Hi All, Installed freeradius 1.1.0-1 on debian system (2.6.15-1-686). The radius server started automatically well each time when the system booting. But I wanted to stop it to do some testing using my modified configuration files. I tried to stop the server using command: 'freeradius stop' ('radiusd' doesn't work on this debian - anyone knows why??) But so werid, no matter what command I gave, with parameter stop|start|restart, the server ALWAYS goes to START again!! even from the /etc/init.d/freeradius I can read that the 'stop' param should stop the server! Can anyone tell me why the command couldn't stop the server?? and how should I stop it?? The log file shows entries like this for each of my trying, even the command viven was to "stop": Tue Apr 4 01:14:13 2006 : Info: Using deprecated naslist file. Support for this will go away soon. Tue Apr 4 01:14:13 2006 : Error: There appears to be another RADIUS server running on the authenticat What is happenning here? (I couldn't top the running deamon, so is the 2nd line above) Also, from the log file I noticed: even when the system automatically started the freeradius server deamon, it was "Using deprecated naslist file". Log entries show like this: Fri Mar 31 13:51:54 2006 : Info: Using deprecated naslist file. Support for this will go away soon. Fri Mar 31 13:51:54 2006 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Fri Mar 31 13:51:55 2006 : Info: Ready to process requests. Can anyone tell me what is happenning here?? Why it's using the deprecating naslist file? The installed radiusd.conf file doesn't show the server will use the naslist file at all! from where I can stop the server to use this deprecating file? Also what does the 2nd line of the above log entries mean? Any help would be greatly appreciated! Thank you so much for help in advance!! Best regrads, leo __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
On 4/4/06, lmyho <lm_yho@yahoo.com> wrote:
Hi All,
Installed freeradius 1.1.0-1 on debian system (2.6.15-1-686). The radius server started automatically well each time when the system booting. But I wanted to stop it to do some testing using my modified configuration files. I tried to stop the server using command: 'freeradius stop' ('radiusd' doesn't work on this debian - anyone knows why??)
But so werid, no matter what command I gave, with parameter stop|start|restart, the server ALWAYS goes to START again!! even from the /etc/init.d/freeradius I can read that the 'stop' param should stop the server! Can anyone tell me why the command couldn't stop the server?? and how should I stop it??
The log file shows entries like this for each of my trying, even the command viven was to "stop":
Tue Apr 4 01:14:13 2006 : Info: Using deprecated naslist file. Support for this will go away soon. Tue Apr 4 01:14:13 2006 : Error: There appears to be another RADIUS server running on the authenticat
What is happenning here? (I couldn't top the running deamon, so is the 2nd line above)
Also, from the log file I noticed: even when the system automatically started the freeradius server deamon, it was "Using deprecated naslist file". Log entries show like this:
Fri Mar 31 13:51:54 2006 : Info: Using deprecated naslist file. Support for this will go away soon. Fri Mar 31 13:51:54 2006 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Fri Mar 31 13:51:55 2006 : Info: Ready to process requests.
Can anyone tell me what is happenning here?? Why it's using the deprecating naslist file? The installed radiusd.conf file doesn't show the server will use the naslist file at all! from where I can stop the server to use this deprecating file? Also what does the 2nd line of the above log entries mean?
Any help would be greatly appreciated! Thank you so much for help in advance!!
Best regrads, leo
Instead of using the command to stop the radius daemon, herez another simple way..... At the console type " ps -ax | grep radiusd" , this will give u the list of radius servers currently along with its process IDs. The next thing u do is type " kill pid# " , PID# refers to the process id number of ur currently running radius daemon. Hope it helps... Dunno bout the NAS list though...
--- monish ar <monish.ar@gmail.com> wrote:
Instead of using the command to stop the radius daemon, herez another simple way..... At the console type " ps -ax | grep radiusd" , this will give u the list of radius servers currently along with its process IDs. The next thing u do is type " kill pid# " , PID# refers to the process id number of ur currently running radius daemon. Hope it helps... Dunno bout the NAS list though...
Hi Monish, Thank you for the idea! I checked, and found the process. but on this debian system, the process is actually named "freeradius", instead of the traditional "radiusd".:( So there are indeed some changes on how the freeradius is run on debian. Do you have more idea about it? Can anyone tell me more on how the debian is running the freeradius and how I can stop the server from command line in debian system? (pls see problem detail below) Thanks a lot!! leo
On 4/4/06, lmyho <lm_yho@yahoo.com> wrote:
Hi All,
Installed freeradius 1.1.0-1 on debian system (2.6.15-1-686). The radius server started automatically well each time when the system booting. But I
wanted to stop it to do some testing using my modified configuration files. I tried to stop the server using command: 'freeradius stop' ('radiusd' doesn't work on this debian - anyone knows why??)
But so werid, no matter what command I gave, with parameter stop|start|restart, the server ALWAYS goes to START again!! even from the
/etc/init.d/freeradius I can read that the 'stop' param should stop the server! Can anyone tell me why the command couldn't stop the server?? and how should I stop it??
The log file shows entries like this for each of my trying, even the command given was to "stop":
Tue Apr 4 01:14:13 2006 : Info: Using deprecated naslist file. Support for this will go away soon. Tue Apr 4 01:14:13 2006 : Error: There appears to be another RADIUS server running on the authenticat
What is happenning here? (I couldn't top the running deamon, so is the 2nd line above)
Also, from the log file I noticed: even when the system automatically started the freeradius server deamon, it was "Using deprecated naslist file".
Log entries show like this:
Fri Mar 31 13:51:54 2006 : Info: Using deprecated naslist file. Support for this will go away soon. Fri Mar 31 13:51:54 2006 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Fri Mar 31 13:51:55 2006 : Info: Ready to process requests.
Can anyone tell me what is happenning here?? Why it's using the deprecating naslist file? The installed radiusd.conf file doesn't show the
server will use the naslist
file at all! from where I can stop the server to use this deprecating file? Also what does the 2nd line of the above log entries mean?
Any help would be greatly appreciated! Thank you so much for help in advance!!
Best regrads, leo
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Try "killall radiusd" or "killall freeradius". I have debian and that commands are allwright. ----- Original Message ----- From: "lmyho" <lm_yho@yahoo.com> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, April 04, 2006 6:19 PM Subject: Re: Couldn't stop freeradius server!!
