Re: Getting the error rlm_jradius: problem packing the data[socket_send/first_read] at FreeRadius side

2010-04-19 Thread Humaira
rlm_jradius: packing packet with code: 0 (attr length: 0) > rlm_jradius: packing attribute User-Password (type: 2; len: 6) > rlm_jradius: packing attribute Auth-Type (type: 1000; len: 4) > rlm_jradius: sending 172 bytes to socket 7 > rlm_jradius: error sending request with socket 7 &g

Getting the error rlm_jradius: problem packing the data[socket_send/first_read] at FreeRadius side

2010-04-14 Thread Tejas Mudgal
) rlm_jradius: packing attribute Auth-Type (type: 1000; len: 4) rlm_jradius: sending 172 bytes to socket 7 rlm_jradius: error sending request with socket 7 rlm_jradius: Closing JRadius connection 7 rlm_jradius: reconnecting socket id 7 rlm_jradius: sending 172 bytes to socket 7 rlm_jradius: error sending

RE: Error: rlm_eap: No EAP session matching the State variable.

2010-04-12 Thread marco zamora
. Atentamente: Marco Zamora Date: Mon, 12 Apr 2010 10:07:26 +0530 Subject: Error: rlm_eap: No EAP session matching the State variable. From: a.rupes...@gmail.com To: freeradius-users@lists.freeradius.org Hi, I am using latest freeradius server (version 2.1.8). I have two authenticated

Re: Error: rlm_eap: No EAP session matching the State variable.

2010-04-12 Thread Rupesh Kumar
gt; > Either way, the packet traces on the server show that the server is > behaving correctly. The error message about "no matching state" is > because the server has moved on to the *next* step of EAP, and it > receives a packet from the *previous* step. So there really is &q

Re: Error: rlm_eap: No EAP session matching the State variable.

2010-04-12 Thread Alan DeKok
Rupesh Kumar wrote: > I am using latest freeradius server (version 2.1.8). Which AP && supplicant (client PC) are you using? > I have two authenticated sessions established with radius server and > when disable and reenable the dot1x sessions, then I am seeing the > fol

Re: freeradius 2.1.8 dies Error: ASSERT FAILED event.c[1084]: home->ev != NULL

2010-03-25 Thread Alan DeKok
fab junkmail wrote: >> Why is it running out of sockets? This shouldn't happen. > > Not sure but there is a _lot_ of attempted proxying going on - maybe > it just went over the system limits like open file limits or > something? In any case it probably won't be a problem when I implement > the r

Re: freeradius 2.1.8 dies Error: ASSERT FAILED event.c[1084]: home->ev != NULL

2010-03-25 Thread fab junkmail
Hi Alan, Thanks for your response. Alan DeKok wrote: >  You can configure the proxy to log accounting packets to disk when the > home server is down.  See raddb/sites-available/robust-proxy-accounting Ok I will definitely do this then. >> Fri Mar 19 17:30:54 2010 : Proxy: Failed to create a new

Re: freeradius 2.1.8 dies Error: ASSERT FAILED event.c[1084]: home->ev != NULL

2010-03-25 Thread Alan DeKok
ort 1646 as zombie (it looks like it is dead). > Sun Mar 14 17:30:16 2010 : Proxy: Marking home server 10.0.1.47 > port 1646 as zombie (it looks like it is dead). > Sun Mar 14 17:30:19 2010 : Proxy: Marking home server 10.0.1.47 > port 1645 as zombie (it looks like it is dead). > Sun

Re: "Invalid packet code 11 sent to authentication port from client" error

2010-03-25 Thread Alan DeKok
Rob Brickhouse wrote: > Is it possible the issue is with the network card in the server and not > the AP's? No. The AP generates RADIUS packets. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: "Invalid packet code 11 sent to authentication port from client" error

2010-03-25 Thread Rob Brickhouse
Is it possible the issue is with the network card in the server and not the AP's? I've tried setting it up on another machine and everything works on it exactly as configured. Using a Cisco AP didn't work and the version of freeradius I install on the box reporting errors doesn't make a difference

freeradius 2.1.8 dies Error: ASSERT FAILED event.c[1084]: home->ev != NULL

2010-03-24 Thread fab junkmail
2010 : Proxy: Marking home server 10.0.1.47 port 1646 as zombie (it looks like it is dead). Sun Mar 14 17:30:19 2010 : Proxy: Marking home server 10.0.1.47 port 1645 as zombie (it looks like it is dead). Sun Mar 14 17:30:19 2010 : Error: No response to status check 903535 for home server 10.0.1.48 port

