FreeRADIUS 2.1.10 regression in logging behaviour

Alan DeKok aland at deployingradius.com
Sat Nov 27 12:32:46 CET 2010


Josip Rodin wrote:
> With regard to log rotation, that's actually contrary to what it should do :)
> The HUP not only reopens log files, but it also reopens the configuration.
> But if you have a configuration file that the unprivileged FR user can't
> read, esp. if it's radiusd.conf :) the reload will fail, and it also won't
> be able to reopen log files.

  The fix there is to *not* reload the config if it's done an suid.

> IOW for the purpose of log rotation, we didn't need HUP because it's too
> invasive for that purpose. But a configuration reload in general is useful
> and HUP seems like the most appropriate method.

  Another fix would be to add a "radmin" command to re-open just the log
files.

  Either patch is small, and both would be useful.

  Alan DeKok.



More information about the Freeradius-Users mailing list