June 2005 - Freeradius-Devel - lists.freeradius.org

Problem in client_find() in CVS head
by Nicolas Baradakis 01 Jul '05

01 Jul '05

I get errors "Ignoring request from unknown client ..." when using the CVS head version. I think there is a problem in the IPv4 addresses comparison in client_find(). The following patch solved the problem for me, but perhaps there is a better solution. If I get approval, I can commit it to the CVS. Index: src/main/client.c =================================================================== RCS file: /source/radiusd/src/main/client.c,v retrieving revision 1.35 diff -u -r1.35 client.c --- src/main/client.c 12 May 2005 22:22:48 -0000 1.35 +++ src/main/client.c 30 Jun 2005 16:04:34 -0000 @@ -271,7 +271,8 @@ switch (ipaddr->af) { case AF_INET: if (cl->prefix) { - if ((htonl(ipaddr->ipaddr.ip4addr.s_addr) & (~0 << cl->prefix)) == (htonl(cl->ipaddr.ipaddr.ip4addr.s_addr) & (~0 << cl->prefix))) { + uint32_t mask = htonl(~((1 << (32 - cl->prefix)) - 1)); + if ((ipaddr->ipaddr.ip4addr.s_addr & mask) == (cl->ipaddr.ipaddr.ip4addr.s_addr & mask)) { match = cl; } else break; -- Nicolas Baradakis

2 2

Custom Attribute Inclusion in Access-Challenge
by Mike Schulz 30 Jun '05

30 Jun '05

Hello, I am attempting to develop a workaround for an issue we are having using Freeradius with EAP/TLS. I would like to add a Vendor-Specific attribute and have it included in every Access-Challenge packet generated by the server. >From what I understand, this should be a fairly trivial patch, however I would appreciate it if someone could point me in the right direction, in terms of where to modify the source. Thanks in advance! -------------- Mike P. Schulz Network Systems Developer Radialink Corporation - Ottawa, ON (613) 225-2258 x115

2 1

Automatic report from sources (radiusd) between 29.06.2005 - 30.06.2005 GMT
by Automatic cvs log generator 30 Jun '05

30 Jun '05

CVS log entries from 29.06.2005 (Wed) 08:00:01 - 30.06.2005 (Thu) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/threads.c; Revisions: 1.94, 1.77.2.3 File: radiusd/configure.in; Revisions: 1.217 ===================================================== Log entries ===================================================== Description: NetBSD compatibility Modified files: File: radiusd/configure.in; Revision: 1.217; Date: 2005/06/29 20:40:09; Author: aland; Lines: (+3 -2) ------------------------------- Description: Added one more (important) call to reap_children Modified files: File: radiusd/src/main/threads.c; Revision: 1.94; Date: 2005/06/29 18:46:17; Author: aland; Lines: (+10 -2) ------------------------------- Description: Catch a "corner" case for reap_children. In reality, this is probably the only place it should be called from. Modified files: File: radiusd/src/main/threads.c; Revision: 1.77.2.3; Date: 2005/06/29 18:42:23; Author: aland; Lines: (+7 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/configure.in Revisions: 1.217 Authors: aland (+3 -2) ------------------------------- File: radiusd/src/main/threads.c Revisions: 1.94, 1.77.2.3 Authors: aland (+10 -2), aland (+7 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

SMUX - SNMP
by Reza Toghraee 29 Jun '05

29 Jun '05

Hello I need to query freeradius by snmp. Badly I'm not very firendly with SMUX protcol, and the documentation of this part is really little. Let me show you what I did . My platform is RedHat Linux 9 and my Freeradius release is 0.8 I checked the configure file, and check a line "with-snmp" . it seems freeradius configure adds -with-snmp by default when you start configuring. But according to snmp documents, I added -with-snmp to my configure line. ( configure -with-snmp --prefix=something) After compliation is completed: In radiusd.conf,checked that snmp.conf included. In snmp.conf added "smux_password=secret" In my net-snmp.conf I added " smuxpeer .1.3.6.1.4.1.3317.1.3.1 secret" The GNOME-PRODUCT-RADIUSD-MIB.mib downloaded (.1.3.6.1.4.1.3317.1.3.1) and copied in my GETIF (snmp viewer) directory When I query with getif it I didne see any SMUX query in my SNMP log. And nothing reach to freeradius. What should I do ? What is the MIB directory in freeradius package ? there are AUTH , ACCT mib files for MIB2. I think freeradus doesn't support them and just has 1 OID which is .1.3.6.1.4.1.3317.1.3.1 . If this is true , can anyone say what is this OID ? Regards Reza

