Re: freeradius on ethernet using PKI
Sure, you can use without any modem... you just need ethernet.. Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 - Original Message - From: "Slim CHTOUROU" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, February 28, 2002 9:26 AM Subject: freeradius on ethernet using PKI > Hello > I want to authenticate users over ethernetLan using radius and PKI softwate > runnable only under windows.Referring to some docs > PPPoE can be used to connect the PKI client(smart card) to PKI server via > freeradius (is ti feasable?). > > Can I use pppoe without DSL modem (with ethernet card!!) > > > find below the series of devices and protocols involved : > smart card -->terminal client---pppoe--->ethernet-pppoe--> freeradius--SSLor > LDAP -->PKIserver > Thank you for any help you can provide > Best regards > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: authenticate without any password.
at users files: AuthType := Accept they can type anything at DUN box Marcelo FerreiraCanbras TVA Cabo LtdaCanbras Acesso - STAPhone: +5511-4993-8728 - Original Message - From: Avtar Dhillon To: [EMAIL PROTECTED] Sent: Thursday, February 28, 2002 9:51 AM Subject: authenticate without any password. Hi All,, I want that all of my users should connect , whenever they dial without supplying userid and password? is it possible?? where i have to made the changes..? in "users" file or on NAS? I m using cisco AS5300. And I also want that NAS should send accounting packet to radius. pls help... thanks in advance. A Dhillon Do You Yahoo!?Yahoo! Greetings - Send FREE e-cards for every occasion!
Re: Free PPPoE server
Try FreeBSD. It has PPPoE server at kernel. or www.roaringpenguin.com []s Marcelo Costa SY Meta writes: > Hi, > > Does anyone of you know one free pppoe server that authenticates against > radius? > > I cannot find a free one. :( > > Cheers, > > Meta > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ---- Marcelo Ferreira Canbras Acesso Canbras TVA Cabo Ltda 55-11-4993-8717 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Strip and NoStrip based on NAS
Hi, I use the FR server to authenticate 2 local NAS and 1 Proxy Radius (this server received proxied request from a remote server). the local server doesn't use reams, but the remote does. I've tried the NOSTRIP option at the clients.conf, HINTS configuration without success. Does anyone has the same scenario? regards, Marcelo FerreiraCanbras TVA Cabo LtdaCanbras Acesso - STAPhone: +5511-4993-8728
Re: Thread issue - Possible fix
Alan, I tested the 20020203 snapshot with the _r() changes. I ran then server without the -s option (radiusd -p 1812 ) and it cored dump: #0 pairmove (to=0x38, from=0x42964990) at valuepair.c:186 #1 0x08051614 in radius_exec_program (cmd=0x80fde28 "/usr/local/freeradius/auth/bin/autenticadbm %u %f %w", request=0x888, exec_wait=1, user_msg=0x42966e78) at exec.c:305 #2 0x0805259c in rad_authenticate (request=0x888) at auth.c:832 #3 0x0804dcd0 in rad_respond (request=0x888, fun=0x8051d50 ) at radiusd.c:1472 #4 0x08056e04 in request_handler_thread (arg=0x80e4b08) at threads.c:169 #5 0x40061b9c in pthread_start_thread (arg=0x42967be0) at manager.c:274 #6 0x40061c7f in pthread_start_thread_event (arg=0x42967be0) at manager.c:298 If I run it with -s (radiusd -s -p 1812) works fine. []s btw.. did you have (extra) time to revise the rlm_radutmp patch that I sent ? -------- Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, February 02, 2002 2:02 PM Subject: Re: Thread issue - Possible fix > "Miquel van Smoorenburg" <[EMAIL PROTECTED]> wrote: > > Well, you should be able to link against thread-safe variants of > > those functions, right? I mean, strtok() is obviously not > > thread safe, but localtime() should be. > > Nope. Log into a *BSD box. The thread-safe variant of localtime() > is localtime_r(). Localtime returns a pointer to static data, which > can be over-written in subsequent calls. > > I've *never* understood why people designed functions which returned > pointers to static data. They don't even scale on *one* process, much > less multi-threaded. > > e.g. Try to keep two different pointers to data returned by two > subsequent calls to localtime(), for two different dates. You can't. > You get the same pointer both times. So the second call over-writes > the data from the first call. > > So the only sane way to use that function even in a process with one > thread of execution, is to copy the results to another buffer. But if > that's true, why the heck didn't localtime just take a pointer to the > place to store the returned data? > > But I digress... > > > It's probably just a matter of linking against the right library. > > libc_r instead of libc, most likely. > > libc_r usually has the foo_r() functions. libc() doesn't. > > libc_r usually *also* has the unsafe foo() functions, so people who > want to shoot themselves in the foot can do so. > > > I think Linux turns on thread-safety if you define -DREENTRANT > > and link with -pthreads. Other systems might need other > > magic incantations. Like FreeBSD, and probably Solaris. > > glibc does *insane* things to be thread-safe while returning > pointers to static data. That's why Linux doesn't have the foo_r() > functions. > > It's also why glibc is so much larger and more complicated than the > *BSD C libraries. They're trying to be smart & cute, instead of > writing simple, clean, code. > > > Don't just substitute all library functions for their _r equivalents, > > just find out how to link against the thread-safe libc variant. > > The server has been linking that way for a while, and it isn't good > enough. People other than the glibc hackers run away screaming when > asked to make thread-safe versions of localtime(), etc. > > The simplest thing to do is to *always* use the localtime_r() > functions, and to have a trivial wrapper around localtime() using > 'memcpy' to get the same effect. I've made that change in the server > for ctime_r() and for localtime_r(). If it *creates* problems, I'd > love to know. > > IMHO, *all* of the functions returning pointers to static data > should just go away. They're badly designed. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Thread issue - Possible fix
can you send the diff of all files that you fix ? []s Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 - Original Message - From: "Eddie Stassen" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, February 01, 2002 2:25 PM Subject: Re: Thread issue - Possible fix > I have been experiencing crashes as well under high accounting load > (Solaris 7 , mysql accounting). It appears that the use of non thread-safe > library functions are responsible for this. I have replaced all the > localtime() and ctime() calls with their POSIX thread safe counterparts > (localtime_r() and ctime_r()) and radiusd has been running perfectly for > the last 2 hours under constant heavy load from radclient (1000+ req/sec) > whereas before it would crash within a few minutes. > > There are a few other instances of non thread-safe library functions in the > source (gmtime, rand and strtok), but they are used mainly at startup so > they should not affect the stability, although to be correct, I think they > should be replaced with the *_r versions as well. > > I don't know how applicable these changes are to other OS's (Linux), but > perhaps someone running FR on linux could try this and see if it helps. > > Eddie > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Error: Accounting: logout: entry for NAS cnet-bsn port 1929379840 has wrong ID
+516,8 @@
write(fd, &u, sizeof(u));
} else if (r == 0) {
radlog(L_ERR,
- "Accounting: logout: login entry for NAS %s port %d not
found",
- nas_name(nas_address), ut.nas_port);
+ "Accounting: logout: login entry for NAS %s port %d
session_id %.8s not found",
+ nas_name(nas_address), ut.nas_port,
ut.session_id);
r = -1;
}
}
Marcelo Ferreira
Canbras TVA Cabo Ltda
Canbras Acesso - STA
Phone: +5511-4993-8728
- Original Message -
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, January 30, 2002 7:03 PM
Subject: Re: Error: Accounting: logout: entry for NAS cnet-bsn port
1929379840 has wrong ID
> "Marcelo Ferreira" <[EMAIL PROTECTED]> wrote:
> > I think that the index of radutmp file is port number and when FR
> > receives a STOP accounting packet, the session ID at port position
> > is not the same because many others subscribers has logged in before
> > and, logically, the session ID at that port number position is not
> > the same of the STOP package.
>
> Ah, of course.
>
> Hmm... I guess that the only way around this is to hack the radutmp
> module to use the session ID as the key, not the port.
>
> I think that change will even be backwards compatible.
>
> Alan DeKok.
