June 2005 - Freeradius-Devel - lists.freeradius.org

Problem in client_find() in CVS head
by Nicolas Baradakis 01 Jul '05

01 Jul '05

I get errors "Ignoring request from unknown client ..." when using the CVS head version. I think there is a problem in the IPv4 addresses comparison in client_find(). The following patch solved the problem for me, but perhaps there is a better solution. If I get approval, I can commit it to the CVS. Index: src/main/client.c =================================================================== RCS file: /source/radiusd/src/main/client.c,v retrieving revision 1.35 diff -u -r1.35 client.c --- src/main/client.c 12 May 2005 22:22:48 -0000 1.35 +++ src/main/client.c 30 Jun 2005 16:04:34 -0000 @@ -271,7 +271,8 @@ switch (ipaddr->af) { case AF_INET: if (cl->prefix) { - if ((htonl(ipaddr->ipaddr.ip4addr.s_addr) & (~0 << cl->prefix)) == (htonl(cl->ipaddr.ipaddr.ip4addr.s_addr) & (~0 << cl->prefix))) { + uint32_t mask = htonl(~((1 << (32 - cl->prefix)) - 1)); + if ((ipaddr->ipaddr.ip4addr.s_addr & mask) == (cl->ipaddr.ipaddr.ip4addr.s_addr & mask)) { match = cl; } else break; -- Nicolas Baradakis

2 2

Custom Attribute Inclusion in Access-Challenge
by Mike Schulz 30 Jun '05

30 Jun '05

Hello, I am attempting to develop a workaround for an issue we are having using Freeradius with EAP/TLS. I would like to add a Vendor-Specific attribute and have it included in every Access-Challenge packet generated by the server. >From what I understand, this should be a fairly trivial patch, however I would appreciate it if someone could point me in the right direction, in terms of where to modify the source. Thanks in advance! -------------- Mike P. Schulz Network Systems Developer Radialink Corporation - Ottawa, ON (613) 225-2258 x115

2 1

Automatic report from sources (radiusd) between 29.06.2005 - 30.06.2005 GMT
by Automatic cvs log generator 30 Jun '05

30 Jun '05

CVS log entries from 29.06.2005 (Wed) 08:00:01 - 30.06.2005 (Thu) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/threads.c; Revisions: 1.94, 1.77.2.3 File: radiusd/configure.in; Revisions: 1.217 ===================================================== Log entries ===================================================== Description: NetBSD compatibility Modified files: File: radiusd/configure.in; Revision: 1.217; Date: 2005/06/29 20:40:09; Author: aland; Lines: (+3 -2) ------------------------------- Description: Added one more (important) call to reap_children Modified files: File: radiusd/src/main/threads.c; Revision: 1.94; Date: 2005/06/29 18:46:17; Author: aland; Lines: (+10 -2) ------------------------------- Description: Catch a "corner" case for reap_children. In reality, this is probably the only place it should be called from. Modified files: File: radiusd/src/main/threads.c; Revision: 1.77.2.3; Date: 2005/06/29 18:42:23; Author: aland; Lines: (+7 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/configure.in Revisions: 1.217 Authors: aland (+3 -2) ------------------------------- File: radiusd/src/main/threads.c Revisions: 1.94, 1.77.2.3 Authors: aland (+10 -2), aland (+7 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

SMUX - SNMP
by Reza Toghraee 29 Jun '05

29 Jun '05

Hello I need to query freeradius by snmp. Badly I'm not very firendly with SMUX protcol, and the documentation of this part is really little. Let me show you what I did . My platform is RedHat Linux 9 and my Freeradius release is 0.8 I checked the configure file, and check a line "with-snmp" . it seems freeradius configure adds -with-snmp by default when you start configuring. But according to snmp documents, I added -with-snmp to my configure line. ( configure -with-snmp --prefix=something) After compliation is completed: In radiusd.conf,checked that snmp.conf included. In snmp.conf added "smux_password=secret" In my net-snmp.conf I added " smuxpeer .1.3.6.1.4.1.3317.1.3.1 secret" The GNOME-PRODUCT-RADIUSD-MIB.mib downloaded (.1.3.6.1.4.1.3317.1.3.1) and copied in my GETIF (snmp viewer) directory When I query with getif it I didne see any SMUX query in my SNMP log. And nothing reach to freeradius. What should I do ? What is the MIB directory in freeradius package ? there are AUTH , ACCT mib files for MIB2. I think freeradus doesn't support them and just has 1 OID which is .1.3.6.1.4.1.3317.1.3.1 . If this is true , can anyone say what is this OID ? Regards Reza

