FreeRADIUS 1.0.5 has been released
See www.freeradius.org for download information. This version has a LOT of fixes over 1.0.4, including security fixes. We suggest everyone upgrade to 1.0.4. Alan DeKok.
Hi, " We suggest everyone upgrade to 1.0.4." << shouldn't it be 1.0.5? Regards, Edvin Seferovic PS: Im glad to have a new piece of software to test :D -----Original Message----- From: freeradius-users-bounces@lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Mittwoch, 14. September 2005 02:03 To: freeradius-users@lists.freeradius.org Subject: FreeRADIUS 1.0.5 has been released See www.freeradius.org for download information. This version has a LOT of fixes over 1.0.4, including security fixes. We suggest everyone upgrade to 1.0.4. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 9/13/05, Alan DeKok <aland@ox.org> wrote:
See www.freeradius.org for download information.
This version has a LOT of fixes over 1.0.4, including security fixes. We suggest everyone upgrade to 1.0.4.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Excellent! Keep up the good stuff coming :) -- Nick Hall Alexssa Enterprises p: 262.338.3742 m: 262.208.6271 Never lose your data! Try it free at www.neverlosedata.com.
Alan DeKok wrote:
See www.freeradius.org for download information.
This version has a LOT of fixes over 1.0.4, including security fixes. We suggest everyone upgrade to 1.0.4.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Does version 1.0.5 address/resolve the issues with EAP/LEAP authentication when using FreeRadius with Cisco wireless gear ? i.e. Cisco's WLSE and wireless access points. -- Mike McNeil Sr. Network Engineer University of California Berkeley Ph: 510-643-4656
"M.McNeil" <mmcneil@berkeley.edu> wrote:
Does version 1.0.5 address/resolve the issues with EAP/LEAP authentication when using FreeRadius with Cisco wireless gear ? i.e. Cisco's WLSE and wireless access points.
No. You still need another patch. That patch breaks LEAP for every other acces point. If there is a way to make FreeRADIUS work *everywhere*, then that patch can be added in. Otherwise, it's not nice to break interoperation with every other access point in order to make one work. Alan DeKok.
OS: FreeBSD4.11 p10 Freeradius: 1.0.5 from 1.0.4 - compilation OK.. but still to patch rlm_rewrite just like 1.0.4 - starting radiusd seems fine - but when trying to authenticate.. then it will core dumped.. as below debug log.. Ready to process requests. rad_recv: Access-Request packet from host 192.228.137.77:34496, id=17, length=46 User-Name = "bacang" User-Password = "xxxxxxxxx" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '/' in User-Name = "bacang", skipping NULL due to config. modcall[authorize]: module "IPASS" returns noop for request 0 rlm_realm: No '@' in User-Name = "bacang", looking up realm NULL rlm_realm: Found realm "NULL" rlm_realm: Adding Stripped-User-Name = "bacang" rlm_realm: Proxying request from user bacang to realm NULL rlm_realm: Adding Realm = "NULL" rlm_realm: Authentication realm is LOCAL. modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched entry DEFAULT at line 102 modcall[authorize]: module "files" returns ok for request 0 modcall: group authorize returns ok for request 0 Processing the authorize section of radiusd.conf modcall: entering group Autz-Type for request 0 modcall: entering group redundant for request 0 rlm_ldap: - authorize rlm_ldap: performing user authorization for LDAP radius_xlat: '(uid=bacang)' radius_xlat: 'ou=RADIUS,ou=People,dc=jaring,dc=my' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to 127.0.0.1:389, authentication 0 rlm_ldap: bind as cn=Sysadmin,ou=Applications,dc=jaring,dc=my/kh4l1f4h to 127.0.0.1:389 rlm_ldap: waiting for bind result ... rlm_ldap: Bind was successful rlm_ldap: performing search in ou=RADIUS,ou=People,dc=jaring,dc=my, with filter (uid=bacang) Bus error (core dumped) ###################################################### ----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Wednesday, September 14, 2005 23:29 Subject: Re: FreeRADIUS 1.0.5 has been released
"M.McNeil" <mmcneil@berkeley.edu> wrote:
Does version 1.0.5 address/resolve the issues with EAP/LEAP authentication when using FreeRadius with Cisco wireless gear ? i.e. Cisco's WLSE and wireless access points.