--- monish ar <monish.ar@gmail.com> wrote:
Instead of using the command to stop the radius daemon, herez another simple way..... At the console type " ps -ax | grep radiusd" , this will give u the list of radius servers currently along with its process IDs. The next thing u do is type " kill pid# " , PID# refers to the process id number of ur currently running radius daemon. Hope it helps... Dunno bout the NAS list though...
Hi Monish,
Thank you for the idea! I checked, and found the process. but on this debian system, the process is actually named "freeradius", instead of the traditional "radiusd".:( So there are indeed some changes on how the freeradius is run on debian. Do you have more idea about it? Can anyone tell me more on how the debian is running the freeradius and how I can stop the server from command line in debian system? (pls see problem detail below)
Thanks a lot!! leo
On 4/4/06, lmyho <lm_yho@yahoo.com> wrote:
Hi All,
Installed freeradius 1.1.0-1 on debian system (2.6.15-1-686). The radius server started automatically well each time when the system booting. But I
wanted to stop it to do some testing using my modified configuration files. I tried to stop the server using command: 'freeradius stop' ('radiusd' doesn't work on this debian - anyone knows why??)
But so werid, no matter what command I gave, with parameter stop|start|restart, the server ALWAYS goes to START again!! even from the
/etc/init.d/freeradius I can read that the 'stop' param should stop the server! Can anyone tell me why the command couldn't stop the server?? and how should I stop it??
The log file shows entries like this for each of my trying, even the command given was to "stop":
Tue Apr 4 01:14:13 2006 : Info: Using deprecated naslist file. Support for this will go away soon. Tue Apr 4 01:14:13 2006 : Error: There appears to be another RADIUS server running on the authenticat
What is happenning here? (I couldn't top the running deamon, so is the 2nd line above)
Also, from the log file I noticed: even when the system automatically started the freeradius server deamon, it was "Using deprecated naslist file".
Log entries show like this:
Fri Mar 31 13:51:54 2006 : Info: Using deprecated naslist file. Support for this will go away soon. Fri Mar 31 13:51:54 2006 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Fri Mar 31 13:51:55 2006 : Info: Ready to process requests.
Can anyone tell me what is happenning here?? Why it's using the deprecating naslist file? The installed radiusd.conf file doesn't show the
server will use the naslist
file at all! from where I can stop the server to use this deprecating file? Also what does the 2nd line of the above log entries mean?
Any help would be greatly appreciated! Thank you so much for help in advance!!
Best regrads, leo
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I had the same problem on RedHat (well name was the way it supposed to be) it was caused by some conflict between fr and something with os... still investigating the problem, but in my case kill and reboot, halt command where blocked .... I think that was cased because SSH connection was lost during execution of the command. -----Original Message----- From: freeradius-users-bounces+radiussupport=lrcommunications.net@lists.freeradius .org [mailto:freeradius-users-bounces+radiussupport=lrcommunications.net@lists.fr eeradius.org] On Behalf Of debik Sent: Wednesday, April 05, 2006 2:26 PM To: FreeRadius users mailing list Subject: Re: Couldn't stop freeradius server!! Try "killall radiusd" or "killall freeradius". I have debian and that commands are allwright. ----- Original Message ----- From: "lmyho" <lm_yho@yahoo.com> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, April 04, 2006 6:19 PM Subject: Re: Couldn't stop freeradius server!!
--- monish ar <monish.ar@gmail.com> wrote:
Instead of using the command to stop the radius daemon, herez another simple way..... At the console type " ps -ax | grep radiusd" , this will give u the list
of radius servers currently along with its process IDs. The next thing u do is type " kill pid# " , PID# refers to the process id number of ur currently running radius daemon. Hope it helps... Dunno bout the NAS list though...
Hi Monish,
Thank you for the idea! I checked, and found the process. but on this debian system, the process is actually named "freeradius", instead of the traditional "radiusd".:( So there are indeed some changes on how the freeradius is run on debian. Do you have more idea about it? Can anyone tell me more on how the debian is running the freeradius and how I can stop the server from command line in debian system? (pls see problem detail below)
Thanks a lot!! leo
On 4/4/06, lmyho <lm_yho@yahoo.com> wrote:
Hi All,
Installed freeradius 1.1.0-1 on debian system (2.6.15-1-686). The radius server started automatically well each time when the system booting. But I
wanted to stop it to do some testing using my modified configuration files. I tried to stop the server using command: 'freeradius stop' ('radiusd' doesn't work on this debian - anyone knows why??)
But so werid, no matter what command I gave, with parameter stop|start|restart, the server ALWAYS goes to START again!! even from the
/etc/init.d/freeradius I can read that the 'stop' param should stop the server! Can anyone tell me why the command couldn't stop the server?? and how should I
stop it??
The log file shows entries like this for each of my trying, even the command given was to "stop":
Tue Apr 4 01:14:13 2006 : Info: Using deprecated naslist file. Support for this will go away soon. Tue Apr 4 01:14:13 2006 : Error: There appears to be another RADIUS server running on the authenticat
What is happenning here? (I couldn't top the running deamon, so is the 2nd line above)
Also, from the log file I noticed: even when the system automatically started the freeradius server deamon, it was "Using deprecated naslist file".
Log entries show like this:
Fri Mar 31 13:51:54 2006 : Info: Using deprecated naslist file. Support for this will go away soon. Fri Mar 31 13:51:54 2006 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Fri Mar 31 13:51:55 2006 : Info: Ready to process requests.
Can anyone tell me what is happenning here?? Why it's using the deprecating naslist file? The installed radiusd.conf file doesn't show the
server will use the naslist
file at all! from where I can stop the server to use this deprecating file? Also what does the 2nd line of the above log entries mean?
Any help would be greatly appreciated! Thank you so much for help in advance!!
Best regrads, leo
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi Alex, The command '/etc/init.d/freeradius stop' worked! but 'freeradius stop' won't! Maybe you can try this too? Regards, leo :) --- Alex M <radiussupport@lrcommunications.net> wrote:
I had the same problem on RedHat (well name was the way it supposed to be) it was caused by some conflict between fr and something with os... still investigating the problem, but in my case kill and reboot, halt command where blocked .... I think that was cased because SSH connection was lost during execution of the command.
-----Original Message----- From: freeradius-users-bounces+radiussupport=lrcommunications.net@lists.freeradius .org [mailto:freeradius-users-bounces+radiussupport=lrcommunications.net@lists.fr eeradius.org] On Behalf Of debik Sent: Wednesday, April 05, 2006 2:26 PM To: FreeRadius users mailing list Subject: Re: Couldn't stop freeradius server!!
