I have the same problem as Miha Zoubek. Alan DeKok wrote:
Miha Zoubek wrote:
at the end of this file I am getting massage Failed to load module "sql".
Does your system have the rlm_sql library? Did you configure the SQL module?
In freeradius-server 2.1.9-1.7 in OpenSuse 11.3, directory /usr/lib/freeradius contains all of the same files as were present in freeradius-server 2.0.5-8.3 in OpenSuse 11.0, but obviously filenames reflect the newer version number. It is interesting that modules other than rlm_sql load with no problems. In sites-available files default and inner-tunnel, if I change contents from sql to files, then all other modules load OK. Only the sql module fails to load. Mysql works by itself, and dialup_admin access mysql. I did change admin.sql to change 3 lines into 1: GRANT ALL ON radius.* TO 'radius'@'localhost'; because I figured dialup_admin would need it. But I think radiusd -XC doesn't get that far, because radiusd -XC can't load the module for SQL. I wondered if libgda might be relevant because it was installed in OpenSuse 11.0 (I don't know what I did to install it but it was there). Therefore I added libgda to the OpenSuse 11.3 machine but it didn't change the problem. Maybe rlm_sql and rlm_sql_mysql depend on something else, but I can't guess what. Modules file inner-eap was added in between 2.0.5-8.3 and 2.1.9-1.7 but the only thing I did there was edit the password. What else changed? Why did it break? And most importantly, how can I fix it? -------------------------------------- Get the new Internet Explorer 8 optimized for Yahoo! JAPAN http://pr.mail.yahoo.co.jp/ie8/
On Wed, Dec 22, 2010 at 9:07 AM, Norman Diamond <n0diamond@yahoo.co.jp> wrote:
radiusd -XC can't load the module for SQL.
What else changed? Why did it break? And most importantly, how can I fix it?
What does the debug log show? Does it complain about missing library or incorrect configuration? Do you have the relevant freeradius-mysql (or whatever the name is on your distro) installed? -- Fajar
Fajar A. Nugraha wrote:
On Wed, Dec 22, 2010 at 9:07 AM, Norman Diamond wrote:
radiusd -XC can't load the module for SQL. What else changed? �Why did it break? �And most importantly, how can I fix it?
What does the debug log show?
OK, I ran radiusd -XXXC and it's the same. Output lines now have the word Debug in them but the contents are the same. It successfully links to rlm_realm and configures that, as used by inner-tunnel. (If I unconfigure sql in inner-tunnel then the last successful operation comes somewhat later in default.) Immediately after that success, it says: Failed to load module "sql". It does not give any additional information about what part of the load operation failed.
Does it complain about missing library or incorrect configuration?
Not that I can see.
Do you have the relevant freeradius-mysql (or whatever the name is on your distro) installed?
As mentioned, a bunch of files are the same except for updated versions in the filnames: /usr/lib/freeradius/rlm_sql-2.1.9.so /usr/lib/freeradius/rlm_sql.so (symbolic link) /usr/lib/freeradius/rlm_sql_mysql-2.1.9.so /usr/lib/freeradius/rlm_sql_mysql.so (symbolic link) etc. These are in Suse's RPM freeradius-server. (Other RPMs also have names freeradius-server-* and I installed all of them.) -------------------------------------- Get the new Internet Explorer 8 optimized for Yahoo! JAPAN http://pr.mail.yahoo.co.jp/ie8/
2010/12/22 Norman Diamond <n0diamond@yahoo.co.jp>:
Fajar A. Nugraha wrote:
What does the debug log show?
OK, I ran radiusd -XXXC and it's the same. Output lines now have the word Debug in them but the contents are the same. It successfully links to rlm_realm and configures that, as used by inner-tunnel. (If I unconfigure sql in inner-tunnel then the last successful operation comes somewhat later in default.) Immediately after that success, it says: Failed to load module "sql". It does not give any additional information about what part of the load operation failed.
From http://wiki.freeradius.org/Radiusd "Ask questions on the mailing list. When asking questions, include the output from debugging mode ( radiusd -X ). This information will allow people to help you. Without it, your message will get ignored."
-- Fajar
Fajar A. Nugraha wrote:
Norman Diamond wrote:
Fajar A. Nugraha wrote:
What does the debug log show?
OK, I ran radiusd -XXXC and it's the same. �Output lines now have the word Debug in them but the contents are the same. �It successfully links to rlm_realm and configures that, as used by inner-tunnel. �(If I unconfigure sql in inner-tunnel then the last successful operation comes somewhat later in default.) �Immediately after that success, it says: �Failed to load module "sql". It does not give any additional information about what part of the load operation failed.