Re: "Invalid packet code 11 sent to authentication port from client" error

2010-03-19 Thread Alan Buxey
Hi, you SAY you are using 2.1.8 but this config > filter = > "(&(objectClass=inetOrgPerson)(uid=%{Stripped-User-Name:-%{User-Name}}))" which leads to this error/warning > [ldap] WARNING: Deprecated conditional expansion ":-". See "man unla

Re: "Invalid packet code 11 sent to authentication port from client" error

2010-03-19 Thread Alan DeKok
Rob Brickhouse wrote: > I hope someone can help me with this. I tested setting up freeradius > 2.1.6 on an opensuse 10.2 box and was able to get everything > authenticating against novell edirectory. Now that I'm finally ready to > put it on my production box, only 2.1.8 is available but I figure n

"Invalid packet code 11 sent to authentication port from client" error

2010-03-19 Thread Rob Brickhouse
I hope someone can help me with this. I tested setting up freeradius 2.1.6 on an opensuse 10.2 box and was able to get everything authenticating against novell edirectory. Now that I'm finally ready to put it on my production box, only 2.1.8 is available but I figure no big deal since it appeared t

Re: TLS/SSL Error?

2010-03-19 Thread Alan Buxey
Hi, > from. My Free radius server has a Thawte Certificate installed. I'm not > sure what the message means? usually a misconfigured client eg they are checking the cert against the wrong CA or no CA etc. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: TLS/SSL Error?

2010-03-18 Thread Alan DeKok
Mike Diggins wrote: > I just recently enabled a WPA SSID on our wireless network. PEAP with > MSCHAP V2 is the EAP method. As far as I know it's working correctly > (from all my test clients anyway), but I have seen a number of these > messages logged (FreeRadius 2.1.3) and I don't know where they'

TLS/SSL Error?

2010-03-18 Thread Mike Diggins
[8452]: rlm_eap: SSL error error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca -Mike <>- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: "dict_addattr: attribute name too long" error when running raclient by cron

2010-03-17 Thread Sergio Belkin
2010/3/17 Alan DeKok : > Sergio Belkin wrote: >> When I run on the shell do it fine, but when it is launched by root it >> fails, resulting in: >> >> radclient: dict_init: >> /usr/local/share/freeradius/dictionary.freeradius[47]: dict_addattr: >> attribute name too long > >  You have multiple versi

Re: "dict_addattr: attribute name too long" error when running raclient by cron

2010-03-17 Thread Sergio Belkin
2010/3/17 Sergio Belkin : > Hi, I have a simple script as follows: > > #! /bin/bash > echo "Message-Authenticator = 0x00, FreeRADIUS-Statistics-Type = 16" | > radclient localhost:18120 status YellowSubmarine | tee > /var/log/radius/status-"$(date -d "yesterday" +%Y%m%d)".log > #echo "Message-Authen

Re: "dict_addattr: attribute name too long" error when running raclient by cron

2010-03-17 Thread Alan DeKok
Sergio Belkin wrote: > When I run on the shell do it fine, but when it is launched by root it > fails, resulting in: > > radclient: dict_init: > /usr/local/share/freeradius/dictionary.freeradius[47]: dict_addattr: > attribute name too long You have multiple versions of FreeRADIUS installed. Fi

"dict_addattr: attribute name too long" error when running raclient by cron

2010-03-17 Thread Sergio Belkin
Hi, I have a simple script as follows: #! /bin/bash echo "Message-Authenticator = 0x00, FreeRADIUS-Statistics-Type = 16" | radclient localhost:18120 status YellowSubmarine | tee /var/log/radius/status-"$(date -d "yesterday" +%Y%m%d)".log #echo "Message-Authenticator = 0x00, FreeRADIUS-Statistics-T

Re: Autentification error

2010-03-12 Thread Tokie
Hi, I did it!! I edited the many config file with the my old configuration(not replaced!!) > looks like you are forced the authentication type in the SQL > tables to be CAHP. dont do that. > How can I do?? Why should not I do that?? Tks Il 05/03/2010 20.05, Alan Buxey ha scritto: > hi, > > do

Re: Error installing Freeradius

2010-03-09 Thread Alan Buxey
Hi, > > Yes > In the newer version I did not find CA.all file which I needed . Thats is > why I use Older version why do you need it - noone else doesthey install 2.1.8 etc quite happily. the 'snapshot' file you are trying to use is a nightly grab of ...well, i think back then it was CVS r

Re: Error installing Freeradius

2010-03-08 Thread Alan DeKok
Harshil Anil Kumar Shah wrote: > Yes > In the newer version I did not find CA.all file which I needed . Thats is > why I use Older version See raddb/certs/README This is documented. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Error installing Freeradius

