- Freeradius-Users - lists.freeradius.org

getting error such max_requests set too low in configurations
by manjunath uthappa ponnachana 04 Feb '17

04 Feb '17

Hi,Getting following error when using  free radius under heavy load,Thu Feb  2 20:18:00 2017 : Error: Dropping request (13057 is too many): from client  port 41215 - ID: 244Thu Feb  2 20:18:00 2017 : Info: WARNING: Please check the configuration file.     The value for 'max_requests' is probably set too low. Thu Feb  2 20:18:00 2017 : Error: Dropping request (13057 is too many): from client  port 40991 - ID: 192Thu Feb  2 20:18:00 2017 : Info: WARNING: Please check the configuration file.     The value for 'max_requests' is probably set too low.Please let me know, what might be the problem and resolution for the problem. Thanks & regardsManjunath 

2 1

Garbage password from pam_radius_auth with skip_passwd set
by Ilkka Virta 03 Feb '17

03 Feb '17

I'm using pam_radius_auth with 'skip_passwd' to talk to FreeRADIUS, and seem to be receiving garbage passwords in the initial request, instead of the empty password I expected. (USAGE says pam_radius_auth sends a "NULL" password, but I don't know if it means the User-Password field is to be zero-length, zero-filled, or nonexisting.) PAM config: auth required pam_radius_auth-1.4.0.so debug skip_passwd The User-Password contained in the initial request appears as 16 random-looking bytes: > ------------- freeradius -X > rad_recv: Access-Request packet from host 127.0.0.1 port 41394, id=210, length=72 > User-Name = "user" > User-Password = "\222\350)\2304Z@ \374\217G>߇<\t" > ... > > rlm_perl: test.pl: RAD_REQUEST: User-Password = '\222\350)\2304Z@ \374\217G>�?<\t' > rlm_perl: Added pair User-Password = \222\350)\2304Z@ \374\217G>�?<\t The "rlm_perl: test.pl" line comes from a perl script that just prints the received values, like example.pl. If I give an empty response to a password prompt, I get the empty password as expected: > ------------- freeradius -X > rad_recv: Access-Request packet from host 127.0.0.1 port 41394, id=211, length=71 > User-Name = "user" > User-Password = "" > > rlm_perl: test.pl: RAD_REQUEST: User-Password = '' > rlm_perl: Added pair User-Password = This works with both the initial password prompt if skip_passwd is not set, and in replies to any Access-Challenges sent later on. I don't think this is the expected behaviour given the documentation, any thoughts?

2 2

Logging proxy server
by Chris Taylor (chtaylo2) 03 Feb '17

03 Feb '17

1.) Is it possible to log the home_server which proxied a connection? Log today: radiusd[22590]: (436) Login OK: [Radius-ACE-Prob@REMOTE] (from client Radius-ACE-Prob port 0) [Source: 111.111.111.111] I’d like to be able to log --> [Proxy: home_server_A]. If not possible there, how about in post-proxy { post_proxy_log } Thanks

2 5

Re: Session-Timeout Problem
by Selahattin Cilek 03 Feb '17

03 Feb '17

-------- Forwarded Message -------- Subject: Re: Session-Timeout Problem Date: Thu, 2 Feb 2017 15:17:00 +0300 From: Selahattin ÇİLEK <selahattin_cilek(a)hotmail.com><mailto:selahattin_cilek@hotmail.com> To: Brian Candler <b.candler(a)pobox.com><mailto:b.candler@pobox.com> On 02.02.2017 13:45, Brian Candler wrote: On 02/02/2017 09:24, Selahattin Cilek wrote: When I set the "Session-Timeout := 600" for a user, the NAS is supposed to renew the session every 10 minutes. My Unifi AP recognises the attribute and actually DOES terminate the first session when it times out after 10 minutes. The problem is that it terminates only the first session, the second session lasts until the NAS reboots, the user logs out or shuts down the host. This means a user could exceed his quota if he keeps his wireless connection alive. There are some users that exceed their 7GB weekly quota by 6 GBs! Should I blame the AP firmware for this or is it a bug in FreeRADIUS 2.2.8? That's very easy to determine. Use tcpdump / wireshark / radsniff to capture all the response from FreeRADIUS. - If FreeRADIUS *is* sending the Session-Timeout every time, then the bug is in the access point. - If FreeRADIUS *isn't* sending the Session-Timeout attribute sometimes, then the bug is in FreeRADIUS (or the way you have configured it) I don't believe FreeRADIUS is supposed to send Session-Timeout messages the to NAS, but the other way around. However, I would point out that there are much better ways of achieving your goal than kicking off users every 10 minutes, which is highly disruptive. No, it is not disruptive. The NAS is not supposed to first disconnect and then reconnect the user every 10 minutes, it is supposed to send usage statistics and request a re-authentication of the user. I have a script that checks network usage and decides whether or not to allow the user to be re-authenticated: Exec-Program-Wait = /usr/local/bin/bash /usr/local/etc/raddb/scripts/sql_datacounter_auth.sh scilek I need to keep track of network usage using FreeRADIUS and MySQL. 1. Use Radius Accounting to measure how much traffic users are using (with Interim-Accounting you will get periodic updates). Then kick the user off when the user reaches the download limit. The "Acct-Interim-Interval" informs the NAS of how frequently it should send update packets to the FreeRADIUS server and send the usage statistics incrementally. A user cannot be re-authenticated using this attribute. The updates do not occur during the second session anyway. The key is the "Session-Timeout" attribute. A user can be granted or denied access only before a new session starts. Unifi provides an HTTP/JSON API to do this. This shell script shows how to use it: https://www.ubnt.com/downloads/unifi/5.3.11/unifi_sh_api I do not want to use vendor scripts. I want to use FreeRADIUS, MySQL and my own scripts. "unifi_reconnect_sta" will kick off the user, to force them to reauthenticate. A NAS based solution will not work because I will have to configure each and every NAS on each and every site. What if I'd like to use some other NAS some other day? 2. The Unifi controller's mongodb database tracks how much bandwidth every user has consumed. So you could just periodically query that and kick off the abusers. I cannot have a separate machine for Unifi controller on the site. Besides, I might someday wanna keep track of network usage in a centralised database. 3. Use the Unifi's built-in bandwidth control features (User Groups / bandwidth limits). That's at the level of kbps not total GB per week. Still, people who have exceeded their quota could have a very low bandwidth limit applied. That will not work because it is not centralised. I have 30 APs on one site and the user can log in to any one of them. Regards, Brian. Thank you very much for the advice. ________________________________ [Avast logo] <https://www.avast.com/antivirus> This email has been checked for viruses by Avast antivirus software. www.avast.com<https://www.avast.com/antivirus> ________________________________ [Avast logo] <https://www.avast.com/antivirus> This email has been checked for viruses by Avast antivirus software. www.avast.com<https://www.avast.com/antivirus>

