Re: Issue with MSCHAP

2012-11-05 Thread Ryan Summey
Thank you for the help guys really appreciate it. Is there anyway to
automate this?
On Nov 5, 2012 12:54 AM, "Fajar A. Nugraha"  wrote:

> On Mon, Nov 5, 2012 at 6:26 AM, Ryan Summey  wrote:
> > What do i need to do to enable nt-hash rather than pap?
>
> That question should be: "how do I put nt-hash password in the db"?
>
> IIRC the attribute name is "NT-Password" (you use this instead of
> "Cleartext-Password"  as "attribute" in radcheck), and you create it
> using "smbecrypt" (part of FR):
>
> # smbencrypt "password"
> LM Hash NT Hash
> 
> E52CAC67419A9A224A3B108F3FA6CB6D8846F7EAEE8FB117AD06BDD830B7586C
>
> In that example you put "8846F7EAEE8FB117AD06BDD830B7586C" as "value"
> in radcheck.
>
> --
> Fajar
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

rlm_perl and threads

2012-11-05 Thread Edgar Fuß
Sorry if this sounds like a stupid question with an obvious answer, but I 
could not easily find this documented.

If I have an rlm_perl script, is it possible that multiple instances of it 
are running concurrently due to FreeRADIUS' threading?
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: rlm_perl and threads

2012-11-05 Thread Phil Mayers

On 05/11/12 12:34, Edgar Fuß wrote:

Sorry if this sounds like a stupid question with an obvious answer, but I
could not easily find this documented.

If I have an rlm_perl script, is it possible that multiple instances of it
are running concurrently due to FreeRADIUS' threading?


Yes. Likely, even.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: rlm_perl and threads

2012-11-05 Thread Edgar Fuß
> Yes. Likely, even.
Thanks. So will these then be two distinct Perl interpreters or two instances 
of the same Perl interpreter? From the Perl script's point of view, what will 
the two instances share?
Can you hint me to any documentation covering this?
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: rlm_perl and threads

2012-11-05 Thread Phil Mayers

On 05/11/12 13:36, Edgar Fuß wrote:

Yes. Likely, even.

Thanks. So will these then be two distinct Perl interpreters or two instances
of the same Perl interpreter? From the Perl script's point of view, what will
the two instances share?
Can you hint me to any documentation covering this?


I'm not aware of any docs. You might need to refer to the source.

In particular, the USE_ITHREADS #define seems to control how the perl 
interpreter is created/allocated/used. I'm not familiar enough with perl 
to understand the code, personally. See here:


https://github.com/FreeRADIUS/freeradius-server/blob/master/src/modules/rlm_perl/rlm_perl.c#L254

...and the rest of that file.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


log error

2012-11-05 Thread Miha


Hi,

I am looking at this log radius file. What could be causing this?