No. You still need another patch. That patch breaks LEAP for every other acces point.
If there is a way to make FreeRADIUS work *everywhere*, then that patch can be added in. Otherwise, it's not nice to break interoperation with every other access point in order to make one work.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Rohaizam Abu Bakar wrote:
OS: FreeBSD4.11 p10 Freeradius: 1.0.5 from 1.0.4
- compilation OK.. but still to patch rlm_rewrite just like 1.0.4 - starting radiusd seems fine - but when trying to authenticate.. then it will core dumped.. as below debug log..
Please post the backtrace from gdb. The following link explains how to do that. http://www.freeradius.org/radiusd/doc/bugs -- Nicolas Baradakis
Hi, I set up freeradius with eap-tls and after I generated my certificates with TinnyCA and configured it in eap.conf File I get this error message...Does anyone knows what causes this error? Thanks Armin debian:~# freeradius -X -A Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/freeradius/proxy.conf Config: including file: /etc/freeradius/clients.conf Config: including file: /etc/freeradius/snmp.conf Config: including file: /etc/freeradius/eap.conf Config: including file: /etc/freeradius/sql.conf main: prefix = "/usr" main: localstatedir = "/var" main: logdir = "/var/log/freeradius" main: libdir = "/usr/lib/freeradius" main: radacctdir = "/var/log/freeradius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/var/log/freeradius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/var/run/freeradius/freeradius.pid" main: user = "freerad" main: group = "freerad" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = yes proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/lib/freeradius Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: authtype = "MS-CHAP" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "/etc/shadow" unix: group = "(null)" unix: radwtmp = "/var/log/freeradius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "tls" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc tls: rsa_key_exchange = no tls: dh_key_exchange = yes tls: rsa_key_length = 512 tls: dh_key_length = 512 tls: verify_depth = 0 tls: CA_path = "(null)" tls: pem_file_type = yes tls: private_key_file = "/etc/freeradius/certs/cert-srv.pem" tls: certificate_file = "/etc/freeradius/certs/cert-srv.pem" tls: CA_file = "/etc/freeradius/certs/cacert.pem" tls: private_key_password = "test" tls: dh_file = "/etc/freeradius/certs/dh" tls: random_file = "/etc/freeradius/certs/random" tls: fragment_size = 1024 tls: include_length = yes tls: check_crl = no tls: check_cert_cn = "(null)" 12077:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:637:Expecting: CERTIFICATE 12077:error:06065064:digital envelope routines:EVP_DecryptFinal:bad decrypt:evp_enc.c:450: 12077:error:0906A065:PEM routines:PEM_do_header:bad decrypt:pem_lib.c:423: 12077:error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM lib:ssl_rsa.c:709: rlm_eap_tls: Error reading private key file rlm_eap: Failed to initialize type tls radiusd.conf[9]: eap: Module instantiation failed.
