v3.0.11 Radmin problem
Hi, I have some problems with radmin since version 3.0.10 (the first version in 3.0 tried) that I don't encountered in previous versions (2.1.6 and 2.2.6) . The main problem is when I try to launch the tool. The command < radmin > work correctly at first start but then I have to add options to start again as below : [proxyRadius /usr/local/etc/raddb]# radmin radmin version 3.0.11, built on Mar 31 2016 at 10:41:17 - FreeRADIUS Server administration tool. ... radmin> [proxyRadius/usr/local/etc/raddb]# radmin radmin: Error in socket: Broken pipe [proxyRadius/usr/local/etc/raddb]# radmin radmin: Error in socket: No such file or directory [proxyRadius/usr/local/etc/raddb]# ls /usr/local/var/run/radiusd/ radiusd.pid radiusd.sock [proxyRadius/usr/local/etc/raddb]# radmin -d /usr/local/etc/raddb/ radmin: Error in socket: No such file or directory [proxyRadius/usr/local/etc/raddb]# radmin -n radiusd radmin: Error in socket: No such file or directory [proxyRadius/usr/local/etc/raddb]# radmin -f /usr/local/var/run/radiusd/radiusd.sock radmin version 3.0.11, built on Mar 31 2016 at 10:41:17 - FreeRADIUS Server administration tool. ... radmin> [proxyRadius/usr/local/etc/raddb]# radmin radmin: Error in socket: No such file or directory The second problem is when I use a condition in Radmin. Previously we set a condition in order to capture only requests based on it, but since version 3.0.10, radmin log all requests received by server. I can see a < & > before the condition that I didn't have with previous versions : radmin> debug condition User-Name == "toto@foo" radmin> show debug condition &User-Name == "toto@foo" Can anyone tell me if it's better with version 3.0.12 or if there is a problem with my utilisation of the tool ? Here the configuration of my solution : radiusd.conf ... localstatedir = /usr/local/var name = radiusd run_dir = ${localstatedir}/run/${name} ... sites-enabled/control-socket listen { type = control socket = ${run_dir}/${name}.sock mode = rw } Thanks you. Regards. Xavier LABAT STN2 Axione -- Les donnees et renseignements contenus dans ce message sont personnels, confidentiels et secrets. Toute publication, utilisation ou diffusion, meme partielle, doit etre autorisee. Si vous n'etes pas le bon destinataire, nous vous demandons de ne pas lire, copier, utiliser ou divulguer cette communication. Nous vous prions de notifier cette erreur a l'expediteur et d'effacer immediatement cette communication de votre systeme. Any data and information contained in this electronic mail is personal, confidential and secret. Any total or partial publication, use or distribution must be authorized. If you are not the right addressee, we ask you not to read, copy, use or disclose this communication. Please notify this error to the sender and erase at once this communication from your system.
Hi,
I have some problems with radmin since version 3.0.10 (the first version in 3.0 tried) that I don't encountered in previous versions (2.1.6 and 2.2.6) .
why is 3.0.10 the first version you tried - 3.0.12 has been around for ages now. should be using that as a minimum your issues are probably fixed since then...so try 3.0.12 first to see if all is well, if not THEN submit a fix. 3.0.10 in itself wont get fixed. alan
Hi Alan,
your issues are probably fixed since then...so try 3.0.12 first to see if all is well, if not THEN submit a fix. 3.0.10 in itself wont get fixed. Unfortunetaly I encounter the same problems with version 3.0.12 :
[proxyRadius ~]# radmin radmin version 3.0.12, built on Nov 3 2016 at 13:57:32 - FreeRADIUS Server administration tool. Copyright (C) 2008-2016 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. radmin> debug condition User-Name == "toto@foo" radmin> show debug condition &User-Name == "toto@foo" [proxyRadius ~]# radmin radmin: Error in socket: No such file or directory [proxyRadius ~]# radmin radmin: Error in socket: Broken pipe [proxyRadius ~]# /usr/local/etc/rc.d/radiusd status radiusd is running as pid 39750. [proxyRadius ~]# [proxyRadius ~]# [proxyRadius ~]# radmin radmin: Error in socket: Broken pipe [proxyRadius ~]# [proxyRadius ~]# [proxyRadius ~]# radmin radmin: Error in socket: Broken pipe [proxyRadius ~]# radmin -f /usr/local/var/run/radiusd/radiusd.sock radmin version 3.0.12, built on Nov 3 2016 at 13:57:32 - FreeRADIUS Server administration tool. .. radmin> [proxyRadius ~]# radmin radmin: Error in socket: Broken pipe We still have errors when we start 2 times radmin and the worst is to have all requests when we set a debug condition. Do you think it could be a configuration problem ? Is there other reports about similar radmin problems ? Regards. Xavier -----Message d'origine----- De : Freeradius-Users [mailto:freeradius-users-bounces+xavier.labat=axione.fr@lists.freeradius.org] De la part de A.L.M.Buxey@lboro.ac.uk Envoyé : mercredi 1 février 2017 13:06 À : FreeRadius users mailing list Objet : Re: v3.0.11 Radmin problem Hi,
I have some problems with radmin since version 3.0.10 (the first version in 3.0 tried) that I don't encountered in previous versions (2.1.6 and 2.2.6) .
