All, We have an hp infrastructure and use identity driven management to enforce some additional rights to users(as forcing vlan assignment). We have a mixed wireless environment with hp procurve and cisco(1200) For hp access points we don't have any problem, but when trying with cisco devices freeradius crasches with a segmentation fault. The segmentation fault happens when accessing the module hpidm.post- auth.conf which is loaded through radius.conf. (if i comment out this module i don't get the error, but then vlan assignment does't work for the hp's).
It would be usefull to debug and to post whats in the hpidm.post-auth.conf J. -- Jonathan De Graeve IMELDA vzw Informatica Dienst Network System Engineer jonathan.de.graeve@imelda.be +32(0)15/50.52.98
Jonathan, I removed the hp module to check if the problem went away(which it did). Afterwards i reenabled it to take traces, but it doesn't segfaults anymore. Now i use radius to assigns vlan for cisco and use hp idm for vlan assigment for hp. Problem seems solved, but i don't want to install the idm on our primary radius server if it gives instable behaviour to the stable freeradius server. We are using freeradius for some years for our wifi production environment(barcode scanners), don't want to cause troubles just to let some users work wireless. Stieven Struyf M.I.S. Division - System Operations Komatsu Europe International NV Mechelsesteenweg 586 B-1800 Vilvoorde Tel. +32 (0)2 2552551 "Jonathan De Graeve" <Jonathan.De.Graeve@imelda.be> Sent by: freeradius-users-bounces+stieven.struyf=komatsu.eu@lists.freeradius.org 10/23/2006 02:58 PM Please respond to FreeRadius users mailing list <freeradius-users@lists.freeradius.org> To "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> cc Subject RE: freeradius+hpidm+cisco
All, We have an hp infrastructure and use identity driven management to enforce some additional rights to users(as forcing vlan assignment). We have a mixed wireless environment with hp procurve and cisco(1200) For hp access points we don't have any problem, but when trying with cisco devices freeradius crasches with a segmentation fault. The segmentation fault happens when accessing the module hpidm.post- auth.conf which is loaded through radius.conf. (if i comment out this module i don't get the error, but then vlan assignment does't work for the hp's).
It would be usefull to debug and to post whats in the hpidm.post-auth.conf J. -- Jonathan De Graeve IMELDA vzw Informatica Dienst Network System Engineer jonathan.de.graeve@imelda.be +32(0)15/50.52.98 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
freeradius-users-bounces+stieven.struyf=komatsu.eu@lists.freeradius.org wrote on 10/23/2006 02:46:51 PM:
All, We have an hp infrastructure and use identity driven management to enforce some additional rights to users(as forcing vlan assignment). We have a mixed wireless environment with hp procurve and cisco(1200) For hp access points we don't have any problem, but when trying with cisco devices freeradius crasches with a segmentation fault. The segmentation fault happens when accessing the module hpidm.post- auth.conf which is loaded through radius.conf. (if i comment out this module i don't get the error, but then vlan assignment does't work for the hp's).
It would be usefull to debug and to post whats in the hpidm.post-auth.conf Just for your info the contents of both hpidm config files:
[root@belx11ke raddb]# cat hpidm.post-auth.conf Post-Auth-Type REJECT{ hpidm } hpidm [root@belx11ke raddb]# [root@belx11ke raddb]# cat hpidm.modules.conf hpidm{ version = 1.0 } [root@belx11ke raddb]# Stieven Struyf M.I.S. Division - System Operations Komatsu Europe International NV Mechelsesteenweg 586 B-1800 Vilvoorde Stieven.Struyf@komatsu.eu Tel. +32 (0)2 2552551
Stieven.Struyf@komatsu.eu wrote:
Just for your info the contents of both hpidm config files:
[root@belx11ke raddb]# cat hpidm.post-auth.conf Post-Auth-Type REJECT{ hpidm } hpidm [root@belx11ke raddb]# cat hpidm.modules.conf hpidm{ version = 1.0 }
This module is not included with the server. Therefore, it's something written locally, and you should asthe person who wrote it about any bugs it may have. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
freeradius-users-bounces+stieven.struyf=komatsu.eu@lists.freeradius.org wrote on 10/23/2006 04:55:32 PM:
Stieven.Struyf@komatsu.eu wrote:
Just for your info the contents of both hpidm config files:
[root@belx11ke raddb]# cat hpidm.post-auth.conf Post-Auth-Type REJECT{ hpidm } hpidm [root@belx11ke raddb]# cat hpidm.modules.conf hpidm{ version = 1.0 }
This module is not included with the server. Therefore, it's something written locally, and you should asthe person who wrote it about any bugs it may have. i know, but problem only occurs on cisco devices, i doubt that hp will debug that(i already updated to the latest patchlevel). I hoped that other users on the list are also using idm(as it works as a plugin for (free)radius).
Stieven.Struyf@komatsu.eu wrote:
I hoped that other users on the list are also using idm(as it works as a plugin for (free)radius).
It's a plugin supplied by HP, and is not part of FreeRADIUS. Please ask HP for support. The module is not included with FreeRADIUS, therefore discussions about the module do not belong on this list. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (3)
-
Alan DeKok -
Jonathan De Graeve -
Stieven.Struyf＠komatsu.eu