Re: freeradius down every Sun Dec 30 06:50:40 2012 : Error: ASSERT FAILED modcall.c[106]: (p-type MOD_SINGLE) (p-type = MOD_POLICY)

2012-12-30 Thread Alan Buxey
This fails without fail every Sunday? In that case check what happens... eg if 
that HUP'ING of the freeradius is a weekly crontab then investigate what else 
is going on at that time ...eg there appear to be mysql errors - ate you using 
mysql? If so, its not good having errors with that module (and can be the cause 
if the problem...) I wouldn't say just stop that jobit has a purpose...but 
see if you are also eg dealing with mysql logrotating at the same time and if 
you are, don't.

I would advise doing a restart of the daemon rather than a HUP and contact your 
distro maintainers to get latest version. 2.1.10 is really really old.

alan

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[Resolved]Re: freeradius down every Sun Dec 30 06:50:40 2012 : Error: ASSERT FAILED modcall.c[106]: (p-type MOD_SINGLE) (p-type = MOD_POLICY)

2012-12-30 Thread EasyHorpak.com

On 30/12/2555 13:47, Fajar A. Nugraha wrote:

On Sun, Dec 30, 2012 at 9:41 AM, EasyHorpak.com i...@easyhorpak.com wrote:

On 30/12/2555 09:12, EasyHorpak.com wrote:

Dear all

I found freeradius down every Sun Dec 30 06:50:40 2012 : Error: ASSERT
FAILED modcall.c[106]: (p-type  MOD_SINGLE)  (p-type = MOD_POLICY)



Sun Dec 30 06:50:40 2012 : Info: Received HUP signal.

This looks like cron job rotating the log and sending HUP. The easiest
workaround for you is to just disable that logrotate job
(/etc/logrotate.d/freeradius, I think).


Sun Dec 30 06:50:40 2012 : Info: Loaded virtual server default
Sun Dec 30 06:50:40 2012 : Error: ASSERT FAILED modcall.c[106]: (p-type 
MOD_SINGLE)  (p-type = MOD_POLICY)


Do you use fancy entries on policy.conf, perhaps?



More info about OS and freeradius version

Debian x86_64 bit

freeradius: FreeRADIUS Version 2.1.10, for host x86_64-pc-linux-gnu, built
on Sep 24 2012 at 17:58:57


In FR terms, this is old. If you're going to stick with old
distro-provided versions, then file a bug report to the distro.

I didn't get those errors in my environment, so you might also want to
try one of these things:
- try restoring policy.conf to the stock version. Just in case some
changes you made broke it.
- upgrade to the latest version, and see if the bug remains. See
http://freeradius.org/,
http://wiki.freeradius.org/building/Build#Building-Debian-packages, or
https://launchpad.net/~freeradius/+archive/stable



Dear Fajar

I have check in file /etc/logrotate.d/freeradius
it 's show
/var/log/freeradius/*.log {
weekly
rotate 52
compress
delaycompress
notifempty
missingok
postrotate
/etc/init.d/freeradius reload  /dev/null
endscript
}

so when I try on /etc/init.d/freeradius reload
freeradius is stopped
so I change to /etc/init.d/freeradius restart
everything works fine

Thank you so much for your advice.


Regards
Chuan Chudabut
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


freeradius down every Sun Dec 30 06:50:40 2012 : Error: ASSERT FAILED modcall.c[106]: (p-type MOD_SINGLE) (p-type = MOD_POLICY)

2012-12-29 Thread EasyHorpak.com

Dear all

I found freeradius down every Sun Dec 30 06:50:40 2012 : Error: ASSERT 
FAILED modcall.c[106]: (p-type  MOD_SINGLE)  (p-type = MOD_POLICY)


with the error code

Sun Dec 30 06:50:40 2012 : Info: Received HUP signal.
Sun Dec 30 06:50:40 2012 : Info: HUP - Re-reading configuration files
Sun Dec 30 06:50:40 2012 : Error: rlm_sql_mysql: MYSQL Error: No Fields
Sun Dec 30 06:50:40 2012 : Error: rlm_sql_mysql: MYSQL error:
Sun Dec 30 06:50:40 2012 : Info: rlm_sql (sql): Attempting to connect 
rlm_sql_mysql #2
Sun Dec 30 06:50:40 2012 : Info: rlm_sql_mysql: Starting connect to 
MySQL server for #2

Sun Dec 30 06:50:40 2012 : Info: rlm_sql (sql): Connected new DB handle, #2
Sun Dec 30 06:50:40 2012 : Error: rlm_sql (sql): failed after re-connect
Sun Dec 30 06:50:40 2012 : Info: HUP - loading modules
Sun Dec 30 06:50:40 2012 : Info:  Module: Reloaded module files
Sun Dec 30 06:50:40 2012 : Info:  Module: Reloaded module suffix
Sun Dec 30 06:50:40 2012 : Info:  Module: Reloaded module pap
Sun Dec 30 06:50:40 2012 : Info:  Module: Reloaded module 
attr_filter.access_reject
Sun Dec 30 06:50:40 2012 : Info:  Module: Reloaded module 
attr_filter.accounting_response

Sun Dec 30 06:50:40 2012 : Info:  Module: Reloaded module radutmp
Sun Dec 30 06:50:40 2012 : Info: Loaded virtual server inner-tunnel
Sun Dec 30 06:50:40 2012 : Info: Loaded virtual server default
Sun Dec 30 06:50:40 2012 : Error: ASSERT FAILED modcall.c[106]: (p-type 
 MOD_SINGLE)  (p-type = MOD_POLICY)


Regards
Chuan Chudabut


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: freeradius down every Sun Dec 30 06:50:40 2012 : Error: ASSERT FAILED modcall.c[106]: (p-type MOD_SINGLE) (p-type = MOD_POLICY)

2012-12-29 Thread EasyHorpak.com

On 30/12/2555 09:12, EasyHorpak.com wrote:

Dear all

I found freeradius down every Sun Dec 30 06:50:40 2012 : Error: ASSERT 
FAILED modcall.c[106]: (p-type  MOD_SINGLE)  (p-type = MOD_POLICY)


with the error code

Sun Dec 30 06:50:40 2012 : Info: Received HUP signal.
Sun Dec 30 06:50:40 2012 : Info: HUP - Re-reading configuration files
Sun Dec 30 06:50:40 2012 : Error: rlm_sql_mysql: MYSQL Error: No Fields
Sun Dec 30 06:50:40 2012 : Error: rlm_sql_mysql: MYSQL error:
Sun Dec 30 06:50:40 2012 : Info: rlm_sql (sql): Attempting to connect 
rlm_sql_mysql #2
Sun Dec 30 06:50:40 2012 : Info: rlm_sql_mysql: Starting connect to 
MySQL server for #2
Sun Dec 30 06:50:40 2012 : Info: rlm_sql (sql): Connected new DB 
handle, #2

Sun Dec 30 06:50:40 2012 : Error: rlm_sql (sql): failed after re-connect
Sun Dec 30 06:50:40 2012 : Info: HUP - loading modules
Sun Dec 30 06:50:40 2012 : Info:  Module: Reloaded module files
Sun Dec 30 06:50:40 2012 : Info:  Module: Reloaded module suffix
Sun Dec 30 06:50:40 2012 : Info:  Module: Reloaded module pap
Sun Dec 30 06:50:40 2012 : Info:  Module: Reloaded module 
attr_filter.access_reject
Sun Dec 30 06:50:40 2012 : Info:  Module: Reloaded module 
attr_filter.accounting_response

Sun Dec 30 06:50:40 2012 : Info:  Module: Reloaded module radutmp
Sun Dec 30 06:50:40 2012 : Info: Loaded virtual server inner-tunnel
Sun Dec 30 06:50:40 2012 : Info: Loaded virtual server default
Sun Dec 30 06:50:40 2012 : Error: ASSERT FAILED modcall.c[106]: 
(p-type  MOD_SINGLE)  (p-type = MOD_POLICY)


Regards
Chuan Chudabut


-
List info/subscribe/unsubscribe? See 
http://www.freeradius.org/list/users.html



More info about OS and freeradius version

Debian x86_64 bit

freeradius: FreeRADIUS Version 2.1.10, for host x86_64-pc-linux-gnu, 
built on Sep 24 2012 at 17:58:57

Copyright (C) 1999-2010 The FreeRADIUS server project and contributors.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
You may redistribute copies of FreeRADIUS under the terms of the
GNU General Public License.
For more information about these matters, see the file named COPYRIGHT.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: freeradius down every Sun Dec 30 06:50:40 2012 : Error: ASSERT FAILED modcall.c[106]: (p-type MOD_SINGLE) (p-type = MOD_POLICY)

2012-12-29 Thread Fajar A. Nugraha
On Sun, Dec 30, 2012 at 9:41 AM, EasyHorpak.com i...@easyhorpak.com wrote:
 On 30/12/2555 09:12, EasyHorpak.com wrote:

 Dear all

 I found freeradius down every Sun Dec 30 06:50:40 2012 : Error: ASSERT
 FAILED modcall.c[106]: (p-type  MOD_SINGLE)  (p-type = MOD_POLICY)


 Sun Dec 30 06:50:40 2012 : Info: Received HUP signal.

This looks like cron job rotating the log and sending HUP. The easiest
workaround for you is to just disable that logrotate job
(/etc/logrotate.d/freeradius, I think).

 Sun Dec 30 06:50:40 2012 : Info: Loaded virtual server default
 Sun Dec 30 06:50:40 2012 : Error: ASSERT FAILED modcall.c[106]: (p-type 
 MOD_SINGLE)  (p-type = MOD_POLICY)


Do you use fancy entries on policy.conf, perhaps?


