September 2026 - Freeradius-Users - lists.freeradius.org

FreeRadius 3.0.3 and Galera Cluster
by David Lake 28 Sep '26

28 Sep '26

Hi Need some design advice here please. I have two FR 3.0.3 servers and a 3-node Galera cluster for HA. I’m seeing issues with Deadlocks when under stress - mostly if there is a storm of reconnects. I’m running HAProxy on the FR nodes but there are a couple of things I don’t quite understand: 1. Should I run the ’Skip Locked’ on FreeRadius or not? Some documentation says that I shouldn’t as MariaDB doesn’t support it, but other say newer versions do support it 1. What is the optimal way of configuring HAProxy? 1. How do I separate out writes from reads - I have two sites, each with one FR server and one Galera node. There is a high-speed network between the two, but ideally, I want to keep cross-site traffic to a minimum. (I have another IP allocation question which I’ll ask in another three). Thank you David David Lake Visiting Professor 5G Innovation Centre (5GIC and 6GIC) Tel: +44 (0)7711 736784 Email: d.lake(a)surrey.ac.uk<mailto:%20d.lake@surrey.ac.uk> Web: surrey.ac.uk<http://www.surrey.ac.uk/?utm_medium=internal&utm_source=emailsignature&utm_…> [A blue text on a black background Description automatically generated]<http://www.surrey.ac.uk/?utm_source=emailsignature&utm_medium=internal&utm_…> James Clerk Maxwell Building, University of Surrey, Guildford, Surrey, GU2 7XH, UK

5 10

Status of v4
by Alan DeKok 26 Sep '26

26 Sep '26

Anyone who's been following FreeRADIUS knows that v4 is the "always tomorrow" project. One of the reasons is that for a long time RadSec was "up and coming", but actual work on it was minimal. Unfortunately, other things were higher priority. Happily, it looks like that work is coming to a close. There have been substantial commits to v4 in the last week, which move the bar forward for RadSec. We don't (yet) have a functioning RadSec in the server, but for the first time in a long while, progress is being made. With luck, we will be releasing a beta of v4 before December, which includes RadSec. Alan DeKok.

5 6

Webinar on October 29
by Alan DeKok 25 Sep '26

25 Sep '26

Hi, I'm doing a short webinar on October 29, 1pm EST. It's free, and anyone who attends will get a download link for a free tool. The registration and content page is here: https://www.inkbridgenetworks.com/videos-webinars/inkquire-tools-for-freera… The free tool won't be available immediately after the webinar, but I don't expect the delay to be too long. All of the tools are useful, even in the age of AI. There are a host of reasons to not use AI. The simplest is GPDR (or equivalent). Unless you're running a local model, using any AI system will upload private customer information to the cloud. At which point who knows where it ends up. So there's a need to run local tools. The tools don't need AI, and don't use AI. They run locally, and give you information about what FreeRADIUS is doing. Some of the tools are free, some are not. More details will be in the webinar. I hope to see everyone there. I expect the webinar to be useful to most people who are running FreeRADIUS. Alan DeKok.

1 0

Initial install for Client.
by Parks, Grady * 22 Sep '26

22 Sep '26

Hello, I am trying to complete the install of freeradius-utils-3.0.20-15.module+el8.10.0+90375+641abe33.x86_64.rpm but I need to download some additional rpms to build a repo. - nothing provides libfreeradius-dhcp.so()(64bit) needed by freeradius-utils-3.0.20-15.module+el8.10.0+90375+641abe33.x86_64 from @commandline - nothing provides libfreeradius-eap.so()(64bit) needed by freeradius-utils-3.0.20-15.module+el8.10.0+90375+641abe33.x86_64 from @commandline - nothing provides libfreeradius-radius.so()(64bit) needed by freeradius-utils-3.0.20-15.module+el8.10.0+90375+641abe33.x86_64 from @commandline - nothing provides libfreeradius-server.so()(64bit) needed by freeradius-utils-3.0.20-15.module+el8.10.0+90375+641abe33.x86_64 from @commandline - nothing provides perl(DBI) needed by freeradius-utils-3.0.20-15.module+el8.10.0+90375+641abe33.x86_64 from @commandline - nothing provides freeradius = 3.0.20-15.module+el8.10.0+90375+641abe33 needed by freeradius-utils-3.0.20-15.module+el8.10.0+90375+641abe33.x86_64 from @commandline (try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages) Can someone assist me with where I can get the missing components where I can successfully install this product? Thanks Grady D. Parks OIMT / DIO (Division of Infrastructure Operations) FDA Account, Server Operations FDA Data Center and Infrastructure Support Contractor - Peraton e-mail: grady.parks(a)fda.hhs.gov<mailto:grady.parks@fda.hhs.gov> Phone: 240-762-2227 Linux Team Lead - Dan Drummond Linux Manager - Nancy Coultas-Carol

2 1

Small report on the status of v4
by Alan DeKok 18 Sep '26

18 Sep '26

Yes, it's still ongoing. Anyone who checks the commits on GitHub will see a lot of activity. The main blocker is still RadSec. We're working on it, but are actively making progress. Unfortunately, other things keep getting in the way. One thing which is slowing down progress on RadSec in v4 is the status of RadSec in v3. Anyone who checks the commits on GitHub will see a lot of activity in the v3.2.x branch, too. There have been many fixes to odd corner cases, and more test cases added. I'd like to thank Paul Dekkers for his ongoing assistance with testing the changes. That effort makes a big difference. I'll go back now to worrying abut the ongoing AI takeover of almost everything. :( Alan DeKok.

2 2

FreeRadius 3.0.3 IP Allocation Failure
by David Lake 17 Sep '26

17 Sep '26

Hi I have FreeRadius configured to allocate v4 from sqlippool but to send a pool name to the router for v6 allocation. Occasionally, I see v4 allocation failures. Obviously I am getting to the bottom of this but in the meantime if I see a v4 allocation fail, I want to immediately send an auth-fail. At the moment, if the v4 fails, the process continues and I send the v6 pool name. The result is that the client authenticates, gets a v6 address but no v4 address. Can someone point me in the right direction of how to modify the logic to do this please? Thanks David David Lake Visiting Professor 5G Innovation Centre (5GIC and 6GIC) Tel: +44 (0)7711 736784 Email: d.lake(a)surrey.ac.uk<mailto:%20d.lake@surrey.ac.uk> Web: surrey.ac.uk<http://www.surrey.ac.uk/?utm_medium=internal&utm_source=emailsignature&utm_…> [A blue text on a black background Description automatically generated]<http://www.surrey.ac.uk/?utm_source=emailsignature&utm_medium=internal&utm_…> James Clerk Maxwell Building, University of Surrey, Guildford, Surrey, GU2 7XH, UK

2 2