Dear Users, One of the largest complains with FreeRADIUS is the lack of comprehensive documentation. The current wiki @ wiki.freeradius.org has served its purpose, but has ultimately failed to provide an update to date, well organised source of documentation. The current major problems with the wiki are: * spam users - which meant we had to lock registration, and discouraged new users from contributing * exporting information - all pages are stored in an sql lite instance, which makes it hard to automatically roll pages into releases * formatting information - Information stored in the wiki is in the Media wiki format, whereas the documentation bundled with FreeRADIUS is either unformatted or in rst format. To try and solve these issues and glue everything together a bit more, i've been working with Alan DeKok to set up a new instance of Gollum. Gollum is a ruby on rails application which exposes a git repository as wiki site. Gollum can render files in many markup languages including plaintext, RST and Mediawiki format, which means we can import all current server documentation, all current wiki documentation and have them neatly presented in a single wiki site. Neat huh? But what about spam and registration? Well by default gollum doesn't authenticate anyone. But because it's a rails application we can drop in a library called 'OmniAuth' which uses Oauth to authenticate a bunch of providers. This allows us to leverage authentication and spam account prevention services of providers like GitHub, Facebook and Twitter. Unfortunately the new wiki isn't ready from primetime. The mediawiki page format renderer in gollum isn't perfect, so we need to convert those pages to RST as a priority. If you want to help out, please do the following: 1) Sign up for Facebook, Twitter or GitHub 2) Go to http://power.freeradius.org:4567 3) Pick a page where the MediaWiki format doesn't render correctly 4) Edit it 5) Change edit mode from MediaWiki to reStructuredText 6) Convert markup to RST (see here: http://docutils.sourceforge.net/docs/ref/rst/restructuredtext.html) 7) Save the page 8) Get warm fuzzy glow from contributing to open source Also please report any bugs here: https://github.com/github/gollum/issues?_pjax=true&state=open Many Thanks, Arran Arran Cudbard-Bell RM-RF Limited - Security consultation and contracting VoIP: +1 916-436-1352 Cell: +44 7854041841
On Fri, May 27, 2011 at 7:29 AM, Arran Cudbard-Bell <a.cudbardb@gmail.com> wrote:
If you want to help out, please do the following: 1) Sign up for Facebook, Twitter or GitHub 2) Go to http://power.freeradius.org:4567
http://power.freeradius.org:4567 is problematic from here (slow, and sometimes it gives connect errors) while the old wiki loads just fine. Is this a location problem (e.g. hosted on not-so-good datacenter), server problem (e.g. not enough RAM), or application problem (e.g. non-optimum sql queries)? -- Fajar
On May 26, 2011, at 6:09 PM, Fajar A. Nugraha wrote:
On Fri, May 27, 2011 at 7:29 AM, Arran Cudbard-Bell <a.cudbardb@gmail.com> wrote:
If you want to help out, please do the following: 1) Sign up for Facebook, Twitter or GitHub 2) Go to http://power.freeradius.org:4567
http://power.freeradius.org:4567 is problematic from here (slow, and sometimes it gives connect errors) while the old wiki loads just fine. Is this a location problem (e.g. hosted on not-so-good datacenter), server problem (e.g. not enough RAM), or application problem (e.g. non-optimum sql queries)?
I'm not sure why it appears slow from where you are, it's pretty speedy from Sacramento, California, and the Server is in France. Also the new wiki doesn't use SQL, as I mentioned in the previous post all data storage is GIT. I did just have to restart it to fix some issues with the login status bar at the top which was broken by an update to the Mustache markup library, which may explain the connection errors. Please let me know if you continue to experience slowness and connection errors. Thanks, Arran Arran Cudbard-Bell RM-RF Limited - Security consultation and contracting VoIP: +1 916-436-1352 Cell: +44 7854041841
On Fri, May 27, 2011 at 8:22 AM, Arran Cudbard-Bell <a.cudbardb@gmail.com> wrote:
On May 26, 2011, at 6:09 PM, Fajar A. Nugraha wrote:
On Fri, May 27, 2011 at 7:29 AM, Arran Cudbard-Bell
2) Go to http://power.freeradius.org:4567
http://power.freeradius.org:4567 is problematic from here (slow, and sometimes it gives connect errors) while the old wiki loads just fine.
I'm not sure why it appears slow from where you are, it's pretty speedy from Sacramento, California, and the Server is in France.
Also the new wiki doesn't use SQL, as I mentioned in the previous post all data storage is GIT.
I did just have to restart it to fix some issues with the login status bar at the top which was broken by an update to the Mustache markup library, which may explain the connection errors.
Please let me know if you continue to experience slowness and connection errors.
It's still slow. Using wget reveals something interesting though: - it's connected almost immediately - "HTTP request sent, awaiting response..." took over 10 seconds - once I got "200 OK", the content is transferred very quickly, so it's not connection speed problem. Does ruby (or apache, or whatever web frontend you use) perform reverse address lookup by default? If yes, it might explain the long response time somewhat. -- Fajar
It's still slow. Using wget reveals something interesting though: - it's connected almost immediately - "HTTP request sent, awaiting response..." took over 10 seconds - once I got "200 OK", the content is transferred very quickly, so it's not connection speed problem.