2010-03-08 Thread Harshil Anil Kumar Shah
=infosys@lists.freeradius.org] On Behalf Of Alan DeKok [al...@deployingradius.com] Sent: Tuesday, March 09, 2010 12:07 PM To: FreeRadius users mailing list Subject: Re: Error installing Freeradius Harshil Anil Kumar Shah wrote: > > Hey I am installing freeradius-server-snapshot-20080628

RE: Error installing Freeradius

2010-03-08 Thread Harshil Anil Kumar Shah
: Tuesday, March 09, 2010 12:07 PM To: FreeRadius users mailing list Subject: Re: Error installing Freeradius Harshil Anil Kumar Shah wrote: > > Hey I am installing freeradius-server-snapshot-20080628 Is there any reason you're installing a version that's 2 years old? > and gett

Re: Error installing Freeradius

2010-03-08 Thread Alan DeKok
Harshil Anil Kumar Shah wrote: > > Hey I am installing freeradius-server-snapshot-20080628 Is there any reason you're installing a version that's 2 years old? > and getting following error Install an official release, like 2.1.8. Alan DeKok. - List info/subscri

Error installing Freeradius

2010-03-08 Thread Harshil Anil Kumar Shah
Hey I am installing freeradius-server-snapshot-20080628 and getting following error make[4]: Entering directory `/usr/src/802/radius/freeradius-server-snapshot-20080628/src/main' /usr/src/802/radius/freeradius-server-snapshot-20080628/libtool --mode=link gcc -export-dynamic -dlopen

Re: freeradius for windows error

2010-03-07 Thread Alan Buxey
Hi, > I was wondering if anyone knows if the freeradius version for windows > will run on other windows versions than XP?  It shows XP on the site. > > I am trying to run it on a Windows 2000 box and when running the debug > batch file I get the error: > > //etc/raddb/sql.c

freeradius for windows error

2010-03-06 Thread drycr...@gmail.com
Hi, I was wondering if anyone knows if the freeradius version for windows will run on other windows versions than XP?  It shows XP on the site. I am trying to run it on a Windows 2000 box and when running the debug batch file I get the error: //etc/raddb/sql.conf[143]: Line is not in 'arrt

Re: Autentification error

2010-03-05 Thread Alan Buxey
hi, do not just dump 1.1.x config onto any 2.x system - simply take the 2.x and then edit the config to get what you require. looks like you are forced the authentication type in the SQL tables to be CAHP. dont do that. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/u

Re: Autentification error

2010-03-05 Thread John Dennis
On 03/05/2010 01:18 PM, Tokie wrote: Hi, I'm trying to connect my hotspot to freeradius with the mysql. With the old version(1.1.7) works good! Now I installed newer version and I copied the same configurations in new files (radius.con, site-enabled/default, sql.conf, client.conf ); but don't wor

Autentification error

2010-03-05 Thread Tokie
Hi, I'm trying to connect my hotspot to freeradius with the mysql. With the old version(1.1.7) works good! Now I installed newer version and I copied the same configurations in new files (radius.con, site-enabled/default, sql.conf, client.conf ); but don't works!! Looks the debugging (freeradius -

RE: Dialup admin error

2010-03-03 Thread Michael J Humphries
radiusd: FreeRADIUS Version 1.1.8, for host i686-pc-linux-gnu, built on Mar 3 2010 at 18:01:19 here is the exact error I am getting Warning: import_request_variables() [function.import-request-variables]: Numeric key detected - possible security hazard. in /usr/local/dialup_admin/conf

Re: Dialup admin error

2010-03-02 Thread Steve Bertrand
On 2010.03.02 15:38, Michael J Humphries wrote: > We had to reboot the Radius server and ever since then I am getting the > following error when I try to edit someones account in Dialup admin > > *Warning*: import_request_variables() [function.import-request-variables > <

Dialup admin error

2010-03-02 Thread Michael J Humphries
We had to reboot the Radius server and ever since then I am getting the following error when I try to edit someones account in Dialup admin Warning: import_request_variables() [function.import-request-variables]: Numeric key detected - possible security hazard. in /usr/local/dialup_admin

Re: rlm-ldap error for chap

2010-02-27 Thread Alan DeKok
Eric Eric wrote: > with Cleartext-password or User-Password I have the same error. radius > -x and my configs for chap are here. I searched a lot and test it but > not found why it can't find clear text password. Should I add other > thing? or change another file? Does you

rlm-ldap error for chap

2010-02-27 Thread Eric Eric
with Cleartext-password or User-Password I have the same error. radius -x and my configs for chap are here. I searched a lot and test it but not found why it can't find clear text password. Should I add other thing? or change another file? It worked for pap and I added : in users :  DE