From http://wiki.freeradius.org/Radiusd "Ask questions on the mailing list. When asking questions, include the output from debugging mode ( radiusd -X ). This information will allow people to help you. Without it, your message will get ignored."
Yahoo's web mail interface wraps lines, sorry. Anyway I think you'll detect that my wording described the output: Wed Dec 22 12:57:04 2010 : Info: FreeRADIUS Version 2.1.9, for host i686-pc-linux-gnu, built on Jul 5 2010 at 21:41:31 Wed Dec 22 12:57:04 2010 : Info: Copyright (C) 1999-2009 The FreeRADIUS server project and contributors. Wed Dec 22 12:57:04 2010 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Wed Dec 22 12:57:04 2010 : Info: PARTICULAR PURPOSE. Wed Dec 22 12:57:04 2010 : Info: You may redistribute copies of FreeRADIUS under the terms of the Wed Dec 22 12:57:04 2010 : Info: GNU General Public License v2. Wed Dec 22 12:57:04 2010 : Info: Starting - reading configuration files ... Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/radiusd.conf Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/proxy.conf Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/clients.conf Wed Dec 22 12:57:04 2010 : Debug: including files in directory /etc/raddb/modules/ Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/realm Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/ntlm_auth Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/expr Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/radutmp Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/echo Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/digest Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/pap.org Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/checkval Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/counter Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/logintime Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/preprocess Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/etc_group Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/perl Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/pam Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/unix Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/linelog Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/pap Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/mschap Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/smsotp Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/expiration Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/chap Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/detail.example.com Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/smbpasswd Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/detail.log Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/acct_unique Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/sradutmp Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/detail Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/mac2ip Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/otp Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/sql_log Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/ldap Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/inner-eap.org Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/attr_filter Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/files Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/attr_rewrite Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/mac2vlan Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/policy Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/cui Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/sqlcounter_expire_on_login Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/always Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/inner-eap Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/krb5 Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/wimax Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/exec Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/passwd Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/inner-eap.diamond Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/pap.diamond Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/modules/ippool Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/eap.conf Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/policy.conf