- Freeradius-Users - lists.freeradius.org

[Fwd: Re: High load after restart]
by Brian Walters 27 Jun '07

27 Jun '07

On Wed, 2007-06-27 at 08:09 +0200, Alan DeKok wrote: > Brian Walters wrote: > > Has anyone noticed high processor loads after restarting freeradius > > 1.1.3 or 1.1.6? I've noticed this on Debian as well as CentOS 4.5. > > After sending it a HUP? Yes. Don't send it a HUP. I'm not sending it a HUP, I've read where that's bad. I'm using the redhat start up script and I'm using the restart option which kills the process, then starts it. Looking through the script functions it first gives freeradius a kill -TERM then a kill -KILL -- Brian

2 1

Altering the RADIUS dictionary files...
by liran tal 27 Jun '07

27 Jun '07

Hey everyone, I attempted at first to post this issue in openser's mailing list but have failed to get a reply and thus I am trying in freeradius's as I hope there are people here with similar experience. OpenSER is a SIP Proxy tool and I integrated it to send accounting records to a freeradius deployed server. To do that I had to patch a source copy of freeradius and provide both the radius server and client the appropriate dictionary files. What I would like is the ability to extend the formal SIP ATTRIBUTES with my own set. And so, I tried adding myself some custom attributes to both dictionary files, the one on the freeradius server and the other on openser's radiusclient-ng server and tried for example this: ATTRIBUTE Sip-Src-IP 900 string ATTRIBUTE Sip-Src-Port 901 string ATTRIBUTE Sip-Hdr-Contact 902 string ATTRIBUTE Sip-Hdr-UA 903 string ATTRIBUTE Sip-Hdr-From 904 string ATTRIBUTE Sip-Hdr-Media 905 string But this fails to work, openser/radiusclient-ng is sending accounting records still but specifically without the above attributes even when they are defined in both server and client's dictionary.sip files. My question is why, and how is it possible to do that? And the second question, is there a more extensive dictionary.sip file? Thanks, Liri.

3 4

Spliting National & International
by Liam Farr 27 Jun '07

27 Jun '07

Hi, Is there an easy way to separate accounting for national and international traffic with freeradius? (National traffic is charged at a lower rate per GB than international). Any suggestions would be appreciated. Cheers Liam

3 8

RE: Banning users in a nice way...
by Josh Howlett 27 Jun '07

27 Jun '07

> Has anyone got any ideas ? > > I'm assuming theres no way to do it.. Not that I can think of. You shouldn't be able to coax a supplicant onto a network by munging authentication (this is a *good* thing). josh.

1 0

FreeRadius Certificate Problem
by Dead6re 27 Jun '07

27 Jun '07

Hello all, Iam havea huge problem using CA.all to generate the certificates needed for FreeRadius. I am currently using Fedora and my OpenSSL version is: 0.9.8b and has recently been updated. Using configuration from /usr/local/ssl/openssl.cnf ./demoCA/serial: No such file or directory error while loading serial number 17811:error:02001002:system library:fopen:No such file or directory:bss_file.c:352:fopen('./demoCA/serial','r') 17811:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:354: + openssl pkcs12 -export -in newcert.pem -inkey newreq.pem -out cert-srv.p12 -clcerts -passin pass:<my pass> -passout pass:<my pass> No certificate matches private key + openssl pkcs12 -in cert-srv.p12 -out cert-srv.pem -passin pass:<my pass> -passout pass:<my pass> 17813:error:0D07207B:asn1 encoding routines:ASN1_get_object:header too long:asn1_lib.c:150: + openssl x509 -inform PEM -outform DER -in cert-srv.pem -out cert-srv.der unable to load certificate 17814:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:647:Expecting: TRUSTED CERTIFICATE How do I fix this error? Thanks, Dead6re -- View this message in context: http://www.nabble.com/FreeRadius-Certificate-Problem-tf3981133.html#a113018… Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 2

radclient with -S option
by Diana Robert 27 Jun '07

27 Jun '07

hi, if we are going to use -S option in radclient, wat should be the format of that shared secret file. thanks --------------------------------- Once upon a time there was 1 GB storage on Yahoo! Mail. Click here for happy ending!

1 0

2.0.0-pre sqlippool
by Hugh Messenger 27 Jun '07

27 Jun '07

I'm slowly getting there with my 2.0.0 install. Couple of sqlippool questions: 1) The sqlippool.conf file has this at the end: ## Uncomment the appropriate config file for your SQL dialect # $INCLUDE ${confdir}/sql/mysql-dialup.conf $INCLUDE ${confdir}/sql/postgresql-ippool-dialup.conf I'm pretty sure the mysql-dialup.conf should be mysql-ippool-dialup.conf, so MySQL users would have: $INCLUDE ${confdir}/sql/mysql-ippool-dialup.conf # $INCLUDE ${confdir}/sql/postgresql-ippool-dialup.conf 2) Where can I find the sqlippool schema in 2.0.0? I can't even find it in my 1.1.6 install. I remember having to search for it, but I've completely blanked on where I found it. Obviously I could export the schema from the 1.1.6 mysql db, but I'd like to be sure there haven't been any schema changes between 1.1.6 and 2.0.0. -- hugh

2 1

Re: 2.0.0 documentation for radiusd.conf
by Hugh Messenger 27 Jun '07

27 Jun '07

Alan Dekok <aland(a)deployingradius.com> said: > Hugh Messenger wrote: > > Any luck fixing this stuff: > > > > DEFAULT Called-Station-Id =~ "^([A-z0-9]+_[0-9]+)$", Pool-Name := `%{0}` > > Framed-IP-Netmask = 255.255.0.0, > > Fall-Through = 1 > > > > ... in either users or hints? > > Don't use "users" or "hints". Use the new unlanguage. [snip] > authorize { > ... > if (Called-Station-Id =~ /^([A-z0-9]+_[0-9]+)$/) { > update config { > Pool-Name := "%{0}" > } > update reply { > Framed-IP-Netmask = 255.255.0.0 > } > } > .... > } > > Much easier to understand, I think. And better yet, it works. :0 One small fix though, it needs the "%{}" around Called-Station-Id ... If ("%{Called-Station-Id}" =~ /^([A-z0-9]+_[0-9]+)$/) { > Alan DeKok. I like this new unlang. -- hugh

2 1

High load after restart
by Brian Walters 27 Jun '07

27 Jun '07

Has anyone noticed high processor loads after restarting freeradius 1.1.3 or 1.1.6? I've noticed this on Debian as well as CentOS 4.5. When I say high loads I'm talking about something like this: load average: 242.56, 121.83, 52.65 This is on Dell dual processor box with 2G of ram. I can send configs and such. I've also noticed these entries in the logs Tue Jun 26 11:36:14 2007 : Info: The maximum number of threads (254) are active, cannot spawn new thread to handle request Tue Jun 26 11:36:14 2007 : Info: The maximum number of threads (254) are active, cannot spawn new thread to handle request Tue Jun 26 11:36:14 2007 : Info: The maximum number of threads (254) are active, cannot spawn new thread to handle request -- Brian

2 1

kill radiusd
by suganthi velusamy 27 Jun '07

27 Jun '07

Hi... how to kill radiusd? Thanks... --------------------------------- Download prohibited? No problem. CHAT from any browser, without download.

2 1