Re: FreeRadius 2.1.3 & SQL error

2010-02-26 Thread Alan Buxey
Hi, > First question, is the only way to get Accounting data from FreeRadius > by using one of the supported databases (like msql)? Is there no way to > just cut records to a text file or, ideally, syslog? the details files - depends how you've configured your server! they would usually lurk in /

FreeRadius 2.1.3 & SQL error

2010-02-26 Thread Mike Diggins
First question, is the only way to get Accounting data from FreeRadius by using one of the supported databases (like msql)? Is there no way to just cut records to a text file or, ideally, syslog? Second question: I inserted the following sql configuration (supplied to me) into sql.conf but when I

Re: rlm-ldap error for chap

2010-02-24 Thread Alan Buxey
Hi, > Now to make matters a touch bit more complicated FreeRADIUS changed how > it accessed the clear text password in its set of attributes. In older > versions of FreeRADIUS it was known as User-Password, but that produced > an unfortunate ambiguity and it was later modified to be > Cleartext

Re: rlm-ldap error for chap

2010-02-24 Thread John Dennis
I owe you an apology, I said not to edit /etc/raddb/ldap.attrmap, but you do. I always forget that the clear text password mapping is not in ldap.attrmap by default, I assume that because of the inherent security risks. By forcing you to add it you'll be forcefully aware of what you've done. He

rlm-ldap error for chap

2010-02-24 Thread Eric Eric
erson objectClass: organizationalPerson objectClass: inetorgperson objectClass: eduperson objectClass: radiusobjectprofile objectClass: radiusprofile sn: test cn: test test userPassword: 123456 vpnProfileDn:... ... --- On Tue, 2/23/10, John Dennis wrote: From: John Dennis Subject: Re: rlm-ldap error for ch

Re: Parse error

2010-02-24 Thread Alan DeKok
Mike Diggins wrote: > > Could someone tell me what the syntax error on the Proxy-To-Realm line > is please? $ man unlang > preacct { > detail > suffix > if ((Proxy-To-Realm = DEFAULT) && (User-Name =~ '=' is not a comparison

Parse error

2010-02-23 Thread Mike Diggins
Could someone tell me what the syntax error on the Proxy-To-Realm line is please? preacct { detail suffix if ((Proxy-To-Realm = DEFAULT) && (User-Name =~ /@.*.domain.tld$/)) update control { Proxy-To-Realm

Re: rlm-ldap error for chap

2010-02-23 Thread John Dennis
On 02/23/2010 05:31 AM, Eric Eric wrote: I changed Cleartext-Password in ldap.attrmap to User-Password Don't do that, that's got nothing to do with finding the user's password in your directory. It's the password_attribute in your ldap config which controls how to find the users password in

Re: rlm-ldap error for chap

2010-02-23 Thread John Dennis
On 02/23/2010 01:32 AM, Eric Eric wrote: Hi I want to change authentication pap to chap. The users with clear passwords are in ldap server. but the is error with clear password in rlm-ldap What version of FreeRADIUS are you running? Normally it's the first thing in the debug output, e

Re: rlm-ldap error for chap

2010-02-23 Thread Eric Eric
Excuse me my reply was incomplete and sent with error. I changed Cleartext-Password in ldap.attrmap to User-Password and now: rlm_ldap: LDAP userPassword mapped to RADIUS User-Password and checked with password_header = "{clear}" and without it. but error is the same as before. ---

rlm-ldap error for chap

2010-02-23 Thread Eric Eric
I changed Cleartext-Password in ldap.attrmap to User-Password and now: rlm_ldap: LDAP userPassword mapped to RADIUS User-Password and checked with password_header = "{clear}" and without it. b --- On Tue, 2/23/10, Fajar A. Nugraha wrote: From: Fajar A. Nugraha Subject: Re: rlm-ldap

Re: rlm-ldap error for chap

2010-02-22 Thread Fajar A. Nugraha
On Tue, Feb 23, 2010 at 1:32 PM, Eric Eric wrote: > > Hi > I want to change authentication pap to chap. The users with clear passwords > are in ldap server. but the is error with clear password in rlm-ldap > rlm_ldap: LDAP userPassword mapped to RADIUS Cleartext-Password i

rlm-ldap error for chap

2010-02-22 Thread Eric Eric
Hi I want to change authentication pap to chap. The users with clear passwords are in ldap server. but the is error with clear password in rlm-ldap radiusd -x Starting - reading configuration files ... Using deprecated naslist file.  Support for this will go away soon. Module: Loaded exec