OS: FreeBSD 4.11p10 FR: 1.0.5 As requested.. bash-2.05b# gdb /usr/local/sbin/radiusd /usr/local/etc/raddb/radiusd.core GNU gdb 4.18 (FreeBSD) Copyright 1998 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-unknown-freebsd"...Deprecated bfd_read called at /usr/src/gnu/usr.bin/binutils/gdb/../../../../contrib/gdb/gdb/dbxread.c line 2627 in elfstab_build_psymtabs Deprecated bfd_read called at /usr/src/gnu/usr.bin/binutils/gdb/../../../../contrib/gdb/gdb/dbxread.c line 933 in fill_symbuf Core was generated by `radiusd'. Program terminated with signal 10, Bus error. Reading symbols from /usr/lib/libcrypt.so.2...done. Reading symbols from /usr/lib/libcipher.so.2...done. Reading symbols from /usr/local/lib/libradius-1.0.5.so...done. Reading symbols from /usr/local/lib/libltdl.so.4...done. Reading symbols from /usr/local/lib/libssl.so.3...done. Reading symbols from /usr/local/lib/libcrypto.so.3...done. Reading symbols from /usr/lib/libc_r.so.4...done. Reading symbols from /usr/lib/libc.so.4...done. Reading symbols from /usr/lib/libssl.so.3...done. Reading symbols from /usr/lib/libcrypto.so.3...done. Reading symbols from /usr/local/lib/rlm_exec-1.0.5.so...done. Reading symbols from /usr/local/lib/rlm_expr-1.0.5.so...done. Reading symbols from /usr/local/lib/rlm_pap-1.0.5.so...done. Reading symbols from /usr/local/lib/rlm_chap-1.0.5.so...done. Reading symbols from /usr/local/lib/rlm_mschap-1.0.5.so...done. Reading symbols from /usr/local/lib/rlm_unix-1.0.5.so...done. Reading symbols from /usr/local/lib/liblber.so...done. Reading symbols from /usr/local/lib/rlm_ldap-1.0.4.so...done. Reading symbols from /usr/local/lib/libldap_r.so.2...done. Reading symbols from /usr/lib/libssl.so.2...done. Reading symbols from /usr/lib/libcrypto.so.2...done. Reading symbols from /usr/local/lib/libeap-1.0.5.so...done. Reading symbols from /usr/local/lib/rlm_eap-1.0.5.so...done. Reading symbols from /usr/local/lib/rlm_eap_md5-1.0.5.so...done. Reading symbols from /usr/local/lib/rlm_eap_leap-1.0.5.so...done. Reading symbols from /usr/local/lib/rlm_eap_gtc-1.0.5.so...done. Reading symbols from /usr/local/lib/rlm_eap_mschapv2-1.0.5.so...done. Reading symbols from /usr/local/lib/rlm_preprocess-1.0.5.so...done. Reading symbols from /usr/local/lib/rlm_realm-1.0.5.so...done. Reading symbols from /usr/local/lib/rlm_files-1.0.5.so...done. Reading symbols from /usr/local/lib/rlm_acct_unique-1.0.5.so...done. Reading symbols from /usr/local/lib/rlm_detail-1.0.5.so...done. Reading symbols from /usr/local/lib/rlm_radutmp-1.0.5.so...done. Reading symbols from /usr/local/lib/rlm_sql-1.0.5.so...done. Reading symbols from /usr/lib/libz.so...done. Reading symbols from /usr/lib/libm.so...done. ---Type <return> to continue, or q <return> to quit--- Reading symbols from /usr/local/lib/mysql/libmysqlclient.so...done. Reading symbols from /usr/local/lib/rlm_sql_mysql-1.0.5.so...done. Reading symbols from /usr/libexec/ld-elf.so.1...done. #0 pairadd (first=0xdeadbf27, add=0x81c8c00) at valuepair.c:172 172 if (*first == NULL) { (gdb) bt #0 pairadd (first=0xdeadbf27, add=0x81c8c00) at valuepair.c:172 #1 0x2847db1c in ldap_authorize (instance=0x8096600, request=0x819de00) at rlm_ldap.c:1243 #2 0x8054e91 in call_modsingle (component=1, sp=0x818ecc0, request=0x819de00, default_result=6) at modcall.c:219 #3 0x8055088 in modcall (component=1, c=0x818ecc0, request=0x819de00) at modcall.c:344 #4 0x8054f4f in call_modgroup (component=1, g=0x818ec80, request=0x819de00, default_result=6) at modcall.c:252 #5 0x8055031 in modcall (component=1, c=0x818ec80, request=0x819de00) at modcall.c:335 #6 0x8054f4f in call_modgroup (component=1, g=0x818e980, request=0x819de00, default_result=6) at modcall.c:252 #7 0x8055031 in modcall (component=1, c=0x818e980, request=0x819de00) at modcall.c:335 #8 0x8054426 in indexed_modcall (comp=1, idx=0, request=0x819de00) at modules.c:469 #9 0x8054b16 in module_authorize (autz_type=0, request=0x819de00) at modules.c:883 #10 0x8051c23 in rad_authenticate (request=0x819de00) at auth.c:592 #11 0x804d25c in rad_respond (request=0x819de00, fun=0x8051ac4 <rad_authenticate>) at radiusd.c:1642 #12 0x804cfa6 in main (argc=4, argv=0xbfbffbe4) at radiusd.c:1427 ----- Original Message ----- From: "Nicolas Baradakis" <nbk@sitadelle.com> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Thursday, September 15, 2005 22:11 Subject: Re: Bus error - core dumped on freeradius 1.0.5
Rohaizam Abu Bakar wrote:
OS: FreeBSD4.11 p10 Freeradius: 1.0.5 from 1.0.4
- compilation OK.. but still to patch rlm_rewrite just like 1.0.4 - starting radiusd seems fine - but when trying to authenticate.. then it will core dumped.. as below debug log..