Try "killall radiusd" or "killall freeradius". I have debian and that commands are allwright.
----- Original Message ----- From: "lmyho" <lm_yho@yahoo.com> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, April 04, 2006 6:19 PM Subject: Re: Couldn't stop freeradius server!!
--- monish ar <monish.ar@gmail.com> wrote:
Instead of using the command to stop the radius daemon, herez another simple way..... At the console type " ps -ax | grep radiusd" , this will give u the list
of radius servers currently along with its process IDs. The next thing u do is type " kill pid# " , PID# refers to the process id number of ur currently running radius daemon. Hope it helps... Dunno bout the NAS list though...
Hi Monish,
Thank you for the idea! I checked, and found the process. but on this debian system, the process is actually named "freeradius", instead of the traditional "radiusd".:( So there are indeed some changes on how the freeradius is run on debian. Do you have more idea about it? Can anyone tell me more on how the debian is running the freeradius and how I can stop the server from command line in debian system? (pls see problem detail below)
Thanks a lot!! leo
On 4/4/06, lmyho <lm_yho@yahoo.com> wrote:
Hi All,
Installed freeradius 1.1.0-1 on debian system (2.6.15-1-686). The radius server started automatically well each time when the system booting. But I
wanted to stop it to do some testing using my modified configuration files. I tried to stop the server using command: 'freeradius stop' ('radiusd' doesn't work on this debian - anyone knows why??)
But so werid, no matter what command I gave, with parameter stop|start|restart, the server ALWAYS goes to START again!! even from the
/etc/init.d/freeradius I can read that the 'stop' param should stop the server! Can anyone tell me why the command couldn't stop the server?? and how should I
stop it??
The log file shows entries like this for each of my trying, even the command given was to "stop":
Tue Apr 4 01:14:13 2006 : Info: Using deprecated naslist file. Support for this will go away soon. Tue Apr 4 01:14:13 2006 : Error: There appears to be another RADIUS server running on the authenticat
What is happenning here? (I couldn't top the running deamon, so is the 2nd line above)
Also, from the log file I noticed: even when the system automatically started the freeradius server deamon, it was "Using deprecated naslist file".
Log entries show like this:
Fri Mar 31 13:51:54 2006 : Info: Using deprecated naslist file. Support for this will go away soon. Fri Mar 31 13:51:54 2006 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Fri Mar 31 13:51:55 2006 : Info: Ready to process requests.
Can anyone tell me what is happenning here?? Why it's using the deprecating naslist file? The installed radiusd.conf file doesn't show the
server will use the naslist
file at all! from where I can stop the server to use this deprecating file? Also what does the 2nd line of the above log entries mean?
Any help would be greatly appreciated! Thank you so much for help in advance!!
Best regrads, leo
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Try linking /etc/init.d/freeradius to your /sbin ;) Regards, Edvin -----Original Message----- From: freeradius-users-bounces+edvin.seferovic=kolp.at@lists.freeradius.org [mailto:freeradius-users-bounces+edvin.seferovic=kolp.at@lists.freeradius.or g] On Behalf Of lmyho Sent: Dienstag, 04. April 2006 21:04 To: 'FreeRadius users mailing list' Subject: Worked!- RE: Couldn't stop freeradius server!! Hi Alex, The command '/etc/init.d/freeradius stop' worked! but 'freeradius stop' won't! Maybe you can try this too? Regards, leo :) --- Alex M <radiussupport@lrcommunications.net> wrote:
I had the same problem on RedHat (well name was the way it supposed to be) it was caused by some conflict between fr and something with os... still investigating the problem, but in my case kill and reboot, halt command where blocked .... I think that was cased because SSH connection was lost during execution of the command.
-----Original Message----- From:
freeradius-users-bounces+radiussupport=lrcommunications.net@lists.freeradius
.org
[mailto:freeradius-users-bounces+radiussupport=lrcommunications.net@lists.fr
eeradius.org] On Behalf Of debik Sent: Wednesday, April 05, 2006 2:26 PM To: FreeRadius users mailing list Subject: Re: Couldn't stop freeradius server!!
Try "killall radiusd" or "killall freeradius". I have debian and that commands are allwright.
----- Original Message ----- From: "lmyho" <lm_yho@yahoo.com> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, April 04, 2006 6:19 PM Subject: Re: Couldn't stop freeradius server!!
--- monish ar <monish.ar@gmail.com> wrote:
Instead of using the command to stop the radius daemon, herez another simple way..... At the console type " ps -ax | grep radiusd" , this will give u the
list
of radius servers currently along with its process IDs. The next thing u do is type " kill pid# " , PID# refers to the process id number of ur currently running radius daemon. Hope it helps... Dunno bout the NAS list though...
Hi Monish,
Thank you for the idea! I checked, and found the process. but on this debian system, the process is actually named "freeradius", instead of the traditional "radiusd".:( So there are indeed some changes on how the freeradius is run on debian. Do you have more idea about it? Can anyone tell me more on how the debian is running the freeradius and how I can stop the server from command line in debian system? (pls see problem detail below)
Thanks a lot!! leo
On 4/4/06, lmyho <lm_yho@yahoo.com> wrote:
Hi All,
Installed freeradius 1.1.0-1 on debian system (2.6.15-1-686). The radius server started automatically well each time when the system booting. But I
wanted to stop it to do some testing using my modified configuration files. I tried to stop the server using command: 'freeradius stop' ('radiusd' doesn't work on this debian - anyone knows why??)
But so werid, no matter what command I gave, with parameter stop|start|restart, the server ALWAYS goes to START again!! even from
the /etc/init.d/freeradius I can read that the 'stop' param should stop the server! Can anyone tell me why the command couldn't stop the server?? and how should I
stop it??
The log file shows entries like this for each of my trying, even the command given was to "stop":
Tue Apr 4 01:14:13 2006 : Info: Using deprecated naslist file. Support for this will go away soon. Tue Apr 4 01:14:13 2006 : Error: There appears to be another RADIUS server running on the authenticat
What is happenning here? (I couldn't top the running deamon, so is
the
2nd line above)
Also, from the log file I noticed: even when the system automatically started the freeradius server deamon, it was "Using deprecated naslist file". Log entries show like this:
Fri Mar 31 13:51:54 2006 : Info: Using deprecated naslist file. Support for this will go away soon. Fri Mar 31 13:51:54 2006 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Fri Mar 31 13:51:55 2006 : Info: Ready to process requests.