RE: freeradius install error

2010-02-21 Thread Tim Sylvester
I want to setup AAA server with freeradius, But when I finished the install, and run radiusd -X, error is } Ignoring EAP-Type/tls because we do not have OpenSSL support. Ignoring EAP-Type/ttls because we do not have OpenSSL support. Ignoring EAP-Type/peap because we do not have

Re: error coovachilli , freeradius, yfi hotspot manager

2010-02-16 Thread Fajar A. Nugraha
On Tue, Feb 16, 2010 at 12:17 PM, taufiq rahman wrote: > i just development coovachilli 1.0.14, with freeradius 2.1.8 and frontend > with yfi-beta2 > and i debug the coovachilli >> redir.c: 1023: 98 (Address already in use) IP: 10.1.0.1 Port: 3990 - >> Waiting for retry. Start with that. That u

Re: Error: [sql] database query error

2010-02-11 Thread Josip Rodin
On Thu, Feb 11, 2010 at 11:56:45AM +0700, Fajar A. Nugraha wrote: > On Thu, Feb 11, 2010 at 11:25 AM, Teguh Kurniawan > wrote: > > Table 'radius.radusergroup' > > doesn't exist > > Do you have that table? Perhaps it's a case of not importing the database schema found in /etc/freeradius/sql/...

Re: Error: [sql] database query error

2010-02-10 Thread Fajar A. Nugraha
On Thu, Feb 11, 2010 at 11:25 AM, Teguh Kurniawan wrote: > Table 'radius.radusergroup' > doesn't exist Do you have that table? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Error: [sql] database query error

2010-02-10 Thread Teguh Kurniawan
Hello, I need more advice from all of you about my freeradius 2.10 configuration on ubuntu server 9.10. I've got error message : Thu Feb 11 11:04:57 2010 : Error: [sql] database query error, SELECT groupname FROM radusergroup WHERE username = 'user' OR

RE: Build error: /lib/libpam.so: could not read symbols: File inwrong format

2010-02-04 Thread ZHANG Gina
mailing list Subject: Re: Build error: /lib/libpam.so: could not read symbols: File inwrong format ZHANG Gina wrote: > Alan, > > When I tried to build freeRadius, I got this compile error. > Could you point out how to fix it? Make sure your compiler knows how to pick the corre

Re: Build error: /lib/libpam.so: could not read symbols: File in wrong format

2010-02-04 Thread Alan DeKok
ZHANG Gina wrote: > Alan, > > When I tried to build freeRadius, I got this compile error. > Could you point out how to fix it? Make sure your compiler knows how to pick the correct libraries. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Build error: /lib/libpam.so: could not read symbols: File in wrong format

2010-02-04 Thread ZHANG Gina
Alan, When I tried to build freeRadius, I got this compile error. Could you point out how to fix it? Thanks, Gina - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius install error

2010-02-02 Thread Josip Rodin
On Mon, Feb 01, 2010 at 05:19:34PM +0100, Alan DeKok wrote: > If you've installed a Debian package, read the Wiki for how to install > a debian package with OpenSSL. Hm, http://wiki.freeradius.org/Build#Building_Debian_packages needs to be updated to tell people to run 'dpkg-buildpackage -rfaker

Re: freeradius install error

2010-02-01 Thread Alan DeKok
hongjianli.n...@gmail.com wrote: > I want to setup AAA server with freeradius, But when I finished the > install, and run radiusd -X, > > error is > > } > Ignoring EAP-Type/tls because we do not have OpenSSL support. If you've installed a Debian package, read the

Re: freeradius install error

2010-02-01 Thread John Dennis
On 02/01/2010 09:13 AM, hongjianli.n...@gmail.com wrote: > I want to setup AAA server with freeradius, But when I finished the > install, and run radiusd -X, > error is > } > Ignoring EAP-Type/tls because we do not have OpenSSL support. > Ignoring EAP-Type/ttls because we d

freeradius install error

2010-02-01 Thread hongjianli . nudt
I want to setup AAA server with freeradius, But when I finished the install, and run radiusd -X, error is } Ignoring EAP-Type/tls because we do not have OpenSSL support. Ignoring EAP-Type/ttls because we do not have OpenSSL support. Ignoring EAP-Type/peap because we do not have OpenSSL

Re: winbindd_privileged error?

