- Freeradius-Users - lists.freeradius.org

Error 2FA - AD password and external OTP via RADIUS proxy
by Клеусов Владимир Сергеевич 11 Mar '20

11 Mar '20

Hi I configure at https://wiki.freeradius.org/guide/2FA-Active-Directory-plus-Proxy But there was an error /etc/freeradius/3.0/sites-enabled/proxy[2]: Invalid location for 'if' Any ideas FreeRADIUS Version 3.0.1

4 5

DHCP configuration using freeradius
by kabin mool 10 Mar '20

10 Mar '20

Hi, Recently, I started using freeradius for my home WiFi and i wanted to configuration freeradius to provide DHCP service. Can any one help me on this. kabin

3 11

Freeradius with google authenticator gives error - No "known good" password found for the use
by prasanna 10 Mar '20

10 Mar '20

Hi, I am new to freeradius and after going through docs and user faq I was not able to solve this issue after multiple checks in my config. freeradius version is 3.0.13 I am using Linux ( from Amazon AWS HVM2 64 bit ) and using the EC2 box My VPC CIDR range (or client machines are ) : 10.0.0.0/16 I used the scripts below to install yum install -y freeradius freeradius-utils google-authenticator sssd httpd sed -i.bak -e 's/user = radiusd/user = root/' -e 's/group = radiusd/group = root/' /etc/raddb/radiusd.conf sed -i.bak -e "s/^#\tpam/\tpam/" /etc/raddb/sites-available/default yum install https:// dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm -y yum install google-authenticator -y Configurations made were as following I have modified /etc/raddb/clients.config to accept ip ranges from my CIDR client vpc_clients { ipaddr = 10.0.0.0/16 secret = testing12345 } Enabled PAM in file/etc/sites-available/default by removing the '#' pam comment Enabled PAM as default authentication type in /etc/raddb/users by removing comment on DEFAULT Group and adding DEFAULT Auth-Type := PAM line DEFAULT Group == "disabled", Auth-Type := Reject Reply-Message = "Your account has been disabled." DEFAULT Auth-Type := PAM Also changed the /etc/pam.d/radiusd for PAM integration auth requisite pam_google_authenticator.so account required pam_permit.so session required pam_permit.so Enabled PAM module ln -s /etc/raddb/mods-available/pam /etc/raddb/mods-enabled/pam The test was ok (Accept-request) when a local user like 'bob' was added to raduser file without PAM. So as next step I added testuser for google-autheticator as below sudo useradd -g radius-users testuser sudo -u testuser google-authenticator I tried the command radtest testuser <PIN from googleauthenticator> 10.0.24.144:1812 10 testing12345 I get following error No "known good" password found for the use. I rechecked the configs and authenticator PAM is enabled but the failure happens earlier. Please let me know how I could move ahead or where I should check next ? Debug Message : 2) Received Access-Request Id 4 from 10.0.24.144:60632 to 10.0.0.209:1812 length 72 (2) NAS-IP-Address = 10.0.24.144 (2) User-Name = "testuser" (2) User-Password = "81625808" (2) Message-Authenticator = 0xa15c37032939718e521cb83a03b31e74 (2) # Executing section authorize from file /etc/raddb/sites-enabled/default (2) authorize { (2) policy filter_username { (2) if (&User-Name) { (2) if (&User-Name) -> TRUE (2) if (&User-Name) { (2) if (&User-Name =~ / /) { (2) if (&User-Name =~ / /) -> FALSE (2) if (&User-Name =~ /@[^@]*@/ ) { (2) if (&User-Name =~ /@[^@]*@/ ) -> FALSE (2) if (&User-Name =~ /\.\./ ) { (2) if (&User-Name =~ /\.\./ ) -> FALSE (2) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) { (2) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) -> FALSE (2) if (&User-Name =~ /\.$/) { (2) if (&User-Name =~ /\.