 More info about OS and freeradius version

 Debian x86_64 bit

 freeradius: FreeRADIUS Version 2.1.10, for host x86_64-pc-linux-gnu, built
 on Sep 24 2012 at 17:58:57


In FR terms, this is old. If you're going to stick with old
distro-provided versions, then file a bug report to the distro.

I didn't get those errors in my environment, so you might also want to
try one of these things:
- try restoring policy.conf to the stock version. Just in case some
changes you made broke it.
- upgrade to the latest version, and see if the bug remains. See
http://freeradius.org/,
http://wiki.freeradius.org/building/Build#Building-Debian-packages, or
https://launchpad.net/~freeradius/+archive/stable

-- 
Fajar
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: freeradius down and shows Error: ASSERT FAILED modcall.c[106]: (p-type MOD_SINGLE) (p-type = MOD_POLICY)

2012-07-23 Thread alan buxey
Hi,

 i fond my freeradius is down and show log below
 
 Sun Jul 22 06:25:05 2012 : Info:  Module: Reloaded module detail
 Sun Jul 22 06:25:05 2012 : Info:  Module: Reloaded module pap
 Sun Jul 22 06:25:05 2012 : Info:  Module: Reloaded module radutmp
 Sun Jul 22 06:25:05 2012 : Info:  Module: Reloaded module suffix
 Sun Jul 22 06:25:05 2012 : Info:  Module: Reloaded module
 attr_filter.access_reject
 Sun Jul 22 06:25:05 2012 : Info:  Module: Reloaded module
 attr_filter.accounting_response
 Sun Jul 22 06:25:05 2012 : Info: Loaded virtual server inner-tunnel
 Sun Jul 22 06:25:05 2012 : Info: Loaded virtual server default
 Sun Jul 22 06:25:05 2012 : Error: ASSERT FAILED modcall.c[106]:
 (p-type  MOD_SINGLE)  (p-type = MOD_POLICY)

what version? if not the latest from freeradius.org, then in the first 
instance, upgrade
your server as it may be a bug already fixed.  after upgrading, see if you can 
replicate
the incident. if so, then read doc/bugs and provide the required output


alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: freeradius down and shows Error: ASSERT FAILED modcall.c[106]: (p-type MOD_SINGLE) (p-type = MOD_POLICY)

2012-07-22 Thread Alan DeKok
EasyHorpak.com wrote:
 Sun Jul 22 06:25:05 2012 : Error: ASSERT FAILED modcall.c[106]: (p-type
 MOD_SINGLE)  (p-type = MOD_POLICY)

  Upgrade.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


freeradius down and shows Error: ASSERT FAILED modcall.c[106]: (p-type MOD_SINGLE) (p-type = MOD_POLICY)

2012-07-21 Thread EasyHorpak.com

Dear all

i fond my freeradius is down and show log below

Sun Jul 22 06:25:05 2012 : Info:  Module: Reloaded module detail
Sun Jul 22 06:25:05 2012 : Info:  Module: Reloaded module pap
Sun Jul 22 06:25:05 2012 : Info:  Module: Reloaded module radutmp
Sun Jul 22 06:25:05 2012 : Info:  Module: Reloaded module suffix
Sun Jul 22 06:25:05 2012 : Info:  Module: Reloaded module 
attr_filter.access_reject
Sun Jul 22 06:25:05 2012 : Info:  Module: Reloaded module 
attr_filter.accounting_response

Sun Jul 22 06:25:05 2012 : Info: Loaded virtual server inner-tunnel
Sun Jul 22 06:25:05 2012 : Info: Loaded virtual server default
Sun Jul 22 06:25:05 2012 : Error: ASSERT FAILED modcall.c[106]: (p-type 
 MOD_SINGLE)  (p-type = MOD_POLICY)


thank you in advance

Chuan Chudabut
EasyZone Hotspot Billing v2.9.7 VLAN
http://www.easyzonecorp.net
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Assert Failed on Proxing

2011-10-31 Thread andreapepa
/freeradius-server-2.1.12'
make: *** [build-arch-stamp] Error 2
dpkg-buildpackage: error: debian/rules build gave error exit status 2

--
View this message in context: 
http://freeradius.1045715.n5.nabble.com/Assert-Failed-on-Proxing-tp4924319p4952616.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Assert Failed on Proxing

2011-10-31 Thread andreapepa
I've tried to install also from the source...but with no  success,  this is
the error i get after the install:

# radiusd -X
radiusd: error while loading shared libraries:
libfreeradius-radius-2.1.12.so: cannot open shared object file: No such file
or directory

there were no errors in configure make or make install procedures.

Also, the old freeradius is still there, working..

Can you help me?




--
View this message in context: 
http://freeradius.1045715.n5.nabble.com/Assert-Failed-on-Proxing-tp4924319p4952896.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Assert Failed on Proxing

2011-10-31 Thread Alan Buxey
Hi,
 I've tried to install also from the source...but with no  success,  this is
 the error i get after the install:

ldconfig -v

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Assert Failed on Proxing

2011-10-31 Thread Fajar A. Nugraha
On Mon, Oct 31, 2011 at 9:48 PM, andreapepa
andrea.p...@trentinonetwork.it wrote:

 So...i've followed the instructions on this link.(
 http://wiki.freeradius.org/Build#Building+Debian+packages  )..but
 compilation give me this error, libssl-dev is installed:

 libtool: compile:  gcc -g -O2 -O2 -Wall -D_GNU_SOURCE -D_REENTRANT
 -D_POSIX_PTHREAD_SEMANTICS -g -Wshadow -Wpointer-arith -Wcast-qual
 -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes
 -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef
 -I/home/apepa/fr212/freeradius-server-2.1.12/src
 -DHOSTINFO=\x86_64-pc-linux-gnu\ -DRADIUSD_VERSION=\2.1.12\
 -DOPENSSL_NO_KRB5 -DRADIUSD_MAJOR_VERSION=2 -DRADIUSD_MINOR_VERSION=1.12 -c
 modules.c  -fPIC -DPIC -o .libs/modules.o
 modules.c: In function âfr_dlopenextâ:
 modules.c:216: error: âlt_dladviseâ undeclared (first use in this function)
 modules.c:216: error: (Each undeclared identifier is reported only once

(Shrug)

works for me (just tested it). Did you perhaps missed some dependency?
Try apt-get build-dep freeradius first.

As an alternative, you could try building from the source of my ppa.
It's based on Ubuntu's 2.1.10 package (which is slightly different
then the bundled FR debian build rules).

Both should work though.

-- 
Fajar

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Assert Failed on Proxing

2011-10-21 Thread andreapepa
rlm_sql_postgresql: Status: PGRES_TUPLES_OK
rlm_sql_postgresql: query affected rows = 7 , fields = 5
rlm_sql (sql): Released sql socket id: 43
++[sql] returns ok
++[expiration] returns noop
++[logintime] returns noop
++[pap] returns noop
  WARNING: Empty pre-proxy section.  Using default return values.
Sending Access-Request of id 123 to 172.25.200.161 port 1812
NAS-Port-Type = Wireless-802.11
Calling-Station-Id = 40:61:86:9C:6D:F9
Called-Station-Id = hotspot1
NAS-Port-Id = wlan1
User-Name = apepa
NAS-Port = 2150629460
Acct-Session-Id = 80300054
Framed-IP-Address = 10.29.66.3
Vendor-14988-Attr-10 = 0x0a1d4203
CHAP-Challenge = 0xb68620a7e997208ee43593bf739602b6
CHAP-Password = 0x563096c0c85e3e1b1bec92d585dc44496b
Service-Type = Login-User
WISPr-Logoff-URL = http://10.29.66.1/logout;
NAS-Identifier = AP Test Vincenzo
NAS-IP-Address = 172.25.18.123
Message-Authenticator := 0x
Proxy-State = 0x3938
Proxying request 0 to home server 172.25.200.161 port 1812
Sending Access-Request of id 123 to 172.25.200.161 port 1812
NAS-Port-Type = Wireless-802.11
Calling-Station-Id = 40:61:86:9C:6D:F9
Called-Station-Id = hotspot1
NAS-Port-Id = wlan1
User-Name = apepa
NAS-Port = 2150629460
Acct-Session-Id = 80300054
Framed-IP-Address = 10.29.66.3
Vendor-14988-Attr-10 = 0x0a1d4203
CHAP-Challenge = 0xb68620a7e997208ee43593bf739602b6
CHAP-Password = 0x563096c0c85e3e1b1bec92d585dc44496b
Service-Type = Login-User
WISPr-Logoff-URL = http://10.29.66.1/logout;
NAS-Identifier = AP Test Vincenzo
NAS-IP-Address = 172.25.18.123
Message-Authenticator := 0x
Proxy-State = 0x3938
Going to the next request
Waking up in 0.9 seconds.
Waking up in 19.0 seconds.
rad_recv: Access-Request packet from host 172.25.18.123 port 39869, id=98,
length=215
Sending duplicate proxied request to home server 172.25.200.161 port 1812 -
ID: 123
Sending Access-Request of id 123 to 172.25.200.161 port 1812
NAS-Port-Type = Wireless-802.11
Calling-Station-Id = 40:61:86:9C:6D:F9
Called-Station-Id = hotspot1
NAS-Port-Id = wlan1
User-Name = apepa
NAS-Port = 2150629460
Acct-Session-Id = 80300054
Framed-IP-Address = 10.29.66.3
Vendor-14988-Attr-10 = 0x0a1d4203
CHAP-Challenge = 0xb68620a7e997208ee43593bf739602b6
CHAP-Password = 0x563096c0c85e3e1b1bec92d585dc44496b
Service-Type = Login-User
WISPr-Logoff-URL = http://10.29.66.1/logout;
NAS-Identifier = AP Test Vincenzo
NAS-IP-Address = 172.25.18.123
Message-Authenticator := 0x
Proxy-State = 0x3938
Waking up in 16.9 seconds.
rad_recv: Access-Request packet from host 172.25.18.123 port 39869, id=98,
length=215
Sending duplicate proxied request to home server 172.25.200.161 port 1812 -
ID: 123
Sending Access-Request of id 123 to 172.25.200.161 port 1812
NAS-Port-Type = Wireless-802.11
Calling-Station-Id = 40:61:86:9C:6D:F9
Called-Station-Id = hotspot1
NAS-Port-Id = wlan1
User-Name = apepa
NAS-Port = 2150629460
Acct-Session-Id = 80300054
Framed-IP-Address = 10.29.66.3
Vendor-14988-Attr-10 = 0x0a1d4203
CHAP-Challenge = 0xb68620a7e997208ee43593bf739602b6
CHAP-Password = 0x563096c0c85e3e1b1bec92d585dc44496b
Service-Type = Login-User
WISPr-Logoff-URL = http://10.29.66.1/logout;
NAS-Identifier = AP Test Vincenzo
NAS-IP-Address = 172.25.18.123
Message-Authenticator := 0x
Proxy-State = 0x3938
Waking up in 13.9 seconds.
ASSERT FAILED event.c[1181]: We do not have threads, but the request is
marked as queued or running in a child thread == NULL
Abortito


