September 2026 - Freeradius-Users - lists.freeradius.org

Small report on the status of v4
by Alan DeKok 18 Sep '26

18 Sep '26

Yes, it's still ongoing. Anyone who checks the commits on GitHub will see a lot of activity. The main blocker is still RadSec. We're working on it, but are actively making progress. Unfortunately, other things keep getting in the way. One thing which is slowing down progress on RadSec in v4 is the status of RadSec in v3. Anyone who checks the commits on GitHub will see a lot of activity in the v3.2.x branch, too. There have been many fixes to odd corner cases, and more test cases added. I'd like to thank Paul Dekkers for his ongoing assistance with testing the changes. That effort makes a big difference. I'll go back now to worrying abut the ongoing AI takeover of almost everything. :( Alan DeKok.

2 2

FreeRadius 3.0.3 and Galera Cluster
by David Lake 18 Sep '26

18 Sep '26

Hi Need some design advice here please. I have two FR 3.0.3 servers and a 3-node Galera cluster for HA. I’m seeing issues with Deadlocks when under stress - mostly if there is a storm of reconnects. I’m running HAProxy on the FR nodes but there are a couple of things I don’t quite understand: 1. Should I run the ’Skip Locked’ on FreeRadius or not? Some documentation says that I shouldn’t as MariaDB doesn’t support it, but other say newer versions do support it 1. What is the optimal way of configuring HAProxy? 1. How do I separate out writes from reads - I have two sites, each with one FR server and one Galera node. There is a high-speed network between the two, but ideally, I want to keep cross-site traffic to a minimum. (I have another IP allocation question which I’ll ask in another three). Thank you David David Lake Visiting Professor 5G Innovation Centre (5GIC and 6GIC) Tel: +44 (0)7711 736784 Email: d.lake(a)surrey.ac.uk<mailto:%20d.lake@surrey.ac.uk> Web: surrey.ac.uk<http://www.surrey.ac.uk/?utm_medium=internal&utm_source=emailsignature&utm_…> [A blue text on a black background Description automatically generated]<http://www.surrey.ac.uk/?utm_source=emailsignature&utm_medium=internal&utm_…> James Clerk Maxwell Building, University of Surrey, Guildford, Surrey, GU2 7XH, UK

4 4

FreeRadius 3.0.3 IP Allocation Failure
by David Lake 17 Sep '26

17 Sep '26

Hi I have FreeRadius configured to allocate v4 from sqlippool but to send a pool name to the router for v6 allocation. Occasionally, I see v4 allocation failures. Obviously I am getting to the bottom of this but in the meantime if I see a v4 allocation fail, I want to immediately send an auth-fail. At the moment, if the v4 fails, the process continues and I send the v6 pool name. The result is that the client authenticates, gets a v6 address but no v4 address. Can someone point me in the right direction of how to modify the logic to do this please? Thanks David David Lake Visiting Professor 5G Innovation Centre (5GIC and 6GIC) Tel: +44 (0)7711 736784 Email: d.lake(a)surrey.ac.uk<mailto:%20d.lake@surrey.ac.uk> Web: surrey.ac.uk<http://www.surrey.ac.uk/?utm_medium=internal&utm_source=emailsignature&utm_…> [A blue text on a black background Description automatically generated]<http://www.surrey.ac.uk/?utm_source=emailsignature&utm_medium=internal&utm_…> James Clerk Maxwell Building, University of Surrey, Guildford, Surrey, GU2 7XH, UK

2 2