On 09/21/2017 09:41 AM, Matthew Newton wrote:
Invalid location for 'if' I'm guessing that is because of the 'if' in the LDAP module config? As Alan said, that is not allowed. But if not, please send the whole output of radiusd -X.
The thing is that the "if" is not in the module config, but in the authorize section of the site. I need to select a ldap module based on the realm. In 2.x I could do this in the authorize section, in 3.x it is not possible anymore. [root@radius03 raddb]# radiusd -X -xx -f Thu Sep 21 09:45:33 2017 : Debug: Server was built with: Thu Sep 21 09:45:33 2017 : Debug: accounting : yes Thu Sep 21 09:45:33 2017 : Debug: authentication : yes Thu Sep 21 09:45:33 2017 : Debug: ascend-binary-attributes : yes Thu Sep 21 09:45:33 2017 : Debug: coa : yes Thu Sep 21 09:45:33 2017 : Debug: control-socket : yes Thu Sep 21 09:45:33 2017 : Debug: detail : yes Thu Sep 21 09:45:33 2017 : Debug: dhcp : yes Thu Sep 21 09:45:33 2017 : Debug: dynamic-clients : yes Thu Sep 21 09:45:33 2017 : Debug: osfc2 : no Thu Sep 21 09:45:33 2017 : Debug: proxy : yes Thu Sep 21 09:45:33 2017 : Debug: regex-pcre : yes Thu Sep 21 09:45:33 2017 : Debug: regex-posix : no Thu Sep 21 09:45:33 2017 : Debug: regex-posix-extended : no Thu Sep 21 09:45:33 2017 : Debug: session-management : yes Thu Sep 21 09:45:33 2017 : Debug: stats : yes Thu Sep 21 09:45:33 2017 : Debug: tcp : yes Thu Sep 21 09:45:33 2017 : Debug: threads : yes Thu Sep 21 09:45:33 2017 : Debug: tls : yes Thu Sep 21 09:45:33 2017 : Debug: unlang : yes Thu Sep 21 09:45:33 2017 : Debug: vmps : yes Thu Sep 21 09:45:33 2017 : Debug: developer : no Thu Sep 21 09:45:33 2017 : Debug: Server core libs: Thu Sep 21 09:45:33 2017 : Debug: freeradius-server : 3.0.15 Thu Sep 21 09:45:33 2017 : Debug: talloc : 2.1.* Thu Sep 21 09:45:33 2017 : Debug: ssl : 1.0.1e release Thu Sep 21 09:45:33 2017 : Debug: pcre : 8.32 2012-11-30 Thu Sep 21 09:45:33 2017 : Debug: Endianness: Thu Sep 21 09:45:33 2017 : Debug: little Thu Sep 21 09:45:33 2017 : Debug: Compilation flags: Thu Sep 21 09:45:33 2017 : Debug: cppflags : Thu Sep 21 09:45:33 2017 : Debug: cflags : -I. -Isrc -include src/freeradius-devel/autoconf.h -include src/freeradius-devel/build.h -include src/freeradius-devel/features.h -include src/freeradius-devel/radpaths.h -fno-strict-aliasing -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=generic -Wall -std=c99 -D_GNU_SOURCE -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -DNDEBUG -DIS_MODULE=1 Thu Sep 21 09:45:33 2017 : Debug: ldflags : -Wl,-z,relro -specs=/usr/lib/rpm/redhat/redhat-hardened-ld Thu Sep 21 09:45:33 2017 : Debug: libs : -lcrypto -lssl -ltalloc -lpcre -lnsl -lresolv -ldl -lpthread -lreadline Thu Sep 21 09:45:33 2017 : Debug: Thu Sep 21 09:45:33 2017 : Info: FreeRADIUS Version 3.0.15 Thu Sep 21 09:45:33 2017 : Info: Copyright (C) 1999-2017 The FreeRADIUS server project and contributors Thu Sep 21 09:45:33 2017 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Thu Sep 21 09:45:33 2017 : Info: PARTICULAR PURPOSE Thu Sep 21 09:45:33 2017 : Info: You may redistribute copies