Bug 818885 - possible errors in /etc/raddb/sql/postgresql/admin.sql template
Summary: possible errors in /etc/raddb/sql/postgresql/admin.sql template
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: freeradius2
Version: 5.8
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: rc
: 5.9
Assignee: John Dennis
QA Contact: Patrik Kis
URL:
Whiteboard:
Depends On: 690756
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-05-04 09:34 UTC by Patrik Kis
Modified: 2013-01-08 05:10 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of: 690756
Environment:
Last Closed: 2013-01-08 05:10:39 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2013:0134 0 normal SHIPPED_LIVE Low: freeradius2 security and bug fix update 2013-01-08 09:44:45 UTC

Description Patrik Kis 2012-05-04 09:34:09 UTC
+++ This bug was initially created as a clone of Bug #690756 +++

Description of problem:

There is very probably an error in /etc/raddb/sql/postgresql/admin.sql template.
I think that instead of

GRANT ALL on radius.radacct TO radius;
GRANT ALL on radius.radpostauth TO radius;

should be

GRANT ALL on radacct TO radius;
GRANT ALL on radpostauth TO radius;

I think it came from mysql syntax which is a bit different.

The rest of the template doesn't use "radius." prefix, e.g.
GRANT SELECT ON radcheck TO radius;
GRANT SELECT ON radreply TO radius;
...


Version-Release number of selected component (if applicable):
freeradius-2.1.10-4.el6.i686

--- Additional comment from ksrot on 2011-03-25 06:35:39 EDT ---

To QE: There is a test /CoreOS/freeradius/Sanity/postgresql-auth-test which is using this template (and needs to do mentioned substitution to make it work). Once this bug is fixed it may be probably updated too.

--- Additional comment from dpal on 2011-05-11 12:36:38 EDT ---

Not planning to touch RADIUS till 6.3.

--- Additional comment from dpal on 2011-12-14 17:33:15 EST ---

Ack if we manage to find the case of the problem.

--- Additional comment from ksrot on 2012-02-08 03:32:47 EST ---

qa_ack+ for 6.3. This is easy to test, we already have RHTS test that has to workaround this bug.

--- Additional comment from pm-rhel on 2012-02-08 09:17:18 EST ---

pm_ack+ removed, as it was added to this bug by an error.

We are very sorry for any issues this error could cause.

--- Additional comment from jdennis on 2012-02-08 09:39:27 EST ---

We're updating freeradius in the 6.3 release and there are several issues which will be fixed, so why wouldn't we also fix this? Why was the pm ack removed?

--- Additional comment from errata-xmlrpc on 2012-02-28 16:38:41 EST ---

Bug report changed from MODIFIED to ON_QA status by the Errata System: 
Advisory RHEA-2012:12748-01: 
http://errata.devel.redhat.com/errata/stateview/12748

--- Additional comment from jdennis on 2012-04-24 12:32:19 EDT ---


    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
Cause:

Invalid syntax in postgresql admin schema file.

Consequence:

Creation of the freeradius postgresql tables not successfully completed.

Fix:

Adjust the syntax to match postgresql.

Result:

postgresql freeradius tables created with proper properties.

Comment 1 RHEL Program Management 2012-06-20 13:39:32 UTC
This request was evaluated by Red Hat Product Management for inclusion
in a Red Hat Enterprise Linux release.  Product Management has
requested further review of this request by Red Hat Engineering, for
potential inclusion in a Red Hat Enterprise Linux release for currently
deployed products.  This request is not yet committed for inclusion in
a release.

Comment 6 errata-xmlrpc 2013-01-08 05:10:39 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2013-0134.html


Note You need to log in before you can comment on or make changes to this bug.