Tagged attributes problem and rlm_perl in FreeRADIUS 2.1.4
Hello! I've already asked about the very same problem with tagged attributes and rlm_perl in FreeRADIUS 1.1.7, and Ivan Kalik <tnt@kalik.net> told me that he tested it on 2.1.4, so I've upgraded to new version: FreeRADIUS Version 2.1.4, for host i386-portbld-freebsd7.1, built on Apr 16 2009 at 10:42:09 But the problem persist. But now it became even worse, it does not authorize even for the first time. Log file attached. If I uncomment $RAD_REPLY{'ERX-Service-Activate:2'} = "deny" line in code radiusd just dies. When it is commented radiusd returns attributes ERX-Service-Activate and ERX-Service-Statistics without tag. Thanks in advance for help. Code snippet of my rlm_perl authorize( ) function: if (($RAD_REQUEST{'User-Name'} eq 'admin') and ($RAD_REQUEST{'User-Password'} eq 'test')) { %RAD_REPLY = undef; $RAD_REPLY{'ERX-Service-Activate:1'} = "telesys"; $RAD_REPLY{'ERX-Service-Statistics:1'}[0] = "time-volume"; $RAD_REPLY{'ERX-Qos-Parameters'}[0] = "internet_tr_value 2097152"; $RAD_REPLY{'ERX-Qos-Parameters'}[1] = "internet_tr_value_in 2097152"; # $RAD_REPLY{'ERX-Service-Activate:2'} = "deny"; $RAD_REPLY{'ERX-Qos-Profile-Name'} = "SP_Tele_Internet"; $RAD_REPLY{'Framed-IP-Address'} = '10.0.112.2'; $RAD_REPLY{'Framed-IP-Netmask'}= "255.255.255.255"; $RAD_REPLY{'ERX-Primary-DNS'} = "77.91.190.21"; $RAD_REPLY{'ERX-Secondary-DNS'} = "77.91.190.24"; return RLM_MODULE_OK; } else { return RLM_MODULE_REJECT; }; -- Alexandr Kovalenko http://uafug.org.ua/
Another one log file with $RAD_REPLY{'ERX-Service-Activate:2'} = "deny"; uncommented attached (crash was not related to freeradius initially). On Thu, Apr 16, 2009 at 12:31 PM, Alexandr Kovalenko <alexandr.kovalenko@gmail.com> wrote:
Hello!
I've already asked about the very same problem with tagged attributes and rlm_perl in FreeRADIUS 1.1.7, and Ivan Kalik <tnt@kalik.net> told me that he tested it on 2.1.4, so I've upgraded to new version:
FreeRADIUS Version 2.1.4, for host i386-portbld-freebsd7.1, built on Apr 16 2009 at 10:42:09
But the problem persist. But now it became even worse, it does not authorize even for the first time.
Log file attached. If I uncomment $RAD_REPLY{'ERX-Service-Activate:2'} = "deny" line in code radiusd just dies. When it is commented radiusd returns attributes ERX-Service-Activate and ERX-Service-Statistics without tag.
Thanks in advance for help.
Code snippet of my rlm_perl authorize( ) function:
if (($RAD_REQUEST{'User-Name'} eq 'admin') and ($RAD_REQUEST{'User-Password'} eq 'test')) { %RAD_REPLY = undef; $RAD_REPLY{'ERX-Service-Activate:1'} = "telesys"; $RAD_REPLY{'ERX-Service-Statistics:1'}[0] = "time-volume"; $RAD_REPLY{'ERX-Qos-Parameters'}[0] = "internet_tr_value 2097152"; $RAD_REPLY{'ERX-Qos-Parameters'}[1] = "internet_tr_value_in 2097152"; # $RAD_REPLY{'ERX-Service-Activate:2'} = "deny"; $RAD_REPLY{'ERX-Qos-Profile-Name'} = "SP_Tele_Internet"; $RAD_REPLY{'Framed-IP-Address'} = '10.0.112.2'; $RAD_REPLY{'Framed-IP-Netmask'}= "255.255.255.255"; $RAD_REPLY{'ERX-Primary-DNS'} = "77.91.190.21"; $RAD_REPLY{'ERX-Secondary-DNS'} = "77.91.190.24"; return RLM_MODULE_OK; } else { return RLM_MODULE_REJECT; };
-- Alexandr Kovalenko http://uafug.org.ua/
-- Alexandr Kovalenko http://uafug.org.ua/
Alexandr Kovalenko wrote:
I've already asked about the very same problem with tagged attributes and rlm_perl in FreeRADIUS 1.1.7, and Ivan Kalik <tnt@kalik.net> told me that he tested it on 2.1.4, so I've upgraded to new version:
It doesn't support tagged attributes, either. The source code for the module will need to be updated to support tagged attributes. Alan DeKok.
On Thu, Apr 16, 2009 at 1:34 PM, Alan DeKok <aland@deployingradius.com> wrote:
Alexandr Kovalenko wrote:
I've already asked about the very same problem with tagged attributes and rlm_perl in FreeRADIUS 1.1.7, and Ivan Kalik <tnt@kalik.net> told me that he tested it on 2.1.4, so I've upgraded to new version:
It doesn't support tagged attributes, either. The source code for the module will need to be updated to support tagged attributes.
Thanks for reply. Then I have few questions: 1. How could this be that it worked in 1.1.7 (but only 1st auth attempt, all further didn't, until restart)? 2. Is there any work-in-progress project on adding support for tagged attributes in rlm_perl? 3. Is there any workaround to make it work? 4. Which of these modules: rlm_python, rlm_exec, rlm_<anything other user programmable> support tagged attributes? Thanks in advance. -- Alexandr Kovalenko http://uafug.org.ua/
Alexandr Kovalenko wrote:
Then I have few questions: 1. How could this be that it worked in 1.1.7 (but only 1st auth attempt, all further didn't, until restart)?
<shrug> Look at the code. I don't want to debug it.
2. Is there any work-in-progress project on adding support for tagged attributes in rlm_perl?
Nope. As always, patches are welcome.
3. Is there any workaround to make it work?
Edit the source code.
4. Which of these modules: rlm_python, rlm_exec, rlm_<anything other user programmable> support tagged attributes?
The python module looks like it should. Alan DeKok.
participants (2)
-
Alan DeKok -
Alexandr Kovalenko