : (by the way is there a nice way to get shot of all these ansi escape codes from the radius.log? It looks nice in -X mode, but not great back-end) rlm_sql (sql_test_mssql): Creating new attribute sql_test_mssql-SQL-Group rlm_sql (sql_test_mssql): Couldn't find configuration for accounting, will return NOOP for calls from this section^[[$ ^[[1mrlm_sql (sql_test_mssql): Couldn't find configuration for post-auth, will return NOOP for calls from this section^[[0m ^[[1mrlm_sql (sql_test_mssql): Driver rlm_sql_sybase (module rlm_sql_sybase) loaded and linked^[[0m ^[[1mrlm_sql (sql_test_mssql): Attempting to connect to database "SATHSupport"^[[0m rlm_sql (sql_test_mssql): Initialising connection pool ^[[1mrlm_sql (sql_test_mssql): Opening additional connection (0)^[[0m ^[[31mSybase Server message: ^[[0m ^[[31mnumber(5701) severity(0) state(2) line(1) ^[[0m ^[[31mChanged database context to 'master'. ^[[0m ^[[31mSybase Server message: ^[[0m ^[[31mnumber(5703) severity(0) state(1) line(1) ^[[0m ^[[31mChanged language setting to us_english. ^[[0m ^[[1mrlm_sql (sql_test_mssql): Opening additional connection (1)^[[0m ^[[31mSybase Server message: ^[[0m ^[[31mnumber(5701) severity(0) state(2) line(1) ^[[0m ^[[31mChanged database context to 'master'. ^[[0m ^[[31mSybase Server message: ^[[0m ^[[31mnumber(5703) severity(0) state(1) line(1) ^[[0m ^[[31mChanged language setting to us_english. ^[[0m ... So I need to use an explicit sql call to set the database early on, but otherwise it works without too much hassle, and no truncation of returned value (!) Now, if only I could get the unixodbc rlm module working. You mentioned a linking problem - any ideas on progressing debug with that? Thanks VERY much, this list is great. Andy

2 1

FW: MSSQL using unixodbc and truncation of characters
by Franks Andy (RLZ) IT Systems Engineer 13 Jun '13

13 Jun '13

Ok, so I've compiled 3 from scratch with support for the freetds and unixodbc modules. I have some issues : Using the unixodbc driver that was working before gives me this now : rlm_sql (sql_postauth_lan0): Driver rlm_sql_unixodbc (module rlm_sql_unixodbc) loaded and linked rlm_sql (sql_postauth_lan0): Attempting to connect to database "SATHSupport" rlm_sql (sql_postauth_lan0): Initialising connection pool rlm_sql (sql_postauth_lan0): Opening additional connection (0) rlm_sql_unixodbc: 01000 [unixODBC][Driver Manager]Can't open lib '/usr/lib/x86_64-linux-gnu/odbc/libtdsodbc.so' : *¶?±: undefined symbol: get_vtable rlm_sql_unixodbc: SQL down 08003 [unixODBC][Driver Manager]Connnection does not exist rlm_sql_unixodbc: Can't allocate the statement rlm_sql_sybase: Socket destructor called, closing socket rlm_sql (sql_postauth_lan0): Opening connection failed (0) rlm_sql (sql_postauth_lan0): Removing connection pool /usr/local/etc/raddb/mods-enabled/sql_postauth_lan0[1]: Instantiation failed for module "sql_postauth_lan0" The libtdsodbc.so file exists, and I've briefly altered the permissions to no avail. The .so file is from a package that ubuntu provides, and was working fine with FR2.2.1, just with the previous issue noted (truncation) Also, the rlm_sql_freetds module gives ,from a simple update control { SQLComputerID := "%{sql_test_mssql:Select 123456}") } Gives : LITERAL: %{sql_test_mssql:Select 123456} LITERAL: %{sql_test_mssql:Select 123456} --> %{sql_test_mssql:Select 123456} EXPANSION: %{sql_test_mssql:Select 123456} MOD: sql_test_mssql --> LITERAL: Select 123456} xlat aprint 2 xlat aprint 0 expand mod sql_test_mssql --> 'Select 123456' LITERAL: %{User-Name} LITERAL: %{User-Name} --> %{User-Name} EXPANSION: %{User-Name} Looking for attribute name in User-Name xlat aprint 3 expand attr User-Name --> '0023ae604b02' (0) expand: '%{User-Name}' -> '0023ae604b02' (0) SQL-User-Name updated rlm_sql (sql_test_mssql): Reserved connection (4) rlm_sql (sql_test_mssql): Executing query: 'Select 123456' rlm_sql_freetds sql_select_query(): unsupported rlm_sql (sql_test_mssql): Database query error '<UNKNOWN>' rlm_sql (sql_test_mssql): Released connection (4) rlm_sql (sql_test_mssql): Closing connection (0): Too many free connections (5 > 3) rlm_sql_freetds: Socket destructor called, closing socket I'm stuck, any ideas. Sorry to spam the mailing list so much but I've reached the limit of my knowledge on this one.. Thanks Andy