Can anyone tell me what is happenning here?? Why it's using the deprecating naslist file? The installed radiusd.conf file doesn't show the server will use the naslist file at all! from where I can stop the server to use this deprecating file? Also what does the 2nd line of the above log entries mean?
Any help would be greatly appreciated! Thank you so much for help in advance!!
Best regrads, leo
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
BAD IDEA. Do not do this... -Peter On Tue 04 Apr 2006 22:18, Seferovic Edvin wrote:
Try linking /etc/init.d/freeradius to your /sbin ;)
Regards,
Edvin
-----Original Message----- From: freeradius-users-bounces+edvin.seferovic=kolp.at@lists.freeradius.org [mailto:freeradius-users-bounces+edvin.seferovic=kolp.at@lists.freeradius.o r g] On Behalf Of lmyho Sent: Dienstag, 04. April 2006 21:04 To: 'FreeRadius users mailing list' Subject: Worked!- RE: Couldn't stop freeradius server!!
Hi Alex, The command '/etc/init.d/freeradius stop' worked! but 'freeradius stop' won't!
Maybe you can try this too?
Regards, leo :)
--- Alex M <radiussupport@lrcommunications.net> wrote:
I had the same problem on RedHat (well name was the way it supposed to be) it was caused by some conflict between fr and something with os... still investigating the problem, but in my case kill and reboot, halt command where blocked .... I think that was cased because SSH connection was lost during execution of the command.
-----Original Message----- From:
freeradius-users-bounces+radiussupport=lrcommunications.net@lists.freeradiu s
.org
[mailto:freeradius-users-bounces+radiussupport=lrcommunications.net@lists.f r
eeradius.org] On Behalf Of debik Sent: Wednesday, April 05, 2006 2:26 PM To: FreeRadius users mailing list Subject: Re: Couldn't stop freeradius server!!
Try "killall radiusd" or "killall freeradius". I have debian and that commands are allwright.
----- Original Message ----- From: "lmyho" <lm_yho@yahoo.com> To: "FreeRadius users mailing list"
<freeradius-users@lists.freeradius.org>
Sent: Tuesday, April 04, 2006 6:19 PM Subject: Re: Couldn't stop freeradius server!!
--- monish ar <monish.ar@gmail.com> wrote:
Instead of using the command to stop the radius daemon, herez another simple way..... At the console type " ps -ax | grep radiusd" , this will give u the
list
of radius servers currently along with its process IDs. The next thing u do is type " kill pid# "
,
PID# refers to the process id number of ur currently running radius daemon. Hope it helps... Dunno bout the NAS list though...
Hi Monish,
Thank you for the idea! I checked, and found the process. but on this debian system, the process is actually named "freeradius", instead of the traditional "radiusd".:( So there are indeed some changes on how the freeradius is run on debian. Do you have more idea about it? Can anyone tell me more on how the debian is running the freeradius and how I can stop the server from command line in debian system? (pls see problem detail below)
Thanks a lot!! leo
On 4/4/06, lmyho <lm_yho@yahoo.com> wrote:
Hi All,
Installed freeradius 1.1.0-1 on debian system (2.6.15-1-686). The radius server started automatically well each time when the system booting. But I
wanted to stop it to do some testing using my modified configuration files. I tried to stop the server using command: 'freeradius stop' ('radiusd' doesn't work on this debian - anyone knows why??)
But so werid, no matter what command I gave, with parameter stop|start|restart, the server ALWAYS goes to START again!! even from
the
/etc/init.d/freeradius I can read that the 'stop' param should stop the server! Can anyone tell me why the command couldn't stop the server?? and how should
I
stop it??
The log file shows entries like this for each of my trying, even the command given was to "stop":
Tue Apr 4 01:14:13 2006 : Info: Using deprecated naslist file. Support for this will go away soon. Tue Apr 4 01:14:13 2006 : Error: There appears to be another RADIUS server running on the authenticat
What is happenning here? (I couldn't top the running deamon, so is
the
2nd line above)
Also, from the log file I noticed: even when the system automatically started the freeradius server deamon, it was "Using deprecated
naslist
file".
Log entries show like this:
Fri Mar 31 13:51:54 2006 : Info: Using deprecated naslist file. Support for this will go away soon. Fri Mar 31 13:51:54 2006 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Fri Mar 31 13:51:55 2006 : Info: Ready to process requests.
Can anyone tell me what is happenning here?? Why it's using the deprecating naslist file? The installed radiusd.conf file doesn't
show
the
server will use the naslist
file at all! from where I can stop the server to use this deprecating file? Also what does the 2nd line of the above log entries mean?
Any help would be greatly appreciated! Thank you so much for help in advance!!
Best regrads, leo
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
Thank you Debik! Command 'etc/init.d/freeradius stop' worked! but 'freeradius stop' won't. Found the problem anyway. Thanks! Regards, leo --- debik <debik@vp.pl> wrote:
Try "killall radiusd" or "killall freeradius". I have debian and that commands are allwright.
----- Original Message ----- From: "lmyho" <lm_yho@yahoo.com> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, April 04, 2006 6:19 PM Subject: Re: Couldn't stop freeradius server!!
--- monish ar <monish.ar@gmail.com> wrote:
Instead of using the command to stop the radius daemon, herez another simple way..... At the console type " ps -ax | grep radiusd" , this will give u the list of radius servers currently along with its process IDs. The next thing u do is type " kill pid# " , PID# refers to the process id number of ur currently running radius daemon. Hope it helps... Dunno bout the NAS list though...
Hi Monish,
Thank you for the idea! I checked, and found the process. but on this debian system, the process is actually named "freeradius", instead of the traditional "radiusd".:( So there are indeed some changes on how the freeradius is run on debian. Do you have more idea about it? Can anyone tell me more on how the debian is running the freeradius and how I can stop the server from command line in debian system? (pls see problem detail below)
Thanks a lot!! leo
On 4/4/06, lmyho <lm_yho@yahoo.com> wrote:
Hi All,
Installed freeradius 1.1.0-1 on debian system (2.6.15-1-686). The radius server started automatically well each time when the system booting. But I
wanted to stop it to do some testing using my modified configuration files. I tried to stop the server using command: 'freeradius stop' ('radiusd' doesn't work on this debian - anyone knows why??)