Wed Dec 22 12:57:04 2010 : Debug: including files in directory /etc/raddb/sites-enabled/ Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/sites-enabled/default Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/sites-enabled/control-socket Wed Dec 22 12:57:04 2010 : Debug: including configuration file /etc/raddb/sites-enabled/inner-tunnel Wed Dec 22 12:57:04 2010 : Debug: main { Wed Dec 22 12:57:04 2010 : Debug: user = "radiusd" Wed Dec 22 12:57:04 2010 : Debug: group = "radiusd" Wed Dec 22 12:57:04 2010 : Debug: allow_core_dumps = no Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Debug: including dictionary file /etc/raddb/dictionary Wed Dec 22 12:57:04 2010 : Debug: main { Wed Dec 22 12:57:04 2010 : Debug: prefix = "/usr" Wed Dec 22 12:57:04 2010 : Debug: localstatedir = "/var" Wed Dec 22 12:57:04 2010 : Debug: logdir = "/var/log/radius" Wed Dec 22 12:57:04 2010 : Debug: libdir = "/usr/lib/freeradius" Wed Dec 22 12:57:04 2010 : Debug: radacctdir = "/var/log/radius/radacct" Wed Dec 22 12:57:04 2010 : Debug: hostname_lookups = no Wed Dec 22 12:57:04 2010 : Debug: max_request_time = 30 Wed Dec 22 12:57:04 2010 : Debug: cleanup_delay = 5 Wed Dec 22 12:57:04 2010 : Debug: max_requests = 1024 Wed Dec 22 12:57:04 2010 : Debug: pidfile = "/var/run/radiusd/radiusd.pid" Wed Dec 22 12:57:04 2010 : Debug: checkrad = "/usr/sbin/checkrad" Wed Dec 22 12:57:04 2010 : Debug: debug_level = 0 Wed Dec 22 12:57:04 2010 : Debug: proxy_requests = yes Wed Dec 22 12:57:04 2010 : Debug: log { Wed Dec 22 12:57:04 2010 : Debug: stripped_names = no Wed Dec 22 12:57:04 2010 : Debug: auth = no Wed Dec 22 12:57:04 2010 : Debug: auth_badpass = no Wed Dec 22 12:57:04 2010 : Debug: auth_goodpass = no Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Debug: security { Wed Dec 22 12:57:04 2010 : Debug: max_attributes = 200 Wed Dec 22 12:57:04 2010 : Debug: reject_delay = 1 Wed Dec 22 12:57:04 2010 : Debug: status_server = yes Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Debug: radiusd: #### Loading Realms and Home Servers #### Wed Dec 22 12:57:04 2010 : Debug: proxy server { Wed Dec 22 12:57:04 2010 : Debug: retry_delay = 5 Wed Dec 22 12:57:04 2010 : Debug: retry_count = 3 Wed Dec 22 12:57:04 2010 : Debug: default_fallback = no Wed Dec 22 12:57:04 2010 : Debug: dead_time = 120 Wed Dec 22 12:57:04 2010 : Debug: wake_all_if_all_dead = no Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Debug: home_server localhost { Wed Dec 22 12:57:04 2010 : Debug: ipaddr = 127.0.0.1 Wed Dec 22 12:57:04 2010 : Debug: port = 1812 Wed Dec 22 12:57:04 2010 : Debug: type = "auth" Wed Dec 22 12:57:04 2010 : Debug: secret = "testing123" Wed Dec 22 12:57:04 2010 : Debug: response_window = 20 Wed Dec 22 12:57:04 2010 : Debug: max_outstanding = 65536 Wed Dec 22 12:57:04 2010 : Debug: require_message_authenticator = no Wed Dec 22 12:57:04 2010 : Debug: zombie_period = 40 Wed Dec 22 12:57:04 2010 : Debug: status_check = "status-server" Wed Dec 22 12:57:04 2010 : Debug: ping_interval = 30 Wed Dec 22 12:57:04 2010 : Debug: check_interval = 30 Wed Dec 22 12:57:04 2010 : Debug: num_answers_to_alive = 3 Wed Dec 22 12:57:04 2010 : Debug: num_pings_to_alive = 3 Wed Dec 22 12:57:04 2010 : Debug: revive_interval = 120 Wed Dec 22 12:57:04 2010 : Debug: status_check_timeout = 4 Wed Dec 22 12:57:04 2010 : Debug: irt = 2 Wed Dec 22 12:57:04 2010 : Debug: mrt = 16 Wed Dec 22 12:57:04 2010 : Debug: mrc = 5 Wed Dec 22 12:57:04 2010 : Debug: mrd = 30 Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Debug: home_server_pool my_auth_failover { Wed Dec 22 12:57:04 2010 : Debug: type = fail-over Wed Dec 22 12:57:04 2010 : Debug: home_server = localhost Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Debug: realm example.com { Wed Dec 22 12:57:04 2010 : Debug: auth_pool = my_auth_failover Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Debug: realm LOCAL { Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Debug: radiusd: #### Loading Clients #### Wed Dec 22 12:57:04 2010 : Debug: client localhost { Wed Dec 22 12:57:04 2010 : Debug: ipaddr = 127.0.0.1 Wed Dec 22 12:57:04 2010 : Debug: require_message_authenticator = no Wed Dec 22 12:57:04 2010 : Debug: secret = "testing123" Wed Dec 22 12:57:04 2010 : Debug: nastype = "other" Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Debug: radiusd: #### Instantiating modules #### Wed Dec 22 12:57:04 2010 : Debug: instantiate { Wed Dec 22 12:57:04 2010 : Debug: (Loaded rlm_exec, checking if it's valid) Wed Dec 22 12:57:04 2010 : Debug: Module: Linked to module rlm_exec Wed Dec 22 12:57:04 2010 : Debug: Module: Instantiating exec Wed Dec 22 12:57:04 2010 : Debug: exec { Wed Dec 22 12:57:04 2010 : Debug: wait = no Wed Dec 22 12:57:04 2010 : Debug: input_pairs = "request" Wed Dec 22 12:57:04 2010 : Debug: shell_escape = yes Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Debug: (Loaded rlm_expr, checking if it's valid) Wed Dec 22 12:57:04 2010 : Debug: Module: Linked to module rlm_expr Wed Dec 22 12:57:04 2010 : Debug: Module: Instantiating expr Wed Dec 22 12:57:04 2010 : Debug: (Loaded rlm_expiration, checking if it's valid) Wed Dec 22 12:57:04 2010 : Debug: Module: Linked to module rlm_expiration Wed Dec 22 12:57:04 2010 : Debug: Module: Skipping instantiation of expiration Wed Dec 22 12:57:04 2010 : Debug: (Loaded rlm_logintime, checking if it's valid) Wed Dec 22 12:57:04 2010 : Debug: Module: Linked to module rlm_logintime Wed Dec 22 12:57:04 2010 : Debug: Module: Instantiating logintime Wed Dec 22 12:57:04 2010 : Debug: logintime { Wed Dec 22 12:57:04 2010 : Debug: reply-message = "You are calling outside your allowed timespan " Wed Dec 22 12:57:04 2010 : Debug: minimum-timeout = 60 Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Debug: radiusd: #### Loading Virtual Servers #### Wed Dec 22 12:57:04 2010 : Debug: server inner-tunnel { Wed Dec 22 12:57:04 2010 : Debug: modules { Wed Dec 22 12:57:04 2010 : Debug: Module: Checking authenticate {...} for more modules to load Wed Dec 22 12:57:04 2010 : Debug: (Loaded rlm_pap, checking if it's valid) Wed Dec 22 12:57:04 2010 : Debug: Module: Linked to module rlm_pap Wed Dec 22 12:57:04 2010 : Debug: Module: Instantiating pap Wed Dec 22 12:57:04 2010 : Debug: pap { Wed Dec 22 12:57:04 2010 : Debug: encryption_scheme = "auto" Wed Dec 22 12:57:04 2010 : Debug: auto_header = no Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Debug: (Loaded rlm_chap, checking if it's valid) Wed Dec 22 12:57:04 2010 : Debug: Module: Linked to module rlm_chap Wed Dec 22 12:57:04 2010 : Debug: Module: Instantiating chap Wed Dec 22 12:57:04 2010 : Debug: (Loaded rlm_mschap, checking if it's valid) Wed Dec 22 12:57:04 2010 : Debug: Module: Linked to module rlm_mschap Wed Dec 22 12:57:04 2010 : Debug: Module: Skipping instantiation of mschap Wed Dec 22 12:57:04 2010 : Debug: (Loaded rlm_unix, checking if it's valid) Wed Dec 22 12:57:04 2010 : Debug: Module: Linked to module rlm_unix Wed Dec 22 12:57:04 2010 : Debug: Module: Instantiating unix Wed Dec 22 12:57:04 2010 : Debug: unix { Wed Dec 22 12:57:04 2010 : Debug: radwtmp = "/var/log/radius/radwtmp" Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Debug: (Loaded rlm_eap, checking if it's valid) Wed Dec 22 12:57:04 2010 : Debug: Module: Linked to module rlm_eap Wed Dec 22 12:57:04 2010 : Debug: Module: Instantiating eap Wed Dec 22 12:57:04 2010 : Debug: eap { Wed Dec 22 12:57:04 2010 : Debug: default_eap_type = "md5" Wed Dec 22 12:57:04 2010 : Debug: timer_expire = 60 Wed Dec 22 12:57:04 2010 : Debug: ignore_unknown_eap_types = no Wed Dec 22 12:57:04 2010 : Debug: cisco_accounting_username_bug = no Wed Dec 22 12:57:04 2010 : Debug: max_sessions = 4096 Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Debug: Module: Linked to sub-module rlm_eap_md5 Wed Dec 22 12:57:04 2010 : Debug: Module: Instantiating eap-md5 Wed Dec 22 12:57:04 2010 : Debug: Module: Linked to sub-module rlm_eap_leap Wed Dec 22 12:57:04 2010 : Debug: Module: Instantiating eap-leap Wed Dec 22 12:57:04 2010 : Debug: Module: Linked to sub-module