of FreeRADIUS under the terms of the Thu Sep 21 09:45:33 2017 : Info: GNU General Public License Thu Sep 21 09:45:33 2017 : Info: For more information about these matters, see the file named COPYRIGHT Thu Sep 21 09:45:33 2017 : Info: Starting - reading configuration files ... Thu Sep 21 09:45:33 2017 : Debug: including dictionary file /usr/share/freeradius/dictionary Thu Sep 21 09:45:33 2017 : Debug: including dictionary file /usr/share/freeradius/dictionary.dhcp Thu Sep 21 09:45:33 2017 : Debug: including dictionary file /usr/share/freeradius/dictionary.vqp Thu Sep 21 09:45:33 2017 : Debug: including dictionary file /etc/raddb/dictionary Thu Sep 21 09:45:33 2017 : Debug: including configuration file /etc/raddb/radiusd.conf Thu Sep 21 09:45:33 2017 : Debug: including configuration file /etc/raddb/proxy.conf Thu Sep 21 09:45:33 2017 : Debug: including configuration file /etc/raddb/clients.conf Thu Sep 21 09:45:33 2017 : Debug: including files in directory /etc/raddb/mods-enabled/ Thu Sep 21 09:45:33 2017 : Debug: including configuration file /etc/raddb/mods-enabled/ldap Thu Sep 21 09:45:33 2017 : Debug: including configuration file /etc/raddb/mods-enabled/realm Thu Sep 21 09:45:33 2017 : Debug: including configuration file /etc/raddb/mods-enabled/eap Thu Sep 21 09:45:33 2017 : Debug: including configuration file /etc/raddb/mods-enabled/inner-eap Thu Sep 21 09:45:33 2017 : Debug: including configuration file /etc/raddb/mods-enabled/files Thu Sep 21 09:45:33 2017 : Debug: including files in directory /etc/raddb/policy.d/ Thu Sep 21 09:45:33 2017 : Debug: including configuration file /etc/raddb/policy.d/cui Thu Sep 21 09:45:33 2017 : Debug: OPTIMIZING (${policy.cui_require_operator_name} == yes) --> FALSE Thu Sep 21 09:45:33 2017 : Debug: OPTIMIZING (no == yes) --> FALSE Thu Sep 21 09:45:33 2017 : Debug: OPTIMIZING (${policy.cui_require_operator_name} == yes) --> FALSE Thu Sep 21 09:45:33 2017 : Debug: OPTIMIZING (no == yes) --> FALSE Thu Sep 21 09:45:33 2017 : Debug: including configuration file /etc/raddb/policy.d/accounting Thu Sep 21 09:45:33 2017 : Debug: including configuration file /etc/raddb/policy.d/debug Thu Sep 21 09:45:33 2017 : Debug: including configuration file /etc/raddb/policy.d/eap Thu Sep 21 09:45:33 2017 : Debug: including configuration file /etc/raddb/policy.d/canonicalization Thu Sep 21 09:45:33 2017 : Debug: including configuration file /etc/raddb/policy.d/operator-name Thu Sep 21 09:45:33 2017 : Debug: including configuration file /etc/raddb/policy.d/dhcp Thu Sep 21 09:45:33 2017 : Debug: including configuration file /etc/raddb/policy.d/filter Thu Sep 21 09:45:33 2017 : Debug: including configuration file /etc/raddb/policy.d/control Thu Sep 21 09:45:33 2017 : Debug: including files in directory /etc/raddb/sites-enabled/ Thu Sep 21 09:45:33 2017 : Debug: including configuration file /etc/raddb/sites-enabled/betterbe Thu Sep 21 09:45:33 2017 : Error: /etc/raddb/sites-enabled/betterbe[13]: Invalid location for 'if' Thu Sep 21 09:45:33 2017 : Error: Errors reading or parsing /etc/raddb/radiusd.conf Jan Hugo