dumb humble question about sqlippool
Hi, I know you guys must be angry with all the questions I'm posting here. In Devel-List, I found this: "Is it usefull to community? (SQLIPPOOL and NASCATS)" by Roman M. Bibikov on Thu, 16 Oct 2003 17:36:26 +1100. He says that created a sucessfull ip pool in Oracle (exactly what I'm trying to do) and also that developed stored functions and procedures handling in rlm_oracle (sql_runfunction() and sql_runprocedure()) I didn't found out those functions and I'm wondering if it's because of this that I can't make sqlippool work in oracle... Thanks in advance
On Wed 27 Sep 2006 16:41, Guilherme Franco wrote:
Hi,
I know you guys must be angry with all the questions I'm posting here.
In Devel-List, I found this: "Is it usefull to community? (SQLIPPOOL and NASCATS)" by Roman M. Bibikov on Thu, 16 Oct 2003 17:36:26 +1100.
He says that created a sucessfull ip pool in Oracle (exactly what I'm trying to do) and also that developed stored functions and procedures handling in rlm_oracle (sql_runfunction() and sql_runprocedure())
I didn't found out those functions and I'm wondering if it's because of this that I can't make sqlippool work in oracle...
Hi Guilherme We are not angry. We are however busy, and have limited time. Any posts you see about sqlippool prior to August 2006 do not directly relate to the sqlippool module that is in FreeRADIUS 1.1.3 (Although it may share some code.. There have been several different modules available on the net called sqlippool prior to the one that is now available as part of FreeRADIUS) The code in CVS head has been modified even futher (as you know). sqlippool is an EXPERIMENTAL module which is why it is not enabled by default. It is currently tested ONLY on Postgresql. There are currently no _known_ production deployments of (our) sqlippool on Oracle although we are happy that you are testing it and appreciate your feedback. Currently you are writing many emails to the list with "CRITICAL/URGENT etc" in the subject in relation to sqlippool and you are clearly trying to deploy it for production use. I have very clearly told you previously these issues and you KNOW that it is an experimental module!! We are trying to help you as much as we can, but we expect you to also be prepared to do testing and possibly some development yourself, otherwise please dont use EXPERIMENTAL modules, especially not in production! If you wish to have my company (Suntel Communications) develop, test and support this module for/on an Oracle version of your choice then we would be happy to do so for a fee (which we can discuss offlist without bothering everyone else) otherwise you will have to make do with the (free) support we are providing to you and everyone else via this mailing list in our spare time. Alternatively there is a list of other companies/people who would also be happy to provide you support at http://www.freeradius.org/business/ Regards -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
Thank you very much for your kindness. I'm sorry, again, for posting too much questions about this. It's correct that I'm trying to put this in production as this is the only module that does not worked for me. I'm happy with dialup_admin, AAA and everything else in Oracle! The only missing thing is sqlippool :( I know that it is an experimental module and I also have limited time to work on this module as it's not for me, it's for another company. In the mean time, I'm using regular ippool db in a NFS with just 1 radius active per time (to prevent lockups). That was the only way I've managed to do ippools with 2 servers (is there any alternatives?). As you see I can't abandon oracle, nor install postgre as it would break up some dependencies with other oracle databases that we have. I'm being such a pain for you guys because the sqlippool module is almost working! If I saw that it wouldn't work at all, I would never took the time to work in it as I'm taking now :) I appreciate your concerns and as I'm out of time to deliver the solution to the client, I think I can't try sqlippool anymore. That's a shame because I'm almost there! Now that I've managed to change somethings it's doing all the selects without any errors (that return ie: ip 1.1.1.1 in sqlplus) but it's stating sqlippool_query1: row[0] returned NULL in radiusd -X ( how can it be null if the select was successful? ). It's the only $!*!@! thing that is preventing the user to get an IP!! That kind of things just take time to debug... Besides that, if I don't set pool_name = "name_of_the_pool" in sqlippool.conf, allocate-find tries to select from "ippool" (wich does not exists) instead of the one I've set in radippool table. Other issue is related to multiple pools, one with dynamic IP's and other with fixed ones (actually it's not possible to do that with only just one sqlippool.conf file without modifying rlm_sqlippool.c). Another thing lies in proxy -> if the proxy returns IP 255.255.255.254 for me, sqlippool does not overrides it and do nothing (it doesn't have the override = yes option like ippool). So, to close this out, I would REALLY LIKE to make this work and help you guys as well, but because of lack of time, the only way would do this as an enhancement to the already deployed solution for the client, thanks. Thank you again! On 9/28/06, Peter Nixon <listuser@peternixon.net> wrote:
On Wed 27 Sep 2006 16:41, Guilherme Franco wrote:
Hi,
I know you guys must be angry with all the questions I'm posting here.