Please post the backtrace from gdb. The following link explains how to do that.
http://www.freeradius.org/radiusd/doc/bugs
-- Nicolas Baradakis
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
"Rohaizam Abu Bakar" <haizam@myjaring.net> wrote:
#0 pairadd (first=0xdeadbf27, add=0x81c8c00) at valuepair.c:172 172 if (*first == NULL) {
The value of first is suspicious. It looks like it's from explicitely uninitialized memory.
#1 0x2847db1c in ldap_authorize (instance=0x8096600, request=0x819de00) at rlm_ldap.c:1243
Are you using 1.0.5? The code isn't at that line number in my version of 1.0.5. Alan DeKok.
Yes.. version 1.0.5.. previous version of 1.0.4 working fine... --haizam ----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, September 20, 2005 01:29 Subject: Re: Bus error - core dumped on freeradius 1.0.5
"Rohaizam Abu Bakar" <haizam@myjaring.net> wrote:
#0 pairadd (first=0xdeadbf27, add=0x81c8c00) at valuepair.c:172 172 if (*first == NULL) {
The value of first is suspicious. It looks like it's from explicitely uninitialized memory.
#1 0x2847db1c in ldap_authorize (instance=0x8096600, request=0x819de00) at rlm_ldap.c:1243
Are you using 1.0.5? The code isn't at that line number in my version of 1.0.5.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
testing in one of my FreeBSD 5.3 machine... 1.0.5 seems working with same configuration as below tested in FreeBSD 4.11 So seems the problem happen only to FreeBSD 4.X.. not to all FreeBSD.. --haizam ----- Original Message ----- From: "Rohaizam Abu Bakar" <haizam@myjaring.net> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, September 20, 2005 08:48 Subject: Re: Bus error - core dumped on freeradius 1.0.5
Yes.. version 1.0.5.. previous version of 1.0.4 working fine...
--haizam
----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, September 20, 2005 01:29 Subject: Re: Bus error - core dumped on freeradius 1.0.5
"Rohaizam Abu Bakar" <haizam@myjaring.net> wrote:
#0 pairadd (first=0xdeadbf27, add=0x81c8c00) at valuepair.c:172 172 if (*first == NULL) {
The value of first is suspicious. It looks like it's from explicitely uninitialized memory.
#1 0x2847db1c in ldap_authorize (instance=0x8096600, request=0x819de00) at rlm_ldap.c:1243
Are you using 1.0.5? The code isn't at that line number in my version of 1.0.5.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
So.. do i need to upgrade to 5.X in order to use FR 1.0.5 ?? --haizam ----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Friday, September 23, 2005 02:29 Subject: Re: Bus error - core dumped on freeradius 1.0.5
"Rohaizam Abu Bakar" <haizam@myjaring.net> wrote:
So seems the problem happen only to FreeBSD 4.X.. not to all FreeBSD..
Sounds to me like a problem with FreeBSD.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
"Rohaizam Abu Bakar" <haizam@myjaring.net> wrote:
So.. do i need to upgrade to 5.X in order to use FR 1.0.5 ??
For MySQL, perhaps. Or, find out what's causing the problem in FreeBSD 4.x, and fix it. It doesn't happen on other platforms, so I suspect it's an issue specific to FreeBSD 4.x. Alan DeKok.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 segmentation fault when rlm_sql_mysql is enabled (bug 271), happens both in FreeBSD 4.X and FreeBSD 5.X. - ----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, September 27, 2005 12:08 AM Subject: Re: Bus error - core dumped on freeradius 1.0.5
"Rohaizam Abu Bakar" <haizam@myjaring.net> wrote:
So.. do i need to upgrade to 5.X in order to use FR 1.0.5 ??