6 23

FreeRadius + OpenLDAP + MSCHAP2
by SolidSystems | Alex Grigorescu 03 Feb '17

03 Feb '17

Hello I am a system integrator that has just delivereded an Aruba WiFi solution to a customer. They have an infrastructure that is based on a OpenLDAP server with more than 10k active users. All the users have their passwords encripted using SSHA. We are currently trying to help them implement an 802.1x WiFi access network and we are having problems with Microsoft clients connecting. If we create a new user in the LDAP directory and store the password in Clear Text everything works fine. But the goal is to be able to do user logins using the existing paswords without installing any 3rd party software on the clients (which is an impossible task). Is there a way to make FreeRadius authenticate the users against OpenLDAP without having ClearText or NT Hash stored passwords? Best regards, Alex Ing. Alex GRIGORESCU Director Tehnic Solid Systems Brasov, 500059 Str. Lunga Nr. 200 Phone: +40 (368) 80.80.00 Fax: +40 (368) 80.20.80 Mobile: +40 (772) 20.20.02 E-mail: alex.grigorescu(a)solidsystems.ro<mailto:alex.grigorescu@solidsystems.ro> SolidSystems este marca inregistrata a SC Wi-Novation SRL Brasov [Description: Description: Description: Description: MCP(rgb)] [Description: Description: Description: HP AIS] Acest mesaj este adresat exclusiv destinatarului mentionat si poate contine informatii confidentiale si privilegiate. In cazul in care ati primit acest mesaj printr-o eroare, va rugam sa ne informati si sa il stergeti apoi din sistemul Dvs. SolidSystems nu este responsabila pentru eventualele pagube provocate de cunoasterea si/sau folosirea acestui mesaj de terti sau pentru destinatia eronata a mesajului This message is exclusively directed to the above mentioned recipient and may contain confidential and privileged information. Should you receive this message by error we kindly ask you to delete this message immediately. SolidSystems is not liable for any damages resulting from the knowledge and/or manipulation of this message by third parties or from the misdirection of the message.

2 1

FreeRADIUS v3.0.12 Error to Start
by Jose Quezada 02 Feb '17

02 Feb '17

Hello Dears, I have been installing freeradius v3.0.12 in a centos to prove it since I read that the founders recommended that version because it has many better ones. I admit that it has given me a lot of effort to get it works. I immediately wrote radiusd -XC to see that everything was fine, and so it was, but when I try "systemctl start / status radiusd" the service does not start. Some help? below i put the output. [root@centosLAB ~]# sudo systemctl status radiusd Unit radiusd.service could not be found. [root@centosLAB ~]# sudo systemctl start radiusd Failed to start radiusd.service: Unit not found. [root@centosLAB ~]# Thanks for advance, Jose

2 1

Session-Timeout Problem
by Selahattin Cilek 02 Feb '17

02 Feb '17

I'll try to keep this as simple as I can. I am using FreeRADIUS 2.2.8. When I set the "Session-Timeout := 600" for a user, the NAS is supposed to renew the session every 10 minutes. My Unifi AP recognises the attribute and actually DOES terminate the first session when it times out after 10 minutes. The problem is that it terminates only the first session, the second session lasts until the NAS reboots, the user logs out or shuts down the host. This means a user could exceed his quota if he keeps his wireless connection alive. There are some users that exceed their 7GB weekly quota by 6 GBs! Should I blame the AP firmware for this or is it a bug in FreeRADIUS 2.2.8? NB: I could send more detailed TCPDUMP and MySQL information for those who are interested. Thank you in advance. --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

5 7

Accouting of Freeradius DHCP
by Nataniel Klug 02 Feb '17

02 Feb '17

Hello, I've set up a Freeradius 3 as a Dynamic DHCP Server for my network and I am trying to make it work with accouting but I am not being able to understand where to set this up to right Accouting information on MySQL radacct. I've set this using DHCP sqlippool and no authorization, everyone who request an DHCP will be offered on from a default pool. Atenciosamente, *Nataniel Klug* | nataniel.klug(a)gmail.com