In Devel-List, I found this: "Is it usefull to community? (SQLIPPOOL and NASCATS)" by Roman M. Bibikov on Thu, 16 Oct 2003 17:36:26 +1100.
He says that created a sucessfull ip pool in Oracle (exactly what I'm trying to do) and also that developed stored functions and procedures handling in rlm_oracle (sql_runfunction() and sql_runprocedure())
I didn't found out those functions and I'm wondering if it's because of this that I can't make sqlippool work in oracle...
Hi Guilherme
We are not angry. We are however busy, and have limited time.
Any posts you see about sqlippool prior to August 2006 do not directly relate to the sqlippool module that is in FreeRADIUS 1.1.3 (Although it may share some code.. There have been several different modules available on the net called sqlippool prior to the one that is now available as part of FreeRADIUS)
The code in CVS head has been modified even futher (as you know). sqlippool is an EXPERIMENTAL module which is why it is not enabled by default. It is currently tested ONLY on Postgresql. There are currently no _known_ production deployments of (our) sqlippool on Oracle although we are happy that you are testing it and appreciate your feedback.
Currently you are writing many emails to the list with "CRITICAL/URGENT etc" in the subject in relation to sqlippool and you are clearly trying to deploy it for production use. I have very clearly told you previously these issues and you KNOW that it is an experimental module!!
We are trying to help you as much as we can, but we expect you to also be prepared to do testing and possibly some development yourself, otherwise please dont use EXPERIMENTAL modules, especially not in production!
If you wish to have my company (Suntel Communications) develop, test and support this module for/on an Oracle version of your choice then we would be happy to do so for a fee (which we can discuss offlist without bothering everyone else) otherwise you will have to make do with the (free) support we are providing to you and everyone else via this mailing list in our spare time.
Alternatively there is a list of other companies/people who would also be happy to provide you support at http://www.freeradius.org/business/
Regards
--
Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Fri 29 Sep 2006 01:02, Guilherme Franco wrote:
Thank you very much for your kindness.
I'm sorry, again, for posting too much questions about this.
It's correct that I'm trying to put this in production as this is the only module that does not worked for me.
I'm happy with dialup_admin, AAA and everything else in Oracle!
The only missing thing is sqlippool :(
I know that it is an experimental module and I also have limited time to work on this module as it's not for me, it's for another company.
In the mean time, I'm using regular ippool db in a NFS with just 1 radius active per time (to prevent lockups). That was the only way I've managed to do ippools with 2 servers (is there any alternatives?).
As you see I can't abandon oracle, nor install postgre as it would break up some dependencies with other oracle databases that we have.
I'm being such a pain for you guys because the sqlippool module is almost working! If I saw that it wouldn't work at all, I would never took the time to work in it as I'm taking now :)
I appreciate your concerns and as I'm out of time to deliver the solution to the client, I think I can't try sqlippool anymore.
That's a shame because I'm almost there!
Now that I've managed to change somethings it's doing all the selects without any errors (that return ie: ip 1.1.1.1 in sqlplus) but it's stating sqlippool_query1: row[0] returned NULL in radiusd -X ( how can it be null if the select was successful? ). It's the only $!*!@! thing that is preventing the user to get an IP!! That kind of things just take time to debug...
Besides that, if I don't set pool_name = "name_of_the_pool" in sqlippool.conf, allocate-find tries to select from "ippool" (wich does not exists) instead of the one I've set in radippool table.