For MySQL, perhaps.
Or, find out what's causing the problem in FreeBSD 4.x, and fix it.
It doesn't happen on other platforms, so I suspect it's an issue specific to FreeBSD 4.x.
Alan DeKok.
-----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.0.1 (Build 2185) iQA/AwUBQzl9qyQekFb/3FIhEQKgzwCg+3Jo9bcaimtcDoPlVKv+nsDM914AnRda BGC7la0ap0NZH0M3Vq8pig7V =OAoc -----END PGP SIGNATURE-----
I just installed freeradius 1.0.5 on freebsd 5.4 and I am not having problems with rlm_sql_mysql. I just started it up and used it for testing an accounting packet. I haven't tried authentication, but I don't think that should matter. How did you build it? Since the port is still on 1.0.4, I'm assuming it was from source? Here is what I did. First I installed mysql. I use the port in /usr/ports/databases/mysql41-server. Then I installed freeradius from /usr/ports/net/freeradius first to get all the dependancies. These include libtool, gmake, gdbm, libltdl. Then I did a make deinstall on that port and build freeradius from source using only ./configure --prefix. On Tue, 27 Sep 2005, Richard Cotrina wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
segmentation fault when rlm_sql_mysql is enabled (bug 271), happens both in FreeBSD 4.X and FreeBSD 5.X.
- ----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, September 27, 2005 12:08 AM Subject: Re: Bus error - core dumped on freeradius 1.0.5
"Rohaizam Abu Bakar" <haizam@myjaring.net> wrote:
So.. do i need to upgrade to 5.X in order to use FR 1.0.5 ??
For MySQL, perhaps.
Or, find out what's causing the problem in FreeBSD 4.x, and fix it.
It doesn't happen on other platforms, so I suspect it's an issue specific to FreeBSD 4.x.
Alan DeKok.
-----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.0.1 (Build 2185)
iQA/AwUBQzl9qyQekFb/3FIhEQKgzwCg+3Jo9bcaimtcDoPlVKv+nsDM914AnRda BGC7la0ap0NZH0M3Vq8pig7V =OAoc -----END PGP SIGNATURE----- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Have you enabled rlm_sql_mysql in radiusd.conf and sql.conf ? How your config files look like ? If rlm_sql_mysql is not enabled, freeradius daemon works without problem for me. - ----- Original Message ----- From: "Dusty Doris" <freeradius@mail.doris.cc> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, September 27, 2005 12:44 PM Subject: Re: Bus error - core dumped on freeradius 1.0.5
I just installed freeradius 1.0.5 on freebsd 5.4 and I am not having problems with rlm_sql_mysql. I just started it up and used it for testing an accounting packet. I haven't tried authentication, but I don't think that should matter.
How did you build it? Since the port is still on 1.0.4, I'm assuming it was from source?
Here is what I did. First I installed mysql. I use the port in /usr/ports/databases/mysql41-server. Then I installed freeradius from /usr/ports/net/freeradius first to get all the dependancies. These include libtool, gmake, gdbm, libltdl. Then I did a make deinstall on that port and build freeradius from source using only ./configure --prefix.
On Tue, 27 Sep 2005, Richard Cotrina wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
segmentation fault when rlm_sql_mysql is enabled (bug 271), happens both in FreeBSD 4.X and FreeBSD 5.X.
- ----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, September 27, 2005 12:08 AM Subject: Re: Bus error - core dumped on freeradius 1.0.5
"Rohaizam Abu Bakar" <haizam@myjaring.net> wrote:
So.. do i need to upgrade to 5.X in order to use FR 1.0.5 ??
For MySQL, perhaps.
Or, find out what's causing the problem in FreeBSD 4.x, and fix it.
It doesn't happen on other platforms, so I suspect it's an issue specific to FreeBSD 4.x.
Alan DeKok.