4 3

Radius client library with similar functionality to Cisco?
by David Stanaway 28 Jun '05

28 Jun '05

I was wondering if anyone had come across a radius client library with similar functionality to cisco IOS (multiple radius server groups, broadcast or failover group configuration, configurable retry delay, and number of retries, etc...)? -- David Stanaway <david(a)dialmex.net>

4 4

Automatic report from sources (radiusd) between 27.06.2005 - 28.06.2005 GMT
by Automatic cvs log generator 28 Jun '05

28 Jun '05

CVS log entries from 27.06.2005 (Mon) 08:00:01 - 28.06.2005 (Tue) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/share/dictionary.mikrotik; Revisions: 1.2 File: radiusd/share/dictionary; Revisions: 1.114, 1.113 File: radiusd/share/dictionary.aruba; Revisions: 1.1 Author: fcusack File: radiusd/src/modules/rlm_otp/otp_rlm.c; Revisions: 1.2 File: radiusd/src/modules/rlm_otp/otp_cardops.c; Revisions: 1.2 File: radiusd/doc/rlm_otp; Revisions: 1.2 File: radiusd/raddb/otp.conf; Revisions: 1.2 File: radiusd/src/modules/rlm_otp/otp_util.c; Revisions: 1.2 File: radiusd/src/modules/rlm_otp/otp.h; Revisions: 1.2 ===================================================== Combined list of identical log entries ===================================================== Description: Updates, as posted to the list Modified files: File: radiusd/share/dictionary; Revision: 1.114; Date: 2005/06/28 00:54:38; Author: aland; Lines: (+2 -1) File: radiusd/share/dictionary.mikrotik; Revision: 1.2; Date: 2005/06/28 00:54:38; Author: aland; Lines: (+15 -2) ------------------------------- Description: Aruba vendor dictionary, as posted to the list Modified files: File: radiusd/share/dictionary; Revision: 1.113; Date: 2005/06/28 00:44:29; Author: aland; Lines: (+6 -1) File: radiusd/share/dictionary.aruba; Revision: 1.1; Date: 2005/06/28 00:44:29; Author: aland; ------------------------------- Description: soft PIN Modified files: File: radiusd/doc/rlm_otp; Revision: 1.2; Date: 2005/06/27 11:10:14; Author: fcusack; Lines: (+28 -8) File: radiusd/raddb/otp.conf; Revision: 1.2; Date: 2005/06/27 11:10:14; Author: fcusack; Lines: (+5 -0) File: radiusd/src/modules/rlm_otp/otp.h; Revision: 1.2; Date: 2005/06/27 11:10:14; Author: fcusack; Lines: (+4 -1) File: radiusd/src/modules/rlm_otp/otp_cardops.c; Revision: 1.2; Date: 2005/06/27 11:10:14; Author: fcusack; Lines: (+37 -16) File: radiusd/src/modules/rlm_otp/otp_rlm.c; Revision: 1.2; Date: 2005/06/27 11:10:15; Author: fcusack; Lines: (+4 -3) File: radiusd/src/modules/rlm_otp/otp_util.c; Revision: 1.2; Date: 2005/06/27 11:10:15; Author: fcusack; Lines: (+55 -11) ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/doc/rlm_otp Revisions: 1.2 Authors: fcusack (+28 -8) ------------------------------- File: radiusd/raddb/otp.conf Revisions: 1.2 Authors: fcusack (+5 -0) ------------------------------- File: radiusd/share/dictionary Revisions: 1.114, 1.113 Authors: aland (+2 -1), aland (+6 -1) ------------------------------- File: radiusd/share/dictionary.aruba Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/share/dictionary.mikrotik Revisions: 1.2 Authors: aland (+15 -2) ------------------------------- File: radiusd/src/modules/rlm_otp/otp.h Revisions: 1.2 Authors: fcusack (+4 -1) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_cardops.c Revisions: 1.2 Authors: fcusack (+37 -16) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_rlm.c Revisions: 1.2 Authors: fcusack (+4 -3) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_util.c Revisions: 1.2 Authors: fcusack (+55 -11) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

