Hi,
 

i have a problem using Exec-Program-Wait Attribute.. any comments or suggestion how to fix this problem. here's my configuration.
 
/tmp/checkras
 
#!/bin/sh
if [ $1 == "192.168.0.1" ] ; then
exit -1 ; #fail
elif [ $1 == "192.168.0.2" ]; then
exit -1 ; #fail
fi
exit 0 ; #pass
 
#SQL
mysql> select * from radcheck where username='dialup'; 
+-----+---------------------------------+------------------------------------+----+-----------------------------------------------------------+
| id  | UserName                   | Attribute                        | op | Value                                                  |
+-----+---------------------------------+------------------------------------+----+-----------------------------------------------------------+
| 1   | dialup                         | Auth-Type                      | := | Crypt-Local                                           |
| 2   | dialup                         | Crypt-Password              | := | $1$pperslPx$fH2WNvkg8UooKSzBfdasf. |
| 3   | dialup                         | Simultaneous-Use           |:=  |   1                                                       |
+-----+--------------------------------+-------------------------------------+----+-----------------------------------------------------------+
 
mysql> select * from radreply where username='dialup'; 
+----+----------------+------------------------------------+----+------------------------------------------------------+
| id | UserName     | Attribute                      | op | Value                                             |
+----+----------------+-------------------------------------+----+-----------------------------------------------------+
|  1 | dialup         | Framed-Protocol             | := | PPP                                               |
|  2 | dialup         | Framed-IP-Netmask        | := | 255.255.255.0                                 |
|  3 | dialup        | Framed-Compression       | := | Van-Jacobson-TCP-IP                     | 
|  4 | dialup        | Service-Type                   | := | Framed-User                                  |
|  5 | dialup        | Idle-Timeout                    | := | 3600                                              |
|  6| dialup         | Exec-Program-Wait         | := | /tmp/checkras %n                           |
|  7| dialup        | Fall-Through                    | := | Yes                                                | 
+----+----------------+-------------------------------------+----+----------------------------------------------------+
 
using radiusd -X
 
 
  Processing the session section of radiusd.conf
modcall: entering group session for request 1008
radius_xlat:  'dialup'
rlm_sql (sql): sql_set_user escaped user --> 'dialup'
radius_xlat:  'SELECT COUNT(*) FROM radacct WHERE UserName='dialup' AND AcctStopTime = 0'
rlm_sql (sql): Reserving sql socket id: 1
rlm_sql (sql): Released sql socket id: 1
  modcall[session]: module "sql" returns ok for request 1008
modcall: group session returns ok for request 1008
radius_xlat:  '192.168.0.1'
Exec-Program output: Exec-Program: FAILED to execute /tmp/checkras: Bad address
Exec-Program-Wait: plaintext: Exec-Program: FAILED to execute /tmp/checkras: Bad address
Exec-Program: Abnormal child exit: No child processes
Login incorrect (external check failed): [dilaup/foobar] (from client foobar port 125)
Delaying request 1008 for 1 seconds
Finished request 1008
Going to the next request
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Cleaning up request 1006 ID 62 with timestamp 41e9f160
Sending Access-Reject of id 84 to 192.168.0.5:38613
        Reply-Message := "Exec-Program: FAILED to execute /tmp/checkras: Bad address\n"
Waking up in 1 seconds...
--- Walking the entire request list ---
Cleaning up request 1007 ID 182 with timestamp 41e9f161
Waking up in 3 seconds...
--- Walking the entire request list ---
Cleaning up request 1008 ID 84 with timestamp 41e9f164
Nothing to do.  Sleeping until we see a request.
 
Thanks,
 
Emman

Reply via email to