December 2005 - Freeradius-Devel - lists.freeradius.org

question about concurrent auth packet process.
by Liu dejun 02 Jan '06

02 Jan '06

When lots of concurrent auth packets arrived at radius server .by default ,if radius server exceeds the max packet process thread ,it will discard the auth packet/ see the code below in version 1.0.5 int thread_pool_addrequest(REQUEST *request, RAD_REQUEST_FUNP fun) { /* * If the thread pool is busy handling requests, then * try to spawn another one. */ if (thread_pool.active_threads == thread_pool.total_threads) { if (spawn_thread(request->timestamp) == NULL) { radlog(L_INFO, "The maximum number of threads (%d) are active, cannot spawn new thread to handle request", thread_pool.max_threads); return 0; } } /* * Add the new request to the queue. */ request_enqueue(request, fun); return 1; } why not just add the auth packet to the queue of the thread if the active thread number exceed the total thread number? -- Yesterday is a history. Tomorrow is a mystery. Today is a gift. That's why we call it "the Present".

3 9

Automatic report from sources (radiusd) between 29.12.2005 - 30.12.2005 GMT
by Automatic cvs log generator 30 Dec '05

30 Dec '05

CVS log entries from 29.12.2005 (Thu) 09:00:02 - 30.12.2005 (Fri) 09:00:02 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revisions: 1.166, 1.122.2.8.2.2 ===================================================== Combined list of identical log entries ===================================================== Description: Corrected typo Modified files: File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revision: 1.166; Date: 2005/12/29 21:53:26; Author: aland; Lines: (+2 -2) File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revision: 1.122.2.8.2.2; Date: 2005/12/29 21:52:53; Author: aland; Lines: (+2 -2) ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_ldap/rlm_ldap.c Revisions: 1.166, 1.122.2.8.2.2 Authors: aland (+2 -2), aland (+2 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

freeradius load balance support
by Liu dejun 30 Dec '05

30 Dec '05

In verion 1.1.0 pre,i find freeradius supports load balance when i check the release notes but how does it work ? i check the sourcecode ,but I does not find where the sourcecode implement this does anyone can explain it for me? -- Yesterday is a history. Tomorrow is a mystery. Today is a gift. That's why we call it "the Present".

2 1

SNMP and FreeRadius
by Vishwanath Srikant Pattanshetti 29 Dec '05

29 Dec '05

Hi all Am using FreeRadius 1.0.4 on solaris 10 and am trying to use snmp for monitoring the same. I have compiled Radius server with snmp option Following is my radiusd.conf: snmp = yes $INCLUDE ${confdir}/snmp.conf Following is my snmp.conf: smux_password = verysecret [This is the only line in snmp.conf that I have un commented. Now when I do a get on any oid, in RADIUS-AUTH-SERVER mib I get reply saying no such object exists. Can some one tell me where am I going wrong? Is there a specific location where I have to keep the mib files?? Also is there a way to find what oid's of a mib are implemented(I guess entire auth-server mib is implemented) Any inputs would be of great help, as it is very important and urgent requirement for me. Thanks in advance. -Vishwa.

2 1

Automatic report from sources (radiusd) between 28.12.2005 - 29.12.2005 GMT
by Automatic cvs log generator 29 Dec '05

29 Dec '05

CVS log entries from 28.12.2005 (Wed) 09:00:01 - 29.12.2005 (Thu) 09:00:02 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revisions: 1.165, 1.122.2.8.2.1 File: radiusd/doc/ChangeLog; Revisions: 1.57.2.31.2.8 File: radiusd/raddb/radiusd.conf.in; Revisions: 1.224, 1.188.2.4.2.4 File: radiusd/share/dictionary.freeradius.internal; Revisions: 1.7, 1.6.2.2 ===================================================== Combined list of identical log entries ===================================================== Description: Port patch from branch_1_1 to the HEAD Modified files: File: radiusd/raddb/radiusd.conf.in; Revision: 1.224; Date: 2005/12/28 22:50:16; Author: aland; Lines: (+13 -1) File: radiusd/share/dictionary.freeradius.internal; Revision: 1.7; Date: 2005/12/28 22:50:16; Author: aland; Lines: (+3 -2) File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revision: 1.165; Date: 2005/12/28 22:50:16; Author: aland; Lines: (+23 -6) ------------------------------- Description: Make the LDAP module smarter, and more configurable, to avoid the case of it erroneously setting Auth-Type to LDAP where it's not necessary. Modified files: File: radiusd/raddb/radiusd.conf.in; Revision: 1.188.2.4.2.4; Date: 2005/12/28 19:51:07; Author: aland; Lines: (+13 -1) File: radiusd/share/dictionary.freeradius.internal; Revision: 1.6.2.2; Date: 2005/12/28 19:51:08; Author: aland; Lines: (+3 -2) File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revision: 1.122.2.8.2.1; Date: 2005/12/28 19:51:07; Author: aland; Lines: (+23 -5) ===================================================== Log entries ===================================================== Description: Latest set of updates Modified files: File: radiusd/doc/ChangeLog; Revision: 1.57.2.31.2.8; Date: 2005/12/28 22:44:48; Author: aland; Lines: (+6 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/ChangeLog Revisions: 1.57.2.31.2.8 Authors: aland (+6 -1) ------------------------------- File: radiusd/raddb/radiusd.conf.in Revisions: 1.224, 1.188.2.4.2.4 Authors: aland (+13 -1), aland (+13 -1) ------------------------------- File: radiusd/share/dictionary.freeradius.internal Revisions: 1.7, 1.6.2.2 Authors: aland (+3 -2), aland (+3 -2) ------------------------------- File: radiusd/src/modules/rlm_ldap/rlm_ldap.c Revisions: 1.165, 1.122.2.8.2.1 Authors: aland (+23 -6), aland (+23 -5) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 27.12.2005 - 28.12.2005 GMT
by Automatic cvs log generator 28 Dec '05