2010-01-09 Thread Alan Buxey
Hi, > When I look through the logs, I'm getting a winbindd_privileged error. chgrp radiusd /var/cache/samba/winbindd_privileged chmod 750 /var/cache/samba/winbindd_privileged should fix ya. i hate the way the samba post-install changes the permissions after they've been adjuste

Re: ld.so.1: radiusd: fatal: relocation error: file /usr/local/lib/rlm_sql_mysql-2.1.7.so: symbol mysql_next_result: referenced symbol not found

2010-01-08 Thread Alan DeKok
Nereida Bernal wrote: > Hi Alan. > > I've found the library but it is in another path: .. > How can I be sure if the dynamic linker can find it? Read the documentation for your operating system? Configuring a dynamic linker isn't a RADIUS problem. Alan DeKok. - List info/subscribe/unsubsc

Re: ld.so.1: radiusd: fatal: relocation error: file /usr/local/lib/rlm_sql_mysql-2.1.7.so: symbol mysql_next_result: referenced symbol not found

2010-01-08 Thread Nereida Bernal
I be sure if the dynamic linker can find it? Regards. 2010/1/8 Alan DeKok : > Nereida Bernal wrote: >> I am testing my FreeRADIUS configuration using the NTRadPing Test >> Utility, but as soon as I send the user/password to the server I get >> the the error "ld.so.1: r

Re: winbindd_privileged error?

2010-01-08 Thread James J J Hooper
--On 08 January 2010 22:24 + James J J Hooper wrote: --On 08 January 2010 17:14 -0500 freerad...@corwyn.net wrote: I had everything working fine, and now it's not. (I use the ldap module to auth) When I look through the logs, I'm getting a winbindd_privileged error. I&#x

Re: winbindd_privileged error?

2010-01-08 Thread James J J Hooper
--On 08 January 2010 17:14 -0500 freerad...@corwyn.net wrote: I had everything working fine, and now it's not. (I use the ldap module to auth) When I look through the logs, I'm getting a winbindd_privileged error. I've seen that before, where you apply: chgrp radiusd /

winbindd_privileged error?

2010-01-08 Thread freeradius
I had everything working fine, and now it's not. (I use the ldap module to auth) When I look through the logs, I'm getting a winbindd_privileged error. I've seen that before, where you apply: chgrp radiusd /var/cache/samba/winbindd_privileged chmod g+rw /

Re: ld.so.1: radiusd: fatal: relocation error: file /usr/local/lib/rlm_sql_mysql-2.1.7.so: symbol mysql_next_result: referenced symbol not found

2010-01-07 Thread Alan DeKok
Nereida Bernal wrote: > I am testing my FreeRADIUS configuration using the NTRadPing Test > Utility, but as soon as I send the user/password to the server I get > the the error "ld.so.1: radiusd: fatal: relocation error: file > /usr/local/lib/rlm_sql_mysql-2.1.7.so: symbol

ld.so.1: radiusd: fatal: relocation error: file /usr/local/lib/rlm_sql_mysql-2.1.7.so: symbol mysql_next_result: referenced symbol not found

2010-01-07 Thread Nereida Bernal
Hi all! I am testing my FreeRADIUS configuration using the NTRadPing Test Utility, but as soon as I send the user/password to the server I get the the error "ld.so.1: radiusd: fatal: relocation error: file /usr/local/lib/rlm_sql_mysql-2.1.7.so: symbol mysql_next_result: referenced symbo

Re: Strange error log: NAS restarted

2010-01-06 Thread Dinh Pham Cong
Thanks Alan, I have just been confirmed with our telco that one of their GGSN devices would be out of service soon so they blocked the packets coming from our Radius server. Therefore, while they continue to send accounting packets to us, they refuse to receive responses. Regards, Dinh On Wed,

Re: Strange error log: NAS restarted

2010-01-06 Thread Alan DeKok
Dinh Pham Cong wrote: > Thanks, > > I already created a file named radutmp but I still see no message there. > The message "Info: rlm_radutmp: NAS ggsn-add1 restarted (Accounting-On > packet seen)" appears again and again. Does it mean that NAS server > restarted continuously or it is just rlm_rad

Re: Strange error log: NAS restarted

2010-01-05 Thread Dinh Pham Cong
packet seen) > Wed Jan 6 10:54:35 2010 : Error: rlm_radutmp: Error accessing file > /srv/radius/var/log/radius/radutmp: No such file or directory > Wed Jan 6 10:55:35 2010 : Info: rlm_radutmp: NAS ggsn-add1 restarted > (Accounting-On packet seen) > Wed Jan 6 10:55:35 2010 : Error: rl

