Hi,
it's now running on our most busy server. Both -X and
background-multithreaded do their usual job. I do not see any problems
so far.
That said, I was at that point with 2.1.11 as well, and it caught fire
after 48+ hours only. So, there might still be surprises. I'll keep it
running
Been running a week now, and the prerelease still looks good here as
well.
Bjørn
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
munin has been added to the radiusd group which is defined in the
control virtual server - and this used to work all okay
with 2.1.10 and 2.1.11 - so the change in code for root GID seems to have
borked the access to radiusd.sock for other groups.
I've committed a fix to the
On 5 Sep 2011, at 14:42, Alan Buxey wrote:
Hi,
munin has been added to the radiusd group which is defined in the
control virtual server - and this used to work all okay
with 2.1.10 and 2.1.11 - so the change in code for root GID seems to have
borked the access to radiusd.sock for other
Hi,
hmm, latest GIT version checked out and compiled...still seems to
do the same:
Checked the freeradius.org repo and the github repo and there's been no
relevant commits...
*poke* Alan D, git push...
:-) must've gone to a private repo! :-)
PS thanks to this thread I've tweaked
On 5 Sep 2011, at 15:06, Alan Buxey wrote:
Hi,
hmm, latest GIT version checked out and compiled...still seems to
do the same:
Checked the freeradius.org repo and the github repo and there's been no
relevant commits...
*poke* Alan D, git push...
:-) must've gone to a private
Hi,
:-) must've gone to a private repo! :-)
... and now a public repo, if you'd care to pull and try again.
hmm, command.c and auth.c appears to have been updated but
still see no joy with 'radmin' as munin user (who is in radiusd group)
Mon Sep 5 15:55:04 2011 : Error: Unauthorized
hi,
probably want to change this line in radmin.c too
printf(Copyright (C) 2008 The FreeRADIUS server project and
contributors.\n);
maybe change that string to a global that can be pulled in from
an include? - this could then be used in other places where old
copyright
Alan Buxey wrote:
maybe change that string to a global that can be pulled in from
an include? - this could then be used in other places where old
copyright statements lurk
Maybe. It's not a high priority.
Alan DeKok.
-
List info/subscribe/unsubscribe? See
Alan Buxey wrote:
hmm, command.c and auth.c appears to have been updated but
still see no joy with 'radmin' as munin user (who is in radiusd group)
Mon Sep 5 15:55:04 2011 : Error: Unauthorized connection to
/var/run/radiusd/radiusd.sock from gid 101
My guess is that the get peer id
Hi,
My guess is that the get peer id function is returning only *one*
group. Munin is first part of the munin group, but secondly part of
the radmin group. So... the sockets asks which group is connecting,
and gets told munin.
I'm not sure there's a clean solution to that.
hmm, it
FWIW, found this in ./freeradius-server-2.1.12/src/main/auth.c
502c502
#ifdef WITH_POXT_PROXY_AUTHORIZE
---
#ifdef WITH_POST_PROXY_AUTHORIZE
On Aug 29, 2011, at 7:13 AM, Alan DeKok wrote:
I've put some pre releases of 2.1.12 on the web site:
http://git.freeradius.org/pre/
Please
Jim Madden wrote:
FWIW, found this in ./freeradius-server-2.1.12/src/main/auth.c
Whoops. Fixed that, thanks.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Alan Buxey wrote:
hmm, it used to work - i guess the fix to fix the brokeness also broke
this setup.
I think the change is related to checking the peer ID on the new
connection, rather than the old one. See commit
f0e7064e58f712853c429dcb27e53861f1a9cde1
Alan DeKok.
-
List
Alan DeKok al...@deployingradius.com writes:
Alan Buxey wrote:
hmm, command.c and auth.c appears to have been updated but
still see no joy with 'radmin' as munin user (who is in radiusd group)
Mon Sep 5 15:55:04 2011 : Error: Unauthorized connection to
/var/run/radiusd/radiusd.sock from
Alexander Clouter wrote:
Would be handy to change Acct-Interim-Interval to something like:
update reply {
Acct-Interim-Interval := 3000 + %{rand:1200}
}
Cute. Added.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Alan Buxey wrote:
however, i have noticed a bug/change of bahviour which doesnt
seem right.
Fri Sep 2 17:15:04 2011 : Error: Unauthorized connection to
/var/run/radiusd/radiusd.sock from gid 101
Fri Sep 2 17:15:16 2011 : Error: Unauthorized connection to
/var/run/radiusd/radiusd.sock
Alexander Clouter a...@digriz.org.uk wrote:
I've put some pre releases of 2.1.12 on the web site:
http://git.freeradius.org/pre/
Priming up my end for a burn in...
24 hours later, still churning happily. Running 2.1.12 (bfe2c025).
Cheers
--
Alexander Clouter
.sigmonster says: The
It is running on one of my production servers. So far no problems, but it has
only run for q few hours.
Sent from Verizon Wireless
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
okay7k auths through so far and all fine so far.for auths..
however, i have noticed a bug/change of bahviour which doesnt
seem right.
Fri Sep 2 17:15:04 2011 : Error: Unauthorized connection to
/var/run/radiusd/radiusd.sock from gid 101
Fri Sep 2 17:15:16 2011 : Error:
On 29/08/2011 15:13, Alan DeKok wrote:
I've put some pre releases of 2.1.12 on the web site:
http://git.freeradius.org/pre/
Please let me know if there are any problems. If not, this can become
2.1.12.
All seems good so far.
-James
radmin show version
FreeRADIUS Version 2.1.12, for
Alan DeKok al...@deployingradius.com wrote:
I've put some pre releases of 2.1.12 on the web site:
http://git.freeradius.org/pre/
Please let me know if there are any problems. If not, this can become
2.1.12.
Something handy to add if it is not too late.
We suffered a power failure
Would be handy to change Acct-Interim-Interval to something like:
update reply {
Acct-Interim-Interval := 3000 + %{rand:1200}
}
This would give me Acct-Interim-Interval set to 1hr+-10mins.
As it is set now, I just got 1MB of journal recorded to file accounting
40,000 authentications in about 6 and a half hours. I use eap, eap-peap, ldap,
mschap, files, sql (mysql), proxy, and postauth mostly. No problems. The files
and sql modules are where I have my wildest modifications, but that is that not
much compared to what some people on this list are doing.
Hi,
it's now running on our most busy server. Both -X and
background-multithreaded do their usual job. I do not see any problems
so far.
That said, I was at that point with 2.1.11 as well, and it caught fire
after 48+ hours only. So, there might still be surprises. I'll keep it
running under
Alan DeKok al...@deployingradius.com wrote:
I've put some pre releases of 2.1.12 on the web site:
http://git.freeradius.org/pre/
Priming up my end for a burn in...
Cheers
--
Alexander Clouter
.sigmonster says: And on the seventh day, He exited from append mode.
-
List
Hi,
it's now running on our most busy server. Both -X and
background-multithreaded do their usual job. I do not see any problems
so far.
its on one of our production servers and on a couple of other
systems.
alan
-
List info/subscribe/unsubscribe? See
I've put some pre releases of 2.1.12 on the web site:
http://git.freeradius.org/pre/
Please let me know if there are any problems. If not, this can become
2.1.12.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
28 matches
Mail list logo