--
View this message in context: 
http://freeradius.1045715.n5.nabble.com/Assert-Failed-on-Proxing-tp4924319p4924319.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Assert Failed on Proxing

2011-10-21 Thread Phil Mayers

On 21/10/11 11:10, andreapepa wrote:

Hi all,

As you can see from the attached log, i was tring to do some proxy test,
the server crashed attempting to proxy against a  not running freeradius
proxy ( i was only testing proxy action not authentication on other  FR
servers)  is it normal?


Which version are you running? Similar bugs were fixed in older versions.

If you're not already, upgrade to 2.1.12
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Assert Failed on Proxing

2011-10-21 Thread Alan DeKok
andreapepa wrote:
 As you can see from the attached log, i was tring to do some proxy test, 
 the server crashed attempting to proxy against a  not running freeradius
 proxy ( i was only testing proxy action not authentication on other  FR
 servers)  is it normal?  

  Upgrade.  This was fixed many months ago.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Assert Failed on Proxing

2011-10-21 Thread andreapepa
ii  freeradius   2.1.10+dfsg-2a
high-performance and highly configurable RADIUS server
ii  freeradius-common2.1.10+dfsg-2FreeRADIUS
common files
ii  freeradius-postgresql2.1.10+dfsg-2PostgreSQL
module for FreeRADIUS server
ii  freeradius-utils 2.1.10+dfsg-2FreeRADIUS
client utilities

these are the packages installed on a debian 6 by apt-get

--
View this message in context: 
http://freeradius.1045715.n5.nabble.com/Assert-Failed-on-Proxing-tp4924319p4924546.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Assert Failed on Proxing

2011-10-21 Thread andreapepa
http://wiki.freeradius.org/Debian

can i go for it?

--
View this message in context: 
http://freeradius.1045715.n5.nabble.com/Assert-Failed-on-Proxing-tp4924319p4924551.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Assert Failed on Proxing

2011-10-21 Thread andreapepa
http://packages.debian.org/search?keywords=freeradius

in this link i can't find any version to upgrade from 2.1.10, can you teel
me how to upgrade to 2.1.12?

Thanks

--
View this message in context: 
http://freeradius.1045715.n5.nabble.com/Assert-Failed-on-Proxing-tp4924319p4924574.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Assert Failed on Proxing

2011-10-21 Thread Alan DeKok
andreapepa wrote:
 http://packages.debian.org/search?keywords=freeradius
 
 in this link i can't find any version to upgrade from 2.1.10, can you teel
 me how to upgrade to 2.1.12?


   http://wiki.freeradius.org/

  It has instructions for building Debian packages.  Build a package for
2.1.12, and install it.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Assert Failed on Proxing

2011-10-21 Thread Phil Mayers

On 21/10/11 13:33, andreapepa wrote:

http://packages.debian.org/search?keywords=freeradius

in this link i can't find any version to upgrade from 2.1.10, can you teel
me how to upgrade to 2.1.12?


Install the compiler and development libraries
Download the source
unpack it
./configure
make
make install

This is basic Unix questions, not FreeRADIUS-specific.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Assert Failed on Proxing

2011-10-21 Thread andreapepa
obviously, Phil...
 my questions , not well explained, was about upgrading the package.

i can be sure that with this procedure i will have freeradius upgrade or two
version of FR installed ?

maybe this is another basic question.. but are you sure that i will get no
problem with any dependencies?

Thanks a lot

--
View this message in context: 
http://freeradius.1045715.n5.nabble.com/Assert-Failed-on-Proxing-tp4924319p4924856.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Assert Failed on Proxing

2011-10-21 Thread Alan DeKok
andreapepa wrote:
 i can be sure that with this procedure i will have freeradius upgrade or two
 version of FR installed ?

  You will have only the new version installed.

 maybe this is another basic question.. but are you sure that i will get no
 problem with any dependencies?

  Yes.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Assert Failed on Proxing

2011-10-21 Thread Fajar A. Nugraha
On Fri, Oct 21, 2011 at 9:28 PM, andreapepa
andrea.p...@trentinonetwork.it wrote:
 obviously, Phil...
  my questions , not well explained, was about upgrading the package.

 i can be sure that with this procedure i will have freeradius upgrade or two
 version of FR installed ?

If you install a new version from source using simple ./configure 
make  make install, you'll most likely end up with two version of
FR, with the new one in /usr/local/

If you upgrade it it with a package (either created yourself, or use
someone else's), you have only one FR fersion. To build your own
package: http://wiki.freeradius.org/Build#Building+Debian+packages .
Judging from your question, this is the best option for you.

If you're feeling lazy and know how to use Ubuntu's packages on
debian, try my unofficial ppa on
https://launchpad.net/~freeradius/+archive/stable. One of them (natty
or lucid version) should work for you.


 maybe this is another basic question.. but are you sure that i will get no
 problem with any dependencies?

If you use package they will tell you if you have dependency problem,
and (on most cases) can automatically install the dependency.

-- 
Fajar

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: FR 2.1.x git + SoH: ASSERT FAILED xlat.c[1048]: outlen 0

2011-05-06 Thread Alan DeKok
  I've committed a fix which changes the assert to a run-time check.

  It won't correct the underlying issue, but it will keep the server
running.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: FR 2.1.x git + SoH: ASSERT FAILED xlat.c[1048]: outlen 0

2011-05-06 Thread Phil Mayers

On 06/05/11 10:17, Alan DeKok wrote:

   I've committed a fix which changes the assert to a run-time check.

   It won't correct the underlying issue, but it will keep the server
running.


Could you spot any code path which can lead to length  0? I looked and 
couldn't see how it was possible.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: FR 2.1.x git + SoH: ASSERT FAILED xlat.c[1048]: outlen 0

2011-05-06 Thread Alan DeKok
Phil Mayers wrote:
 Could you spot any code path which can lead to length  0? I looked and
 couldn't see how it was possible.

  I don't see how it's possible, either.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


FR 2.1.x git + SoH: ASSERT FAILED xlat.c[1048]: outlen 0

2011-05-04 Thread James J J Hooper

Hi All,

Sorry for the sketchy details

We got an
ASSERT FAILED xlat.c[1048]: outlen  0
with a PEAP user. The bit of the -X I have is as below, and the soh virtual 
server config is attached. I have no further details at the moment because 
the client has gone away (and I've disabled SoH in the EAP module config in 
case they come back and knock it over again while I'm away).


The same set-up has been fine with many other SoH clients previously.

Can anyone point me in the right direction? The only think that came to 
mind was the packet getting a bit big with all those attributes?


Thanks,
 James

[updated] returns updated
+++- if ((Calling-Station-Id)  %{Calling-Station-Id} =~ 
/^%{config:policy.mac-addr}$/i) returns updated

+++ ... skipping else for request 750: Preceding if was taken
++- policy create.uob-stripped-mac returns updated
SoH-Supported = yes
SoH-MS-Machine-OS-vendor = Microsoft
SoH-MS-Machine-OS-version = 6
SoH-MS-Machine-OS-release = 0
SoH-MS-Machine-OS-build = 6000
SoH-MS-Machine-SP-version = 0
SoH-MS-Machine-SP-release = 0
SoH-MS-Machine-Processor = x86
SoH-MS-Machine-Name = AlexanderPC
SoH-MS-Correlation-Id = 
0x81aa82cd69f946f2bae142fd0fbfcc3e01cc09847027078c
SoH-MS-Machine-Role = client
	SoH-MS-Windows-Health-Status = firewall ok snoozed=0 microsoft=0 
up2date=1 enabled=0
	SoH-MS-Windows-Health-Status = firewall ok snoozed=0 microsoft=0 
up2date=1 enabled=0
	SoH-MS-Windows-Health-Status = firewall ok snoozed=0 microsoft=1 
up2date=1 enabled=1
	SoH-MS-Windows-Health-Status = antivirus ok snoozed=0 microsoft=0 
up2date=1 enabled=1
	SoH-MS-Windows-Health-Status = antivirus ok snoozed=0 microsoft=0 
up2date=1 enabled=0
	SoH-MS-Windows-Health-Status = antivirus ok snoozed=0 microsoft=0 
up2date=1 enabled=0
	SoH-MS-Windows-Health-Status = antivirus ok snoozed=0 microsoft=0 
up2date=1 enabled=1
	SoH-MS-Windows-Health-Status = antivirus ok snoozed=0 microsoft=0 
up2date=1 enabled=1
	SoH-MS-Windows-Health-Status = antivirus ok snoozed=0 microsoft=0 
up2date=0 enabled=1
	SoH-MS-Windows-Health-Status = antivirus ok snoozed=0 microsoft=0 
up2date=1 enabled=1
	SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=0 
up2date=1 enabled=1
	SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=0 
up2date=1 enabled=0
	SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=0 
up2date=1 enabled=1
	SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=0 
up2date=1 enabled=1
	SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=0 
up2date=1 enabled=1
	SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=1 
up2date=0 enabled=0
	SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=0 
up2date=0 enabled=1
	SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=0 
up2date=1 enabled=1

