rediswho module config
Hello list , I am trying to test the rediswho module , freeradius 3.0.7, default configuration and have some issues. Can anyone tell me what i am doing wrong ? radiusd -X output : Copyright (C) 1999-2015 The FreeRADIUS server project and contributors There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License For more information about these matters, see the file named COPYRIGHT Starting - reading configuration files ... including dictionary file /usr/share/freeradius/dictionary including dictionary file /usr/share/freeradius/dictionary.dhcp including dictionary file /usr/share/freeradius/dictionary.vqp including dictionary file /etc/raddb/dictionary including configuration file /etc/raddb/radiusd.conf including configuration file /etc/raddb/proxy.conf including configuration file /etc/raddb/clients.conf including files in directory /etc/raddb/mods-enabled/ including configuration file /etc/raddb/mods-enabled/rediswho including configuration file /etc/raddb/mods-enabled/chap including configuration file /etc/raddb/mods-enabled/linelog including configuration file /etc/raddb/mods-enabled/mschap including configuration file /etc/raddb/mods-enabled/sradutmp including configuration file /etc/raddb/mods-enabled/detail including configuration file /etc/raddb/mods-enabled/attr_filter including configuration file /etc/raddb/mods-enabled/pap including configuration file /etc/raddb/mods-enabled/passwd including configuration file /etc/raddb/mods-enabled/files including configuration file /etc/raddb/mods-enabled/expr including configuration file /etc/raddb/mods-enabled/dynamic_clients including configuration file /etc/raddb/mods-enabled/preprocess including configuration file /etc/raddb/mods-enabled/always including configuration file /etc/raddb/mods-enabled/date including configuration file /etc/raddb/mods-enabled/cache_eap including configuration file /etc/raddb/mods-enabled/echo including configuration file /etc/raddb/mods-enabled/realm including configuration file /etc/raddb/mods-enabled/utf8 including configuration file /etc/raddb/mods-enabled/eap including configuration file /etc/raddb/mods-enabled/digest including configuration file /etc/raddb/mods-enabled/replicate including configuration file /etc/raddb/mods-enabled/redis including configuration file /etc/raddb/mods-enabled/expiration including configuration file /etc/raddb/mods-enabled/dhcp including configuration file /etc/raddb/mods-enabled/exec including configuration file /etc/raddb/mods-enabled/soh including configuration file /etc/raddb/mods-enabled/unix including configuration file /etc/raddb/mods-enabled/logintime including configuration file /etc/raddb/mods-enabled/unpack including configuration file /etc/raddb/mods-enabled/radutmp including configuration file /etc/raddb/mods-enabled/ntlm_auth including configuration file /etc/raddb/mods-enabled/detail.log including configuration file /etc/raddb/mods-enabled/cache including files in directory /etc/raddb/policy.d/ including configuration file /etc/raddb/policy.d/canonicalization including configuration file /etc/raddb/policy.d/control including configuration file /etc/raddb/policy.d/accounting including configuration file /etc/raddb/policy.d/eap including configuration file /etc/raddb/policy.d/filter including configuration file /etc/raddb/policy.d/cui including configuration file /etc/raddb/policy.d/operator-name including configuration file /etc/raddb/policy.d/dhcp including configuration file /etc/raddb/policy.d/abfab-tr including configuration file /etc/raddb/policy.d/debug including files in directory /etc/raddb/sites-enabled/ including configuration file /etc/raddb/sites-enabled/inner-tunnel including configuration file /etc/raddb/sites-enabled/default main { security { user = "radiusd" group = "radiusd" allow_core_dumps = no } } main { name = "radiusd" prefix = "/usr" localstatedir = "/var" sbindir = "/usr/sbin" logdir = "/var/log/radius" run_dir = "/var/run/radiusd" libdir = "/usr/lib64/freeradius" radacctdir = "/var/log/radius/radacct" hostname_lookups = no max_request_time = 30 cleanup_delay = 5 max_requests = 1024 pidfile = "/var/run/radiusd/radiusd.pid" checkrad = "/usr/sbin/checkrad" debug_level = 0 proxy_requests = yes log { stripped_names = no auth = no auth_badpass = no auth_goodpass = no colourise = yes msg_denied = "You are already logged in - access denied" } resources { } security { max_attributes = 200 reject_delay = 1.000000 status_server = yes allow_vulnerable_openssl = "yes" } } radiusd: #### Loading Realms and Home Servers #### proxy server { retry_delay = 5 retry_count = 3 default_fallback = no dead_time = 120 wake_all_if_all_dead = no } home_server localhost { ipaddr = 127.0.0.1 port = 1812 type = "auth" secret = <<< secret >>> response_window = 20.000000 response_timeouts = 1 max_outstanding = 65536 zombie_period = 40 status_check = "status-server" ping_interval = 30 check_interval = 30 check_timeout = 4 num_answers_to_alive = 3 revive_interval = 120 limit { max_connections = 16 max_requests = 0 lifetime = 0 idle_timeout = 0 } coa { irt = 2 mrt = 16 mrc = 5 mrd = 30 } } home_server_pool my_auth_failover { type = fail-over home_server = localhost } realm example.com { auth_pool = my_auth_failover } realm LOCAL { } radiusd: #### Loading Clients #### client localhost { ipaddr = 127.0.0.1 require_message_authenticator = no secret = <<< secret >>> nas_type = "other" proto = "*" limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } client localhost_ipv6 { ipv6addr = ::1 require_message_authenticator = no secret = <<< secret >>> limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } Debugger not attached # Creating Auth-Type = digest radiusd: #### Instantiating modules #### instantiate { } modules { # Loaded module rlm_rediswho # Instantiating module "rediswho" from file /etc/raddb/mods-enabled/rediswho rediswho { redis_module_instance = "redis" trim_count = 5 /etc/raddb/mods-enabled/rediswho[10]: Configuration item 'insert' must have a value } /etc/raddb/mods-enabled/rediswho[10]: Invalid configuration for module "rediswho"
On Feb 25, 2015, at 11:47 AM, Ispas Paul <paul.ispas@akta.ro> wrote:
I am trying to test the rediswho module , freeradius 3.0.7, default configuration
It’s not the default configuration.
and have some issues. Can anyone tell me what i am doing wrong ?
You edited the default configuration and broke it. Don’t do that.
modules { # Loaded module rlm_rediswho # Instantiating module "rediswho" from file /etc/raddb/mods-enabled/rediswho rediswho { redis_module_instance = "redis" trim_count = 5 /etc/raddb/mods-enabled/rediswho[10]: Configuration item 'insert' must have a value }
That seems clear. You have a line saying “insert”. And the value for insert is empty. The default configuration DOES NOT have “insert” on line 10. So… you edited the default configuration and broke it. Alan DeKok.
