How to configure free radius to support the radius attributes that would<br>contain the information for Client IP Address, Session-ID, Tunnel-ID :<br><br>Tunnel-Client-Endpoint,<br>Acct-Tunnel-Connection,<br>Tunnel-Assignment-Id.<br>
<br>Do i need to change sql.conf file?<br><br>Please help me in this!<br><br>Thanks,<br>Ramesh.<br><br><br>
<div><span class="gmail_quote">On 7/24/08, <b class="gmail_sendername"><a href="mailto:freeradius-devel-request@lists.freeradius.org">freeradius-devel-request@lists.freeradius.org</a></b> <<a href="mailto:freeradius-devel-request@lists.freeradius.org">freeradius-devel-request@lists.freeradius.org</a>> wrote:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">Send Freeradius-Devel mailing list submissions to<br> <a href="mailto:freeradius-devel@lists.freeradius.org">freeradius-devel@lists.freeradius.org</a><br>
<br>To subscribe or unsubscribe via the World Wide Web, visit<br> <a href="http://lists.freeradius.org/mailman/listinfo/freeradius-devel">http://lists.freeradius.org/mailman/listinfo/freeradius-devel</a><br>or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:freeradius-devel-request@lists.freeradius.org">freeradius-devel-request@lists.freeradius.org</a><br><br>You can reach the person managing the list at<br> <a href="mailto:freeradius-devel-owner@lists.freeradius.org">freeradius-devel-owner@lists.freeradius.org</a><br>
<br>When replying, please edit your Subject line so it is more specific<br>than "Re: Contents of Freeradius-Devel digest..."<br><br><br>Today's Topics:<br><br> 1. attr_filter and accounting packets (Stefan Winter)<br>
2. Re: attr_filter and accounting packets (Alan DeKok)<br> 3. does anyone have a "fast reauth(session resumption)" patch???<br> (Cristian Novac)<br> 4. Does anyone have a "fast reauth(session resumption)" patch<br>
for freeradius server??? (Cristian Novac)<br> 5. Re: Freeradius-Devel Digest, Vol 39, Issue 18 (ramesh p)<br><br><br>----------------------------------------------------------------------<br><br>Message: 1<br>
Date: Wed, 23 Jul 2008 14:01:58 +0200<br>From: Stefan Winter <<a href="mailto:stefan.winter@restena.lu">stefan.winter@restena.lu</a>><br>Subject: attr_filter and accounting packets<br>To: <a href="mailto:freeradius-devel@lists.freeradius.org">freeradius-devel@lists.freeradius.org</a><br>
Message-ID: <<a href="mailto:48871DB6.4080000@restena.lu">48871DB6.4080000@restena.lu</a>><br>Content-Type: text/plain; charset=ISO-8859-15; format=flowed<br><br>Hello,<br><br>apparently, the behaviour of rlm_attr_filter changed from 1.1.7 to<br>
<a href="http://2.0.5.">2.0.5.</a> In 1.1.7, the pre_proxy function of attr_filter only filtered<br>authentication requests, the relevant lines in rlm_attr_filter.c being<br><br> if (request->packet->code != PW_AUTHENTICATION_REQUEST) {<br>
return (RLM_MODULE_NOOP);<br> }<br><br><br>That way, it could safely be used in the pre-proxy section to white-list<br>attributes in authentication requests, but give away the accounting info<br>unconditionally to a home server.<br>
<br>In 2.0.5, the preproxy function only executes the "common" filtering<br>functions:<br><br>static int attr_filter_preproxy(void *instance, REQUEST *request)<br>{<br> return attr_filter_common(instance, request, &request->proxy->vps);<br>
}<br><br>which in turn works on auth and acct packets.<br><br>Was this intentional? Then the default attrs.pre-proxy should contain at<br>least the basic accounting-specific attribute like Acct-Status-Type -<br>otherwise, the module will by default cripple every accounting request<br>
to uselessness. But actually, my preferred way of resolving this would<br>be to let accounting packets untouched...<br><br>Greetings,<br><br>Stefan Winter<br><br>--<br>Stefan WINTER<br>Ingenieur de Recherche<br>Fondation RESTENA - R?seau T?l?informatique de l'Education Nationale et de la Recherche<br>