SoH-MS-Windows-Health-Status = auto-updates ok action=install 
by-policy=1
SoH-MS-Windows-Health-Status = security-updates error no-wsus-srv
FreeRADIUS-Proxied-To = 127.0.0.1
User-Name = abc...@bris.ac.uk
Calling-Station-Id = 00:1b:77:xx:xx:xx
Called-Station-Id = 00:3a:98:9d:17:30:eduroam
NAS-Port = 29
NAS-IP-Address = 172.17.107.207
NAS-Identifier = wism7
Airespace-Wlan-Id = 3
Service-Type = Framed-User
Framed-MTU = 1300
NAS-Port-Type = Wireless-802.11
Tunnel-Type:0 = VLAN
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Private-Group-Id:0 = 448
ASSERT FAILED xlat.c[1048]: outlen  0


--
James J J Hooper
Network Specialist, University of Bristol
http://www.wireless.bristol.ac.uk
--


Config bits:

server eduroamlocal-soh {

authorize {
if (SoH-Supported == no) {
update config {
Auth-Type = Accept
}
}
else {
detail-bsql
update config {
Auth-Type = Accept
}


detail detail-bsql {
	detailfile = 
${radacctdir}/%{%{Virtual-Server}:-UNKNOWN}-bsql/detail-bsql.log


detailperm = 0600
header = %t
}
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FR 2.1.x git + SoH: ASSERT FAILED xlat.c[1048]: outlen 0

2011-05-04 Thread Phil Mayers

On 04/05/11 10:42, James J J Hooper wrote:

Hi All,

Sorry for the sketchy details

We got an
ASSERT FAILED xlat.c[1048]: outlen  0
with a PEAP user. The bit of the -X I have is as below, and the soh
virtual server config is attached. I have no further details at the
moment because the client has gone away (and I've disabled SoH in the
EAP module config in case they come back and knock it over again while
I'm away).

The same set-up has been fine with many other SoH clients previously.

Can anyone point me in the right direction? The only think that came
to mind was the packet getting a bit big with all those attributes?

Thanks,
James

[updated] returns updated
+++- if ((Calling-Station-Id)  %{Calling-Station-Id} =~
/^%{config:policy.mac-addr}$/i) returns updated
+++ ... skipping else for request 750: Preceding if was taken
++- policy create.uob-stripped-mac returns updated



Is that all? It jumps straight from the above to dumping the SoH packet?


SoH-Supported = yes
SoH-MS-Machine-OS-vendor = Microsoft
SoH-MS-Machine-OS-version = 6
SoH-MS-Machine-OS-release = 0
SoH-MS-Machine-OS-build = 6000
SoH-MS-Machine-SP-version = 0
SoH-MS-Machine-SP-release = 0
SoH-MS-Machine-Processor = x86
SoH-MS-Machine-Name = AlexanderPC
SoH-MS-Correlation-Id = 0x81aa82cd69f946f2bae142fd0fbfcc3e01cc09847027078c
SoH-MS-Machine-Role = client
SoH-MS-Windows-Health-Status = firewall ok snoozed=0 microsoft=0
up2date=1 enabled=0
SoH-MS-Windows-Health-Status = firewall ok snoozed=0 microsoft=0
up2date=1 enabled=0
SoH-MS-Windows-Health-Status = firewall ok snoozed=0 microsoft=1
up2date=1 enabled=1
SoH-MS-Windows-Health-Status = antivirus ok snoozed=0 microsoft=0



Ok, something has gone wildly wrong there Unless they really do have 
3 firewall, 7 AV and 8 anti-spyware products installed!



up2date=1 enabled=1
SoH-MS-Windows-Health-Status = antivirus ok snoozed=0 microsoft=0
up2date=1 enabled=0
SoH-MS-Windows-Health-Status = antivirus ok snoozed=0 microsoft=0
up2date=1 enabled=0
SoH-MS-Windows-Health-Status = antivirus ok snoozed=0 microsoft=0
up2date=1 enabled=1
SoH-MS-Windows-Health-Status = antivirus ok snoozed=0 microsoft=0
up2date=1 enabled=1
SoH-MS-Windows-Health-Status = antivirus ok snoozed=0 microsoft=0
up2date=0 enabled=1
SoH-MS-Windows-Health-Status = antivirus ok snoozed=0 microsoft=0
up2date=1 enabled=1
SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=0
up2date=1 enabled=1
SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=0
up2date=1 enabled=0
SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=0
up2date=1 enabled=1
SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=0
up2date=1 enabled=1
SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=0
up2date=1 enabled=1
SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=1
up2date=0 enabled=0
SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=0
up2date=0 enabled=1
SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=0
up2date=1 enabled=1
SoH-MS-Windows-Health-Status = auto-updates ok action=install by-policy=1
SoH-MS-Windows-Health-Status = security-updates error no-wsus-srv
FreeRADIUS-Proxied-To = 127.0.0.1
User-Name = abc...@bris.ac.uk
Calling-Station-Id = 00:1b:77:xx:xx:xx
Called-Station-Id = 00:3a:98:9d:17:30:eduroam
NAS-Port = 29
NAS-IP-Address = 172.17.107.207
NAS-Identifier = wism7
Airespace-Wlan-Id = 3
Service-Type = Framed-User
Framed-MTU = 1300
NAS-Port-Type = Wireless-802.11
Tunnel-Type:0 = VLAN
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Private-Group-Id:0 = 448
ASSERT FAILED xlat.c[1048]: outlen  0


Config bits:

server eduroamlocal-soh {

authorize {
if (SoH-Supported == no) {
update config {
Auth-Type = Accept
}
}
else {
detail-bsql


What's the config for this module?


update config {
Auth-Type = Accept
}


detail detail-bsql {
detailfile =
${radacctdir}/%{%{Virtual-Server}:-UNKNOWN}-bsql/detail-bsql.log

detailperm = 0600
header = %t
}



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: FR 2.1.x git + SoH: ASSERT FAILED xlat.c[1048]: outlen 0

2011-05-04 Thread Phil Mayers

On 04/05/11 10:42, James J J Hooper wrote:

Hi All,

Sorry for the sketchy details

We got an
ASSERT FAILED xlat.c[1048]: outlen  0
with a PEAP user. The bit of the -X I have is as below, and the soh
virtual server config is attached. I have no further details at the
moment because the client has gone away (and I've disabled SoH in the
EAP module config in case they come back and knock it over again while
I'm away).

The same set-up has been fine with many other SoH clients previously.

Can anyone point me in the right direction? The only think that came
to mind was the packet getting a bit big with all those attributes?


From what I can tell, that's a pretty hard error condition to produce. 
xlat.c:1048 is inside xlat_copy, which is the default escaping 
function when radius_xlat is called with a NULL final argument.


The assert means that there was no room left in the output buffer, but 
the very first check inside the while() loop in radius_xlat is:


  while (*p) {
  /* Calculate freespace in output */
  freespace = outlen - (q - out);
  if (freespace = 1)
  break;

A quick look at the code gives me the impression it should be pretty 
hard to trigger this error condition; I can't see how freespace  1 ever 
allows xlat_copy to be called.




Thanks,
James

[updated] returns updated
+++- if ((Calling-Station-Id)  %{Calling-Station-Id} =~
/^%{config:policy.mac-addr}$/i) returns updated
+++ ... skipping else for request 750: Preceding if was taken
++- policy create.uob-stripped-mac returns updated


The above policy: where is that? It's clearly not in your SoH virtual 
server - is this the inner-tunnel stuff? Can we see the config? I 
suspect something in the SoH is triggering this when it dumps the AVPs.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: FR 2.1.x git + SoH: ASSERT FAILED xlat.c[1048]: outlen 0

2011-05-04 Thread James J J Hooper

On 04/05/2011 11:24, Phil Mayers wrote:

On 04/05/11 10:42, James J J Hooper wrote:



[updated] returns updated
+++- if ((Calling-Station-Id)  %{Calling-Station-Id} =~
/^%{config:policy.mac-addr}$/i) returns updated
+++ ... skipping else for request 750: Preceding if was taken
++- policy create.uob-stripped-mac returns updated



Is that all? It jumps straight from the above to dumping the SoH packet?


