Re:Help with md5 database encryption (Oscar Trejo)
The version of the freeradius is v 1.1.0 I hope these is what you ask me. Thanks !!!
What freeradius version is this?
Ivan Kalik Kalik Informatika ISP
Dana 23/9/2008, "Oscar Trejo" <racso83@gmail.com> piše:
Hi, I had a freeradius server working, but only when the password are saved on the database on plain-text with out encryption, my question is about how to save the instructions on the table radcheck and radgroupcheck to work with Password encryption MD5.
My working free radius tables had
radcheck +----+----------+-----------+----+--------+ | id | UserName | Attribute | op | Value | +----+----------+-----------+----+--------+ | 3 | oscar | Password | == | uno | +----+----------+-----------+----+--------+
radgroupcheck +----+-----------+-----------+----+-------+ | id | GroupName | Attribute | op | Value | +----+-----------+-----------+----+-------+ | 1 | dinamico | Auth-Type | := | Local | +----+-----------+-----------+----+-------+
When i had the password with simple plaint text with out encryption the result is the next
Auth: Login OK: [oscar/uno] (from client ##### port ########## cli ##:##:##:##:##:##)
But I want to save the password with MD5 encryption, the freeradius load correctly the module pap, chap and eap with out errors, but when i try to change the configuration for example :
radcheck +----+----------+-----------+----+--------+ | id | UserName | Attribute | op | Value | +----+----------+-----------+----+--------+ | 3 | oscar | MD5-Password | == | 1eaa8bb195869a23f081acbb5bf08527 | +----+----------+-----------+----+--------+
radgroupcheck +----+-----------+-----------+----+-------+ | id | GroupName | Attribute | op | Value | +----+-----------+-----------+----+-------+ | 1 | dinamico | Auth-Type | := | PAP | +----+-----------+-----------+----+-------+
the free radius log gave me the next error:
Error: rlm_sql_getvpdata: database query error Info: rlm_sql (sql): No matching entry in the database for request from user [oscar] Auth: Login incorrect: [oscar/uno] (from client ##### port ########## cli ##:##:##:##:##:##)
But i need the encryption with MD5, any suggestion
Before any answer I gave you thanks for the help
Upgrade. Ivan Kalik Kalik Informatika ISP Dana 24/9/2008, "Oscar Trejo" <racso83@gmail.com> piše:
The version of the freeradius is v 1.1.0 I hope these is what you ask me.
Thanks !!!
What freeradius version is this?
Ivan Kalik Kalik Informatika ISP
Dana 23/9/2008, "Oscar Trejo" <racso83@gmail.com> pie:
Hi, I had a freeradius server working, but only when the password are saved on the database on plain-text with out encryption, my question is about how to save the instructions on the table radcheck and radgroupcheck to work with Password encryption MD5.
My working free radius tables had
radcheck +----+----------+-----------+----+--------+ | id | UserName | Attribute | op | Value | +----+----------+-----------+----+--------+ | 3 | oscar | Password | == | uno | +----+----------+-----------+----+--------+
radgroupcheck +----+-----------+-----------+----+-------+ | id | GroupName | Attribute | op | Value | +----+-----------+-----------+----+-------+ | 1 | dinamico | Auth-Type | := | Local | +----+-----------+-----------+----+-------+
When i had the password with simple plaint text with out encryption the result is the next
Auth: Login OK: [oscar/uno] (from client ##### port ########## cli ##:##:##:##:##:##)
But I want to save the password with MD5 encryption, the freeradius load correctly the module pap, chap and eap with out errors, but when i try to change the configuration for example :
radcheck +----+----------+-----------+----+--------+ | id | UserName | Attribute | op | Value | +----+----------+-----------+----+--------+ | 3 | oscar | MD5-Password | == | 1eaa8bb195869a23f081acbb5bf08527 | +----+----------+-----------+----+--------+
radgroupcheck +----+-----------+-----------+----+-------+ | id | GroupName | Attribute | op | Value | +----+-----------+-----------+----+-------+ | 1 | dinamico | Auth-Type | := | PAP | +----+-----------+-----------+----+-------+
the free radius log gave me the next error:
Error: rlm_sql_getvpdata: database query error Info: rlm_sql (sql): No matching entry in the database for request from user [oscar] Auth: Login incorrect: [oscar/uno] (from client ##### port ########## cli ##:##:##:##:##:##)
But i need the encryption with MD5, any suggestion
Before any answer I gave you thanks for the help