BR;
Miha

Mon Nov  5 08:35:03 2012 : Error: Discarding duplicate request from 
client intraswitch port 46634 - ID: 134 due to unfinished request 11902
Mon Nov  5 08:35:03 2012 : Error: Discarding duplicate request from 
client intraswitch port 40649 - ID: 231 due to unfinished request 11904
Mon Nov  5 09:10:02 2012 : Error: Discarding duplicate request from 
client intraswitch port 55647 - ID: 187 due to unfinished request 16624
Mon Nov  5 09:10:02 2012 : Error: Discarding duplicate request from 
client intraswitch port 57890 - ID: 139 due to unfinished request 16626
Mon Nov  5 09:25:03 2012 : Error: Discarding duplicate request from 
client intraswitch port 46201 - ID: 179 due to unfinished request 19014
Mon Nov  5 09:40:03 2012 : Error: Discarding duplicate request from 
client intraswitch port 38970 - ID: 184 due to unfinished request 21166
Mon Nov  5 09:45:02 2012 : Error: Discarding duplicate request from 
client intraswitch port 46440 - ID: 227 due to unfinished request 21746
Mon Nov  5 09:50:02 2012 : Error: Discarding duplicate request from 
client intraswitch port 57355 - ID: 116 due to unfinished request 22475
Mon Nov  5 09:55:03 2012 : Error: Discarding duplicate request from 
client intraswitch port 48695 - ID: 154 due to unfinished request 23172
Mon Nov  5 10:00:02 2012 : Error: Discarding duplicate request from 
client intraswitch port 49085 - ID: 121 due to unfinished request 24106
Mon Nov  5 10:10:02 2012 : Error: Discarding duplicate request from 
client intraswitch port 36544 - ID: 26 due to unfinished request 25411
Mon Nov  5 10:20:02 2012 : Error: Discarding duplicate request from 
client intraswitch port 42534 - ID: 6 due to unfinished request 26755
Mon Nov  5 10:30:02 2012 : Error: Discarding duplicate request from 
client intraswitch port 32994 - ID: 173 due to unfinished request 28238
Mon Nov  5 11:00:03 2012 : Error: Discarding duplicate request from 
client intraswitch port 54529 - ID: 67 due to unfinished request 32859
Mon Nov  5 11:15:02 2012 : Error: Discarding duplicate request from 
client intraswitch port 56675 - ID: 60 due to unfinished request 35280
Mon Nov  5 11:45:02 2012 : Error: Discarding duplicate request from 
client intraswitch port 60703 - ID: 225 due to unfinished request 39541
Mon Nov  5 12:03:12 2012 : Error: Discarding duplicate request from 
client intraswitch port 51296 - ID: 245 due to unfinished request 41695
Mon Nov  5 12:15:02 2012 : Error: Discarding duplicate request from 
client intraswitch port 35090 - ID: 24 due to unfinished request 42950
Mon Nov  5 12:20:02 2012 : Error: Discarding duplicate request from 
client intraswitch port 39325 - ID: 171 due to unfinished request 43408
Mon Nov  5 12:30:03 2012 : Error: Discarding duplicate request from 
client intraswitch port 36165 - ID: 89 due to unfinished request 44456
Mon Nov  5 12:40:02 2012 : Error: Discarding duplicate request from 
client intraswitch port 54846 - ID: 219 due to unfinished request 45559
Mon Nov  5 12:45:02 2012 : Error: Discarding duplicate request from 
client intraswitch port 41737 - ID: 239 due to unfinished request 46056
Mon Nov  5 12:50:02 2012 : Error: Discarding duplicate request from 
client intraswitch port 34792 - ID: 111 due to unfinished request 46529
Mon Nov  5 13:05:02 2012 : Error: Discarding duplicate request from 
client intraswitch port 56632 - ID: 231 due to unfinished request 48180
Mon Nov  5 13:25:03 2012 : Error: Discarding duplicate request from 
client intraswitch port 50078 - ID: 75 due to unfinished request 50845
Mon Nov  5 13:45:02 2012 : Error: Discarding duplicate request from 
client intraswitch port 33412 - ID: 88 due to unfinished request 53659
Mon Nov  5 14:45:02 2012 : Error: Discarding duplicate request from 
client intraswitch port 50311 - ID: 25 due to unfinished request 60391
Mon Nov  5 15:03:05 2012 : Error: Discarding duplicate request from 
client intraswitch port 60010 - ID: 57 due to unfinished request 62264
Mon Nov  5 15:03:06 2012 : Error: Discarding duplicate request from 
client intraswitch port 35760 - ID: 215 due to unfinished request 62265
Mon Nov  5 15:03:06 2012 : Error: Discarding duplicate request from 
client intraswitch port 38622 - ID: 31 due to unfinished request 62266
Mon Nov  5 15:03:06 2012 : Error: Discarding duplicate request from 
client intraswitch port 33797 - ID: 214 due to unfinished request 62267
Mon Nov  5 15:03:06 2012 : Error: Discarding duplicate request from 
client intraswitch port 60010 - ID: 57 due to unfinished request 62264
Mon Nov  5 15:03:08 2012 : Error: Discarding duplicate request from 
client intraswitch port 40499 - ID: 176 due to unfinished request 62271
Mon Nov  5 15:03:08 2012 : Error: Discarding duplicate request from 
client intraswitch port 49325 - ID: 154 due to unfinished request 62272
Mon Nov  5 15:03:09 2012 : Error: Discarding duplicate request from 
client intraswitch port 40499 - ID: 176 due to unfinished reques

Re: log error

2012-11-05 Thread Alan DeKok
Miha wrote:
> I am looking at this log radius file. What could be causing this?

  Your database is slow.  Go fix that.

> Mon Nov  5 15:03:18 2012 : Error: rlm_sql (sql2): There are no DB
> handles to use! skipped 0, tried to connect 0
> Mon Nov  5 15:03:19 2012 : Error: rlm_sql (sql2): There are no DB
> handles to use! skipped 0, tried to connect 0
> Mon Nov  5 15:03:20 2012 : Error: rlm_sql (sql2): There are no DB
> handles to use! skipped 0, tried to connect 0

  See?

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: log error

2012-11-05 Thread alan buxey
Hi,

>I am looking at this log radius file. What could be causing this?

slow or dead DB

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: log error

2012-11-05 Thread Arran Cudbard-Bell
All signs point to tumblebeasts in the rlm_sql module.