rlm_eap_gtc Wed Dec 22 12:57:04 2010 : Debug: Module: Instantiating eap-gtc Wed Dec 22 12:57:04 2010 : Debug: gtc { Wed Dec 22 12:57:04 2010 : Debug: challenge = "Password: " Wed Dec 22 12:57:04 2010 : Debug: auth_type = "PAP" Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Debug: Module: Linked to sub-module rlm_eap_tls Wed Dec 22 12:57:04 2010 : Debug: Module: Instantiating eap-tls Wed Dec 22 12:57:04 2010 : Debug: tls { Wed Dec 22 12:57:04 2010 : Debug: rsa_key_exchange = no Wed Dec 22 12:57:04 2010 : Debug: dh_key_exchange = yes Wed Dec 22 12:57:04 2010 : Debug: rsa_key_length = 512 Wed Dec 22 12:57:04 2010 : Debug: dh_key_length = 512 Wed Dec 22 12:57:04 2010 : Debug: verify_depth = 0 Wed Dec 22 12:57:04 2010 : Debug: pem_file_type = yes Wed Dec 22 12:57:04 2010 : Debug: private_key_file = "/etc/raddb/certs/server.pem" Wed Dec 22 12:57:04 2010 : Debug: certificate_file = "/etc/raddb/certs/server.pem" Wed Dec 22 12:57:04 2010 : Debug: CA_file = "/etc/raddb/certs/ca.pem" Wed Dec 22 12:57:04 2010 : Debug: private_key_password = "censored" Wed Dec 22 12:57:04 2010 : Debug: dh_file = "/etc/raddb/certs/dh" Wed Dec 22 12:57:04 2010 : Debug: random_file = "/etc/raddb/certs/random" Wed Dec 22 12:57:04 2010 : Debug: fragment_size = 1024 Wed Dec 22 12:57:04 2010 : Debug: include_length = yes Wed Dec 22 12:57:04 2010 : Debug: check_crl = no Wed Dec 22 12:57:04 2010 : Debug: cipher_list = "DEFAULT" Wed Dec 22 12:57:04 2010 : Debug: make_cert_command = "/etc/raddb/certs/bootstrap" Wed Dec 22 12:57:04 2010 : Debug: cache { Wed Dec 22 12:57:04 2010 : Debug: enable = no Wed Dec 22 12:57:04 2010 : Debug: lifetime = 24 Wed Dec 22 12:57:04 2010 : Debug: max_entries = 255 Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Debug: Module: Linked to sub-module rlm_eap_ttls Wed Dec 22 12:57:04 2010 : Debug: Module: Instantiating eap-ttls Wed Dec 22 12:57:04 2010 : Debug: ttls { Wed Dec 22 12:57:04 2010 : Debug: default_eap_type = "md5" Wed Dec 22 12:57:04 2010 : Debug: copy_request_to_tunnel = no Wed Dec 22 12:57:04 2010 : Debug: use_tunneled_reply = no Wed Dec 22 12:57:04 2010 : Debug: virtual_server = "inner-tunnel" Wed Dec 22 12:57:04 2010 : Debug: include_length = yes Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Debug: Module: Linked to sub-module rlm_eap_peap Wed Dec 22 12:57:04 2010 : Debug: Module: Instantiating eap-peap Wed Dec 22 12:57:04 2010 : Debug: peap { Wed Dec 22 12:57:04 2010 : Debug: default_eap_type = "mschapv2" Wed Dec 22 12:57:04 2010 : Debug: copy_request_to_tunnel = no Wed Dec 22 12:57:04 2010 : Debug: use_tunneled_reply = no Wed Dec 22 12:57:04 2010 : Debug: proxy_tunneled_request_as_eap = yes Wed Dec 22 12:57:04 2010 : Debug: virtual_server = "inner-tunnel" Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Debug: Module: Linked to sub-module rlm_eap_mschapv2 Wed Dec 22 12:57:04 2010 : Debug: Module: Instantiating eap-mschapv2 Wed Dec 22 12:57:04 2010 : Debug: mschapv2 { Wed Dec 22 12:57:04 2010 : Debug: with_ntdomain_hack = no Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Debug: Module: Checking authorize {...} for more modules to load Wed Dec 22 12:57:04 2010 : Debug: (Loaded rlm_realm, checking if it's valid) Wed Dec 22 12:57:04 2010 : Debug: Module: Linked to module rlm_realm Wed Dec 22 12:57:04 2010 : Debug: Module: Instantiating suffix Wed Dec 22 12:57:04 2010 : Debug: realm suffix { Wed Dec 22 12:57:04 2010 : Debug: format = "suffix" Wed Dec 22 12:57:04 2010 : Debug: delimiter = "@" Wed Dec 22 12:57:04 2010 : Debug: ignore_default = no Wed Dec 22 12:57:04 2010 : Debug: ignore_null = no Wed Dec 22 12:57:04 2010 : Debug: } Wed Dec 22 12:57:04 2010 : Error: /etc/raddb/sites-enabled/inner-tunnel[118]: Failed to load module "sql". Wed Dec 22 12:57:04 2010 : Error: /etc/raddb/sites-enabled/inner-tunnel[34]: Errors parsing authorize section. -------------------------------------- Get the new Internet Explorer 8 optimized for Yahoo! JAPAN http://pr.mail.yahoo.co.jp/ie8/
2010/12/22 Norman Diamond <n0diamond@yahoo.co.jp>:
Fajar A. Nugraha wrote:
Norman Diamond wrote:
Fajar A. Nugraha wrote:
What does the debug log show?
