Re: Book About Free-Radius Configurations
Thanks Alan Dekok, I think that I saw in your blog that you is writting a book about RADIUS. The project continues? And about the book http://www.amazon.com/Radius-Jonathan-Hassell/dp/0596003226/ref=pd_sim_b_3 do you know it? I'm need to buy some book to configure a freeradius server on my network. Thanks, Inácio Alves Bacharel em Matemática(UFC)/Técnico em Conectividade(IFCE) http://www.polluxweb.com/inacioalves/site
I have that book and I don't recommend it. It seems just like a RFC copy. Unfort. you do not have to much options. The better idea is to read this list and ask if you find something that bothers you :) Best regards INACIO ALVES wrote:
Thanks Alan Dekok,
I think that I saw in your blog that you is writting a book about RADIUS. The project continues? And about the book http://www.amazon.com/Radius-Jonathan-Hassell/dp/0596003226/ref=pd_sim_b_3 do you know it? I'm need to buy some book to configure a freeradius server on my network.
Thanks,
Inácio Alves
Bacharel em Matemática(UFC)/Técnico em Conectividade(IFCE) http://www.polluxweb.com/inacioalves/site
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
INACIO ALVES wrote:
I'm need to buy some book to configure a freeradius server on my network.
I found that reading through every file in the doc directory as well as reading all the configuration files (even the one's you think you might not need provides a VERY good understanding) of radius and freeradius..... -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782
INACIO ALVES wrote:
I think that I saw in your blog that you is writting a book about RADIUS. The project continues?
Slowly, but I am making progress.
And about the book http://www.amazon.com/Radius-Jonathan-Hassell/dp/0596003226/ref=pd_sim_b_3 do you know it? I'm need to buy some book to configure a freeradius server on my network.
The text about FreeRADIUS in that book is pretty much copied from the FreeRADIUS configuration files. I don't think it will help you. I'm going to start putting sample chapters of my book online. Hopefully before Christmas. Alan DeKok.
Hello Alan, Thanks so much for your answer. Below, you can find the additionally information about us problem : - which OS && CPU (32 / 64-bit) ---> CentOs 5.2 - CPU: 32 bits - which version of the server - --> 2.1.6 - which command line was used to run the server --> ./radiusd - is this reproducible in non-threaded mode (radiusd -fs) - we did not try because we needed performance We have a question for you : Why is not there a protection for "null pointer" to avoid this kind of problem? Best Regards, Fabiana ------------------------------------------------------------------------------------------------------------------------------------------------ * To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> * Subject: Re: Crash due to fr_packet_cmp * From: Alan DeKok <aland@deployingradius.com> * Date: Sun, 15 Nov 2009 21:19:55 +0100 * In-reply-to: <828995.26169.qm@web26202.mail.ukl.yahoo.com> * References: <828995.26169.qm@web26202.mail.ukl.yahoo.com> * Reply-to: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> * User-agent: Thunderbird 2.0.0.23 (Macintosh/20090812) ________________________________ fabiana marvani wrote:
After some time with load the freeradius crashes
We first noticed this crash with our plugins activated, but then we deactivated all plugins and used "default" configuration:
There have been a few reports similar to this. They all require sending the server many 10s of millions of packets over a long time. This makes it hard to reproduce && debug. It's likely a race condition. But it's hard to say where, or why.
core.8555 Program terminated with signal 11, Segmentation fault. (gdb) bt #0 fr_packet_cmp (a=0xb4897cd8, b=0x0) at packet.c:139 ... #6 0x0806cf83 in received_request (listener=0x8d4f608, packet=0xb4897cd8, prequest=0xbf89d0dc, client=0x8d2fc80) at event.c:2723
The server keeps all packets in a hash, to ensure it catches duplicates, etc. The hash is keyed by the source packet (src/dst ip/port). The crash comes because the "request" structure is still in the hash, though the "packet" entry in that structure has become NULL. The only problem is... the packet entry is *only* set to NULL after the request has been deleted from hash. And *only* the main thread adds/deletes entries to the hash. And *only* the main thread allocates or free's request data structures. So this is a problem that should be avoided completely by the design of the server. Some questions: - which OS && CPU (32 / 64-bit) - which version of the server - which command line was used to run the server - is this reproducible in non-threaded mode (radiusd -fs) If you are using an older version of the server, please also try with the current git "stable" branch (see git.freeradius.org). It has some changes which give it only one code path for doing certain kinds of request mangling. This makes it less likely for there to be errors, race conditions, etc. Alan DeKok. ________________________________ * References: * Crash due to fr_packet_cmp * From: fabiana marvani <fabiana_marvani@yahoo.it> * Previous by Date: Re: DHCP in FR * Next by Date: Re: DHCP in FR * Previous by Thread: Crash due to fr_packet_cmp * Next by Thread: Deprecate the X-Ascend-* attributes in dictionary.ascend? * Freeradius-Users November 2009 archives indexes sorted by: [ thread ] [ subject ] [ author ] [ date ] * Freeradius-Users list archive Table of Contents * More information about the Freeradius-Users mailing list
fabiana marvani wrote:
Why is not there a protection for "null pointer" to avoid this kind of problem?