$/) -> FALSE (2) if (&User-Name =~ /(a)\./) { (2) if (&User-Name =~ /(a)\./) -> FALSE (2) } # if (&User-Name) = notfound (2) } # policy filter_username = notfound (2) [preprocess] = ok (2) [chap] = noop (2) [mschap] = noop (2) [digest] = noop (2) suffix: Checking for suffix after "@" (2) suffix: No '@' in User-Name = "testuser", looking up realm NULL (2) suffix: No such realm "NULL" (2) [suffix] = noop (2) eap: No EAP-Message, not doing EAP (2) [eap] = noop (2) [files] = noop (2) [expiration] = noop (2) [logintime] = noop (2) pap: WARNING: No "known good" password found for the user. Not setting Auth-Type (2) pap: WARNING: Authentication will fail unless a "known good" password is available (2) [pap] = noop (2) } # authorize = ok (2) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject (2) Failed to authenticate the user (2) Using Post-Auth-Type Reject (2) # Executing group from file /etc/raddb/sites-enabled/default (2) Post-Auth-Type REJECT { (2) attr_filter.access_reject: EXPAND %{User-Name} (2) attr_filter.access_reject: --> testuser (2) attr_filter.access_reject: Matched entry DEFAULT at line 11 (2) [attr_filter.access_reject] = updated (2) [eap] = noop (2) policy remove_reply_message_if_eap { (2) if (&reply:EAP-Message && &reply:Reply-Message) { (2) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (2) else { (2) [noop] = noop (2) } # else = noop (2) } # policy remove_reply_message_if_eap = noop (2) } # Post-Auth-Type REJECT = updated (2) Delaying response for 1.000000 seconds Waking up in 0.3 seconds. Waking up in 0.6 seconds. (2) Sending delayed response (2) Sent Access-Reject Id 4 from 10.0.0.209:1812 to 10.0.24.144:60632 length 20 Waking up in 3.9 seconds. (2) Cleaning up request packet ID 4 with timestamp +84 Ready to process requests (3) Received Access-Request Id 5 from 10.0.24.144:51706 to 10.0.0.209:1812 length 72 (3) NAS-IP-Address = 10.0.24.144 (3) User-Name = "testuser" (3) User-Password = "81625808" (3) Message-Authenticator = 0x315376d568418fcf0cbbd174d5c7826f (3) # Executing section authorize from file /etc/raddb/sites-enabled/default (3) authorize { (3) policy filter_username { (3) if (&User-Name) { (3) if (&User-Name) -> TRUE (3) if (&User-Name) { (3) if (&User-Name =~ / /) { (3) if (&User-Name =~ / /) -> FALSE (3) if (&User-Name =~ /@[^@]*@/ ) { (3) if (&User-Name =~ /@[^@]*@/ ) -> FALSE (3) if (&User-Name =~ /\.\./ ) { (3) if (&User-Name =~ /\.\./ ) -> FALSE (3) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) { (3) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) -> FALSE (3) if (&User-Name =~ /\.$/) { (3) if (&User-Name =~ /\.$/) -> FALSE (3) if (&User-Name =~ /(a)\./) { (3) if (&User-Name =~ /(a)\./) -> FALSE (3) } # if (&User-Name) = notfound (3) } # policy filter_username = notfound (3) [preprocess] = ok (3) [chap] = noop (3) [mschap] = noop (3) [digest] = noop (3) suffix: Checking for suffix after "@" (3) suffix: No '@' in User-Name = "testuser", looking up realm NULL (3) suffix: No such realm "NULL" (3) [suffix] = noop (3) eap: No EAP-Message, not doing EAP (3) [eap] = noop (3) [files] = noop (3) [expiration] = noop (3) [logintime] = noop (3) pap: WARNING: No "known good" password found for the user. Not setting Auth-Type (3) pap: WARNING: Authentication will fail unless a "known good" password is available (3) [pap] = noop (3) } # authorize = ok (3) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject (3) Failed to authenticate the user (3) Using Post-Auth-Type Reject (3) # Executing group from file /etc/raddb/sites-enabled/default (3) Post-Auth-Type REJECT { (3) attr_filter.access_reject: EXPAND %{User-Name} (3) attr_filter.access_reject: --> testuser (3) attr_filter.access_reject: Matched entry DEFAULT at line 11 (3) [attr_filter.access_reject] = updated (3) [eap] = noop (3) policy remove_reply_message_if_eap { (3) if (&reply:EAP-Message && &reply:Reply-Message) { (3) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (3) else { (3) [noop] = noop (3) } # else = noop (3) } # policy remove_reply_message_if_eap = noop (3) } # Post-Auth-Type REJECT = updated (3) Delaying response for 1.000000 seconds Waking up in 0.3 seconds. Waking up in 0.6 seconds. (3) Sending delayed response (3) Sent Access-Reject Id 5 from 10.0.0.209:1812 to 10.0.24.144:51706 length 20 Waking up in 3.9 seconds. (3) Cleaning up request packet ID 5 with timestamp +553 Ready to process requests