-----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.0.1 (Build 2185) iQA/AwUBQzmKjSQekFb/3FIhEQIkxwCeJQFEu1qYBV3ttdru/1pVj/axGusAnjLk xjHBg+h+EwPoEvsAroNz+n3W =Eb35 -----END PGP SIGNATURE-----
Yep. FreeBSD 5.4-RELEASE-p7 /usr/local/freeradius105/sbin/radiusd -v radiusd: FreeRADIUS Version 1.0.5, for host , built on Sep 27 2005 at 11:31:35 clip from startup and handling a packet. The config file is very stripped down right now. I'll fire one up later today with the default setup to see if that works too. --------- rlm_sql (sql): Connected new DB handle, #3 rlm_sql (sql): starting 4 rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (sql): Connected new DB handle, #4 Module: Instantiated sql (sql) Listening on accounting *:1813 Ready to process requests. rad_recv: Accounting-Request packet from host 127.0.0.1:54936, id=90, length=32 User-Name = "test" Acct-Status-Type = Start Processing the preacct section of radiusd.conf modcall: entering group preacct for request 0 rlm_acct_unique: WARNING: Attribute NAS-Port was not found in request, unique ID MAY be inconsistent rlm_acct_unique: WARNING: Attribute Client-IP-Address was not found in request, unique ID MAY be inconsistent rlm_acct_unique: WARNING: Attribute NAS-IP-Address was not found in request, uni que ID MAY be inconsistent rlm_acct_unique: WARNING: Attribute Acct-Session-Id was not found in request, un ique ID MAY be inconsistent rlm_acct_unique: Hashing ',,,,User-Name = "test"' rlm_acct_unique: Acct-Unique-Session-ID = "c62495cf388d0bb3". modcall[preacct]: module "acct_unique" returns ok for request 0 modcall[preacct]: module "files" returns noop for request 0 modcall: group preacct returns ok for request 0 Processing the accounting section of radiusd.conf modcall: entering group accounting for request 0 radius_xlat: 'test' rlm_sql (sql): sql_set_user escaped user --> 'test' radius_xlat: 'INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm , NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSession Time, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctO utputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values('', 'c62 495cf388d0bb3', 'test', '', '', '', '', '2005-09-27 14:33:54', '0', '0', '', '', '', '0', '0', '', '', '', '', '', '', '', '0')' rlm_sql (sql): Reserving sql socket id: 4 rlm_sql (sql): Released sql socket id: 4 modcall[accounting]: module "sql" returns ok for request 0 modcall: group accounting returns ok for request 0 Sending Accounting-Response of id 90 to 127.0.0.1:54936 Finished request 0 Going to the next request --- Walking the entire request list --- Cleaning up request 0 ID 90 with timestamp 43399092 Nothing to do. Sleeping until we see a request. On Tue, 27 Sep 2005, Richard Cotrina wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Have you enabled rlm_sql_mysql in radiusd.conf and sql.conf ? How your config files look like ?
If rlm_sql_mysql is not enabled, freeradius daemon works without problem for me.
- ----- Original Message ----- From: "Dusty Doris" <freeradius@mail.doris.cc> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, September 27, 2005 12:44 PM Subject: Re: Bus error - core dumped on freeradius 1.0.5
I just installed freeradius 1.0.5 on freebsd 5.4 and I am not having problems with rlm_sql_mysql. I just started it up and used it for testing an accounting packet. I haven't tried authentication, but I don't think that should matter.
How did you build it? Since the port is still on 1.0.4, I'm assuming it was from source?
Here is what I did. First I installed mysql. I use the port in /usr/ports/databases/mysql41-server. Then I installed freeradius from /usr/ports/net/freeradius first to get all the dependancies. These include libtool, gmake, gdbm, libltdl. Then I did a make deinstall on that port and build freeradius from source using only ./configure --prefix.
On Tue, 27 Sep 2005, Richard Cotrina wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
segmentation fault when rlm_sql_mysql is enabled (bug 271), happens both in FreeBSD 4.X and FreeBSD 5.X.
- ----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, September 27, 2005 12:08 AM Subject: Re: Bus error - core dumped on freeradius 1.0.5
"Rohaizam Abu Bakar" <haizam@myjaring.net> wrote:
So.. do i need to upgrade to 5.X in order to use FR 1.0.5 ??
