RE: Freeradius-Users Digest, Vol 55, Issue 25
From: freeradius-users-request@lists.freeradius.org Subject: Freeradius-Users Digest, Vol 55, Issue 25 To: freeradius-users@lists.freeradius.org Date: Fri, 6 Nov 2009 16:06:28 +0100
Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org
To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org
You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org
When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..."
Today's Topics:
1. Re: FreeRADIUS + Postgresql dies unexpectedly (Duarte Fonseca) 2. Re: Unexpected "Exiting normally" 2.1.8? (Alexander Clouter) 3. Question about Real Dinamics Ldap Groups (Alejandro Escanero Blanco) 4. Re: Unexpected "Exiting normally" 2.1.8? (Craig Campbell) 5. RE: Freeradius-Users Digest, Vol 55, Issue 24 (Peter Carlstedt)
----------------------------------------------------------------------
Message: 1 Date: Fri, 6 Nov 2009 13:48:04 +0000 From: Duarte Fonseca <fonseca.duarte@gmail.com> Subject: Re: FreeRADIUS + Postgresql dies unexpectedly To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <dd6b74fd0911060548q335e88ale1756b366ef35a0f@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1
Thank you Alan,
Cheers,
Duarte
2009/11/6 Alan DeKok <aland@deployingradius.com>:
Duarte Fonseca wrote:
Hi list,
Just checking if anyone has any more suggestions on how I should proceed with this.
?A fix is in the "stable" branch of git.
?Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
------------------------------
Message: 2 Date: Fri, 6 Nov 2009 13:21:14 +0000 From: Alexander Clouter <alex@digriz.org.uk> Subject: Re: Unexpected "Exiting normally" 2.1.8? To: freeradius-users@lists.freeradius.org Message-ID: <afkds6-9re.ln1@chipmunk.wormnet.eu>
Craig Campbell <craig@ccraft.ca> wrote:
[snipped]
I then ran the code from within gdb as Alexander described (within screen - thanks!)
gdb radiusd (gdb) run -f <messages program runs until...> Detaching after fork from child process 14277. Detaching after fork from child process 14334. Detaching after fork from child process 14364. Detaching after fork from child process 14394. Detaching after fork from child process 14424.
Program received signal SIGTERM, Terminated. 0x0000003acf4306a7 in kill () from /lib64/libc.so.6 (gdb) where #0 0x0000003acf4306a7 in kill () from /lib64/libc.so.6 #1 0x0000000000424186 in main (argc=2, argv=0x7fff67ce72d8) at radiusd.c:419 (gdb)
The gdb output is identical for the other radius server.
I'm afraid I haven't helped much. The source I have was acquired Oct 20 15:05 (EST) if that helps in any way. Perhaps I have fewer of the suspected patches in my build than you have in yours? Is there a way we could compare?
Is there any way I can get more information out of these test runs?
Afraid that is all there is to see. If this was a more 'interesting' bug you would get a lot more, but the nature of this particular bug means you do not get much.
Now you have the compiling of FreeRADIUS working and got a successful round of GDB cooking, you need to play with 'git bisect' to pin it down to which patch broke things.
Cheers
-- Alexander Clouter .sigmonster says: You have many friends and very few living enemies.
------------------------------
Message: 3 Date: Fri, 06 Nov 2009 15:09:32 +0100 From: Alejandro Escanero Blanco <alejandro.escanero.ext@juntadeandalucia.es> Subject: Question about Real Dinamics Ldap Groups To: Freeradius-Users@lists.freeradius.org Message-ID: <4AF42E1C.2050805@juntadeandalucia.es> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Is this possible?
