rlm_perl not working as expected on 2.0.5
Greetings, I'm busy trying out Freeradius 2.0.5 before upgrading from 1.1.0, and so far everything looks good. I would like to try out rlm_perl since it presents some interesting possibilities, but am having a spot of bother. I followed the howto here: http://wiki.freeradius.org/Rlm_perl rlm_perl isn't event loaded/instantiated unless I add 'perl' to the instantiate section of radiusd.conf. Even if I do, however, I keep getting this error: "Parse error (check) for entry DEFAULT: Unknown value Perl for attribute Auth-Type" Any pointers on what I'm missing/doing wrong would be appreciated. Thanks Henry Here's the debug: Mon Aug 11 15:58:53 2008 : Info: FreeRADIUS Version 2.0.5, for host i686-pc-linux-gnu, built on Aug 8 2008 at 18:56:21 Mon Aug 11 15:58:53 2008 : Info: Copyright (C) 1999-2008 The FreeRADIUS server project and contributors. Mon Aug 11 15:58:53 2008 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Mon Aug 11 15:58:53 2008 : Info: PARTICULAR PURPOSE. Mon Aug 11 15:58:53 2008 : Info: You may redistribute copies of FreeRADIUS under the terms of the Mon Aug 11 15:58:53 2008 : Info: GNU General Public License v2. Mon Aug 11 15:58:53 2008 : Info: Starting - reading configuration files ... Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/radiusd.conf Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/proxy.conf Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/clients.conf Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/snmp.conf Mon Aug 11 15:58:53 2008 : Debug: including files in directory /usr/local/freeradius-2.0.5/etc/raddb/modules/ Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/policy Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/acct_unique Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/unix Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/chap Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/preprocess Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/expiration Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/mac2vlan Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/mschap Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/ippool Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/files Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/krb5 Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/passwd Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/radutmp Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/attr_rewrite Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/echo Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/etc_group Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/pap Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/realm Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/pam Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/always Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/exec Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/logintime Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/sql_log Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/smbpasswd Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/sradutmp Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/counter Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/ldap Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/expr Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/attr_filter Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/checkval Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/digest Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/detail Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/detail.log Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/mac2ip Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/eap.conf Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/sql.conf Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/sql/postgresql/dialup.conf Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/sql/postgresql/counter.conf Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/policy.conf Mon Aug 11 15:58:53 2008 : Debug: including files in directory /usr/local/freeradius-2.0.5/etc/raddb/sites-enabled/ Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/sites-enabled/default Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/sites-enabled/inner-tunnel Mon Aug 11 15:58:53 2008 : Debug: including dictionary file /usr/local/freeradius-2.0.5/etc/raddb/dictionary Mon Aug 11 15:58:53 2008 : Debug: main { Mon Aug 11 15:58:53 2008 : Debug: prefix = "/usr/local/freeradius-2.0.5" Mon