RadPerf '-A delay,lifetime' arg does not copy the 'Calling-Station-Id' from Accept-Request
Jim
jbalatero at visp.net
Fri Mar 4 00:40:09 CET 2016
Thank you very much.
On 2016-03-03 15:24, freeradius-users-request at lists.freeradius.org
wrote:
> Send Freeradius-Users mailing list submissions to
> freeradius-users at lists.freeradius.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://lists.freeradius.org/mailman/listinfo/freeradius-users [1]
> or, via email, send a message with subject or body 'help' to
> freeradius-users-request at lists.freeradius.org
>
> You can reach the person managing the list at
> freeradius-users-owner at lists.freeradius.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Freeradius-Users digest..."
>
> Today's Topics:
>
> 1. Re: RadPerf '-A delay, lifetime' arg does not copy the
> 'Calling-Station-Id' from Accept-Request (Alan DeKok)
> 2. linelog problem (Maja Wolniewicz)
> 3. Stripping prefix with unlang (Bernd)
> 4. Re: Stripping prefix with unlang (Herwin Weststrate)
> 5. Re: Stripping prefix with unlang (Alan DeKok)
> 6. Re: linelog problem (Alan DeKok)
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Thu, 3 Mar 2016 08:17:24 -0500
> From: Alan DeKok <aland at deployingradius.com>
> To: jbaltero at gmail.com, FreeRadius users mailing list
> <freeradius-users at lists.freeradius.org>
> Subject: Re: RadPerf '-A delay, lifetime' arg does not copy the
> 'Calling-Station-Id' from Accept-Request
> Message-ID: <D0CC71E0-6386-4864-A2A4-865E115DC78A at deployingradius.com>
> Content-Type: text/plain; charset=us-ascii
>
> On Mar 2, 2016, at 11:24 PM, Jim <jbalatero at visp.net> wrote:
>
>> As you can see on the Accounting-Request, there's no
>> Calling-Station-Id. How do I get it to be included on the Accounting
>> Packet?
>
> We'll see if we can get a new version of radperf out soon to fix this.
>
> Alan DeKok.
>
> ------------------------------
>
> Message: 2
> Date: Thu, 3 Mar 2016 14:28:45 +0100
> From: Maja Wolniewicz <mgw at umk.pl>
> To: FreeRadius users mailing list
> <freeradius-users at lists.freeradius.org>
> Subject: linelog problem
> Message-ID: <56D83C0D.5070709 at umk.pl>
> Content-Type: text/plain; charset="utf-8"; Format="flowed"
>
> We are running freeradius 3.0.11 on CentOS 6.7.
> Recently we experienced a few radius process hangs - it didn't handle
> any request and in the log
> appeared only a lot of:
>
> Thu Mar 3 08:48:24 2016 : Error: (187540) Ignoring duplicate packet
> from client CM port 1814 - ID: 118 due to unfinished request in
> component post-auth module eduroam_log
> Thu Mar 3 08:48:33 2016 : Error: (187814) Ignoring duplicate packet
> from client CM port 1814 - ID: 152 due to unfinished request in
> component <core> module <queue>
>
> Our investigation showed that these problems start after requests
> containing a "strange" username
> Wed Mar 2 08:01:52 2016 : Auth: (127068) Login incorrect: [юз] (from
> client AP-UMK port 20526 cli 88-A7-3C-DB-35-02)
> Thu Mar 3 08:48:14 2016 : Auth: (187534) Login incorrect: [በᑱ] (from
> client AP-SPEC port 36865 cli 24-0A-64-1F-C1-D3)
> Thu Mar 3 09:38:19 2016 : Auth: (53871) Login incorrect: [юз] (from
> client AP-UMK port 20613 cli 88-A7-3C-DB-35-02)
>
> It turned out that it is caused by linelog module. After we removed
> %{User-Name} from this line
>
> Access-Reject = "%S
> eduroam-auth#ORG=%{request:Realm}#USER=%{User-Name}#CSI=%{%{Calling-Station-Id}:-Unknown
> Caller Id}#NAS=%{%{request:NAS-IP-Address}:-No NAS
> IP}#CUI=%{%{reply:Chargeable-User-Identity}:-Unknown}#MSG=%{%{reply:Reply-Message}:-No
> Failure Reason}#RESULT=FAIL#"
>
> the problem disappeared and strange usernames are handled smoothly.
>
> It looks like a linelog bug.
>
> Maja
>
> --
> Maja Gorecka-Wolniewicz mgw at umk.pl
> Uczelniane Centrum Information & Communication
> Informatyczne Technology Centre
> Uniwersytet Mikolaja Kopernika Nicolaus Copernicus University
> Coll. Maximum, pl. Rapackiego 1, 87-100 Torun, Poland
> tel.: +48 56-611-27-40 fax: +48 56-622-18-50 tel. kom.: +48-693032574
>
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: smime.p7s
> Type: application/pkcs7-signature
> Size: 5087 bytes
> Desc: Kryptograficzna sygnatura S/MIME
> URL:
> <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20160303/64c2eefb/attachment-0001.bin
> [2]>
>
> ------------------------------
>
> Message: 3
> Date: Thu, 03 Mar 2016 15:34:17 +0100
> From: Bernd <bernd at kroenchenstadt.de>
> To: freeradius-users at lists.freeradius.org
> Subject: Stripping prefix with unlang
> Message-ID: <76dd220490223c3795907fb5a728d553 at kroenchenstadt.de>
> Content-Type: text/plain; charset=UTF-8; format=flowed
>
> Hi,
>
> I am pulling my hears for two hours now. I'd like to strip a prefix off
> a request and I'm trying to use unlang in policy.d/filter to do that.