4 3

Radius client library with similar functionality to Cisco?
by David Stanaway 28 Jun '05

28 Jun '05

I was wondering if anyone had come across a radius client library with similar functionality to cisco IOS (multiple radius server groups, broadcast or failover group configuration, configurable retry delay, and number of retries, etc...)? -- David Stanaway <david(a)dialmex.net>

4 4

Automatic report from sources (radiusd) between 27.06.2005 - 28.06.2005 GMT
by Automatic cvs log generator 28 Jun '05

28 Jun '05

CVS log entries from 27.06.2005 (Mon) 08:00:01 - 28.06.2005 (Tue) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/share/dictionary.mikrotik; Revisions: 1.2 File: radiusd/share/dictionary; Revisions: 1.114, 1.113 File: radiusd/share/dictionary.aruba; Revisions: 1.1 Author: fcusack File: radiusd/src/modules/rlm_otp/otp_rlm.c; Revisions: 1.2 File: radiusd/src/modules/rlm_otp/otp_cardops.c; Revisions: 1.2 File: radiusd/doc/rlm_otp; Revisions: 1.2 File: radiusd/raddb/otp.conf; Revisions: 1.2 File: radiusd/src/modules/rlm_otp/otp_util.c; Revisions: 1.2 File: radiusd/src/modules/rlm_otp/otp.h; Revisions: 1.2 ===================================================== Combined list of identical log entries ===================================================== Description: Updates, as posted to the list Modified files: File: radiusd/share/dictionary; Revision: 1.114; Date: 2005/06/28 00:54:38; Author: aland; Lines: (+2 -1) File: radiusd/share/dictionary.mikrotik; Revision: 1.2; Date: 2005/06/28 00:54:38; Author: aland; Lines: (+15 -2) ------------------------------- Description: Aruba vendor dictionary, as posted to the list Modified files: File: radiusd/share/dictionary; Revision: 1.113; Date: 2005/06/28 00:44:29; Author: aland; Lines: (+6 -1) File: radiusd/share/dictionary.aruba; Revision: 1.1; Date: 2005/06/28 00:44:29; Author: aland; ------------------------------- Description: soft PIN Modified files: File: radiusd/doc/rlm_otp; Revision: 1.2; Date: 2005/06/27 11:10:14; Author: fcusack; Lines: (+28 -8) File: radiusd/raddb/otp.conf; Revision: 1.2; Date: 2005/06/27 11:10:14; Author: fcusack; Lines: (+5 -0) File: radiusd/src/modules/rlm_otp/otp.h; Revision: 1.2; Date: 2005/06/27 11:10:14; Author: fcusack; Lines: (+4 -1) File: radiusd/src/modules/rlm_otp/otp_cardops.c; Revision: 1.2; Date: 2005/06/27 11:10:14; Author: fcusack; Lines: (+37 -16) File: radiusd/src/modules/rlm_otp/otp_rlm.c; Revision: 1.2; Date: 2005/06/27 11:10:15; Author: fcusack; Lines: (+4 -3) File: radiusd/src/modules/rlm_otp/otp_util.c; Revision: 1.2; Date: 2005/06/27 11:10:15; Author: fcusack; Lines: (+55 -11) ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/doc/rlm_otp Revisions: 1.2 Authors: fcusack (+28 -8) ------------------------------- File: radiusd/raddb/otp.conf Revisions: 1.2 Authors: fcusack (+5 -0) ------------------------------- File: radiusd/share/dictionary Revisions: 1.114, 1.113 Authors: aland (+2 -1), aland (+6 -1) ------------------------------- File: radiusd/share/dictionary.aruba Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/share/dictionary.mikrotik Revisions: 1.2 Authors: aland (+15 -2) ------------------------------- File: radiusd/src/modules/rlm_otp/otp.h Revisions: 1.2 Authors: fcusack (+4 -1) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_cardops.c Revisions: 1.2 Authors: fcusack (+37 -16) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_rlm.c Revisions: 1.2 Authors: fcusack (+4 -3) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_util.c Revisions: 1.2 Authors: fcusack (+55 -11) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