Aug 11 15:58:53 2008 : Debug: localstatedir = "/usr/local/freeradius-2.0.5/var" Mon Aug 11 15:58:53 2008 : Debug: logdir = "/usr/local/freeradius-2.0.5/var/log/radius" Mon Aug 11 15:58:53 2008 : Debug: libdir = "/usr/local/freeradius-2.0.5/lib" Mon Aug 11 15:58:53 2008 : Debug: radacctdir = "/usr/local/freeradius-2.0.5/var/log/radius/radacct" Mon Aug 11 15:58:53 2008 : Debug: hostname_lookups = no Mon Aug 11 15:58:53 2008 : Debug: max_request_time = 60 Mon Aug 11 15:58:53 2008 : Debug: cleanup_delay = 5 Mon Aug 11 15:58:53 2008 : Debug: max_requests = 1024 Mon Aug 11 15:58:53 2008 : Debug: allow_core_dumps = no Mon Aug 11 15:58:53 2008 : Debug: pidfile = "/usr/local/freeradius-2.0.5/var/run/radiusd/radiusd.pid" Mon Aug 11 15:58:53 2008 : Debug: checkrad = "/usr/local/freeradius-2.0.5/sbin/checkrad" Mon Aug 11 15:58:53 2008 : Debug: debug_level = 0 Mon Aug 11 15:58:53 2008 : Debug: proxy_requests = no Mon Aug 11 15:58:53 2008 : Debug: log { Mon Aug 11 15:58:53 2008 : Debug: stripped_names = no Mon Aug 11 15:58:53 2008 : Debug: auth = yes Mon Aug 11 15:58:53 2008 : Debug: auth_badpass = yes Mon Aug 11 15:58:53 2008 : Debug: auth_goodpass = yes Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: client localhost { Mon Aug 11 15:58:53 2008 : Debug: ipaddr = 127.0.0.1 Mon Aug 11 15:58:53 2008 : Debug: require_message_authenticator = no Mon Aug 11 15:58:53 2008 : Debug: secret = "testing123" Mon Aug 11 15:58:53 2008 : Debug: nastype = "other" Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: radiusd: #### Loading Realms and Home Servers #### Mon Aug 11 15:58:53 2008 : Debug: proxy server { Mon Aug 11 15:58:53 2008 : Debug: retry_delay = 5 Mon Aug 11 15:58:53 2008 : Debug: retry_count = 3 Mon Aug 11 15:58:53 2008 : Debug: default_fallback = no Mon Aug 11 15:58:53 2008 : Debug: dead_time = 120 Mon Aug 11 15:58:53 2008 : Debug: wake_all_if_all_dead = no Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: home_server localhost { Mon Aug 11 15:58:53 2008 : Debug: ipaddr = 127.0.0.1 Mon Aug 11 15:58:53 2008 : Debug: port = 1812 Mon Aug 11 15:58:53 2008 : Debug: type = "auth" Mon Aug 11 15:58:53 2008 : Debug: secret = "testing123" Mon Aug 11 15:58:53 2008 : Debug: response_window = 20 Mon Aug 11 15:58:53 2008 : Debug: max_outstanding = 65536 Mon Aug 11 15:58:53 2008 : Debug: zombie_period = 40 Mon Aug 11 15:58:53 2008 : Debug: status_check = "status-server" Mon Aug 11 15:58:53 2008 : Debug: ping_check = "none" Mon Aug 11 15:58:53 2008 : Debug: ping_interval = 30 Mon Aug 11 15:58:53 2008 : Debug: check_interval = 30 Mon Aug 11 15:58:53 2008 : Debug: num_answers_to_alive = 3 Mon Aug 11 15:58:53 2008 : Debug: num_pings_to_alive = 3 Mon Aug 11 15:58:53 2008 : Debug: revive_interval = 120 Mon Aug 11 15:58:53 2008 : Debug: status_check_timeout = 4 Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: home_server_pool my_auth_failover { Mon Aug 11 15:58:53 2008 : Debug: type = fail-over Mon Aug 11 15:58:53 2008 : Debug: home_server = localhost Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: realm example.com { Mon Aug 11 15:58:53 2008 : Debug: auth_pool = my_auth_failover Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: realm LOCAL { Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: radiusd: #### Instantiating modules #### Mon Aug 11 15:58:53 2008 : Debug: instantiate { Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_exec, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_exec Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating exec Mon Aug 11 15:58:53 2008 : Debug: exec { Mon Aug 11 15:58:53 2008 : Debug: wait = no Mon Aug 11 15:58:53 2008 : Debug: input_pairs = "request" Mon Aug 11 15:58:53 2008 : Debug: shell_escape = yes Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_perl, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_perl Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating perl Mon Aug 11 15:58:53 2008 : Debug: perl { Mon Aug 11 15:58:53 2008 : Debug: module = "/usr/local/freeradius-2.0.5/etc/raddb/adsl_track.pl" Mon Aug 11 15:58:53 2008 : Debug: func_authorize = "authorize" Mon Aug 11 15:58:53 2008 : Debug: func_authenticate = "authenticate" Mon Aug 11 15:58:53 2008 : Debug: func_accounting = "accounting" Mon Aug 11 15:58:53 2008 : Debug: func_preacct = "preacct" Mon Aug 11 15:58:53 2008 : Debug: func_checksimul = "checksimul" Mon Aug 11 15:58:53 2008 : Debug: func_detach = "detach" Mon Aug 11 15:58:53 2008 : Debug: func_xlat = "xlat" Mon Aug 11 15:58:53 2008 : Debug: func_pre_proxy = "pre_proxy" Mon Aug 11 15:58:53 2008 : Debug: func_post_proxy = "post_proxy" Mon Aug 11 15:58:53 2008 : Debug: func_post_auth = "post_auth" Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_expr, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_expr Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating expr Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_expiration, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_expiration Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating expiration Mon Aug 11 15:58:53 2008 : Debug: expiration { Mon Aug 11 15:58:53 2008 : Debug: reply-message = "Password Has Expired " Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_logintime, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_logintime Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating logintime Mon Aug 11 15:58:53 2008 : Debug: logintime { Mon Aug 11 15:58:53 2008 : Debug: reply-message = "You are calling outside your allowed timespan " Mon Aug 11 15:58:53 2008 : Debug: minimum-timeout = 60 Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: radiusd: #### Loading Virtual Servers #### Mon Aug 11 15:58:53 2008 : Debug: server inner-tunnel { Mon Aug 11 15:58:53 2008 : Debug: modules { Mon Aug 11 15:58:53 2008 : Debug: Module: Checking authenticate {...} for more modules to load Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_pap, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_pap Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating pap Mon Aug 11 15:58:53 2008 : Debug: pap { Mon Aug 11 15:58:53 2008 : Debug: encryption_scheme = "auto" Mon Aug 11 15:58:53 2008 : Debug: auto_header = no Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_chap, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_chap Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating chap Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_mschap, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_mschap Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating mschap Mon Aug 11 15:58:53 2008 : Debug: mschap { Mon Aug 11 15:58:53 2008 : Debug: use_mppe = yes Mon Aug 11 15:58:53 2008 : Debug: require_encryption = no Mon Aug 11 15:58:53 2008 : Debug: require_strong = no Mon Aug 11 15:58:53 2008 : Debug: with_ntdomain_hack = no Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_unix, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_unix Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating unix Mon Aug 11 15:58:53 2008 : Debug: unix { Mon Aug 11 15:58:53 2008 : Debug: radwtmp = "/usr/local/freeradius-2.0.5/var/log/radius/radwtmp" Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_eap, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_eap Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating eap Mon Aug 11 15:58:53 2008 : Debug: eap { Mon Aug 11 15:58:53 2008 : Debug: default_eap_type = "md5" Mon Aug 11 15:58:53 2008 : Debug: timer_expire = 60 Mon Aug 11 15:58:53 2008 : Debug: ignore_unknown_eap_types = no Mon Aug 11 15:58:53 2008 : Debug: cisco_accounting_username_bug = no Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to sub-module rlm_eap_md5 Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating eap-md5 Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to sub-module rlm_eap_leap Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating eap-leap Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to sub-module rlm_eap_gtc Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating eap-gtc Mon Aug 11 15:58:53 2008 : Debug: gtc { Mon Aug 11 15:58:53 2008 : Debug: challenge = "Password: " Mon Aug 11 15:58:53 2008 : Debug: auth_type = "PAP" Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to sub-module rlm_eap_tls Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating eap-tls Mon Aug 11 15:58:53 2008 : Debug: tls { Mon Aug 11 15:58:53 2008 : Debug: rsa_key_exchange = no Mon Aug 11 15:58:53 2008 : Debug: dh_key_exchange = yes Mon Aug 11 15:58:53 2008 : Debug: rsa_key_length = 512 Mon Aug 11 15:58:53 2008 : Debug: dh_key_length = 512 Mon Aug 11 15:58:53 2008 : Debug: verify_depth = 0 Mon Aug 11 15:58:53 2008 : Debug: pem_file_type = yes Mon Aug 11 15:58:53 2008 : Debug: private_key_file = "/usr/local/freeradius-2.0.5/etc/raddb/certs/server.pem" Mon Aug 11 15:58:53 2008 : Debug: certificate_file = "/usr/local/freeradius-2.0.5/etc/raddb/certs/server.pem" Mon Aug 11 15:58:53 2008 : Debug: CA_file = "/usr/local/freeradius-2.0.5/etc/raddb/certs/ca.pem" Mon Aug 11 15:58:53 2008 : Debug: private_key_password = "whatever" Mon Aug 11 15:58:53 2008 : Debug: dh_file = "/usr/local/freeradius-2.0.5/etc/raddb/certs/dh" Mon Aug 11 15:58:53 2008 : Debug: random_file = "/usr/local/freeradius-2.0.5/etc/raddb/certs/random" Mon Aug 11 15:58:53 2008 : Debug: fragment_size = 1024 Mon Aug 11 15:58:53 2008 : Debug: include_length = yes Mon Aug 11 15:58:53 2008 : Debug: check_crl = no Mon Aug 11 15:58:53 2008 : Debug: cipher_list = "DEFAULT" Mon Aug 11 15:58:53 2008 : Debug: make_cert_command = "/usr/local/freeradius-2.0.5/etc/raddb/certs/bootstrap" Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to sub-module rlm_eap_ttls Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating eap-ttls Mon Aug 11 15:58:53 2008 : Debug: ttls { Mon Aug 11 15:58:53 2008 : Debug: default_eap_type = "md5" Mon Aug 11 15:58:53 2008 : Debug: copy_request_to_tunnel = no Mon Aug 11 15:58:53 2008 : Debug: use_tunneled_reply = no Mon Aug 11 15:58:53 2008 : Debug: virtual_server = "inner-tunnel" Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to sub-module rlm_eap_peap Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating eap-peap Mon Aug 11 15:58:53 2008 : Debug: peap { Mon Aug 11 15:58:53 2008 : Debug: default_eap_type = "mschapv2" Mon Aug 11 15:58:53 2008 : Debug: copy_request_to_tunnel = no Mon Aug 11 15:58:53 2008 : Debug: use_tunneled_reply = no Mon Aug 11 15:58:53 2008 : Debug: proxy_tunneled_request_as_eap = yes Mon Aug 11 15:58:53 2008 : Debug: virtual_server = "inner-tunnel" Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to sub-module rlm_eap_mschapv2 Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating eap-mschapv2 Mon Aug 11 15:58:53 2008 : Debug: mschapv2 { Mon Aug 11 15:58:53 2008 : Debug: with_ntdomain_hack = no Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: Module: Checking authorize {...} for more modules to load Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_realm, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_realm Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating suffix Mon Aug 11 15:58:53 2008 : Debug: realm suffix { Mon Aug 11 15:58:53 2008 : Debug: format = "suffix" Mon Aug 11 15:58:53 2008 : Debug: delimiter = "@" Mon Aug 11 15:58:53 2008 : Debug: ignore_default = no Mon Aug 11 15:58:53 2008 : Debug: ignore_null = no Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_files, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_files Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating files Mon Aug 11 15:58:53 2008 : Debug: files { Mon Aug 11 15:58:53 2008 : Debug: usersfile = "/usr/local/freeradius-2.0.5/etc/raddb/users" Mon Aug 11 15:58:53 2008 : Debug: acctusersfile = "/usr/local/freeradius-2.0.5/etc/raddb/acct_users" Mon Aug 11 15:58:53 2008 : Debug: preproxy_usersfile = "/usr/local/freeradius-2.0.5/etc/raddb/preproxy_users" Mon Aug 11 15:58:53 2008 : Debug: compat = "no" Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Error: /usr/local/freeradius-2.0.5/etc/raddb/users[1]: Parse error (check) for entry DEFAULT: Unknown value Perl for attribute Auth-Type Mon Aug 11 15:58:53 2008 : Error: Errors reading /usr/local/freeradius-2.0.5/etc/raddb/users Mon Aug 11 15:58:53 2008 : Error: /usr/local/freeradius-2.0.5/etc/raddb/modules/files[7]: Instantiation failed for module "files" Mon Aug 11 15:58:53 2008 : Error: /usr/local/freeradius-2.0.5/etc/raddb/sites-enabled/inner-tunnel[111]: Failed to find module "files". Mon Aug 11 15:58:53 2008 : Error: /usr/local/freeradius-2.0.5/etc/raddb/sites-enabled/inner-tunnel[34]: Errors parsing authorize section. Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Error: Errors initializing modules The users file: DEFAULT Auth-Type = Perl Fall-Through = 1 test@realm0 Auth-Type := System Service-Type = Framed-User, Framed-Protocol = PPP, Configuration-Token = test The perl {} section from radiusd.conf: ... module = ${prefix}/etc/raddb/test.pl ... in sites-enabled/default, I added all the 'perl' entries as mentioned in the howto ('files' is also enabled).
You haven't got Auth-Type Perl { perl } in authentication section of inner-tunnel virtual server. You probably added it just to default one. In default configuration users file is common for all virtual servers. Ivan Kalik Kalik Informatika ISP Dana 11/8/2008, "Henry" <henka@cityweb.co.za> piše:
Greetings,
I'm busy trying out Freeradius 2.0.5 before upgrading from 1.1.0, and so far everything looks good. I would like to try out rlm_perl since it presents some interesting possibilities, but am having a spot of bother.
