Unknown Attribute "Max-Daily-Session" on freeradius3

Marco Marino marino.mrc at gmail.com
Mon Feb 17 12:57:44 CET 2014


Ok...
I'm trying to switch to FR3 from FR2.2.3. In the old version there is a
table in the mysql db called "dictionary", created by a rails application
(fixtures). I don't have a deep knowledge of FR, so i don't known how FR
import this table (and its attributes) in memory...
When i do
echo "User-Name = marco,User-Password = mc68hc908" | /usr/bin/radclient
localhost:1812 auth testing123


output is:

Ready to process requests
rad_recv: Access-Request packet from host 127.0.0.1 port 46505, id=12,
length=45
User-Name = 'marco'
User-Password = 'mc68hc908'
(0) # Executing section authorize from file
/etc/freeradius//sites-enabled/default
(0)   authorize {
(0)   filter_username filter_username {
(0)    ? if (!User-Name)
(0)    ? if (!User-Name)  -> FALSE
(0)    ? if (User-Name != "%{tolower:%{User-Name}}")
(0) expand: "%{tolower:%{User-Name}}" -> 'marco'
(0)    ? if (User-Name != "%{tolower:%{User-Name}}")  -> FALSE
(0)    ? if (User-Name =~ / /)
(0)    ? if (User-Name =~ / /)  -> FALSE
(0)    ? if (User-Name =~ /@.*@/ )
(0)    ? if (User-Name =~ /@.*@/ )  -> FALSE
(0)    ? if (User-Name =~ /\\.\\./ )
(0)    ? if (User-Name =~ /\\.\\./ )  -> FALSE
(0)    ? if ((User-Name =~ /@/) && (User-Name !~ /@(.+)\\.(.+)$/))
(0)    ? if ((User-Name =~ /@/) && (User-Name !~ /@(.+)\\.(.+)$/))   ->
FALSE
(0)    ? if (User-Name =~ /\\.$/)
(0)    ? if (User-Name =~ /\\.$/)   -> FALSE
(0)    ? if (User-Name =~ /@\\./)
(0)    ? if (User-Name =~ /@\\./)   -> FALSE
(0)   } # filter_username filter_username = notfound
(0)   [preprocess] = ok
(0)   [chap] = noop
(0)   [mschap] = noop
(0)   [digest] = noop
(0) suffix : No '@' in User-Name = "marco", looking up realm NULL
(0) suffix : No such realm "NULL"
(0)   [suffix] = noop
(0) eap : No EAP-Message, not doing EAP
(0)   [eap] = noop
(0)   [files] = noop
(0) sql : expand: "%{User-Name}" -> 'marco'
(0) sql : SQL-User-Name set to 'marco'
rlm_sql (sql): Reserved connection (4)
(0) sql : expand: "SELECT id, username, attribute, value, op FROM radcheck
WHERE username = '%{SQL-User-Name}' ORDER BY id" -> 'SELECT id, username,
attribute, value, op FROM radcheck WHERE username = 'marco' ORDER BY id'
rlm_sql (sql): Executing query: 'SELECT id, username, attribute, value, op
FROM radcheck WHERE username = 'marco' ORDER BY id'
(0) sql : User found in radcheck table
(0) sql : Check items matched
(0) sql : expand: "SELECT id, username, attribute, value, op FROM radreply
WHERE username = '%{SQL-User-Name}' ORDER BY id" -> 'SELECT id, username,
attribute, value, op FROM radreply WHERE username = 'marco' ORDER BY id'
rlm_sql (sql): Executing query: 'SELECT id, username, attribute, value, op
FROM radreply WHERE username = 'marco' ORDER BY id'
(0) sql : expand: "SELECT groupname FROM radusergroup WHERE username =
'%{SQL-User-Name}' ORDER BY priority" -> 'SELECT groupname FROM
radusergroup WHERE username = 'marco' ORDER BY priority'
rlm_sql (sql): Executing query: 'SELECT groupname FROM radusergroup WHERE
username = 'marco' ORDER BY priority'
(0) sql : User found in the group table
(0) sql : expand: "SELECT id, groupname, attribute, Value, op FROM
radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id" -> 'SELECT id,
groupname, attribute, Value, op FROM radgroupcheck WHERE groupname =
'Users' ORDER BY id'
rlm_sql (sql): Executing query: 'SELECT id, groupname, attribute, Value, op
FROM radgroupcheck WHERE groupname = 'Users' ORDER BY id'
rlm_sql: Failed to create the pair: Unknown attribute "Max-Daily-Session"
rlm_sql (sql): Error parsing user data from database result
(0) ERROR: sql : Error retrieving check pairs for group Users
rlm_sql (sql): Released connection (4)
rlm_sql (sql): Closing connection (0): Too many free connections (5 > 3)
rlm_sql_mysql: Socket destructor called, closing socket
(0)   [sql] = fail
(0)  } #  authorize = fail
(0) Using Post-Auth-Type Reject
(0) # Executing group from file /etc/freeradius//sites-enabled/default
(0)  Post-Auth-Type REJECT {
(0)   [-sql] = noop
(0) attr_filter.access_reject : expand: "%{User-Name}" -> 'marco'
(0) attr_filter.access_reject : Matched entry DEFAULT at line 11
(0)   [attr_filter.access_reject] = updated
(0) eap : Request didn't contain an EAP-Message, not inserting EAP-Failure
(0)   [eap] = noop
(0)   remove_reply_message_if_eap remove_reply_message_if_eap {
(0)    ? if (reply:EAP-Message && reply:Reply-Message)
(0)    ? if (reply:EAP-Message && reply:Reply-Message)  -> FALSE
(0)    else else {
(0)     [noop] = noop
(0)    } # else else = noop
(0)   } # remove_reply_message_if_eap remove_reply_message_if_eap = noop
(0)  } # Post-Auth-Type REJECT = updated
(0) Finished request 0.
Waking up in 0.3 seconds.
Waking up in 0.6 seconds.
(0) Sending delayed reject
Sending Access-Reject of id 12 from 127.0.0.1 port 1812 to 127.0.0.1 port
46505
Waking up in 4.9 seconds.
(0) Cleaning up request packet ID 12 with timestamp +17
Ready to process requests



Have I some error in the configuration files? I known that switch from 2.x
to 3 is possible...
Thanks













2014-02-17 12:42 GMT+01:00 Arran Cudbard-Bell <a.cudbardb at freeradius.org>:

>
> > This was due to incorrect arguments being passed to the dict_addattr
> function in rlm_sqlcounter.
> > This means that i have to enable sqlcounter module if i'm using
> dictionary table (mysql)???
>
> I have no idea what that means.
>
> > BTW, git pull doesn't solved the issue.
>
> Please provide full debug output.
>
> Arran Cudbard-Bell <a.cudbardb at freeradius.org>
> FreeRADIUS Development Team
>
> FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20140217/67c83748/attachment-0001.html>


More information about the Freeradius-Users mailing list