Hello Alan , Thanks for your reply. Below in this email is the config used , which is the default config from freeradius-server-3.0.7.tar.bz2 ( there is no "insert" on line 10, there is the begining of the module config - rediswho) Steps to reproduce the problem (maybe i am doing a mistake i am not aware of ) : - untar the source tar jxvf freeradius-server-3.0.7.tar.bz2 - configure flags used : ./configure --prefix=/usr/local/radius --disable-openssl-version-check --with-openssl --with-experimental-modules (clean install) rm -rf /usr/local/radius make ; make install cd /usr/local/radius/etc/raddb/mods-enabled/ ln -svf ../mods-available/rediswho . ln -svf ../mods-available/redis . /usr/local/radius/sbin/radiusd -X [snip] } # Loaded module rlm_rediswho # Instantiating module "rediswho" from file /usr/local/radius/etc/raddb/mods-enabled/rediswho rediswho { redis_module_instance = "redis" trim_count = 15 /usr/local/radius/etc/raddb/mods-enabled/rediswho[10]: Configuration item 'insert' must have a value } /usr/local/radius/etc/raddb/mods-enabled/rediswho[10]: Invalid configuration for module "rediswho" # -*- text -*- # # $Id: dba8c583f08db3490f74127d680c3d7ce5d1c572 $ # # Configuration file for the "rediswho" module. # # This module tracks the last set of login sessions for a user. # rediswho { # How many sessions to keep track of per user. # If there are more than this number, older sessions are deleted. trim_count = 15 # Expiry time in seconds. Any sessions which have not received # an update in this time will be automatically expired. expire_time = 86400 # # Each subsection contains insert / trim / expire queries. # The subsections are named after the contents of the # Acct-Status-Type attribute. See dictionary.rfc2866 for names # of the various Acct-Status-Type values, or look at the output # of debug mode. # # This module supports *any* Acct-Status-Type. Just add a subsection # of the appropriate name, along with insert / trim / expire queries. # Start { insert = "LPUSH %{User-Name} %l,%{Acct-Session-Id},%{NAS-IP-Address},%{Acct-Session-Time},%{Framed-IP-Address},%{%{Acct-Input-Gigawords}:-0},%{%{Acct-Output-Gigawords}:-0},%{%{Acct-Input-Octets}:-0},%{%{Acct-Output-Octets}:-0}" trim = "LTRIM %{User-Name} 0 ${..trim_count}" expire = "EXPIRE %{User-Name} ${..expire_time}" } Interim-Update { insert = "LPUSH %{User-Name} %l,%{Acct-Session-Id},%{NAS-IP-Address},%{Acct-Session-Time},%{Framed-IP-Address},%{%{Acct-Input-Gigawords}:-0},%{%{Acct-Output-Gigawords}:-0},%{%{Acct-Input-Octets}:-0},%{%{Acct-Output-Octets}:-0}" trim = "LTRIM %{User-Name} 0 ${..trim_count}" expire = "EXPIRE %{User-Name} ${..expire_time}" } Stop { insert = "LPUSH %{User-Name} %l,%{Acct-Session-Id},%{NAS-IP-Address},%{Acct-Session-Time},%{Framed-IP-Address},%{%{Acct-Input-Gigawords}:-0},%{%{Acct-Output-Gigawords}:-0},%{%{Acct-Input-Octets}:-0},%{%{Acct-Output-Octets}:-0}" trim = "LTRIM %{User-Name} 0 ${..trim_count}" expire = "EXPIRE %{User-Name} ${..expire_time}" } } On 02/25/15 19:10, Alan DeKok wrote:
On Feb 25, 2015, at 11:47 AM, Ispas Paul <paul.ispas@akta.ro> wrote:
I am trying to test the rediswho module , freeradius 3.0.7, default configuration It’s not the default configuration.
and have some issues. Can anyone tell me what i am doing wrong ? You edited the default configuration and broke it. Don’t do that. modules { # Loaded module rlm_rediswho # Instantiating module "rediswho" from file /etc/raddb/mods-enabled/rediswho rediswho { redis_module_instance = "redis" trim_count = 5 /etc/raddb/mods-enabled/rediswho[10]: Configuration item 'insert' must have a value } That seems clear. You have a line saying “insert”. And the value for insert is empty.
The default configuration DOES NOT have “insert” on line 10. So… you edited the default configuration and broke it.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Feb 26, 2015, at 5:09 AM, Ispas Paul <paul.ispas@akta.ro> wrote:
Below in this email is the config used , which is the default config from freeradius-server-3.0.7.tar.bz2 ( there is no "insert" on line 10, there is the begining of the module config - rediswho)
Well, it works for me.
/usr/local/radius/etc/raddb/mods-enabled/rediswho[10]: Configuration
Is that the default rediswho file? Alan DeKok.
participants (2)
-
Alan DeKok -
Ispas Paul