Yes


SoH-Supported = yes
SoH-MS-Machine-OS-vendor = Microsoft
SoH-MS-Machine-OS-version = 6
SoH-MS-Machine-OS-release = 0
SoH-MS-Machine-OS-build = 6000
SoH-MS-Machine-SP-version = 0
SoH-MS-Machine-SP-release = 0
SoH-MS-Machine-Processor = x86
SoH-MS-Machine-Name = AlexanderPC
SoH-MS-Correlation-Id = 0x81aa82cd69f946f2bae142fd0fbfcc3e01cc09847027078c
SoH-MS-Machine-Role = client
SoH-MS-Windows-Health-Status = firewall ok snoozed=0 microsoft=0
up2date=1 enabled=0
SoH-MS-Windows-Health-Status = firewall ok snoozed=0 microsoft=0
up2date=1 enabled=0
SoH-MS-Windows-Health-Status = firewall ok snoozed=0 microsoft=1
up2date=1 enabled=1
SoH-MS-Windows-Health-Status = antivirus ok snoozed=0 microsoft=0



Ok, something has gone wildly wrong there Unless they really do have 3
firewall, 7 AV and 8 anti-spyware products installed!


Indeed - We all know how messed up clients can get, so this one is 
probably due for some TLC (if I can get them to come in).



up2date=1 enabled=1
SoH-MS-Windows-Health-Status = antivirus ok snoozed=0 microsoft=0
up2date=1 enabled=0
SoH-MS-Windows-Health-Status = antivirus ok snoozed=0 microsoft=0
up2date=1 enabled=0
SoH-MS-Windows-Health-Status = antivirus ok snoozed=0 microsoft=0
up2date=1 enabled=1
SoH-MS-Windows-Health-Status = antivirus ok snoozed=0 microsoft=0
up2date=1 enabled=1
SoH-MS-Windows-Health-Status = antivirus ok snoozed=0 microsoft=0
up2date=0 enabled=1
SoH-MS-Windows-Health-Status = antivirus ok snoozed=0 microsoft=0
up2date=1 enabled=1
SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=0
up2date=1 enabled=1
SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=0
up2date=1 enabled=0
SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=0
up2date=1 enabled=1
SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=0
up2date=1 enabled=1
SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=0
up2date=1 enabled=1
SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=1
up2date=0 enabled=0
SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=0
up2date=0 enabled=1
SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=0
up2date=1 enabled=1
SoH-MS-Windows-Health-Status = auto-updates ok action=install by-policy=1
SoH-MS-Windows-Health-Status = security-updates error no-wsus-srv
FreeRADIUS-Proxied-To = 127.0.0.1
User-Name = abc...@bris.ac.uk
Calling-Station-Id = 00:1b:77:xx:xx:xx
Called-Station-Id = 00:3a:98:9d:17:30:eduroam
NAS-Port = 29
NAS-IP-Address = 172.17.107.207
NAS-Identifier = wism7
Airespace-Wlan-Id = 3
Service-Type = Framed-User
Framed-MTU = 1300
NAS-Port-Type = Wireless-802.11
Tunnel-Type:0 = VLAN
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Private-Group-Id:0 = 448
ASSERT FAILED xlat.c[1048]: outlen  0


Config bits:

server eduroamlocal-soh {

authorize {
if (SoH-Supported == no) {
update config {
Auth-Type = Accept
}
}
else {
detail-bsql


What's the config for this module?


As below i.e. a plain old detail module




update config {
Auth-Type = Accept
}


detail detail-bsql {
detailfile =
${radacctdir}/%{%{Virtual-Server}:-UNKNOWN}-bsql/detail-bsql.log

detailperm = 0600
header = %t
}


-James
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: FR 2.1.x git + SoH: ASSERT FAILED xlat.c[1048]: outlen 0

2011-05-04 Thread James J J Hooper

On 04/05/2011 11:37, Phil Mayers wrote:

On 04/05/11 10:42, James J J Hooper wrote:

Hi All,

Sorry for the sketchy details

We got an
ASSERT FAILED xlat.c[1048]: outlen  0
with a PEAP user. The bit of the -X I have is as below, and the soh
virtual server config is attached. I have no further details at the
moment because the client has gone away (and I've disabled SoH in the
EAP module config in case they come back and knock it over again while
I'm away).

The same set-up has been fine with many other SoH clients previously.

Can anyone point me in the right direction? The only think that came
to mind was the packet getting a bit big with all those attributes?


 From what I can tell, that's a pretty hard error condition to produce.
xlat.c:1048 is inside xlat_copy, which is the default escaping function
when radius_xlat is called with a NULL final argument.

The assert means that there was no room left in the output buffer, but the
very first check inside the while() loop in radius_xlat is:

while (*p) {
/* Calculate freespace in output */
freespace = outlen - (q - out);
if (freespace = 1)
break;

A quick look at the code gives me the impression it should be pretty hard
to trigger this error condition; I can't see how freespace  1 ever allows
xlat_copy to be called.




[updated] returns updated
+++- if ((Calling-Station-Id)  %{Calling-Station-Id} =~
/^%{config:policy.mac-addr}$/i) returns updated
+++ ... skipping else for request 750: Preceding if was taken
++- policy create.uob-stripped-mac returns updated


The above policy: where is that? It's clearly not in your SoH virtual
server - is this the inner-tunnel stuff? Can we see the config? I suspect
something in the SoH is triggering this when it dumps the AVPs.



Both inner and outer configs start:

--
server eduroamlocal-inner {
authorize {
create.uob-stripped-mac
preprocess
--
server eduroamlocal {
authorize {
create.uob-stripped-mac
preprocess
--

where create.uob-stripped-mac is:

--
create.uob-stripped-mac {
if((Calling-Station-Id)  %{Calling-Station-Id} =~ 
/^%{config:policy.mac-addr}$/i) {

update request {
UOB-Stripped-MAC := 
%{tolower:%{1}:%{2}:%{3}:%{4}:%{5}:%{6}}

}
updated
}
else {
noop
}
}
--

-James
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Error: ASSERT FAILED modcall.c[106]: (p-type MOD_SINGLE) (p-type = MOD_POLICY)

2011-02-26 Thread adx grave
On Mon, Feb 21, 2011 at 5:27 PM, Alan DeKok al...@deployingradius.comwrote:

 adx grave wrote:
  I got this after server HUP and it just die. The same error appeared
  after i manually restart the server but it continue to work just fine.
  A bug? Or maybe something wrong with my config? Any hint to where should
  i look?

   See doc/bugs

  Alan DeKok.
 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html


I've tried to reproduce the crash several times but failed. Although the
error is still there, the server run perfectly fine until exactly one week
from the first crash (HUP signal). It seem that the server receive a HUP
signal every week at the same time at 6:25 am and this morning it happened
again. At the same time the radius log get rotated. I'll try to follow the
instruction in doc/bugs later but is there any configuration option that
instruct the server to HUP once a week? The most likely place I can think of
is logrotate which give /etc/init.d/freeradius reload  /dev/null every
week.

Thanks.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Error: ASSERT FAILED modcall.c[106]: (p-type MOD_SINGLE) (p-type = MOD_POLICY)

2011-02-21 Thread Alan DeKok
adx grave wrote:
 I got this after server HUP and it just die. The same error appeared
 after i manually restart the server but it continue to work just fine. 
 A bug? Or maybe something wrong with my config? Any hint to where should
 i look?

  See doc/bugs

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Error: ASSERT FAILED modcall.c[106]: (p-type MOD_SINGLE) (p-type = MOD_POLICY)

2011-02-20 Thread adx grave
Hi list,

I got this after server HUP and it just die. The same error appeared after i
manually restart the server but it continue to work just fine.
A bug? Or maybe something wrong with my config? Any hint to where should i
look?

Freeradius 2.1.10.

Thanks.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Error: ASSERT FAILED threads.c[406]

2010-07-28 Thread Boian Jordanov

On Jul 26, 2010, at 8:00 PM, Meyers, Dan wrote:

 and what's happening in
 the perl is still something I need to investigate (and is probably
 thread related), or should the fix also stop me getting unresponsive
 children in the perl accounting method?


Using threaded perl with DB is a little tricky. You have to use for each perl 
thread his own separate connection to DB. You can achieve this by using sub 
CLONE {} which is calling on every new thread creation, or you just can use 
perl without threads.


Best Regards,
Boian Jordanov
Head of Voice Department
tel. +359 2 4004 723
tel. +359 2 4004 002







-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Error: ASSERT FAILED threads.c[406]

2010-07-27 Thread Alan DeKok
Meyers, Dan wrote:
 Will do :) Just to check I've understood properly - Do you expect the
 new version to just fix the ASSERT FAILED error, and what's happening in
 the perl is still something I need to investigate (and is probably
 thread related), 

  Yes.

 or should the fix also stop me getting unresponsive
 children in the perl accounting method?

  No.  If the SQL database is slow, no amount of poking the RADIUS
server will fix that.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Error: ASSERT FAILED threads.c[406]

2010-07-26 Thread Meyers, Dan
Quick bit of background. We're using FreeRADIUS in combination with
rlm_perl for network access control at our site. Everything was running
fine on FreeBSD 8.0 with FreeRADIUS 2.1.8 compiled from ports and Perl
5.8 compiled to be non-threaded and not support multiplicity. We got new
higher spec servers from Dell, and sadly the only *nix OS that currently
supports the RAID card in them seems to be Ubuntu Server 10.4, so we're
now on that.

Perl is compiled (as it is by default on Ubuntu) with threads and
multiplicity, but some testing by hammering the server from multiple
different machines using radclient and some test packets from a file
seemed to show that (unlike the last time we tried, which I believe was
on FreeRADIUS 2.1.3) using threaded perl was stable and worked fine with
rlm_perl in FreeRADIUS (it used to lock up eventually).

Ran fine for a week or so, but in the last few days we've had it crash
twice, both times with the same message. The logs initially fill with
messages of the sort:

Sat Jul 24 01:05:08 2010 : Error: WARNING: Unresponsive child for
request 128145, in module perl component accounting

and

Sat Jul 24 01:05:08 2010 : Info: WARNING: Child is hung for request
128145.

