- Freeradius-Users - lists.freeradius.org

R: freeradius-1.1.6 - mysql failover issue - bus error -
by Francesco Cristofori 03 Jul '07

03 Jul '07

Hi all, further investigations show that it's a name resolution problem (if I put IP addresses in mysql1.conf and mysql2.conf everything works fine). So it doesn't seem to be a FR problem. Regards, Francesco Cristofori. > -----Messaggio originale----- > Da: > freeradius-users-bounces+f.cristofori=satcom.it(a)lists.freeradius.org > [mailto:freeradius-users-bounces+f.cristofori=satcom.it@lists. > freeradius > .org]Per conto di Francesco Cristofori > Inviato: martedì 3 luglio 2007 9.54 > A: freeradius-users(a)lists.freeradius.org > Oggetto: freeradius-1.1.6 - mysql failover issue - bus error - > > > Hi all, > I'm setting up module fail-over for mysql backend following > the guide from the wiki, but something goes wrong. > I included two sql.conf (mysql1.conf and mysql2.conf) in the > "modules" section and radiusd -X reports the two files are > included, but I only see the parameters from the first file > get loaded and everything stops with "bus error" when trying > to connect to the server. > > I checked name resolution, mysql user/password, network > reachability and everything it's ok. > I also set a tcpdump session on mysql1 but no packets for > mysql are coming in. > Then I straced radiusd execution and I noticed it fails after > reading /etc/hosts (?!?). > > Here's the relevant output from radiusd -X: > > Module: Loaded SQL > sql: driver = "rlm_sql_mysql" > sql: server = "mysql1.satcom.it" > sql: port = "3306" > sql: login = "radius" > sql: password = "radius" > sql: radius_db = "radius" > sql: nas_table = "nas" > sql: sqltrace = no > sql: sqltracefile = "/var/log/freeradius/sqltrace.sql" > sql: readclients = no > sql: deletestalesessions = yes > sql: num_sql_socks = 100 > sql: sql_user_name = "%{User-Name}" > sql: default_user_profile = "" > sql: query_on_not_found = no > sql: authorize_check_query = "SELECT > id,UserName,Attribute,Value,op FROM radcheck WHERE Username = > '%{SQL-User-Name}' ORDER BY id" > sql: authorize_reply_query = "SELECT > id,UserName,Attribute,Value,op FROM radreply WHERE Username = > '%{SQL-User-Name}' ORDER BY id" > sql: authorize_group_check_query = "SELECT > radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribu > te,radgroupcheck.Value,radgroupcheck.op FROM > radgroupcheck,usergroup WHERE usergroup.Username = > '%{SQL-User-Name}' AND usergroup.GroupName = > radgroupcheck.GroupName ORDER BY radgroupcheck.id" > sql: authorize_group_reply_query = "SELECT > radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribu > te,radgroupreply.Value,radgroupreply.op FROM > radgroupreply,usergroup WHERE usergroup.Username = > '%{SQL-User-Name}' AND usergroup.GroupName = > radgroupreply.GroupName ORDER BY radgroupreply.id" > sql: accounting_onoff_query = "UPDATE radacct SET > AcctStopTime='%S', AcctSessionTime=unix_timestamp('%S') - > unix_timestamp(AcctStartTime), > AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay = > '%{Acct-Delay-Time}' WHERE AcctSessionTime=0 AND > AcctStopTime=0 AND NASIPAddress= '%{NAS-IP-Address}' AND > AcctStartTime <= '%S'" > sql: accounting_update_query = "UPDATE radacct ? SET > FramedIPAddress = '%{Framed-IP-Address}', ? AcctSessionTime = > '%{Acct-Session-Time}', ? AcctInputOctets = > '%{Acct-Input-Octets}', ? AcctOutputOctets = > '%{Acct-Output-Octets}' ? WHERE AcctSessionId = > '%{Acct-Session-Id}' ? AND UserName = '%{SQL-User-Name}' ? > AND NASIPAddress= '%{NAS-IP-Address}'" > sql: accounting_update_query_alt = "INSERT into radacct > (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, > NASPortId, NASPortType, AcctStartTime, AcctSessionTime, > AcctAuthentic, ConnectInfo_start, AcctInputOctets, > AcctOutputOctets, CalledStationId, CallingStationId, > ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay) > values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', > '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', > '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S',INTERVAL > (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), > '%{Acct-Session-Time}', '%{Acct-Authentic}', '', > '%{Acct-Input-Octets}', '%{Acct-Output-Octets}', > '%{Called-Station-Id}', '%{Calling-Station-Id}', > '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0')" > sql: accounting_start_query = "INSERT into radacct > (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, > NASPortId, NASPortType, AcctStartTime, AcctStopTime, > AcctSessionTime, AcctAuthentic, ConnectInfo_start, > ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, > CalledStationId, CallingStationId, AcctTerminateCause, > ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, > AcctStopDelay) values('%{Acct-Session-Id}', > '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', > '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', > '0', '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', > '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', > '%{Service-Type}', '%{Framed-Protocol}', > '%{Framed-IP-Address}', '%{Acct-Delay-Time}', '0')" > sql: accounting_start_query_alt = "UPDATE