>
> -
> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Error: Accounting: logout: entry for NAS cnet-bsn port 1929379840 has wrong ID
Soory guys, I didn't check the code right, it zap the data out, the comment is the wrong thing. ... can we remove it? there is no zap at radutmp_lookup... again, sorry... []s Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 - Original Message - From: "Marcelo Ferreira" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, January 31, 2002 8:18 AM Subject: Re: Error: Accounting: logout: entry for NAS cnet-bsn port 1929379840 has wrong ID > Miquel, > > In my case, the port won't change for eache new user because my B-Ras dosn't > have fisical ports, > just logical ones. > > but you're right saying that. let's do something different, let's make > another module > (rlm_radutmp_session) and the adm could choose what module to use at > radiusd.conf. > > I made the hack for rlm_radutmp last night and I'll try it this morning. > If it runs good, I'll work at the new module. > > BTW, at radzap.c code, I didn't see the code for 'radzap' the data, just a > comment "Match it, Zap it" and then close(fd), return(0). So I added it from > a cistron radzap. > > []s > > Marcelo Costa > > - Original Message - > From: "Miquel van Smoorenburg" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Wednesday, January 30, 2002 8:16 PM > Subject: Re: Error: Accounting: logout: entry for NAS cnet-bsn port > 1929379840 has wrong ID > > > > In article <[EMAIL PROTECTED]>, > > <[EMAIL PROTECTED]> wrote: > > >"Marcelo Ferreira" <[EMAIL PROTECTED]> wrote: > > >> I think that the index of radutmp file is port number and when FR > > >> receives a STOP accounting packet, the session ID at port position > > >> is not the same because many others subscribers has logged in before > > >> and, logically, the session ID at that port number position is not > > >> the same of the STOP package. > > > > > > Ah, of course. > > > > > > Hmm... I guess that the only way around this is to hack the radutmp > > >module to use the session ID as the key, not the port. > > > I think that change will even be backwards compatible. > > > > The reason why it didn't do that is that by using nas/port you can > > detect it if a stop packet gets lost - a start packet on an > > active nas/port provides a clue that something is wrong. > > > > So it would probably be a good idea to make this configurable. > > > > Mike. > > > > > > - > > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Error: Accounting: logout: entry for NAS cnet-bsn port 1929379840 has wrong ID
Miquel, In my case, the port won't change for eache new user because my B-Ras dosn't have fisical ports, just logical ones. but you're right saying that. let's do something different, let's make another module (rlm_radutmp_session) and the adm could choose what module to use at radiusd.conf. I made the hack for rlm_radutmp last night and I'll try it this morning. If it runs good, I'll work at the new module. BTW, at radzap.c code, I didn't see the code for 'radzap' the data, just a comment "Match it, Zap it" and then close(fd), return(0). So I added it from a cistron radzap. []s Marcelo Costa - Original Message - From: "Miquel van Smoorenburg" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, January 30, 2002 8:16 PM Subject: Re: Error: Accounting: logout: entry for NAS cnet-bsn port 1929379840 has wrong ID > In article <[EMAIL PROTECTED]>, > <[EMAIL PROTECTED]> wrote: > >"Marcelo Ferreira" <[EMAIL PROTECTED]> wrote: > >> I think that the index of radutmp file is port number and when FR > >> receives a STOP accounting packet, the session ID at port position > >> is not the same because many others subscribers has logged in before > >> and, logically, the session ID at that port number position is not > >> the same of the STOP package. > > > > Ah, of course. > > > > Hmm... I guess that the only way around this is to hack the radutmp > >module to use the session ID as the key, not the port. > > I think that change will even be backwards compatible. > > The reason why it didn't do that is that by using nas/port you can > detect it if a stop packet gets lost - a start packet on an > active nas/port provides a clue that something is wrong. > > So it would probably be a good idea to make this configurable. > > Mike. > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Error: Accounting: logout: entry for NAS cnet-bsn port 1929379840 has wrong ID
Allan, > ... > > > Error: Accounting: logout: entry for NAS cnet-bsn port 1929379840 = > > > has wrong ID > > > I found the location of the message rlm_radutmp.c > > > > .. in my case, Shasta's port number won't change for each user. this = > > numer is compiled based on VCI/VPI/Slot/Module=20 > > numbers and it is not based on session ID that is the only unique = > > identifier of the subscriber. > > Well, THAT sucks. Then what the heck is the use of the NAS-Port? > Why is the NAS sending a numeric NAS-Port, which is constant for many > users? > > Unfortunately, the RFC does NOT require the NAS-Port to be unique > for each user. It DOES however state that the NAS-Port is meant to be > the physical port number on the NAS. > > So Shasta is using it in a way that's NOT expected by most RADIUS > servers. > > This also means that the Framed-IP-Address+ thing won't work, > either. Shasta has an IP Pool configuration... in fact, shasta is much more complex that a simple RAS. It is an box that can create virtual routers at trunk side and virtual switchs at access side. I can send you many informations about this box if you want. > > > Alan, it is possible or fisible to make the rlm_radutmp module use the = > > sessionID in place of portnumber? > > It's already using the session ID. The error message comes out > because the saved session ID is NOT the same as the one in the packet. > The session ID is the same and is 8 character long. I think that the index of radutmp file is port number and when FR receives a STOP accounting packet, the session ID at port position is not the same because many others subscribers has logged in before and, logically, the session ID at that port number position is not the same of the STOP package. > This MAY be because the session ID is truncated in the 'radutmp' > file. The data structure currently only defines it to be 8 > characters. Maybe it needs to be more. > > If the session ID is longer than 8 characters, then we can increase > it's size in the data structure, and the error message will disappear. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Error: Accounting: logout: entry for NAS cnet-bsn port 1929379840 has wrong ID
Are you using Shasta or some other aggregator ? I am I found the location of the message rlm_radutmp.c .. in my case, Shasta's port number won't change for each user. this numer is compiled based on VCI/VPI/Slot/Module numbers and it is not based on session ID that is the only unique identifier of the subscriber. Alan, it is possible or fisible to make the rlm_radutmp module use the sessionID in place of portnumber? regards Marcelo FerreiraCanbras TVA Cabo LtdaCanbras Acesso - STAPhone: +5511-4993-8728 - Original Message - From: Edgard Castro To: '[EMAIL PROTECTED]' Sent: Wednesday, January 30, 2002 5:05 PM Subject: RE: Error: Accounting: logout: entry for NAS cnet-bsn port 1929379840 has wrong ID Same here. Several of these. I tought it was because I had several radius servers... Guess not? Regards, Ed Castro -Original Message-From: Marcelo Ferreira [mailto:[EMAIL PROTECTED]]Sent: Wednesday, January 30, 2002 1:19 PMTo: [EMAIL PROTECTED]Subject: Error: Accounting: logout: entry for NAS cnet-bsn port 1929379840 has wrong ID I'm receiving many erros "Wrong ID" as below: Error: Accounting: logout: entry for NAS cnet-bsn port 1929379840 has wrong ID Is there anyone with the same problem? regards, Marcelo FerreiraCanbras TVA Cabo LtdaCanbras Acesso - STAPhone: +5511-4993-8728
Fw: Thread issue
These are my radius process:
2281 radius20 0 2696 2696 1212 R 6,9 1,0 0:08 radiusd
2282 radius20 0 2696 2696 1212 R 6,9 1,0 0:10 radiusd
2284 radius20 0 2696 2696 1212 R 6,9 1,0 0:32 radiusd
2325 radius20 0 2696 2696 1212 R 6,9 1,0 0:05 radiusd
2373 radius20 0 2696 2696 1212 R 6,9 1,0 0:07 radiusd
2381 radius20 0 2696 2696 1212 R 6,9 1,0 0:04 radiusd
2394 radius20 0 2696 2696 1212 R 6,9 1,0 0:05 radiusd
2398 radius20 0 2696 2696 1212 R 6,9 1,0 0:02 radiusd
2400 radius20 0 2696 2696 1212 R 6,9 1,0 0:03 radiusd
2280 radius19 0 2696 2696 1212 R 6,3 1,0 1:18 radiusd
2278 radius20 0 2696 2696 1212 R 5,7 1,0 0:02 radiusd
2279 radius18 0 2696 2696 1212 R 5,7 1,0 0:03 radiusd
2347 radius20 0 2696 2696 1212 R 3,4 1,0 0:05 radiusd
2390 radius20 0 2696 2696 1212 R 3,4 1,0 0:00 radiusd
2405 radius20 0 2696 2696 1212 R 3,4 1,0 0:02 radiusd
2423 radius20 0 2696 2696 1212 R 3,4 1,0 0:01 radiusd
2425 radius20 0 2696 2696 1212 R 3,4 1,0 0:00 radiusd
2276 radius 9 0 2696 2696 1212 S 0,0 1,0 0:00 radiusd
2277 radius11 0 2696 2696 1212 S 0,0 1,0 0:00 radiusd
2366 radius 9 0 2696 2696 1212 S 0,0 1,0 0:00 radiusd
2411 radius 9 0 2696 2696 1212 S 0,0 1,0 0:00 radiusd
2412 radius 9 0 2696 2696 1212 S 0,0 1,0 0:00 radiusd
2422 radius 8 0 2696 2696 1212 S 0,0 1,0 0:00 radiusd
Is it normal?