I would double check this behaviour. It should not select at all if there is no pool-name. NONE of the ippool modules let you set the pool name. You HAVE to set Pool-Name = whatever as a check item!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Other issue is related to multiple pools, one with dynamic IP's and other with fixed ones (actually it's not possible to do that with only just one sqlippool.conf file without modifying rlm_sqlippool.c).
IT IS!!!!!!!!!!!!!!!!!!!!!! Run two copies of the module!
Another thing lies in proxy -> if the proxy returns IP 255.255.255.254 for me, sqlippool does not overrides it and do nothing (it doesn't have the override = yes option like ippool).
This can be added. Although why would you return an IP like that when you dont need to? Just return the Pool-Name and let the module do its job.
So, to close this out, I would REALLY LIKE to make this work and help you guys as well, but because of lack of time, the only way would do this as an enhancement to the already deployed solution for the client, thanks.
Do you have sqlippool working with Postgresql?? it seems to me that you do not quite understand how it works which tells me that you dont have a working installation to compare with. IF YOU DO NOT HAVE A WORKING INSTALLATION OF SQLIPPOOL ON POSTGRESQL DO THAT RIGHT NOW BEFORE DOING ANY MORE TESTING WITH ORACLE!!!!! PLEASE!!! Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
Thanks for all the answers Mr. Peter! To clarify some things:
NONE of the ippool modules let you set the pool name. You HAVE to set Pool-Name = whatever as a check item!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
The radcheck table already have Pool-Name := "whatever" as a attribute, op, value for all users, but that's ok because I can set it manually in sqlippool.conf and the select DOES run in the correct table then (xlat outputs correctly then and I did a network sniff that shows the query is ok).
Other issue is related to multiple pools, one with dynamic IP's and other with fixed ones (actually it's not possible to do that with only just one sqlippool.conf file without modifying rlm_sqlippool.c).
IT IS!!!!!!!!!!!!!!!!!!!!!! Run two copies of the module!
Sorry, i meant that I think that it is not possible without loading 2 or more modules (just with one module and one sqlippool.conf) dumb question, sorry.
Another thing lies in proxy -> if the proxy returns IP 255.255.255.254 for me, sqlippool does not overrides it and do nothing (it doesn't have the override = yes option like ippool).
This can be added. Although why would you return an IP like that when you dont need to? Just return the Pool-Name and let the module do its job.
I didn't think about it, thanks. Besides that I had to remove the BEGIN statement of allocate-begin (and all other begins) because oracle does not need it, and if you need to specify begin, then it needs to be in a different way (through the sniff, I saw that the begin was stated, then 4 "space" chars and then a "/" which is the same as doing "BEGIN; /" in sqlplus, generating "ORA end-of-file errors") Don't know from where that "/" came from thought. To solve this, I had to change "BEGIN" in allocate-begin for "commit" (a normal oracle operation before any query). About the postgresql installation, I was thinking in installing it. I will do that just to see it's behaviour, thanks. THANKS A LOT AGAIN! On 9/29/06, Peter Nixon <listuser@peternixon.net> wrote:
On Fri 29 Sep 2006 01:02, Guilherme Franco wrote:
Thank you very much for your kindness.
I'm sorry, again, for posting too much questions about this.
It's correct that I'm trying to put this in production as this is the only module that does not worked for me.
I'm happy with dialup_admin, AAA and everything else in Oracle!
The only missing thing is sqlippool :(
I know that it is an experimental module and I also have limited time to work on this module as it's not for me, it's for another company.
In the mean time, I'm using regular ippool db in a NFS with just 1 radius active per time (to prevent lockups). That was the only way I've managed to do ippools with 2 servers (is there any alternatives?).
As you see I can't abandon oracle, nor install postgre as it would break up some dependencies with other oracle databases that we have.
I'm being such a pain for you guys because the sqlippool module is almost working! If I saw that it wouldn't work at all, I would never took the time to work in it as I'm taking now :)
I appreciate your concerns and as I'm out of time to deliver the solution to the client, I think I can't try sqlippool anymore.
That's a shame because I'm almost there!
Now that I've managed to change somethings it's doing all the selects without any errors (that return ie: ip 1.1.1.1 in sqlplus) but it's stating sqlippool_query1: row[0] returned NULL in radiusd -X ( how can it be null if the select was successful? ). It's the only $!*!@! thing that is preventing the user to get an IP!! That kind of things just take time to debug...
