Freeradius does not Executing section "authorize from file /etc/freeradius/sites-enabled/default"
Hi everyone,,maybe someone can help me ? have a mysql query in /etc/freeradius/sites-enabled/default (authorize section )before authorizeing a user it checks for some attributes in mysql it works fine when i run freeradius and test it with some users !but it does not Executing section "authorize from file /etc/freeradius/sites-enabled/default" when i start freeradius under heavy load ! Start radius and test with some users : # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok rlm_sql (sql): Released sql socket id: 29 expand: %{sql:SELECT ************************************** } ->? Evaluating ("%{sql:SELECT ************************************** }" > 1 ) -> FALSE++? if ("%{sql:SELECT ************************************** " > 1 ) -> FALSE++else else {+++[ok] = ok+++update control { +++} # update control = noop++} # else else = ok
Try to send the ENTIRE log output. Not only that snip. On Fri, May 3, 2019 at 9:23 AM myxmail1919--- via Freeradius-Users < freeradius-users@lists.freeradius.org> wrote:
Hi everyone,,maybe someone can help me ? have a mysql query in /etc/freeradius/sites-enabled/default (authorize section )before authorizeing a user it checks for some attributes in mysql it works fine when i run freeradius and test it with some users !but it does not Executing section "authorize from file /etc/freeradius/sites-enabled/default" when i start freeradius under heavy load !
Start radius and test with some users : # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok
rlm_sql (sql): Released sql socket id: 29 expand: %{sql:SELECT ************************************** } ->? Evaluating ("%{sql:SELECT ************************************** }" > 1 ) -> FALSE++? if ("%{sql:SELECT ************************************** " > 1 ) -> FALSE++else else {+++[ok] = ok+++update control { +++} # update control = noop++} # else else = ok
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On May 3, 2019, at 8:22 AM, myxmail1919--- via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Hi everyone,,maybe someone can help me ? have a mysql query in /etc/freeradius/sites-enabled/default (authorize section )before authorizeing a user it checks for some attributes in mysql it works fine when i run freeradius and test it with some users !but it does not Executing section "authorize from file /etc/freeradius/sites-enabled/default" when i start freeradius under heavy load !
Please format your message so that they are readable.
Start radius and test with some users : # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok
rlm_sql (sql): Released sql socket id: 29 expand: %{sql:SELECT ************************************** } ->? Evaluating ("%{sql:SELECT ************************************** }" > 1 ) -> FALSE++? if ("%{sql:SELECT ************************************** " > 1 ) -> FALSE++else else {+++[ok] = ok+++update control { +++} # update control = noop++} # else else = ok
This is completely butchered. Plus, it's for v2. We're not going to fix bugs or do anything with v2. It's end of life. If you're having issues with v2, upgrade to 2.2.10. You can just upgrade, and you don't need to change the configuration. Or, install v3, and upgrade the configuration to be compatible with that. Or, post the *full* debug log, as Jorge suggested. One that is *readable*. Alan DeKok.
test it with ver 3.0.16 STILL SAME PROBLEM runing with single or some users : # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/default (1) Executing select query: ************************* username = '******' AND ************************************ rlm_sql (sql): Released connection (2) (1) EXPAND %{sql:************************* username = '******' AND ************************************(1) --> 23276296 (1) if ("%{sql:************************* username = '******' AND ************************************ -> TRUE (1) if ("%{sql************************* username = '******' AND ************************************ {(1) [reject] = reject (1) } # if ("%{sql:************************* username = '******' AND ************************************ = reject(1) } # authorize = reject runing under heavy Load : skipping from authorize section ! only runs "preacct" and "accounting" section ! # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/default # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/default is there any response time waiting setting ? On Friday, May 3, 2019, 2:53:02 PM GMT+2, Alan DeKok <aland@deployingradius.com> wrote: On May 3, 2019, at 8:22 AM, myxmail1919--- via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Hi everyone,,maybe someone can help me ? have a mysql query in /etc/freeradius/sites-enabled/default (authorize section )before authorizeing a user it checks for some attributes in mysql it works fine when i run freeradius and test it with some users !but it does not Executing section "authorize from file /etc/freeradius/sites-enabled/default" when i start freeradius under heavy load !
Please format your message so that they are readable.
Start radius and test with some users : # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok
rlm_sql (sql): Released sql socket id: 29 expand: %{sql:SELECT ************************************** } ->? Evaluating ("%{sql:SELECT ************************************** }" > 1 ) -> FALSE++? if ("%{sql:SELECT ************************************** " > 1 ) -> FALSE++else else {+++[ok] = ok+++update control { +++} # update control = noop++} # else else = ok
This is completely butchered. Plus, it's for v2. We're not going to fix bugs or do anything with v2. It's end of life. If you're having issues with v2, upgrade to 2.2.10. You can just upgrade, and you don't need to change the configuration. Or, install v3, and upgrade the configuration to be compatible with that. Or, post the *full* debug log, as Jorge suggested. One that is *readable*. Alan DeKok.
On May 6, 2019, at 7:54 AM, myxmail1919--- via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
test it with ver 3.0.16 STILL SAME PROBLEM
The problem isn't FreeRADIUS.
runing with single or some users :
# Executing section authorize from file /etc/freeradius/3.0/sites-enabled/default
Yes, that's for Access-Request packets.
runing under heavy Load :
skipping from authorize section ! only runs "preacct" and "accounting" section !
The "preacct" and "accounting" sections are run for Accounting-Request packets. The server runs "authorize" when it receives Access-Request packets. If it doesn't receive Access-Request packets, then it doesn't run the "authorize" section. Alan DeKok.
participants (3)
-
Alan DeKok -
Jorge Pereira -
myxmail1919＠yahoo.com