RE: How can I add Aruba Networks VSA list to distribution?
by Deepinder Setia 27 Jun '05

27 Jun '05

Here is the Aruba VSA list: VENDOR Aruba 14823 ATTRIBUTE Aruba-User-Role 1 string Aruba ATTRIBUTE Aruba-User-Vlan 2 integer Aruba ATTRIBUTE Aruba-Priv-Admin-User 3 integer Aruba ATTRIBUTE Aruba-Admin-Role 4 string Aruba ATTRIBUTE Aruba-Essid-Name 5 string Aruba ATTRIBUTE Aruba-Location-Id 6 string Aruba Thanks, Deepinder. -----Original Message----- From: freeradius-devel-bounces(a)lists.freeradius.org [mailto:freeradius-devel-bounces@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Monday, June 27, 2005 9:51 AM To: FreeRadius developers mailing list Subject: Re: How can I add Aruba Networks VSA list to distribution? "Deepinder Setia" <dsetia(a)arubanetworks.com> wrote: > The vendor ID is 14823. There will be about 7 VSA initially. Send an email to the list with names & numbers. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html

2 1

How can I add Aruba Networks VSA list to distribution?
by Deepinder Setia 27 Jun '05

27 Jun '05

The vendor ID is 14823. There will be about 7 VSA initially. Thanks. Deepinder Setia Aruba Wireless Networks dsetia(a)arubanetworks.com <mailto:dsetia@arubanetworks.com> Office: 408.754.3042 Mobile: 408.623.0371 www.arubanetworks.com <http://www.arubanetworks.com/>

2 1

unixODBC sql_finish_query problem
by dav 27 Jun '05

27 Jun '05

Hi all, We are using freeRadius V.1.04 connecting to a FireBird v 1.5.2 via unixOdbc module. We experienced this problem: in the accounting (accounting_start and stop) section we use a stored procedure with some insert statements inside, called by a "EXECUTE PROCEDURE foo()" statement and noticed that queries weren't committed; We solved the problem analyzing the code of sql_unixodbc.c module and modifying this part: static int sql_finish_query(SQLSOCK *sqlsocket, SQL_CONFIG *config) { /* Not used */ return 0; } to: static int sql_finish_query(SQLSOCK *sqlsocket, SQL_CONFIG *config) { rlm_sql_unixodbc_sock *unixodbc_sock = sqlsocket->conn; SQLFreeStmt(unixodbc_sock->stmt_handle, SQL_CLOSE); return 0; } similarly to sql_finish_select_query function; Why the original sql_finish_query is empty and doesn't do anything? Is the proposed solution correct? Any advices? Could it be introduced in future releases? Davide

1 0

Automatic report from sources (radiusd) between 25.06.2005 - 26.06.2005 GMT
by Automatic cvs log generator 26 Jun '05

26 Jun '05

CVS log entries from 25.06.2005 (Sat) 08:00:01 - 26.06.2005 (Sun) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/src/modules/rlm_sql/sql.c; Revisions: 1.83, 1.79.2.2 ===================================================== Log entries ===================================================== Description: Fix quote removal of the value in sql_userparse (closes: #242) Modified files: File: radiusd/src/modules/rlm_sql/sql.c; Revision: 1.83; Date: 2005/06/25 22:44:35; Author: nbk; Lines: (+17 -18) ------------------------------- Description: Pull from CVS head: Fix quote removal of the value in sql_userparse (closes: #242) Modified files: File: radiusd/src/modules/rlm_sql/sql.c; Revision: 1.79.2.2; Date: 2005/06/25 22:45:35; Author: nbk; Lines: (+17 -18) ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_sql/sql.c Revisions: 1.83, 1.79.2.2 Authors: nbk (+17 -18), nbk (+17 -18) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0