Because the design of the server means that this crash *should* be impossible. The request packet has been placed in a hash table. The crash comes because the request data structure is still in the hash, but the request packet has been freed. This should *not* happen. And reading src/main/event.c, there are only 3-4 locations in the code that reads/writes "request->packet". i.e. it FIRST removes the request from the hash, and THEN frees the packet. It's always in this order, and always done in the main thread. So I have no idea why this is happening... Alan DeKok.
Alan, Could this be some sort of a compiler optimization that may be causing this? May be some memory barrier is required? Padam Alan DeKok wrote:
fabiana marvani wrote:
Why is not there a protection for "null pointer" to avoid this kind of problem?
Because the design of the server means that this crash *should* be impossible.
The request packet has been placed in a hash table. The crash comes because the request data structure is still in the hash, but the request packet has been freed. This should *not* happen.
And reading src/main/event.c, there are only 3-4 locations in the code that reads/writes "request->packet". i.e. it FIRST removes the request from the hash, and THEN frees the packet. It's always in this order, and always done in the main thread.
So I have no idea why this is happening...
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Padam J Singh wrote:
Could this be some sort of a compiler optimization that may be causing this? May be some memory barrier is required?
I don't see why. All of the lookups, insertions, and deletions into the hash occur in the main processing thread. The child threads process packets through modules, and do *not* touch the hash. I don't see any compiler re-ordering those operations so that they cause problems in one thread of execution. But the fact that the request is still in the hash, AND the packet is free'd is *very* odd. The only calls to "request_free" assert that the request isn't in the hash. The only calls to "rad_free(packet)" are in the function freeing the request, which has the above checks. Alan DeKok.
Olá, Inácio. Eu gostaria de encontrar um livro bom sobre RADIUS também. Estou com essa responsabilidade de implementá-lo, mas tem sido difícil, já que não existe uma documentação tão bom na Internet. Um abraço, -- Wagner Pereira PoP-SP/RNP - Ponto de Presença da RNP em São Paulo CCE/USP - Centro de Computação Eletrônica da Universidade de São Paulo http://www.pop-sp.rnp.br (11) 3091-8902 INACIO ALVES escreveu:
Thanks Alan Dekok,
I think that I saw in your blog that you is writting a book about RADIUS. The project continues? And about the book http://www.amazon.com/Radius-Jonathan-Hassell/dp/0596003226/ref=pd_sim_b_3 do you know it? I'm need to buy some book to configure a freeradius server on my network.
Thanks,
Inácio Alves
Bacharel em Matemática(UFC)/Técnico em Conectividade(IFCE) http://www.polluxweb.com/inacioalves/site
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Acho que é um pouco má onda estar a enviar mensagens para uma lista international numa lingua que só alguns entendem. Se calhar o melhor seria trocarem mensagens entre vocês apenas. Mas isto é apenas a minha opinião... 2009/11/18 Wagner Pereira <wpereira@pop-sp.rnp.br>
Olá, Inácio.
Eu gostaria de encontrar um livro bom sobre RADIUS também.
Estou com essa responsabilidade de implementá-lo, mas tem sido difícil, já que não existe uma documentação tão bom na Internet.
Um abraço,
--
Wagner Pereira
PoP-SP/RNP - Ponto de Presença da RNP em São Paulo CCE/USP - Centro de Computação Eletrônica da Universidade de São Paulo http://www.pop-sp.rnp.br (11) 3091-8902
INACIO ALVES escreveu:
Thanks Alan Dekok,
I think that I saw in your blog that you is writting a book about RADIUS. The project continues? And about the book http://www.amazon.com/Radius-Jonathan-Hassell/dp/0596003226/ref=pd_sim_b_3 do you know it? I'm need to buy some book to configure a freeradius server on my network.