RE: How can I add Aruba Networks VSA list to distribution?
by Deepinder Setia 28 Jun '05

28 Jun '05

Here is the Aruba VSA list: VENDOR Aruba 14823 ATTRIBUTE Aruba-User-Role 1 string Aruba ATTRIBUTE Aruba-User-Vlan 2 integer Aruba ATTRIBUTE Aruba-Priv-Admin-User 3 integer Aruba ATTRIBUTE Aruba-Admin-Role 4 string Aruba ATTRIBUTE Aruba-Essid-Name 5 string Aruba ATTRIBUTE Aruba-Location-Id 6 string Aruba Thanks, Deepinder. -----Original Message----- From: freeradius-devel-bounces(a)lists.freeradius.org [mailto:freeradius-devel-bounces@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Monday, June 27, 2005 9:51 AM To: FreeRadius developers mailing list Subject: Re: How can I add Aruba Networks VSA list to distribution? "Deepinder Setia" <dsetia(a)arubanetworks.com> wrote: > The vendor ID is 14823. There will be about 7 VSA initially. Send an email to the list with names & numbers. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html

2 1

How can I add Aruba Networks VSA list to distribution?
by Deepinder Setia 27 Jun '05

27 Jun '05

The vendor ID is 14823. There will be about 7 VSA initially. Thanks. Deepinder Setia Aruba Wireless Networks dsetia(a)arubanetworks.com <mailto:dsetia@arubanetworks.com> Office: 408.754.3042 Mobile: 408.623.0371 www.arubanetworks.com <http://www.arubanetworks.com/>

2 1

unixODBC sql_finish_query problem
by dav 27 Jun '05

27 Jun '05

Hi all, We are using freeRadius V.1.04 connecting to a FireBird v 1.5.2 via unixOdbc module. We experienced this problem: in the accounting (accounting_start and stop) section we use a stored procedure with some insert statements inside, called by a "EXECUTE PROCEDURE foo()" statement and noticed that queries weren't committed; We solved the problem analyzing the code of sql_unixodbc.c module and modifying this part: static int sql_finish_query(SQLSOCK *sqlsocket, SQL_CONFIG *config) { /* Not used */ return 0; } to: static int sql_finish_query(SQLSOCK *sqlsocket, SQL_CONFIG *config) { rlm_sql_unixodbc_sock *unixodbc_sock = sqlsocket->conn; SQLFreeStmt(unixodbc_sock->stmt_handle, SQL_CLOSE); return 0; } similarly to sql_finish_select_query function; Why the original sql_finish_query is empty and doesn't do anything? Is the proposed solution correct? Any advices? Could it be introduced in future releases? Davide

1 0

Automatic report from sources (radiusd) between 25.06.2005 - 26.06.2005 GMT
by Automatic cvs log generator 26 Jun '05

26 Jun '05

CVS log entries from 25.06.2005 (Sat) 08:00:01 - 26.06.2005 (Sun) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/src/modules/rlm_sql/sql.c; Revisions: 1.83, 1.79.2.2 ===================================================== Log entries ===================================================== Description: Fix quote removal of the value in sql_userparse (closes: #242) Modified files: File: radiusd/src/modules/rlm_sql/sql.c; Revision: 1.83; Date: 2005/06/25 22:44:35; Author: nbk; Lines: (+17 -18) ------------------------------- Description: Pull from CVS head: Fix quote removal of the value in sql_userparse (closes: #242) Modified files: File: radiusd/src/modules/rlm_sql/sql.c; Revision: 1.79.2.2; Date: 2005/06/25 22:45:35; Author: nbk; Lines: (+17 -18) ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_sql/sql.c Revisions: 1.83, 1.79.2.2 Authors: nbk (+17 -18), nbk (+17 -18) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Debian and FreeRADIUS CVS (and Subversion, peripherally)
by Paul.Hampson＠PObox.com 23 Jun '05