[]s
Marcelo Ferreira
Canbras TVA Cabo Ltda
Canbras Acesso - STA
Phone: +5511-4993-8728
- Original Message -
From: "Marcelo Ferreira" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, January 30, 2002 5:02 PM
Subject: Re: Thread issue
> Alan,
>
> I tested an unpatched version of FR, snapshot-20020130, and
> the CPU utilization issue occurred again.
>
> What informations can I provide to help you?
> As I said before, I assume that is a thread problem.
>
> regards
>
> ----
> Marcelo Ferreira
> Canbras TVA Cabo Ltda
> Canbras Acesso - STA
> Phone: +5511-4993-8728
>
>
> - Original Message -
> From: "Tan Hwee Hong" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, January 29, 2002 12:58 PM
> Subject: Re: Thread issue
>
>
> > Hi,
> >
> > that's bad.
> > it means there is something not quite right in the code.
> >
> > /tan
> >
> > On Mon, 28 Jan 2002, Marcelo Ferreira wrote:
> >
> > > Hi Tan,
> > >
> > >
> > > I'm running FR with the -s option and the problem disappear..
> > >
> > > []s
> > >
> > >
> > > Marcelo Ferreira
> > > Canbras TVA Cabo Ltda
> > > Canbras Acesso - STA
> > > Phone: +5511-4993-8728
> > >
> > >
> > > - Original Message -
> > > From: "Tan Hwee Hong" <[EMAIL PROTECTED]>
> > > To: <[EMAIL PROTECTED]>
> > > Sent: Sunday, January 27, 2002 1:56 AM
> > > Subject: Re: Thread issue
> > >
> > >
> > > > Hi Alan,
> > > >
> > > > I have encourtered similiar crashes.
> > > > below is a crash dump and is reproducible. normally when that
happens,
> the
> > > > logfile will produce the following:
> > > >
> > > > Error: Received Accounting-Response packet from 192.168.2.21 with
> invalid
> > > > signature!
> > > > (note: secret was set correctly)
> > > >
> > > > here's the setup:
> > > >
> > > > OS: RedHat 7.1
> > > > Freeradius version: cvs dated Jan 26 2002
> > > >
> > > > 192.168.2.10+
> > > > 192.168.2.11---> 192.168.2.20 ---> 192.168.2.21
> > > >
> > > > 2 clients were used to generate the acct packets to feed the radius
> server
> > > > which in turn proxied the request to another server.
> > > >
> > > >
> > > > config for proxy.conf
> > > > realm testdomain.com {
> > > > type= radius
> > > > authhost= 192.168.2.21:1812
Re: Thread issue
Alan,
I tested an unpatched version of FR, snapshot-20020130, and
the CPU utilization issue occurred again.
What informations can I provide to help you?
As I said before, I assume that is a thread problem.
regards
Marcelo Ferreira
Canbras TVA Cabo Ltda
Canbras Acesso - STA
Phone: +5511-4993-8728
- Original Message -
From: "Tan Hwee Hong" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, January 29, 2002 12:58 PM
Subject: Re: Thread issue
> Hi,
>
> that's bad.
> it means there is something not quite right in the code.
>
> /tan
>
> On Mon, 28 Jan 2002, Marcelo Ferreira wrote:
>
> > Hi Tan,
> >
> >
> > I'm running FR with the -s option and the problem disappear..
> >
> > []s
> >
> >
> > Marcelo Ferreira
> > Canbras TVA Cabo Ltda
> > Canbras Acesso - STA
> > Phone: +5511-4993-8728
> >
> >
> > - Original Message -
> > From: "Tan Hwee Hong" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Sunday, January 27, 2002 1:56 AM
> > Subject: Re: Thread issue
> >
> >
> > > Hi Alan,
> > >
> > > I have encourtered similiar crashes.
> > > below is a crash dump and is reproducible. normally when that happens,
the
> > > logfile will produce the following:
> > >
> > > Error: Received Accounting-Response packet from 192.168.2.21 with
invalid
> > > signature!
> > > (note: secret was set correctly)
> > >
> > > here's the setup:
> > >
> > > OS: RedHat 7.1
> > > Freeradius version: cvs dated Jan 26 2002
> > >
> > > 192.168.2.10+
> > > 192.168.2.11---> 192.168.2.20 ---> 192.168.2.21
> > >
> > > 2 clients were used to generate the acct packets to feed the radius
server
> > > which in turn proxied the request to another server.
> > >
> > >
> > > config for proxy.conf
> > > realm testdomain.com {
> > > type= radius
> > > authhost= 192.168.2.21:1812
> > > accthost= 192.168.2.21:1813
> > > secret = secret
> > > nostrip
> > > }
> > >
> > >
> > > eg:
> > > ./bin/radclient -q -f account-pkt 192.168.2.20:1813 acct secret
> > >
> > > account-pkt was generated with the following:
> > >
> > > i=0;
> > > while [ $i -lt 2 ]; do
> > > (
> > > echo "User-Name = \"tst$[EMAIL PROTECTED]\""
> > > echo "NAS-Identifier = \"TESTING\""
> > > echo "Service-Type = Framed-User"
> > > echo "Framed-Protocol = PPP"
> > > echo "NAS-Port = 999$i"
> > > echo "Acct-Session-Id = \"$i-\""
> > > echo "Acct-Authentic = RADIUS"
> > > echo "Acct-Status-Type = Stop"
> > > echo "Session-Timeout = 22000"
> > > echo "Framed-IP-Address = 192.168.2.1"
> > > echo "Acct-Input-Octets = 212"
> > > echo "Acct-Output-Octets = 14332"
> > > echo "Acct-Input-Packets = 10"
> > > echo "Acct-Output-Packets = 141"
> > > echo "Acct-Session-Time = 254"
> > > echo ""
> > > )
> > > i=`expr $i + 1`;
> > > done
> > >
> > > $ gdb sbin/radiusd core
> > >
> > > GNU gdb Red Hat Linux (5.1-0.71)
> > > Copyright 2001 Free Software Foundation, Inc.
> > > GDB is free software, covered by the GNU General Public License, and
you
> > are
> > > welcome to change it and/or distribute copies of it under certain
> > conditions.
> > > Type "show copying" to see the conditions.
> > > There is absolutely no warranty for GDB. Type "show warranty" for
> > details.
> > > This GDB was configured as "i386-redhat-linux"...
> > > Core was generated by `sbin/radiusd'.
> > > Program terminated with signal 11, Segmentation fault.
> > > Reading symbols from /lib/libnsl.so.1...done.
> > > Loaded symbols for /lib/libnsl.so.1
> > > Reading symbols from /lib/libresolv.so.2...done.
> > > Loaded symbols for /lib/libresolv.so.2
> > > R
Error: Accounting: logout: entry for NAS cnet-bsn port 1929379840 has wrong ID
I'm receiving many erros "Wrong ID" as below: Error: Accounting: logout: entry for NAS cnet-bsn port 1929379840 has wrong ID Is there anyone with the same problem? regards, Marcelo FerreiraCanbras TVA Cabo LtdaCanbras Acesso - STAPhone: +5511-4993-8728
Re: Thread issue
Tan,
I assume that the problem is located at pthread functions (accounting
modules).
After I enable the -s option, FR hasn't crashed anymore.
regards
Marcelo Ferreira
Canbras TVA Cabo Ltda
Canbras Acesso - STA
Phone: +5511-4993-8728
- Original Message -
From: "Tan Hwee Hong" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, January 29, 2002 12:58 PM
Subject: Re: Thread issue
> Hi,
>
> that's bad.
> it means there is something not quite right in the code.
>
> /tan
>
> On Mon, 28 Jan 2002, Marcelo Ferreira wrote:
>
> > Hi Tan,
> >
> >
> > I'm running FR with the -s option and the problem disappear..
> >
> > []s
> >
> >
> > Marcelo Ferreira
> > Canbras TVA Cabo Ltda
> > Canbras Acesso - STA
> > Phone: +5511-4993-8728
> >
> >
> > - Original Message -
> > From: "Tan Hwee Hong" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Sunday, January 27, 2002 1:56 AM
> > Subject: Re: Thread issue
> >
> >
> > > Hi Alan,
> > >
> > > I have encourtered similiar crashes.
> > > below is a crash dump and is reproducible. normally when that happens,
the
> > > logfile will produce the following:
> > >
> > > Error: Received Accounting-Response packet from 192.168.2.21 with
invalid
> > > signature!
> > > (note: secret was set correctly)
> > >
> > > here's the setup:
> > >
> > > OS: RedHat 7.1
> > > Freeradius version: cvs dated Jan 26 2002
> > >
> > > 192.168.2.10+
> > > 192.168.2.11---> 192.168.2.20 ---> 192.168.2.21
> > >
> > > 2 clients were used to generate the acct packets to feed the radius
server
> > > which in turn proxied the request to another server.