6, rue Richard Coudenhove-Kalergi<br>L-1359 Luxembourg<br><br>Tel: +352 424409 1<br>Fax: +352 422473<br><br><br><br>------------------------------<br><br>Message: 2<br>Date: Wed, 23 Jul 2008 15:02:26 +0200<br>From: Alan DeKok <<a href="mailto:aland@deployingradius.com">aland@deployingradius.com</a>><br>
Subject: Re: attr_filter and accounting packets<br>To: FreeRadius developers mailing list<br> <<a href="mailto:freeradius-devel@lists.freeradius.org">freeradius-devel@lists.freeradius.org</a>><br>Message-ID: <<a href="mailto:48872BE2.3090202@deployingradius.com">48872BE2.3090202@deployingradius.com</a>><br>
Content-Type: text/plain; charset=ISO-8859-15<br><br>Stefan Winter wrote:<br>> That way, it could safely be used in the pre-proxy section to white-list<br>> attributes in authentication requests, but give away the accounting info<br>
> unconditionally to a home server.<br><br>This can still be done:<br><br>pre-proxy {<br> ...<br> if (Packet-Type != Accounting-Request) {<br> attr_filter_preproxy<br> }<br> ...<br>
}<br><br>> Was this intentional?<br><br>Yes. The previous behavior made it *impossible* to do filtering on<br>accounting packets in preproxy.<br><br>> Then the default attrs.pre-proxy should contain at<br>> least the basic accounting-specific attribute like Acct-Status-Type -<br>
> otherwise, the module will by default cripple every accounting request<br>> to uselessness.<br><br>That's probably true, too...<br><br>> But actually, my preferred way of resolving this would<br>> be to let accounting packets untouched...<br>
<br>Welcome to the power of "unlang". :)<br><br>Alan DeKok.<br><br><br>------------------------------<br><br>Message: 3<br>Date: Wed, 23 Jul 2008 15:59:51 +0300<br>From: Cristian Novac <<a href="mailto:Cristian.Novac@alcatel-lucent.ro">Cristian.Novac@alcatel-lucent.ro</a>><br>
Subject: does anyone have a "fast reauth(session resumption)" patch???<br>To: <a href="mailto:freeradius-devel@lists.freeradius.org">freeradius-devel@lists.freeradius.org</a>,<br> <a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a><br>
Message-ID: <<a href="mailto:48872B47.5010106@alcatel-lucent.ro">48872B47.5010106@alcatel-lucent.ro</a>><br>Content-Type: text/plain; charset=ISO-8859-1; format=flowed<br><br>Thank you !<br>Cristian NOVAC<br><br><br>
------------------------------<br><br>Message: 4<br>Date: Wed, 23 Jul 2008 16:45:42 +0300<br>From: Cristian Novac <<a href="mailto:Cristian.Novac@alcatel-lucent.ro">Cristian.Novac@alcatel-lucent.ro</a>><br>Subject: Does anyone have a "fast reauth(session resumption)" patch<br>
for freeradius server???<br>To: FreeRadius users mailing list<br> <<a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a>>, FreeRadius developers mailing<br>
list <<a href="mailto:freeradius-devel@lists.freeradius.org">freeradius-devel@lists.freeradius.org</a>><br>Message-ID: <<a href="mailto:48873606.3040705@alcatel-lucent.ro">48873606.3040705@alcatel-lucent.ro</a>><br>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed<br><br>Thank you!!!<br>Cristian Novac.<br><br><br>------------------------------<br><br>Message: 5<br>Date: Thu, 24 Jul 2008 13:53:17 +0530<br>From: "ramesh p" <<a href="mailto:rock786143@gmail.com">rock786143@gmail.com</a>><br>
Subject: Re: Freeradius-Devel Digest, Vol 39, Issue 18<br>To: <a href="mailto:freeradius-devel@lists.freeradius.org">freeradius-devel@lists.freeradius.org</a><br>Message-ID:<br> <<a href="mailto:6b6aa6710807240123gca3dffau3a2993ac572506f6@mail.gmail.com">6b6aa6710807240123gca3dffau3a2993ac572506f6@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="iso-8859-1"<br><br><<a href="mailto:freeradius-devel@lists.freeradius.org">freeradius-devel@lists.freeradius.org</a>>Hi,<br><br>How to configure free radius to support the radius attributes that would<br>
