Page MenuHomeVyOS Platform

IPoE server with RADIUS authentication does not verify radius configuration
Closed, ResolvedPublicBUG

Description

For a configuration with authentication mode "radius" it is necessary to specify the radius server

set service ipoe-server authentication mode 'radius'
set service ipoe-server client-ip-pool name POOL1 gateway-address '192.0.2.1'
set service ipoe-server client-ip-pool name POOL1 subnet '192.0.2.0/24'
set service ipoe-server interface eth1 vlan '2000-3000'

commit:

Traceback (most recent call last):
  File "/usr/libexec/vyos/conf_mode/service_ipoe-server.py", line 99, in <module>
    generate(c)
  File "/usr/libexec/vyos/conf_mode/service_ipoe-server.py", line 75, in generate
    render(ipoe_conf, 'accel-ppp/ipoe.config.j2', ipoe)
  File "/usr/lib/python3/dist-packages/vyos/template.py", line 141, in render
    rendered = render_to_string(template, content, formater, location)
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/vyos/template.py", line 110, in render_to_string
    rendered = template.render(content)
               ^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3/dist-packages/jinja2/environment.py", line 1301, in render
    self.environment.handle_exception()
  File "/usr/lib/python3/dist-packages/jinja2/environment.py", line 936, in handle_exception
    raise rewrite_traceback_stack(source=source)
  File "/usr/share/vyos/templates/accel-ppp/ipoe.config.j2", line 78, in top-level template code
    {% include 'accel-ppp/config_chap_secrets_radius.j2' %}
    ^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/share/vyos/templates/accel-ppp/config_chap_secrets_radius.j2", line 7, in top-level template code
    {%     for server, options in authentication.radius.server.items() if not options.disable is vyos_defined %}
    ^^^^^^^^^^^^^^^^^^^^^^^^^
jinja2.exceptions.UndefinedError: 'dict object' has no attribute 'server'



[[service ipoe-server]] failed
Commit failed
[edit]
vyos@r14#

It is requires set service ipoe-server authentication radius xxx options

Details

Difficulty level
Easy (less than an hour)
Version
VyOS 1.4-rolling-202303120743
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Unspecified (please specify)

Event Timeline

Viacheslav renamed this task from IPoE server with RARIUS authentication does not check radius configuration to IPoE server with RADIUS authentication does not check radius configuration.Mar 16 2023, 11:13 AM
Viacheslav renamed this task from IPoE server with RADIUS authentication does not check radius configuration to IPoE server with RADIUS authentication does not verify radius configuration.Mar 17 2023, 1:47 AM
Viacheslav moved this task from Need Triage to Finished on the VyOS 1.4 Sagitta board.