Having used an ancient version of FR up to now I just look into 3.0.10. I started with a fresh install and activated sql in default, to get the functionality of the former sql_log module. Additionally I enabled logfile in mods-available/sql and linked the file to mods-enabled. # Write SQL queries to a logfile. This is potentially useful for tracing # issues with authorization queries. logfile = ${logdir}/sqllog.sql I hope the following part of the logs are sufficient. I did not want to post 900 lines here. If necessary I can provide the complete log. radius obviously sees this directive on startup: radius -X ..... ..... # Loading module "sql" from file /home/dop/tests/freeradius-server-3.0.10/etc/raddb/mods-enabled/sql^M sql {^M driver = "rlm_sql_null"^M server = ""^M port = 0^M login = ""^M password = <<< secret >>>^M radius_db = "radius"^M read_groups = yes^M read_profiles = yes^M read_clients = no^M delete_stale_sessions = yes^M sql_user_name = "%{User-Name}"^M logfile = "/home/dop/tests/freeradius-server-3.0.10/var/log/radius/sqllog.sql"^M default_user_profile = ""^M ..... Firering up radtest with bob and hello, I get an Access-Accept. I would have expected to see a line in the logfile now, but no logfile is to be found and also in the post-auth part of the radius' debug output I do not see any anything that looks like writing to a file, instead: (0) # Executing section post-auth from file /home/dop/tests/freeradius-server-3.0.10/etc/raddb/sites-enabled/default^M (0) post-auth {^M (0) update {^M (0) No attributes updated^M (0) } # update = noop^M (0) sql: EXPAND .query^M (0) sql: --> .query^M (0) sql: Using query template 'query'^M rlm_sql (sql): Reserved connection (1)^M (0) sql: EXPAND %{User-Name}^M (0) sql: --> bob^M (0) sql: SQL-User-Name set to 'bob'^M (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')^M (0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'bob', 'hello', 'Access-Accept', '2015-10-09 11:52:21')^M (0) sql: Executing query: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'bob', 'hello', 'Access-Accept', '2015-10-09 11:52:21')^M (0) sql: SQL query returned: success^M (0) sql: 1 record(s) updated^M rlm_sql (sql): Released connection (1)^M (0) [sql] = ok^M The logfile will also not be written, when running radius in daemon mode. Do I have to change the config elsewhere for this ? Norbert
On Oct 9, 2015, at 8:49 AM, Wegener, Norbert <norbert.wegener@atos.net> wrote:
Having used an ancient version of FR up to now I just look into 3.0.10. I started with a fresh install and activated sql in default, to get the functionality of the former sql_log module. Additionally I enabled logfile in mods-available/sql and linked the file to mods-enabled.
That's good.
# Write SQL queries to a logfile. This is potentially useful for tracing # issues with authorization queries. logfile = ${logdir}/sqllog.sql
OK.
I hope the following part of the logs are sufficient. I did not want to post 900 lines here. If necessary I can provide the complete log.
No, that's fine.
Firering up radtest with bob and hello, I get an Access-Accept. I would have expected to see a line in the logfile now, but no logfile is to be found and also in the post-auth part of the radius' debug output I do not see any anything that looks like writing to a file, instead:
Hmm... the logs are written to that file for accounting packets, and for %{sql:...} expansions, and for the post_auth section.
(0) # Executing section post-auth from file /home/dop/tests/freeradius-server-3.0.10/etc/raddb/sites-enabled/default^M (0) post-auth {^M (0) update {^M (0) No attributes updated^M (0) } # update = noop^M (0) sql: EXPAND .query^M
OK.
The logfile will also not be written, when running radius in daemon mode. Do I have to change the config elsewhere for this ?
No. The code will have to be updated. In the mean time, you can can edit raddb/mods-config/main/mysql/queries.conf: post-auth { # Write SQL queries to a logfile. This is potentially useful for bulk inserts # when used with the rlm_sql_null driver. # logfile = ${logdir}/post-auth.sql enable the "logfile" there, and it will work. Alan DeKok.
