Old Users File won't Load on 3.x
I ported the old Users 2.x file over to 3.x, but getting the following error. I'm thinking it's \" is causing issues. Did version 3.x change the way to include " " in the string? Thanks, Norman May 18 16:49:49 server01 radiusd[29811]: reading pairlist file /etc/raddb/mods-config/files/authorize May 18 16:49:49 server01 radiusd[29811]: /etc/raddb/mods-config/files/authorize[20]: Parse error (reply) for entry DEFAULT: Expected end of ...or comma May 18 16:49:49 server01 radiusd[29811]: Failed reading /etc/raddb/mods-config/files/authorize May 18 16:49:49 server01 radiusd[29811]: /etc/raddb/mods-enabled/files[9]: Instantiation failed for module "files" # # The rest of this file contains the several DEFAULT entries. # DEFAULT entries match with all login names. # Note that DEFAULT entries can also Fall-Through (see first entry). # A name-value pair from a DEFAULT entry will _NEVER_ override # an already existing name-value pair. # # # First setup all accounts to be checked against the UNIX /etc/passwd. # (Unless a password was already given earlier in this file). # DEFAULT Group == users-ro, Auth-Type = System Service-Type = NAS-Prompt-User, cisco-avpair := "shell:priv-lvl=7" DEFAULT Group == users-rw, Auth-Type = System Service-Type = NAS-Prompt-User, cisco-avpair := "shell:roles*\"network-admin vdc-admin\"", cisco-avpair += "shell:priv-lvl=15" DEFAULT Group == usersb-ro, Auth-Type = System Service-Type = NAS-Prompt-User, cisco-avpair := "shell:roles=usersb"
On May 18, 2016, at 5:34 PM, Norman Zhang <norman.zhang@gmail.com> wrote:
I ported the old Users 2.x file over to 3.x,
Which version? That would help.
but getting the following error. I'm thinking it's \" is causing issues. Did version 3.x change the way to include " " in the string?
No. In v3.0.x branch (soon 3.0.12), I get: ./raddb/mods-config/files/authorize[1]: Parse error (check) for entry DEFAULT: Unknown or invalid value "System" for attribute Auth-Type Alan DeKok.
On Wed, May 18, 2016 at 7:28 PM, Alan DeKok <aland@deployingradius.com> wrote:
Which version? That would help.
radiusd: FreeRADIUS Version 3.0.4, for host x86_64-redhat-linux-gnu, built on Dec 28 2014 at 07:00:16
In v3.0.x branch (soon 3.0.12), I get:
./raddb/mods-config/files/authorize[1]: Parse error (check) for entry DEFAULT: Unknown or invalid value "System" for attribute Auth-Type
Does this mean Auth-Type = System is no longer supported? Below is the complete USERS file. Thanks, Norman # # The rest of this file contains the several DEFAULT entries. # DEFAULT entries match with all login names. # Note that DEFAULT entries can also Fall-Through (see first entry). # A name-value pair from a DEFAULT entry will _NEVER_ override # an already existing name-value pair. # # # First setup all accounts to be checked against the UNIX /etc/passwd. # (Unless a password was already given earlier in this file). # DEFAULT Group == users-ro, Auth-Type = System Service-Type = NAS-Prompt-User, cisco-avpair := "shell:priv-lvl=7" DEFAULT Group == users-rw, Auth-Type = System Service-Type = NAS-Prompt-User, cisco-avpair := "shell:roles*\"network-admin vdc-admin\"", cisco-avpair += "shell:priv-lvl=15" DEFAULT Group == usersb-ro, Auth-Type = System Service-Type = NAS-Prompt-User, cisco-avpair := "shell:roles=usersb" # # Defaults for all framed connections. # DEFAULT Service-Type == Framed-User Framed-IP-Address = 255.255.255.254, Framed-MTU = 576, Service-Type = Framed-User, Fall-Through = Yes # # Default for PPP: dynamic IP address, PPP mode, VJ-compression. # NOTE: we do not use Hint = "PPP", since PPP might also be auto-detected # by the terminal server in which case there may not be a "P" suffix. # The terminal server sends "Framed-Protocol = PPP" for auto PPP. # DEFAULT Framed-Protocol == PPP Framed-Protocol = PPP, Framed-Compression = Van-Jacobson-TCP-IP # # Default for CSLIP: dynamic IP address, SLIP mode, VJ-compression. # DEFAULT Hint == "CSLIP" Framed-Protocol = SLIP, Framed-Compression = Van-Jacobson-TCP-IP # # Default for SLIP: dynamic IP address, SLIP mode. # DEFAULT Hint == "SLIP" Framed-Protocol = SLIP # On no match, the user is denied access. DEFAULT Auth-Type := Reject Reply-Message := "Access denied"
On May 18, 2016, at 7:46 PM, Norman Zhang <norman.zhang@gmail.com> wrote:
radiusd: FreeRADIUS Version 3.0.4, for host x86_64-redhat-linux-gnu, built on Dec 28 2014 at 07:00:16
Upgrade to 3.0.11 at least. 3.0.4 is very old.
Does this mean Auth-Type = System is no longer supported? Below is the complete USERS file.
You don't need to specify it. Read raddb/README.rst This is documented. Alan DeKok.
On Wed, May 18, 2016 at 7:54 PM, Alan DeKok <aland@deployingradius.com> wrote:
Does this mean Auth-Type = System is no longer supported? Below is the complete USERS file.
You don't need to specify it.
Thanks. I have gone through README.rst, and update USERS, but still getting error. I guess the "" still causing issues. I read through radius.conf, but don't see any reference on \". Any idea? DEFAULT Group == users-ro Service-Type = NAS-Prompt-User, cisco-avpair := "shell:priv-lvl=7" DEFAULT Group == users-rw Service-Type = NAS-Prompt-User, cisco-avpair := "shell:roles*\"network-admin vdc-admin\"", cisco-avpair += "shell:priv-lvl=15" DEFAULT Group == usersb-ro Service-Type = NAS-Prompt-User, cisco-avpair := "shell:roles=usersb" May 19 11:55:49 SERVER radiusd[10797]: /etc/raddb/mods-config/files/authorize[20]: Parse error (reply) for entry DEFAULT: Expected end of line or comma May 19 11:55:49 SERVER radiusd[10797]: Failed reading /etc/raddb/mods-config/files/authorize Thanks, Norman
On May 19, 2016, at 12:41 PM, Norman Zhang <norman.zhang@gmail.com> wrote:
Thanks. I have gone through README.rst, and update USERS, but still getting error. I guess the "" still causing issues. I read through radius.conf, but don't see any reference on \". Any idea?
Honestly... use 3.0.11. We spent a lot of time going through the code to correct all of the uses of strings, escaped strings, etc. There just isn't any reason for us to re-do all of that work. Upgrade to 3.0.11. You don't need to change your configuration. Alan DeKok.
participants (3)
-
Alan Buxey -
Alan DeKok -
Norman Zhang