My Case: I have a ldap group called cn=mygroup,o=myorg,c=mycountry A user: cn=myuser,o=myorg,c=mycountry The configuration for ldap have:
groupname_attribute = cn groupmembership_filter = "(&(objectClass=posixGroup)(memberUid=%{Stripped-User-Name:-%{User-Name}}))" groupmembership_attribute = radiusGroupName
An the user file have:
DEFAULT Ldap-Group == mygroup Tunnel-Medium-Type = IEEE-802, Tunnel-Type = VLAN, Tunnel-Private-Group-Id = 1, Fall-Through = No
Everything is going ok, but i want more and begin to test:
DEFAULT Ldap-Group == mygroup Tunnel-Medium-Type = IEEE-802, Tunnel-Type = VLAN, Tunnel-Private-Group-Id = `%{ldap:ldap:///cn=mygroup,o=myorg,c=mycountry?radiusTunnelPrivateGroupId?base?memberUid=%{Stripped-User-Name}}`, Fall-Through = No
Adding the radiusProfile Object to the posixGroup, and put the attribute radiusTunnelPrivateGroupId as 1. Going ok
But i want to manage all from ldap and this configuration fail because radius can't get the ldap group list and don't check the groups.
DEFAULT Ldap-Group == * Tunnel-Medium-Type = IEEE-802, Tunnel-Type = VLAN, Tunnel-Private-Group-Id = `%{ldap:ldap:///cn=%{Ldap-Group},o=myorg,c=mycountry?radiusTunnelPrivateGroupId?base?memberUid=%{Stripped-User-Name}}`, Fall-Through = No
There are any solution to fully manage the groups from ldap?
Thanks.
-- ------------------------- Alejandro Escanero Blanco Secretar?a General T?cnica - Servicio de Inform?tica Sistemas Tel: 671 569 262 (769262) Consejer?a de Innovaci?n, Ciencia y Empresa Junta de Andaluc?a
------------------------------
Message: 4 Date: Fri, 6 Nov 2009 09:49:07 -0500 From: "Craig Campbell" <craig@ccraft.ca> Subject: Re: Unexpected "Exiting normally" 2.1.8? To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Message-ID: <107F52926AE347A788B12B53F98792F5@craigPC> Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original
Regarding git bisect. I know the current version is "bad", but I have no idea if any 2.1.8 version is 'Good'.
If there a way to use git bisect without identifying 'good'? How can we find the first version? Can we assume it was 'good'?
Sorry to be so non knowledgeable about git.
-craig ----- Original Message ----- From: "Alexander Clouter" <alex@digriz.org.uk> To: <freeradius-users@lists.freeradius.org> Sent: Friday, November 06, 2009 8:21 AM Subject: Re: Unexpected "Exiting normally" 2.1.8?
Craig Campbell <craig@ccraft.ca> wrote:
[snipped]
I then ran the code from within gdb as Alexander described (within screen - thanks!)
gdb radiusd (gdb) run -f <messages program runs until...> Detaching after fork from child process 14277. Detaching after fork from child process 14334. Detaching after fork from child process 14364. Detaching after fork from child process 14394. Detaching after fork from child process 14424.
Program received signal SIGTERM, Terminated. 0x0000003acf4306a7 in kill () from /lib64/libc.so.6 (gdb) where #0 0x0000003acf4306a7 in kill () from /lib64/libc.so.6 #1 0x0000000000424186 in main (argc=2, argv=0x7fff67ce72d8) at radiusd.c:419 (gdb)
The gdb output is identical for the other radius server.
I'm afraid I haven't helped much. The source I have was acquired Oct 20 15:05 (EST) if that helps in any way. Perhaps I have fewer of the suspected patches in my build than you have in yours? Is there a way we could compare?
Is there any way I can get more information out of these test runs?
Afraid that is all there is to see. If this was a more 'interesting' bug you would get a lot more, but the nature of this particular bug means you do not get much.
Now you have the compiling of FreeRADIUS working and got a successful round of GDB cooking, you need to play with 'git bisect' to pin it down to which patch broke things.
Cheers
-- Alexander Clouter .sigmonster says: You have many friends and very few living enemies.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________ Information from ESET Smart Security, version of virus signature database 4578 (20091106) __________
The message was checked by ESET Smart Security.
__________ Information from ESET Smart Security, version of virus signature database 4579 (20091106) __________
The message was checked by ESET Smart Security.
