http://bugzilla.novell.com/show_bug.cgi?id=508093 User nice@titanic.nyme.hu added comment http://bugzilla.novell.com/show_bug.cgi?id=508093#c1 Tamás Németh changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P1 - Urgent --- Comment #1 from Tamás Németh 2009-06-09 00:41:17 MDT --- Unlang evaluation logic is even worse than I thought before. Sometimes it's even unable to evaluate compound logic expression consisting of only two expressions. It may be urgent to upgrade to at least 2.1.4, but you should keep your eyes on every new upstream release, since I found this bug (or feature) for example: https://lists.freeradius.org/pipermail/freeradius-devel/2009-June/013140.htm... -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=508093 User puzel@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=508093#c2 Petr Uzel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |nice@titanic.nyme.hu --- Comment #2 from Petr Uzel 2009-06-30 08:44:19 MDT --- Tamás, thanks for the report. I think the version update is not an option for 11.1. But if I'm not mistaken, the patch from [1] should solve the bug. If I manage to backport it to 2.1.1, would you be so kind to test it in your environment to see if it really fixes the issue? [1] http://github.com/alandekok/freeradius-server/commit/2444f601448f816f5c9fe96... -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=508093 User puzel@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=508093#c4 Petr Uzel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |nice@titanic.nyme.hu --- Comment #4 from Petr Uzel 2009-07-03 07:02:03 MDT --- (In reply to comment #3)

No, sorry, I don't have the time to do that, because I still use openSUSE 10.3 on my production radius servers. So, if you'd like me to test if that patch solves the problem, please apply it to the package, which can be found here:

http://download.opensuse.org/repositories/network:/aaa/openSUSE_10.3

The packages are here: http://download.opensuse.org/repositories/home:/puzel:/branches:/network:/aa... Thanks in advance for testing it! -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=508093 User puzel@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=508093#c6 --- Comment #6 from Petr Uzel 2009-07-03 12:48:17 MDT --- (In reply to comment #5)

I ask you to wait until 13th July, because I'll start a one week holiday in a few minutes, and I don't want the production servers to be in an experimental state for the next week.

Sure. Enjoy your holiday. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=508093 User puzel@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=508093#c8 Petr Uzel changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium --- Comment #8 from Petr Uzel 2009-07-27 02:09:42 MDT --- Tamás: did you manage to test whether the fix from comment #4 fixes the issue? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=508093 User nice@titanic.nyme.hu added comment http://bugzilla.novell.com/show_bug.cgi?id=508093#c10 --- Comment #10 from Tamás Németh 2009-08-04 05:07:04 MDT --- Comparison of the three versions: ############################################################ 2.1.1-6.21: ++++? if ("%{control:Tmp-String-0}" == "%{ldap:ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=*))}" && "%{control:Tmp-String-0}" != "%{ldap:ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=%{request:Calling-Station-Id}))}" ) expand: %{control:Tmp-String-0} -> nice rlm_ldap: - ldap_xlat expand: ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=*)) -> ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=nice)(radiusCallingStationId=*)) rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: performing search in ou=People,ou=sopron,o=nyme,dc=hu, with filter (&(cn=nice)(radiusCallingStationId=*)) rlm_ldap: object not found or got ambiguous search result rlm_ldap: Search returned not found rlm_ldap: ldap_release_conn: Release Id: 0 expand: %{ldap:ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=*))} -> ? Evaluating ("%{control:Tmp-String-0}" == "%{ldap:ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=*))}" ) -> FALSE Skipping ("%{control:Tmp-String-0}" != "%{ldap:ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=%{request:Calling-Station-Id}))}" ) ++++? if ("%{control:Tmp-String-0}" == "%{ldap:ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=*))}" && "%{control:Tmp-String-0}" != "%{ldap:ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=%{request:Calling-Station-Id}))}" ) -> TRUE ############################################################ 2.1.1-7.3: ++++? if ("%{control:Tmp-String-0}" == "%{ldap:ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=*))}" && "%{control:Tmp-String-0}" != "%{ldap:ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=%{request:Calling-Station-Id}))}" ) expand: %{control:Tmp-String-0} -> nice rlm_ldap: - ldap_xlat expand: ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=*)) -> ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=nice)(radiusCallingStationId=*)) rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: performing search in ou=People,ou=sopron,o=nyme,dc=hu, with filter (&(cn=nice)(radiusCallingStationId=*)) rlm_ldap: object not found or got ambiguous search result rlm_ldap: Search returned not found rlm_ldap: ldap_release_conn: Release Id: 0 expand: %{ldap:ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=*))} -> ? Evaluating ("%{control:Tmp-String-0}" == "%{ldap:ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=*))}" ) -> FALSE Skipping ("%{control:Tmp-String-0}" != "%{ldap:ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=%{request:Calling-Station-Id}))}" ) ++++? if ("%{control:Tmp-String-0}" == "%{ldap:ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=*))}" && "%{control:Tmp-String-0}" != "%{ldap:ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=%{request:Calling-Station-Id}))}" ) -> TRUE ############################################################ 2.1.6-1.0: ++++? if ("%{control:Tmp-String-0}" == "%{ldap:ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=*))}" && "%{control:Tmp-String-0}" != "%{ldap:ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=%{request:Calling-Station-Id}))}" ) expand: %{control:Tmp-String-0} -> nice rlm_ldap: - ldap_xlat expand: ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=*)) -> ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=nice)(radiusCallingStationId=*)) rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: performing search in ou=People,ou=sopron,o=nyme,dc=hu, with filter (&(cn=nice)(radiusCallingStationId=*)) rlm_ldap: object not found rlm_ldap: Search returned not found rlm_ldap: ldap_release_conn: Release Id: 0 expand: %{ldap:ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=*))} -> ? Evaluating ("%{control:Tmp-String-0}" == "%{ldap:ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=*))}" ) -> FALSE ? Skipping ("%{control:Tmp-String-0}" != "%{ldap:ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=%{request:Calling-Station-Id}))}" ) ++++? if ("%{control:Tmp-String-0}" == "%{ldap:ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=*))}" && "%{control:Tmp-String-0}" != "%{ldap:ldap:///ou=People,ou=sopron,o=nyme,dc=hu?cn?sub?(&(cn=%{control:Tmp-String-0})(radiusCallingStationId=%{request:Calling-Station-Id}))}" ) -> FALSE ############################################################ -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=508093 https://bugzilla.novell.com/show_bug.cgi?id=508093#c12 Petr Uzel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |WONTFIX --- Comment #12 from Petr Uzel 2011-01-31 12:53:15 UTC --- 11.1 is out of maintenance now. I'm sorry I did not manage to fix this, but apparently there is not enough resources on our side. Please reopen if you can reproduce with some of the supported versions (11.2-11.4). Thanks for your understanding. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.