why is 3.0.10 the first version you tried - 3.0.12 has been around for ages now. should be using that as a minimum your issues are probably fixed since then...so try 3.0.12 first to see if all is well, if not THEN submit a fix. 3.0.10 in itself wont get fixed. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Les donnees et renseignements contenus dans ce message sont personnels, confidentiels et secrets. Toute publication, utilisation ou diffusion, meme partielle, doit etre autorisee. Si vous n'etes pas le bon destinataire, nous vous demandons de ne pas lire, copier, utiliser ou divulguer cette communication. Nous vous prions de notifier cette erreur a l'expediteur et d'effacer immediatement cette communication de votre systeme. Any data and information contained in this electronic mail is personal, confidential and secret. Any total or partial publication, use or distribution must be authorized. If you are not the right addressee, we ask you not to read, copy, use or disclose this communication. Please notify this error to the sender and erase at once this communication from your system.
On Feb 1, 2017, at 12:26 PM, LABAT, Xavier <xavier.labat@axione.fr> wrote:
Hi Alan,
your issues are probably fixed since then...so try 3.0.12 first to see if all is well, if not THEN submit a fix. 3.0.10 in itself wont get fixed. Unfortunetaly I encounter the same problems with version 3.0.12 :
Are you using radiusd from 3.0.12? Or just radmin from 3.0.12? The "disappearing socket" problem was in older versions of the server, not radmin. Upgrading radmin without upgrading the server will do nothing. Alan DeKok.
Hi, I also upgraded radius in version 3.0.12, not just radmin : radiusd -v radiusd: FreeRADIUS Version 3.0.12, for host amd64-portbld-freebsd10.2, built on Nov 3 2016 at 13:57:27 FreeRADIUS Version 3.0.12 I didn't see previous subject about this problem. Can anyone in the list could tell me if they encounter same problems ? Unable to launch radmin [proxyRadius ~]# radmin radmin: Error in socket: Broken pipe or radmin: Error in socket: No such file or directory "&" before the condition and all requests are logged radmin> show debug condition &User-Name == "toto@foo" Thanks. Xavier -----Message d'origine----- De : Freeradius-Users [mailto:freeradius-users-bounces+xavier.labat=axione.fr@lists.freeradius.org] De la part de Alan DeKok Envoyé : mercredi 1 février 2017 18:35 À : FreeRadius users mailing list Objet : Re: v3.0.11 Radmin problem
On Feb 1, 2017, at 12:26 PM, LABAT, Xavier <xavier.labat@axione.fr> wrote:
Hi Alan,
your issues are probably fixed since then...so try 3.0.12 first to see if all is well, if not THEN submit a fix. 3.0.10 in itself wont get fixed. Unfortunetaly I encounter the same problems with version 3.0.12 :
Are you using radiusd from 3.0.12? Or just radmin from 3.0.12? The "disappearing socket" problem was in older versions of the server, not radmin. Upgrading radmin without upgrading the server will do nothing. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Les donnees et renseignements contenus dans ce message sont personnels, confidentiels et secrets. Toute publication, utilisation ou diffusion, meme partielle, doit etre autorisee. Si vous n'etes pas le bon destinataire, nous vous demandons de ne pas lire, copier, utiliser ou divulguer cette communication. Nous vous prions de notifier cette erreur a l'expediteur et d'effacer immediatement cette communication de votre systeme. Any data and information contained in this electronic mail is personal, confidential and secret. Any total or partial publication, use or distribution must be authorized. If you are not the right addressee, we ask you not to read, copy, use or disclose this communication. Please notify this error to the sender and erase at once this communication from your system.