23 Jun '05

Just a quick question. Is it OK if I start tagging things into CVS for the debian/ directory to match what actually got uploaded into Debian? I've just started using dpatch for Debian, which means all the changes except the removal of the RFCs Debian cannot distribute are localised into the debian/ directory. At this point I'm thinking I'll just tag stuff in debian/, so to get a CVS tree matching the upload, you have to pull the appropriate release_1_0_4-tagged tree, and then change tags to debian_1_0_4_1 (for example, the version I just had uploaded into Debian). This would effectively mean I am branching debian/ at every release... Hmm. Maybe I ought to wait until the CVS archive is subversioned (or something else distributed) so I don't have to be doing it to the main repository? (This of course opens a whole different can of worms...) I'll have a think about this some more, and try and get some kind of more detailed idea going for review before I actually do anything, plus it means I can include a document if anyone else takes over the debian/ maintenance and Debian packaging. -- Paul "TBBle" Hampson, on an alternate email client.

2 2

Automatic report from sources (radiusd) between 21.06.2005 - 22.06.2005 GMT
by Automatic cvs log generator 22 Jun '05

22 Jun '05

CVS log entries from 21.06.2005 (Tue) 08:00:00 - 22.06.2005 (Wed) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/man/man5/clients.conf.5; Revisions: 1.2, 1.1.2.2 ===================================================== Combined list of identical log entries ===================================================== Description: Removed errant ^G Modified files: File: radiusd/man/man5/clients.conf.5; Revision: 1.2; Date: 2005/06/21 16:41:14; Author: aland; Lines: (+1 -1) File: radiusd/man/man5/clients.conf.5; Revision: 1.1.2.2; Date: 2005/06/21 16:41:03; Author: aland; Lines: (+1 -1) ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/man/man5/clients.conf.5 Revisions: 1.2, 1.1.2.2 Authors: aland (+1 -1), aland (+1 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Super minor fix to client.conf(5)
by Shawn K. O'Shea 21 Jun '05

21 Jun '05

I was just messing around with freeradius 1.0.4 and saw my manpage was in the release :) Saw one minor glitch in it though..there's a Ctrl-G on line 39, so the .PP for line break doesn't get interpreted as such. It ends up just putting the text ".PP" as spurious characters in the formatted manpage. I'll hopefully start on all the EAP manpages this week or next week. -Shawn ~~~~~~~~~~~~~~~~~~~~~~~~~ Shawn O'Shea Network Engineer Airpath Wireless, Inc. "Clearing the Way" 781-250-3500-office 781-250-3535-direct 781-250-3503-fax shawno(a)airpath.com http://www.airpath.com ~~~~~~~~~~~~~~~~~~~~~~~~~ CONFIDENTIALITY STATEMENT This electronic message contains information from Airpath Wireless, Inc., and may be confidential or privileged. The information is intended to be for the use of the individual or entity named above. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this message is prohibited. If you have received this electronic message in error, please notify the sender immediately by reply e-mail shawno(a)airpath.com or telephone at (781) 250-3500.

2 1

Automatic report from sources (radiusd) between 20.06.2005 - 21.06.2005 GMT
by Automatic cvs log generator 21 Jun '05

21 Jun '05

CVS log entries from 20.06.2005 (Mon) 08:00:00 - 21.06.2005 (Tue) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/mainconfig.c; Revisions: 1.64 ===================================================== Log entries ===================================================== Description: Properly initialize radlog_dest Modified files: File: radiusd/src/main/mainconfig.c; Revision: 1.64; Date: 2005/06/20 19:24:56; Author: aland; Lines: (+23 -19) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/mainconfig.c Revisions: 1.64 Authors: aland (+23 -19) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Found while trolling the net...
by Alan DeKok 20 Jun '05

20 Jun '05

http://shopping.hacom.net/catalog/product_info.php?products_id=45 At least they claim to be based on FreeRADIUS. They're using dialup_admin for the web GUI, too. Alan DeKok.

