Re: (RADIATOR) Segmentation faul

2003-11-05 Thread Hugh Irvine
Hello Julio -

Thanks for sending the files.

There are a couple of things that I notice straight away.

The first is a very large number of errors with the communication with  
the Oracle database. This should be addressed first of all so you have  
a stable communication channel with no errors. The usual cause of  
problems like this is the versions of either the DBI module or the  
DBD-Oracle module. You should check the CPAN site and either upgrade or  
downgrade until you find a stable combination.

The second is a configuration issue which is your use of "Fork" in your  
AuthBy RADIUS clauses. You should not use "Fork" in an AuthBy RADIUS  
clause. This may also be contributing the Oracle communications  
problems.

Note that the AuthBy RADIUS clause operates asynchronously in any case,  
so "Fork" is not required.

regards

Hugh

On 06/11/2003, at 4:37 AM, Julio Cesar Pinto wrote:

Hi Hung,

Ok, our config file is a little complex, but the summary is the
following:
Foreground
Trace 4
### CONFIGURATION ###
LogDir /home/radius/log/%{GlobalVar:RadiusIP}
LogFile %L/radiator.log
DbDir  /home/radius/etc/conf
DictionaryFile %D/dictionary.ifx
PidFile %L/radius.pid
BindAddress %{GlobalVar:RadiusIP}
AuthPort 1812
AcctPort 1813
### CONFIGURATION ###
#ACCT_RADIUS_CL

  Fork
  AcctPort 1646
  NoForwardAuthentication
  Host 216.241.*.*
  Identifier ACCT_RADIUS_CL
  LocalAddress %{GlobalVar:RadiusIP}
  Retries 3
  RetryTimeout 30
  Secret **

#ACCT_RADIUS_AR

  Fork
  AcctPort 1646
  NoForwardAuthentication
  Host 200.61.*.*
  Identifier ACCT_RADIUS_AR
  LocalAddress %{GlobalVar:RadiusIP}
  Retries 3
  RetryTimeout 30
  Secret *

#DB Clients

  DBAuth ***
  DBSource DBI:Oracle:ORACLE.DOMAIN.COM
  DBUsername usersql
  GetClientQuery select NASIDENTIFIER,SECRET from RADCLIENTLIST

# VE RAS 200.62.10.25 is a USR TotalControl which sends bad signatures  
(fg - 9/10/2003)

Secret ***
IgnoreAcctSignature


#Sesscion RADONLINE

 AddQuery insert into RADONLINE (USERNAME, NASIDENTIFIER,  
NASPORT,ACCTSESSIONID, TIMESTAMP, FRAMEDIPADDRESS, NASPORTTYPE,  
SERVICETYPE,CALL
ERID,CLIENTPORTDNIS,IFX_VISP_ID,IFX_COUNTRY_ID) values ('%u', '%N',  
0%{NAS-Port},'%{Acct-Session-Id}', to_date('%d %m %Y %H:%M:%S', 'DD MM
  HH24:MI:SS'), '%{Framed-IP-Address}','%{NAS-Port-Type}',  
'%{Service-Type}','%{Calling-Station-Id}','%{Called-Station- 
Id}','%{Ifx-Vis
p-Id}','%{Ifx-Country-Id}')
  ClearNasQuery delete from RADONLINE where NASIDENTIFIER='%N'
  CountNasSessionsQuery select ACCTSESSIONID from RADONLINE where  
NASIDENTIFIER='%N'
  CountQuery select NASIDENTIFIER, NASPORT, ACCTSESSIONID from  
RADONLINE where USERNAME='%u
  DBAuth ***
  DBSource DBI:Oracle:ORACLE.DOMAIN.COM
  DBUsername usersql
  DeleteQuery delete from RADONLINE where NASIDENTIFIER='%N' and  
NASPORT=0%{NAS-Port}
  Identifier SESSIONID_0