------------------------------
Message: 5 Date: Fri, 6 Nov 2009 15:06:22 +0000 From: Peter Carlstedt <pc_007@hotmail.com> Subject: RE: Freeradius-Users Digest, Vol 55, Issue 24 To: <freeradius-users@lists.freeradius.org> Message-ID: <SNT120-W414BEC3E84753919CF4B70B4AF0@phx.gbl> Content-Type: text/plain; charset="iso-8859-1"
Hi all,
I found the folder where clients.conf and so on where installed.
Now I obviusly got another error.
I will step by step explain what I?ve done.
1. Downloaded FreeRadius 2.1.7
2. Went into the terminel and extracted the tar.gz file of FreeRadius onto the home/name/Desktop
3. Made my way into the newly extracted folder cd /home/peter/Desktop/FreeRadius-2.7.1
4. Jumped into the folder called "Debian" and checked if the files "control" and "rules" had the lines which enables SSL so I can use PEAP.
5. Went back one step back to the main folder of FreeRadius (/home/peter/Desktop/FreeRadius-2.7.1/
6. wrote in terminal "./configure" 7. wrote in terminal "make"
8. wrote in terminal "sudo make install"
Before all this I made sure that OpenSSL was installed together with libssl-dev and libpq-dev.
Then after the installation was finished I wrote "sudo radiusd -X" and got an error message after it tried to load "clients.conf" which said "Segmentation fault". I have tried to find anything on the net about it but cannot find any information which helps me with this problem. Anyone have any idea of what kind of problem this is?
Best Regards/ Peter Carlstedt
From: freeradius-users-request@lists.freeradius.org Subject: Freeradius-Users Digest, Vol 55, Issue 24 To: freeradius-users@lists.freeradius.org Date: Fri, 6 Nov 2009 14:47:51 +0100
Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org
To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org
You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org
When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..."
Today's Topics:
1. Re: Upgrade From 1 to 2 - problem with authorize (Bj?rn Mork) 2. Re: FreeRADIUS + Postgresql dies unexpectedly (Alan DeKok) 3. Re: How to stop radiusd (Chico Sokol) 4. Re: Can't compile FreeRADIUS with pam module (Alan DeKok) 5. Re: How to stop radiusd (Rakotomandimby Mihamina) 6. Re: How to stop radiusd (Alan DeKok) 7. Re: Alcatel-Lucent Service Router dictionary (Alan DeKok) 8. Re: Can't compile FreeRADIUS with pam module (Chico Sokol) 9. Re: Can't compile FreeRADIUS with pam module (John Dennis) 10. Re: Can't compile FreeRADIUS with pam module (Alan DeKok)
----------------------------------------------------------------------
Message: 1 Date: Fri, 06 Nov 2009 14:16:58 +0100 From: Bj?rn Mork <bjorn@mork.no> Subject: Re: Upgrade From 1 to 2 - problem with authorize To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <87y6mjaj3p.fsf@nemi.mork.no> Content-Type: text/plain; charset=utf-8
Robert White <rwhite@globalgossip.net> writes:
What's the difference?
Tbh, I don't even understand the what group queries are. Documentation seems to be kind of lacking. Not your fault I know, but I don't want you to think I haven't tried finding this out for myself!
I've attached my sql.conf and dialup.conf files.
I believe you need a group_membership_query as well in 2.x, although I do notice that the mssql/dialup.conf example doesn't have one. That must be an error. Feel free to fix it if you get this working.
rlm_sql_process_groups() will process the group list returned by sql_get_grouplist() and that won't be any unless you configure a group_membership_query:
group_list_tmp = *group_list = NULL;
if (!inst->config->groupmemb_query || (inst->config->groupmemb_query[0] == 0)) return 0;
The other dialup.conf examples will tell you how it is supposed to look. It is a very simple query, so I assume you can convert this to mssql easily:
group_membership_query = "SELECT groupname \ FROM ${usergroup_table} \ WHERE username = '%{SQL-User-Name}' \ ORDER BY priority"
Bj?rn
------------------------------
Message: 2 Date: Fri, 06 Nov 2009 08:18:01 -0500 From: Alan DeKok <aland@deployingradius.com> Subject: Re: FreeRADIUS + Postgresql dies unexpectedly To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <4AF42209.5000203@deployingradius.com> Content-Type: text/plain; charset=ISO-8859-1
Duarte Fonseca wrote:
Hi list,
Just checking if anyone has any more suggestions on how I should proceed with this.