radacct SET > AcctStartTime = '%S', AcctStartDelay = '%{Acct-Delay-Time}', > ConnectInfo_start = '%{Connect-Info}' WHERE AcctSessionId = > '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND > NASIPAddress = '%{NAS-IP-Address}'" > sql: accounting_stop_query = "UPDATE radacct SET > AcctStopTime = '%S', AcctSessionTime = > '%{Acct-Session-Time}', AcctInputOctets = > '%{Acct-Input-Octets}', AcctOutputOctets = > '%{Acct-Output-Octets}', AcctTerminateCause = > '%{Acct-Terminate-Cause}', AcctStopDelay = > '%{Acct-Delay-Time}', ConnectInfo_stop = '%{Connect-Info}' > WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = > '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" > sql: accounting_stop_query_alt = "INSERT into radacct > (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, > NASPortId, NASPortType, AcctStartTime, AcctStopTime, > AcctSessionTime, AcctAuthentic, ConnectInfo_start, > ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, > CalledStationId, CallingStationId, AcctTerminateCause, > ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, > AcctStopDelay) values('%{Acct-Session-Id}', > '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', > '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', > DATE_SUB('%S', INTERVAL (%{Acct-Session-Time:-0} + > %{Acct-Delay-Time:-0}) SECOND), '%S', '%{Acct-Session-Time}', > '%{Acct-Authentic}', '', '%{Connect-Info}', > '%{Acct-Input-Octets}', '%{Acct-Output-Octets}', > '%{Called-Station-Id}', '%{Calling-Station-Id}', > '%{Acct-Terminate-Cause}', '%{Service-Type}', > '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', > '%{Acct-Delay-Time}')" > sql: group_membership_query = "SELECT GroupName FROM > usergroup WHERE UserName='%{SQL-User-Name}'" > sql: connect_failure_retry_delay = 60 > sql: simul_count_query = "" > sql: simul_verify_query = "SELECT RadAcctId, AcctSessionId, > UserName, NASIPAddress, NASPortId, FramedIPAddress, > CallingStationId, FramedProtocol FROM radacct WHERE > UserName='%{SQL-User-Name}' AND AcctStopTime = 0" > sql: postauth_query = "INSERT into radpostauth (id, user, > pass, reply, date) values ('', '%{User-Name}', > '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', NOW())" > sql: safe-characters = > "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567 > 89.-_: /" > rlm_sql (mysql1): Driver rlm_sql_mysql (module rlm_sql_mysql) > loaded and linked > rlm_sql (mysql1): Attempting to connect to > radius@mysql1.satcom.it:3306/radius > rlm_sql (mysql1): starting 0 > rlm_sql (mysql1): Attempting to connect rlm_sql_mysql #0 > rlm_sql_mysql: Starting connect to MySQL server for #0 > Bus error > > > Here's the relevant output from strace radiusd -X : > > write(1, "rlm_sql (mysql1): starting 0\n", 29rlm_sql > (mysql1): starting 0 > ) = 29 > time(NULL) = 1183449009 > time(NULL) = 1183449009 > write(1, "rlm_sql (mysql1): Attempting to "..., 57rlm_sql > (mysql1): Attempting to connect rlm_sql_mysql #0 > ) = 57 > time(NULL) = 1183449009 > write(1, "rlm_sql_mysql: Starting connect "..., > 55rlm_sql_mysql: Starting connect to MySQL server for #0 > ) = 55 > open("/etc/services", O_RDONLY) = 5 > fcntl64(5, F_GETFD) = 0 > fcntl64(5, F_SETFD, FD_CLOEXEC) = 0 > fstat64(5, {st_mode=S_IFREG|0644, st_size=18274, ...}) = 0 > mmap(NULL, 8192, PROT_READ|PROT_WRITE, > MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xf7a6a000 > read(5, "# Network services, Internet sty"..., 8192) = 8192 > read(5, "otus Note\nlotusnote\t1352/udp\tlot"..., 8192) = 8192 > close(5) = 0 > munmap(0xf7a6a000, 8192) = 0 > rt_sigaction(SIGPIPE, {SIG_IGN}, {SIG_DFL}, 0xf7b188f8, > 4294967295) = 0 > stat64("/etc/mysql/my.cnf", {st_mode=S_IFREG|0644, > st_size=3636, ...}) = 0 > open("/etc/mysql/my.cnf", O_RDONLY|O_LARGEFILE) = 5 > fstat64(5, {st_mode=S_IFREG|0644, st_size=3636, ...}) = 0 > mmap(NULL, 8192, PROT_READ|PROT_WRITE, > MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xf7a6a000 > read(5, "#\n# The MySQL database server co"..., 8192) = 3636 > open("/etc/mysql/conf.d/", > O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY|0x4) = 6 > fstat64(6, {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 > fcntl64(6, F_SETFD, FD_CLOEXEC) = 0 > getdents64(6, /* 2 entries */, 8192) = 48 > getdents64(6, /* 0 entries */, 8192) = 0 > close(6) = 0 > read(5, "", 8192) = 0 > close(5) = 0 > munmap(0xf7a6a000, 8192) = 0 > stat64("/root/.my.cnf", 0xffc8c908) = -1 ENOENT (No such > file or directory) > stat64("/usr/etc/my.cnf", 0xffc8c908) = -1 ENOENT (No such > file or directory) > socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 5 > fcntl64(5, F_SETFL, O_RDONLY) = 0 > fcntl64(5, F_GETFL) = 0x2 (flags O_RDWR) > open("/etc/hosts", O_RDONLY) = 6 > fcntl64(6, F_GETFD) = 0 > fcntl64(6, F_SETFD, FD_CLOEXEC) = 0 > fstat64(6, {st_mode=S_IFREG|0644, st_size=392, ...}) = 0 > mmap(NULL, 8192, PROT_READ|PROT_WRITE, > MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xf7a6a000 > read(6, "127.0.0.1\tlocalhost\n10.3.0.170\tr"..., 8192) = 392 > --- SIGBUS (Bus error) @ 0 (0) --- > +++ killed by SIGBUS +++ > > > Any hints? > > Thanks in advance, > Francesco Cristofori. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