1 0

Automatic report from sources (radiusd) between 19.06.2005 - 20.06.2005 GMT
by Automatic cvs log generator 20 Jun '05

20 Jun '05

CVS log entries from 19.06.2005 (Sun) 08:00:00 - 20.06.2005 (Mon) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/man/man8/radsqlrelay.8; Revisions: 1.1 ===================================================== Log entries ===================================================== Description: Man page for radsqlrelay (the new Perl version) Modified files: File: radiusd/man/man8/radsqlrelay.8; Revision: 1.1; Date: 2005/06/19 17:05:14; Author: nbk; ===================================================== Summary of modified files ===================================================== File: radiusd/man/man8/radsqlrelay.8 Revisions: 1.1 Authors: nbk -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 17.06.2005 - 18.06.2005 GMT
by Automatic cvs log generator 18 Jun '05

18 Jun '05

CVS log entries from 17.06.2005 (Fri) 16:59:20 - 18.06.2005 (Sat) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/lib/filters.c; Revisions: 1.40 ===================================================== Log entries ===================================================== Description: Make parser more forgiving. Patch from Wolfgang Hottgenroth, to close bug #228 Modified files: File: radiusd/src/lib/filters.c; Revision: 1.40; Date: 2005/06/18 01:24:11; Author: aland; Lines: (+41 -57) ===================================================== Summary of modified files ===================================================== File: radiusd/src/lib/filters.c Revisions: 1.40 Authors: aland (+41 -57) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Question on PEAP(EAP-GTC)
by Pon Chew Soon 17 Jun '05

17 Jun '05

Hi. Anyone ever did implementation successfully using the Cisco Aironet PEAP(EAP-GTC) to talk to FreeRadius? Can shared the configuration steps? thanks

1 0

rlm_python return tuple
by Schweizer Laurent 14 Jun '05

14 Jun '05

Hello, I try to use the rlm_phyton module and I have a little error with the return. When I authorise a request I do (from the prepaid.py example with a little modification): return (radiusd.RLM_MODULE_UPDATED,(('h323-credit-amount','h323-credit-amount='+ time+''),),(('Auth-Type', 'python'),)) and I have a FAILED error. authorize: h323-credit-amount = h323-credit-amount=60 authorize: s1, s2 OK authorize: Auth-Type = python authorize: s1, s2 FAILED rad_recv: Access-Request packet from host 193.x.x.x:1645, id=68, length=410 Sending Access-Reject of id 68 to 193.x.x.x:1645 h323-credit-amount = "h323-credit-amount=60\n" I have tried to remove the second tuple but in this case I have this error: tuple must be (return, replyTuple, configTuple) what is the configTuple ? Thanks for help Laurent