-Arran

> 
> 
> BR;
> Miha
> 
> Mon Nov  5 08:35:03 2012 : Error: Discarding duplicate request from client 
> intraswitch port 46634 - ID: 134 due to unfinished request 11902
> Mon Nov  5 08:35:03 2012 : Error: Discarding duplicate request from client 
> intraswitch port 40649 - ID: 231 due to unfinished request 11904
> Mon Nov  5 09:10:02 2012 : Error: Discarding duplicate request from client 
> intraswitch port 55647 - ID: 187 due to unfinished request 16624
> Mon Nov  5 09:10:02 2012 : Error: Discarding duplicate request from client 
> intraswitch port 57890 - ID: 139 due to unfinished request 16626
> Mon Nov  5 09:25:03 2012 : Error: Discarding duplicate request from client 
> intraswitch port 46201 - ID: 179 due to unfinished request 19014
> Mon Nov  5 09:40:03 2012 : Error: Discarding duplicate request from client 
> intraswitch port 38970 - ID: 184 due to unfinished request 21166
> Mon Nov  5 09:45:02 2012 : Error: Discarding duplicate request from client 
> intraswitch port 46440 - ID: 227 due to unfinished request 21746
> Mon Nov  5 09:50:02 2012 : Error: Discarding duplicate request from client 
> intraswitch port 57355 - ID: 116 due to unfinished request 22475
> Mon Nov  5 09:55:03 2012 : Error: Discarding duplicate request from client 
> intraswitch port 48695 - ID: 154 due to unfinished request 23172
> Mon Nov  5 10:00:02 2012 : Error: Discarding duplicate request from client 
> intraswitch port 49085 - ID: 121 due to unfinished request 24106
> Mon Nov  5 10:10:02 2012 : Error: Discarding duplicate request from client 
> intraswitch port 36544 - ID: 26 due to unfinished request 25411
> Mon Nov  5 10:20:02 2012 : Error: Discarding duplicate request from client 
> intraswitch port 42534 - ID: 6 due to unfinished request 26755
> Mon Nov  5 10:30:02 2012 : Error: Discarding duplicate request from client 
> intraswitch port 32994 - ID: 173 due to unfinished request 28238
> Mon Nov  5 11:00:03 2012 : Error: Discarding duplicate request from client 
> intraswitch port 54529 - ID: 67 due to unfinished request 32859
> Mon Nov  5 11:15:02 2012 : Error: Discarding duplicate request from client 
> intraswitch port 56675 - ID: 60 due to unfinished request 35280
> Mon Nov  5 11:45:02 2012 : Error: Discarding duplicate request from client 
> intraswitch port 60703 - ID: 225 due to unfinished request 39541
> Mon Nov  5 12:03:12 2012 : Error: Discarding duplicate request from client 
> intraswitch port 51296 - ID: 245 due to unfinished request 41695
> Mon Nov  5 12:15:02 2012 : Error: Discarding duplicate request from client 
> intraswitch port 35090 - ID: 24 due to unfinished request 42950
> Mon Nov  5 12:20:02 2012 : Error: Discarding duplicate request from client 
> intraswitch port 39325 - ID: 171 due to unfinished request 43408
> Mon Nov  5 12:30:03 2012 : Error: Discarding duplicate request from client 
> intraswitch port 36165 - ID: 89 due to unfinished request 44456
> Mon Nov  5 12:40:02 2012 : Error: Discarding duplicate request from client 
> intraswitch port 54846 - ID: 219 due to unfinished request 45559
> Mon Nov  5 12:45:02 2012 : Error: Discarding duplicate request from client 
> intraswitch port 41737 - ID: 239 due to unfinished request 46056
> Mon Nov  5 12:50:02 2012 : Error: Discarding duplicate request from client 
> intraswitch port 34792 - ID: 111 due to unfinished request 46529
> Mon Nov  5 13:05:02 2012 : Error: Discarding duplicate request from client 
> intraswitch port 56632 - ID: 231 due to unfinished request 48180
> Mon Nov  5 13:25:03 2012 : Error: Discarding duplicate request from client 
> intraswitch port 50078 - ID: 75 due to unfinished request 50845
> Mon Nov  5 13:45:02 2012 : Error: Discarding duplicate request from client 
> intraswitch port 33412 - ID: 88 due to unfinished request 53659
> Mon Nov  5 14:45:02 2012 : Error: Discarding duplicate request from client 
> intraswitch port 50311 - ID: 25 due to unfinished request 60391
> Mon Nov  5 15:03:05 2012 : Error: Discarding duplicate request from client 
> intraswitch port 60010 - ID: 57 due to unfinished request 62264
> Mon Nov  5 15:03:06 2012 : Error: Discarding duplicate request from client 
> intraswitch port 35760 - ID: 215 due to unfinished request 62265
> Mon Nov  5 15:03:06 2012 : Error: Discarding duplicate request from client 
> intraswitch port 38622 - ID: 31 due to unfinished request 62266
> Mon Nov  5 15:03:06 2012 : Error: Discarding duplicate request from client 
> intraswitch port 33797 - ID: 214 due to unfinished request 62267
> Mon Nov  5 15:03:06 2012 : Error: Discarding duplicate request from client 
> intraswitch port 60010 - ID: 57 due to unfinished request 62264
> Mon Nov  5 15:03:08 2012 : Error: Discarding duplicate request from client 
> intraswitch port 40499 - ID: 176 due to unfinished request 62271
> Mon Nov  5 15:03:08 2012 : Error: Discarding duplicate request from client 
> intraswitch port 49325 - ID: 154 due to unfinished request 62