Re: Strange error log: NAS restarted

2010-01-05 Thread EasyHorpak.com
Dinh Pham Cong wrote: Hi all, I noticed that radius.log is filled with a lot of messages as follows: Wed Jan? 6 10:54:35 2010 : Info: rlm_radutmp: NAS ggsn-add1 restarted (Accounting-On packet seen) Wed Jan? 6 10:54:35 2010 : Error: rlm_radutmp: Error accessing file /srv/radius/var/log

Strange error log: NAS restarted

2010-01-05 Thread Dinh Pham Cong
Hi all, I noticed that radius.log is filled with a lot of messages as follows: Wed Jan 6 10:54:35 2010 : Info: rlm_radutmp: NAS ggsn-add1 restarted (Accounting-On packet seen) Wed Jan 6 10:54:35 2010 : Error: rlm_radutmp: Error accessing file /srv/radius/var/log/radius/radutmp: No such file or

Re: error discarding packet

2009-12-24 Thread Marinko Tarlac
adius-users-bounces+ggatten=waddell@lists.freeradius.org] *On Behalf Of *Alisson *Sent:* Wednesday, December 23, 2009 2:05 PM *To:* FreeRadius users mailing list *Subject:* Re: error discarding packet I run Top -P -H and it showed the threads, only 2 are working 2009/12/23 Gary Gatten

Re: error discarding packet

2009-12-24 Thread Alan DeKok
Gary Gatten wrote: > I missed the start of this thread, but seems some frustration is > building. Q: How do I fix this problem? A: Here's how Q: How do I fix this problem? A: Here's how Q: But it's still not fixed, how do I fix it? A: I understand the frustration of "but it doesn't work".

RE: error discarding packet

2009-12-23 Thread Gary Gatten
mple as possible! Complicated CAN be fun, until it breaks! G From: freeradius-users-bounces+ggatten=waddell@lists.freeradius.org [mailto:freeradius-users-bounces+ggatten=waddell@lists.freeradius.org] On Behalf Of Alisson Sent: Wednesday, December 23, 2009 2:05 PM To: FreeRad

Re: error discarding packet

2009-12-23 Thread Alan DeKok
Alisson wrote: > i'm reading and answering the questions > > i'm following everything that everybody is writing here... No. > my questions is how to configure the pool thread with a good > configuration for 3000 connections, only this. > > my hardware intel core 2 duo 2.56, 2 gb memory > > db

Re: error discarding packet

2009-12-23 Thread Alisson
normally stay on 0.3 / 0.4 and with the top -H show 2 threads from mysql working and the another with 0.0 load 2009/12/23 Alan Buxey > Hi, > > i'm using 15 threads and monitoring on top, the max server load is > 2.0/3.0 > > server load is HOW much? whys it that high - you should look at why thi

Re: error discarding packet

2009-12-23 Thread Alan Buxey
Hi, > i'm using 15 threads and monitoring on top, the max server load is 2.0/3.0 server load is HOW much? whys it that high - you should look at why this is so high - what else is the server doing? is it hitting some disk-bound process? our RADIUS servers never see more than 0.2 load - and they a

Re: error discarding packet

2009-12-23 Thread Alisson
..@lists.freeradius.org[mailto: > freeradius-users-bounces+ggatten = > waddell@lists.freeradius.org] *On Behalf Of *Alisson > *Sent:* Wednesday, December 23, 2009 1:32 PM > > *To:* FreeRadius users mailing list > *Subject:* Re: error discarding packet > > > > i

RE: error discarding packet

2009-12-23 Thread Gary Gatten
reeRadius users mailing list Subject: Re: error discarding packet i'm using 15 threads and monitoring on top, the max server load is 2.0/3.0 2009/12/23 Gary Gatten Isn't there some guidelines in the conf files for these? Generally you want as few threads as possible to service the

Re: error discarding packet

2009-12-23 Thread Alisson
to: > freeradius-users-bounces+ggatten = > waddell@lists.freeradius.org] *On Behalf Of *Alisson > *Sent:* Wednesday, December 23, 2009 1:11 PM > *To:* FreeRadius users mailing list > *Subject:* Re: error discarding packet > > > > you dont understood... i dont make this confi

Re: error discarding packet

2009-12-23 Thread Alisson
i'm reading and answering the questions i'm following everything that everybody is writing here... my questions is how to configure the pool thread with a good configuration for 3000 connections, only this. my hardware intel core 2 duo 2.56, 2 gb memory db mysql 5.0 i'm using this configuratio