For MySQL, perhaps.
Or, find out what's causing the problem in FreeBSD 4.x, and fix it.
It doesn't happen on other platforms, so I suspect it's an issue specific to FreeBSD 4.x.
Alan DeKok.
-----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.0.1 (Build 2185)
iQA/AwUBQzmKjSQekFb/3FIhEQIkxwCeJQFEu1qYBV3ttdru/1pVj/axGusAnjLk xjHBg+h+EwPoEvsAroNz+n3W =Eb35 -----END PGP SIGNATURE----- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Forgot to follow-up. I moved all my configurations out and loaded up all the original unmodified files in my raddb dir. I only modified sql.conf and changed the username/password to the sql table. Everything else was left as is - out of the box. It all worked fine. Freeradius started up using the mysql module and I was able to send accounting packets and auth packets to it.
Have you enabled rlm_sql_mysql in radiusd.conf and sql.conf ? How your config files look like ?
If rlm_sql_mysql is not enabled, freeradius daemon works without problem for me.
- ----- Original Message ----- From: "Dusty Doris" <freeradius@mail.doris.cc> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, September 27, 2005 12:44 PM Subject: Re: Bus error - core dumped on freeradius 1.0.5
I just installed freeradius 1.0.5 on freebsd 5.4 and I am not having problems with rlm_sql_mysql. I just started it up and used it for testing an accounting packet. I haven't tried authentication, but I don't think that should matter.
How did you build it? Since the port is still on 1.0.4, I'm assuming it was from source?
Here is what I did. First I installed mysql. I use the port in /usr/ports/databases/mysql41-server. Then I installed freeradius from /usr/ports/net/freeradius first to get all the dependancies. These include libtool, gmake, gdbm, libltdl. Then I did a make deinstall on that port and build freeradius from source using only ./configure --prefix.
On Tue, 27 Sep 2005, Richard Cotrina wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
segmentation fault when rlm_sql_mysql is enabled (bug 271), happens both in FreeBSD 4.X and FreeBSD 5.X.
- ----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, September 27, 2005 12:08 AM Subject: Re: Bus error - core dumped on freeradius 1.0.5
"Rohaizam Abu Bakar" <haizam@myjaring.net> wrote:
So.. do i need to upgrade to 5.X in order to use FR 1.0.5 ??
For MySQL, perhaps.
Or, find out what's causing the problem in FreeBSD 4.x, and fix it.
It doesn't happen on other platforms, so I suspect it's an issue specific to FreeBSD 4.x.
Alan DeKok.
-----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.0.1 (Build 2185)
iQA/AwUBQzmKjSQekFb/3FIhEQIkxwCeJQFEu1qYBV3ttdru/1pVj/axGusAnjLk xjHBg+h+EwPoEvsAroNz+n3W =Eb35 -----END PGP SIGNATURE----- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 It sounds strange because the unmodified radiusd.conf does not have authentication, authorization or accounting enabled for sql. I followed your instructions, and rlm_sql_mysql is not started because it has not enabled in radiusd.conf. How is your working radiusd.conf looks like in the following sections : - - authorize - - authenticate - - preacct - - accounting - - session I took the config directives from : http://www.frontios.com/freeradius.html and I still get segfaults. ( I have built freeradius 1.0.5 from source / FreeBSD 5.4-RELEASE-p6 ) Best Regards. - ----- Original Message ----- From: "Dusty Doris" <freeradius@mail.doris.cc> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Wednesday, September 28, 2005 8:12 AM Subject: Re: Bus error - core dumped on freeradius 1.0.5
Forgot to follow-up.
I moved all my configurations out and loaded up all the original unmodified files in my raddb dir. I only modified sql.conf and changed the username/password to the sql table. Everything else was left as is - out of the box. It all worked fine. Freeradius started up using the mysql module and I was able to send accounting packets and auth packets to it.
-----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.0.1 (Build 2185) iQA/AwUBQzre9yQekFb/3FIhEQL/qgCg0G4hjV/6aeneJU+FGbB39PoBgQsAoMu0 Idl4+td+ln6X8ImgKAM0k+f7 =oxc1 -----END PGP SIGNATURE-----
It sounds strange because the unmodified radiusd.conf does not have authentication, authorization or accounting enabled for sql. I followed your instructions, and rlm_sql_mysql is not started because it has not enabled in radiusd.conf.