Re: log error

2012-11-05 Thread Arran Cudbard-Bell

On 5 Nov 2012, at 14:27, Arran Cudbard-Bell  wrote:

> All signs point to tumblebeasts in the rlm_sql module.
> 
> -Arran

Apologies didn't mean to top post.

-Arran
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: rlm_perl and threads

2012-11-05 Thread Sander Eerdekens
The old wiki used to contain more information on this.
I'm currently in the process of making our rlm_perl module multithreaded as 
well.

Some pointers:
perl -V | grep -i multipl
...
useithreads=define, usemultiplicity=define
  Compile-time options: HAS_TIMES MULTIPLICITY PERLIO_LAYERS

check your multiplicity here. Multiplicity causes one perl process to be 
started, with multiple perl interpreters inside.

Add a CLONE function to your perl script (yes, all in caps).
The CLONE function is run every time a new perl interpreter is started. What 
happens is all existing variables are copied to the new interpreter when a new 
thread is started.
In this function you can adjust values that should be unique for each thread 
(like database handlers).

The number of threads are controlled trough the max_servers and max/min spare 
servers  in your radiusd.conf

Threading is not done in debug mode (-X), start your freeradius in normal mode 
to test multithreading.

AFAIK the above information is correct and recent.

Kind regards

Sander Eerdekens
Informatiesystemen
Systeembeheer & Ondersteuning

san...@uzleuven.be
UZ Leuven | campus Gasthuisberg | Herestraat 49 | B - 3000 Leuven | 
www.uzleuven.be




--

Message: 5
Date: Mon, 05 Nov 2012 14:01:56 +
From: Phil Mayers 
To: freeradius-users@lists.freeradius.org
Subject: Re: rlm_perl and threads
Message-ID: <5097c6d4.9070...@imperial.ac.uk>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

On 05/11/12 13:36, Edgar Fu? wrote:
>> Yes. Likely, even.
> Thanks. So will these then be two distinct Perl interpreters or two instances
> of the same Perl interpreter? From the Perl script's point of view, what will
> the two instances share?
> Can you hint me to any documentation covering this?

I'm not aware of any docs. You might need to refer to the source.

In particular, the USE_ITHREADS #define seems to control how the perl 
interpreter is created/allocated/used. I'm not familiar enough with perl 
to understand the code, personally. See here:

https://github.com/FreeRADIUS/freeradius-server/blob/master/src/modules/rlm_perl/rlm_perl.c#L254

...and the rest of that file.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Issue with MSCHAP

2012-11-05 Thread Fajar A. Nugraha
On Mon, Nov 5, 2012 at 6:47 PM, Ryan Summey  wrote:
> Thank you for the help guys really appreciate it. Is there anyway to
> automate this?

My best advice would be to read "Advanced Bash-Scripting Guide", as
well as "Awk Introduction Tutorial – 7 Awk Print Examples" (hint: use
Google), and combine that with smbencrypt tool

Of course you could also use
whatever-programming-languange-of-your-choice to do the same thing.
For example, http://search.cpan.org/~bjkuit/Crypt-SmbHash-0.12/SmbHash.pm

--
Fajar
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: log error

2012-11-05 Thread Miha

On 11/5/2012 3:30 PM, Arran Cudbard-Bell wrote:

On 5 Nov 2012, at 14:27, Arran Cudbard-Bell  wrote:


All signs point to tumblebeasts in the rlm_sql module.

-Arran

Apologies didn't mean to top post.

-Arran
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Thanks to Arran, 2xAlan:), I was also looking in past users mail in 
mailing list and also see expentation from Alan:).



Sorry for posting this before reading entire mailing list.

BR;
Miha
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html