28 Dec '05

CVS log entries from 27.12.2005 (Tue) 09:00:01 - 28.12.2005 (Wed) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/radiusd.c; Revisions: 1.354, 1.321.2.2.2.2 File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revisions: 1.29 File: radiusd/src/modules/rlm_sqlcounter/rlm_sqlcounter.c; Revisions: 1.26, 1.11.2.3.2.4 File: radiusd/share/dictionary.cisco.vpn3000; Revisions: 1.12, 1.7.4.2 ===================================================== Combined list of identical log entries ===================================================== Description: Pull fix from the head Modified files: File: radiusd/src/main/radiusd.c; Revision: 1.321.2.2.2.2; Date: 2005/12/28 01:18:00; Author: aland; Lines: (+3 -3) File: radiusd/src/modules/rlm_sqlcounter/rlm_sqlcounter.c; Revision: 1.11.2.3.2.4; Date: 2005/12/27 17:44:25; Author: aland; Lines: (+10 -2) ===================================================== Log entries ===================================================== Description: Updates from bug #285 Modified files: File: radiusd/share/dictionary.cisco.vpn3000; Revision: 1.12; Date: 2005/12/28 01:21:07; Author: aland; Lines: (+6 -1) ------------------------------- Description: Pulled fixes for bug #285 from the head Modified files: File: radiusd/share/dictionary.cisco.vpn3000; Revision: 1.7.4.2; Date: 2005/12/28 01:23:02; Author: aland; Lines: (+6 -1) ------------------------------- Description: wait for active threads only if we have spawned them. This fixes bug #306 Modified files: File: radiusd/src/main/radiusd.c; Revision: 1.354; Date: 2005/12/28 01:16:59; Author: aland; Lines: (+3 -3) ------------------------------- Description: Don't reference interp if USE_ITHREADS isn't defined. Bug found by Joe Maimon Modified files: File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revision: 1.29; Date: 2005/12/28 01:28:21; Author: aland; Lines: (+3 -5) ------------------------------- Description: No query, die Modified files: File: radiusd/src/modules/rlm_sqlcounter/rlm_sqlcounter.c; Revision: 1.26; Date: 2005/12/27 17:43:47; Author: aland; Lines: (+10 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/share/dictionary.cisco.vpn3000 Revisions: 1.12, 1.7.4.2 Authors: aland (+6 -1), aland (+6 -1) ------------------------------- File: radiusd/src/main/radiusd.c Revisions: 1.354, 1.321.2.2.2.2 Authors: aland (+3 -3), aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_perl/rlm_perl.c Revisions: 1.29 Authors: aland (+3 -5) ------------------------------- File: radiusd/src/modules/rlm_sqlcounter/rlm_sqlcounter.c Revisions: 1.26, 1.11.2.3.2.4 Authors: aland (+10 -2), aland (+10 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 26.12.2005 - 27.12.2005 GMT
by Automatic cvs log generator 27 Dec '05

27 Dec '05

CVS log entries from 26.12.2005 (Mon) 09:00:01 - 27.12.2005 (Tue) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/lib/dict.c; Revisions: 1.79 ===================================================== Log entries ===================================================== Description: Casts to pass correct parameter Modified files: File: radiusd/src/lib/dict.c; Revision: 1.79; Date: 2005/12/26 19:50:21; Author: aland; Lines: (+4 -4) ===================================================== Summary of modified files ===================================================== File: radiusd/src/lib/dict.c Revisions: 1.79 Authors: aland (+4 -4) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