> > >
> > >
> > > config for proxy.conf
> > > realm testdomain.com {
> > > type= radius
> > > authhost= 192.168.2.21:1812
> > > accthost= 192.168.2.21:1813
> > > secret = secret
> > > nostrip
> > > }
> > >
> > >
> > > eg:
> > > ./bin/radclient -q -f account-pkt 192.168.2.20:1813 acct secret
> > >
> > > account-pkt was generated with the following:
> > >
> > > i=0;
> > > while [ $i -lt 2 ]; do
> > > (
> > > echo "User-Name = \"tst$[EMAIL PROTECTED]\""
> > > echo "NAS-Identifier = \"TESTING\""
> > > echo "Service-Type = Framed-User"
> > > echo "Framed-Protocol = PPP"
> > > echo "NAS-Port = 999$i"
> > > echo "Acct-Session-Id = \"$i-\""
> > > echo "Acct-Authentic = RADIUS"
> > > echo "Acct-Status-Type = Stop"
> > > echo "Session-Timeout = 22000"
> > > echo "Framed-IP-Address = 192.168.2.1"
> > > echo "Acct-Input-Octets = 212"
> > > echo "Acct-Output-Octets = 14332"
> > > echo "Acct-Input-Packets = 10"
> > > echo "Acct-Output-Packets = 141"
> > > echo "Acct-Session-Time = 254"
> > > echo ""
> > > )
> > > i=`expr $i + 1`;
> > > done
> > >
> > > $ gdb sbin/radiusd core
> > >
> > > GNU gdb Red Hat Linux (5.1-0.71)
> > > Copyright 2001 Free Software Foundation, Inc.
> > > GDB is free software, covered by the GNU General Public License, and
you
> > are
> > > welcome to change it and/or distribute copies of it under certain
> > conditions.
> > > Type "show copying" to see the conditions.
> > > There is absolutely no warranty for GDB. Type "show warranty" for
> > details.
> > > This GDB was configured as "i386-redhat-linux"...
> > > Core was generated by `sbin/radiusd'.
> > > Program terminated with signal 11, Segmentation fault.
> > > Reading symbols from /lib/libnsl.so.1...done.
> > > Loaded symbols for /lib/libnsl.so.1
> > > Reading symbols from /lib/libresolv.so.2...done.
> > > Loaded symbols for /lib/libresolv.so.2
> > > Reading symbols from /lib/libpthread.so.0...done.
> > &g
Re: Thread issue
Hi Tan,
I'm running FR with the -s option and the problem disappear..
[]s
Marcelo Ferreira
Canbras TVA Cabo Ltda
Canbras Acesso - STA
Phone: +5511-4993-8728
- Original Message -
From: "Tan Hwee Hong" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, January 27, 2002 1:56 AM
Subject: Re: Thread issue
> Hi Alan,
>
> I have encourtered similiar crashes.
> below is a crash dump and is reproducible. normally when that happens, the
> logfile will produce the following:
>
> Error: Received Accounting-Response packet from 192.168.2.21 with invalid
> signature!
> (note: secret was set correctly)
>
> here's the setup:
>
> OS: RedHat 7.1
> Freeradius version: cvs dated Jan 26 2002
>
> 192.168.2.10+
> 192.168.2.11---> 192.168.2.20 ---> 192.168.2.21
>
> 2 clients were used to generate the acct packets to feed the radius server
> which in turn proxied the request to another server.
>
>
> config for proxy.conf
> realm testdomain.com {
> type= radius
> authhost= 192.168.2.21:1812
> accthost= 192.168.2.21:1813
> secret = secret
> nostrip
> }
>
>
> eg:
> ./bin/radclient -q -f account-pkt 192.168.2.20:1813 acct secret
>
> account-pkt was generated with the following:
>
> i=0;
> while [ $i -lt 2 ]; do
> (
> echo "User-Name = \"tst$[EMAIL PROTECTED]\""
> echo "NAS-Identifier = \"TESTING\""
> echo "Service-Type = Framed-User"
> echo "Framed-Protocol = PPP"
> echo "NAS-Port = 999$i"
> echo "Acct-Session-Id = \"$i-\""
> echo "Acct-Authentic = RADIUS"
> echo "Acct-Status-Type = Stop"
> echo "Session-Timeout = 22000"
> echo "Framed-IP-Address = 192.168.2.1"
> echo "Acct-Input-Octets = 212"
> echo "Acct-Output-Octets = 14332"
> echo "Acct-Input-Packets = 10"
> echo "Acct-Output-Packets = 141"
> echo "Acct-Session-Time = 254"
> echo ""
> )
> i=`expr $i + 1`;
> done
>
> $ gdb sbin/radiusd core
>
> GNU gdb Red Hat Linux (5.1-0.71)
> Copyright 2001 Free Software Foundation, Inc.
> GDB is free software, covered by the GNU General Public License, and you
are
> welcome to change it and/or distribute copies of it under certain
conditions.
> Type "show copying" to see the conditions.
> There is absolutely no warranty for GDB. Type "show warranty" for
details.
> This GDB was configured as "i386-redhat-linux"...
> Core was generated by `sbin/radiusd'.
> Program terminated with signal 11, Segmentation fault.
> Reading symbols from /lib/libnsl.so.1...done.
> Loaded symbols for /lib/libnsl.so.1
> Reading symbols from /lib/libresolv.so.2...done.
> Loaded symbols for /lib/libresolv.so.2
> Reading symbols from /lib/libpthread.so.0...done.
>
> warning: Unable to set global thread event mask: generic error
> [New Thread 1024 (LWP 8641)]
> Error while reading shared library symbols:
> Can't attach LWP 8641: No such process
> Reading symbols from /lib/libcrypt.so.1...done.
> Loaded symbols for /lib/libcrypt.so.1
> Reading symbols from /usr/lib/libltdl.so.0...done.
> Loaded symbols for /usr/lib/libltdl.so.0
> Reading symbols from /lib/libc.so.6...done.
> Loaded symbols for /lib/libc.so.6
> Reading symbols from /lib/libdl.so.2...done.
> Loaded symbols for /lib/libdl.so.2
> Reading symbols from /lib/ld-linux.so.2...done.
> Loaded symbols for /lib/ld-linux.so.2
> Reading symbols from /lib/libnss_files.so.2...done.
> Loaded symbols for /lib/libnss_files.so.2
> Reading symbols from /lib/libnss_dns.so.2...done.
> Loaded symbols for /lib/libnss_dns.so.2
> Reading symbols from /usr/freeradius/lib/rlm_unix.so.0...done.
> Loaded symbols for /usr/freeradius/lib/rlm_unix.so.0
> Reading symbols from /usr/freeradius/lib/rlm_preprocess.so.0...done.
> Loaded symbols for /usr/freeradius/lib/rlm_preprocess.so.0
> Reading symbols from /usr/freeradius/lib/rlm_realm.so.0...done.
> Loaded symbols for /usr/freeradius/lib/rlm_realm.so.0
> Reading symbols from /usr/freeradius/lib/rlm_files.so.0...done.
> Loaded symbols for /usr/freeradius/lib/rlm_files.so.0
> Reading symbols from /usr/freeradius/lib/rlm_detail.so.0...done.