But so werid, no matter what command I gave, with parameter stop|start|restart, the server ALWAYS goes to START again!! even from the
/etc/init.d/freeradius I can read that the 'stop' param should stop the server! Can anyone tell me why the command couldn't stop the server?? and how should I stop it??
The log file shows entries like this for each of my trying, even the command given was to "stop":
Tue Apr 4 01:14:13 2006 : Info: Using deprecated naslist file. Support for this will go away soon. Tue Apr 4 01:14:13 2006 : Error: There appears to be another RADIUS server running on the authenticat
What is happenning here? (I couldn't top the running deamon, so is the 2nd line above)
Also, from the log file I noticed: even when the system automatically started the freeradius server deamon, it was "Using deprecated naslist file".
Log entries show like this:
Fri Mar 31 13:51:54 2006 : Info: Using deprecated naslist file. Support for this will go away soon. Fri Mar 31 13:51:54 2006 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Fri Mar 31 13:51:55 2006 : Info: Ready to process requests.
Can anyone tell me what is happenning here?? Why it's using the deprecating naslist file? The installed radiusd.conf file doesn't show the
server will use the naslist
file at all! from where I can stop the server to use this deprecating file? Also what does the 2nd line of the above log entries mean?
Any help would be greatly appreciated! Thank you so much for help in advance!!
Best regrads, leo
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Hi all, I am struggling with this issue right now. I have installed a JRadius module on FreeRadius 1.1.0 , and made FreeRadius to call the Jradius module in post-auth section. The Jradius handler is supposed to replace the access-accept packet obtained from prior authentication with a access-challenge packet. My logs show that rlm_jradius has correctly return FreeRadius an Access-challenge module, with code 11. However, Freeradius still returns an Access-accept to the client (which is an radtest program). Does anyone know what is the possible reason? Or maybe someone can enlighten me as which part of the freeradius code is actually handling this portion, so I can take a look? following is the debug output of freeradius: (the dashed line and below are of the primary concern) Thank you very much? rad_recv: Access-Request packet from host 127.0.0.1:4820, id=197, length=64 User-Name = "hellouser123" User-Password = "f0unT@1n" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 Wed Apr 5 11:51:50 2006 : Debug: Processing the authorize section of radiusd.conf Wed Apr 5 11:51:50 2006 : Debug: modcall: entering group authorize for request 0 Wed Apr 5 11:51:50 2006 : Debug: modsingle[authorize]: calling preprocess (rlm_preprocess) for request 0 Wed Apr 5 11:51:50 2006 : Error: Invalid operator for item Suffix: reverting to '==' Wed Apr 5 11:51:50 2006 : Error: Invalid operator for item Suffix: reverting to '==' Wed Apr 5 11:51:50 2006 : Error: Invalid operator for item Suffix: reverting to '==' Wed Apr 5 11:51:50 2006 : Debug: modsingle[authorize]: returned from preprocess (rlm_preprocess) for request 0 Wed Apr 5 11:51:50 2006 : Debug: modcall[authorize]: module "preprocess" returns ok for request 0 Wed Apr 5 11:51:50 2006 : Debug: modsingle[authorize]: calling ldap (rlm_ldap) for request 0 Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: - authorize Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: performing user authorization for hellouser123 Wed Apr 5 11:51:50 2006 : Debug: radius_xlat: '(&(cn=hellouser123)(objectclass=user))' Wed Apr 5 11:51:50 2006 : Debug: radius_xlat: 'cn=Users,dc=hellotechnology,dc=com' Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: ldap_get_conn: Checking Id: 0 Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: ldap_get_conn: Got Id: 0 Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: attempting LDAP reconnection Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: (re)connect to 10.26.1.202:389, authentication 0 Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: bind as cn=krazy,cn=Users,dc=hellotechnology,dc=com/welcome123 to 10.26.1.202:389 Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: waiting for bind result ... Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: Bind was successful Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: performing search in cn=Users,dc=hellotechnology,dc=com, with filter (&(cn=hellouser123)(objectclass=user)) Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: checking if remote access for hellouser123 is allowed by msNPAllowDialin Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: looking for check items in directory ... Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: looking for reply items in directory... Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: user hellouser123 authorized to use remote access Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: ldap_release_conn: Release Id: 0 Wed Apr 5 11:51:50 2006 : Debug: modsingle[authorize]: returned from ldap (rlm_ldap) for request 0 Wed Apr 5 11:51:50 2006 : Debug: modcall[authorize]: module "ldap" returns ok for request 0 Wed Apr 5 11:51:50 2006 : Debug: modcall: leaving group authorize (returns ok) for request 0 Wed Apr 5 11:51:50 2006 : Debug: rad_check_password: Found Auth-Type ldap Wed Apr 5 11:51:50 2006 : Debug: auth: type "LDAP" Wed Apr 5 11:51:50 2006 : Debug: Processing the authenticate section of radiusd.conf Wed Apr 5 11:51:50 2006 : Debug: modcall: entering group LDAP for request 0 Wed Apr 5 11:51:50 2006 : Debug: modsingle[authenticate]: calling ldap (rlm_ldap) for request 0 Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: - authenticate Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: login attempt by "hellouser123" with password "f0unT@1n" Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: user DN: CN=hellouser123,CN=Users,DC=HelloTechnology,DC=com Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: (re)connect to 10.26.1.202:389, authentication 1 Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: bind as CN=hellouser123,CN=Users,DC=HelloTechnology,DC=com/f0unT@1n to 10.26.1.202:389 Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: waiting for bind result ... Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: Bind was successful Wed Apr 5 11:51:50 2006 : Debug: rlm_ldap: user hellouser123 authenticated succesfully Wed Apr 5 11:51:50 2006 : Debug: modsingle[authenticate]: returned from ldap (rlm_ldap) for request 0 Wed Apr 5 11:51:50 2006 : Debug: modcall[authenticate]: module "ldap" returns ok for request 0 Wed Apr 5 11:51:50 2006 : Debug: modcall: leaving group LDAP (returns ok) for request 0 Wed Apr 5 11:51:50 2006 : Debug: Processing the post-auth section of radiusd.conf Wed Apr 5 11:51:50 2006 : Debug: modcall: entering group post-auth for request 0 Wed Apr 5 11:51:50 2006 : Debug: modsingle[post-auth]: calling jradius (rlm_jradius) for request 0 Wed Apr 5 11:51:50 2006 : Error: rlm_jradius: could not connect to 127.0.0.1:1814 Wed Apr 5 11:51:50 2006 : Debug: rlm_jradius: packing attribute User-Name (type: 1; len: 12) Wed Apr 5 11:51:50 2006 : Debug: rlm_jradius: packing attribute User-Password (type: 2; len: 8) Wed Apr 5 11:51:50 2006 : Debug: rlm_jradius: packing attribute NAS-IP-Address (type: 4; len: 4) Wed Apr 5 11:51:50 2006 : Debug: rlm_jradius: packing attribute NAS-Port (type: 5; len: 4) Wed Apr 5 11:51:50 2006 : Debug: rlm_jradius: packing attribute Client-IP-Address (type: 1052; len: 4) Wed Apr 5 11:51:50 2006 : Debug: rlm_jradius: packing attribute Ldap-UserDn (type: 1053; len: 50) Wed Apr 5 11:51:50 2006 : Debug: rlm_jradius: packing packet with code: 1 (attr length: 154) Wed Apr 5 11:51:50 2006 : Debug: rlm_jradius: packing packet with code: 2 (attr length: 0) Wed Apr 5 11:51:50 2006 : Debug: rlm_jradius: packing attribute Auth-Type (type: 1000; len: 4) Wed Apr 5 11:51:50 2006 : Debug: rlm_jradius: sending 201 bytes to jradius server Wed Apr 5 11:51:50 2006 : Debug: rlm_jradius: return code 2; receiving 2 packets Wed Apr 5 11:51:50 2006 : Debug: rlm_jradius: reading packet: code=1 len=154 Wed Apr 5 11:51:50 2006 : Debug: rlm_jradius: reading attribute: type=1; len=12 Wed Apr 5 11:51:50 2006 : Debug: rlm_jradius: reading attribute: type=2; len=8 Wed Apr 5 11:51:50 2006 : Debug: rlm_jradius: reading attribute: type=4; len=4 Wed Apr 5 11:51:50 2006 : Debug: rlm_jradius: reading attribute: type=5; len=4 Wed Apr 5 11:51:50 2006 : Debug: rlm_jradius: reading attribute: type=1052; len=4 Wed Apr 5 11:51:50 2006 : Debug: rlm_jradius: reading attribute: type=1053; len=50 --------------------------------------------------------- Wed Apr 5 11:51:50 2006 : Debug: rlm_jradius: reading packet: code=11 len=37 Wed Apr 5 11:51:50 2006 : Debug: rlm_jradius: reading attribute: type=18; len=25 Wed Apr 5 11:51:50 2006 : Debug: rlm_jradius: reading request: config_item: len=16 Wed Apr 5 11:51:50 2006 : Debug: rlm_jradius: reading attribute: type=1000; len=4 Wed Apr 5 11:51:50 2006 : Debug: modsingle[post-auth]: returned from jradius (rlm_jradius) for request 0 Wed Apr 5 11:51:50 2006 : Debug: modcall[post-auth]: module "jradius" returns ok for request 0 Wed Apr 5 11:51:50 2006 : Debug: modcall: leaving group post-auth (returns ok) for request 0 Sending Access-Accept of id 197 to 127.0.0.1 port 4820 Reply-Message = "Please input SMS password" Wed Apr 5 11:51:50 2006 : Debug: Finished request 0 Wed Apr 5 11:51:50 2006 : Debug: Going to the next request Wed Apr 5 11:51:50 2006 : Debug: --- Walking the entire request list --- Wed Apr 5 11:51:50 2006 : Debug: Waking up in 6 seconds... Wed Apr 5 11:51:56 2006 : Debug: --- Walking the entire request list --- Wed Apr 5 11:51:56 2006 : Debug: Cleaning up request 0 ID 197 with timestamp 44333ed6 Wed Apr 5 11:51:56 2006 : Debug: Nothing to do. Sleeping until we see a request. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Scott Reed wrote:
I have searched the archive and came close to figuring this out, but I have not
Don't start your query as part of another thread please.
Configuration tables: 1 USERGROUP 2 80 sreed MS1-AP1 3 76 treed MS1-AP1 4 78 sreed Router-Admin 5 79 treed Router-Admin 6 81 dreed Router-Admin 7 8 RADCHECK 9 331 dreed User-Password == password 10 269 treed User-Password == password 11 267 sreed User-Password == password
This should be ":=" for User-Password. If the match is failing, that may be the issue.
12 13 RADGROUPCHECK 14 31 Router-Admin Service-Type == Login-User 15 28 MS1-AP1 Service-Type == Framed-User 16 17 RADREPLY 18 33 sreed Fall-Through = yes 19 43 treed Fall-Through = yes 20 21 RADGROUPREPLY 22 33 MS1-AP1 Port-Limit = 128k 15 23 34 Router-Admin Mikrotik-Group = full 10 24 39 Router-Admin Fall-Through = Yes 10 25 37 MS1-AP1 Fall-Through = Yes 15
I don't think Fall-Through does anything in rlm_sql. What are you expecting it to do?
rad_recv: Access-Request packet from host 192.168.100.13:1201, id=166, length=83 Service-Type = Login-User User-Name = "treed" User-Password = "password" Calling-Station-Id = "192.168.100.240" NAS-Identifier = "HotSpot" NAS-IP-Address = 192.168.100.13 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 modcall[authorize]: module "mschap" returns noop for request 1 rlm_realm: No '@' in User-Name = "treed", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 1 radius_xlat: 'treed' rlm_sql (sql): sql_set_user escaped user --> 'treed' rlm_sql_mysql: query: SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'treed' ORDER BY id rlm_sql_mysql: query: SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'treed' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id
What is the result of this query if you execute it directly against the database?
rlm_sql_mysql: query: SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = 'treed' ORDER BY id
rlm_sql_mysql: query: SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'treed' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.prio
Again, what does this query give against the database?
rlm_sql (sql): No matching entry in the database for request from user [treed]
This error code is returned if the check items don't match the request. Possibly take a look in: src/modules/rlm_sql/rlm_sql.c ...around line 860 (depending on the version you're running) and uncomment these lines: /* * Uncomment these lines for debugging * Recompile, and run 'radiusd -X' */ /* DEBUG2("rlm_sql: check items"); vp_listdebug(check_tmp); DEBUG2("rlm_sql: reply items"); vp_listdebug(reply_tmp); */ ...then recompile and run again.