contain the information for Client IP Address, Session-ID, Tunnel-ID :<br><br>Tunnel-Client-Endpoint,<br>Acct-Tunnel-Connection,<br>Tunnel-Assignment-Id.<br><br>Do i need to change sql.conf file?<br><br>Please help me in this!<br>
<br>Thanks,<br>Ramesh.<br><br>On Wed, Jul 23, 2008 at 3:30 PM, <<br><a href="mailto:freeradius-devel-request@lists.freeradius.org">freeradius-devel-request@lists.freeradius.org</a>> wrote:<br><br>> Send Freeradius-Devel mailing list submissions to<br>
> <a href="mailto:freeradius-devel@lists.freeradius.org">freeradius-devel@lists.freeradius.org</a><br>><br>> To subscribe or unsubscribe via the World Wide Web, visit<br>> <a href="http://lists.freeradius.org/mailman/listinfo/freeradius-devel">http://lists.freeradius.org/mailman/listinfo/freeradius-devel</a><br>
> or, via email, send a message with subject or body 'help' to<br>> <a href="mailto:freeradius-devel-request@lists.freeradius.org">freeradius-devel-request@lists.freeradius.org</a><br>><br>> You can reach the person managing the list at<br>
> <a href="mailto:freeradius-devel-owner@lists.freeradius.org">freeradius-devel-owner@lists.freeradius.org</a><br>><br>> When replying, please edit your Subject line so it is more specific<br>> than "Re: Contents of Freeradius-Devel digest..."<br>
><br>><br>> Today's Topics:<br>><br>> 1. GIT Log for 2008-07-22 23:33 GMT (aland)<br>> 2. Critical bug in rlm_eap/mem.c (???)<br>> 3. bug in rlm_eap/mem.c (???)<br>> 4. Re: bug in rlm_eap/mem.c (Alan DeKok)<br>
> 5. help (ramesh p)<br>><br>><br>> ----------------------------------------------------------------------<br>><br>> Message: 1<br>> Date: Wed, 23 Jul 2008 01:33:02 +0200 (CEST)<br>> From: <a href="mailto:aland@deployingradius.com">aland@deployingradius.com</a> (aland)<br>
> Subject: GIT Log for 2008-07-22 23:33 GMT<br>> To: <<a href="mailto:freeradius-devel@lists.freeradius.org">freeradius-devel@lists.freeradius.org</a>><br>> Message-ID: <<a href="mailto:20080722233302.296E31234235@liberty.deployingradius.com">20080722233302.296E31234235@liberty.deployingradius.com</a>><br>
><br>> commit df40e592710c1553bfb5873d06f0455b93e6db56<br>> Author: Alan T. DeKok <<a href="mailto:aland@freeradius.org">aland@freeradius.org</a>><br>> Date: Tue Jul 22 21:54:11 2008 +0200<br>><br>> Fixed typos<br>
> raddb/sql/mysql/schema.sql | 4 ++--<br>> 1 files changed, 2 insertions(+), 2 deletions(-)<br>><br>><br>> ------------------------------<br>><br>> Message: 2<br>> Date: Wed, 23 Jul 2008 10:57:00 +0900<br>
> From: ??? <<a href="mailto:syyang@unet.kr">syyang@unet.kr</a>><br>> Subject: Critical bug in rlm_eap/mem.c<br>> To: <<a href="mailto:freeradius-devel@lists.freeradius.org">freeradius-devel@lists.freeradius.org</a>><br>
> Message-ID: <003d01c8ec67$656abde0$304039a0$@kr><br>> Content-Type: text/plain; charset="ks_c_5601-1987"<br>><br>> The following is a patch for bug in mem.c<br>><br>> In some condition bug in mem.c leads to a memory leak and crash<br>
><br>><br>><br>> *** mem.c 2008-02-10 04:18:10.000000000 -0500<br>><br>> --- mem.c.patch 2008-07-19 20:04:35.000000000 -0400<br>><br>> ***************<br>><br>> *** 390,395 ****<br>><br>
> --- 390,396 ----<br>><br>> handler->next->prev = NULL;<br>><br>> } else {<br>><br>> inst->session_head = NULL;<br>
><br>> + inst->session_tail = NULL;<br>><br>> }<br>><br>> eap_handler_free(handler);<br>><br>> }<br>><br>
> -------------- next part --------------<br>> An HTML attachment was scrubbed...<br>> URL: <<br>> <a href="https://lists.freeradius.org/pipermail/freeradius-devel/attachments/20080723/45ddc7e4/attachment-0001.html">https://lists.freeradius.org/pipermail/freeradius-devel/attachments/20080723/45ddc7e4/attachment-0001.html</a><br>