2 2

Working around broken EAP client
by Gordon Ross 13 Jun '13

13 Jun '13

I'm using Freeradius 2.1.10 as supplied with Ubuntu 12.04 I'm wanting to use Freeradius to authenticate 802.1x clients. However, one client I need to authenticate I believe is "broken", in that it's stripping the suffix on the inner identity. >From running freeradius -X I see: [mschap] ERROR: User-Name (68983(a)phone.cam.ac.uk) is not the same as MS-CHAP Name (68983) from EAP-MSCHAPv2 Putting the same credentials into an iPhone allows the iPhone to sign onto the network without problems. So I feel it's the client that's broken, and not my freeradius setup. I've seen some warnings that fixing the identity mis-match is a Bad Idea, but I need to get this client to work. I found a page[1] that has a similar problem, but for Windows domain prefixes being stripped. It suggests that adding: if ( User-Name =~ /^machine.*/ ) { update request { MS-CHAP-User-Name = "%{request:User-Name}" } } to the inner configuration will fix it. Is it possible to do something similar to add the suffix if it's missing ? Thanks, GTG -- Gordon Ross [1] http://www.packetfence.org/support/faqs/article/authentication-error-user-n…

3 8

RE: MSSQL using unixodbc and truncation of characters
by Franks Andy (RLZ) IT Systems Engineer 12 Jun '13

12 Jun '13

More compelling reasons to move to version 3 then. I'll try it tomorrow. Thanks for the help. Andy -----Original Message----- From: freeradius-users-bounces+andy.franks=sath.nhs.uk(a)lists.freeradius.org [mailto:freeradius-users-bounces+andy.franks=sath.nhs.uk@lists.freeradiu s.org] On Behalf Of Arran Cudbard-Bell Sent: 12 June 2013 20:19 To: FreeRadius users mailing list Subject: Re: MSSQL using unixodbc and truncation of characters On 12 Jun 2013, at 19:20, "Franks Andy $RLZ$ IT Systems Engineer" <Andy.Franks(a)sath.nhs.uk> wrote: > Just as an aside - is the rlm_sql_freetds module deprecated - it > doesn't have any config or make related stuff in the git clone I > downloaded for > 2.2 .. only one file - sql_freetds.c. I was hoping to try it and > possibly the iodbc driver as well instead of odbc, unless I'm off on > the wrong track It does in 3.0. I made sure all the modules we kept were properly integrated into the build system and built without warnings. -Arran Arran Cudbard-Bell <a.cudbardb(a)freeradius.org> FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

FW: MSSQL using unixodbc and truncation of characters
by Franks Andy (RLZ) IT Systems Engineer 12 Jun '13