I start radius in debug mode. You'll find below the debug when I try to launch radmin : [proxyRadius ~]# radmin ... radmin> -> ... new connection request on command socket Listening on command file /usr/local/var/run/radiusd/radiusd.sock Ready to process requests [proxyRadius ~]# radmin radmin: Error in socket: Broken pipe -> ... new connection request on command socket Cannot talk to socket: Resource temporarily unavailable Ready to process requests [proxyRadius ~]# radmin -f /usr/local/var/run/radiusd/radiusd.sock ... radmin> -> ... new connection request on command socket Listening on command file /usr/local/var/run/radiusd/radiusd.sock Ready to process requests Xavier -----Message d'origine----- De : LABAT, Xavier Envoyé : jeudi 2 février 2017 10:28 À : FreeRadius users mailing list Objet : RE: v3.0.11 Radmin problem Hi, I also upgraded radius in version 3.0.12, not just radmin : radiusd -v radiusd: FreeRADIUS Version 3.0.12, for host amd64-portbld-freebsd10.2, built on Nov 3 2016 at 13:57:27 FreeRADIUS Version 3.0.12 I didn't see previous subject about this problem. Can anyone in the list could tell me if they encounter same problems ? Unable to launch radmin [proxyRadius ~]# radmin radmin: Error in socket: Broken pipe or radmin: Error in socket: No such file or directory "&" before the condition and all requests are logged radmin> show debug condition &User-Name == "toto@foo" Thanks. Xavier -----Message d'origine----- De : Freeradius-Users [mailto:freeradius-users-bounces+xavier.labat=axione.fr@lists.freeradius.org] De la part de Alan DeKok Envoyé : mercredi 1 février 2017 18:35 À : FreeRadius users mailing list Objet : Re: v3.0.11 Radmin problem
On Feb 1, 2017, at 12:26 PM, LABAT, Xavier <xavier.labat@axione.fr> wrote:
Hi Alan,
your issues are probably fixed since then...so try 3.0.12 first to see if all is well, if not THEN submit a fix. 3.0.10 in itself wont get fixed. Unfortunetaly I encounter the same problems with version 3.0.12 :
Are you using radiusd from 3.0.12? Or just radmin from 3.0.12? The "disappearing socket" problem was in older versions of the server, not radmin. Upgrading radmin without upgrading the server will do nothing. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Les donnees et renseignements contenus dans ce message sont personnels, confidentiels et secrets. Toute publication, utilisation ou diffusion, meme partielle, doit etre autorisee. Si vous n'etes pas le bon destinataire, nous vous demandons de ne pas lire, copier, utiliser ou divulguer cette communication. Nous vous prions de notifier cette erreur a l'expediteur et d'effacer immediatement cette communication de votre systeme. Any data and information contained in this electronic mail is personal, confidential and secret. Any total or partial publication, use or distribution must be authorized. If you are not the right addressee, we ask you not to read, copy, use or disclose this communication. Please notify this error to the sender and erase at once this communication from your system.
On Feb 2, 2017, at 5:10 AM, LABAT, Xavier <xavier.labat@axione.fr> wrote:
I start radius in debug mode. You'll find below the debug when I try to launch radmin : ... [proxyRadius ~]# radmin radmin: Error in socket: Broken pipe -> ... new connection request on command socket Cannot talk to socket: Resource temporarily unavailable
That's weird. I've never seen this on any system I use. Alan DeKok.