We'll end up with 32 of the former type of error message (we're
currently running with 32 threads configured in the thread_pool in
radius.conf), interspersed with the latter, then a stack of the latter
type of error (Always for the same set of requests, i.e. one of the ones
we got an initial error for, but we'll get the second error multiple
times for a given request). Then eventually we get

Sat Jul 24 01:05:27 2010 : Error: ASSERT FAILED threads.c[406]:
(*request)-magic == REQUEST_MAGIC

All our accounting module does in perl is convert the incoming radius
hash to yaml and then attempt to write it to a database with a
timestamp. I am strongly suspecting that the initial problem is to do
with threading in combination with the DBD::MySQL module in perl or the
MySQL client rather than FreeRADIUS, despite our testing seeming to show
it was OK. But I do not think that final ASSERT FAILED error should be
being generated as a result of the former issue. I am trying to
understand what is going on. Is FreeRADIUS attempting to kill the
deadlocked threads and being unable to do so?

Thanks

Dan



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Error: ASSERT FAILED threads.c[406]

2010-07-26 Thread Alan DeKok
Meyers, Dan wrote:
 Ran fine for a week or so, but in the last few days we've had it crash
 twice, both times with the same message. The logs initially fill with
 messages of the sort:
 
 Sat Jul 24 01:05:08 2010 : Error: WARNING: Unresponsive child for
 request 128145, in module perl component accounting

  Oops.

 We'll end up with 32 of the former type of error message (we're
 currently running with 32 threads configured in the thread_pool in
 radius.conf), interspersed with the latter, then a stack of the latter
 type of error (Always for the same set of requests, i.e. one of the ones
 we got an initial error for, but we'll get the second error multiple
 times for a given request). Then eventually we get
 
 Sat Jul 24 01:05:27 2010 : Error: ASSERT FAILED threads.c[406]:
 (*request)-magic == REQUEST_MAGIC

  That looks like a bug which will be fixed in 2.1.10.  See
http://git.freeradius.org, branch v2.1.x.  Download that and install it.
 It should fix the problem.

  If so, please say so.

 All our accounting module does in perl is convert the incoming radius
 hash to yaml and then attempt to write it to a database with a
 timestamp. I am strongly suspecting that the initial problem is to do
 with threading in combination with the DBD::MySQL module in perl or the
 MySQL client rather than FreeRADIUS, despite our testing seeming to show
 it was OK. But I do not think that final ASSERT FAILED error should be
 being generated as a result of the former issue. I am trying to
 understand what is going on. Is FreeRADIUS attempting to kill the
 deadlocked threads and being unable to do so?

  It's a corner case that wasn't being handled properly.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Error: ASSERT FAILED threads.c[406]

2010-07-26 Thread Meyers, Dan
Will do :) Just to check I've understood properly - Do you expect the
new version to just fix the ASSERT FAILED error, and what's happening in
the perl is still something I need to investigate (and is probably
thread related), or should the fix also stop me getting unresponsive
children in the perl accounting method?

Thanks

Dan

 Meyers, Dan wrote:
  Ran fine for a week or so, but in the last few days we've had it
 crash
  twice, both times with the same message. The logs initially fill
with
  messages of the sort:
 
  Sat Jul 24 01:05:08 2010 : Error: WARNING: Unresponsive child for
  request 128145, in module perl component accounting
 
   Oops.
 
snip
  Sat Jul 24 01:05:27 2010 : Error: ASSERT FAILED threads.c[406]:
  (*request)-magic == REQUEST_MAGIC
 
   That looks like a bug which will be fixed in 2.1.10.  See
 http://git.freeradius.org, branch v2.1.x.  Download that and install
 it.
  It should fix the problem.
 
   If so, please say so.
snip
   It's a corner case that wasn't being handled properly.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


freeradius 2.1.8 dies Error: ASSERT FAILED event.c[1084]: home-ev != NULL

2010-03-25 Thread fab junkmail
I recently upgraded our freeradius servers to 2.1.8 and over the past
month it has died on one of the servers two times (spaced about two
weeks apart I think). So fairly infrequently.

A bit of background, We use this server predominantly to proxy
requests. Every day for about 15 minutes, the two main home servers we
proxy to stop responding (they are doing backups or maintenance during
this time) so for those 15 minutes our clients (LNS/NAS) would be
sending a very large number of accounting interim packets and some
stop packets and would be resending these while the home servers are
down.

Some relevant proxy home server settings we currently use for the main
home servers we proxy to:

response_window = 14
zombie_period = 40
status_check = status-server
check_interval = 30
num_answers_to_alive = 3


The times that freeradius has died has been near the end of the 15
minutes of the home servers downtime.

The last time this happened, I noticed logs in the attached file. Ones
that sound relevant as follows:

Sun Mar 14 17:30:15 2010 : Proxy: Marking home server 10.0.1.48
port 1646 as zombie (it looks like it is dead).
Sun Mar 14 17:30:16 2010 : Proxy: Marking home server 10.0.1.47
port 1646 as zombie (it looks like it is dead).
Sun Mar 14 17:30:19 2010 : Proxy: Marking home server 10.0.1.47
port 1645 as zombie (it looks like it is dead).
Sun Mar 14 17:30:19 2010 : Error: No response to status check 903535
for home server 10.0.1.48 port 1646
Sun Mar 14 17:30:20 2010 : Error: No response to status check 903536
for home server 10.0.1.47 port 1646
...
Sun Mar 14 17:30:32 2010 : Error: Internal sanity check failed for
child state
...
Fri Mar 19 17:30:54 2010 : Proxy: Failed to create a new socket for
proxying requests.
Fri Mar 19 17:30:54 2010 : Proxy: Failed to create a new socket for
proxying requests.
Fri Mar 19 17:30:54 2010 : Proxy: Failed to create a new socket for
proxying requests.
...
Fri Mar 19 17:30:56 2010 : Error: ASSERT FAILED event.c[1084]:
home-ev != NULL


That last one is where it dies I think.

That last error seems a bit similar (but a bit different) to the
following thread:

http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg58052.html

Re: ASSERT FAILED event.c in 2.1.7
Alan DeKok
Fri, 25 Sep 2009 01:19:40 -0700

Maja Wolniewicz wrote:
 After the upgrade from 2.1.6 to 2.1.7 my two servers died 3-4 times
 daily with the following error:

 Thu Sep 24 19:07:13 2009 : Error: Received conflicting packet from
 client AP-8 port 32777 - ID: 240 due to unfinished request 2396.  Giving
 up on old request.
 Thu Sep 24 19:07:13 2009 : Error: ASSERT FAILED event.c[2682]:
 request-ev != NULL

 I have to return to 2.1.6, which works smoothly.

  The simplest thing to do in the short term is to delete the assertion.

 Alan DeKok.


That one was found to be a bug and was fixed - I don't know if my case
is a bug though.


Another thread that sounds useful for this is:

http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg59985.html

...
Until then, configuring status-checks  local detail files will
definitely help. I would recommend doing that *anyways* for network
stability.

Alan DeKok.


I don't currently use the robust proxy accounting that that thread
suggests. I expect that would probably work around the issue of
freeradius crashing in this case and I will give that a go. Just
posting this to let you know that it _might_ be a bug and to ask for
advice about whether you think this is a bug or not, and if I should
follow up on that, or if you think it is just my configuration that
needs some changes and what areas I should concentrate on if that is
the case?

Regards,
Anthony
Sun Mar 14 17:30:15 2010 : Proxy: Marking home server 10.0.1.48 
port 1646 as zombie (it looks like it is dead).
Sun Mar 14 17:30:16 2010 : Proxy: Marking home server 10.0.1.47 
port 1646 as zombie (it looks like it is dead).
Sun Mar 14 17:30:19 2010 : Proxy: Marking home server 10.0.1.47 
port 1645 as zombie (it looks like it is dead).
Sun Mar 14 17:30:19 2010 : Error: No response to status check 903535 
for home server 10.0.1.48 port 1646
Sun Mar 14 17:30:20 2010 : Error: No response to status check 903536 
for home server 10.0.1.47 port 1646
Sun Mar 14 17:30:23 2010 : Error: No response to status check 61094 
for home server 10.0.1.47 port 1645
Sun Mar 14 17:30:31 2010 : Error: rlm_radutmp: Logout entry for NAS 
lns02 port 2520 has wrong ID
Sun Mar 14 17:30:32 2010 : Error: Internal sanity check failed for 
child state
Sun Mar 14 17:30:32 2010 : Error: Reply from home server 10.0.1.48 
port 1646  - ID: 224 arrived too late for request 903469. Try 
increasing 'retry_delay' or 'max_request_time'
Sun Mar 14 17:30:33 2010 : Proxy: Marking home server 10.0.1.48 
port 1645 as zombie (it looks like it is dead).
Sun Mar 14 17:30:34 2010 : Error: Internal sanity check failed for 
child state
Sun Mar 14 17:30:34 2010 : Error: Reply from home server 10.0.1.48 
port

Re: freeradius 2.1.8 dies Error: ASSERT FAILED event.c[1084]: home-ev != NULL

2010-03-25 Thread Alan DeKok
fab junkmail wrote:
 I recently upgraded our freeradius servers to 2.1.8 and over the past
 month it has died on one of the servers two times (spaced about two
 weeks apart I think). So fairly infrequently.

  OK.

 A bit of background, We use this server predominantly to proxy
 requests. Every day for about 15 minutes, the two main home servers we
 proxy to stop responding (they are doing backups or maintenance during
 this time) so for those 15 minutes our clients (LNS/NAS) would be
 sending a very large number of accounting interim packets and some
 stop packets and would be resending these while the home servers are
 down.