12 Jun '13

Just as an aside - is the rlm_sql_freetds module deprecated - it doesn't have any config or make related stuff in the git clone I downloaded for 2.2 .. only one file - sql_freetds.c. I was hoping to try it and possibly the iodbc driver as well instead of odbc, unless I'm off on the wrong track Thanks Andy -----Original Message----- From: freeradius-users-bounces+andy.franks=sath.nhs.uk(a)lists.freeradius.org [mailto:freeradius-users-bounces+andy.franks=sath.nhs.uk@lists.freeradiu s.org] On Behalf Of Franks Andy (RLZ) IT Systems Engineer Sent: 12 June 2013 18:51 To: FreeRadius users mailing list Subject: RE: MSSQL using unixodbc and truncation of characters I'm using unixodbc and freetds with rlm_sql_unixodbc. It's odd because the built-in isql query tool reports back correctly, leading me to the potentially incorrect assumption that it was something in rlm_sql_unixobdc. I'll see if I can try v3 out tomorrow, may be fixed there. If so, I'm not sure whether it's appropriate for a production environment? Also, I haven't tried iodbc but will have a go if it's likely to fix the issue. Thanks Andy -----Original Message----- From: freeradius-users-bounces+andy.franks=sath.nhs.uk(a)lists.freeradius.org [mailto:freeradius-users-bounces+andy.franks=sath.nhs.uk@lists.freeradiu s.org] On Behalf Of Alan DeKok Sent: 12 June 2013 18:35 To: FreeRadius users mailing list Subject: Re: MSSQL using unixodbc and truncation of characters Franks Andy (RLZ) IT Systems Engineer wrote: > Hi Aaran, > 2.2.1 version. It's similar to this : > http://lists.freeradius.org/pipermail/freeradius-users/2009-May/038010 > .h > tml > same truncation to 4 digits, but that may be a coincidence. > Any ideas? It's likely the same issue. My suspicion is that there's something wrong with the underlying SQL driver. Which one are you using? rlm_sql_iodbc? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

JFYI, a start on DDDS support
by Brian Julin 12 Jun '13

12 Jun '13

I started working on DDDS support a while back and the code is to the point where I can swallow my pride enough to let other people see it. It is far from completely debugged/tested, and it is just the analogue to "rlm_realm" for DDDS -- it does nothing but create some attributes and will be moot without corresponding lb/pool handling code in the core, and that second part is an endeavor in and of itself, especially given connection affinity challenges surrounding tunneled EAP conversations. This is just an FYI in case anyone would like to read through it, offer suggestions, or just keep track. Best place to start is probably the manpage: https://github.com/skids/freeradius-server/blob/ddds/man/man5/rlm_ddds.5

1 0

RE: MSSQL using unixodbc and truncation of characters
by Franks Andy (RLZ) IT Systems Engineer 12 Jun '13

12 Jun '13

I'm using unixodbc and freetds with rlm_sql_unixodbc. It's odd because the built-in isql query tool reports back correctly, leading me to the potentially incorrect assumption that it was something in rlm_sql_unixobdc. I'll see if I can try v3 out tomorrow, may be fixed there. If so, I'm not sure whether it's appropriate for a production environment? Also, I haven't tried iodbc but will have a go if it's likely to fix the issue. Thanks Andy -----Original Message----- From: freeradius-users-bounces+andy.franks=sath.nhs.uk(a)lists.freeradius.org [mailto:freeradius-users-bounces+andy.franks=sath.nhs.uk@lists.freeradiu s.org] On Behalf Of Alan DeKok Sent: 12 June 2013 18:35 To: FreeRadius users mailing list Subject: Re: MSSQL using unixodbc and truncation of characters Franks Andy (RLZ) IT Systems Engineer wrote: > Hi Aaran, > 2.2.1 version. It's similar to this : > http://lists.freeradius.org/pipermail/freeradius-users/2009-May/038010 > .h > tml > same truncation to 4 digits, but that may be a coincidence. > Any ideas? It's likely the same issue. My suspicion is that there's something wrong with the underlying SQL driver. Which one are you using? rlm_sql_iodbc? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0