Hmmm, maybe I didn't copy the right files over. I'll do it again. and post my configs as well.
It sounds strange because the unmodified radiusd.conf does not have authentication, authorization or accounting enabled for sql. I followed your instructions, and rlm_sql_mysql is not started because it has not enabled in radiusd.conf.
You're correct. I copied files I thought were an original, but had already been modified.
How is your working radiusd.conf looks like in the following sections :
- - authorize - - authenticate - - preacct - - accounting - - session
This time I did copy the original files over to raddb dir. I then modified sql.conf and changed the username/password to match my user. I then opened radiusd.conf and uncommented every instance of sql. Then I fired it up and it started fine and made the 5 sql connections. No need for me to post the configs because they are exactly the same as out of the box, except that I uncommented sql in authorize, accounting, session, and post-auth. I have no idea what could be wrong at this point. What version of mysql are you running? Can you start mysql and query it from the command line?
and I still get segfaults. ( I have built freeradius 1.0.5 from source / FreeBSD 5.4-RELEASE-p6 )
Just in case this helps at all, here is my pkg_info and uname -a. # pkg_info bash-3.0.16_1 The GNU Project's Bourne Again SHell cvsup-without-gui-16.1h_2 General network file distribution system optimized for CVS gdbm-1.8.3_1 The GNU database manager gettext-0.14.5 GNU gettext package gmake-3.80_2 GNU version of 'make' utility libiconv-1.9.2_1 A character set conversion library libltdl-1.5.20 System independent dlopen wrapper libtool-1.3.5_2 Generic shared library support script (1.3) libtool-1.5.20 Generic shared library support script (1.5) mysql-client-4.1.14 Multithreaded SQL database (client) mysql-server-4.1.14 Multithreaded SQL database (server) openssh-portable-4.2.0.0,1 The portable version of OpenBSD's OpenSSH perl-5.8.6_2 Practical Extraction and Report Language # uname -a FreeBSD radacctm.lab.soc.int 5.4-RELEASE-p7 FreeBSD 5.4-RELEASE-p7 #0: Tue Sep 27 14:14:11 EDT 2005 root@radacctm.lab.soc.int:/usr/obj/usr/src/sys/carp i386
"Richard Cotrina" <rcc@speedy.net.pe> wrote:
segmentation fault when rlm_sql_mysql is enabled (bug 271), happens both in FreeBSD 4.X and FreeBSD 5.X.
From a *clean* build? The fix I added should work. Check that no other version of FreeRADIUS is installed, AND that you're using 1.0.5. Alan DeKok.
Dear all, anyone having similar problem... when using 1.0.5 with FB 4.11 ?? Any finding on this.? I'm still having problem upgrading... on my 4.11 machine.. thanks.. --haizam ----- Original Message ----- From: "Rohaizam Abu Bakar" <haizam@myjaring.net> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, September 20, 2005 08:48 Subject: Re: Bus error - core dumped on freeradius 1.0.5
Yes.. version 1.0.5.. previous version of 1.0.4 working fine...
--haizam
----- Original Message ----- From: "Alan DeKok" <aland@ox.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, September 20, 2005 01:29 Subject: Re: Bus error - core dumped on freeradius 1.0.5
"Rohaizam Abu Bakar" <haizam@myjaring.net> wrote:
#0 pairadd (first=0xdeadbf27, add=0x81c8c00) at valuepair.c:172 172 if (*first == NULL) {
The value of first is suspicious. It looks like it's from explicitely uninitialized memory.
#1 0x2847db1c in ldap_authorize (instance=0x8096600, request=0x819de00) at rlm_ldap.c:1243
Are you using 1.0.5? The code isn't at that line number in my version of 1.0.5.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (9)
-
Alan DeKok -
Armin Krämer -
Dusty Doris -
M.McNeil -
Nicholas Hall -
Nicolas Baradakis -
Richard Cotrina -
Rohaizam Abu Bakar -
Seferovic Edvin