I followed the howto here: http://wiki.freeradius.org/Rlm_perl
rlm_perl isn't event loaded/instantiated unless I add 'perl' to the instantiate section of radiusd.conf.
Even if I do, however, I keep getting this error:
"Parse error (check) for entry DEFAULT: Unknown value Perl for attribute Auth-Type"
Any pointers on what I'm missing/doing wrong would be appreciated.
Thanks Henry
Here's the debug:
Mon Aug 11 15:58:53 2008 : Info: FreeRADIUS Version 2.0.5, for host i686-pc-linux-gnu, built on Aug 8 2008 at 18:56:21 Mon Aug 11 15:58:53 2008 : Info: Copyright (C) 1999-2008 The FreeRADIUS server project and contributors. Mon Aug 11 15:58:53 2008 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Mon Aug 11 15:58:53 2008 : Info: PARTICULAR PURPOSE. Mon Aug 11 15:58:53 2008 : Info: You may redistribute copies of FreeRADIUS under the terms of the Mon Aug 11 15:58:53 2008 : Info: GNU General Public License v2. Mon Aug 11 15:58:53 2008 : Info: Starting - reading configuration files ... Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/radiusd.conf Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/proxy.conf Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/clients.conf Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/snmp.conf Mon Aug 11 15:58:53 2008 : Debug: including files in directory /usr/local/freeradius-2.0.5/etc/raddb/modules/ Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/policy Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/acct_unique Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/unix Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/chap Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/preprocess Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/expiration Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/mac2vlan Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/mschap Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/ippool Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/files Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/krb5 Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/passwd Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/radutmp Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/attr_rewrite Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/echo Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/etc_group Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/pap Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/realm Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/pam Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/always Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/exec Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/logintime Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/sql_log Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/smbpasswd Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/sradutmp Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/counter Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/ldap Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/expr Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/attr_filter Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/checkval Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/digest Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/detail Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/detail.log Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/modules/mac2ip Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/eap.conf Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/sql.conf Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/sql/postgresql/dialup.conf Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/sql/postgresql/counter.conf Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/policy.conf Mon Aug 11 15:58:53 2008 : Debug: including files in directory /usr/local/freeradius-2.0.5/etc/raddb/sites-enabled/ Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/sites-enabled/default Mon Aug 11 15:58:53 2008 : Debug: including configuration file /usr/local/freeradius-2.0.5/etc/raddb/sites-enabled/inner-tunnel Mon Aug 11 15:58:53 2008 : Debug: including dictionary file /usr/local/freeradius-2.0.5/etc/raddb/dictionary Mon Aug 11 15:58:53 2008 : Debug: main { Mon Aug 11 15:58:53 2008 : Debug: prefix = "/usr/local/freeradius-2.0.5" Mon Aug 11 15:58:53 2008 : Debug: localstatedir = "/usr/local/freeradius-2.0.5/var" Mon Aug 11 15:58:53 2008 : Debug: logdir = "/usr/local/freeradius-2.0.5/var/log/radius" Mon Aug 11 15:58:53 2008 : Debug: libdir = "/usr/local/freeradius-2.0.5/lib" Mon Aug 11 15:58:53 2008 : Debug: radacctdir = "/usr/local/freeradius-2.0.5/var/log/radius/radacct" Mon Aug 11 15:58:53 2008 : Debug: hostname_lookups = no Mon Aug 11 15:58:53 2008 : Debug: max_request_time = 60 Mon Aug 11 15:58:53 2008 : Debug: cleanup_delay = 5 Mon Aug 11 15:58:53 2008 : Debug: max_requests = 1024 Mon Aug 11 15:58:53 2008 : Debug: allow_core_dumps = no Mon Aug 11 15:58:53 2008 : Debug: pidfile = "/usr/local/freeradius-2.0.5/var/run/radiusd/radiusd.pid" Mon Aug 11 15:58:53 2008 : Debug: checkrad = "/usr/local/freeradius-2.0.5/sbin/checkrad" Mon Aug 11 15:58:53 2008 : Debug: debug_level = 0 Mon Aug 11 15:58:53 2008 : Debug: proxy_requests = no Mon Aug 11 15:58:53 2008 : Debug: log { Mon Aug 11 15:58:53 2008 : Debug: stripped_names = no Mon Aug 11 15:58:53 2008 : Debug: auth = yes Mon Aug 11 15:58:53 2008 : Debug: auth_badpass = yes Mon Aug 11 15:58:53 2008 : Debug: auth_goodpass = yes Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: client localhost { Mon Aug 11 15:58:53 2008 : Debug: ipaddr = 127.0.0.1 Mon Aug 11 15:58:53 2008 : Debug: require_message_authenticator = no Mon Aug 11 15:58:53 2008 : Debug: secret = "testing123" Mon Aug 11 15:58:53 2008 : Debug: nastype = "other" Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: radiusd: #### Loading Realms and Home Servers #### Mon Aug 11 15:58:53 2008 : Debug: proxy server { Mon Aug 11 15:58:53 2008 : Debug: retry_delay = 5 Mon Aug 11 15:58:53 2008 : Debug: retry_count = 3 Mon Aug 11 15:58:53 2008 : Debug: default_fallback = no Mon Aug 11 15:58:53 2008 : Debug: dead_time = 120 Mon Aug 11 15:58:53 2008 : Debug: wake_all_if_all_dead = no Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: home_server localhost { Mon Aug 11 15:58:53 2008 : Debug: ipaddr = 127.0.0.1 Mon Aug 11 15:58:53 2008 : Debug: port = 1812 Mon Aug 11 15:58:53 2008 : Debug: type = "auth" Mon Aug 11 15:58:53 2008 : Debug: secret = "testing123" Mon Aug 11 15:58:53 2008 : Debug: response_window = 20 Mon Aug 11 15:58:53 2008 : Debug: max_outstanding = 65536 Mon Aug 11 15:58:53 2008 : Debug: zombie_period = 40 Mon Aug 11 15:58:53 2008 : Debug: status_check = "status-server" Mon Aug 11 15:58:53 2008 : Debug: ping_check = "none" Mon Aug 11 15:58:53 2008 : Debug: ping_interval = 30 Mon Aug 11 15:58:53 2008 : Debug: check_interval = 30 Mon Aug 11 15:58:53 2008 : Debug: num_answers_to_alive = 3 Mon Aug 11 15:58:53 2008 : Debug: num_pings_to_alive = 3 Mon Aug 11 15:58:53 2008 : Debug: revive_interval = 120 Mon Aug 11 15:58:53 2008 : Debug: status_check_timeout = 4 Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: home_server_pool my_auth_failover { Mon Aug 11 15:58:53 2008 : Debug: type = fail-over Mon Aug 11 15:58:53 2008 : Debug: home_server = localhost Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: realm example.com { Mon Aug 11 15:58:53 2008 : Debug: auth_pool = my_auth_failover Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: realm LOCAL { Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: radiusd: #### Instantiating modules #### Mon Aug 11 15:58:53 2008 : Debug: instantiate { Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_exec, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_exec Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating exec Mon Aug 11 15:58:53 2008 : Debug: exec { Mon Aug 11 15:58:53 2008 : Debug: wait = no Mon Aug 11 15:58:53 2008 : Debug: input_pairs = "request" Mon Aug 11 15:58:53 2008 : Debug: shell_escape = yes Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_perl, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_perl Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating perl Mon Aug 11 15:58:53 2008 : Debug: perl { Mon Aug 11 15:58:53 2008 : Debug: module = "/usr/local/freeradius-2.0.5/etc/raddb/adsl_track.pl" Mon Aug 11 15:58:53 2008 : Debug: func_authorize = "authorize" Mon Aug 11 15:58:53 2008 : Debug: func_authenticate = "authenticate" Mon Aug 11 15:58:53 2008 : Debug: func_accounting = "accounting" Mon Aug 11 15:58:53 2008 : Debug: func_preacct = "preacct" Mon Aug 11 15:58:53 2008 : Debug: func_checksimul = "checksimul" Mon Aug 11 15:58:53 2008 : Debug: func_detach = "detach" Mon Aug 11 15:58:53 2008 : Debug: func_xlat = "xlat" Mon Aug 11 15:58:53 2008 : Debug: func_pre_proxy = "pre_proxy" Mon Aug 11 15:58:53 2008 : Debug: func_post_proxy = "post_proxy" Mon Aug 11 15:58:53 2008 : Debug: func_post_auth = "post_auth" Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_expr, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_expr Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating expr Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_expiration, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_expiration Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating expiration Mon Aug 11 15:58:53 2008 : Debug: expiration { Mon Aug 11 15:58:53 2008 : Debug: reply-message = "Password Has Expired " Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_logintime, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_logintime Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating logintime Mon Aug 11 15:58:53 2008 : Debug: logintime { Mon Aug 11 15:58:53 2008 : Debug: reply-message = "You are calling outside your allowed timespan " Mon Aug 11 15:58:53 2008 : Debug: minimum-timeout = 60 Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: radiusd: #### Loading Virtual Servers #### Mon Aug 11 15:58:53 2008 : Debug: server inner-tunnel { Mon Aug 11 15:58:53 2008 : Debug: modules { Mon Aug 11 15:58:53 2008 : Debug: Module: Checking authenticate {...} for more modules to load Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_pap, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_pap Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating pap Mon Aug 11 15:58:53 2008 : Debug: pap { Mon Aug 11 15:58:53 2008 : Debug: encryption_scheme = "auto" Mon Aug 11 15:58:53 2008 : Debug: auto_header = no Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_chap, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_chap Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating chap Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_mschap, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_mschap Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating mschap Mon Aug 11 15:58:53 2008 : Debug: mschap { Mon Aug 11 15:58:53 2008 : Debug: use_mppe = yes Mon Aug 11 15:58:53 2008 : Debug: require_encryption = no Mon Aug 11 15:58:53 2008 : Debug: require_strong = no Mon Aug 11 15:58:53 2008 : Debug: with_ntdomain_hack = no Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_unix, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_unix Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating unix Mon Aug 11 15:58:53 2008 : Debug: unix { Mon Aug 11 15:58:53 2008 : Debug: radwtmp = "/usr/local/freeradius-2.0.5/var/log/radius/radwtmp" Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_eap, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_eap Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating eap Mon Aug 11 15:58:53 2008 : Debug: eap { Mon Aug 11 15:58:53 2008 : Debug: default_eap_type = "md5" Mon Aug 11 15:58:53 2008 : Debug: timer_expire = 60 Mon Aug 11 15:58:53 2008 : Debug: ignore_unknown_eap_types = no Mon Aug 11 15:58:53 2008 : Debug: cisco_accounting_username_bug = no Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to sub-module rlm_eap_md5 Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating eap-md5 Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to sub-module rlm_eap_leap Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating eap-leap Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to sub-module rlm_eap_gtc Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating eap-gtc Mon Aug 11 15:58:53 2008 : Debug: gtc { Mon Aug 11 15:58:53 2008 : Debug: challenge = "Password: " Mon Aug 11 15:58:53 2008 : Debug: auth_type = "PAP" Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to sub-module rlm_eap_tls Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating eap-tls Mon Aug 11 15:58:53 2008 : Debug: tls { Mon Aug 11 15:58:53 2008 : Debug: rsa_key_exchange = no Mon Aug 11 15:58:53 2008 : Debug: dh_key_exchange = yes Mon Aug 11 15:58:53 2008 : Debug: rsa_key_length = 512 Mon Aug 11 15:58:53 2008 : Debug: dh_key_length = 512 Mon Aug 11 15:58:53 2008 : Debug: verify_depth = 0 Mon Aug 11 15:58:53 2008 : Debug: pem_file_type = yes Mon Aug 11 15:58:53 2008 : Debug: private_key_file = "/usr/local/freeradius-2.0.5/etc/raddb/certs/server.pem" Mon Aug 11 15:58:53 2008 : Debug: certificate_file = "/usr/local/freeradius-2.0.5/etc/raddb/certs/server.pem" Mon Aug 11 15:58:53 2008 : Debug: CA_file = "/usr/local/freeradius-2.0.5/etc/raddb/certs/ca.pem" Mon Aug 11 15:58:53 2008 : Debug: private_key_password = "whatever" Mon Aug 11 15:58:53 2008 : Debug: dh_file = "/usr/local/freeradius-2.0.5/etc/raddb/certs/dh" Mon Aug 11 15:58:53 2008 : Debug: random_file = "/usr/local/freeradius-2.0.5/etc/raddb/certs/random" Mon Aug 11 15:58:53 2008 : Debug: fragment_size = 1024 Mon Aug 11 15:58:53 2008 : Debug: include_length = yes Mon Aug 11 15:58:53 2008 : Debug: check_crl = no Mon Aug 11 15:58:53 2008 : Debug: cipher_list = "DEFAULT" Mon Aug 11 15:58:53 2008 : Debug: make_cert_command = "/usr/local/freeradius-2.0.5/etc/raddb/certs/bootstrap" Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to sub-module rlm_eap_ttls Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating eap-ttls Mon Aug 11 15:58:53 2008 : Debug: ttls { Mon Aug 11 15:58:53 2008 : Debug: default_eap_type = "md5" Mon Aug 11 15:58:53 2008 : Debug: copy_request_to_tunnel = no Mon Aug 11 15:58:53 2008 : Debug: use_tunneled_reply = no Mon Aug 11 15:58:53 2008 : Debug: virtual_server = "inner-tunnel" Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to sub-module rlm_eap_peap Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating eap-peap Mon Aug 11 15:58:53 2008 : Debug: peap { Mon Aug 11 15:58:53 2008 : Debug: default_eap_type = "mschapv2" Mon Aug 11 15:58:53 2008 : Debug: copy_request_to_tunnel = no Mon Aug 11 15:58:53 2008 : Debug: use_tunneled_reply = no Mon Aug 11 15:58:53 2008 : Debug: proxy_tunneled_request_as_eap = yes Mon Aug 11 15:58:53 2008 : Debug: virtual_server = "inner-tunnel" Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to sub-module rlm_eap_mschapv2 Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating eap-mschapv2 Mon Aug 11 15:58:53 2008 : Debug: mschapv2 { Mon Aug 11 15:58:53 2008 : Debug: with_ntdomain_hack = no Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: Module: Checking authorize {...} for more modules to load Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_realm, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_realm Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating suffix Mon Aug 11 15:58:53 2008 : Debug: realm suffix { Mon Aug 11 15:58:53 2008 : Debug: format = "suffix" Mon Aug 11 15:58:53 2008 : Debug: delimiter = "@" Mon Aug 11 15:58:53 2008 : Debug: ignore_default = no Mon Aug 11 15:58:53 2008 : Debug: ignore_null = no Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: (Loaded rlm_files, checking if it's valid) Mon Aug 11 15:58:53 2008 : Debug: Module: Linked to module rlm_files Mon Aug 11 15:58:53 2008 : Debug: Module: Instantiating files Mon Aug 11 15:58:53 2008 : Debug: files { Mon Aug 11 15:58:53 2008 : Debug: usersfile = "/usr/local/freeradius-2.0.5/etc/raddb/users" Mon Aug 11 15:58:53 2008 : Debug: acctusersfile = "/usr/local/freeradius-2.0.5/etc/raddb/acct_users" Mon Aug 11 15:58:53 2008 : Debug: preproxy_usersfile = "/usr/local/freeradius-2.0.5/etc/raddb/preproxy_users" Mon Aug 11 15:58:53 2008 : Debug: compat = "no" Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Error: /usr/local/freeradius-2.0.5/etc/raddb/users[1]: Parse error (check) for entry DEFAULT: Unknown value Perl for attribute Auth-Type Mon Aug 11 15:58:53 2008 : Error: Errors reading /usr/local/freeradius-2.0.5/etc/raddb/users Mon Aug 11 15:58:53 2008 : Error: /usr/local/freeradius-2.0.5/etc/raddb/modules/files[7]: Instantiation failed for module "files" Mon Aug 11 15:58:53 2008 : Error: /usr/local/freeradius-2.0.5/etc/raddb/sites-enabled/inner-tunnel[111]: Failed to find module "files". Mon Aug 11 15:58:53 2008 : Error: /usr/local/freeradius-2.0.5/etc/raddb/sites-enabled/inner-tunnel[34]: Errors parsing authorize section. Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Debug: } Mon Aug 11 15:58:53 2008 : Error: Errors initializing modules
The users file:
DEFAULT Auth-Type = Perl Fall-Through = 1
test@realm0 Auth-Type := System Service-Type = Framed-User, Framed-Protocol = PPP, Configuration-Token = test
The perl {} section from radiusd.conf: .... module = ${prefix}/etc/raddb/test.pl ....
in sites-enabled/default, I added all the 'perl' entries as mentioned in the howto ('files' is also enabled).
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Tue, August 12, 2008 11:08 am, Ivan Kalik wrote:
You haven't got
Auth-Type Perl { perl }
in authentication section of inner-tunnel virtual server. You probably added it just to default one. In default configuration users file is common for all virtual servers.
Excellent! Thanks, Ivan. I must have missed that requirement in the docs. Regards Henry
participants (2)
-
Henry -
Ivan Kalik