freeradius-1.1.6 - mysql failover issue - bus error -
by Francesco Cristofori 03 Jul '07

03 Jul '07

Hi all, I'm setting up module fail-over for mysql backend following the guide from the wiki, but something goes wrong. I included two sql.conf (mysql1.conf and mysql2.conf) in the "modules" section and radiusd -X reports the two files are included, but I only see the parameters from the first file get loaded and everything stops with "bus error" when trying to connect to the server. I checked name resolution, mysql user/password, network reachability and everything it's ok. I also set a tcpdump session on mysql1 but no packets for mysql are coming in. Then I straced radiusd execution and I noticed it fails after reading /etc/hosts (?!?). Here's the relevant output from radiusd -X: Module: Loaded SQL sql: driver = "rlm_sql_mysql" sql: server = "mysql1.satcom.it" sql: port = "3306" sql: login = "radius" sql: password = "radius" sql: radius_db = "radius" sql: nas_table = "nas" sql: sqltrace = no sql: sqltracefile = "/var/log/freeradius/sqltrace.sql" sql: readclients = no sql: deletestalesessions = yes sql: num_sql_socks = 100 sql: sql_user_name = "%{User-Name}" sql: default_user_profile = "" sql: query_on_not_found = no sql: authorize_check_query = "SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_reply_query = "SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_group_check_query = "SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id" sql: authorize_group_reply_query = "SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id" sql: accounting_onoff_query = "UPDATE radacct SET AcctStopTime='%S', AcctSessionTime=unix_timestamp('%S') - unix_timestamp(AcctStartTime), AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time}' WHERE AcctSessionTime=0 AND AcctStopTime=0 AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStartTime <= '%S'" sql: accounting_update_query = "UPDATE radacct ? SET FramedIPAddress = '%{Framed-IP-Address}', ? AcctSessionTime = '%{Acct-Session-Time}', ? AcctInputOctets = '%{Acct-Input-Octets}', ? AcctOutputOctets = '%{Acct-Output-Octets}' ? WHERE AcctSessionId = '%{Acct-Session-Id}' ? AND UserName = '%{SQL-User-Name}' ? AND NASIPAddress= '%{NAS-IP-Address}'" sql: accounting_update_query_alt = "INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay) values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S',INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Acct-Input-Octets}', '%{Acct-Output-Octets}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0')" sql: accounting_start_query = "INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', '0', '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{Acct-Delay-Time}', '0')" sql: accounting_start_query_alt = "UPDATE radacct SET AcctStartTime = '%S', AcctStartDelay = '%{Acct-Delay-Time}', ConnectInfo_start = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_stop_query = "UPDATE radacct SET AcctStopTime = '%S', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Octets}', AcctOutputOctets = '%{Acct-Output-Octets}', AcctTerminateCause = '%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time}', ConnectInfo_stop = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_stop_query_alt = "INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%S', '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Connect-Info}', '%{Acct-Input-Octets}', '%{Acct-Output-Octets}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{Acct-Delay-Time}')" sql: group_membership_query = "SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}'" sql: connect_failure_retry_delay = 60 sql: simul_count_query = "" sql: simul_verify_query = "SELECT RadAcctId, AcctSessionId, UserName, NASIPAddress, NASPortId, FramedIPAddress, CallingStationId, FramedProtocol FROM radacct WHERE UserName='%{SQL-User-Name}' AND AcctStopTime = 0" sql: postauth_query = "INSERT into radpostauth (id, user, pass, reply, date) values ('', '%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', NOW())" sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" rlm_sql (mysql1): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (mysql1): Attempting to connect to radius@mysql1.satcom.it:3306/radius rlm_sql (mysql1): starting 0 rlm_sql (mysql1): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 Bus error Here's the relevant output from strace radiusd -X : write(1, "rlm_sql (mysql1): starting 0\n", 29rlm_sql (mysql1): starting 0 ) = 29 time(NULL) = 1183449009 time(NULL) = 1183449009 write(1, "rlm_sql (mysql1): Attempting to "..., 57rlm_sql (mysql1): Attempting to connect rlm_sql_mysql #0 ) = 57 time(NULL) = 1183449009 write(1, "rlm_sql_mysql: Starting connect "..., 55rlm_sql_mysql: Starting connect to MySQL server for #0 ) = 55 open("/etc/services", O_RDONLY) = 5 fcntl64(5, F_GETFD) = 0 fcntl64(5, F_SETFD, FD_CLOEXEC) = 0 fstat64(5, {st_mode=S_IFREG|0644, st_size=18274, ...}) = 0 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xf7a6a000 read(5, "# Network services, Internet sty"..., 8192) = 8192 read(5, "otus Note\nlotusnote\t1352/udp\tlot"..., 8192) = 8192 close(5) = 0 munmap(0xf7a6a000, 8192) = 0 rt_sigaction(SIGPIPE, {SIG_IGN}, {SIG_DFL}, 0xf7b188f8, 4294967295) = 0 stat64("/etc/mysql/my.cnf", {st_mode=S_IFREG|0644, st_size=3636, ...}) = 0 open("/etc/mysql/my.cnf", O_RDONLY|O_LARGEFILE) = 5 fstat64(5, {st_mode=S_IFREG|0644, st_size=3636, ...}) = 0 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xf7a6a000 read(5, "#\n# The MySQL database server co"..., 8192) = 3636 open("/etc/mysql/conf.d/", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY|0x4) = 6 fstat64(6, {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 fcntl64(6, F_SETFD, FD_CLOEXEC) = 0 getdents64(6, /* 2 entries */, 8192) = 48 getdents64(6, /* 0 entries */, 8192) = 0 close(6) = 0 read(5, "", 8192) = 0 close(5) = 0 munmap(0xf7a6a000, 8192) = 0 stat64("/root/.my.cnf", 0xffc8c908) = -1 ENOENT (No such file or directory) stat64("/usr/etc/my.cnf", 0xffc8c908) = -1 ENOENT (No such file or directory) socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 5 fcntl64(5, F_SETFL, O_RDONLY) = 0 fcntl64(5, F_GETFL) = 0x2 (flags O_RDWR) open("/etc/hosts", O_RDONLY) = 6 fcntl64(6, F_GETFD) = 0 fcntl64(6, F_SETFD, FD_CLOEXEC) = 0 fstat64(6, {st_mode=S_IFREG|0644, st_size=392, ...}) = 0 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xf7a6a000 read(6, "127.0.0.1\tlocalhost\n10.3.0.170\tr"..., 8192) = 392 --- SIGBUS (Bus error) @ 0 (0) --- +++ killed by SIGBUS +++ Any hints? Thanks in advance, Francesco Cristofori.

1 0

freeradius 1.1.6 / syslog problems
by Andreas Wetzel 03 Jul '07

03 Jul '07

Hi I installed freeRadius 1.1.6 on a FreeBSD 6.2-RELEASE system from the ports collection, and am trying to get it to log via syslog. I followed the instructions from the wiki for configuring radiusd to use syslog, but when radiusd starts, I get the following: # radiusd -f -l syslog Sun Jul 1 10:40:09 2007 : Info: Starting - reading configuration files ... radiusd: Couldn't open syslog/radius.log for logging: Permission denied (rlm_eap_tls: Loading the certificate file as a chain) radiusd: Couldn't open syslog/radius.log for logging: Permission denied (rlm_passwd: nfields: 2 keyfield 0(User-Name) listable: no) Output after that appears correctly via syslog. Have I missed something? Bug or feature? Kind regard -- Keep it icy man. I don't want to end up a corpse before my time because you were daydreaming.

3 6

SQL IP Pool maximum timeout.
by Dave 02 Jul '07

02 Jul '07

I use the sqlippool setup for handling IP pools, and it works well, except I want to rid of the expiry time, (maximum timeout=0). right now its setting for 24 hours, and then it cleans itself out, and then freeradius starts handing out already assigned/used IP addresses. Im not sure where to put the maximum timeout=0 value when using sqlippool.