Hi, Sorry for this late answer. I upgrade my server in FreeBSD 11.0 and the FreeRADIUS in version 3.0.12 but the problem is still the same. To answer to alan, here the output of ls -l : [root@proxyRADIUS /usr/local/scripts/radius]# ls -l /usr/local/var/run/radiusd/radiusd.sock srw-rw---- 1 freeradius freeradius 0 Feb 10 16:11 /usr/local/var/run/radiusd/radiusd.sock Today I see that debug in radmin is still active even if there is no condition defined : [root@proxyRADIUS /usr/local/scripts/radius]# tail -f /logs/radius/xla_radmin.log (929521) Tue Feb 14 18:10:51 2017: ERROR: Failing proxied request for user ... (929534) Tue Feb 14 18:10:56 2017: ERROR: Failing proxied request for user ... (929687) Tue Feb 14 18:12:01 2017: ERROR: Failing proxied request for user ... q^C [root@proxyRADIUS /usr/local/scripts/radius]# radmin radmin: Error in socket: No error [root@proxyRADIUS /usr/local/scripts/radius]# radmin -f /usr/local/var/run/radiusd/radiusd.sock radmin version 3.0.12, built on Feb 6 2017 at 16:12:02 - FreeRADIUS Server administration tool. Copyright (C) 2008-2016 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. radmin> show debug condition radmin> show debug file /logs/radius/xla_radmin.log radmin> show debug level 0 radmin> exit [root@proxyRADIUS /usr/local/scripts/radius]# date Tue Feb 14 18:13:37 CET 2017 [root@proxyRADIUS /usr/local/scripts/radius]# tail -f /logs/radius/xla_radmin.log (929521) Tue Feb 14 18:10:51 2017: ERROR: Failing proxied request for user ... (929534) Tue Feb 14 18:10:56 2017: ERROR: Failing proxied request for user ... (929687) Tue Feb 14 18:12:01 2017: ERROR: Failing proxied request for user ... (929687) Tue Feb 14 18:12:01 2017: ERROR: Failing proxied request for user ... (929756) Tue Feb 14 18:12:38 2017: ERROR: Failing proxied request for user ... (929870) Tue Feb 14 18:13:25 2017: ERROR: Failing proxied request for user ... (929973) Tue Feb 14 18:14:09 2017: ERROR: Failing proxied request for user ... It seems that there is a "debug condition all" by default in my radmin. Xavier -----Message d'origine----- De : Freeradius-Users [mailto:freeradius-users-bounces+xavier.labat=axione.fr@lists.freeradius.org] De la part de A.L.M.Buxey@lboro.ac.uk Envoyé : jeudi 2 février 2017 17:03 À : FreeRadius users mailing list Objet : Re: v3.0.11 Radmin problem Hi,
I start radius in debug mode. You'll find below the debug when I try to launch radmin :
what are the details for the socket created (ls -l output... or ls -lZ if you've got SELinux running ) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Les donnees et renseignements contenus dans ce message sont personnels, confidentiels et secrets. Toute publication, utilisation ou diffusion, meme partielle, doit etre autorisee. Si vous n'etes pas le bon destinataire, nous vous demandons de ne pas lire, copier, utiliser ou divulguer cette communication. Nous vous prions de notifier cette erreur a l'expediteur et d'effacer immediatement cette communication de votre systeme. Any data and information contained in this electronic mail is personal, confidential and secret. Any total or partial publication, use or distribution must be authorized. If you are not the right addressee, we ask you not to read, copy, use or disclose this communication. Please notify this error to the sender and erase at once this communication from your system.
On Feb 14, 2017, at 12:29 PM, LABAT, Xavier <xavier.labat@axione.fr> wrote:
I upgrade my server in FreeBSD 11.0 and the FreeRADIUS in version 3.0.12 but the problem is still the same.
To answer to alan, here the output of ls -l : [root@proxyRADIUS /usr/local/scripts/radius]# ls -l /usr/local/var/run/radiusd/radiusd.sock srw-rw---- 1 freeradius freeradius 0 Feb 10 16:11 /usr/local/var/run/radiusd/radiusd.sock
Today I see that debug in radmin is still active even if there is no condition defined :
[root@proxyRADIUS /usr/local/scripts/radius]# tail -f /logs/radius/xla_radmin.log (929521) Tue Feb 14 18:10:51 2017: ERROR: Failing proxied request for user ...
The default configuration doesn't log messages to that filename. So you've done something to your local configuration.
radmin> show debug file /logs/radius/xla_radmin.log
Disable that. Alan DeKok.