  You can configure the proxy to log accounting packets to disk when the
home server is down.  See raddb/sites-available/robust-proxy-accounting

 Sun Mar 14 17:30:15 2010 : Proxy: Marking home server 10.0.1.48
 port 1646 as zombie (it looks like it is dead).
 Sun Mar 14 17:30:16 2010 : Proxy: Marking home server 10.0.1.47
 port 1646 as zombie (it looks like it is dead).
 Sun Mar 14 17:30:19 2010 : Proxy: Marking home server 10.0.1.47
 port 1645 as zombie (it looks like it is dead).
 Sun Mar 14 17:30:19 2010 : Error: No response to status check 903535
 for home server 10.0.1.48 port 1646
 Sun Mar 14 17:30:20 2010 : Error: No response to status check 903536
 for home server 10.0.1.47 port 1646
 ...
 Sun Mar 14 17:30:32 2010 : Error: Internal sanity check failed for
 child state

  Hmm... that's not good.

 Fri Mar 19 17:30:54 2010 : Proxy: Failed to create a new socket for
 proxying requests.

  Why is it running out of sockets?  This shouldn't happen.

 Fri Mar 19 17:30:54 2010 : Proxy: Failed to create a new socket for
 proxying requests.
 Fri Mar 19 17:30:54 2010 : Proxy: Failed to create a new socket for
 proxying requests.
 ...
 Fri Mar 19 17:30:56 2010 : Error: ASSERT FAILED event.c[1084]:
 home-ev != NULL

  Well... after all of the previous errors, it's not surprising that
something *worse* eventually goes wrong.  It's like driving your car for
45 minutes after the tires are flat: not a good idea.

 That last one is where it dies I think.

  Yes.

 That one was found to be a bug and was fixed - I don't know if my case
 is a bug though.

  It's a bug, but the other problems you're seeing should be fixed, too.

 I don't currently use the robust proxy accounting that that thread
 suggests. I expect that would probably work around the issue of
 freeradius crashing in this case and I will give that a go.

  Yes.

 Just
 posting this to let you know that it _might_ be a bug and to ask for
 advice about whether you think this is a bug or not, and if I should
 follow up on that, or if you think it is just my configuration that
 needs some changes and what areas I should concentrate on if that is
 the case?

  You have a NAS which is sending large amounts of traffic to a proxy
when the home server is down.  The proxy isn't configured to do anything
useful with the packets.  This is a bug in the *architecture*.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: freeradius 2.1.8 dies Error: ASSERT FAILED event.c[1084]: home-ev != NULL

2010-03-25 Thread fab junkmail
Hi Alan,

Thanks for your response.

Alan DeKok wrote:
  You can configure the proxy to log accounting packets to disk when the
 home server is down.  See raddb/sites-available/robust-proxy-accounting

Ok I will definitely do this then.

 Fri Mar 19 17:30:54 2010 : Proxy: Failed to create a new socket for
 proxying requests.

  Why is it running out of sockets?  This shouldn't happen.

Not sure but there is a _lot_ of attempted proxying going on - maybe
it just went over the system limits like open file limits or
something? In any case it probably won't be a problem when I implement
the robust-proxy-accounting.

  You have a NAS which is sending large amounts of traffic to a proxy
 when the home server is down.  The proxy isn't configured to do anything
 useful with the packets.  This is a bug in the *architecture*.

Understood.

Thanks for your help Alan.

Regards,
Anthony

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: freeradius 2.1.8 dies Error: ASSERT FAILED event.c[1084]: home-ev != NULL

2010-03-25 Thread Alan DeKok
fab junkmail wrote:
  Why is it running out of sockets?  This shouldn't happen.
 
 Not sure but there is a _lot_ of attempted proxying going on - maybe
 it just went over the system limits like open file limits or
 something? In any case it probably won't be a problem when I implement
 the robust-proxy-accounting.

  Likely, yes.

  If the server is overloaded and unable to proxy packets... who knows
what can happen.  The *intent* is to have it still work, but it's a
poorly tested code path.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: ASSERT FAILED event.c in 2.1.7

2009-09-26 Thread Alan DeKok
Alexander Clouter wrote:
 Bah you gave me the same wimpy advice :)

  Why fix a problem when you can ignore it?

  Realistically... I've updated the code.  2.1.8 won't have this issue.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


ASSERT FAILED event.c in 2.1.7

2009-09-25 Thread Maja Wolniewicz
After the upgrade from 2.1.6 to 2.1.7 my two servers died 3-4 times 
daily with the following error:


Thu Sep 24 19:07:13 2009 : Error: Received conflicting packet from 
client AP-8 port 32777 - ID: 240 due to unfinished request 2396.  Giving 
up on old request.
Thu Sep 24 19:07:13 2009 : Error: ASSERT FAILED event.c[2682]: 
request-ev != NULL


I have to return to 2.1.6, which works smoothly.

Greetings,
Maja

--
Maja Gorecka-Wolniewicz  m...@umk.pl
 PGP key: http://www.home.umk.pl/~mgw/pgp_pub_key.asc
Uczelniane Centrum   Information  Communication
InformatyczneTechnology Centre
Uniwersytet Mikolaja Kopernika   Nicolaus Copernicus University
Coll. Maximum, pl. Rapackiego 1, 87-100 Torun, Poland
tel.: +48 56-611-27-40 fax: +48 56-622-18-50 tel. kom.: +48-693032574


smime.p7s
Description: S/MIME Cryptographic Signature
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: ASSERT FAILED event.c in 2.1.7

2009-09-25 Thread Alan DeKok
Maja Wolniewicz wrote:
 After the upgrade from 2.1.6 to 2.1.7 my two servers died 3-4 times
 daily with the following error:
 
 Thu Sep 24 19:07:13 2009 : Error: Received conflicting packet from
 client AP-8 port 32777 - ID: 240 due to unfinished request 2396.  Giving
 up on old request.
 Thu Sep 24 19:07:13 2009 : Error: ASSERT FAILED event.c[2682]:
 request-ev != NULL
 
 I have to return to 2.1.6, which works smoothly.

  The simplest thing to do in the short term is to delete the assertion.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: ASSERT FAILED event.c in 2.1.7

2009-09-25 Thread Alexander Clouter
Alan DeKok al...@deployingradius.com wrote:

 Maja Wolniewicz wrote:

 After the upgrade from 2.1.6 to 2.1.7 my two servers died 3-4 times
 daily with the following error:
 
 Thu Sep 24 19:07:13 2009 : Error: Received conflicting packet from
 client AP-8 port 32777 - ID: 240 due to unfinished request 2396.  Giving
 up on old request.
 Thu Sep 24 19:07:13 2009 : Error: ASSERT FAILED event.c[2682]:
 request-ev != NULL
 
 I have to return to 2.1.6, which works smoothly.
 
  The simplest thing to do in the short term is to delete the assertion.
 
Bah you gave me the same wimpy advice :)

https://bugs.freeradius.org/bugzilla/show_bug.cgi?id=23

Cheers

-- 
Alexander Clouter
.sigmonster says: Short people get rained on last.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: FR 2.1.3 and ASSERT FAILED event.c

2009-02-25 Thread Alan DeKok
Chris Howley wrote:
 I encountered the following problem when the server received an 
 Access-Challenge packet
 from a proxy server. Any help in fixing this problem would be appreciated.

  See doc/bugs for giving additional information, such as the rest of
the back trace.

  Also, a lot more of the debug log might help.

 Waking up in 0.9 seconds.
 rad_recv: Access-Challenge packet from host 194.82.174.185 port 1812, id=76, 
 length=81
 Tunnel-Type:0 = VLAN
 Tunnel-Medium-Type:0 = IEEE-802
 EAP-Message = 0x010300061920
 Message-Authenticator = 0x193c8361dc660dd940460f693d6ebf9c
 State = 0xad8b0646ad881f6aaefeee6ec7165a25
 Proxy-State = 0x313730
 +- entering group post-proxy {...}
 [post_proxy_log]expand: 
 /usr/local/var/log/radius/radacct/%Y-%m-%d/post-proxy-detail-%H:00 - 
 /usr/local/var/log/radius/radacct/2009-02-24/post-proxy-detail-16:00
 [post_proxy_log] 
 /usr/local/var/log/radius/radacct/%Y-%m-%d/post-proxy-detail-%H:00 expands to 
 /usr/local/var/log/radius/radacct/2009-02-24/post-proxy-detail-16:00
 [post_proxy_log]expand: %{Packet-Src-IP-Address} - %t - 10.12.80.101 
 - Tue Feb 24 16:02:50 2009
 ++[post_proxy_log] returns ok
 [attr_filter.post-proxy]expand: %{Realm} - jrs
  attr_filter: Matched entry DEFAULT at line 103
 ++[attr_filter.post-proxy] returns updated
 [eap] No pre-existing handler found
 ++[eap] returns noop
 ASSERT FAILED event.c[3593]: fun != NULL
 Abort (core dumped)

  This is a catastrophic error indicating that the server has a request
it doesn't know how to handle.

  The only way that this could happen is:

  a) buffer over-run somewhere
  b) source code modifications

  The code that receives a proxied response sets fun, and doesn't do a
whole lot else before it hits that assertion.  If you're seeing this in
debugging mode (i.e. no threads), then there *very* few things that can
go wrong here.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


FR 2.1.3 and ASSERT FAILED event.c

2009-02-24 Thread Chris Howley
Alan,

Environment: SunOS 5.10 and FR 2.1.3 (stable)

I encountered the following problem when the server received an 
Access-Challenge packet
from a proxy server. Any help in fixing this problem would be appreciated.