2 3

Read custom file in unlang
by Timo Buhrmester 02 Feb '17

02 Feb '17

Hi list, Apologies for the seemingly trivial question, but I can't seem to find an answer in the documentation: Is there a way to read the content of a text file in unlang, for the purpose of assigning it to a variable or using it in a conditional *without* having to shell out w/ backticks? Thanks, Timo Buhrmester

2 1

RE: Freeradius 3.0.12 problems - mysql pool connections
by Michal Tomaszewski 02 Feb '17

02 Feb '17

Hi Alan, As you can see the problem described below was not exactly - as you previously stated - caused by SQL library but somehow FR itself... I understand that your fixes solved the problem, e.g.: https://github.com/FreeRADIUS/freeradius-server/commit/8aaf545d6c011dd5d4a2… Unfortunately current build of freeradius 3.0.13 makes (in our server once a minute) segmentation fault after SQL INSERT command user@server:~$ sudo freeradius -Xx > log20170127b.txt Segmentation fault (core dumped) Last lines in log: ... Fri Jan 27 13:27:28 2017 : Debug: %{User-Name} Fri Jan 27 13:27:28 2017 : Debug: Parsed xlat tree: Fri Jan 27 13:27:28 2017 : Debug: attribute --> User-Name Fri Jan 27 13:27:28 2017 : Debug: (19) EXPAND %{User-Name} Fri Jan 27 13:27:28 2017 : Debug: (19) --> h274_free Fri Jan 27 13:27:28 2017 : Debug: (19) SQL-User-Name set to 'h274_free' Fri Jan 27 13:27:28 2017 : Debug: rlm_sql (sql): Reserved connection (2) Fri Jan 27 13:27:28 2017 : Debug: (19) Executing select query: INSERT INTO radius_radacct_active ( acctsessionid, acctuniqueid, username, hotspot_id, device_id, felogin_id, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, servicetype, framedprotocol, framedipaddress ) VALUES ('588b3ca500000003', '477164ffa8f0efb5af020028af87b6fc', 'user_user', 'hotspotid-2', 'deviceis-36', '4988732', '', '192.168.176.1', '00000003', 'Wireless-802.11', FROM_UNIXTIME(1485520048), FROM_UNIXTIME(1485520048 + 1800), '', '', '', '0' << 32 | '0', '0' << 32 | '0', 'calledid', 'A4-70-D6-82-4C-82', 'Login-User', '', '192.168.176.83') Regards, Mike > -----Original Message----- > From: Freeradius-Users [mailto:freeradius-users- > bounces+michal.tomaszewski=cca.pl(a)lists.freeradius.org] On Behalf Of > Michal Tomaszewski > Sent: Wednesday, December 28, 2016 3:54 PM > To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> > Subject: RE: Freeradius 3.0.12 problems - redis and mysql pool connections > > Alan, > Some more Information in the subject. > > > >> I don't see that ERROR as much of a problem. The server tried to > > >> use an > > old connection, it failed, and when the server tried another > > connection, that one failed, too. > > > Yes. But connection has expired and probably something in > > > connection's > > pool management can be improved. > > > > How? Make a concrete suggestion. Or send a patch. > > > > There is an ERROR in case the data is written to the MySQL correctly. > As I understand this is not an ERROR situation. > Error shall be thrown where there is no possibility to write data. > > > > Server is not down. Server is working perfectly all the time. Those > > messages are not because MySQL server is down. They are appearing in > > normal operation when server is 100% available. They are probably > > because idle_timeout closes the connection and freeradius does not > > record the fact that such connection does not exist. > > > > No. And why guess? The source is available to you. > > I've checked the source and deeply checked the problem. > The problem exists on Ubuntu 16.04 and MySQL client library 5.7 and newest > build of freeradius. > The same situation we can observe on our stage environment: freeradius > 3.12 on Ubuntu 14.04 and MySQL client library 5.5.46. > So suggested bug in the SQL library or its newer/older version seems to be > not a real cause of the problem. > > There is 'ERROR: SQL query failed: no connection' ONLY in case of INSERTs or > REPLACEs to Mysql