1 0

User-Password, Cleartext-Password, Crypt-Password and others (2.0.0-pre1)
by Pshem Kowalczyk 02 Jul '07

02 Jul '07

Hi, I have a question regarding the usage of various flavours of passwords with PAP module. When I run the server in debugging mode it complains: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!! Replacing User-Password in config items with Cleartext-Password. !!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!! Please update your configuration so that the "known good" !!! !!! clear text password is in Cleartext-Password, and not in User-Password. !!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! (password (User-Password) is pulled out from the database using rlm_sql ). If I change the attribute to Cleartext-Password PAP can't find the 'known good' and reject the user. Is that suppose to work with rlm_perl? I've noticed the same problems with CHAP module. Again - is that supposed to work with new password attributes naming convention or should I stick with 'User-Password' for now? kind regards Pshem

2 1

Re: Using two tables (postgreSql) to validate users
by Daniel Bojczuk 02 Jul '07

02 Jul '07

Let me see if I understood. Shold I stop using the rlm_slq and start using rlm_perl with my own authentication script (using the freeradius' variables and functions, I read something about it)?? Thanks Daniel 2007/7/2, Krzysztof Olêdzki <krzysztof.oledzki(a)axelspringer.pl>: On 2007-06-30 17:24, Daniel Bojczuk wrote: > Hi again... > > I have a doubt: Is it possible to use two tables to check the users? I > need to do something like this... Freeradius checks if the user is valid > on the table 1, if it returns true the user is validated, but if the > return is false, freeradius checks the table 2, trying to validate the > user once again. > > Is it possible? Yes, for example with rlm_perl. Best reagards, Krzysztof Oledzki - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

RE: Freeradius and MySQL problem!!!
by Ackbar Joolia 02 Jul '07

02 Jul '07

Obvious silly mistake...previous install was in /etc/raddb....thanks Ivan...knew I was doing something silly -----Original Message----- From: freeradius-users-bounces+ackbar.joolia=bglobalplc.com(a)lists.freeradius.o rg [mailto:freeradius-users-bounces+ackbar.joolia=bglobalplc.com@lists.free radius.org] On Behalf Of Alan DeKok Sent: 02 July 2007 17:13 To: FreeRadius users mailing list Subject: Re: Freeradius and MySQL problem!!! Ackbar Joolia wrote: > Ivan, > I've given all permissions to sql.conf....nothing...it's still the same. Its strange, this used to work well before for the previous version of freeradius. Seems simple, yet!!! > > Any other advice? Is the server reading the file you are editing? ... >>> reread_config: reading radiusd.conf >>> Config: including file: /usr/local/etc/raddb/proxy.conf Maybe the file you're editing is in /etc/raddb/radiusd.conf ? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html *** Email COnfidentiality Notice *** This message is private and confidential.If you have received this in error, please notify us and remove it from your system. Contact info(a)bglobalmetering.com