A fix is in the "stable" branch of git.
Alan DeKok.
------------------------------
Message: 3 Date: Fri, 6 Nov 2009 14:18:10 +0100 From: Chico Sokol <chico.sokol@gmail.com> Subject: Re: How to stop radiusd To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <b7475cbf0911060518n4ad25cd8i4dc9bd8c0895bfa4@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1
Hy, Try something like: # locate -u / # locate raddb
This will return the freeradius configuration folder. I believe it will be something like /usr/local/etc/raddb. If that's the case, the binaries will be at /usr/local/bin and /usr/local/sbin.
regards,
On Fri, Nov 6, 2009 at 2:04 PM, Peter Carlstedt <pc_007@hotmail.com> wrote:
Hello all.
Me and my friend is sitting at the computer trying to get Freeradius to work. After testing Ubuntus own release of FreeRadius which is verison 2.1.0 we decided to download 2.1.7 from the freeradius site.
We downloaded the freeradius into the Desktop of the user and then followed theinstructions for compiling.
(sudo ./configure sudo make sudo make install)
Now when we want to stop radiusd we cant find the folder which it has installed freeradius into. If you know how if works and where we could find the installed freeradius folder it would be much appreciated.
Best regards/ Peter Carlstedt
________________________________ Windows Live Hotmail: Your friends can get your Facebook updates, right from Hotmail?. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Chico Sokol
------------------------------
Message: 4 Date: Fri, 06 Nov 2009 08:18:59 -0500 From: Alan DeKok <aland@deployingradius.com> Subject: Re: Can't compile FreeRADIUS with pam module To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <4AF42243.9010807@deployingradius.com> Content-Type: text/plain; charset=ISO-8859-1
Chico Sokol wrote:
Hy guys, I'm using version 2.1.7. And I'm having trouble at building freeradius from de source with pam module (rlm_pam). Here's what I'm doing:
# ./configure --with-modules=rlm_pam # make
Then I get the following error, during the pam module compilation:
rlm_pam.c:123: warning: 'struct pam_response' declared inside parameter list
You don't have the PAM development header files installed. You will need to figure out where they are (which package, etc.), and install them.
Alan DeKok.
------------------------------
Message: 5 Date: Fri, 06 Nov 2009 16:19:43 +0300 From: Rakotomandimby Mihamina <mihamina@gulfsat.mg> Subject: Re: How to stop radiusd To: freeradius-users@lists.freeradius.org Message-ID: <4AF4226F.20704@gulfsat.mg> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
11/06/2009 04:04 PM, Peter Carlstedt::
(sudo ./configure sudo make sudo make install)
Now when we want to stop radiusd we cant find the folder which it has installed freeradius into.
You blindly typed those commands in, then.
If you know how if works and where we could find the installed freeradius folder it would be much appreciated.
The install directory has been setup during the ./configure. type "./configure --help".
PS: Why didn't you stay with the Ubuntu Freeradius?
We choosed not to stay with the Ubuntu Freeradius 2.1.0 since we read somewhere that it wont work with OpenSSL and that we need to make our own build to get it to work. It was something about that it hasnt the support for OpenSSL since it is licensed?
-- Architecte Informatique chez Blueline/Gulfsat: Administration Systeme, Recherche & Developpement +261 33 11 207 36
------------------------------
Message: 6 Date: Fri, 06 Nov 2009 08:21:44 -0500 From: Alan DeKok <aland@deployingradius.com> Subject: Re: How to stop radiusd To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <4AF422E8.3050904@deployingradius.com> Content-Type: text/plain; charset=ISO-8859-1
Peter Carlstedt wrote:
Now when we want to stop radiusd we cant find the folder which it has installed freeradius into.
The default installation directory can be found by:
./configure --help
Or, by reading the output of "make install". It shows you what it is installing, and where those files are installed.
Alan DeKok.