>
> if (User-Name =~
> /adsl-bla/([^%%]+)%%adsl-bla.kroenchenstadt.de/) {
> update request {
> User-Name := "([^%%]+)%%adsl-sbt.kroenchenstadt.de/"
> }
> }
>
> doesn't work, as
>
> if (User-Name =~ /adsl-bla/ {
> update request {
> User-Name -= "adsl-bla/"
> }
> }
>
> also refuses to be that what I need.
>
> I just need to strip ``adsl-bla/'' off the login request.
>
> Help much appreciated -- thanks!
>
> Bernd
>
> ------------------------------
>
> Message: 4
> Date: Thu, 3 Mar 2016 16:16:56 +0100
> From: Herwin Weststrate <herwin at quarantainenet.nl>
> To: FreeRadius users mailing list
> <freeradius-users at lists.freeradius.org>
> Subject: Re: Stripping prefix with unlang
> Message-ID: <56D85568.6030401 at quarantainenet.nl>
> Content-Type: text/plain; charset=utf-8
>
> On 03-03-16 15:34, Bernd wrote:
>
>> Hi, I am pulling my hears for two hours now. I'd like to strip a
>> prefix off a request and I'm trying to use unlang in policy.d/filter
>> to do that. if (User-Name =~
>> /adsl-bla/([^%%]+)%%adsl-bla.kroenchenstadt.de/) { update request {
>> User-Name := "([^%%]+)%%adsl-sbt.kroenchenstadt.de/" } } doesn't work,
>> as if (User-Name =~ /adsl-bla/ { update request { User-Name -=
>> "adsl-bla/" } } also refuses to be that what I need.
>
> That last one contains at least two errors that make it fail to start:
> a
> missing / and a missing ) at the regex statement.
>
> There is no need to escape the hypen in regexes, and you should use the
> matches of the regex to fix it. I assumed you wanted to strip adsl-bla/
> only if it the username starts with it.
>
> # Match everything except adsl-bla/ in (.*)
> if (User-Name =~ /^adsl-bla/(.*)/) {
> update request {
> # Use the match of (.*) as the result
> &User-Name := "%{1}"
> }
> }
>
> There may be even simpler solutions, since it looks a lot like a realm.
> The config for rlm_realm and the examples in policy.d/ can be a source
> of inspiration
>
> --
> Herwin Weststrate
>
> ------------------------------
>
> Message: 5
> Date: Thu, 3 Mar 2016 10:23:29 -0500
> From: Alan DeKok <aland at deployingradius.com>
> To: FreeRadius users mailing list
> <freeradius-users at lists.freeradius.org>
> Subject: Re: Stripping prefix with unlang
> Message-ID: <AC23B57D-34A8-45ED-B445-AAA8CB45732F at deployingradius.com>
> Content-Type: text/plain; charset=us-ascii
>
> On Mar 3, 2016, at 9:34 AM, Bernd <bernd at kroenchenstadt.de> wrote:
>
>> I am pulling my hears for two hours now. I'd like to strip a prefix
>> off a request and I'm trying to use unlang in policy.d/filter to do
>> that. if (User-Name =~
>> /adsl-bla/([^%%]+)%%adsl-bla.kroenchenstadt.de/) {
>
> That's good.
>
>> update request { User-Name := "([^%%]+)%%adsl-sbt.kroenchenstadt.de/"
>
> That's not. You're setting the value of User-Name to... a regular
> expression? Why?
>
> You need to set it to the value captured from the regular expression.
>
>> I just need to strip ``adsl-bla/'' off the login request.
>
> if (User-Name =~ /^adsl-/(.+)$/) {
> update request {
> User-Name := "%{1}"
> }
> }
>
> i.e. you don't need to escape the "-". You do need to escape the "/'.
> And then you just grab everything to the right of that.
>
> Alan DeKok.
>
> ------------------------------
>
> Message: 6
> Date: Thu, 3 Mar 2016 10:24:28 -0500
> From: Alan DeKok <aland at deployingradius.com>
> To: FreeRadius users mailing list
> <freeradius-users at lists.freeradius.org>
> Subject: Re: linelog problem
> Message-ID: <CE5F6468-D87D-4BDB-AD85-2E7DB851B7A9 at deployingradius.com>
> Content-Type: text/plain; charset=us-ascii
>
> On Mar 3, 2016, at 8:28 AM, Maja Wolniewicz <mgw at umk.pl> wrote:
>
>> We are running freeradius 3.0.11 on CentOS 6.7. Recently we
>> experienced a few radius process hangs - it didn't handle any request
>> and in the log appeared only a lot of: Thu Mar 3 08:48:24 2016 :
>> Error: (187540) Ignoring duplicate packet from client CM port 1814 -
>> ID: 118 due to unfinished request in component post-auth module
>> eduroam_log Thu Mar 3 08:48:33 2016 : Error: (187814) Ignoring
>> duplicate packet from client CM port 1814 - ID: 152 due to unfinished
>> request in component <core> module <queue>
>
> A fix has already been pushed to the v3.0.x branch. It will be in
> 3.0.12.
>
> Alan DeKok.
>
> ------------------------------
>
> Subject: Digest Footer
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html [3]
>
> ------------------------------
>
> End of Freeradius-Users Digest, Vol 131, Issue 6
> ************************************************
Links:
------
[1] http://lists.freeradius.org/mailman/listinfo/freeradius-users
[2]
http://lists.freeradius.org/pipermail/freeradius-users/attachments/20160303/64c2eefb/attachment-0001.bin
[3] http://www.freeradius.org/list/users.html
More information about the Freeradius-Users
mailing list