RE: error discarding packet

2009-12-23 Thread Gary Gatten
iling list Subject: Re: error discarding packet you dont understood... i dont make this configuration i'm ask for help to do a good configuration based on between 3000 and 35000 conecctions to this function thread pool > thread pool { > start_servers = 1 > max_servers = 1 >

Re: error discarding packet

2009-12-23 Thread Alan DeKok
Alisson wrote: > you dont understood... i dont make this configuration > > i'm ask for help to do a good configuration based on between 3000 and > 35000 conecctions > to this function thread pool You have been given a lot of help. This help has told you how to find out the cause of the problem,

Re: error discarding packet

2009-12-23 Thread Alisson
you dont understood... i dont make this configuration i'm ask for help to do a good configuration based on between 3000 and 35000 conecctions to this function thread pool > thread pool { > start_servers = 1 > max_servers = 1 > min_spare_servers = 1 > max_spare_servers = 1 > max_requests_per_serve

Re: error discarding packet

2009-12-23 Thread Alan DeKok
Alisson wrote: > one last doubt... > > for 3500 customers what is a good configuration in radiusd.conf The default configuration. > for this function > > thread pool { > start_servers = 1 > max_servers = 1 > min_spare_servers = 1 > max_spare_servers = 1 > max_requests_per_server = 0 > } T

Re: error discarding packet

2009-12-23 Thread Alisson
ok, one last doubt... for 3500 customers what is a good configuration in radiusd.conf for this function thread pool { start_servers = 1 max_servers = 1 min_spare_servers = 1 max_spare_servers = 1 max_requests_per_server = 0 } 2009/12/23 Alan Buxey > hi, > > i would say i disagree with yo

Re: error discarding packet

2009-12-23 Thread Alan Buxey
hi, i would say i disagree with your statements - but you wouldnt listen to me if the FR thread is stuck in MySQL land then it cannot answer other requests. hence its slow. disable any modules and calls to functions that you arent using. use other threads for dealing with SQL - and move themn

Re: error discarding packet

2009-12-23 Thread Alisson
> thread pool { > > start_servers = 10 > > max_servers = 32 > > min_spare_servers = 3 > > max_spare_servers = 10 > > max_requests_per_server = 0 > > } > > I have 64 start_servers, 64 max_servers, 64 spare servers - and the > appropriate > values in the perl

Re: error discarding packet

2009-12-23 Thread Alan Buxey
e servers - and the appropriate values in the perl modukle - but, i will say this again - it doesnt matter how many servers you clone and have available - your error message is coming from the SQL being too slow to respond - and if you chuck more servers at it, then it'll get even worse i

Re: error discarding packet

2009-12-23 Thread Alisson
gt;> Лавеле 32, ет: 4, >> София, България >> >> >> >> >> On 23.12.2009, at 15:43, Borislav Dimitrov wrote: >> >> In radiusd.conf: >> >> # THREAD POOL CONFIGURATION >> thread pool { >> start_servers = 1 >> max_servers = 1

Re: error discarding packet

2009-12-23 Thread Borislav Dimitrov
max_spare_servers = 1 max_requests_per_server = 0 } ...but instead of ones (1s) put something more appropriate for your network usage (like 5s or 7s). It's similar to Apache's thread pool settings... Stay monitoring and tuning until the error discarding duplicate packe

Re: error discarding packet

2009-12-23 Thread Alisson
t; thread pool { >> start_servers = 1 >> max_servers = 1 >> min_spare_servers = 1 >> max_spare_servers = 1 >> max_requests_per_server = 0 >> } >> >> ...but instead of ones (1s) put something more appropriate for your >> network usage (like 5s or 7s). It

Re: error discarding packet

2009-12-23 Thread Alisson
s = 1 > min_spare_servers = 1 > max_spare_servers = 1 > max_requests_per_server = 0 > } > > ...but instead of ones (1s) put something more appropriate for your network > usage (like 5s or 7s). It's similar to Apache's thread pool settings... Stay > monitoring and

Re: error discarding packet

2009-12-23 Thread Borislav Dimitrov
vers = 1 max_requests_per_server = 0 } ...but instead of ones (1s) put something more appropriate for your network usage (like 5s or 7s). It's similar to Apache's thread pool settings... Stay monitoring and tuning until the error discarding duplicate packet disappears or bec

Re: error discarding packet

2009-12-23 Thread Borislav Dimitrov
(like 5s or 7s). It's similar to Apache's thread pool settings... Stay monitoring and tuning until the error discarding duplicate packet disappears or becomes very rare. Also look at the Acct-Delay-Time parameter returned from the NAS to FR. It should be 0. If it's more than 0, th

<    4   5   6   7   8   9   10   11   12   13   >