2 3

mssql-freetds interim-update problem
by Ali Arslan 09 Mar '20

09 Mar '20

Hello all, I am using freeradius 3.0.16 on 2 ubuntu 18.04 servers. One is using mysql the other mssql server as backends. The radius server using mysql is working properly but the one that is using mssql with freetds inserts new rows in radacct table for interim updates. The debug output parts for interim update are as follows: radius server 1 (using mysql): --------------------------------------- (5) sql: EXPAND %{tolower:type.%{Acct-Status-Type}.query} (5) sql: --> type.interim-update.query (5) sql: Using query template 'query' rlm_sql (sql): Reserved connection (7) (5) sql: EXPAND %{User-Name} (5) sql: --> b48@selcuklu (5) sql: SQL-User-Name set to 'b48@selcuklu' (5) sql: EXPAND UPDATE radacct SET acctupdatetime = (@acctupdatetime_old:=acctupdatetime), acctupdatetime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctinterval = %{integer:Event-Timestamp} - UNIX_TIMESTAMP(@acctupdatetime_old), acctstoptime = NULL, framedipaddress = '%{Framed-IP-Address}', ipinternalport = %{%{IP-Port-Int-Port}:-NULL}, internalipaddress = %{%{IP-Port-Int-IPv4-Addr}:-NULL}, ipexternalport = %{%{IP-Port-Ext-Port}:-NULL}, externalipaddress = %{%{IP-Port-Ext-IPv4-Addr}:-NULL}, acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}' (5) sql: --> UPDATE radacct SET acctupdatetime = (@acctupdatetime_old:=acctupdatetime), acctupdatetime = FROM_UNIXTIME(1583672931), acctinterval = 1583672931 - UNIX_TIMESTAMP(@acctupdatetime_old), acctstoptime = NULL, framedipaddress = '192.168.12.251', ipinternalport = NULL, internalipaddress = NULL, ipexternalport = NULL, externalipaddress = NULL, acctsessiontime = 198600, acctinputoctets = '0' << 32 | '214152128', acctoutputoctets = '0' << 32 | '418687860' WHERE AcctUniqueId = '5d7426d2c93ad7b53a9ff6801d14f201' (5) sql: Executing query: UPDATE radacct SET acctupdatetime = (@acctupdatetime_old:=acctupdatetime), acctupdatetime = FROM_UNIXTIME(1583672931), acctinterval = 1583672931 - UNIX_TIMESTAMP(@acctupdatetime_old), acctstoptime = NULL, framedipaddress = '192.168.12.251', ipinternalport = NULL, internalipaddress = NULL, ipexternalport = NULL, externalipaddress = NULL, acctsessiontime = 198600, acctinputoctets = '0' << 32 | '214152128', acctoutputoctets = '0' << 32 | '418687860' WHERE AcctUniqueId = '5d7426d2c93ad7b53a9ff6801d14f201' rlm_sql_mysql: Rows matched: 1 Changed: 1 Warnings: 1 (5) sql: SQL query returned: success (5) sql: 1 record(s) updated rlm_sql (sql): Released connection (7) Need 1 more connections to reach 10 spares ---------------------------------------------------------------------------------------------------------------------------------------- radius server 2 (using mssql): ---------------------------------------- (3) sql: EXPAND %{tolower:type.%{Acct-Status-Type}.query} (3) sql: --> type.interim-update.query (3) sql: Using query template 'query' rlm_sql (sql): Closing connection (3): Hit idle_timeout, was idle for 120 seconds rlm_sql_freetds: socket destructor called, closing socket rlm_sql (sql): Reserved connection (1) (3) sql: EXPAND %{User-Name} (3) sql: --> test@orbit (3) sql: SQL-User-Name set to 'test@orbit' (3) sql: EXPAND UPDATE radacct SET AcctUpdateTime = '%S', AcctStopTime = NULL, FramedIPAddress = '%{Framed-IP-Address}', FramedIPv6Address = '%{Framed-IPv6-Address}', FramedIPv6Prefix = '%{Framed-IPv6-Prefix}', FramedInterfaceId = '%{Framed-Interface-Id}', DelegatedIPv6Prefix = '%{Delegated-IPv6-Prefix}', AcctSessionTime = %{%{Acct-Session-Time}:-NULL}, AcctInputOctets = convert(bigint, '%{%{Acct-Input-Gigawords}:-0}' * POWER(2.0, 32)) | '%{%{Acct-Input-Octets}:-0}', AcctOutputOctets = convert(bigint, '%{%{Acct-Output-Gigawords}:-0}' * POWER(2.0, 32)) | '%{%{Acct-Output-Octets}:-0}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}' (3) sql: --> UPDATE radacct SET AcctUpdateTime = '2020-03-08 16:07:09', AcctStopTime = NULL, FramedIPAddress = '192.168.10.255', FramedIPv6Address = '', FramedIPv6Prefix = '', FramedInterfaceId = '', DelegatedIPv6Prefix = '', AcctSessionTime = 600, AcctInputOctets = convert(bigint, '0' * POWER(2.0, 32)) | '407068', AcctOutputOctets = convert(bigint, '0' * POWER(2.0, 32)) | '687067' WHERE AcctUniqueId = '72029846d9c951718be3d5e42432e88f' (3) sql: Executing query: UPDATE radacct SET AcctUpdateTime = '2020-03-08 16:07:09', AcctStopTime = NULL, FramedIPAddress = '192.168.10.255', FramedIPv6Address = '', FramedIPv6Prefix = '', FramedInterfaceId = '', DelegatedIPv6Prefix = '', AcctSessionTime = 600, AcctInputOctets = convert(bigint, '0' * POWER(2.0, 32)) | '407068', AcctOutputOctets = convert(bigint, '0' * POWER(2.0, 32)) | '687067' WHERE AcctUniqueId = '72029846d9c951718be3d5e42432e88f' (3) sql: SQL query returned: success (3) sql: -1 record(s) updated ******************** here it tries next query and inserts new row ********************** (3) sql: Trying next query... (3) sql: EXPAND INSERT INTO radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctUpdateTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfoStart, ConnectInfoStop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, FramedIPv6Address, FramedIPv6Prefix, FramedInterfaceId, DelegatedIPv6Prefix) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{%{NAS-Port-Id}:-%{NAS-Port}}', '%{NAS-Port-Type}', DATEADD(second, -1 * (%{%{Acct-Session-Time}:-0}),'%S'), '%S', NULL, %{%{Acct-Session-Time}:-NULL}, '%{Acct-Authentic}', '%{Connect-Info}', '', convert(bigint, '%{%{Acct-Input-Gigawords}:-0}' * POWER(2.0, 32)) | '%{%{Acct-Input-Octets}:-0}', convert(bigint, '%{%{Acct-Output-Gigawords}:-0}' * POWER(2.0, 32)) | '%{%{Acct-Output-Octets}:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{Framed-IPv6-Address}', '%{Framed-IPv6-Prefix}', '%{Framed-Interface-Id}', '%{Delegated-IPv6-Prefix}') (3) sql: --> INSERT INTO radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctUpdateTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfoStart, ConnectInfoStop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, FramedIPv6Address, FramedIPv6Prefix, FramedInterfaceId, DelegatedIPv6Prefix) VALUES ('81a00005', '72029846d9c951718be3d5e42432e88f', 'test@orbit', '', '192.168.1.200', 'LAN', 'Ethernet', DATEADD(second, -1 * (600),'2020-03-08 16:07:09'), '2020-03-08 16:07:09', NULL, 600, 'RADIUS', '', '', convert(bigint, '0' * POWER(2.0, 32)) | '407068', convert(bigint, '0' * POWER(2.0, 32)) | '687067', 'PPPoE', 'D8:C4:97:15:C1:F8', '', 'Framed-User', 'PPP', '192.168.10.255', '', '', '', '') (3) sql: Executing query: INSERT INTO radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctUpdateTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfoStart, ConnectInfoStop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, FramedIPv6Address, FramedIPv6Prefix, FramedInterfaceId, DelegatedIPv6Prefix) VALUES ('81a00005', '72029846d9c951718be3d5e42432e88f', 'test@orbit', '', '192.168.1.200', 'LAN', 'Ethernet', DATEADD(second, -1 * (600),'2020-03-08 16:07:09'), '2020-03-08 16:07:09', NULL, 600, 'RADIUS', '', '', convert(bigint, '0' * POWER(2.0, 32)) | '407068', convert(bigint, '0' * POWER(2.0, 32)) | '687067', 'PPPoE', 'D8:C4:97:15:C1:F8', '', 'Framed-User', 'PPP', '192.168.10.255', '', '', '', '') (3) sql: SQL query returned: success (3) sql: -1 record(s) updated (3) sql: No additional queries configured rlm_sql (sql): Released connection (1) The attached file shows mssql queries.conf file accounting section. sql configuration for mssql is as follows: sql { driver = "rlm_sql_freetds" dialect = "mssql" server = "SQLServer" # configured in /etc/freetds/freetds.conf file port = 1433 login = ***** password = ****** radius_db = "database_name" *** table mappings *** pool { """" default **** } delete_stale_sessions = yes read_clients = yes client_table = "nas" ... } Why it inserts a new row in interim-update after updating record? Thanks.