1 0

RE: Freeradius and MySQL problem!!!
by Ackbar Joolia 02 Jul '07

02 Jul '07

Ivan, I've given all permissions to sql.conf....nothing...it's still the same. Its strange, this used to work well before for the previous version of freeradius. Seems simple, yet!!! Any other advice? -----Original Message----- From: freeradius-users-bounces+ackbar.joolia=bglobalplc.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+ackbar.joolia=bglobalplc.com@lists.freeradius.org] On Behalf Of tnt(a)kalik.co.yu Sent: 02 July 2007 15:50 To: FreeRadius users mailing list Subject: RE: Freeradius and MySQL problem!!! It's not reading sql.conf. Check permissions on that file. Ivan Kalik Kalik Informatika ISP Dana 2/7/2007, "Ackbar Joolia" <ackbar.joolia(a)bglobalplc.com> piše: >HI Ivan >The sql in authorize and accounting are all uncommented. > > >-----Original Message----- >From: freeradius-users-bounces+ackbar.joolia=bglobalplc.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+ackbar.joolia=bglobalplc.com@lists.freeradius.org] On Behalf Of tnt(a)kalik.co.yu >Sent: 02 July 2007 14:16 >To: FreeRadius users mailing list >Subject: RE: Freeradius and MySQL problem!!! > >Have you included sql in your radiusd.conf or are sql entries still >commented out? > >Ivan Kalik >Kalik Informatika ISP > > >Dana 2/7/2007, "Ackbar Joolia" <ackbar.joolia(a)bglobalplc.com> piše: > >>Here it is: >>Starting - reading configuration files ... >>reread_config: reading radiusd.conf >>Config: including file: /usr/local/etc/raddb/proxy.conf >>Config: including file: /usr/local/etc/raddb/clients.conf >>Config: including file: /usr/local/etc/raddb/snmp.conf >>Config: including file: /usr/local/etc/raddb/eap.conf >>Config: including file: /usr/local/etc/raddb/sql.conf >> main: prefix = "/usr/local" >> main: localstatedir = "/usr/local/var" >> main: logdir = "/usr/local/var/log/radius" >> main: libdir = "/usr/local/lib" >> main: radacctdir = "/usr/local/var/log/radius/radacct" >> main: hostname_lookups = no >> main: max_request_time = 30 >> main: cleanup_delay = 5 >> main: max_requests = 1024 >> main: delete_blocked_requests = 0 >> main: port = 0 >> main: allow_core_dumps = no >> main: log_stripped_names = no >> main: log_file = "/usr/local/var/log/radius/radius.log" >> main: log_auth = no >> main: log_auth_badpass = no >> main: log_auth_goodpass = no >> main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" >> main: user = "(null)" >> main: group = "(null)" >> main: usercollide = no >> main: lower_user = "no" >> main: lower_pass = "no" >> main: nospace_user = "no" >> main: nospace_pass = "no" >> main: checkrad = "/usr/local/sbin/checkrad" >> main: proxy_requests = yes >> proxy: retry_delay = 5 >> proxy: retry_count = 3 >> proxy: synchronous = no >> proxy: default_fallback = yes >> proxy: dead_time = 120 >> proxy: post_proxy_authorize = no >> proxy: wake_all_if_all_dead = no >> security: max_attributes = 200 >> security: reject_delay = 1 >> security: status_server = no >> main: debug_level = 0 >>read_config_files: reading dictionary >>read_config_files: reading naslist >>Using deprecated naslist file. Support for this will go away soon. >>read_config_files: reading clients >>read_config_files: reading realms >>radiusd: entering modules setup >>Module: Library search path is /usr/local/lib >>Module: Loaded exec >> exec: wait = yes >> exec: program = "(null)" >> exec: input_pairs = "request" >> exec: output_pairs = "(null)" >> exec: packet_type = "(null)" >>rlm_exec: Wait=yes but no output defined. Did you mean output=none? >>Module: Instantiated exec (exec) >>Module: Loaded expr >>Module: Instantiated expr (expr) >>Module: Loaded PAP >> pap: encryption_scheme = "crypt" >> pap: auto_header = yes >>Module: Instantiated pap (pap) >>Module: Loaded CHAP >>Module: Instantiated chap (chap) >>Module: Loaded MS-CHAP >> mschap: use_mppe = yes >> mschap: require_encryption = no >> mschap: require_strong = no >> mschap: with_ntdomain_hack = no >> mschap: passwd = "(null)" >> mschap: ntlm_auth = "(null)" >>Module: Instantiated mschap (mschap) >>Module: Loaded System >> unix: cache = no >> unix: passwd = "(null)" >> unix: shadow = "(null)" >> unix: group = "(null)" >> unix: radwtmp = "/usr/local/var/log/radius/radwtmp" >> unix: usegroup = no >> unix: cache_reload = 600 >>Module: Instantiated unix (unix) >>Module: Loaded eap >> eap: default_eap_type = "md5" >> eap: timer_expire = 60 >> eap: ignore_unknown_eap_types = no >> eap: cisco_accounting_username_bug = no >>rlm_eap: Loaded and initialized type md5 >>rlm_eap: Loaded and initialized type leap >> gtc: challenge = "Password: " >> gtc: auth_type = "PAP" >>rlm_eap: Loaded and initialized type gtc >> mschapv2: with_ntdomain_hack = no >>rlm_eap: Loaded and initialized type mschapv2 >>Module: Instantiated eap (eap) >>Module: Loaded preprocess >> preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups" >> preprocess: hints = "/usr/local/etc/raddb/hints" >> preprocess: with_ascend_hack = no >> preprocess: ascend_channels_per_line = 23 >> preprocess: with_ntdomain_hack = no >> preprocess: with_specialix_jetstream_hack = no >> preprocess: with_cisco_vsa_hack = no >> preprocess: with_alvarion_vsa_hack = no >>Module: Instantiated preprocess (preprocess) >>Module: Loaded realm >> realm: format = "suffix" >> realm: delimiter = "@" >> realm: ignore_default = no >> realm: ignore_null = no >>Module: Instantiated realm (suffix) >>Module: Loaded files >> files: usersfile = "/usr/local/etc/raddb/users" >> files: acctusersfile = "/usr/local/etc/raddb/acct_users" >> files: preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" >> files: compat = "no" >>Module: Instantiated files (files) >>Module: Loaded Acct-Unique-Session-Id >> acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" >>Module: Instantiated acct_unique (acct_unique) >>Module: Loaded detail >> detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" >> detail: detailperm = 384 >> detail: dirperm = 493 >> detail: locking = no >>Module: Instantiated detail (detail) >>Module: Loaded radutmp >> radutmp: filename = "/usr/local/var/log/radius/radutmp" >> radutmp: username = "%{User-Name}" >> radutmp: case_sensitive = yes >> radutmp: check_with_nas = yes >> radutmp: perm = 384 >> radutmp: callerid = yes >>Module: Instantiated radutmp (radutmp) >>Listening on authentication *:1812 >>Listening on accounting *:1813 >> >>-----Original Message----- >>From: freeradius-users-bounces+ackbar.joolia=bglobalplc.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+ackbar.joolia=bglobalplc.com@listsfreeradius.org] On Behalf Of tnt(a)kalik.co.yu >>Sent: 02 July 2007 12:38 >>To: FreeRadius users mailing list >>Subject: Re: Freeradius and MySQL problem!!! >> >>You haven't posted your radiusd -X output. >> >>Ivan Kalik >>Kalik Informatika ISP >> >> >>Dana 2/7/2007, "Ackbar Joolia" <ackbar.joolia(a)bglobalplc.com> piše: >> >>>Dear all, >>> >>>I have been using freeradius properly configured with mysql for some >>>time now. However it suddenly stopped working. What more, I upgraded to >>>the 1.6 version, and now when I run radiusd -X, it doesn't even show >>>that its tied in with the MySQL database... >>> >>> >>>Can anyone please help me? I have done all the right things i.e. sql in >>>radius.conf, but its not tying in with the mysql database. Am I missing >>>anything obvious ??? >>> >>> >>>Thanks >>> >>>Al >>> >>> >>> >>> >>>- >>>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html >>> >>> >> >>- >>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html >> >> >>*** Email COnfidentiality Notice *** >>This message is private and confidential.If you have received this in error, please notify us and remove it from your system. Contact info(a)bglobalmetering.com >> >> >>- >>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html >> >> > >- >List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > >*** Email COnfidentiality Notice *** >This message is private and confidential.If you have received this in error, please notify us and remove it from your system. Contact info(a)bglobalmetering.com > > >- >List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html *** Email COnfidentiality Notice *** This message is private and confidential.If you have received this in error, please notify us and remove it from your system. Contact info(a)bglobalmetering.com