Does ruby (or apache, or whatever web frontend you use) perform reverse address lookup by default? If yes, it might explain the long response time somewhat.
*sigh* webrick does indeed perform reverse lookup by default, what does that?! Had to update the entire ruby install to 1.9.2 to get the version of the library which allows you to disable it, but it is now disabled and I can the logs are no longer showing FQDNs. Could you try one last time and see if this was the issue you were running in to. Many thanks, Arran Arran Cudbard-Bell RM-RF Limited - Security consultation and contracting VoIP: +1 916-436-1352 Cell: +44 7854041841
On Fri, May 27, 2011 at 9:26 AM, Arran Cudbard-Bell <a.cudbardb@gmail.com> wrote:
It's still slow. Using wget reveals something interesting though: - it's connected almost immediately - "HTTP request sent, awaiting response..." took over 10 seconds - once I got "200 OK", the content is transferred very quickly, so it's not connection speed problem.
Does ruby (or apache, or whatever web frontend you use) perform reverse address lookup by default? If yes, it might explain the long response time somewhat.
*sigh* webrick does indeed perform reverse lookup by default, what does that?!
Had to update the entire ruby install to 1.9.2 to get the version of the library which allows you to disable it, but it is now disabled and I can the logs are no longer showing FQDNs.
Could you try one last time and see if this was the issue you were running in to.
It works great now, thanks. So the current policy is: - anyone can register (via github etc) - any logged-in user can create/edit new page Is that correct? I'll try updating the FAQ with some new entries later. -- Fajar
On May 26, 2011, at 7:41 PM, Fajar A. Nugraha wrote:
On Fri, May 27, 2011 at 9:26 AM, Arran Cudbard-Bell <a.cudbardb@gmail.com> wrote:
It's still slow. Using wget reveals something interesting though: - it's connected almost immediately - "HTTP request sent, awaiting response..." took over 10 seconds - once I got "200 OK", the content is transferred very quickly, so it's not connection speed problem.
Does ruby (or apache, or whatever web frontend you use) perform reverse address lookup by default? If yes, it might explain the long response time somewhat.
*sigh* webrick does indeed perform reverse lookup by default, what does that?!
Had to update the entire ruby install to 1.9.2 to get the version of the library which allows you to disable it, but it is now disabled and I can the logs are no longer showing FQDNs.
Could you try one last time and see if this was the issue you were running in to.
It works great now, thanks.
Glad its fixed.
So the current policy is: - anyone can register (via github etc) - any logged-in user can create/edit new page
Is that correct? I'll try updating the FAQ with some new entries later.
That's correct. We may add group restrictions at some point if they're needed, but if there's no spam issues or edit wars then it's probably not necessary. -Arran Arran Cudbard-Bell RM-RF Limited - Security consultation and contracting VoIP: +1 916-436-1352 Cell: +44 7854041841
Fajar A. Nugraha wrote:
So the current policy is: - anyone can register (via github etc) - any logged-in user can create/edit new page
Is that correct? I'll try updating the FAQ with some new entries later.
Yes. By using OAuth, we can avoid the problem of managing users ourselves, and also tie edits to "real" people. That should avoid most of the spam issues. The wiki is also available via git, in case you want to do off-line editing. I'll move the DNS entries, and update the web server so that it becomes the new wiki.freeradius.org. Alan DeKok.
On 2011/05/27 03:22 AM, Arran Cudbard-Bell wrote:
http://power.freeradius.org:4567 is problematic from here (slow, and
Some ISP's prioritize 4567 different to 80. Is their any good reason it runs on 4567? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 -------------------- Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer at: http://www.pcservices.co.za/disclaimer.html
On May 26, 2011, at 11:41 PM, Johan Meiring wrote:
On 2011/05/27 03:22 AM, Arran Cudbard-Bell wrote:
http://power.freeradius.org:4567 is problematic from here (slow, and
Some ISP's prioritize 4567 different to 80.
Is their any good reason it runs on 4567?
Yes. It's the default for webrick, and were still working out permissions issues. When it goes live @ wiki.freeradius.org it will run on port 80. It's up currently more for testing and fixing markup issues than to run as a production service. -Arran Arran Cudbard-Bell RM-RF Limited - Security consultation and contracting VoIP: +1 916-436-1352 Cell: +44 7854041841
Fajar A. Nugraha wrote:
Is this a location problem (e.g. hosted on not-so-good datacenter), server problem (e.g. not enough RAM), or application problem (e.g. non-optimum sql queries)?
It's a quad-core 8G system with 1Tb of disk, and 1Gb connection to the net. I think it's fine. :) Alan DeKok.
Arran Cudbard-Bell wrote:
Unfortunately the new wiki isn't ready from primetime. The mediawiki page format renderer in gollum isn't perfect, so we need to convert those pages to RST as a priority.