1 0

Manpage submission
by Shawn K. O'Shea 13 Jun '05

13 Jun '05

I've been working a lot on eap stuff lately and had considered writing manpages for the various rlm_eap submodules. Since I've never written a manpage before, I decided to tackle something "smaller" first. I wrote the following man page for clients.conf(5) Please let me know if this kind of submission is welcome, and make any corrections as deemed necessary. Manpage source: http://go.airpathwireless.com/man/clients.conf.5 Man2htmlized version: http://go.airpathwireless.com/man/clients.conf.5.html Inline man source ----------------- .TH clients.conf 5 "13 June 2005" "" "FreeRADIUS client configuration" .SH NAME clients.conf \- FreeRADIUS client configuration .SH DESCRIPTION The .I clients.conf file contains definitions of RADIUS clients. .PP The information in this file overrides any information provided in the deprecated .BR clients (5) and .BR naslist (5) files. .PP The file format is the same as that used for .I radiusd.conf. See .BR radiusd.conf (5) for more details. .PP Each RADIUS client entry has the following basic form: .IP .nf client <hostname|ip-address|ip-block> { <attribute> = <value> } .fi .LP ip-block is used to specify a network of clients. Networks are specified in CIDR notation. The best match (smallest possible network) will be chosen. .SH ATTRIBUTES The attributes that can appear in a .B client section are listed below. Required attributes are labelled as such. All other attributes are optional. .PP .TP 0.5i .B secret [Required] The RADIUS shared secret used for communication between the client/NAS and the RADIUS server. .TP 0.5i .B shortname [Required] A short alias that can be used in place of the IP address or fully qualified hostname provided in the first line of the section. .TP 0.5i .B nastype The nastype attribute is used to tell the .BR checkrad.pl script which NAS-specific method it should use when checking simultaneous use. The following values are currently recognized: .nf cisco computone livingston max40xx multitech netserver pathras patton portslave tc usrhiper other .fi .TP 0.5i .B login Reserved for future use. .TP 0.5i .B password Reserved for future use. .SH EXAMPLES .IP .nf client 127.0.0.1 { secret = testing123 shortname = localhost nastype = other } .fi .LP This adds a client for the loopback address. This is useful in testing the server locally, for example with .BR radclient (1). .IP .nf client 192.168.0.0/24 { secret = testing123-1 shortname = private-network-1 } .fi .LP This entry represents any client from the 192.168.0.0/24 network. .SH FILES .I /etc/raddb/clients.conf .I /etc/raddb/radiusd.conf .SH "SEE ALSO" .BR radiusd (8), .BR radiusd.conf (5), .BR clients (5), .BR naslist (5) .SH AUTHOR This manual page was authored by Shawn K. O'Shea <shawn(a)eth0.net>. FreeRADIUS is authored by the FreeRADIUS team. http://freeradius.org/ -Shawn ~~~~~~~~~~~~~~~~~~~~~~~~~ Shawn O'Shea Network Engineer Airpath Wireless, Inc. "Clearing the Way" 781-250-3500-office 781-250-3535-direct 781-250-3503-fax shawno(a)airpath.com http://www.airpath.com ~~~~~~~~~~~~~~~~~~~~~~~~~ CONFIDENTIALITY STATEMENT This electronic message contains information from Airpath Wireless, Inc., and may be confidential or privileged. The information is intended to be for the use of the individual or entity named above. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this message is prohibited. If you have received this electronic message in error, please notify the sender immediately by reply e-mail shawno(a)airpath.com or telephone at (781) 250-3500.

2 1

ZyXEL
by Shawn K. O'Shea 13 Jun '05

13 Jun '05

I just joined the devel list and was looking at the recent archives. My company uses a lot of ZyXEL equipment and we work with them pretty closely (some of their sales folks were just out here a few weeks ago and I have one of their APs sitting on my desk right now for 802.1X testing). If you are having trouble getting in touch with anyone, feel free to get in contact with me and I'll see what I can do. -Shawn ~~~~~~~~~~~~~~~~~~~~~~~~~ Shawn O'Shea Network Engineer Airpath Wireless, Inc. "Clearing the Way" 781-250-3500-office 781-250-3535-direct 781-250-3503-fax shawno(a)airpath.com http://www.airpath.com ~~~~~~~~~~~~~~~~~~~~~~~~~ CONFIDENTIALITY STATEMENT This electronic message contains information from Airpath Wireless, Inc., and may be confidential or privileged. The information is intended to be for the use of the individual or entity named above. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this message is prohibited. If you have received this electronic message in error, please notify the sender immediately by reply e-mail shawno(a)airpath.com or telephone at (781) 250-3500.