database. > Error is thrown but each INSERT and REPLACE is SUCCESSFUL. > > We made a lot of tests and: > 1. EVERY (even simple) INSERT or REPLACE throws ERROR. MySQL is available > during query. Insert or replace is successful. > We made temporary table and tested inserts in accounting start/stop > section: > Tue Dec 27 14:42:02 2016 : Debug: (2) Executing select query: > INSERT INTO debug_log (`data`) VALUES ('AAAAAAA') > Tue Dec 27 14:42:02 2016 : ERROR: (2) SQL query failed: no connection > > 2. When you change insert query to select query - there are no errors. > > 3. Nor SELECT neither DELETE query throws error (to be sure we checked > deletes with 0 rows deleted and 1 row deleted). Only INSERT and REPLACE. > Each INSERT and each REPLACE. > > 3. There is also no error thrown when you change the insert query into: > "INSERT INTO debug_log (`data`) VALUES ('AAAAAAA'); SELECT 1;" > > > Examples: > > #1 real situation: > > Mon Nov 28 21:53:09 2016 : Debug: rlm_sql (sql): Reserved connection (10) > Mon Nov 28 21:53:09 2016 : Debug: (12) Executing select query: > INSERT INTO radius_radacct_closed ( > acctsessionid, acctuniqueid, username, additional_id, > device_id, realm, nasipaddress, > nasportid, nasporttype, acctstarttime, > acctupdatetime, acctstoptime, acctsessiontime, > acctauthentic, connectinfo_start, connectinfo_stop, > acctinputoctets, acctoutputoctets, calledstationid, > callingstationid, acctterminatecause, servicetype, > framedprotocol, framedipaddress ) > VALUES ('583c98d000000001', > '79ffcccafc3b54e87403444481bf65e5', 'z555', > '555', '2', '', > '192.168.176.1', '00000001', 'Wireless- > 802.11', FROM_UNIXTIME(1480366389 - 49), > FROM_UNIXTIME(1480366389), > FROM_UNIXTIME(1480366389), 49, '', > '', '', '0' << 32 | '413029', > '0' << 32 | '3533411', > 'z5-d2', '90-B0-ED-E6-AE-15', > 'User-Request', '', '', > '192.168.176.2') > Mon Nov 28 21:53:09 2016 : ERROR: (12) SQL query failed: no connection > -- > -- > -- > -- > Mon Nov 28 21:54:45 2016 : Debug: rlm_sql (sql): Reserved connection (13) > Mon Nov 28 21:54:45 2016 : Debug: (14) Executing select query: > INSERT INTO radius_radacct_active ( > acctsessionid, acctuniqueid, username, > additional_id, device_id, realm, > nasipaddress, nasportid, nasporttype, > acctstarttime, acctstoptime, acctauthentic, > connectinfo_start, connectinfo_stop, acctinputoctets, > acctoutputoctets, calledstationid, callingstationid, > servicetype, framedprotocol, framedipaddress > ) VALUES ('583c996300000001', > '3c96a44b069782db0d7076274139e521', 'z555', > '5555', '2', '', > '192.168.176.1', '00000001', 'Wireless- > 802.11', FROM_UNIXTIME(1480366485), > FROM_UNIXTIME(1480366485 + 2700), '', > '', '', '0' << 32 | '0', > '0' << 32 | '0', 'z5-d2', '90-B0-ED-E6- > AE-15', 'Login-User', '', > '192.168.176.2') > Mon Nov 28 21:54:45 2016 : ERROR: (14) SQL query failed: no connection > > > #2 > Test scenarios: > > Tue Dec 27 14:42:02 2016 : Debug: %{sql: INSERT INTO > debug_log (`data`) VALUES ('AAAAAAA') } > Tue Dec 27 14:42:02 2016 : Debug: Parsed xlat tree: > Tue Dec 27 14:42:02 2016 : Debug: xlat --> sql Tue Dec 27 14:42:02 2016 : > Debug: { > Tue Dec 27 14:42:02 2016 : Debug: literal --> INSERT INTO > debug_log (`data`) VALUES ('AAAAAAA') > Tue Dec 27 14:42:02 2016 : Debug: } > Tue Dec 27 14:42:02 2016 : Debug: %{User-Name} Tue Dec 27 14:42:02 2016 : > Debug: Parsed xlat tree: > Tue Dec 27 14:42:02 2016 : Debug: attribute --> User-Name > Tue Dec 27 14:42:02 2016 : Debug: (2) EXPAND %{User-Name} > Tue Dec 27 14:42:02 2016 : Debug: (2) --> z555 > Tue Dec 27 14:42:02 2016 : Debug: (2) SQL-User-Name set to 'z555' > Tue Dec 27 14:42:02 2016 : Debug: rlm_sql (sql): Reserved connection (1) > Tue Dec 27 14:42:02 2016 : Debug: (2) Executing select query: > INSERT INTO debug_log (`data`) VALUES ('AAAAAAA') > **************************Tue Dec 27 14:42:02 2016 : ERROR: (2) > SQL query failed: no connection > Tue Dec 27 14:42:02 2016 : Debug: rlm_sql (sql): Released connection (1) Tue > Dec 27 14:42:02 2016 : Info: Need 2 more connections to reach min > connections (5) Tue Dec 27 14:42:02 2016 : Info: rlm_sql (sql): Opening > additional connection (3), 1 of 29 pending slots used Tue Dec 27 14:42:02 2016 > : Debug: rlm_sql_mysql: Starting connect to MySQL server Tue Dec 27 > 14:42:02 2016 : Debug: rlm_sql_mysql: Connected to database 'Radius' on > 127.0.0.1 via TCP/IP, server version 5.6.34-79.1-56-log, protocol version 10 > Tue Dec 27 14:42:02 2016 : Debug: (2) EXPAND %{sql: INSERT > INTO debug_log (`data`) VALUES ('AAAAAAA') } > Tue Dec 27 14:42:02 2016 : Debug: (2) --> > > > Wed Dec 28 10:56:08 2016 : Debug: rlm_sql (sql): Reserved connection (0) > Wed Dec 28 10:56:08 2016 : Debug: (0) Executing select query: INSERT INTO > debug_log (data) VALUES > ('CCCCCCCCCCCCCCCCCCCCCCC') > **************************Wed Dec 28 10:56:08 2016 : ERROR: (0) > SQL query failed: no connection > -- > Wed Dec 28 10:56:08 2016 : Debug: Parsed xlat tree: > Wed Dec 28 10:56:08 2016 : Debug: attribute --> User-Name > Wed Dec 28 10:56:08 2016 : Debug: (0) EXPAND %{User-Name} > Wed Dec 28 10:56:08 2016 : Debug: (0) --> z555 > Wed Dec 28 10:56:08 2016 : Debug: (0) SQL-User-Name set to 'z555' > Wed Dec 28 10:56:08 2016 : Debug: rlm_sql (sql): Reserved connection (0) > Wed Dec 28 10:56:08 2016 : Debug: (0) Executing select query: INSERT INTO > debug_log (data) VALUES ('AAAAAAAAAAAAAAAAAAAA') > **************************Wed Dec 28 10:56:08 2016 : ERROR: (0) > SQL query failed: no connection > > > Wed Dec 28 11:11:15 2016 : Debug: literal --> INSERT INTO debug_log > (data) VALUES ('BBBBBBBBBBBBBBB');SELECT 1 > Wed Dec 28 11:11:15 2016 : Debug: (0) Executing select query: INSERT INTO > debug_log (data) VALUES ('BBBBBBBBBBBBBBB');SELECT 1 > Wed Dec 28 11:11:15 2016 : Debug: (0) EXPAND %{sql: INSERT INTO > debug_log (data) VALUES ('BBBBBBBBBBBBBBB');SELECT 1 > } > Wed Dec 28 11:13:15 2016 : Debug: %{sql: INSERT INTO debug_log > (data) VALUES ('CCCCCCCCCCCCCCCCCCCCCCC');SELECT 1 } > Wed Dec 28 11:13:15 2016 : Debug: literal --> INSERT INTO debug_log > (data) VALUES ('CCCCCCCCCCCCCCCCCCCCCCC');SELECT 1 > Wed Dec 28 11:13:15 2016 : Debug: (1) Executing select query: INSERT INTO > debug_log (data) VALUES > ('CCCCCCCCCCCCCCCCCCCCCCC');SELECT 1 > Wed Dec 28 11:13:15 2016 : Debug: (1) Executing select query: INSERT INTO > debug_log (data) VALUES > ('CCCCCCCCCCCCCCCCCCCCCCC');SELECT 1 > Wed Dec 28 11:13:15 2016 : Debug: (1) EXPAND %{sql: INSERT INTO > debug_log (data) VALUES > ('CCCCCCCCCCCCCCCCCCCCCCC');SELECT 1 } > Wed Dec 28 11:13:15 2016 : Debug: %{sql: INSERT INTO debug_log (data) > VALUES ('FFFFFFFFFFF');SELECT 1} > Wed Dec 28 11:13:15 2016 : Debug: literal --> INSERT INTO debug_log > (data) VALUES ('FFFFFFFFFFF');SELECT 1 > Wed Dec 28 11:13:15 2016 : Debug: (1) Executing select query: INSERT INTO > debug_log (data) VALUES ('FFFFFFFFFFF');SELECT 1 > Wed Dec 28 11:13:15 2016 : Debug: (1) Executing select query: INSERT INTO > debug_log (data) VALUES ('FFFFFFFFFFF');SELECT 1 > Wed Dec 28 11:13:15 2016 : Debug: (1) EXPAND %{sql: INSERT INTO > debug_log (data) VALUES ('FFFFFFFFFFF');SELECT 1} > Wed Dec 28 11:13:15 2016 : Debug: %{sql: INSERT INTO debug_log > (data) VALUES ('AAAAAAAAAAAAAAAAAAAA');SELECT 1 } > Wed Dec 28 11:13:15 2016 : Debug: literal --> INSERT INTO debug_log > (data) VALUES ('AAAAAAAAAAAAAAAAAAAA');SELECT 1 > Wed Dec 28 11:13:15 2016 : Debug: (1) Executing select query: INSERT INTO > debug_log (data) VALUES > ('AAAAAAAAAAAAAAAAAAAA');SELECT 1 > Wed Dec 28 11:13:15 2016 : Debug: (1) Executing select query: INSERT INTO > debug_log (data) VALUES > ('AAAAAAAAAAAAAAAAAAAA');SELECT 1 > > > In case of replace: > Wed Dec 28 15:14:01 2016 : Debug: rlm_sql (sql): Reserved connection (0) > Wed Dec 28 15:14:01 2016 : Debug: (0) Executing select query: REPLACE > INTO debug_log (id,data) VALUES > (1,'CCCCCCCCCCCCCCCCCCCCCCC') > **************************Wed