Gurus, in my radiusd.log, I can see lots of these errors: Wed Sep 24 09:40:54 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:40:55 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:40:56 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:40:57 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:40:58 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:41:01 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:48:00 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:48:01 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:48:02 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:48:03 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:48:04 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:49:37 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:49:38 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:51:39 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 I thougt, giving the system more DB connections and lowering the retry delay should help. It did, and I now get only about 50% of the errors. But what would be a reasonable value for this? 'sql_accounting' is configured: sql sql_accounting{ database = "mysql" driver = "rlm_sql_${database}" server = "db-master" port="3306" login = "yyyyy" password = "xxxxx" radius_db = "radius_te" acct_table1 = "radacct" acct_table2 = "radacct" postauth_table = "radpostauth" authcheck_table = "radcheck" authreply_table = "radreply" groupcheck_table = "radgroupcheck" groupreply_table = "radgroupreply" usergroup_table = "radusergroup" deletestalesessions = yes sqltrace = yes sqltracefile = ${logdir}/sqltrace.sql num_sql_socks = 8 connect_failure_retry_delay = 30 #readclients = yes nas_table = "nas" $INCLUDE sql/${database}/dialup.conf } An other issue: FR is eating Memory and I do not know how to troubleshoot this. It takes about 1 MB/ Minute which was about 3.5 GB over some Days, before we rcognized this. I configured the option to die a server after 500 packets, but this does not help for me. Do I have to restart the server from time to time? How may I troubleshoot this? May I unconfigure radutmp? I think I do not need this. Do I really need the sqltrace-file? How my I unconfigure it? Just deleting the config line My system runs FR 2.0.5 on Solaris 10 using MySQL 5.0.51a Any Ideas? Thank You. Regards Stefan
1 .Maybe max_connections in the MySQL config file should also be increased and Mysql be restarted. 2. No idea except upgrading. Norbert Wegener Stefan A. schrieb:
Gurus,
in my radiusd.log, I can see lots of these errors: Wed Sep 24 09:40:54 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:40:55 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:40:56 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:40:57 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:40:58 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:41:01 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:48:00 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:48:01 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:48:02 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:48:03 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:48:04 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:49:37 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:49:38 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Wed Sep 24 09:51:39 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0
I thougt, giving the system more DB connections and lowering the retry delay should help. It did, and I now get only about 50% of the errors. But what would be a reasonable value for this?
'sql_accounting' is configured: sql sql_accounting{ database = "mysql" driver = "rlm_sql_${database}" server = "db-master" port="3306" login = "yyyyy" password = "xxxxx" radius_db = "radius_te" acct_table1 = "radacct" acct_table2 = "radacct" postauth_table = "radpostauth" authcheck_table = "radcheck" authreply_table = "radreply" groupcheck_table = "radgroupcheck" groupreply_table = "radgroupreply" usergroup_table = "radusergroup" deletestalesessions = yes sqltrace = yes sqltracefile = ${logdir}/sqltrace.sql num_sql_socks = 8 connect_failure_retry_delay = 30 #readclients = yes nas_table = "nas" $INCLUDE sql/${database}/dialup.conf }
An other issue: FR is eating Memory and I do not know how to troubleshoot this. It takes about 1 MB/ Minute which was about 3.5 GB over some Days, before we rcognized this. I configured the option to die a server after 500 packets, but this does not help for me. Do I have to restart the server from time to time? How may I troubleshoot this?
May I unconfigure radutmp? I think I do not need this. Do I really need the sqltrace-file? How my I unconfigure it? Just deleting the config line
My system runs FR 2.0.5 on Solaris 10 using MySQL 5.0.51a
Any Ideas?
Thank You. Regards Stefan
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Stefan A. wrote:
in my radiusd.log, I can see lots of these errors: Wed Sep 24 09:40:54 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0
Your database is probably slow. Do you have indexes?
FR is eating Memory and I do not know how to troubleshoot this. It takes about 1 MB/ Minute which was about 3.5 GB over some Days, before we rcognized this.
There were issues with older versions of the server, but 2.1.0 should be fine.
I configured the option to die a server after 500 packets, but this does not help for me.
Because it stops the *thread*, not the *server*. And all threads use the same shared memory file.
May I unconfigure radutmp? I think I do not need this.
Delete all references to it from the configuration file.
Do I really need the sqltrace-file? How my I unconfigure it? Just deleting the config line
Yes. Alan DeKok.
