Update from 3.0.4 to 3.0.13 (RHEL and CentOS 7.3 to 7.4): Reference "${group_attribute}" not found

Bernd bernd at kroenchenstadt.de
Fri Sep 15 10:26:03 CEST 2017


Hi,

committing an update from CentOS release 7.3.1611 to 7.4.1708 also a 
FreeRADIUS update is deployed:

* 7.3.1611: freeradius-3.0.4-8.el7_3.x86_64

* 7.4.1708: freeradius-3.0.13-8.el7_4.x86_64

Afterwards it fails to start. I found a bug report on this (which hit 
Fedora 22 back then in the end of 2015):

https://bugzilla.redhat.com/show_bug.cgi?id=1291006

What's the best way to circumvent this? It seems that some 
reconfiguration is needed, but I don't see exactly *where*.

A temporary (surely not elegant) fix is to modify 
/etc/raddb/mods-config/sql/main/mysql/queries.conf, from

authorize_group_check_query = "\
         SELECT id, groupname, attribute, \
         Value, op \
         FROM ${groupcheck_table} \
         WHERE groupname = '%{${group_attribute}}' \
         ORDER BY id"

authorize_group_reply_query = "\
         SELECT id, groupname, attribute, \
         value, op \
         FROM ${groupreply_table} \
         WHERE groupname = '%{${group_attribute}}' \
         ORDER BY id"

in the new 3.0.13 file to

authorize_group_check_query = "\
         SELECT id, groupname, attribute, \
         Value, op \
         FROM ${groupcheck_table} \
         WHERE groupname = '%{Sql-Group}' \
         ORDER BY id"

authorize_group_reply_query = "\
         SELECT id, groupname, attribute, \
         value, op \
         FROM ${groupreply_table} \
         WHERE groupname = '%{Sql-Group}' \
         ORDER BY id"

(as it was in 3.0.4).

Best,

Bernd


More information about the Freeradius-Users mailing list