2 1

Re: Failed in SSLv3 read client certificate A
by Al S 08 Mar '20

08 Mar '20

I had wifi-authentication failures going on recently. My Apple TV box is set up to use EAP-TLS to authenticate against the network, and was failing to connect. [SOLVED] It turned out that it didn't have a clue about what the local time was, as it was unable to connect to the network to find out, and because it was unable to get the local time, it either believed that the some part of the EAP response had an invalid timestamp or maybe that it felt that some certificate involved along the way was not valid. The solution was to connect it to an ethernet port, wait a couple of minutes for the time to sync, and then remove the ethernet cable. Maybe this nugget helps someone else in this situation. Regards, Al.

1 0

core dumps not working on FreeBSD host
by Marek Zarychta 04 Mar '20

04 Mar '20

Dear list, since upgrade from 3.0.19 to 3.0.20 I am occasionally getting errors like this one: pid 23749 (radiusd), jid 1, uid 133: exited on signal 11 This issue is somehow related to network / connectivity problems and looks like quite a new problem (I have not seen this in 3.0.19 and earlier releases). It can't be easily triggered, so I am searching for the culprit. To find it I have tried to enable core dumps on FreeBSD for radiusd but without success. I have set allow_core_dumps = yes in radiusd.conf file. Also these sysctls are set: kern.sugid_coredump=1 kern.coredump=1 kern.corefile=/tmp/%N.%P.core There is no problem with getting core dumps for other daemons running on this host, also those running with suid/sgid enabled like bind or nsd, so the issue looks more like daemon related problem than OS problem. Any help would be greatly appreciated! -- Marek Zarychta

3 6

ios forget password from ldap
by Сергей Черевко 04 Mar '20

04 Mar '20

Hi! What you say about iOS devices with freeradius and unifi? Many people in our office saying their iOS devices forgot password from ldap account and every week (or few days) they write again and again their passwоrds to connect to the network (which is saved on they devices and must remeber credentials and automaticly connect as soon as they walk in office) Unifi — freeradius — ldap i use ttls+pap who guilty in this case?

