OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 18.7 Legacy Series »
  • freeradius bug ?!?
« previous next »
  • Print
Pages: [1]

Author Topic: freeradius bug ?!?  (Read 2128 times)

tja

  • Newbie
  • *
  • Posts: 20
  • Karma: 0
    • View Profile
freeradius bug ?!?
« on: August 13, 2018, 11:51:15 am »
hi,

i still have issues with freeradius.

almost always when i create a freeradius user or modify one i have to restart the firewall.

it seems to me the UI changes conf.xml and forgets to change /usr/local/etc/raddb/mods-config/files/authorize - or the file is locked somehow as changed fields in the UI applied correctly to conf.xml but are unchanged in authorize and radiusd (tested with -X) will use the old values.
restarting the service will only help in rare cases - almost always i have to reboot.

is there some misconfiguration on my end or did i stumble upon a bug ?

wbr,tja...
Logged

mimugmail

  • Hero Member
  • *****
  • Posts: 5168
  • Karma: 361
    • View Profile
Re: freeradius bug ?!?
« Reply #1 on: August 13, 2018, 02:58:44 pm »
User are not placed in this file. Check users in raddb directly
Logged
IRC: mimugmail
Twitter: mimu_muc
WWW: www.routerperformance.net

tja

  • Newbie
  • *
  • Posts: 20
  • Karma: 0
    • View Profile
Re: freeradius bug ?!?
« Reply #2 on: August 13, 2018, 05:05:34 pm »
Quote from: mimugmail on August 13, 2018, 02:58:44 pm
User are not placed in this file. Check users in raddb directly

hi mimugmail,

you mean users in /usr/local/etc/raddb ?
Code: [Select]
lrwxr-x---  1 freeradius  freeradius  29 May 17 12:45 /usr/local/etc/raddb/users -> ./mods-config/files/authorize

wbr,tja...
Logged

mimugmail

  • Hero Member
  • *****
  • Posts: 5168
  • Karma: 361
    • View Profile
Re: freeradius bug ?!?
« Reply #3 on: August 13, 2018, 05:42:43 pm »
I'm not on a computer right now, mit sure If this should really be a link
Logged
IRC: mimugmail
Twitter: mimu_muc
WWW: www.routerperformance.net

fabian

  • Hero Member
  • *****
  • Posts: 2438
  • Karma: 171
  • OPNsense Contributor (Language, VPN, Proxy, etc.)
    • View Profile
    • Personal Homepage
Re: freeradius bug ?!?
« Reply #4 on: August 13, 2018, 05:57:06 pm »
did you apply the changes?
Logged

tja

  • Newbie
  • *
  • Posts: 20
  • Karma: 0
    • View Profile
Re: freeradius bug ?!?
« Reply #5 on: August 13, 2018, 06:12:25 pm »
test:

1. renamed authorize - radiusd would not start
2. changed data in the UI for freeradius users - authorize appeared again now with the correct data - radiusd started with the correct data

so i'm guessing that authorize is indeed the place where users really are stored and config.xml AND authorize should be written on changes to the UI - but sometimes this is prevented (via a file lock ?!?)

wbr,tja...
Logged

rantwolf

  • Full Member
  • ***
  • Posts: 113
  • Karma: 5
    • View Profile
Re: freeradius bug ?!?
« Reply #6 on: August 13, 2018, 10:55:31 pm »
Today I got the same issue.
Created new user > nothing works.

After a while I noticed that my mouse got a failure.

The "apply" button was not clicked  :o ::)
Logged

tja

  • Newbie
  • *
  • Posts: 20
  • Karma: 0
    • View Profile
Re: freeradius bug ?!?
« Reply #7 on: August 20, 2018, 08:46:03 am »
Quote from: mimugmail on August 13, 2018, 05:42:43 pm
I'm not on a computer right now, mit sure If this should really be a link

hi mimugmail,


could you check on your end ?


wbr,tja...
Logged

tja

  • Newbie
  • *
  • Posts: 20
  • Karma: 0
    • View Profile
Re: freeradius bug ?!?
« Reply #8 on: August 20, 2018, 08:46:51 am »
Quote from: fabian on August 13, 2018, 05:57:06 pm
did you apply the changes?

hi fabian,


ähh - which changes ?


wbr,tja...
Logged

mimugmail

  • Hero Member
  • *****
  • Posts: 5168
  • Karma: 361
    • View Profile
Re: freeradius bug ?!?
« Reply #9 on: August 20, 2018, 10:49:25 am »
Sorry, I cannot reproduce. Do you have "Enabled" in "General" ticked? The authorize file will be empty when the service isn't enabled.
Logged
IRC: mimugmail
Twitter: mimu_muc
WWW: www.routerperformance.net

tja

  • Newbie
  • *
  • Posts: 20
  • Karma: 0
    • View Profile
Re: freeradius bug ?!?
« Reply #10 on: August 20, 2018, 11:14:42 am »
Quote from: mimugmail on August 20, 2018, 10:49:25 am
Sorry, I cannot reproduce. Do you have "Enabled" in "General" ticked? The authorize file will be empty when the service isn't enabled.
hi mimugmail,


thats not the issue. maybe i stated the problem poorly:

problem:
creating or updating users in freeradius seldom works without restarting the machine.

steps to reproduce:
  • create or change a user in freeradius UI
  • try to use the created/modified user f.e. login or login with changed VLAN ID - FAILS (new user doesnt work or changed data is not reflected at login)
  • check config.xml - created / changed  is correctly stored
  • check users aka authorize - created / changed  is NOT correctly stored

i tried this very moment - created a new user but the new user is not stored in raddb/users.

you wrote that you are usure if users is a link to mod-config/files/authorize - is this correct ?


wbr,tja...
Logged

mimugmail

  • Hero Member
  • *****
  • Posts: 5168
  • Karma: 361
    • View Profile
Re: freeradius bug ?!?
« Reply #11 on: August 20, 2018, 01:35:59 pm »
The linked version is correct. Sorry .. still cannot reproduce, I created a new user:

root@OPN164:~/plugins/dns/bind # cat /usr/local/etc/raddb/users

test1  Cleartext-Password := "eeeeeeeeeee"
       Framed-Protocol = PPP

and then added VLAN4 to it:

test1  Cleartext-Password := "eeeeeeeeeee"
       Tunnel-Type = VLAN,
       Tunnel-Medium-Type = IEEE-802,
       Tunnel-Private-Group-Id = 4,
       Framed-Protocol = PPP
Logged
IRC: mimugmail
Twitter: mimu_muc
WWW: www.routerperformance.net

tja

  • Newbie
  • *
  • Posts: 20
  • Karma: 0
    • View Profile
Re: freeradius bug ?!?
« Reply #12 on: August 21, 2018, 09:04:07 am »
Quote from: mimugmail on August 20, 2018, 01:35:59 pm
The linked version is correct. Sorry .. still cannot reproduce, I created a new user:
...

hmm, i will reinstall the machine asap - hopefully the problem wont come up again.

thx for you patience.
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 18.7 Legacy Series »
  • freeradius bug ?!?
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2021 All rights reserved
  • SMF 2.0.17 | SMF © 2019, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2