October 2005 - Freeradius-Devel - lists.freeradius.org

Automatic report from sources (radiusd) between 15.10.2005 - 16.10.2005 GMT
by Automatic cvs log generator 16 Oct '05

16 Oct '05

CVS log entries from 15.10.2005 (Sat) 08:00:00 - 16.10.2005 (Sun) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: mgriego File: radiusd/src/main/client.c; Revisions: 1.46 ===================================================== Log entries ===================================================== Description: Added htonl wrapper around mask when ANDing in client_sane. This was some hard to track down issues. The same may need to be done for the IPv6 code in that function. Modified files: File: radiusd/src/main/client.c; Revision: 1.46; Date: 2005/10/15 23:52:36; Author: mgriego; Lines: (+3 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/client.c Revisions: 1.46 Authors: mgriego (+3 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

debugging while running multi-threaded
by Joe Maimon 14 Oct '05

14 Oct '05

log output is not protected.... a mutex would probably be a good idea in vradlog for debug mode. I am testing something like that now. Joe

2 1

exit on select return -1 but errno == 0?
by Joe Maimon 14 Oct '05

14 Oct '05

running under gdb, server exits(1) after a bit Breakpoint 15, main (argc=2, argv=0xbfe26764) at radiusd.c:600 600 if (errno == EINTR) { (gdb) p errno $9 = 0 (gdb) p status $10 = -1 (gdb) Debian GNU/Linux dpkg -l libc6 Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Installed/Config-files/Unpacked/Failed-config/Half-installed |/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad) ||/ Name Version Description +++-=========================-=========================-================================================================== ii libc6 2.3.5-6 GNU C Library: Shared libraries and Timezone data

2 4

patch to enable configure using --with-modules="rlm_policy"
by Joe Maimon 13 Oct '05

13 Oct '05

Yes I understand there is a system for stable/experimental modules to be done. This is an addition to configure.in to allow manual specifying modules to be built in addition to stable/experimental system. I used this to build rlm_policy into my local deb package, without trying to build other experimental modules that may or may not complicate my build proccess. Thanks for consideration. Any and all feedback welcome. Joe --- debian8/freeradius-1.1.0/configure.in 2005-10-03 12:50:10.000000000 -0400 +++ debian9/freeradius-1.1.0/configure.in 2005-10-13 22:24:03.000000000 -0400 @@ -231,6 +231,14 @@ done ]) +MODULES= +AC_ARG_WITH(modules, +[ --with-modules=QUOTED-MODULE-LIST],[ + for i in $withval; do + MODULES="$MODULES $i" + done +]) + dnl # dnl # Enable developer C compiler warnings dnl # @@ -1005,7 +1013,6 @@ dnl ############################################################ dnl # make modules by list dnl ############################################################# -MODULES= if test "x$EXPERIMENTAL" = "xyes"; then for foo in `ls -1 src/modules | grep rlm_`; do MODULES="$MODULES $foo"

1 0

Automatic report from sources (radiusd) between 12.10.2005 - 13.10.2005 GMT
by Automatic cvs log generator 13 Oct '05

13 Oct '05

CVS log entries from 12.10.2005 (Wed) 08:00:01 - 13.10.2005 (Thu) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/lib/radius.c; Revisions: 1.164 ===================================================== Log entries ===================================================== Description: Type fixes Modified files: File: radiusd/src/lib/radius.c; Revision: 1.164; Date: 2005/10/12 21:23:22; Author: aland; Lines: (+4 -8) ===================================================== Summary of modified files ===================================================== File: radiusd/src/lib/radius.c Revisions: 1.164 Authors: aland (+4 -8) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Re: Removing attributes from a reply
by Joe Maimon 12 Oct '05

12 Oct '05

Alan DeKok wrote: > Joe Maimon <jmaimon(a)ttec.com> wrote: > >>If I have the Framed-IP-Address attribute, I need to remove any attribute of >> >>Cisco-AVPair -~ "ip:addr-pool.*" > > > rlm_attr_filter? I think that might work. > I only want to to remove the Cisco-AVPair ~= "ip:addr-pool.*" attrbute (that is added before the proxy request is sent) IF the proxy reply contains the Framed-IP-Address attribute. > >>I have been assuming I would need the new CVS head policy feature for this. > > > Maybe. Then again, the module isn't quite finished. > > Alan DeKok. Yeah I can tell...I have been working with it a bit and so far I have managed to get it to parse the below, but it goes into an endless loop debug print_tokens # as we're parsing this file debug print_policy # once the file has been parsed debug evaluate # print limited information during evaluation ----------------cut here-------------- policy pool { if ( (Framed-IP-Address =* "") && (Cisco-Avpair =~ "ip:addr-pool.*")) { reply .= { Cisco-Avpair -~ "ip:addr-pool.*" } } } policy post-proxy { pool() } -------------cut here------------------ I had to add code to parse.c, rlm_policy.h to recognize those attributes (not sure I did it right) and I changed the calls to pairmove() to pairxlatmove() <-- untested. The loop is here evaluate.c:360 -----------cut here-------------------- static int policy_stack_pop(policy_state_t *state, const policy_item_t **pitem) { rad_assert(pitem != NULL); rad_assert(state->depth >= 0); redo: if (state->depth == 0) { *pitem = NULL; return 0; } *pitem = state->stack[state->depth - 1]; /* * Named policies are on the stack for catching recursion. */ if ((*pitem)->type == POLICY_TYPE_NAMED_POLICY) { goto redo; -----------cut here------------------- Changed it to *pitem = state->stack[state->depth--]; caused the server to exist at "*pitem = state->stack[state->depth - 1];" Thats the best I can tell, because I have not figured out yet to get gdb to break anywhere in the rlm_policy Thanks, Joe > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > >

1 2

Automatic report from sources (radiusd) between 10.10.2005 - 11.10.2005 GMT
by Automatic cvs log generator 11 Oct '05

11 Oct '05

CVS log entries from 10.10.2005 (Mon) 08:00:01 - 11.10.2005 (Tue) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/lib/radius.c; Revisions: 1.163 File: radiusd/src/include/libradius.h; Revisions: 1.107 ===================================================== Combined list of identical log entries ===================================================== Description: Moved code out of rad_decode() into rad_attr2vp, so we don't have huge functions, and so that others can call rad_attr2vp Modified files: File: radiusd/src/include/libradius.h; Revision: 1.107; Date: 2005/10/10 19:11:22; Author: aland; Lines: (+4 -1) File: radiusd/src/lib/radius.c; Revision: 1.163; Date: 2005/10/10 19:11:22; Author: aland; Lines: (+276 -259) ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/src/include/libradius.h Revisions: 1.107 Authors: aland (+4 -1) ------------------------------- File: radiusd/src/lib/radius.c Revisions: 1.163 Authors: aland (+276 -259) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

PEAP failures
by Batta, Anurag 10 Oct '05

10 Oct '05

Hi, Running Cisco AP and FreeRadius, I get PEAP failures. TTLS works. I do not see a ACCESS REJECT with PEAP. However, there is no ACCESS_ACCEPT either. It seems to me from the debug that RADIUS expects a packet from AP but not getting it. Any ideas ? Thanks in advance. After a few minutes, client disconnects and retries to connect, starting this cycle again. ---------------LOG follows--------- rlm_mschap: adding MS-CHAPv2 MPPE keys modsingle[authenticate]: returned from mschap (rlm_mschap) for request 5 modcall[authenticate]: module "mschap" returns ok for request 5 modcall: group Auth-Type returns ok for request 5 MSCHAP Success modsingle[authenticate]: returned from eap (rlm_eap) for request 5 modcall[authenticate]: module "eap" returns handled for request 5 modcall: group authenticate returns handled for request 5 PEAP: Got tunneled reply RADIUS code 11 MS-CHAP2-Success = 0x05533d3943384231454435313545413639303638414632393044363831303634394244 4544303831443935 EAP-Message = 0x010600331a0305002e533d394338423145443531354541363930363841463239304436 38313036343942444544303831443935 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x2541b8665c3f07dd9c5e6e02d700e023 PEAP: Processing from tunneled session code 0x244888 11 MS-CHAP2-Success = 0x05533d3943384231454435313545413639303638414632393044363831303634394244 4544303831443935 EAP-Message = 0x010600331a0305002e533d394338423145443531354541363930363841463239304436 38313036343942444544303831443935 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x2541b8665c3f07dd9c5e6e02d700e023 PEAP: Got tunneled Access-Challenge modsingle[authenticate]: returned from eap (rlm_eap) for request 5 modcall[authenticate]: module "eap" returns handled for request 5 modcall: group authenticate returns handled for request 5 Sending Access-Challenge of id 115 to 192.168.1.7:1150 EAP-Message = 0x010600801900170301002069b032ec228c41b896215232e86bf4044b6a18adf88f059c 9baf727da5382b1a17030100508b63b8f690789ba6240940129df44921e374f12727725d 1105c9ee8da81ac26f19a16d55612a129c2fbab15882c75042e73ce9101e3a91d1ec31a3 b6b235297a75a99549c8d91ad24b3ded409488aa51 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x2d5808a73134c88586fac62658ba132d Finished request 5 Going to the next request This e-mail may contain confidential or privileged information. If you think you have received this e-mail in error, please advise the sender by reply e-mail and then delete this e-mail immediately. Thank you. U. S. Robotics

1 0

Automatic report from sources (radiusd) between 09.10.2005 - 10.10.2005 GMT
by Automatic cvs log generator 10 Oct '05

10 Oct '05

CVS log entries from 09.10.2005 (Sun) 08:00:01 - 10.10.2005 (Mon) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: bjordanov File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revisions: 1.27 ===================================================== Log entries ===================================================== Description: Changed size of start pool to fit one on experimental.conf Modified files: File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revision: 1.27; Date: 2005/10/09 10:30:19; Author: bjordanov; Lines: (+5 -5) ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_perl/rlm_perl.c Revisions: 1.27 Authors: bjordanov (+5 -5) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 08.10.2005 - 09.10.2005 GMT
by Automatic cvs log generator 09 Oct '05

09 Oct '05

CVS log entries from 08.10.2005 (Sat) 08:00:00 - 09.10.2005 (Sun) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/src/main/proxy.c; Revisions: 1.88, 1.77.2.3 ===================================================== Log entries ===================================================== Description: Don't free the check items in proxy_receive(): simultaneous use, ip pool and post-auth type variables are still needed. Modified files: File: radiusd/src/main/proxy.c; Revision: 1.88; Date: 2005/10/08 11:09:30; Author: nbk; Lines: (+3 -4) ------------------------------- Description: Pull from CVS head: Don't free the check items in proxy_receive(). Modified files: File: radiusd/src/main/proxy.c; Revision: 1.77.2.3; Date: 2005/10/08 11:09:40; Author: nbk; Lines: (+3 -4) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/proxy.c Revisions: 1.88, 1.77.2.3 Authors: nbk (+3 -4), nbk (+3 -4) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0