In order to encourage people to contribute, we've made the new wiki "live" on http://wiki.freeradius.org. Please bear with us for a day or two while we get some of the kinks worked out. The github && Facebook logins will work, so it should be *much* easier for people to contribute to the Wiki. Alan DeKok.
Hi,
The github && Facebook logins will work, so it should be *much* easier for people to contribute to the Wiki.
Ah! Federated login! Any plans to add OpenID? I have this nice OpenID provider hanging around here... Stefan -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473
Stefan Winter wrote:
The github && Facebook logins will work, so it should be *much* easier for people to contribute to the Wiki.
Ah! Federated login! Any plans to add OpenID? I have this nice OpenID provider hanging around here...
Sure... but we have hard-code the URL, and register the app. That takes ~10 min, but it needs to be done. Alan DeKok.
Hi,
Sure... but we have hard-code the URL, and register the app.
That takes ~10 min, but it needs to be done.
OpenID is different from OAuth (or SAML): it is completely self-asserted. If you enable OpenID on your resource, the user is asked "Which URL can authenticate you" - user enters it, gets redirected there, and comes back with some token when done. So, my identity on OpenID is for example https://clueless.restena.lu/swinter - and that's the input I provide. The concept is kind of cute, but some people are scared by the self-assertedness of identity. Stefan
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473
Stefan Winter wrote:
The concept is kind of cute, but some people are scared by the self-assertedness of identity.
Ah, yes. I'd rather avoid that, quite frankly. While I dislike the "facebook everywhere" integration, there are multiple alternatives. github, twitter, etc. And using those guys to filter out spammers is wonderful. Using self-assertions of identity means that anyone can edit the pages. Here "anyone" means "spammer". :( Alan DeKok.
On 27/05/11 12:30, Alan DeKok wrote:
The github&& Facebook logins will work, so it should be *much* easier for people to contribute to the Wiki.
Are there any plans to let google accounts login - I happen to have a github account now, but since Google have tentacles everywhere... ;o)
On Fri, May 27, 2011 at 6:30 PM, Alan DeKok <aland@deployingradius.com> wrote:
Arran Cudbard-Bell wrote:
Unfortunately the new wiki isn't ready from primetime. The mediawiki page format renderer in gollum isn't perfect, so we need to convert those pages to RST as a priority.
In order to encourage people to contribute, we've made the new wiki "live" on http://wiki.freeradius.org. Please bear with us for a day or two while we get some of the kinks worked out.
... like http://wiki.freeradius.org/FAQ , which worked fine just a few minutes ago but now showing Grit::GitRuby::Internal::LooseObjectError at /FAQ size mismatch file: loose.rb location: get_raw_object line: 59 Where would the correct place to report these types of error be? This list, or directly to you or Arran? -- Fajar
Fajar A. Nugraha wrote:
... like http://wiki.freeradius.org/FAQ , which worked fine just a few minutes ago but now showing
Argh. Fixed. This means that some of the changes have been reverted. Arran is working adding them back. Alan DeKok.
On May 27, 2011, at 9:30 AM, Alan DeKok wrote:
Fajar A. Nugraha wrote:
... like http://wiki.freeradius.org/FAQ , which worked fine just a few minutes ago but now showing
Argh. Fixed.
This means that some of the changes have been reverted. Arran is working adding them back.
Alan is also going to add a cron job to push the repository up to another remote server to make sure we don't loose too much information if this happens again. -Arran Arran Cudbard-Bell RM-RF Limited - Security consultation and contracting VoIP: +1 916-436-1352 Cell: +44 7854041841
On May 27, 2011, at 8:57 AM, Fajar A. Nugraha wrote:
On Fri, May 27, 2011 at 6:30 PM, Alan DeKok <aland@deployingradius.com> wrote:
Arran Cudbard-Bell wrote:
Unfortunately the new wiki isn't ready from primetime. The mediawiki page format renderer in gollum isn't perfect, so we need to convert those pages to RST as a priority.
In order to encourage people to contribute, we've made the new wiki "live" on http://wiki.freeradius.org. Please bear with us for a day or two while we get some of the kinks worked out.
... like http://wiki.freeradius.org/FAQ , which worked fine just a few minutes ago but now showing
Grit::GitRuby::Internal::LooseObjectError at /FAQ size mismatch file: loose.rb location: get_raw_object line: 59
Where would the correct place to report these types of error be? This list, or directly to you or Arran?
Me or Alan, then if we don't respond the list. I've had to restore the original FAQ page, the git version was completely hosed, no idea why. If you still have a copy of the changes locally, please re-submit them. Apologies, Arran Arran Cudbard-Bell RM-RF Limited - Security consultation and contracting VoIP: +1 916-436-1352 Cell: +44 7854041841
participants (6)
-
Alan DeKok -
Arran Cudbard-Bell -
Fajar A. Nugraha -
Johan Meiring -
Phil Mayers -
Stefan Winter