Manual insert of credentials into radcheck row disappears after five mins ( MySQL )
Dear everybody, I was asked to manaully add a user into our Radius db for some thrird party monitoring. Sometimes when I insert the row it's there, but after 5 mins or less the row is removed, as shown below. Does some Radius process remove rows? * First attempt * mysql> INSERT INTO radcheck (id, username, attribute, op, value) VALUES (DEFAULT,'xmonitor1','User-Password',':=','xxxxxxx'); Query OK, 1 row affected (0.01 sec) mysql> select * from radcheck where username = 'xmonitor1'; Empty set (0.01 sec) (Disappeared immediately!) * Try again * mysql> INSERT INTO radcheck (id, username, attribute, op, value) VALUES (DEFAULT,'xmonitor1','User-Password',':=','xxxxxxx'); Query OK, 1 row affected (0.00 sec) mysql> select * from radcheck where username = 'xmonitor1'; +-------+-----------+---------------+----+---------+ | id | username | attribute | op | value | +-------+-----------+---------------+----+---------+ | 65745 | xmonitor1 | User-Password | := | xxxxxxx | +-------+-----------+---------------+----+---------+ 1 row in set (0.00 sec) ( Now it's there) ( Let's wait 5 mins and try this query again ) mysql> select * from radcheck where username = 'xmonitor1'; Empty set (0.00 sec) ( Opps. now it's gone ) ( Let's see if some other entry took this id ) mysql> select * from radcheck where id = '65745'; Empty set (0.00 sec) mysql> select * from radcheck where id = 65745; Empty set (0.00 sec) ( Nope ). Operating System: CentOS 6.2 RADIUS Server: freeradius-mysql-2.1.12-1.el6.x86_64 freeradius-utils-2.1.12-1.el6.x86_64 freeradius-2.1.12-1.el6.x86_64 MYSQL server: percona-xtrabackup-2.2.9-5067.el6.x86_64 Percona-Server-shared-56-5.6.21-rel69.0.el6.x86_64 Percona-Server-server-56-5.6.21-rel69.0.el6.x86_64 Percona-Server-shared-compat-5.5.30-rel30.2.508.rhel6.x86_64 percona-toolkit-2.2.3-1.noarch Percona-Server-client-56-5.6.21-rel69.0.el6.x86_64 I'd be very grateful if somebody could let me know how I could diagnose this, or perhaps tell me the right way to insert a username+password into Radius. Kind regards. Sophie
Hi, Someone or some script should be doing this. Check the mysql history you can see the commands executed to delete the rows. Change your mysql password and try again. Regards, Randeep On Tue, Jul 14, 2015 at 1:48 PM, Sophie Loewenthal < sophie.loewenthal@trimbletl.com> wrote:
Dear everybody,
I was asked to manaully add a user into our Radius db for some thrird party monitoring. Sometimes when I insert the row it's there, but after 5 mins or less the row is removed, as shown below. Does some Radius process remove rows?
* First attempt * mysql> INSERT INTO radcheck (id, username, attribute, op, value) VALUES (DEFAULT,'xmonitor1','User-Password',':=','xxxxxxx'); Query OK, 1 row affected (0.01 sec) mysql> select * from radcheck where username = 'xmonitor1'; Empty set (0.01 sec) (Disappeared immediately!)
* Try again * mysql> INSERT INTO radcheck (id, username, attribute, op, value) VALUES (DEFAULT,'xmonitor1','User-Password',':=','xxxxxxx'); Query OK, 1 row affected (0.00 sec) mysql> select * from radcheck where username = 'xmonitor1'; +-------+-----------+---------------+----+---------+ | id | username | attribute | op | value | +-------+-----------+---------------+----+---------+ | 65745 | xmonitor1 | User-Password | := | xxxxxxx | +-------+-----------+---------------+----+---------+ 1 row in set (0.00 sec) ( Now it's there) ( Let's wait 5 mins and try this query again ) mysql> select * from radcheck where username = 'xmonitor1'; Empty set (0.00 sec) ( Opps. now it's gone ) ( Let's see if some other entry took this id ) mysql> select * from radcheck where id = '65745'; Empty set (0.00 sec) mysql> select * from radcheck where id = 65745; Empty set (0.00 sec) ( Nope ).
Operating System: CentOS 6.2
RADIUS Server: freeradius-mysql-2.1.12-1.el6.x86_64 freeradius-utils-2.1.12-1.el6.x86_64 freeradius-2.1.12-1.el6.x86_64
MYSQL server: percona-xtrabackup-2.2.9-5067.el6.x86_64 Percona-Server-shared-56-5.6.21-rel69.0.el6.x86_64 Percona-Server-server-56-5.6.21-rel69.0.el6.x86_64 Percona-Server-shared-compat-5.5.30-rel30.2.508.rhel6.x86_64 percona-toolkit-2.2.3-1.noarch Percona-Server-client-56-5.6.21-rel69.0.el6.x86_64
I'd be very grateful if somebody could let me know how I could diagnose this, or perhaps tell me the right way to insert a username+password into Radius.