Hi Alan, Thanks to answer. The problem is not the log file but the fact that there is still records in it even if the debug condition is empty :
radmin> show debug condition
radmin>
When I don't set a log file in radmin, all records are send in ${logdir}/radius.log. We can't use Radmin to debug because it sends all requests (approximately 15 requests/s just for authentication) in my debug file even if I set a condition : radmin> show debug condition radmin> debug condition User-Name == "toto@foo" radmin> show debug condition &User-Name == "toto@foo" radmin> I don't understand why it adds a "&" before the condition ? How can I remove it ? Xavier -----Message d'origine----- De : Freeradius-Users [mailto:freeradius-users-bounces+xavier.labat=axione.fr@lists.freeradius.org] De la part de Alan DeKok Envoyé : mardi 14 février 2017 19:26 À : FreeRadius users mailing list Objet : Re: v3.0.11 Radmin problem On Feb 14, 2017, at 12:29 PM, LABAT, Xavier <xavier.labat@axione.fr> wrote:
I upgrade my server in FreeBSD 11.0 and the FreeRADIUS in version 3.0.12 but the problem is still the same.
To answer to alan, here the output of ls -l : [root@proxyRADIUS /usr/local/scripts/radius]# ls -l /usr/local/var/run/radiusd/radiusd.sock srw-rw---- 1 freeradius freeradius 0 Feb 10 16:11 /usr/local/var/run/radiusd/radiusd.sock
Today I see that debug in radmin is still active even if there is no condition defined :
[root@proxyRADIUS /usr/local/scripts/radius]# tail -f /logs/radius/xla_radmin.log (929521) Tue Feb 14 18:10:51 2017: ERROR: Failing proxied request for user ...
The default configuration doesn't log messages to that filename. So you've done something to your local configuration.
radmin> show debug file /logs/radius/xla_radmin.log
Disable that. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Les donnees et renseignements contenus dans ce message sont personnels, confidentiels et secrets. Toute publication, utilisation ou diffusion, meme partielle, doit etre autorisee. Si vous n'etes pas le bon destinataire, nous vous demandons de ne pas lire, copier, utiliser ou divulguer cette communication. Nous vous prions de notifier cette erreur a l'expediteur et d'effacer immediatement cette communication de votre systeme. Any data and information contained in this electronic mail is personal, confidential and secret. Any total or partial publication, use or distribution must be authorized. If you are not the right addressee, we ask you not to read, copy, use or disclose this communication. Please notify this error to the sender and erase at once this communication from your system.
On Feb 15, 2017, at 10:58 AM, LABAT, Xavier <xavier.labat@axione.fr> wrote:
The problem is not the log file but the fact that there is still records in it even if the debug condition is empty :
If you tell it to log to a file... it will log to a file.
When I don't set a log file in radmin, all records are send in ${logdir}/radius.log.
That's the default configuration. That's how it works.
We can't use Radmin to debug because it sends all requests (approximately 15 requests/s just for authentication) in my debug file even if I set a condition :
That shouldn't happen. It doesn't happen for me.
radmin> show debug condition
radmin> debug condition User-Name == "toto@foo" radmin> show debug condition &User-Name == "toto@foo" radmin>
I don't understand why it adds a "&" before the condition ? How can I remove it ?
You don't. See "man unlang". The "&" says it's an attribute reference. Alan DeKok.
radmin> show debug condition &User-Name == "toto@foo" radmin>
I don't understand why it adds a "&" before the condition ? How can I remove it ?
You don't. See "man unlang". The "&" says it's an attribute reference. Okay.. Sorry, I understand now... It's very clear with a double condition : radmin> debug condition '(User-Name == "toto@foo") || (NAS-IP-Address == 192.168.1.1)' radmin> show debug condition &User-Name == "toto@foo" || &NAS-IP-Address == 192.168.1.1
We can't use Radmin to debug because it sends all requests (approximately 15 requests/s just for authentication on our server) in my debug file even if I set a condition :
That shouldn't happen. It doesn't happen for me.
It seems that I'm the only one who encounter the problem but I don't know how to debug/resolv it. I'll try to install freeradius3.0.12 with "pkg" and not with FreeBSD "ports". I'll let you know if it's better. Thanks. Xavier -- Les donnees et renseignements contenus dans ce message sont personnels, confidentiels et secrets. Toute publication, utilisation ou diffusion, meme partielle, doit etre autorisee. Si vous n'etes pas le bon destinataire, nous vous demandons de ne pas lire, copier, utiliser ou divulguer cette communication. Nous vous prions de notifier cette erreur a l'expediteur et d'effacer immediatement cette communication de votre systeme. Any data and information contained in this electronic mail is personal, confidential and secret. Any total or partial publication, use or distribution must be authorized. If you are not the right addressee, we ask you not to read, copy, use or disclose this communication. Please notify this error to the sender and erase at once this communication from your system.
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
LABAT, Xavier