1 0

Copyright infringement and GPL violation in tinypeap
by Alan DeKok 10 Jun '05

10 Jun '05

-----BEGIN PGP SIGNED MESSAGE----- Your web site http:/www.tinypeap.com (hosted at the Georgia Institute of Techology, machine "rhampora.cc.gatech.edu") is distributing programs built at least in part from code that is derived from the FreeRADIUS server project (http://www.freeradius.org) I refer you to the following URL's: http://www.linksysinfo.org/modules.php?name=Forums&file=viewtopic&t=5649 This message contains text with error messages "rlm_eap_tls: SSL_read failed inside of TLS ". The "rlm_eap_tls" module is part of FreeRADIUS, is copyright by me personally, and is licensed under the terms of the GPL. However, in the forum post at: http://www.linksysinfo.org/modules.php?name=Forums&file=viewtopic&t=4533 You claim that tinyPEAP is "closed source". You further do not acknowledge my copyright on code that you distribute. http://www.tinypeap.com/bin/peapd-beta1.zip This URL points to a file which contains "peapd.exe". That file contains at least the following text strings, which are either identical to strings included with FreeRADIUS, or substantially similar: - -- rlm_eap_tls: FATAL SSL error ..... %d rlm_eap_tls: %s failed inside of TLS (%d), TLS session fails. rlm_eap_tls: %s failed in a system call (%d), TLS session fails. handshake_send rlm_eap_tls: Application Data In SSL Connect mode In SSL Accept mode Before SSL Handshake Phase In SSL Handshake Phase SSL Connection Established SSL_read rlm_eap_tls: Requiring client certificate rlm_eap_tls: Error creating new SSL - -- This code is part of the FreeRADIUS project, and you are infringing on our copyright, and violating the GPL by copying it without following the terms of our license. Nothing under copyright law gives you permission to use our copyrighted code without our permission. The only license terms available for the code in question is the GNU GPL, which is distributed with the FreeRADIUS server source. The terms of that license require you to make the source code for derived works available under the same terms as the the original code. I refer you to section 2 (b): - --- b) You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License. - --- We have tried contacting the public email address for tinypeap: "tinypeap(a)yahoo.com". We have yet to receive a response. We are sending this message to the contact address listed in "whois", and to the Georgia Institute of Technology Office of Legal Affairs, as you are distributing the infringing material from a machine hosted at that institute. You have 24 hours to remove all infringing binaries (tinypeap.exe, and any Linksys firmware containing the infringing code) from your website, or to comply with the terms of the GPL by releasing the source code to tinypeap under the GPL. If you do not choose to release the source under the GPL, you must remove the infringing code from any version of tinypeap that is released in the future. This removal may be done by re-writing the code in question. A simple edit of the text strings will not suffice, as our copyright applies to the binaries produced from the C source code, in addition to the text strings. If you do not comply within 24 hours, we will send a DMCA "take-down" notice to you personally, and to the office of the legal affairs. We hope you take our concerns seriously. Alan DeKok. The FreeRADIUS Server Project http://www.freeradius.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iQCVAwUBQqdpEakul4vkAkl9AQF02wP7BBA3R4Kfc79NNvBGX7R7h2xh2uxto816 CuYAuI51ArqqhjzKmB189Lz9xgMXN4ic0OL1CWuO2iAw5qY8occ2g7LVGwGUYbKM 9BxNSTPola0zzjFAwYK0aEgBU3wJnES3PBzwCOFQo9f16ks1oXHhrx8v2FFV//Ix eIOlG/+hitY= =OsyM -----END PGP SIGNATURE----- Alan DeKok.

4 4

tinyPEAP has said they will comply
by Alan DeKok 10 Jun '05

10 Jun '05

>From http://www.tinypeap.com ... 6/9/2005 tinyPEAP has stopped distributing the binaries due to the copyright infringement against FreeRADIUS Project. ... The author also says in private email that he apologizes, takes our concerns seriously, will re-write the relevant code. Thanks to everyone for their support & patience in this matter. Alan DeKok.

3 2

tinypeap update
by Alan DeKok 09 Jun '05

09 Jun '05

I called the Office of Legal Affairs listed on: http://www.gatech.edu/legal.php, Randy Nordin (404-894-4812). He was busy, and would be out the rest of the day. But I did leave a message re: copyright infringement, and asked him to respond to my previous email. I also contacted softwarefreedom.org, and asked for assistance. We'll see what comes up. Alan DeKok.

1 0

More GPL issues: anyone have a Zyzel box?
by Alan DeKok 09 Jun '05

09 Jun '05

http://www.nowthor.com/shopping/productdocs/ZyXEL-Vantage-Radius-50-v1.0-Us… Page 4-10, Figure 4-6. "Info: Listening on IP address *"... They're running FreeRADIUS, too. If they're following the GPL, we can list them on the web page as a "success", so people know the software works in commercial environments. If they're not following the GPL, we should send a nice letter to them, too. Alan DeKok.

4 4