#PROMISCUE

  Identifier PROMISCUO

#AA_SQL_LOCAL

 DBAuth **
 DBSource DBI:Oracle:ORACLE.DOMAIN.COM
 DBUsername usersql
 AuthSelect select PASSWORD, TO_CHAR(EXPIRATION,'-MM-DD'),  
CHECKATTR, REPLYATTR  from SUBSCRIBERS where USERNAME='%n' and  
ACTIVE=1
 AuthColumnDef 0, User-Password, check
 AuthColumnDef 1, Expiration, check
 AuthColumnDef 2, GENERIC, check
 AuthColumnDef 3, GENERIC, reply
 AccountingTable ACCOUNTING%Y%m
 AcctColumnDef   USERNAME,User-Name
 AcctColumnDef   ACCTSTATUSTYPE,Acct-Status-Type
 AcctColumnDef   ACCTDELAYTIME,Acct-Delay-Time,integer
 AcctColumnDef   ACCTINPUTOCTETS,Acct-Input-Octets,integer
 AcctColumnDef   ACCTOUTPUTOCTETS,Acct-Output-Octets,integer
 AcctColumnDef   ACCTSESSIONID,Acct-Session-Id
 AcctColumnDef   ACCTSESSIONTIME,Acct-Session-Time,integer
 AcctColumnDef   ACCTTERMINATECAUSE,Acct-Terminate-Cause
 AcctColumnDef   NASIDENTIFIER,NAS-IP-Address
 AcctColumnDef   NASPORT,NAS-Port,integer
 AcctColumnDef   FRAMEDIPADDRESS,Framed-IP-Address
 AcctColumnDef   FRAMEDIPNETMASK,Framed-IP-Netmask
 AcctColumnDef   ASCENDDATARATE,Ascend-Data-Rate,integer
 AcctColumnDef
ASCENDDISCONNECTCAUSE,Ascend-Disconnect-Cause,integer
 AcctColumnDef
ASCENDPRESESSIONTIME,Ascend-PreSession-Time,integer
 AcctColumnDef   CALLERID,Calling-Station-Id
 AcctColumnDef   CLIENTPORTDNIS,Called-Station-Id
 AcctColumnDef   IFX_VISP_ID,Ifx-Visp-Id
 AcctColumnDef   IFX_CONN_STAT,Ifx-Conn-Stat,integer
 AcctColumnDef   IFX_TEST,Ifx-Test,integer
 AcctColumnDef   IFX_COUNTRY_ID,Ifx-Country-Id
 AcctColumnDef   TIMESTAMP,Timestamp,formatted-date,to_date('%e %m  
%Y %H:%M:%S', 'DD MM  HH24:MI:SS')
 AcctColumnDef   CLASS,Class
 AccountingStopsOnly
 NoDefault
 IgnoreAuthentication
 Identifier AA_SQL_LOCAL
 AcctFailedLogFileName %L/FailedSqlAccounting.log
 AddToReplyIfNotExist \
Service-Type = Framed-User, \
Framed-Protocol = PPP, \
Framed-IP-Address = 255.255.255.254, \
Framed-IP-Netmask = 25

Re: (RADIATOR) radiusd crashes/dies

2003-11-05 Thread Barrett (Barry) W Clark
Hugh,

Thanks for your input!

I have restartWrapper starting the service and when it died, it sent the 
e-mail below...

~~~Start E-Mail~~~
Your program
   /usr/bin/radiusd -config_file /etc/radiator/radius.cfg -foreground

exited unexpectedly with exit status 25,
signal number 0 and dump indication 0.
The STDERR output was Undefined subroutine &Radius::MSCHAP::ASCIItoUnicode 
called at /usr/lib/perl5/site_perl/Radius/AuthGeneric.pm line 464.
.

The program will be restarted again by /usr/bin/restartWrapper in 2 seconds.

==
This mail message was automatically generated by restartWrapper,
part of the OSC Radiator package.
==
~~~End E-Mail~~~
I don't really know what it is trying to tell me, (or how to fix it) can 
anyone give me a hint?  or two?  :-)

Thanks!

bwc

At 05:19 PM 10/27/2003, Hugh Irvine wrote:

Hello Barry -

This sounds like Perl is crashing (probably because a Perl module is missing).