Thanks,
Inácio Alves
Bacharel em Matemática(UFC)/Técnico em Conectividade(IFCE) http://www.polluxweb.com/inacioalves/site
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Respeito sua opinião, yahmamotto. Talvez meu erro tenha sido apenas não informar o idioma que usei. Se o tivesse informado, era só copiar e colar no Google Translator pra saber o que eu disse. Mas, concordo que o Inglês é a melhor opção. -- Wagner Pereira PoP-SP/RNP - Ponto de Presença da RNP em São Paulo CCE/USP - Centro de Computação Eletrônica da Universidade de São Paulo http://www.pop-sp.rnp.br (11) 3091-8902 yahmamotto yahmamotto escreveu:
Acho que é um pouco má onda estar a enviar mensagens para uma lista international numa lingua que só alguns entendem. Se calhar o melhor seria trocarem mensagens entre vocês apenas.
Mas isto é apenas a minha opinião...
2009/11/18 Wagner Pereira <wpereira@pop-sp.rnp.br <mailto:wpereira@pop-sp.rnp.br>>
Olá, Inácio.
Eu gostaria de encontrar um livro bom sobre RADIUS também.
Estou com essa responsabilidade de implementá-lo, mas tem sido difícil, já que não existe uma documentação tão bom na Internet.
Um abraço,
--
Wagner Pereira
PoP-SP/RNP - Ponto de Presença da RNP em São Paulo CCE/USP - Centro de Computação Eletrônica da Universidade de São Paulo http://www.pop-sp.rnp.br (11) 3091-8902
INACIO ALVES escreveu:
Thanks Alan Dekok,
I think that I saw in your blog that you is writting a book about RADIUS. The project continues? And about the book http://www.amazon.com/Radius-Jonathan-Hassell/dp/0596003226/ref=pd_sim_b_3 do you know it? I'm need to buy some book to configure a freeradius server on my network.
Thanks,
Inácio Alves
Bacharel em Matemática(UFC)/Técnico em Conectividade(IFCE) http://www.polluxweb.com/inacioalves/site
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Wagner Pereira wrote:
Respeito sua opinião, yahmamotto.
Talvez meu erro tenha sido apenas não informar o idioma que usei. Se o tivesse informado, era só copiar e colar no Google Translator pra saber o que eu disse.
Mas, concordo que o Inglês é a melhor opção.
Am I missing something.... Is the freeradius list multilingual ? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782
Vamos fazer o seguinte, coloquem todos os emails do pessoal que é do Brasil aqui. alissonfer@gmail.com 2009/11/18 Johan Meiring <jmeiring@pcservices.co.za>
Wagner Pereira wrote:
Respeito sua opinião, yahmamotto.
Talvez meu erro tenha sido apenas não informar o idioma que usei. Se o tivesse informado, era só copiar e colar no Google Translator pra saber o que eu disse.
Mas, concordo que o Inglês é a melhor opção.
Am I missing something....
Is the freeradius list multilingual ?
--
Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Att. Alisson F. Gonçalves Sistemas de Informação - UFGD
My apologyze to all! I swear don't write in Portuguese no more. By the way, there is service, Google Translator, that can solve this idiomatic thing : ) -- Wagner Pereira PoP-SP/RNP - Ponto de Presença da RNP em São Paulo CCE/USP - Centro de Computação Eletrônica da Universidade de São Paulo http://www.pop-sp.rnp.br (11) 3091-8902 Johan Meiring escreveu:
Wagner Pereira wrote:
Respeito sua opinião, yahmamotto.
Talvez meu erro tenha sido apenas não informar o idioma que usei. Se o tivesse informado, era só copiar e colar no Google Translator pra saber o que eu disse.
Mas, concordo que o Inglês é a melhor opção.
Am I missing something....
Is the freeradius list multilingual ?
participants (9)
-
Alan DeKok -
Alisson -
fabiana marvani -
INACIO ALVES -
Johan Meiring -
Marinko Tarlac -
Padam J Singh -
Wagner Pereira -
yahmamotto yahmamotto