> Loaded symbols for /usr/freeradius/lib/rlm_detail.so.0
> #0 0x40173292 in __libc_sendto () from /lib/libc.so.6
> (gdb) bt
> #0 0x40173292 in __libc_sendto () from /lib/libc.so.6
> #1 0x4004f38e in sendto (fd=6, buf=0x40203ae0, n=144
Re: Thread issue
My authenticantion method has a particularity that has to ignore the accept/reject reply from proxy-radius and check the username in a cross-table locally. we call it "Experience Period" for new users. After 10 days, I set a "check-reply" flag at my local table to check if the proxy-radius reply with an accept packet. []s -------- Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, January 25, 2002 2:22 PM Subject: Re: Thread issue > "Marcelo Ferreira" <[EMAIL PROTECTED]> wrote: > > I have the ignore_proxy_reply patch applied at auth.c, xlat.c and radius.h > > Then why didn't you say so at the start? I was trying in good faith > to answer your questions about FreeRADIUS. In turn, you did NOT tell > me you were running a patched version of the server. > > That's rude. > > > it isn't hard-complex code.. just variables values changes... > > That's irrelevant. > > > After a quick look, I can't find anything like the patch you're > referring to in the archives. I don't know what it does, so I won't > discuss ANYTHING related to it. > > Please install a LEGITIMATE, and UN-PATCHED version of the server. > If that works, then the problem is in the patch, and NOT in the > server. > > > > Please do not discuss this subject again UNLESS you can reproduce > the problem with an un-patched version of the server. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Thread issue
Sorry Alan, my fault. regards Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, January 25, 2002 2:22 PM Subject: Re: Thread issue > "Marcelo Ferreira" <[EMAIL PROTECTED]> wrote: > > I have the ignore_proxy_reply patch applied at auth.c, xlat.c and radius.h > > Then why didn't you say so at the start? I was trying in good faith > to answer your questions about FreeRADIUS. In turn, you did NOT tell > me you were running a patched version of the server. > > That's rude. > > > it isn't hard-complex code.. just variables values changes... > > That's irrelevant. > > > After a quick look, I can't find anything like the patch you're > referring to in the archives. I don't know what it does, so I won't > discuss ANYTHING related to it. > > Please install a LEGITIMATE, and UN-PATCHED version of the server. > If that works, then the problem is in the patch, and NOT in the > server. > > > > Please do not discuss this subject again UNLESS you can reproduce > the problem with an un-patched version of the server. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Fw: Thread issue
but I don't think that this is an authentication bug, the error message points to ) at radiusd.c:1423. []s Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 - Original Message - From: "Marcelo Ferreira" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, January 25, 2002 2:09 PM Subject: Re: Thread issue > I have the ignore_proxy_reply patch applied at auth.c, xlat.c and radius.h > it isn't hard-complex code.. just variables values changes... > > if you want I can send my autch.c, xlat.c, radius.h, radiusd.conf, > proxy.conf, clients.conf, hints, etc to you. > > regards > -------- > Marcelo Ferreira > Canbras TVA Cabo Ltda > Canbras Acesso - STA > Phone: +5511-4993-8728 > > > - Original Message - > From: <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Friday, January 25, 2002 1:38 PM > Subject: Re: Thread issue > > > > "Marcelo Ferreira" <[EMAIL PROTECTED]> wrote: > > > I got this error message this morning at a production test: > > > > > > > > > #0 0x401eea01 in __kill () from /lib/i686/libc.so.6 > > > #1 0x400645bb in raise (sig=6) at signals.c:65 > > > #2 0x401eff82 in abort () at ../sysdeps/generic/abort.c:88 > > > #3 0x0804db55 in rad_respond (request=0x8122848, fun=0x804f90c > > > ) at radiusd.c:1423 > > > > Ouch. That's a definite bug. > > > > > Is there any bug at thread or pthread API's at RedHat Linux 7.2 or at > > > Freeradius? > > > > It's an assertion in FreeRADIUS, that everything's OK. > > > > Since it dies, that means it found some internal inconsistency > > problem, and didn't know what else to do, but kill itself. > > > > > > What else are you doing? While I admit it's a bug in the server, if > > no one else is seeing the problem, that means that your local > > configuration must have something unique which makes it trigger the > > bug. > > > > Alan DeKok. > > > > - > > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Thread issue
I have the ignore_proxy_reply patch applied at auth.c, xlat.c and radius.h it isn't hard-complex code.. just variables values changes... if you want I can send my autch.c, xlat.c, radius.h, radiusd.conf, proxy.conf, clients.conf, hints, etc to you. regards Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, January 25, 2002 1:38 PM Subject: Re: Thread issue > "Marcelo Ferreira" <[EMAIL PROTECTED]> wrote: > > I got this error message this morning at a production test: > > > > > > #0 0x401eea01 in __kill () from /lib/i686/libc.so.6 > > #1 0x400645bb in raise (sig=6) at signals.c:65 > > #2 0x401eff82 in abort () at ../sysdeps/generic/abort.c:88 > > #3 0x0804db55 in rad_respond (request=0x8122848, fun=0x804f90c > > ) at radiusd.c:1423 > > Ouch. That's a definite bug. > > > Is there any bug at thread or pthread API's at RedHat Linux 7.2 or at > > Freeradius? > > It's an assertion in FreeRADIUS, that everything's OK. > > Since it dies, that means it found some internal inconsistency > problem, and didn't know what else to do, but kill itself. > > > What else are you doing? While I admit it's a bug in the server, if > no one else is seeing the problem, that means that your local > configuration must have something unique which makes it trigger the > bug. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Could not link driver rlm_sql_mysql: file not found
Quando precisar eh soh perguntar.. :) Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 - Original Message - From: "MicroEuropa, Lda" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, January 25, 2002 12:20 PM Subject: Re: Could not link driver rlm_sql_mysql: file not found > Thank you, it worked. > > Cheers, > Hugo Ferreira > > (Um abraço ) > > - Original Message - > From: "Marcelo Ferreira" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Friday, January 25, 2002 1:25 PM > Subject: Re: Could not link driver rlm_sql_mysql: file not found > > > > make an symbolic link to mysql libraries > > > > ln -s /whereisthemysqldir/lib/mysql /usr/lib/mysql > > > > > > > > Marcelo Ferreira > > Canbras TVA Cabo Ltda > > Canbras Acesso - STA > > Phone: +5511-4993-8728 > > > > > > - Original Message - > > From: "Hugo Ferreira" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Friday, January 25, 2002 9:45 AM > > Subject: Could not link driver rlm_sql_mysql: file not found > > > > > > > Hello, > > > > > > I need to get a radius+mysql server running, I tried to install > freeradius > > > but this message appears: > > > > > > rlm_sql: Could not link driver rlm_sql_mysql: file not found > > > rlm_sql: Make sure it (and all its dependent libraries!) are in the > search > > > path of your system's ld. > > > radiusd.conf[4]: sql: Module instantiation failed. > > > > > > I already added /usr/local/radius/lib to my ld.so.conf and runned > > > ldconfig... What is the problem.??? > > > > > > Any help will be appreciated. Thank You. > > > > > > Cheers, > > > Hugo Ferreira > > > > > > > > > - > > > List info/subscribe/unsubscribe? See > > http://www.freeradius.org/list/users.html > > > > > > > > > - > > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thread issue
I got this error message this morning at a production test: #0 0x401eea01 in __kill () from /lib/i686/libc.so.6 #1 0x400645bb in raise (sig=6) at signals.c:65 #2 0x401eff82 in abort () at ../sysdeps/generic/abort.c:88 #3 0x0804db55 in rad_respond (request=0x8122848, fun=0x804f90c ) at radiusd.c:1423 #4 0x08056d98 in request_handler_thread (arg=0x8122aa0) at threads.c:169 #5 0x40061b9c in pthread_start_thread (arg=0x43367be0) at manager.c:274 #6 0x40061c7f in pthread_start_thread_event (arg=0x43367be0) at manager.c:298 Is there any bug at thread or pthread API's at RedHat Linux 7.2 or at Freeradius? regards, Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 - Original Message - From: "Marcelo Ferreira" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, January 25, 2002 9:25 AM Subject: Re: Memory and CPU utilization > Alan, > > Is thre any modification at exec-program-wait program files in > today's snapshot ? > > regards, > > -------- > Marcelo Ferreira > Canbras TVA Cabo Ltda > Canbras Acesso - STA > Phone: +5511-4993-8728 > ---- > > - Original Message - > From: "Marcelo Ferreira" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Thursday, January 24, 2002 5:23 PM > Subject: Re: Memory and CPU utilization > > > > No problems.. > > > > The autentication is proxy-radius and Exec-Program-Wait > > I also use rlm_sql_mysql module... > > > > []s > > > > > > Marcelo Ferreira > > Canbras TVA Cabo Ltda > > Canbras Acesso - STA > > Phone: +5511-4993-8728 > > > > > > - Original Message - > > From: <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Thursday, January 24, 2002 4:59 PM > > Subject: Re: Memory and CPU utilization > > > > > > > "Marcelo Ferreira" <[EMAIL PROTECTED]> wrote: > > > > if you could (please) send me a howto I will collect the informations > > for > > > > you. > > > > > > Sorry, the details are long, and involve a lot of trial and error. > > > If you're not a hard-core programmer, then it will be difficult to > > > track this problem down. > > > > > > > > > I'm still surprised that it happens, though. There were a few > > > similar bugs in older releases, but those have been fixed. > > > > > > > > > How are you authenticating users? Are you using 'Exec-Program' or > > > 'Exec-Program-Wait' at all? Which modules are you using? > > > > > > Alan DeKok. > > > > > > - > > > List info/subscribe/unsubscribe? See > > http://www.freeradius.org/list/users.html > > > > > > > > > - > > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Could not link driver rlm_sql_mysql: file not found