Someone posted that many readers of this list don't have HTML mail readers, so I cleaned up the spacing on the tables and am reposting this in text so all can read it. Scott Reed Owner NewWays Wireless Networking Network Design, Installation and Administration www.nwwnet.net ---------- Original Message ----------- From: "Scott Reed" <sreed@nwwnet.net> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Thu, 6 Apr 2006 07:54:08 -0500 Subject: Re: User in Multiple Groups
I did not usurp a thread, I reposted my own.
I changed radcheck to have := instead of ==. No change.
First query returns: +----+--------------+--------------+-------------+----+ | id | GroupName | Attribute | Value | op | +----+--------------+--------------+-------------+----+ | 28 | MS1-AP1 | Service-Type | Framed-User | == | | 31 | Router-Admin | Service-Type | Login-User | == | +----+--------------+--------------+-------------+----+ Second query returns +----+--------------+-------------------+-------+----+ | id | GroupName | Attribute | Value | op | +----+--------------+-------------------+-------+----+ | 34 | Router-Admin | Mikrotik-Group | full | = | | 39 | Router-Admin | Fall-Through | Yes | = | | 37 | MS1-AP1 | Fall-Through | Yes | = | | 33 | MS1-AP1 | Port-Limit | 128k | = | +----+--------------+-------------------+-------+----+
I have a document from the FreeRadius WIKI (rlm_sql) that says, "Processing continues to the next group IF: There was not a match for the last group's check items OR Fall-Through was set in the last group's reply items. If the user logs into a router, the request is for Login-User and they should get the Router-Admin replies. If they log in to an AP, the request is Framed-User and they should get the AP replies.
Scott Reed Owner NewWays Wireless Networking Network Design, Installation and Administration www.nwwnet.net
---------- Original Message ----------- From: Phil Mayers <p.mayers@imperial.ac.uk> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Thu, 06 Apr 2006 13:22:39 +0100 Subject: Re: User in Multiple Groups
Scott Reed wrote:
I have searched the archive and came close to figuring this out, but I have not
Don't start your query as part of another thread please.
Configuration tables: 1 USERGROUP 2 80 sreed MS1-AP1 3 76 treed MS1-AP1 4 78 sreed Router-Admin 5 79 treed Router-Admin 6 81 dreed Router-Admin 7 8 RADCHECK 9 331 dreed User-Password == password 10 269 treed User-Password == password 11 267 sreed User-Password == password
This should be ":=" for User-Password. If the match is failing, that may be the issue.
12 13 RADGROUPCHECK 14 31 Router-Admin Service-Type == Login-User 15 28 MS1-AP1 Service-Type == Framed-User 16 17 RADREPLY 18 33 sreed Fall-Through = yes 19 43 treed Fall-Through = yes 20 21 RADGROUPREPLY 22 33 MS1-AP1 Port-Limit = 128k 15 23 34 Router-Admin Mikrotik-Group = full 10 24 39 Router-Admin Fall-Through = Yes 10 25 37 MS1-AP1 Fall-Through = Yes 15
I don't think Fall-Through does anything in rlm_sql. What are you expecting it to do?
rad_recv: Access-Request packet from host 192.168.100.13:1201, id=166, length=83 Service-Type = Login-User User-Name = "treed" User-Password = "password" Calling-Station-Id = "192.168.100.240" NAS-Identifier = "HotSpot" NAS-IP-Address = 192.168.100.13 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 modcall[authorize]: module "mschap" returns noop for request 1 rlm_realm: No '@' in User-Name = "treed", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 1 radius_xlat: 'treed' rlm_sql (sql): sql_set_user escaped user --> 'treed' rlm_sql_mysql: query: SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'treed' ORDER BY id rlm_sql_mysql: query: SELECT
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op
FROM radgroupcheck,usergroup WHERE usergroup.Username = 'treed' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id
What is the result of this query if you execute it directly against the database?
rlm_sql_mysql: query: SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = 'treed' ORDER BY id
rlm_sql_mysql: query: SELECT
radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op
FROM radgroupreply,usergroup WHERE usergroup.Username = 'treed' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.prio
Again, what does this query give against the database?
rlm_sql (sql): No matching entry in the database for request from user [treed]
This error code is returned if the check items don't match the request.
Possibly take a look in:
src/modules/rlm_sql/rlm_sql.c
...around line 860 (depending on the version you're running) and uncomment these lines:
/* * Uncomment these lines for debugging * Recompile, and run 'radiusd -X' */
/* DEBUG2("rlm_sql: check items"); vp_listdebug(check_tmp); DEBUG2("rlm_sql: reply items"); vp_listdebug(reply_tmp); */
...then recompile and run again. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ------- End of Original Message -------
------- End of Original Message -------
Scott Reed wrote:
I did not usurp a thread, I reposted my own.
Really? How odd: Message-ID: <002101c658de$6ceb9400$0500a8c0@laptop> From: "debik" <debik@vp.pl> Subject: Re: Couldn't stop freeradius server!! From: "Scott Reed" <sreed@nwwnet.net> Date: Wed, 5 Apr 2006 07:25:29 -0500 Message-Id: <20060405121401.M70783@nwwnet.net> In-Reply-To: <002101c658de$6ceb9400$0500a8c0@laptop> Subject: User in Multiple Groups
I changed radcheck to have := instead of ==. No change.