> ><br>><br>> ------------------------------<br>><br>> Message: 3<br>> Date: Wed, 23 Jul 2008 11:03:41 +0900<br>> From: ??? <<a href="mailto:syyang@unet.kr">syyang@unet.kr</a>><br>> Subject: bug in rlm_eap/mem.c<br>
> To: <<a href="mailto:freeradius-devel@lists.freeradius.org">freeradius-devel@lists.freeradius.org</a>><br>> Message-ID: <004201c8ec68$5439fee0$fcadfca0$@kr><br>> Content-Type: text/plain; charset="UTF-8"<br>
><br>><br>> The following is a patch for bug in mem.c (2.0.5 version)<br>> In some condition bug in mem.c leads to a memory leak and crash<br>><br>> *** mem.c 2008-02-10 04:18:10.000000000 -0500<br>
> --- mem.c.patch 2008-07-19 20:04:35.000000000 -0400<br>> ***************<br>> *** 390,395 ****<br>> --- 390,396 ----<br>> handler->next->prev = NULL;<br>> } else {<br>
> inst->session_head = NULL;<br>> + inst->session_tail = NULL;<br>> }<br>> eap_handler_free(handler);<br>
> }<br>><br>><br>><br>> ------------------------------<br>><br>> Message: 4<br>> Date: Wed, 23 Jul 2008 08:47:09 +0200<br>> From: Alan DeKok <<a href="mailto:aland@deployingradius.com">aland@deployingradius.com</a>><br>
> Subject: Re: bug in rlm_eap/mem.c<br>> To: FreeRadius developers mailing list<br>> <<a href="mailto:freeradius-devel@lists.freeradius.org">freeradius-devel@lists.freeradius.org</a>><br>> Message-ID: <<a href="mailto:4886D3ED.2010501@deployingradius.com">4886D3ED.2010501@deployingradius.com</a>><br>
> Content-Type: text/plain; charset=UTF-8<br>><br>> ??? wrote:<br>> > The following is a patch for bug in mem.c (2.0.5 version)<br>> > In some condition bug in mem.c leads to a memory leak and crash<br>
><br>> Fixed, thanks.<br>><br>> Alan DeKok.<br>><br>><br>> ------------------------------<br>><br>> Message: 5<br>> Date: Wed, 23 Jul 2008 14:53:53 +0530<br>> From: "ramesh p" <<a href="mailto:rock786143@gmail.com">rock786143@gmail.com</a>><br>
> Subject: help<br>> To: <a href="mailto:freeradius-devel@lists.freeradius.org">freeradius-devel@lists.freeradius.org</a><br>> Message-ID:<br>> <<a href="mailto:6b6aa6710807230223u1cab6cfep6a4cc44c6a3c483e@mail.gmail.com">6b6aa6710807230223u1cab6cfep6a4cc44c6a3c483e@mail.gmail.com</a>><br>
> Content-Type: text/plain; charset="iso-8859-1"<br>><br>> Hi,<br>><br>> How to configure free radius to support the radius attributes that would<br>> contain the information for Client IP Address, Session-ID, Tunnel-ID :<br>
><br>> Tunnel-Client-Endpoint,<br>> Acct-Tunnel-Connection,<br>> Tunnel-Assignment-Id.<br>><br>> Do i need to change sql.conf file?<br>><br>> Please help me in this!<br>><br>> Thanks,<br>> Ramesh.<br>
> -------------- next part --------------<br>> An HTML attachment was scrubbed...<br>> URL: <<br>> <a href="https://lists.freeradius.org/pipermail/freeradius-devel/attachments/20080723/b64d0261/attachment-0001.html">https://lists.freeradius.org/pipermail/freeradius-devel/attachments/20080723/b64d0261/attachment-0001.html</a><br>
> ><br>><br>> ------------------------------<br>><br>> -<br>> List info/subscribe/unsubscribe? See<br>> <a href="http://www.freeradius.org/list/devel.html">http://www.freeradius.org/list/devel.html</a><br>
><br>><br>> End of Freeradius-Devel Digest, Vol 39, Issue 18<br>> ************************************************<br>><br>-------------- next part --------------<br>An HTML attachment was scrubbed...<br>URL: <<a href="https://lists.freeradius.org/pipermail/freeradius-devel/attachments/20080724/993f7e6b/attachment.html">https://lists.freeradius.org/pipermail/freeradius-devel/attachments/20080724/993f7e6b/attachment.html</a>><br>
<br>------------------------------<br><br>-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/devel.html">http://www.freeradius.org/list/devel.html</a><br><br><br>End of Freeradius-Devel Digest, Vol 39, Issue 19<br>
************************************************<br></blockquote></div><br>