2 1

FR 3.0.20 running with -f on Debian 8.11
by Martin Pauly 04 Mar '20

04 Mar '20

Hi, hope I haven't missed any docs, but: I have a productive installation of FR 3.0.17 running on Debian 8.11. Before migrating this to Debian 10, I wanted to upgrade it to 3.0.20. It compiled fine from the source, and the server is working. But there seems to be some trouble, as the process shows up as USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND freerad 56763 1.6 11.4 622300 116336 ? Ssl 15:58 0:01 /usr/sbin/freeradius -f Attached is debug, but you don't fork in debug mode ... Any idea? TIA, Martin -- Dr. Martin Pauly Phone: +49-6421-28-23527 HRZ Univ. Marburg Fax: +49-6421-28-26994 Hans-Meerwein-Str. E-Mail: pauly(a)HRZ.Uni-Marburg.DE D-35032 Marburg

3 4

rpmbuild of freeradius 3.0.20 with oracle support get mi error Installed (but unpackaged) file(s) found
by Bogaczewicz Paweł 03 Mar '20

03 Mar '20

I am trying to build freeradius rpm on oracle linux 7. oracle linux has all updates. i get the latest stable version of freeradius - freeradius-server-3.0.20.tar.bz2. it compiles good, unless i add --with rlm_sql_oracle to command, i.e. rpmbuild -ba SPECS/freeradius.spec --with rlm_sql_oracle --without rlm_sql_mysql then i get Checking for unpackaged file(s): /usr/lib/rpm/check-files /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64 error: Installed (but unpackaged) file(s) found: /usr/lib64/freeradius/rlm_sqlhpwippool.so RPM build errors: Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/users Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/sites-enabled/default Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/sites-enabled/inner-tunnel Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/always Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/attr_filter Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/cache_eap Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/chap Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/date Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/detail Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/detail.log Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/digest Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/dynamic_clients Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/eap Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/echo Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/exec Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/expiration Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/expr Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/files Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/linelog Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/logintime Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/mschap Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/ntlm_auth Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/pap Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/passwd Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/preprocess Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/radutmp Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/realm Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/replicate Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/soh Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/sradutmp Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/unix Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/unpack Explicit %attr() mode not applicaple to symlink: /home/bogaczp/rpmbuild/BUILDROOT/freeradius-3.0.20-1.el7.x86_64/etc/raddb/mods-enabled/utf8 File listed twice: /etc/raddb/certs/bootstrap File listed twice: /etc/raddb/mods-config/sql File listed twice: /etc/raddb/mods-config/sql/ippool File listed twice: /etc/raddb/mods-config/sql/ippool-dhcp File listed twice: /etc/raddb/mods-config/sql/ippool-dhcp File listed twice: /etc/raddb/mods-config/sql/main Installed (but unpackaged) file(s) found: /usr/lib64/freeradius/rlm_sqlhpwippool.so i'm lost. rlm_sqlhpwippool.so is not even from oracle. where to look?

2 1

random SIGSEGV after upgrade to 3.0.20
by Ferdinand Goldmann 03 Mar '20

03 Mar '20

Hi, we upgraded our installation to 3.0.20 last week and started experiencing random SIGSEGV crashes on both of our radius servers. Appearently this is related to our eduroam setup. After adding 'status_check = status-server' to the eduroam home_server blocks the crashes stopped. We are unsure whether this is a bug, but it is sort of puzzling. Did anybody else experience something similar? Best regards, Ferdinand -- Ferdinand Goldmann System Administrator Information Management JOHANNES KEPLER UNIVERSITY LINZ Altenberger Straße 69 Hochschulfond Building, HF9902 4040 Linz, Austria P +43 732 2468 3925 ferdinand.goldmann(a)jku.at www.jku.at/im

2 4