Debian 7 sendfromto()
Hi! I'm using Debian 7 (Linux bill0 3.2.0-4-amd64 #1 SMP Debian 3.2.51-1 x86_64 GNU/Linux) and got the problem with Freeradius DHCP from current git. It's doesn't sent DHCP response back to user, and, while debugging it, i found that by default Freeradius sets a WITH_UDPFROMTO and thus uses udpfromto() function, but it always returns errno 22 (Invalid argument). But when use --with-udpfromto=no for configure, there's no any problem. Is it expected behavior? I'm using these parameters ./configure --with-static-modules=perl --with-dhcp --with-system-libtool --with-system-libpcre for
r00tk1d@km.pl.ua wrote:
Hi!
I'm using Debian 7 (Linux bill0 3.2.0-4-amd64 #1 SMP Debian 3.2.51-1 x86_64 GNU/Linux) and got the problem with Freeradius DHCP from current git.
Which one? There are 3 branches currently being maintained.
It's doesn't sent DHCP response back to user, and, while debugging it, i found that by default Freeradius sets a WITH_UDPFROMTO and thus uses udpfromto() function, but it always returns errno 22 (Invalid argument). But when use --with-udpfromto=no for configure, there's no any problem. Is it expected behavior? I'm using these parameters
No. I suspect that the issue is one which came up earlier. The udpfromto functionality can't handle addresses outside of the local network. Alan DeKok.
Currently it's 7.0.1 netinst image, with daily apt-get upgrade. Ok, sending packets fixed with flag --with-udpfromto=no, but got another problem with Option 82. I have and ExtremeNetworks switch Summit200-24 with ExtremeWare 7.8.4b1 (latest), and it cannot forward DHCP-Offer back to client. But it's works perfectly with FreeRADIUS 2.2.12, and i'm unnable to debug the switch. What is wrong with response int FreeRADIUS 3.0.1 ? ----- Исходное сообщение ----- От: "Alan DeKok" <aland@deployingradius.com> Кому: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Отправленные: Понедельник, 20 Январь 2014 г 20:45:19 Тема: Re: Debian 7 sendfromto() r00tk1d@km.pl.ua wrote:
Hi!
I'm using Debian 7 (Linux bill0 3.2.0-4-amd64 #1 SMP Debian 3.2.51-1 x86_64 GNU/Linux) and got the problem with Freeradius DHCP from current git.
Which one? There are 3 branches currently being maintained.
It's doesn't sent DHCP response back to user, and, while debugging it, i found that by default Freeradius sets a WITH_UDPFROMTO and thus uses udpfromto() function, but it always returns errno 22 (Invalid argument). But when use --with-udpfromto=no for configure, there's no any problem. Is it expected behavior? I'm using these parameters
No. I suspect that the issue is one which came up earlier. The udpfromto functionality can't handle addresses outside of the local network. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Finally it's done and working, and I think there is a BUG in FreeRADIUS DHCP module First, FreeRADIUS doesn't set DHCP-Flag to "Broadcast" by default (I removed the "boroadcast=" from config in listen section) Second, FreeRAIUS trying to send DHCP-Offer and DHCP-Reply to destination address "giaddr" BUT to port 68. I added a line that changes the destination to GIADDR:67 and now it's works just fine. Best Regards, Alex K ----- Исходное сообщение ----- От: r00tk1d@km.pl.ua Кому: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Отправленные: Среда, 22 Январь 2014 г 8:44:52 Тема: Re: Debian 7 sendfromto() Currently it's 7.0.1 netinst image, with daily apt-get upgrade. Ok, sending packets fixed with flag --with-udpfromto=no, but got another problem with Option 82. I have and ExtremeNetworks switch Summit200-24 with ExtremeWare 7.8.4b1 (latest), and it cannot forward DHCP-Offer back to client. But it's works perfectly with FreeRADIUS 2.2.12, and i'm unnable to debug the switch. What is wrong with response int FreeRADIUS 3.0.1 ? ----- Исходное сообщение ----- От: "Alan DeKok" <aland@deployingradius.com> Кому: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Отправленные: Понедельник, 20 Январь 2014 г 20:45:19 Тема: Re: Debian 7 sendfromto() r00tk1d@km.pl.ua wrote:
Hi!