Besides that, if I don't set pool_name = "name_of_the_pool" in sqlippool.conf, allocate-find tries to select from "ippool" (wich does not exists) instead of the one I've set in radippool table.
I would double check this behaviour. It should not select at all if there is no pool-name.
NONE of the ippool modules let you set the pool name. You HAVE to set Pool-Name = whatever as a check item!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Other issue is related to multiple pools, one with dynamic IP's and other with fixed ones (actually it's not possible to do that with only just one sqlippool.conf file without modifying rlm_sqlippool.c).
IT IS!!!!!!!!!!!!!!!!!!!!!!
Run two copies of the module!
Another thing lies in proxy -> if the proxy returns IP 255.255.255.254 for me, sqlippool does not overrides it and do nothing (it doesn't have the override = yes option like ippool).
This can be added. Although why would you return an IP like that when you dont need to? Just return the Pool-Name and let the module do its job.
So, to close this out, I would REALLY LIKE to make this work and help you guys as well, but because of lack of time, the only way would do this as an enhancement to the already deployed solution for the client, thanks.
Do you have sqlippool working with Postgresql?? it seems to me that you do not quite understand how it works which tells me that you dont have a working installation to compare with. IF YOU DO NOT HAVE A WORKING INSTALLATION OF SQLIPPOOL ON POSTGRESQL DO THAT RIGHT NOW BEFORE DOING ANY MORE TESTING WITH ORACLE!!!!! PLEASE!!!
Cheers
--
Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Fri 29 Sep 2006 15:23, Guilherme Franco wrote:
Thanks for all the answers Mr. Peter!
To clarify some things:
NONE of the ippool modules let you set the pool name. You HAVE to set Pool-Name = whatever as a check item!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
The radcheck table already have Pool-Name := "whatever" as a attribute, op, value for all users, but that's ok because I can set it manually in sqlippool.conf and the select DOES run in the correct table then (xlat outputs correctly then and I did a network sniff that shows the query is ok).
If you set it in sqlippool.conf it is ignored by the module........ It will make no difference to the operation at all.
Other issue is related to multiple pools, one with dynamic IP's and other with fixed ones (actually it's not possible to do that with only just one sqlippool.conf file without modifying rlm_sqlippool.c).
IT IS!!!!!!!!!!!!!!!!!!!!!! Run two copies of the module!
Sorry, i meant that I think that it is not possible without loading 2 or more modules (just with one module and one sqlippool.conf) dumb question, sorry.
OK. We we specifically designed the module so you can run more than one instance of it (like most other radius modules) and the different instances may have different queries, tables and sql connections (Completely different database types if you wish)
Another thing lies in proxy -> if the proxy returns IP 255.255.255.254 for me, sqlippool does not overrides it and do nothing (it doesn't have the override = yes option like ippool).
This can be added. Although why would you return an IP like that when you dont need to? Just return the Pool-Name and let the module do its job.
I didn't think about it, thanks.
You are welcome :-) Infact we have added today the capability to detect an ip address of 255.255.255.254 but this makes no sense except for when you are acting as a proxy and wish to add an ip address from a pool to an accept packet comming from a home server. Just use "Pool-Name" for all local users.
Besides that I had to remove the BEGIN statement of allocate-begin (and all other begins) because oracle does not need it, and if you need to specify begin, then it needs to be in a different way (through the sniff, I saw that the begin was stated, then 4 "space" chars and then a "/" which is the same as doing "BEGIN; /" in sqlplus, generating "ORA end-of-file errors") Don't know from where that "/" came from thought. To solve this, I had to change "BEGIN" in allocate-begin for "commit" (a normal oracle operation before any query).
Please send me a copy (privately if you wish) of your existing sqlippool.conf and working source code (or patch) so that we can integrate it into the existing code.
About the postgresql installation, I was thinking in installing it. I will do that just to see it's behaviour, thanks.
OK. I assumed that you had done this long ago. Please do it as a test.
THANKS A LOT AGAIN!
Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
participants (2)
-
Guilherme Franco -
Peter Nixon