Kind regards. Sophie - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Randeep Mob: +919447831699[kerala] Mob: +919880050349[B'lore] http://twitter.com/Randeeppr http://in.linkedin.com/in/randeeppr [image: --] Randeep Raman [image: http://]about.me/Randeeppr <http://about.me/Randeeppr>
Hi Randeep, Yes, just seen radprov-sync delete this. Lots of thanks for helping me find the culprit. Jul 14 13:42:15 centos6-db-rad radprov-sync[25172]: OK: 0 added, 0 deleted, 0 APNs changed, 0 failed. Jul 14 13:47:13 centos6-db-rad radprov-sync[25439]: OK: 0 added, 0 deleted, 0 APNs changed, 0 failed. Jul 14 13:52:13 centos6-db-rad radprov-sync[25701]: Added 0000043c9 : 5584124DB1E4D015F2E8F2F00928B8D7 Jul 14 13:52:13 centos6-db-rad radprov-sync[25701]: OK: 1 added, 0 deleted, 0 APNs changed, 0 failed. Jul 14 13:55:13 centos6-db-rad radprov-sync[25903]: Deleted xmonitor1 My next step is now why?! With kind regards, Sophie Loewenthal System Engineer ITOPS / Trimble Transport & Logistics GSM:+32.471.900703 On 7/14/2015 11:55 AM, Randeep wrote:
Hi,
Someone or some script should be doing this.
Check the mysql history you can see the commands executed to delete the rows.
Change your mysql password and try again.
Regards, Randeep
On Tue, Jul 14, 2015 at 1:48 PM, Sophie Loewenthal < sophie.loewenthal@trimbletl.com> wrote:
Dear everybody,
I was asked to manaully add a user into our Radius db for some thrird party monitoring. Sometimes when I insert the row it's there, but after 5 mins or less the row is removed, as shown below. Does some Radius process remove rows?
* First attempt * mysql> INSERT INTO radcheck (id, username, attribute, op, value) VALUES (DEFAULT,'xmonitor1','User-Password',':=','xxxxxxx'); Query OK, 1 row affected (0.01 sec) mysql> select * from radcheck where username = 'xmonitor1'; Empty set (0.01 sec) (Disappeared immediately!)
* Try again * mysql> INSERT INTO radcheck (id, username, attribute, op, value) VALUES (DEFAULT,'xmonitor1','User-Password',':=','xxxxxxx'); Query OK, 1 row affected (0.00 sec) mysql> select * from radcheck where username = 'xmonitor1'; +-------+-----------+---------------+----+---------+ | id | username | attribute | op | value | +-------+-----------+---------------+----+---------+ | 65745 | xmonitor1 | User-Password | := | xxxxxxx | +-------+-----------+---------------+----+---------+ 1 row in set (0.00 sec) ( Now it's there) ( Let's wait 5 mins and try this query again ) mysql> select * from radcheck where username = 'xmonitor1'; Empty set (0.00 sec) ( Opps. now it's gone ) ( Let's see if some other entry took this id ) mysql> select * from radcheck where id = '65745'; Empty set (0.00 sec) mysql> select * from radcheck where id = 65745; Empty set (0.00 sec) ( Nope ).
Operating System: CentOS 6.2
RADIUS Server: freeradius-mysql-2.1.12-1.el6.x86_64 freeradius-utils-2.1.12-1.el6.x86_64 freeradius-2.1.12-1.el6.x86_64
MYSQL server: percona-xtrabackup-2.2.9-5067.el6.x86_64 Percona-Server-shared-56-5.6.21-rel69.0.el6.x86_64 Percona-Server-server-56-5.6.21-rel69.0.el6.x86_64 Percona-Server-shared-compat-5.5.30-rel30.2.508.rhel6.x86_64 percona-toolkit-2.2.3-1.noarch Percona-Server-client-56-5.6.21-rel69.0.el6.x86_64
I'd be very grateful if somebody could let me know how I could diagnose this, or perhaps tell me the right way to insert a username+password into Radius.
Kind regards. Sophie - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 14-07-15 13:58, Sophie Loewenthal wrote:
Hi Randeep,
Yes, just seen radprov-sync delete this. Lots of thanks for helping me find the culprit.
...
My next step is now why?!
Probably because it's trying to synchronize the database with some other data source, that does not contain a user "xmonitor1". At least, that's what the "sync" part in the name suggest. I've got no idea what that script exactly does, and I can't find anything about it on google. -- Herwin Weststrate
After reading this script., I see this was written by an earlier sys admin team in our company for integration with an inhouse application. Pleased to have found this because this was likely a missing piece of many puzzles I had with our radius server. With kind regards, Sophie Loewenthal System Engineer ITOPS / Trimble Transport & Logistics GSM:+32.471.900703 On 7/14/2015 2:13 PM, Herwin Weststrate wrote:
On 14-07-15 13:58, Sophie Loewenthal wrote:
Hi Randeep,
Yes, just seen radprov-sync delete this. Lots of thanks for helping me find the culprit.
...
My next step is now why?!
Probably because it's trying to synchronize the database with some other data source, that does not contain a user "xmonitor1". At least, that's what the "sync" part in the name suggest. I've got no idea what that script exactly does, and I can't find anything about it on google.
participants (4)
-
A.L.M.Buxey＠lboro.ac.uk -
Herwin Weststrate -
Randeep -
Sophie Loewenthal