make an symbolic link to mysql libraries ln -s /whereisthemysqldir/lib/mysql /usr/lib/mysql Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 - Original Message - From: "Hugo Ferreira" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, January 25, 2002 9:45 AM Subject: Could not link driver rlm_sql_mysql: file not found > Hello, > > I need to get a radius+mysql server running, I tried to install freeradius > but this message appears: > > rlm_sql: Could not link driver rlm_sql_mysql: file not found > rlm_sql: Make sure it (and all its dependent libraries!) are in the search > path of your system's ld. > radiusd.conf[4]: sql: Module instantiation failed. > > I already added /usr/local/radius/lib to my ld.so.conf and runned > ldconfig... What is the problem.??? > > Any help will be appreciated. Thank You. > > Cheers, > Hugo Ferreira > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Memory and CPU utilization
Alan, Is thre any modification at exec-program-wait program files in today's snapshot ? regards, Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 - Original Message - From: "Marcelo Ferreira" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, January 24, 2002 5:23 PM Subject: Re: Memory and CPU utilization > No problems.. > > The autentication is proxy-radius and Exec-Program-Wait > I also use rlm_sql_mysql module... > > []s > > ---- > Marcelo Ferreira > Canbras TVA Cabo Ltda > Canbras Acesso - STA > Phone: +5511-4993-8728 > > > - Original Message - > From: <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Thursday, January 24, 2002 4:59 PM > Subject: Re: Memory and CPU utilization > > > > "Marcelo Ferreira" <[EMAIL PROTECTED]> wrote: > > > if you could (please) send me a howto I will collect the informations > for > > > you. > > > > Sorry, the details are long, and involve a lot of trial and error. > > If you're not a hard-core programmer, then it will be difficult to > > track this problem down. > > > > > > I'm still surprised that it happens, though. There were a few > > similar bugs in older releases, but those have been fixed. > > > > > > How are you authenticating users? Are you using 'Exec-Program' or > > 'Exec-Program-Wait' at all? Which modules are you using? > > > > Alan DeKok. > > > > - > > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Memory and CPU utilization
No problems.. The autentication is proxy-radius and Exec-Program-Wait I also use rlm_sql_mysql module... []s Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, January 24, 2002 4:59 PM Subject: Re: Memory and CPU utilization > "Marcelo Ferreira" <[EMAIL PROTECTED]> wrote: > > if you could (please) send me a howto I will collect the informations for > > you. > > Sorry, the details are long, and involve a lot of trial and error. > If you're not a hard-core programmer, then it will be difficult to > track this problem down. > > > I'm still surprised that it happens, though. There were a few > similar bugs in older releases, but those have been fixed. > > > How are you authenticating users? Are you using 'Exec-Program' or > 'Exec-Program-Wait' at all? Which modules are you using? > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Memory and CPU utilization
Sorry Alan, I´m not that good... if you could (please) send me a howto I will collect the informations for you. []s Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 Pager: +5511-5188-3838 cod. 158062 www.pagenet.com.br - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, January 24, 2002 2:50 PM Subject: Re: Memory and CPU utilization > > I'm using the freeradius-snapshot-20020124 package. > > > > is it the right one? > > Yes. > > > After I sent the last email, the process begin to increase CPU > > utilization... > > > > 18045 radius15 0 2148 2148 1212 R98,0 0,8 7:51 radiusd > > That looks like a bug. > > Is it possible for you to track down *why* it occurs? Is there a > particular kind of packet which causes the problem? > > If you're familiar with gdb, you can attach to the running process, > and see where it's using all of its CPU time. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Memory and CPU utilization
After I sent the last email, the process begin to increase CPU utilization... 18045 radius15 0 2148 2148 1212 R98,0 0,8 7:51 radiusd 18041 radius 9 0 2148 2148 1212 S 0,0 0,8 0:00 radiusd 18042 radius 9 0 2148 2148 1212 S 0,0 0,8 0:00 radiusd 18043 radius 9 0 2148 2148 1212 S 0,0 0,8 0:00 radiusd 18044 radius 8 0 2148 2148 1212 S 0,0 0,8 0:00 radiusd 18046 radius 9 0 2148 2148 1212 S 0,0 0,8 0:00 radiusd 18047 radius 8 0 2148 2148 1212 S 0,0 0,8 0:00 radiusd Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 Pager: +5511-5188-3838 cod. 158062 www.pagenet.com.br - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, January 24, 2002 2:26 PM Subject: Re: Memory and CPU utilization > "Marcelo Ferreira" <[EMAIL PROTECTED]> wrote: > > Is it normal the memory utilization of all radiusd process increased = > > after an authentication? > > If you're on Linux, each thread will show up as a seperate process. > However, they will all share the same memory, so it will *look* like > you have 10 processes, each using 2M of RAM. > > In reality, you have 1 process using 2M of RAM, and 10 threads. > > > But yes, it *is* normal to increase memory use when an > authentication request comes in. The request is cached in memory for > a short time, > > > and this increased is not beeing released. > > It's released after 'cleanup_delay' time. > > > other problem is that after a period of time, the process start > > using = 30% or more of CPU utilization even after stoping the nas > > request. > > That's a bug, too. > > Upgrade to the latest CVS snapshot. It contains fixes over older > versions. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Memory and CPU utilization
Alan, I'm using the freeradius-snapshot-20020124 package. is it the right one? []s Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 Pager: +5511-5188-3838 cod. 158062 www.pagenet.com.br - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, January 24, 2002 2:26 PM Subject: Re: Memory and CPU utilization > "Marcelo Ferreira" <[EMAIL PROTECTED]> wrote: > > Is it normal the memory utilization of all radiusd process increased = > > after an authentication? > > If you're on Linux, each thread will show up as a seperate process. > However, they will all share the same memory, so it will *look* like > you have 10 processes, each using 2M of RAM. > > In reality, you have 1 process using 2M of RAM, and 10 threads. > > > But yes, it *is* normal to increase memory use when an > authentication request comes in. The request is cached in memory for > a short time, > > > and this increased is not beeing released. > > It's released after 'cleanup_delay' time. > > > other problem is that after a period of time, the process start > > using = 30% or more of CPU utilization even after stoping the nas > > request. > > That's a bug, too. > > Upgrade to the latest CVS snapshot. It contains fixes over older > versions. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Memory and CPU utilization
I rebuilded the server with
./configure --prefix=/usr/local/freeradius --with-mysql-dir=/usr/local/mysq
l --with-thread-pool --enable-ltdl-install --with-threads
at radiusd.conf
thread pool {
start_servers = 5
max_servers = 32
min_spare_servers = 1
max_spare_servers = 6
max_requests_per_server = 100
}
and the problem didn't disappear.
any idea?
[]s
Marcelo Ferreira
Canbras TVA Cabo Ltda
Canbras Acesso - STA
Phone: +5511-4993-8728
Pager: +5511-5188-3838 cod. 158062
www.pagenet.com.br
- Original Message -
From: "Chris Parker" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, January 24, 2002 12:55 PM
Subject: Re: Memory and CPU utilization
> At 10:04 AM 1/24/2002 -0200, Marcelo Ferreira wrote:
> >Is it normal the memory utilization of all radiusd process increased
after
> >an authentication?
> >and this increased is not beeing released.
>
> You shouldn't have more than one radiusd process, unless you have
> disabled threading and are using fork()'ing code.
>
> The fork()'ing code is not maintained.
>
> Run the server in threaded mode, you'll be much happier.
>
> -Chris
> --
> \\\|||/// \ Chris Parker-Manager, Development Engineering
> \ ~ ~ / \ WX *is* Wireless!\ [EMAIL PROTECTED]
> | @ @ |\ http://www.starnetwx.net \ (847) 963-0116
> oOo---(_)---oOo--\--
>\ Without C we would have 'obol', 'basi', and 'pasal'
>
>
> -
> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Memory and CPU utilization
Is it normal the memory utilization of all radiusd process increased after an authentication? and this increased is not beeing released. initial... 2115 radius 9 0 2044 2044 1212 S 0,0 0,8 0:00 radiusd 2116 radius 9 0 2044 2044 1212 S 0,0 0,8 0:00 radiusd 2117 radius 9 0 2044 2044 1212 S 0,0 0,8 0:00 radiusd 2118 radius 9 0 2044 2044 1212 S 0,0 0,8 0:00 radiusd 2119 radius 8 0 2044 2044 1212 S 0,0 0,8 0:00 radiusd 2120 radius 9 0 2044 2044 1212 S 0,0 0,8 0:00 radiusd 2121 radius 9 0 2044 2044 1212 S 0,0 0,8 0:00 radiusd after 2 athentication 2115 radius 9 0 2052 2052 1212 S 0,0 0,8 0:00 radiusd 2116 radius 9 0 2052 2052 1212 S 0,0 0,8 0:00 radiusd 2117 radius 9 0 2052 2052 1212 S 0,0 0,8 0:00 radiusd 2118 radius 9 0 2052 2052 1212 S 0,0 0,8 0:00 radiusd 2119 radius 8 0 2052 2052 1212 S 0,0 0,8 0:00 radiusd 2120 radius 8 0 2052 2052 1212 S 0,0 0,8 0:00 radiusd 2121 radius 8 0 2052 2052 1212 S 0,0 0,8 0:00 radiusd other problem is that after a period of time, the process start using 30% or more of CPU utilization even after stoping the nas request. Marcelo FerreiraCanbras TVA Cabo LtdaCanbras Acesso - STAPhone: +5511-4993-8728Pager: +5511-5188-3838 cod. 158062www.pagenet.com.br
Re: Proxy-To-Realm Question - Revisited
check the secrets at proxy.conf
both servers have to have the same secret at proxy.conf and clients.conf
[]s
Marcelo
Wild Apache Support writes:
> Hello again,
>
> I really do appreciate the help that I am getting from the list.
