Project

General

Profile

Actions

Bug #12742

open

freeRADIUS virtual-server-default: modules dailycounter, monthlycounter, noresetcounter, expire_on_login in authorize section prevent virtual server from loading

Added by Christopher Cope 5 months ago. Updated 4 months ago.

Status:
Feedback
Priority:
Normal
Assignee:
-
Category:
FreeRADIUS
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Affected Version:
Affected Plus Version:
Affected Architecture:

Description

This seems to be along the same line as this older bug https://redmine.pfsense.org/issues/10197

Creating a freeRADIUS server with SQL Authorization, but not SQL Accounting generates the following virtual-server-default and the service won't start.

authorize {
#    filter_username
#    filter_password
    preprocess
#    operator-name
#    cui
##### AUTHORIZE FOR PLAIN MAC-AUTH IS DISABLED #####
#    auth_log
    chap
    mschap
    digest
#    wimax
#    IPASS
    suffix
    ntdomain
    eap {
        ok = return
#        updated = return
    }
#    unix
    files
    if ((notfound || noop) && ("%{%{Control:Auth-Type}:-No-Accept}" != "Accept")) {

    redundant sql {
        sql1
        ### sql2 DISABLED ###
    }
    if (notfound || noop) {

            ### ldap ###
            if (notfound || noop) {
                reject
            }
        }
    }

    dailycounter
    monthlycounter
    noresetcounter
    expire_on_login

    # Formerly checkval
    if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
        ok
    }
    expiration
    logintime
    pap
    Autz-Type Status-Server {

    }
}

manually changing to

authorize {
...

    -dailycounter
    -monthlycounter
    -noresetcounter
    -expire_on_login

    # Formerly checkval
....
}

or enabling Accounting results in freeRADIUS working. I think a similar fix to the one in the other issue is needed here as well.


Related issues

Related to Bug #10197: freeRADIUS virtual-server-default: modules daily, weekly, monthly, forever in authorize section prevent virtual server from loadingResolvedRenato Botelho01/22/2020

Actions
Actions

Also available in: Atom PDF