Dec 28 15:14:01 2016 : ERROR: (0) > SQL query failed: no connection > Wed Dec 28 15:14:01 2016 : Debug: rlm_sql (sql): Released connection (0) > Wed Dec 28 15:14:01 2016 : Info: Need 4 more connections to reach min > connections (5) Wed Dec 28 15:14:01 2016 : Info: rlm_sql (sql): Opening > additional connection (1), 1 of 31 pending slots used Wed Dec 28 15:14:01 > 2016 : Debug: rlm_sql_mysql: Starting connect to MySQL server Wed Dec 28 > 15:14:01 2016 : Debug: rlm_sql_mysql: Connected to database 'WiFi-Spot- > Radius' on 127.0.0.1 via TCP/IP, server version 5.6.34-79.1-56-log, protocol > version 10 > Wed Dec 28 15:14:01 2016 : Debug: (0) EXPAND %{sql: REPLACE INTO > debug_log (id,data) VALUES > (1,'CCCCCCCCCCCCCCCCCCCCCCC') } > Wed Dec 28 15:14:01 2016 : Debug: (0) --> > Wed Dec 28 15:14:01 2016 : Debug: %{sql: REPLACE INTO debug_log > (id,data) VALUES (3,'CCCCCCCCCCCCCCCCCCCCCCC') } > Wed Dec 28 15:14:01 2016 : Debug: Parsed xlat tree: > Wed Dec 28 15:14:01 2016 : Debug: xlat --> sql Wed Dec 28 15:14:01 2016 : > Debug: { > Wed Dec 28 15:14:01 2016 : Debug: literal --> REPLACE INTO debug_log > (id,data) VALUES (3,'CCCCCCCCCCCCCCCCCCCCCCC') > Wed Dec 28 15:14:01 2016 : Debug: } > Wed Dec 28 15:14:01 2016 : Debug: %{User-Name} Wed Dec 28 15:14:01 2016 > : Debug: Parsed xlat tree: > Wed Dec 28 15:14:01 2016 : Debug: attribute --> User-Name > Wed Dec 28 15:14:01 2016 : Debug: (0) EXPAND %{User-Name} > Wed Dec 28 15:14:01 2016 : Debug: (0) --> z555 > Wed Dec 28 15:14:01 2016 : Debug: (0) SQL-User-Name set to 'z555' > Wed Dec 28 15:14:01 2016 : Debug: rlm_sql (sql): Reserved connection (0) > Wed Dec 28 15:14:01 2016 : Debug: (0) Executing select query: REPLACE > INTO debug_log (id,data) VALUES > (3,'CCCCCCCCCCCCCCCCCCCCCCC') > **************************Wed Dec 28 15:14:01 2016 : ERROR: (0) > SQL query failed: no connection > Wed Dec 28 15:14:01 2016 : Debug: rlm_sql (sql): Released connection (0) > Wed Dec 28 15:14:01 2016 : Debug: (0) EXPAND %{sql: REPLACE INTO > debug_log (id,data) VALUES > (3,'CCCCCCCCCCCCCCCCCCCCCCC') } > Wed Dec 28 15:14:01 2016 : Debug: (0) --> > Wed Dec 28 15:14:01 2016 : Debug: %{sql: REPLACE INTO debug_log > (id,data) VALUES (4,'CCCCCCCCCCCCCCCCCCCCCCC') } > Wed Dec 28 15:14:01 2016 : Debug: Parsed xlat tree: > Wed Dec 28 15:14:01 2016 : Debug: xlat --> sql Wed Dec 28 15:14:01 2016 : > Debug: { > Wed Dec 28 15:14:01 2016 : Debug: literal --> REPLACE INTO debug_log > (id,data) VALUES (4,'CCCCCCCCCCCCCCCCCCCCCCC') > Wed Dec 28 15:14:01 2016 : Debug: } > Wed Dec 28 15:14:01 2016 : Debug: %{User-Name} Wed Dec 28 15:14:01 2016 > : Debug: Parsed xlat tree: > Wed Dec 28 15:14:01 2016 : Debug: attribute --> User-Name > Wed Dec 28 15:14:01 2016 : Debug: (0) EXPAND %{User-Name} > Wed Dec 28 15:14:01 2016 : Debug: (0) --> z555 > Wed Dec 28 15:14:01 2016 : Debug: (0) SQL-User-Name set to 'z555' > Wed Dec 28 15:14:01 2016 : Debug: rlm_sql (sql): Reserved connection (1) > Wed Dec 28 15:14:01 2016 : Debug: (0) Executing select query: REPLACE > INTO debug_log (id,data) VALUES > (4,'CCCCCCCCCCCCCCCCCCCCCCC') > **************************Wed Dec 28 15:14:01 2016 : ERROR: (0) > SQL query failed: no connection > Wed Dec 28 15:14:01 2016 : Debug: rlm_sql (sql): Released connection (1) > Wed Dec 28 15:14:01 2016 : Debug: (0) EXPAND %{sql: REPLACE INTO > debug_log (id,data) VALUES > (4,'CCCCCCCCCCCCCCCCCCCCCCC') } > Wed Dec 28 15:14:01 2016 : Debug: (0) --> > Wed Dec 28 15:14:01 2016 : Debug: %{sql: REPLACE INTO debug_log > (id,data) VALUES (5,'CCCCCCCCCCCCCCCCCCCCCCC');SELECT 1 } > Wed Dec 28 15:14:01 2016 : Debug: Parsed xlat tree: > Wed Dec 28 15:14:01 2016 : Debug: xlat --> sql Wed Dec 28 15:14:01 2016 : > Debug: { > Wed Dec 28 15:14:01 2016 : Debug: literal --> REPLACE INTO debug_log > (id,data) VALUES (5,'CCCCCCCCCCCCCCCCCCCCCCC');SELECT 1 > Wed Dec 28 15:14:01 2016 : Debug: } > Wed Dec 28 15:14:01 2016 : Debug: %{User-Name} Wed Dec 28 15:14:01 2016 > : Debug: Parsed xlat tree: > Wed Dec 28 15:14:01 2016 : Debug: attribute --> User-Name > Wed Dec 28 15:14:01 2016 : Debug: (0) EXPAND %{User-Name} > Wed Dec 28 15:14:01 2016 : Debug: (0) --> z555 > Wed Dec 28 15:14:01 2016 : Debug: (0) SQL-User-Name set to 'z555' > **************************Wed Dec 28 15:14:01 2016 : Debug: rlm_sql > (sql): Reserved connection (0) > Wed Dec 28 15:14:01 2016 : Debug: (0) Executing select query: REPLACE > INTO debug_log (id,data) VALUES > (5,'CCCCCCCCCCCCCCCCCCCCCCC');SELECT 1 > Wed Dec 28 15:14:01 2016 : Debug: rlm_sql (sql): Released connection (0) > Wed Dec 28 15:14:01 2016 : Debug: (0) EXPAND %{sql: REPLACE INTO > debug_log (id,data) VALUES > (5,'CCCCCCCCCCCCCCCCCCCCCCC');SELECT 1 } > Wed Dec 28 15:14:01 2016 : Debug: (0) --> 1 > Wed Dec 28 15:14:01 2016 : Debug: %{sql: REPLACE INTO debug_log > (id,data) VALUES (6,'CCCCCCCCCCCCCCCCCCCCCCC') } > Wed Dec 28 15:14:01 2016 : Debug: Parsed xlat tree: > Wed Dec 28 15:14:01 2016 : Debug: xlat --> sql Wed Dec 28 15:14:01 2016 : > Debug: { > Wed Dec 28 15:14:01 2016 : Debug: literal --> REPLACE INTO debug_log > (id,data) VALUES (6,'CCCCCCCCCCCCCCCCCCCCCCC') > Wed Dec 28 15:14:01 2016 : Debug: } > Wed Dec 28 15:14:01 2016 : Debug: %{User-Name} Wed Dec 28 15:14:01 2016 > : Debug: Parsed xlat tree: > Wed Dec 28 15:14:01 2016 : Debug: attribute --> User-Name > Wed Dec 28 15:14:01 2016 : Debug: (0) EXPAND %{User-Name} > Wed Dec 28 15:14:01 2016 : Debug: (0) --> z555 > Wed Dec 28 15:14:01 2016 : Debug: (0) SQL-User-Name set to 'z555' > Wed Dec 28 15:14:01 2016 : Debug: rlm_sql (sql): Reserved connection (1) > Wed Dec 28 15:14:01 2016 : Debug: (0) Executing select query: REPLACE > INTO debug_log (id,data) VALUES > (6,'CCCCCCCCCCCCCCCCCCCCCCC') > **************************Wed Dec 28 15:14:01 2016 : ERROR: (0) > SQL query failed: no connection > Wed Dec 28 15:14:01 2016 : Debug: rlm_sql (sql): Released connection (1) > Wed Dec 28 15:14:01 2016 : Debug: (0) EXPAND %{sql: REPLACE INTO > debug_log (id,data) VALUES > (6,'CCCCCCCCCCCCCCCCCCCCCCC') } > > > > > #3 > Same query log analysis: > > WITH ERROR: > Wed Dec 28 11:01:33 2016 : Debug: %{sql: INSERT INTO debug_log > (data) VALUES ('AAAAAAAAAAAAAAAAAAAA') } > Wed Dec 28 11:01:33 2016 : Debug: Parsed xlat tree: > Wed Dec 28 11:01:33 2016 : Debug: xlat --> sql Wed Dec 28 11:01:33 2016 : > Debug: { > Wed Dec 28 11:01:33 2016 : Debug: literal --> INSERT INTO debug_log > (data) VALUES ('AAAAAAAAAAAAAAAAAAAA') > Wed Dec 28 11:01:33 2016 : Debug: } > Wed Dec 28 11:01:33 2016 : Debug: %{User-Name} Wed Dec 28 11:01:33 2016 > : Debug: Parsed xlat tree: > Wed Dec 28 11:01:33 2016 : Debug: attribute --> User-Name > Wed Dec 28 11:01:33 2016 : Debug: (0) EXPAND %{User-Name} > Wed Dec 28 11:01:33 2016 : Debug: (0) --> z555 > Wed Dec 28 11:01:33 2016 : Debug: (0) SQL-User-Name set to 'z555' > Wed Dec 28 11:01:33 2016 : Debug: rlm_sql (sql): Reserved connection (1) > Wed Dec 28 11:01:33 2016 : Debug: (0) Executing select query: INSERT INTO > debug_log (data) VALUES ('AAAAAAAAAAAAAAAAAAAA') > Wed Dec 28 11:01:33 2016 : ERROR: (0) SQL query failed: no connection > Wed Dec 28 11:01:33 2016 : Debug: rlm_sql (sql): Released connection (1) > Wed Dec 28 11:01:33 2016 : Debug: (0) EXPAND %{sql: INSERT INTO > debug_log (data) VALUES ('AAAAAAAAAAAAAAAAAAAA') > } > Wed Dec 28 11:01:33 2016 : Debug: (0) --> > Wed Dec 28 11:01:33 2016 : Debug: (0) policy wifi-sessions.accounting { > Wed Dec 28 11:01:33 2016 : Debug: (0) if (&Acct-Status-Type == start){ > Wed Dec 28 11:01:33 2016 : Debug: (0) if (&Acct-Status-Type == start) -> > FALSE > Wed Dec 28 11:01:33 2016 : Debug: (0) elsif (&Acct-Status-Type == stop){ > Wed Dec 28 11:01:33 2016 : Debug: (0) elsif (&Acct-Status-Type == stop) -> > TRUE > Wed Dec 28 11:01:33 2016 : Debug: (0) elsif (&Acct-Status-Type == stop) { > > > WITHOUT ERROR (query modified to have select 1 on the end): > Wed Dec 28 11:13:15 2016 : Debug: %{sql: INSERT INTO debug_log > (data) VALUES ('AAAAAAAAAAAAAAAAAAAA');SELECT 1 } > Wed Dec 28 11:13:15 2016 : Debug: Parsed xlat tree: > Wed Dec 28 11:13:15 2016 : Debug: xlat --> sql Wed Dec 28 11:13:15 2016 : > Debug: { > Wed Dec 28 11:13:15 2016 : Debug: literal --> INSERT INTO debug_log > (data) VALUES ('AAAAAAAAAAAAAAAAAAAA');SELECT 1 > Wed Dec 28 11:13:15 2016 : Debug: } > Wed Dec 28 11:13:15 2016 : Debug: %{User-Name} Wed Dec 28 11:13:15 2016 > : Debug: Parsed xlat tree: > Wed Dec 28 11:13:15 2016 : Debug: attribute --> User-Name > Wed Dec 28 11:13:15 2016 : Debug: (1) EXPAND %{User-Name} > Wed Dec 28 11:13:15 2016 : Debug: (1) --> z555 > Wed Dec 28 11:13:15 2016 : Debug: (1) SQL-User-Name set to 'z555' > Wed Dec 28 11:13:15 2016 : Debug: rlm_sql (sql): Reserved connection (1) > Wed Dec 28 11:13:15 2016 : Debug: (1) Executing select query: INSERT INTO > debug_log (data) VALUES > ('AAAAAAAAAAAAAAAAAAAA');SELECT 1 > Wed Dec 28 11:13:15 2016 : Debug: rlm_sql_mysql: Socket destructor called, > closing socket Wed Dec 28 11:13:15 2016 : Debug: rlm_sql (sql): Reconnecting > (1) Wed Dec 28 11:13:15 2016 : Debug: rlm_sql_mysql: Starting connect to > MySQL server Wed Dec 28 11:13:15 2016 : Debug: rlm_sql_mysql: Connected > to database 'Radius' on 127.0.0.1 via TCP/IP, server version 5.6.34-79.1-56-log, > protocol version 10 > Wed Dec 28 11:13:15 2016 : Debug: (1) Executing select query: INSERT INTO > debug_log (data) VALUES > ('AAAAAAAAAAAAAAAAAAAA');SELECT 1 > Wed Dec 28 11:13:15 2016 : Debug: rlm_sql (sql): Released connection (1) > Wed Dec 28 11:13:15 2016 : Debug: (1) EXPAND %{sql: INSERT INTO > debug_log (data) VALUES > ('AAAAAAAAAAAAAAAAAAAA');SELECT 1 } > Wed Dec 28 11:13:15 2016 : Debug: (1) --> 1 > Wed Dec 28 11:13:15 2016 : Debug: (1) policy wifi-sessions.accounting { > Wed Dec 28 11:13:15 2016 : Debug: (1) if (&Acct-Status-Type == start){ > Wed Dec 28 11:13:15 2016 : Debug: (1) if (&Acct-Status-Type == start) -> > FALSE > Wed Dec 28 11:13:15 2016 : Debug: (1) elsif (&Acct-Status-Type == stop){ > Wed Dec 28 11:13:15 2016 : Debug: (1) elsif (&Acct-Status-Type == stop) -> > TRUE > Wed Dec 28 11:13:15 2016 : Debug: (1) elsif (&Acct-Status-Type == stop) { > > > As you can in second case see in place of: > Wed Dec 28 11:01:33 2016 : ERROR: (0) SQL query failed: no connection > Wed Dec 28 11:01:33 2016 : Debug: rlm_sql (sql): Released connection (1) > > after changing the query we have no ERROR message and in case of socket > unavailable there is: > Wed Dec 28 11:13:15 2016 : Debug: rlm_sql_mysql: Socket destructor called, > closing socket Wed Dec 28 11:13:15 2016 : Debug: rlm_sql (sql): Reconnecting > (1) Wed Dec 28 11:13:15 2016 : Debug: rlm_sql_mysql: Starting connect to > MySQL server Wed Dec 28 11:13:15 2016 : Debug: rlm_sql_mysql: Connected > to database 'Radius' on 127.0.0.1 via TCP/IP, server version 5.6.34-79.1-56-log, > protocol version 10 > Wed Dec 28 11:13:15 2016 : Debug: (1) Executing select query: INSERT INTO > debug_log (data) VALUES > ('AAAAAAAAAAAAAAAAAAAA');SELECT 1 > Wed Dec 28 11:13:15 2016 : Debug: rlm_sql (sql): Released connection (1) > what - I suppose - is normal and desired situation. > ________________________________________ Uwaga: Treść niniejszej wiadomości może być poufna i objęta zakazem jej ujawniania. Jeśli czytelnik tej wiadomości nie jest jej zamierzonym adresatem, pracownikiem lub pośrednikiem upoważnionym do jej przekazania adresatowi, informujemy że wszelkie rozprowadzanie, rozpowszechnianie lub powielanie niniejszej wiadomości jest zabronione. Jeśli otrzymałeś tę wiadomość omyłkowo, proszę bezzwłocznie odesłać ją nadawcy, a samą wiadomość usunąć z komputera. Dziękujemy. ________________________________ Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited.If you have received this communication in error, please notify the sender immediately by replying to the message and deleting it from your computer. Thank you. ________________________________

4 11