rlm_eap_peap issue
by 양승용 23 Dec '05

23 Dec '05

I think that eap2vp, vp2eap function in peap.c should be modified as follows ===================================================================================================== static VALUE_PAIR *eap2vp(EAP_DS *eap_ds, const uint8_t *data, unsigned int data_len) { uint16_t eap_len, len, total; VALUE_PAIR *vp = NULL; VALUE_PAIR *eap_msg = NULL; const unsigned char *ptr = NULL; int first = 1; /* * Sanity check this... */ if (data_len + EAP_HEADER_LEN > 65534) { radlog(L_ERR, "rlm_eap_peap: EAP Response packet is too large."); return NULL; } len = eap_len = total = EAP_HEADER_LEN + data_len; do { if (eap_len > 253) { len = 253; eap_len -= 253; } else { len = eap_len; eap_len = 0; } /* * create a value pair & append it to the packet list * This memory gets freed up when packet is freed up */ eap_msg = paircreate(PW_EAP_MESSAGE, PW_TYPE_OCTETS); if (first) { eap_msg->strvalue[0] = PW_EAP_RESPONSE; eap_msg->strvalue[1] = eap_ds->response->id; total = htons (total); memcpy(&eap_msg->strvalue[2], &total, sizeof(uint16_t)); ptr = data; memcpy(&eap_msg->strvalue[4], ptr, len - 4); ptr = ptr + len - 4; first = 0; } else { memcpy(eap_msg->strvalue, ptr, len); eap_msg->length = len; ptr += len; } pairadd(&vp, eap_msg); eap_msg = NULL; } while (eap_len); return vp; } static int vp2eap(tls_session_t *tls_session, VALUE_PAIR *vp) { VALUE_PAIR *first, *vps; uint16_t len; int total_len; /* * Get only EAP-Message attribute list */ first = pairfind(vp, PW_EAP_MESSAGE); if (first == NULL) { radlog(L_ERR, "vp2eap: EAP-Message not found"); return 0; } /* * Sanity check the length before doing anything. */ if (first->length < 4) { radlog(L_ERR, "vp2eap: EAP packet is too short."); return 0; } /* * Get the Actual length from the EAP packet * First EAP-Message contains the EAP packet header */ memcpy(&len, first->strvalue + 2, sizeof(len)); len = ntohs(len); /* * Take out even more weird things. */ if (len < 4) { radlog(L_ERR, "vp2eap: EAP packet has invalid length."); return 0; } /* * Sanity check the length, BEFORE malloc'ing memory. */ total_len = 0; for (vps = first; vps; vps = pairfind(vps->next, PW_EAP_MESSAGE)) { total_len += vps->length; if (total_len > len) { radlog(L_ERR, "vp2eap: Malformed EAP packet." " Length in packet header does not match actual length"); return 0; } } /* * If the length is SMALLER, die, too. */ if (total_len < len) { radlog(L_ERR, "vp2eap: Malformed EAP packet. " " Length in packet header does not match actual length"); return 0; } /* RADIUS ensures order of attrs, so just concatenate all */ for (vps = first; vps; vps = pairfind(vps->next, PW_EAP_MESSAGE)) { if (vps == first) record_plus(&tls_session->clean_in, vps->strvalue + EAP_HEADER_LEN, vps->length - EAP_HEADER_LEN); else record_plus(&tls_session->clean_in, vps->strvalue, vps->length); } tls_handshake_send(tls_session); record_init(&tls_session->clean_in); return 1; } ===================================================== 시큐아이닷컴(주) 서울시 서초구 양재동 261-8 우제빌딩 5층 유넷사업부 애니클릭팀 IA 파트장 양 승 용 Tel. 02-390-8077 Fax. 02)390-8099 Hp. 016-383-6558 Email. joshua.yang(a)samsung.com =====================================================

1 0

rlm_perl compilation
by Joe Maimon 22 Dec '05

22 Dec '05

interp is declared within ifdef ITHREADS but is referenced without at rlm_perl.c:~760 Like so if (!interp) { #ifdef USE_ITHREADS if ((interp = perl_alloc()) == NULL) { radlog(L_DBG, "rlm_perl: No memory for allocating new perl !"); return -1; } perl_construct(interp); PL_perl_destruct_level = 2; #endif }

1 0

realloc in rlm_pam
by Wolfgang Rosenauer 22 Dec '05

22 Dec '05

Hi, just found this one in 1.0.x and 1.1 branch code in rlm_pam.c: #define GET_MEM if (reply) realloc(reply, size); else reply = rad_malloc(size); \ This is changed on trunk already but it should be changed on 1.0 and 1.1 branches as well, because it really seems to fail if the statement is true but realloc() has to move the memory to another location. reply is not updated in this case. So the easiest fix would be: #define GET_MEM if (reply) reply = realloc(reply, size); else reply = rad_malloc(size); \ (or to take the changes from trunk) CU, Wolfgang -- SUSE LINUX GmbH -o) Tel: +49-(0)911-740 53 0 Maxfeldstr. 5 /\\ Fax: +49-(0)911-740 53 679 90409 Nuernberg, Germany _\_v simply change to www.suse.com

3 3