2 1

Re: Using two tables (postgreSql) to validate users
by Hugh Messenger 02 Jul '07

02 Jul '07

Krzysztof Ol?dzki <krzysztof.oledzki(a)axelspringer.pl> said: > On 2007-06-30 17:24, Daniel Bojczuk wrote: > > Hi again... > > > > I have a doubt: Is it possible to use two tables to check the users? I > > need to do something like this... Freeradius checks if the user is valid > > on the table 1, if it returns true the user is validated, but if the > > return is false, freeradius checks the table 2, trying to validate the > > user once again. > > > > Is it possible? > > Yes, for example with rlm_perl. Couldn't it also be done with the failover syntax, as described in doc/configurable_failover? > Best reagards, > > Krzysztof Oledzki -- hugh

1 0

RE: Freeradius and MySQL problem!!!
by Ackbar Joolia 02 Jul '07

02 Jul '07

HI Ivan The sql in authorize and accounting are all uncommented. -----Original Message----- From: freeradius-users-bounces+ackbar.joolia=bglobalplc.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+ackbar.joolia=bglobalplc.com@lists.freeradius.org] On Behalf Of tnt(a)kalik.co.yu Sent: 02 July 2007 14:16 To: FreeRadius users mailing list Subject: RE: Freeradius and MySQL problem!!! Have you included sql in your radiusd.conf or are sql entries still commented out? Ivan Kalik Kalik Informatika ISP Dana 2/7/2007, "Ackbar Joolia" <ackbar.joolia(a)bglobalplc.com> piše: >Here it is: >Starting - reading configuration files ... >reread_config: reading radiusd.conf >Config: including file: /usr/local/etc/raddb/proxy.conf >Config: including file: /usr/local/etc/raddb/clients.conf >Config: including file: /usr/local/etc/raddb/snmp.conf >Config: including file: /usr/local/etc/raddb/eap.conf >Config: including file: /usr/local/etc/raddb/sql.conf > main: prefix = "/usr/local" > main: localstatedir = "/usr/local/var" > main: logdir = "/usr/local/var/log/radius" > main: libdir = "/usr/local/lib" > main: radacctdir = "/usr/local/var/log/radius/radacct" > main: hostname_lookups = no > main: max_request_time = 30 > main: cleanup_delay = 5 > main: max_requests = 1024 > main: delete_blocked_requests = 0 > main: port = 0 > main: allow_core_dumps = no > main: log_stripped_names = no > main: log_file = "/usr/local/var/log/radius/radius.log" > main: log_auth = no > main: log_auth_badpass = no > main: log_auth_goodpass = no > main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" > main: user = "(null)" > main: group = "(null)" > main: usercollide = no > main: lower_user = "no" > main: lower_pass = "no" > main: nospace_user = "no" > main: nospace_pass = "no" > main: checkrad = "/usr/local/sbin/checkrad" > main: proxy_requests = yes > proxy: retry_delay = 5 > proxy: retry_count = 3 > proxy: synchronous = no > proxy: default_fallback = yes > proxy: dead_time = 120 > proxy: post_proxy_authorize = no > proxy: wake_all_if_all_dead = no > security: max_attributes = 200 > security: reject_delay = 1 > security: status_server = no > main: debug_level = 0 >read_config_files: reading dictionary >read_config_files: reading naslist >Using deprecated naslist file. Support for this will go away soon. >read_config_files: reading clients >read_config_files: reading realms >radiusd: entering modules setup >Module: Library search path is /usr/local/lib >Module: Loaded exec > exec: wait = yes > exec: program = "(null)" > exec: input_pairs = "request" > exec: output_pairs = "(null)" > exec: packet_type = "(null)" >rlm_exec: Wait=yes but no output defined. Did you mean output=none? >Module: Instantiated exec (exec) >Module: Loaded expr >Module: Instantiated expr (expr) >Module: Loaded PAP > pap: encryption_scheme = "crypt" > pap: auto_header = yes >Module: Instantiated pap (pap) >Module: Loaded CHAP >Module: Instantiated chap (chap) >Module: Loaded MS-CHAP > mschap: use_mppe = yes > mschap: require_encryption = no > mschap: require_strong = no > mschap: with_ntdomain_hack = no > mschap: passwd = "(null)" > mschap: ntlm_auth = "(null)" >Module: Instantiated mschap (mschap) >Module: Loaded System > unix: cache = no > unix: passwd = "(null)" > unix: shadow = "(null)" > unix: group = "(null)" > unix: radwtmp = "/usr/local/var/log/radius/radwtmp" > unix: usegroup = no > unix: cache_reload = 600 >Module: Instantiated unix (unix) >Module: Loaded eap > eap: default_eap_type = "md5" > eap: timer_expire = 60 > eap: ignore_unknown_eap_types = no > eap: cisco_accounting_username_bug = no >rlm_eap: Loaded and initialized type md5 >rlm_eap: Loaded and initialized type leap > gtc: challenge = "Password: " > gtc: auth_type = "PAP" >rlm_eap: Loaded and initialized type gtc > mschapv2: with_ntdomain_hack = no >rlm_eap: Loaded and initialized type mschapv2 >Module: Instantiated eap (eap) >Module: Loaded preprocess > preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups" > preprocess: hints = "/usr/local/etc/raddb/hints" > preprocess: with_ascend_hack = no > preprocess: ascend_channels_per_line = 23 > preprocess: with_ntdomain_hack = no > preprocess: with_specialix_jetstream_hack = no > preprocess: with_cisco_vsa_hack = no > preprocess: with_alvarion_vsa_hack = no >Module: Instantiated preprocess (preprocess) >Module: Loaded realm > realm: format = "suffix" > realm: delimiter = "@" > realm: ignore_default = no > realm: ignore_null = no >Module: Instantiated realm (suffix) >Module: Loaded files > files: usersfile = "/usr/local/etc/raddb/users" > files: acctusersfile = "/usr/local/etc/raddb/acct_users" > files: preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" > files: compat = "no" >Module: Instantiated files (files) >Module: Loaded Acct-Unique-Session-Id > acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" >Module: Instantiated acct_unique (acct_unique) >Module: Loaded detail > detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" > detail: detailperm = 384 > detail: dirperm = 493 > detail: locking = no >Module: Instantiated detail (detail) >Module: Loaded radutmp > radutmp: filename = "/usr/local/var/log/radius/radutmp" > radutmp: username = "%{User-Name}" > radutmp: case_sensitive = yes > radutmp: check_with_nas = yes > radutmp: perm = 384 > radutmp: callerid = yes >Module: Instantiated radutmp (radutmp) >Listening on authentication *:1812 >Listening on accounting *:1813 > >-----Original Message----- >From: freeradius-users-bounces+ackbar.joolia=bglobalplc.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+ackbar.joolia=bglobalplc.com@lists.freeradius.org] On Behalf Of tnt(a)kalik.co.yu >Sent: 02 July 2007 12:38 >To: FreeRadius users mailing list >Subject: Re: Freeradius and MySQL problem!!! > >You haven't posted your radiusd -X output. > >Ivan Kalik >Kalik Informatika ISP > > >Dana 2/7/2007, "Ackbar Joolia" <ackbar.joolia(a)bglobalplc.com> piše: > >>Dear all, >> >>I have been using freeradius properly configured with mysql for some >>time now. However it suddenly stopped working. What more, I upgraded to >>the 1.6 version, and now when I run radiusd -X, it doesn't even show >>that its tied in with the MySQL database... >> >> >>Can anyone please help me? I have done all the right things i.e. sql in >>radius.conf, but its not tying in with the mysql database. Am I missing >>anything obvious ??? >> >> >>Thanks >> >>Al >> >> >> >> >>- >>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html >> >> > >- >List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > >*** Email COnfidentiality Notice *** >This message is private and confidential.If you have received this in error, please notify us and remove it from your system. Contact info(a)bglobalmetering.com > > >- >List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html *** Email COnfidentiality Notice *** This message is private and confidential.If you have received this in error, please notify us and remove it from your system. Contact info(a)bglobalmetering.com

2 1