------------------------------
Message: 7 Date: Fri, 06 Nov 2009 08:22:27 -0500 From: Alan DeKok <aland@deployingradius.com> Subject: Re: Alcatel-Lucent Service Router dictionary To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <4AF42313.2040800@deployingradius.com> Content-Type: text/plain; charset=ISO-8859-1
Peter Lambrechtsen wrote:
Hello
It took me some time to track down this dictionary so I thought for completeness that it may want to get included into the freeradius dictionary directory.
Added, thanks.
Alan DeKok.
------------------------------
Message: 8 Date: Fri, 6 Nov 2009 14:30:22 +0100 From: Chico Sokol <chico.sokol@gmail.com> Subject: Re: Can't compile FreeRADIUS with pam module To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <b7475cbf0911060530o76e6ca50g25d3a25e1490963b@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1
Hum... I need development header files? I have pam installed, and the header files does exist at /usr/include/pam:
-rw-r--r-- 1 root root 2972 2009-10-29 18:58 _pam_compat.h -rw-r--r-- 1 root root 6101 2009-10-29 18:58 _pam_macros.h -rw-r--r-- 1 root root 12837 2009-10-29 18:58 _pam_types.h -rw-r--r-- 1 root root 3297 2009-11-06 10:15 pam_appl.h -rw-r--r-- 1 root root 7203 2009-10-29 18:58 pam_client.h -rw-r--r-- 1 root root 3251 2009-10-29 18:58 pam_ext.h -rw-r--r-- 1 root root 1140 2009-10-29 18:58 pam_filter.h -rw-r--r-- 1 root root 1577 2009-10-29 18:58 pam_misc.h -rw-r--r-- 1 root root 6432 2009-10-29 18:58 pam_modules.h -rw-r--r-- 1 root root 4076 2009-10-29 18:58 pam_modutil.h
Thanks,
On Fri, Nov 6, 2009 at 2:18 PM, Alan DeKok <aland@deployingradius.com> wrote:
Chico Sokol wrote:
Hy guys, I'm using version 2.1.7. And I'm having trouble at building freeradius from de source with pam module (rlm_pam). Here's what I'm doing:
# ./configure --with-modules=rlm_pam # make
Then I get the following error, during the pam module compilation:
rlm_pam.c:123: warning: 'struct pam_response' declared inside parameter list
?You don't have the PAM development header files installed. ?You will need to figure out where they are (which package, etc.), and install them.
?Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Chico Sokol
------------------------------
Message: 9 Date: Fri, 06 Nov 2009 08:44:42 -0500 From: John Dennis <jdennis@redhat.com> Subject: Re: Can't compile FreeRADIUS with pam module To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <4AF4284A.5040807@redhat.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
On 11/06/2009 08:30 AM, Chico Sokol wrote:
Hum... I need development header files? I have pam installed, and the header files does exist at /usr/include/pam:
Did you install these *after* running configure? If so you'll have to run configure again so it can find them and set the right compiler flags.
-- John Dennis <jdennis@redhat.com>
Looking to carve out IT costs? www.redhat.com/carveoutcosts/
------------------------------
Message: 10 Date: Fri, 06 Nov 2009 08:47:37 -0500 From: Alan DeKok <aland@deployingradius.com> Subject: Re: Can't compile FreeRADIUS with pam module To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <4AF428F9.8010307@deployingradius.com> Content-Type: text/plain; charset=ISO-8859-1
Chico Sokol wrote:
Hum... I need development header files? I have pam installed, and the header files does exist at /usr/include/pam:
<shrug> Then the PAM module and header files are no longer compatible. I don't use PAM, so I'm not really sure what the underlying issue is.
Alan DeKok.
------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
End of Freeradius-Users Digest, Vol 55, Issue 24 ************************************************
_________________________________________________________________ Windows Live Hotmail: Your friends can get your Facebook updates, right from Hotmail?. http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/soc...
I couldn't read anything. If you want to "participate", I would suggest you not to use the "digest" mode. Thank you.
participants (2)
-
Peter Carlstedt -
Rakotomandimby Mihamina