Thanks,

Chris

Waking up in 0.9 seconds.
rad_recv: Access-Challenge packet from host 194.82.174.185 port 1812, id=76, 
length=81
Tunnel-Type:0 = VLAN
Tunnel-Medium-Type:0 = IEEE-802
EAP-Message = 0x010300061920
Message-Authenticator = 0x193c8361dc660dd940460f693d6ebf9c
State = 0xad8b0646ad881f6aaefeee6ec7165a25
Proxy-State = 0x313730
+- entering group post-proxy {...}
[post_proxy_log]expand: 
/usr/local/var/log/radius/radacct/%Y-%m-%d/post-proxy-detail-%H:00 - 
/usr/local/var/log/radius/radacct/2009-02-24/post-proxy-detail-16:00
[post_proxy_log] 
/usr/local/var/log/radius/radacct/%Y-%m-%d/post-proxy-detail-%H:00 expands to 
/usr/local/var/log/radius/radacct/2009-02-24/post-proxy-detail-16:00
[post_proxy_log]expand: %{Packet-Src-IP-Address} - %t - 10.12.80.101 - 
Tue Feb 24 16:02:50 2009
++[post_proxy_log] returns ok
[attr_filter.post-proxy]expand: %{Realm} - jrs
 attr_filter: Matched entry DEFAULT at line 103
++[attr_filter.post-proxy] returns updated
[eap] No pre-existing handler found
++[eap] returns noop
ASSERT FAILED event.c[3593]: fun != NULL
Abort (core dumped)



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


ASSERT FAILED

2008-07-08 Thread Norbert Wegener
As snmp is not available right now, I am looking in how to deal with 
statistics, status_server and played a bit.

This way  I was able to kill freeradius...

First I noticed:
radclient: dict_init: /usr/share/freeradius//dictionary.freeradius[47]: 
dict_addattr: attribute name too long

I commented out a few of the long-named values.

Now with
cat x | radclient -d /usr/share/freeradius/ 127.0.0.1  status adminsecret,
where x contains:
Message-Authenticator = 0x00
FreeRADIUS-Statistics-Type=1


I got:

rad_recv: Status-Server packet from host 127.0.0.1 port 33453, id=117, 
length=50

   Message-Authenticator = 0x32f28212809676b99d5943988a714aa8
   FreeRADIUS-Statistics-Type = Authentication
ASSERT FAILED stats.c[318]: request-listener-type == RAD_LISTEN_NONE
Abgebrochen

Norbert Wegener


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: ASSERT FAILED

2008-07-08 Thread A . L . M . Buxey
Hi,
 As snmp is not available right now, I am looking in how to deal with 
 statistics, status_server and played a bit.
 This way  I was able to kill freeradius...

 First I noticed:
 radclient: dict_init: /usr/share/freeradius//dictionary.freeradius[47]: 
 dict_addattr: attribute name too long
 I commented out a few of the long-named values.

 Now with
 cat x | radclient -d /usr/share/freeradius/ 127.0.0.1  status adminsecret,
 where x contains:
 Message-Authenticator = 0x00
 FreeRADIUS-Statistics-Type=1


 I got:

 rad_recv: Status-Server packet from host 127.0.0.1 port 33453, id=117, 
 length=50
Message-Authenticator = 0x32f28212809676b99d5943988a714aa8
FreeRADIUS-Statistics-Type = Authentication
 ASSERT FAILED stats.c[318]: request-listener-type == RAD_LISTEN_NONE
 Abgebrochen

have you enabled the statistics  virtual server?  copy or link the entry in
sites-available/

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: ASSERT FAILED

2008-07-08 Thread Alan DeKok
Norbert Wegener wrote:
 As snmp is not available right now, I am looking in how to deal with
 statistics, status_server and played a bit.
 This way  I was able to kill freeradius...

  Whoops.  The intent was to allow Status-Server to any port, but to
permit the statistics only to a status port.

 First I noticed:
 radclient: dict_init: /usr/share/freeradius//dictionary.freeradius[47]:
 dict_addattr: attribute name too long
 I commented out a few of the long-named values.

  Hmm...  The if src/include/libradius.h has a DICT_ATTR with
attrname[40], then you have an old copy of the source.  This was fixed
in a commit on June 19.

 rad_recv: Status-Server packet from host 127.0.0.1 port 33453, id=117,
 length=50
Message-Authenticator = 0x32f28212809676b99d5943988a714aa8
FreeRADIUS-Statistics-Type = Authentication
 ASSERT FAILED stats.c[318]: request-listener-type == RAD_LISTEN_NONE
 Abgebrochen

  Grab an update from the new CVS tree:

cvs -d :pserver:[EMAIL PROTECTED]:/freeradius-server.git
checkout -d radiusd master

  You should be able to just copy src/main/listen.c from there you your
existing tree, so you don't have to do a full configure/make again.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: ASSERT FAILED

2008-07-08 Thread Norbert Wegener

[EMAIL PROTECTED] wrote:

Hi,
  

...
I got:

rad_recv: Status-Server packet from host 127.0.0.1 port 33453, id=117, 
length=50

   Message-Authenticator = 0x32f28212809676b99d5943988a714aa8
   FreeRADIUS-Statistics-Type = Authentication
ASSERT FAILED stats.c[318]: request-listener-type == RAD_LISTEN_NONE
Abgebrochen



have you enabled the statistics  virtual server?  copy or link the entry in
sites-available/
  

In radiusd.conf:

   status_server = yes


If you mean the status file from sites-available: It is linked to 
sites-enabled.


Norbert Wegener


alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
  


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: ASSERT FAILED

2008-07-08 Thread Norbert Wegener

Alan DeKok wrote:

Norbert Wegener wrote:
  

As snmp is not available right now, I am looking in how to deal with
statistics, status_server and played a bit.
This way  I was able to kill freeradius...



  Whoops.  The intent was to allow Status-Server to any port, but to
permit the statistics only to a status port.

  

First I noticed:
radclient: dict_init: /usr/share/freeradius//dictionary.freeradius[47]:
dict_addattr: attribute name too long
I commented out a few of the long-named values.



  Hmm...  The if src/include/libradius.h has a DICT_ATTR with
attrname[40], then you have an old copy of the source.  This was fixed
in a commit on June 19.

  

rad_recv: Status-Server packet from host 127.0.0.1 port 33453, id=117,
length=50
   Message-Authenticator = 0x32f28212809676b99d5943988a714aa8
   FreeRADIUS-Statistics-Type = Authentication
ASSERT FAILED stats.c[318]: request-listener-type == RAD_LISTEN_NONE
Abgebrochen



  Grab an update from the new CVS tree:

cvs -d :pserver:[EMAIL PROTECTED]:/freeradius-server.git
checkout -d radiusd master

  You should be able to just copy src/main/listen.c from there you your
existing tree, so you don't have to do a full configure/make again.
  

Thanks, works now.
Norbert Wegener


  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
  


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: assert failed event.c and perl performance

2008-04-18 Thread Julien Leloup

Hi,

I have re-tested it with the lastes CVS, it's working fine.
Thanks for your work on FreeRadius :)

Regards,

Julien Leloup
Axione
130/132 Boulevard Camélinat
92240 MALAKOFF
FRANCE

Alan DeKok a écrit :

Julien Leloup wrote:
  

The same configuration, in FreeRadius 2.0.1 worked fine, but when I
recompiled Perl 5.8.8 with IThreads support, I also upgraded FreeRadius
in 2.0.3 and now I'm going through an error, only when the home server
is not alive, or not responding :



  Grab the latest CVS.  It has a fix.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
  


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: assert failed event.c and perl performance

2008-04-11 Thread Alan DeKok
Julien Leloup wrote:
 The same configuration, in FreeRadius 2.0.1 worked fine, but when I
 recompiled Perl 5.8.8 with IThreads support, I also upgraded FreeRadius
 in 2.0.3 and now I'm going through an error, only when the home server
 is not alive, or not responding :

  Grab the latest CVS.  It has a fix.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


assert failed event.c and perl performance

2008-04-08 Thread Julien Leloup

Hi,

I'm running FreeRadius 2.0.3 under FreeBSD 6.3, in a proxy 
configuration. This server is using rlm_perl in a post-proxy phase to 
realize some operations on Access-Accept attributes, with the use of a 
MySQL database.


The same configuration, in FreeRadius 2.0.1 worked fine, but when I 
recompiled Perl 5.8.8 with IThreads support, I also upgraded FreeRadius 
in 2.0.3 and now I'm going through an error, only when the home server 
is not alive, or not responding :


Rejecting request 0 due to lack of any response from home server x.x.x.x 
port 1645

There was no response configured: rejecting request 0
 Found Post-Auth-Type Reject
+- entering group REJECT
   expand: %{User-Name} - x
attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Sending Access-Reject of id 215 to x.x.x.x port 49727
Finished request 0.
ASSERT FAILED event.c[956]: request-next_callback != NULL
Abort

This error is happening even if I use a non-IThread Perl, or if I remove 
the use of rlm_perl in post-proxy, so I'm pretty sure it's not related 
to the use of the thread configuration of Perl.


Does anyone having the same problem ? I haven't found a trace of this 
kind of bug between 2.0.1 and 2.0.3 versions of FreeRadius, only a 
discussion on this mailing list from september 2007.


Subsidiary question : I'm not a perl, or freeradius performance expert, 
so I'm not sure if it's necessary to use a thread configuration of Perl 
to handle something like 40.000 proxied requests (in a Armageddon 
scenario), with a decent server. What do you think about it ?


Best regards,

Julien Leloup
Axione
130/132 Boulevard Camélinat
92240 MALAKOFF
FRANCE
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html