First query returns: +----+--------------+--------------+-------------+----+ | id | GroupName | Attribute | Value | op | +----+--------------+--------------+-------------+----+ | 28 | MS1-AP1 | Service-Type | Framed-User | == | | 31 | Router-Admin | Service-Type | Login-User | == | +----+--------------+--------------+-------------+----+
Ah ok. Lightbulb moment. Disclaimer: I'm not an expert w.r.t. rlm_sql (or much else in the server in fact) BUT I've taken quite a detailed look at the code in the past, and as far as I can tell it does this: check_items = [] radcheck_items = query("<radcheck query>") check_items += radcheck_items groupcheck_items = query("<radgroupcheck query>") check_items += groupcheck_items ...that is, ALL the groupcheck items for a user are added to the check items (see src/modules/rlm_sql/rlm_sql.c line 782, at least in 1.1.0 source). So, in your case the check items from both groups will be merged: username Service-Type == Framed-User, Service-Type == Login-User ...and obviously will never match. So you're correct, with the default queries >1 groupcheck where the groups have the same check item will seldom (if ever) work as expected. You could try changing the groupcheck query to something like: SELECT ${groupcheck_table}.id, ${groupcheck_table}.GroupName, ${groupcheck_table}.Attribute, ${groupcheck_table}.Value, ${groupcheck_table}.op FROM ${groupcheck_table}, ${usergroup_table} WHERE ${usergroup_table}.Username = '%{SQL-User-Name}' AND ${usergroup_table}.GroupName = ${groupcheck_table}.GroupName -- this bit has been added AND ( -- all groups without Service-Type checks NOT EXISTS ( select 1 from ${groupcheck_table} as ot where ot.Attribute=='Service-Type' and ot.GroupName==${groupcheck_table}.GroupName ) OR -- all groups with Service-Type checks matching our Service-Type EXISTS ( select 1 from ${groupcheck_table} as ot where ot.Attribute=='Service-Type' -- WARNING: this assumes ot.Op is "==" and ot.Value=='%{Service-Type}' and ot.GroupName==${groupcheck_table}.GroupName ) ) -- the above bit has been added ORDER BY ${groupcheck_table}.id ...which is a bit complex (and untested / off the top of my head) but should work. Having said that I note you're using MySQL, which I can't remember if it support sub-selects. Really the module should be recoded IMHO to do this: usercheck = query("<radcheck query>") if usercheck AND paircmp(usercheck, request): userreply = query("<radreply query>") pairxlatmove(request.reply, userreply) groups = query("<usergroup query> order by priority") for group in groups: groupcheck = query("<groupcheck query> WHERE GroupName=$group") if groupcheck and paircmp(groupcheck, request): groupreply = query("<groupreply query> WHERE GroupName=$group") pairxlatmove(request.reply, groupreply) ...but I don't know if there's any interest in doing that.
Scott Reed wrote:
OK, Phil, you got me. I thought all I did was copy the to address, but must have used a reply instead. Sorry.
Grin - it was not my intention to "get" you. I'm certainly not the mailing list police. The only reason I mentioned it is that I (and I suspect many) people drop whole threads at a time that aren't of interest to them, so it was only luck that I saw your mail.
Thanks for the code suggestions. I understand what you see as the issue. Makes sense. I will experiment with what you suggest and see what I get.
I might have a crack at the re-ification of the SQL module early next week. Still need to get a feeling from the developers if it's meant to work that way and if so why or whether a rework would be welcome.
OK, Phil, you got me. I thought all I did was copy the to address, but must have used a reply instead. Sorry. Thanks for the code suggestions. I understand what you see as the issue. Makes sense. I will experiment with what you suggest and see what I get. Scott Reed Owner NewWays Wireless Networking Network Design, Installation and Administration www.nwwnet.net ---------- Original Message ----------- From: Phil Mayers <p.mayers@imperial.ac.uk> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Fri, 07 Apr 2006 11:09:48 +0100 Subject: Re: User in Multiple Groups
Scott Reed wrote:
I did not usurp a thread, I reposted my own.
Really? How odd:
Message-ID: <002101c658de$6ceb9400$0500a8c0@laptop> From: "debik" <debik@vp.pl> Subject: Re: Couldn't stop freeradius server!!
From: "Scott Reed" <sreed@nwwnet.net> Date: Wed, 5 Apr 2006 07:25:29 -0500 Message-Id: <20060405121401.M70783@nwwnet.net> In-Reply-To: <002101c658de$6ceb9400$0500a8c0@laptop> Subject: User in Multiple Groups
I changed radcheck to have := instead of ==. No change.
First query returns: +----+--------------+--------------+-------------+----+ | id | GroupName | Attribute | Value | op | +----+--------------+--------------+-------------+----+ | 28 | MS1-AP1 | Service-Type | Framed-User | == | | 31 | Router-Admin | Service-Type | Login-User | == | +----+--------------+--------------+-------------+----+
Ah ok. Lightbulb moment.
Disclaimer: I'm not an expert w.r.t. rlm_sql (or much else in the server in fact)
BUT I've taken quite a detailed look at the code in the past, and as far as I can tell it does this:
check_items = []
radcheck_items = query("<radcheck query>") check_items += radcheck_items
groupcheck_items = query("<radgroupcheck query>") check_items += groupcheck_items
...that is, ALL the groupcheck items for a user are added to the check items (see src/modules/rlm_sql/rlm_sql.c line 782, at least in 1.1.0 source).
So, in your case the check items from both groups will be merged:
username Service-Type == Framed-User, Service-Type == Login-User
...and obviously will never match. So you're correct, with the default queries >1 groupcheck where the groups have the same check item will seldom (if ever) work as expected.
You could try changing the groupcheck query to something like:
SELECT ${groupcheck_table}.id, ${groupcheck_table}.GroupName, ${groupcheck_table}.Attribute, ${groupcheck_table}.Value, ${groupcheck_table}.op FROM ${groupcheck_table}, ${usergroup_table} WHERE ${usergroup_table}.Username = '%{SQL-User-Name}' AND ${usergroup_table}.GroupName = ${groupcheck_table}.GroupName -- this bit has been added AND ( -- all groups without Service-Type checks NOT EXISTS ( select 1 from ${groupcheck_table} as ot where ot.Attribute=='Service-Type' and ot.GroupName==${groupcheck_table}.GroupName ) OR -- all groups with Service-Type checks matching our Service-Type EXISTS ( select 1 from ${groupcheck_table} as ot where ot.Attribute=='Service-Type' -- WARNING: this assumes ot.Op is "==" and ot.Value=='%{Service-Type}' and ot.GroupName==${groupcheck_table}.GroupName ) ) -- the above bit has been added ORDER BY ${groupcheck_table}.id
...which is a bit complex (and untested / off the top of my head) but should work. Having said that I note you're using MySQL, which I can't remember if it support sub-selects.
Really the module should be recoded IMHO to do this:
usercheck = query("<radcheck query>") if usercheck AND paircmp(usercheck, request): userreply = query("<radreply query>") pairxlatmove(request.reply, userreply) groups = query("<usergroup query> order by priority") for group in groups: groupcheck = query("<groupcheck query> WHERE GroupName=$group") if groupcheck and paircmp(groupcheck, request): groupreply = query("<groupreply query> WHERE GroupName=$group") pairxlatmove(request.reply, groupreply)
...but I don't know if there's any interest in doing that. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ------- End of Original Message -------
participants (9)
-
Alex M -
debik -
lmyho -
monish ar -
Peter Nixon -
Phil Mayers -
Scott Reed -
Seferovic Edvin -
Yizhi Lao