OK, I ran radiusd -XXXC and it's the same. Output lines now have the word Debug in them but the contents are the same. It successfully links to rlm_realm and configures that, as used by inner-tunnel. (If I unconfigure sql in inner-tunnel then the last successful operation comes somewhat later in default.) Immediately after that success, it says: Failed to load module "sql". It does not give any additional information about what part of the load operation failed.
From http://wiki.freeradius.org/Radiusd "Ask questions on the mailing list. When asking questions, include the output from debugging mode ( radiusd -X ). This information will allow people to help you. Without it, your message will get ignored."
Yahoo's web mail interface wraps lines, sorry.
If you just use "radiusd -X" (like the wiki says) the output would be much easier to read.
Anyway I think you'll detect that my wording described the output:
/etc/raddb/sites-enabled/inner-tunnel[118]: Failed to load module "sql".
... and if you've included the debug output from start you'd see that sql.conf was never loaded. Probably because you haven't bothered looking at radiusd.conf and uncomment the line # $INCLUDE sql.conf without that, the sql module is not initialized, and would give an error when you call "sql" in the config file. -- Fajar
Fajar A. Nugraha wrote:
Norman Diamond wrote:
Fajar A. Nugraha wrote:
Norman Diamond wrote:
Fajar A. Nugraha wrote:
What does the debug log show?
OK, I ran radiusd -XXXC and it's the same. Output lines now have the word Debug in them but the contents are the same. It successfully links to rlm_realm and configures that, as used by inner-tunnel. (If I unconfigure sql in inner-tunnel then the last successful operation comes somewhat later in default.) Immediately after that success, it says: Failed to load module "sql". It does not give any additional information about what part of the load operation failed.
From http://wiki.freeradius.org/Radiusd "Ask questions on the mailing list. When asking questions, include the output from debugging mode ( radiusd -X ). This information will allow people to help you. Without it, your message will get ignored."
Yahoo's web mail interface wraps lines, sorry.
If you just use "radiusd -X" (like the wiki says) the output would be much easier to read.
I think readability would be the same. I had expected radiusd -XXXC to produce more lines of output than radiusd -XC but it didn't (or at least not any that I noticed). Insertion of the word Debug slightly lengthened the lines but even without that the lines still would get wrapped by Yahoo's web mail.
Anyway I think you'll detect that my wording described the output: [...] /etc/raddb/sites-enabled/inner-tunnel[118]: Failed to load module "sql".
... and if you've included the debug output from start you'd see that sql.conf was never loaded.
YOU saw that and I thank you. I would not have known to look for that. The reason follows below.
Probably because you haven't bothered looking at radiusd.conf and uncomment the line
# $INCLUDE sql.conf
Because I didn't guess that radiusd.conf had such a change between version 2.0.5-8.3 in OpenSuse 11.0, and version 2.1.9-1.7 in OpenSuse 11.3. Thank you for pointing that out. YOU knew about the change and I thank you. I did not know about the change.
without that, the sql module is not initialized, and would give an error when you call "sql" in the config file.
I understand. I thank you again. Please note that my initial posting to this discussion asked what changed between those two versions to break the use of SQL, and here you have answered. I thank you for answering. I think you could have answered directly that radiusd.conf changed and users need to look at it. Yours sincerely, Norman Diamond -------------------------------------- Get the new Internet Explorer 8 optimized for Yahoo! JAPAN http://pr.mail.yahoo.co.jp/ie8/
2010/12/22 Norman Diamond <n0diamond@yahoo.co.jp>:
/etc/raddb/sites-enabled/inner-tunnel[118]: Failed to load module "sql".
... and if you've included the debug output from start you'd see that sql.conf was never loaded.
YOU saw that and I thank you. I would not have known to look for that. The reason follows below.
So it's working now? Good to hear.
Please note that my initial posting to this discussion asked what changed between those two versions to break the use of SQL, and here you have answered. I thank you for answering. I think you could have answered directly that radiusd.conf changed and users need to look at it.
I couldn't have answered that, because I didn't know what the exact changes are. First of all, I don't use freeradius 2.0.x. Second, distro packagers can change the default bundled config files, making it both version and distro-specific. Regardles, debug output can usually show what's wrong in a setup, which is why it's very important to include them. -- Fajar
participants (2)
-
Fajar A. Nugraha -
Norman Diamond