Hi all, @Alan: yes, I do have indexes. I still have the following issue: Fri Oct 24 18:21:33 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Fri Oct 24 18:21:34 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Fri Oct 24 18:21:35 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Fri Oct 24 18:21:36 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Fri Oct 24 18:21:37 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Fri Oct 24 18:21:39 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Fri Oct 24 18:21:42 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Fri Oct 24 18:21:57 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Fri Oct 24 18:21:58 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Fri Oct 24 18:21:59 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Fri Oct 24 18:22:00 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Fri Oct 24 18:22:01 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Fri Oct 24 18:22:02 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Fri Oct 24 18:22:03 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Fri Oct 24 18:22:04 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Fri Oct 24 18:22:05 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0 Fri Oct 24 18:22:07 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tri While my server seems to be OK. last pid: 18091; load avg: 0.22, 0.21, 0.23; up 44+02:44:36 18:22:33 82 processes: 81 sleeping, 1 on cpu CPU states: 96.2% idle, 2.4% user, 1.4% kernel, 0.0% iowait, 0.0% swap Memory: 8192M phys mem, 5979M free mem, 518M total swap, 518M free swap PID USERNAME LWP PRI NICE SIZE RES STATE TIME CPU COMMAND 26627 mysql 59 59 0 585M 572M sleep 499.5H 2.29% mysqld 12576 root 1 54 0 15M 12M sleep 437:52 0.57% perl 11522 root 26 59 0 33M 29M sleep 0:27 0.32% radiusd 12574 root 1 59 0 14M 11M sleep 530:58 0.04% perl It handles about 100 Interim updates per second, but my client detects something about 1000 losses per day. Where exactly does the logfile message poit to? To me it says: I did not try and therefore I did not skip anything.... While the server is workung like this, I'm able to do randamly update about 600 additional sets/s, using the statemants from dialup.conf in a perl script.... I'm afraid to check more, because it is live traffic. So I'm not sure, if it must be the database. Can set up a more detailed debug on this section? '-X' literally stops my service... Even that the log entry is marked as 'info', I'd like to understand, what's going on. Thank You. Stefan
-----Original Message----- From: freeradius-users-bounces+a.freeradius=premit.de@lists.freeradi us.org [mailto:freeradius-users-bounces+a.freeradius=premit.de@lists. freeradius.org] On Behalf Of Alan DeKok Sent: Wednesday, September 24, 2008 11:47 AM To: FreeRadius users mailing list Subject: Re: 1.Troubleshooting MySQL Connections , 2. troubleshooting possiblememory leak
Stefan A. wrote:
in my radiusd.log, I can see lots of these errors: Wed Sep 24 09:40:54 2008 : Info: rlm_sql (sql_accounting): There are no DB handles to use! skipped 0, tried to connect 0
Your database is probably slow. Do you have indexes?
FR is eating Memory and I do not know how to troubleshoot this. It takes about 1 MB/ Minute which was about 3.5 GB over some Days, before we rcognized this.
There were issues with older versions of the server, but 2.1.0 should be fine.
I configured the option to die a server after 500 packets, but this does not help for me.
Because it stops the *thread*, not the *server*. And all threads use the same shared memory file.
May I unconfigure radutmp? I think I do not need this.
Delete all references to it from the configuration file.
Do I really need the sqltrace-file? How my I unconfigure it? Just deleting the config line
Yes.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi all, I have been asking this in October 2008, while using 2.0.4
FR is eating Memory and I do not know how to troubleshoot this. It takes about 1 MB/ Minute which was about 3.5 GB over some Days, before we rcognized this.
Alan: There were issues with older versions of the server, but 2.1.0 should be fine.
I configured the option to die a server after 500 packets, but this does not help for me.
Alan: Because it stops the *thread*, not the *server*. And all threads use the same shared memory file.
I have not been able to change the version, as it was productive and you guys are doing such a great job, that this has been my only real problem with FR (even if it might not be FR problem, than a problem of some used libraries). Thank you all. We set up a script, which restarted FR every 2-3 hours, which certainly has its drawback. Now it is time to setup a new system and I'm testing 2.1.6 for some weeks now. I still see the memory consumption rising over the time Output from top every 5 Minutes: SIZE/RES 16M/13M 34M/32M 53M/51M 71M/69M ...it rises about 3-4 MB per Minutes. I read about some issues and tried 2.1.7... still the same. My Setup: SUN X4100, 8GB, Solaris 10 5/09 Configured and installed incl. MySQL, but even if I disabled it for runtime, the memory rises. What would be a good start to debug this? Is there a possibility, to see, which part of the running radiusd consumes what amount of memory? Thanks Best regards, Stefan
participants (5)
-
Alan DeKok -
Norbert Wegener -
Oscar Trejo -
Stefan A. -
tnt＠kalik.net