> However I am still stumped, but I think that I am very close!!
>
> Here is a new snippet from my debugging session:
>
> > Waking up in 6 seconds...
> > rad_recv: Access-Reject packet from host 209.145.209.2:1645, id=1,
> > length=25
> > Received Access-Reject packet from 209.145.209.2 with invalid signature!
> > Server rejecting request 7.
> > Sending Access-Reject of id 245 to 10.10.1.22:2048
> > Finished request 7
>
> It looks like I got through to 209.145.209.2, but got rejected because
> os an "invalid signature."
>
> I looked in radius.c that came with the freeradius distribution and
> found that this error message will occur at:
>
> case PW_ACCOUNTING_RESPONSE:
> if (calc_replydigest(packet, original, secret) >
> 1) {
> char buffer[32];
> librad_log("Received %s packet "
>"from %s with invalid
> signature!",
>packet_codes[packet->code],
>ip_ntoa(buffer,
> packet->src_ipaddr));
> return 1;
> }
>
> Does anyone know what is making calc_replydigest come back with value >
> 1?
>
> Could it be how the password is being sent to 209.145.209.2:1645?
>
> Thanks,
> Murrah Boswell
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Marcelo Ferreira
Canbras Acesso
Canbras TVA Cabo Ltda
55-11-4993-8717
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Signal 11 issue
Alan, it worked thank you very much happy holidays... Regards Marcelo [EMAIL PROTECTED] writes: > "Marcelo Ferreira" <[EMAIL PROTECTED]> wrote: > > That is strange because I have donload the 0.3 version and made no upgrade, > > how can be diferent data structure? > > I have no idea. > > Try building it with: > > ./configure --disable-shared > make > make install > > That will get rid of ALL dynamic library issues. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Marcelo Ferreira Canbras Acesso Canbras TVA Cabo Ltda 55-11-4993-8717 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Problem about FreeRADIUS and Oracle
That´s the same problem that I have.
Alan said that it´s a data strutcture conflit with old version..
try to remove all rlm_* at lib directory, build and install again
that didn´t work for me, i found a workaround that was setting the
"clean_delay" var to -1
--------
Marcelo Ferreira
Canbras TVA Cabo Ltda
Canbras Acesso - STA
Phone: +5511-4993-8728
Pager: +5511-5188-3838 cod. 158062
www.pagenet.com.br
- Original Message -
From: "Rubby" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, December 26, 2001 11:17 PM
Subject: Problem about FreeRADIUS and Oracle
> I am a new comer of FreeRAIUS.
> I use FreeRADIUS 0.3 to authenticate by Oracle SQL.
> I inserted a row into RADCHECK table (username,attribute,value) values
> ('Rubby','Password','Rubby'),but freeradius server rejected.
> The debug infomation freeradius server printed as below:
>
>
> Starting - reading configuration files ...
> reread_config: reading radiusd.conf
> Config: including file: /usr/local/etc/raddb/proxy.conf
> Config: including file: /usr/local/etc/raddb/clients.conf
> Config: including file: /usr/local/etc/raddb/snmp.conf
> Config: including file: /usr/local/etc/raddb/sql.conf
> main: prefix = "/usr/local"
> main: localstatedir = "/usr/local/var"
> main: logdir = "/usr/local/var/log/radius"
> main: libdir = "/usr/local/lib"
> main: radacctdir = "/usr/local/var/log/radius/radacct"
> main: hostname_lookups = no
> read_config_files: reading dictionary
> read_config_files: reading clients
> read_config_files: reading realms
> read_config_files: reading naslist
> main: max_request_time = 30
> main: cleanup_delay = 5
> main: max_requests = 1024
> main: delete_blocked_requests = 0
> main: port = 0
> main: allow_core_dumps = no
> main: log_stripped_names = no
> main: log_auth = no
> main: log_auth_badpass = no
> main: log_auth_goodpass = no
> main: pidfile = "/usr/local/var/run/radiusd.pid"
> main: user = "root"
> main: group = "root"
> main: usercollide = no
> main: lower_user = "no"
> main: lower_pass = "no"
> main: nospace_user = "no"
> main: nospace_pass = "no"
> main: proxy_requests = yes
> proxy: retry_delay = 5
> proxy: retry_count = 3
> proxy: synchronous = no
> proxy: dead_time = 120
> main: debug_level = 0
> read_config_files: entering modules setup
> Module: Library search path is /usr/local/lib
> Module: Loaded SQL
> sql: driver = "rlm_sql_oracle"
> sql: server = "192.168.0.101"
> sql: port = "1521"
> sql: login = "szcom"
> sql: password = "szcom"
> sql: radius_db = "acct"
> sql: acct_table = "radacct"
> sql: acct_table2 = "radacct"
> sql: authcheck_table = "radcheck"
> sql: authreply_table = "radreply"
> sql: groupcheck_table = "radgroupcheck"
> sql: groupreply_table = "radgroupreply"
> sql: usergroup_table = "usergroup"
> sql: nas_table = "nas"
> sql: dict_table = "dictionary"
> sql: sqltrace = yes
> sql: sqltracefile = "/usr/local/var/log/radius/sqltrace.sql"
> sql: deletestalesessions = yes
> sql: num_sql_socks = 5
> sql: sql_user_name = "%{User-Name}"
> sql: authorize_check_query = "SELECT id,UserName,Attribute,Value FROM
radcheck"
> sql: authorize_reply_query = "SELECT id,UserName,Attribute,Value FROM
radreply"
> sql: authorize_group_check_query = "SELECT
radgroupcheck.id,radgroupcheck.Grou"
> sql: authorize_group_reply_query = "SELECT
radgroupreply.id,radgroupreply.Grou"
> sql: authenticate_query = "SELECT Value,Attribute FROM radcheck WHERE
UserName"
> sql: accounting_onoff_query = "UPDATE radacct SET AcctStopTime='%S',
AcctSessi"
> sql: accounting_update_query = "UPDATE radacct SET FramedIPAddress =
'%{Framed"
> sql: accounting_start_query = "INSERT into radacct (RadAcctId,
AcctSessionId, "
> sql: accounting_start_query_alt = "UPDATE radacct SET AcctStartTime =
'%S', Ac"
> sql: accounting_stop_query = "UPDATE radacct SET AcctStopTime = '%S',
AcctSess"
> sql: accounting_stop_query_alt = "INSERT into radacct (RadAcctId,
AcctSessionI"
> sql: connect_failure_retry_delay = 60
> rlm_sql: Driver rlm_sql_oracle loaded and linked
> rlm_sql: Attempting to connect to [EMAIL PROTECTED]:1521/ac
Re: Signal 11 issue
That is strange because I have donload the 0.3 version and made no upgrade, how can be diferent data structure? Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 Pager: +5511-5188-3838 cod. 158062 www.pagenet.com.br - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, December 26, 2001 10:12 PM Subject: Re: Signal 11 issue > "Marcelo Ferreira" <[EMAIL PROTECTED]> wrote: > > the only way to "bypass" the error was setting up "cleanup_delay" > > variable to -1 to remove the waking fase. I know that's is not right > > but I need the system on line by the end of the day. > > This problem is caused by version or data structure conflict between > the modules and the server. The core dump/stack trace coming back to > 'eval.c' is pretty definitive here. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Patch to ignore proxy response
Ok, I´ll work on a clean patch and post here later... Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 Pager: +5511-5188-3838 cod. 158062 www.pagenet.com.br - Original Message - From: "Nathan Miller" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, December 26, 2001 4:31 PM Subject: Re: Patch to ignore proxy response > That would be great!!! > > At 02:35 PM 12/26/2001 -0200, you wrote: > >I write a patch to ignore the ACCEPT/REJECT proxy response and pass > >the value to a variable that can be use with Wait-Program-Exec. > >If somebody thinks that would be helpful, I can make a patch to integrate > >that > >at radiusd.conf too. > > > >[]s > >---- > >Marcelo Ferreira > >Canbras TVA Cabo Ltda > >Canbras Acesso - STA > >Phone: +5511-4993-8728 > >Pager: +5511-5188-3838 cod. 158062 > >www.pagenet.com.br > > > > > >- Original Message - > >From: <[EMAIL PROTECTED]> > >To: <[EMAIL PROTECTED]> > >Sent: Wednesday, December 26, 2001 2:08 PM > >Subject: Re: Signal 11 issue > > > > > > > "Marcelo Ferreira" <[EMAIL PROTECTED]> wrote: > > > > thank you for your help, > > > > but it didn't work. I removed all rlm_* in freeradius/lib/ directory and > > > > do a make && make install again. > > > > > > That's the problem, though. > > > > > > Delete ALL of the server binaries, INCLUDING radiusd, rlm_*, and > > > re-install. > > > > > > The next release of the server will have versioned libraries, making > > > this problem easier to avoid. > > > > > > Alan DeKok. > > > > > > > > > - > > > List info/subscribe/unsubscribe? See > >http://www.freeradius.org/list/users.html > > > > > > > > >- > >List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > -- > Nathan Miller - [EMAIL PROTECTED] > VISP Technologies - "Building Better ISPs" > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius+mysql accounting issues