I would suggest using restartWrapper which you can configure to send you 
mail if a crash happens and the mail will contain the error output from 
Perl. Alternatively you can simply run "radiusd" from the command line and 
you will see any Perl error messages on the console output.

perl radiusd -foreground -log_stdout -trace 4 -config_file .

BTW - the latest version is Radiator 3.7.1.

regards

Hugh

On 28/10/2003, at 8:07 AM, Barrett (Barry) W Clark wrote:

Hello,

On June 1st we upgraded to the 3.6-1 version of Radiator. (New box with 
RH and added SQL logging)

The box has been running flawlessly up until 1 1/2 weeks ago.

Radiusd just stops and is not listed in "top" or "ps".  We can restart 
the service and it will run fine for about 2 or 3 days and then die again.

The log files do not show anything out of the ordinary and I am currently 
running debug, hoping to catching it when it dies.

Any suggestions or hints on what could be causing this and solutions 
would be appreciated!

I am also looking into restartWrapper as well as contemplating replacing 
RH with FreeBSD.  Any thoughts / suggestions on restartWrapper and/or 
migrating to FreeBSD are welcome and appreciated!

Below is a copy of the current radius.cfg (no secrets)

Thank you!

bwc


===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.


Re: (RADIATOR) radiusd crashes/dies

2003-11-05 Thread Hugh Irvine
Hello Barry -

This is from the header of "Radius/MSCHAP":

# MSCHAP.pm
# Implements MSCHAP algorithms as described in
# draft-ietf-pppext-mschap-00.txt and RFC3079
# Requires Digest-MD4-1.0 or better, available from CPAN and
# ActiveState
You will need to install Digest-MD4 from CPAN.

The problem is that someone is sending you MSCHAP passwords

regards

Hugh

On 06/11/2003, at 10:19 AM, Barrett (Barry) W Clark wrote:

Hugh,

Thanks for your input!

I have restartWrapper starting the service and when it died, it sent 
the e-mail below...

~~~Start E-Mail~~~
Your program
   /usr/bin/radiusd -config_file /etc/radiator/radius.cfg -foreground

exited unexpectedly with exit status 25,
signal number 0 and dump indication 0.
The STDERR output was Undefined subroutine 
&Radius::MSCHAP::ASCIItoUnicode called at 
/usr/lib/perl5/site_perl/Radius/AuthGeneric.pm line 464.
.

The program will be restarted again by /usr/bin/restartWrapper in 2 
seconds.

==
This mail message was automatically generated by restartWrapper,
part of the OSC Radiator package.
==
~~~End E-Mail~~~
I don't really know what it is trying to tell me, (or how to fix it) 
can anyone give me a hint?  or two?  :-)

Thanks!

bwc

At 05:19 PM 10/27/2003, Hugh Irvine wrote:

Hello Barry -

This sounds like Perl is crashing (probably because a Perl module is 
missing).

I would suggest using restartWrapper which you can configure to send 
you mail if a crash happens and the mail will contain the error 
output from Perl. Alternatively you can simply run "radiusd" from the 
command line and you will see any Perl error messages on the console 
output.

perl radiusd -foreground -log_stdout -trace 4 -config_file 
.

BTW - the latest version is Radiator 3.7.1.

regards

Hugh

On 28/10/2003, at 8:07 AM, Barrett (Barry) W Clark wrote:

Hello,

On June 1st we upgraded to the 3.6-1 version of Radiator. (New box 
with RH and added SQL logging)

The box has been running flawlessly up until 1 1/2 weeks ago.

Radiusd just stops and is not listed in "top" or "ps".  We can 
restart the service and it will run fine for about 2 or 3 days and 
then die again.

The log files do not show anything out of the ordinary and I am 
currently running debug, hoping to catching it when it dies.

Any suggestions or hints on what could be causing this and solutions 
would be appreciated!

I am also looking into restartWrapper as well as contemplating 
replacing RH with FreeBSD.  Any thoughts / suggestions on 
restartWrapper and/or migrating to FreeBSD are welcome and 
appreciated!

Below is a copy of the current radius.cfg (no secrets)

Thank you!

bwc


===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.


NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.