I'm using Debian 7 (Linux bill0 3.2.0-4-amd64 #1 SMP Debian 3.2.51-1 x86_64 GNU/Linux) and got the problem with Freeradius DHCP from current git.
Which one? There are 3 branches currently being maintained.
It's doesn't sent DHCP response back to user, and, while debugging it, i found that by default Freeradius sets a WITH_UDPFROMTO and thus uses udpfromto() function, but it always returns errno 22 (Invalid argument). But when use --with-udpfromto=no for configure, there's no any problem. Is it expected behavior? I'm using these parameters
No. I suspect that the issue is one which came up earlier. The udpfromto functionality can't handle addresses outside of the local network. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
First, FreeRADIUS doesn't set DHCP-Flag to "Broadcast" by default (I removed the "boroadcast=" from config in listen section)
are you using the FreeRADIUS server on the same VLAN as the client - or is it a relay? if a relay then broadcast??
Second, FreeRAIUS trying to send DHCP-Offer and DHCP-Reply to destination address "giaddr" BUT to port 68. I added a line that changes the destination to GIADDR:67 and now it's works just fine.
port 68 is data TO the client alan
r00tk1d@km.pl.ua wrote:
Finally it's done and working, and I think there is a BUG in FreeRADIUS DHCP module
First, FreeRADIUS doesn't set DHCP-Flag to "Broadcast" by default (I removed the "boroadcast=" from config in listen section) Second, FreeRAIUS trying to send DHCP-Offer and DHCP-Reply to destination address "giaddr" BUT to port 68. I added a line that changes the destination to GIADDR:67 and now it's works just fine.
OK. I've pushed a fix to the v3.0.x branch. I've ensured that the destination port is 67 when sending to giaddr. I've also fixed an issue where the udpfromto code wouldn't work. Please try it, and report if it works. Alan DeKok.
Hi! Now it's just won't start. I didn't change any config file since last letter, just cloned from git again radiusd -XXX ...... Thu Jan 23 09:16:50 2014 : Debug: server inner-tunnel { # from file /usr/local/etc/raddb/sites-enabled/inner-tunnel Thu Jan 23 09:16:50 2014 : Debug: # Loading authenticate {...} Thu Jan 23 09:16:50 2014 : Debug: # Loading authorize {...} Thu Jan 23 09:16:50 2014 : WARNING: WARNING: Ignoring "sql" (see raddb/mods-available/README.rst) Thu Jan 23 09:16:50 2014 : WARNING: WARNING: Ignoring "ldap" (see raddb/mods-available/README.rst) Thu Jan 23 09:16:50 2014 : Debug: # Loading session {...} Thu Jan 23 09:16:50 2014 : Debug: # Loading post-proxy {...} Thu Jan 23 09:16:50 2014 : Debug: # Loading post-auth {...} Thu Jan 23 09:16:50 2014 : WARNING: WARNING: Ignoring "sql" (see raddb/mods-available/README.rst) Thu Jan 23 09:16:50 2014 : Debug: } # server inner-tunnel Thu Jan 23 09:16:50 2014 : Debug: server dhcp { # from file /usr/local/etc/raddb/sites-enabled/dhcp Thu Jan 23 09:16:50 2014 : Debug: Loading dictionary.dhcp Thu Jan 23 09:16:50 2014 : Error: Failed reading dictionary.dhcp: dict_init: Couldn't open dictionary "/usr/local/etc/raddb/dictionary.dhcp": No such file or directory ----- Исходное сообщение ----- От: "Alan DeKok" <aland@deployingradius.com> Кому: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Отправленные: Среда, 22 Январь 2014 г 21:33:40 Тема: Re: Debian 7 sendfromto() OK. I've pushed a fix to the v3.0.x branch. I've ensured that the destination port is 67 when sending to giaddr. I've also fixed an issue where the udpfromto code wouldn't work. Please try it, and report if it works. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I'm sorry for double posting, but it still sending replies to port 68 Encoding DHCP-Offer of id 2a528ade from 10.27.32.1:67 to 172.17.32.1:68 DHCP-Opcode = Server-Message DHCP-Hardware-Type = Ethernet DHCP-Hardware-Address-Length = 6 DHCP-Hop-Count = 1 DHCP-Transaction-Id = 710052574 DHCP-Number-of-Seconds = 0 DHCP-Flags = Broadcast DHCP-Client-IP-Address = 0.0.0.0 DHCP-Your-IP-Address = 176.102.223.254 DHCP-Server-IP-Address = 176.102.222.2 DHCP-Gateway-IP-Address = 172.17.32.1 DHCP-Client-Hardware-Address = 44:37:e6:94:f5:e4 DHCP-Server-Host-Name = '' DHCP-Boot-Filename = '' DHCP-Subnet-Mask = 255.255.252.0 DHCP-Domain-Name-Server = 176.102.223.1 DHCP-Router-Address = 176.102.222.1 DHCP-NTP-Servers = 1.1.1.1 DHCP-IP-Address-Lease-Time = 86500 DHCP-DHCP-Server-Identifier = 176.102.222.2 "Sending DHCP-Offer of id 2a528ade from 10.27.32.1:67 to 172.17.32.1:68" And I need fix for wrong directory lookup file dictionary.dhcp , temporary I copied it to raddb dir, while it is in /usr/local/share/freeradius/ radiusd -XXX ................ Thu Jan 23 09:16:50 2014 : Debug: server inner-tunnel { # from file /usr/local/etc/raddb/sites-enabled/inner-tunnel Thu Jan 23 09:16:50 2014 : Debug: # Loading authenticate {...} Thu Jan 23 09:16:50 2014 : Debug: # Loading authorize {...} Thu Jan 23 09:16:50 2014 : WARNING: WARNING: Ignoring "sql" (see raddb/mods-available/README.rst) Thu Jan 23 09:16:50 2014 : WARNING: WARNING: Ignoring "ldap" (see raddb/mods-available/README.rst) Thu Jan 23 09:16:50 2014 : Debug: # Loading session {...} Thu Jan 23 09:16:50 2014 : Debug: # Loading post-proxy {...} Thu Jan 23 09:16:50 2014 : Debug: # Loading post-auth {...} Thu Jan 23 09:16:50 2014 : WARNING: WARNING: Ignoring "sql" (see raddb/mods-available/README.rst) Thu Jan 23 09:16:50 2014 : Debug: } # server inner-tunnel Thu Jan 23 09:16:50 2014 : Debug: server dhcp { # from file /usr/local/etc/raddb/sites-enabled/dhcp Thu Jan 23 09:16:50 2014 : Debug: Loading dictionary.dhcp Thu Jan 23 09:16:50 2014 : Error: Failed reading dictionary.dhcp: dict_init: Couldn't open dictionary "/usr/local/etc/raddb/dictionary.dhcp": No such file or directory ----- Исходное сообщение ----- От: "Alan DeKok" <aland@deployingradius.com> Кому: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Отправленные: Среда, 22 Январь 2014 г 21:33:40 Тема: Re: Debian 7 sendfromto() OK. I've pushed a fix to the v3.0.x branch. I've ensured that the destination port is 67 when sending to giaddr. I've also fixed an issue where the udpfromto code wouldn't work. Please try it, and report if it works. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
r00tk1d@km.pl.ua wrote:
I'm sorry for double posting, but it still sending replies to port 68
Well... what does the *rest* of the debug output say? You say it's sending replies to port 68. And then post an edited debug output showing it sending replies to port 68. It doesn't show anything else... like the input packet, processing, etc. Please give me information which lets me *do* something. Right now, all I know is it's still broken.
And I need fix for wrong directory lookup file dictionary.dhcp , temporary I copied it to raddb dir, while it is in /usr/local/share/freeradius/
After more testing, I've reverted that change. I'll leave it for 4.0. Alan DeKok.
r00tk1d@km.pl.ua wrote:
Finally it's done and working, and I think there is a BUG in FreeRADIUS DHCP module
First, FreeRADIUS doesn't set DHCP-Flag to "Broadcast" by default (I removed the "boroadcast=" from config in listen section) Second, FreeRAIUS trying to send DHCP-Offer and DHCP-Reply to destination address "giaddr" BUT to port 68. I added a line that changes the destination to GIADDR:67 and now it's works just fine.
I've pushed another fix. Please try it, and report if it works. Alan DeKok.
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
r00tk1d＠km.pl.ua