Unfortunately this does not seem to work either. In raddb/mods-config/sql/main/mysql/queries.conf I activated the log file: post-auth { # Write SQL queries to a logfile. This is potentially useful for bulk inserts # when used with the rlm_sql_null driver. logfile = ${logdir}/post-auth.sql In mods-available/sql I tried with driver = "rlm_sql_null" And with driver ="rlm_sql_mysql" The logfile directive in sql has been disabled in both cases and does not appear when sql is processed: radius -X ..... ..... # Loading module "sql" from file /home/dop/tests/freeradius-server-3.0.10/etc/raddb/mods-enabled/sql^M sql {^M driver = "rlm_sql_mysql"^M server = "localhost"^M port = 0^M login = "radius"^M password = <<< secret >>>^M radius_db = "radius"^M read_groups = yes^M read_profiles = yes^M read_clients = no^M delete_stale_sessions = yes^M sql_user_name = "%{User-Name}"^M default_user_profile = ""^M client_query = "SELECT id, nasname, shortname, type, secret, server FROM nas"^M ..... ..... (0) sql: --> bob^M (0) sql: SQL-User-Name set to 'bob'^M (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')^M (0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'bob', 'hello', 'Access-Accept', '2015-10-09 13:29:42')^M (0) sql: Executing query: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'bob', 'hello', 'Access-Accept', '2015-10-09 13:29:42')^M (0) sql: SQL query returned: success^M (0) sql: 1 record(s) updated^M rlm_sql (sql): Released connection (1)^M (0) [sql] = ok^M (0) [exec] = noop^M (0) policy remove_reply_message_if_eap {^M (0) if (&reply:EAP-Message && &reply:Reply-Message) {^M (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE^M (0) else {^M (0) [noop] = noop^M (0) } # else = noop^M (0) } # policy remove_reply_message_if_eap = noop^M (0) } # post-auth = ok^M (0) Sent Access-Accept Id 103 from 127.0.0.1:1812 to 127.0.0.1:45857 length 0^M Grepping for post-auth.sql in the complete log does not provide a single match. So, the result is the same as before: no log file Norbert -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+norbert.wegener=atos.net@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Friday, October 09, 2015 2:58 PM To: FreeRadius users mailing list Subject: Re: sql_log in 3.0.10 On Oct 9, 2015, at 8:49 AM, Wegener, Norbert <norbert.wegener@atos.net> wrote:
Having used an ancient version of FR up to now I just look into 3.0.10. I started with a fresh install and activated sql in default, to get the functionality of the former sql_log module. Additionally I enabled logfile in mods-available/sql and linked the file to mods-enabled.
That's good.
# Write SQL queries to a logfile. This is potentially useful for tracing # issues with authorization queries. logfile = ${logdir}/sqllog.sql
OK.
I hope the following part of the logs are sufficient. I did not want to post 900 lines here. If necessary I can provide the complete log.
No, that's fine.
Firering up radtest with bob and hello, I get an Access-Accept. I would have expected to see a line in the logfile now, but no logfile is to be found and also in the post-auth part of the radius' debug output I do not see any anything that looks like writing to a file, instead:
Hmm... the logs are written to that file for accounting packets, and for %{sql:...} expansions, and for the post_auth section.
(0) # Executing section post-auth from file /home/dop/tests/freeradius-server-3.0.10/etc/raddb/sites-enabled/default^M (0) post-auth {^M (0) update {^M (0) No attributes updated^M (0) } # update = noop^M (0) sql: EXPAND .query^M
OK.
The logfile will also not be written, when running radius in daemon mode. Do I have to change the config elsewhere for this ?
No. The code will have to be updated. In the mean time, you can can edit raddb/mods-config/main/mysql/queries.conf: post-auth { # Write SQL queries to a logfile. This is potentially useful for bulk inserts # when used with the rlm_sql_null driver. # logfile = ${logdir}/post-auth.sql enable the "logfile" there, and it will work. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Oct 9, 2015, at 9:43 AM, Wegener, Norbert <norbert.wegener@atos.net> wrote:
Unfortunately this does not seem to work either.
In raddb/mods-config/sql/main/mysql/queries.conf I activated the log file:
post-auth { # Write SQL queries to a logfile. This is potentially useful for bulk inserts # when used with the rlm_sql_null driver. logfile = ${logdir}/post-auth.sql
What happens when you do: $ radiusd -X | grep logfile ? You should see the above filename show up.
Grepping for post-auth.sql in the complete log does not provide a single match. So, the result is the same as before: no log file
Hmm.. try grabbing the code from the v3,0.x branch on github. I pushed a fix so that a "logfile" directive in the sql{} config should work. Maybe that will help/ Alan DeKok.
Thanks, this works now. Norbert -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+norbert.wegener=atos.net@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Friday, October 09, 2015 3:52 PM To: FreeRadius users mailing list Subject: Re: sql_log in 3.0.10 On Oct 9, 2015, at 9:43 AM, Wegener, Norbert <norbert.wegener@atos.net> wrote:
Unfortunately this does not seem to work either.
In raddb/mods-config/sql/main/mysql/queries.conf I activated the log file:
post-auth { # Write SQL queries to a logfile. This is potentially useful for bulk inserts # when used with the rlm_sql_null driver. logfile = ${logdir}/post-auth.sql
What happens when you do: $ radiusd -X | grep logfile ? You should see the above filename show up.
Grepping for post-auth.sql in the complete log does not provide a single match. So, the result is the same as before: no log file
Hmm.. try grabbing the code from the v3,0.x branch on github. I pushed a fix so that a "logfile" directive in the sql{} config should work. Maybe that will help/ Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
Wegener, Norbert