Try to run it with the -s option... Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 Pager: +5511-5188-3838 cod. 158062 www.pagenet.com.br - Original Message - From: "Jeremy Kusnetz" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, December 26, 2001 3:14 PM Subject: freeradius+mysql accounting issues > For some reason the only way I can get freeradius to update the radacct > tables in my mysql database is to run it in debug mode, either -x or -X > When running it in debug mode everything works great. But as soon as I > start freeradius with no debugging. Authentication still works, but it > doesn't seem to insert or update any of my radacct tables. Running tcpdump > I see requests are being made to the accounting port, but freeradius just > doesn't seem to be listening. I've also tried starting it with the -sf > options, but it still doesn't work. Only in debug mode does it work. > > Any ideas? What further info can I give about my configuration? > > I've tried this with both freeradius-0.3 and 0.4 I'm running mysql 3.23.46 > My accounting tables are on a innodb database, while the auth. tables are on > myisam database. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Patch to ignore proxy response
I write a patch to ignore the ACCEPT/REJECT proxy response and pass the value to a variable that can be use with Wait-Program-Exec. If somebody thinks that would be helpful, I can make a patch to integrate that at radiusd.conf too. []s Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 Pager: +5511-5188-3838 cod. 158062 www.pagenet.com.br - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, December 26, 2001 2:08 PM Subject: Re: Signal 11 issue > "Marcelo Ferreira" <[EMAIL PROTECTED]> wrote: > > thank you for your help, > > but it didn't work. I removed all rlm_* in freeradius/lib/ directory and > > do a make && make install again. > > That's the problem, though. > > Delete ALL of the server binaries, INCLUDING radiusd, rlm_*, and > re-install. > > The next release of the server will have versioned libraries, making > this problem easier to avoid. > > Alan DeKok. > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Signal 11 issue
Allan, I have tried to run the program at 2 machines (linux and freebsd) and the problem still driving me mad... the only way to "bypass" the error was setting up "cleanup_delay" variable to -1 to remove the waking fase. I know that's is not right but I need the system on line by the end of the day. If this can help you to find the problem, please let me know. Regards, btw... Happy Holidays ---- Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 Pager: +5511-5188-3838 cod. 158062 www.pagenet.com.br - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, December 26, 2001 2:08 PM Subject: Re: Signal 11 issue > "Marcelo Ferreira" <[EMAIL PROTECTED]> wrote: > > thank you for your help, > > but it didn't work. I removed all rlm_* in freeradius/lib/ directory and > > do a make && make install again. > > That's the problem, though. > > Delete ALL of the server binaries, INCLUDING radiusd, rlm_*, and > re-install. > > The next release of the server will have versioned libraries, making > this problem easier to avoid. > > Alan DeKok. > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Signal 11 issue
I find something intersting. the error occurs only in the "Waking up in 11 seconds..." fase, if I wait 11 seconds, and the "Nothing to do. Sleeping until we see a request." message, everything runs normal... this can help? regards, -------- Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 Pager: +5511-5188-3838 cod. 158062 www.pagenet.com.br - Original Message - From: "Marcelo Ferreira" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, December 26, 2001 1:54 PM Subject: Re: Signal 11 issue > Alan, > > thank you for your help, > but it didn't work. I removed all rlm_* in freeradius/lib/ directory and > do a make && make install again. > > just to add, I'm using mysql-4.0.0 version and my instalation directory > (--prefix) > is /usr/local/mysql. I added this to the ld.so.conf too. > > and the --prefix for freeradius is /usr/local/freeradius. ld.so.conf was > updated too. > > regards, > > > Marcelo Ferreira > Canbras TVA Cabo Ltda > Canbras Acesso - STA > Phone: +5511-4993-8728 > Pager: +5511-5188-3838 cod. 158062 > www.pagenet.com.br > > > - Original Message - > From: <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Wednesday, December 26, 2001 1:37 PM > Subject: Re: Signal 11 issue > > > > "Marcelo Ferreira" <[EMAIL PROTECTED]> wrote: > > > I colected gdb data and posted here. > > > if somebody has found the same error, and correted it, please tell me > how. > > > > LOTS of people have seen this error. > > > > The solution is to delete ALL of the 'rlm_*' binary modules which > > were installed. Then re-build the server, and re-install. THe > > problem will go away. > > > > Alan DeKok. > > > > - > > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Signal 11 issue
Alan, thank you for your help, but it didn't work. I removed all rlm_* in freeradius/lib/ directory and do a make && make install again. just to add, I'm using mysql-4.0.0 version and my instalation directory (--prefix) is /usr/local/mysql. I added this to the ld.so.conf too. and the --prefix for freeradius is /usr/local/freeradius. ld.so.conf was updated too. regards, -------- Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 Pager: +5511-5188-3838 cod. 158062 www.pagenet.com.br - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, December 26, 2001 1:37 PM Subject: Re: Signal 11 issue > "Marcelo Ferreira" <[EMAIL PROTECTED]> wrote: > > I colected gdb data and posted here. > > if somebody has found the same error, and correted it, please tell me how. > > LOTS of people have seen this error. > > The solution is to delete ALL of the 'rlm_*' binary modules which > were installed. Then re-build the server, and re-install. THe > problem will go away. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Signal 11 issue
I colected gdb data and posted here. if somebody has found the same error, and correted it, please tell me how. regards, -- Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 1024 (LWP 32074)] 0x0805edb4 in lrad_hmac_md5 () at eval.c:41 41 eval.c: No such file or directory. in eval.c (gdb) bt #0 0x0805edb4 in lrad_hmac_md5 () at eval.c:41 #1 0x08054fc5 in module_checksimul () at eval.c:41 #2 0x0805510e in modcall () at eval.c:41 #3 0x0805500f in module_checksimul () at eval.c:41 #4 0x080550d5 in modcall () at eval.c:41 #5 0x08054c8b in module_authenticate () at eval.c:41 #6 0x08051c1b in rad_check_password () at eval.c:41 #7 0x08051e44 in rad_authenticate () at eval.c:41 #8 0x0804dc8e in rad_respond () at eval.c:41 #9 0x0804d990 in rad_process () at eval.c:41 #10 0x0804d6d6 in main () at eval.c:41 #11 0x401dc507 in __libc_start_main (main=0x804ca94 , argc=2, ubp_av=0xba54, init=0x804baa0 <_init>, fini=0x805fdd0 <_fini>, rtld_fini=0x4000dc14 <_dl_fini>, stack_end=0xba4c) at ../sysdeps/generic/libc-start.c:129 -------- Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 Pager: +5511-5188-3838 cod. 158062 www.pagenet.com.br - Original Message ----- From: "Marcelo Ferreira" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, December 26, 2001 11:34 AM Subject: Signal 11 issue > Hi, > > I have installed FreeRadius 0.3 with MySQL rlm module in a Linux RedHat 7.2 > system. > I'm facing a strange error: the process is aborting with a signal 11 at the > 2. request. > > please, I need some help. > > Regards.. > > > Marcelo Ferreira > Canbras TVA Cabo Ltda > Canbras Acesso - STA > Phone: +5511-4993-8728 > www.pagenet.com.br > > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Signal 11 issue
Hi, I have installed FreeRadius 0.3 with MySQL rlm module in a Linux RedHat 7.2 system. I'm facing a strange error: the process is aborting with a signal 11 at the 2. request. please, I need some help. Regards.. Marcelo Ferreira Canbras TVA Cabo Ltda Canbras Acesso - STA Phone: +5511-4993-8728 www.pagenet.com.br - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
