July 2005 - Freeradius-Devel - lists.freeradius.org

proxy configuration with ldap configuration failed to authenticate
by sumi thra 17 Aug '05

17 Aug '05

Hi Im sending an authentication request to the radius server which proxy's the request to the other server. But After proxying the request it does ldap search & returns Access-Reject to the user. Why is this ldap authentication is needed for proxy requests?? Please help he in this regard. Awaiting for the earliest reply. Thanks Sumi

2 6

Any objection to deleting support for "clients"?
by Alan DeKok 16 Aug '05

16 Aug '05

It's been deprecated forever... Alan DeKok.

5 32

[Q] FreeRadius proxy and Accounting-Off/Accounting-On packets
by Andrey Panin 01 Aug '05

01 Aug '05

Hello, how Freeradius handle Accounting-Off/Accounting-On packets in proxy mode ? Looks like it just drops them on the floor :( Best regards. -- Andrey Panin | Linux and UNIX system administrator pazke(a)donpac.ru | PGP key: wwwkeys.pgp.net

2 2

Automatic report from sources (radiusd) between 30.07.2005 - 31.07.2005 GMT
by Automatic cvs log generator 31 Jul '05

31 Jul '05

CVS log entries from 30.07.2005 (Sat) 08:00:01 - 31.07.2005 (Sun) 08:00:03 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/src/modules/rlm_radutmp/rlm_radutmp.c; Revisions: 1.30 File: radiusd/src/modules/rlm_radutmp/rlm_radutmp2.c; Revisions: 1.5 File: radiusd/src/main/session.c; Revisions: 1.27 File: radiusd/src/modules/rlm_sql/rlm_sql.c; Revisions: 1.147 ===================================================== Combined list of identical log entries ===================================================== Description: Don't zap the session if the function rad_check_ts() failed. Modified files: File: radiusd/src/modules/rlm_radutmp/rlm_radutmp.c; Revision: 1.30; Date: 2005/07/30 21:39:55; Author: nbk; Lines: (+18 -15) File: radiusd/src/modules/rlm_radutmp/rlm_radutmp2.c; Revision: 1.5; Date: 2005/07/30 21:39:56; Author: nbk; Lines: (+24 -20) ===================================================== Log entries ===================================================== Description: Add a comment about the return values of the function rad_check_ts() Modified files: File: radiusd/src/main/session.c; Revision: 1.27; Date: 2005/07/30 21:34:31; Author: nbk; Lines: (+11 -4) ------------------------------- Description: Don't zap the session if the function rad_check_ts() failed. (closes: #235) Based on a patch from Stephan Jaeger <stephan.jaeger(a)ewetel.de> Modified files: File: radiusd/src/modules/rlm_sql/rlm_sql.c; Revision: 1.147; Date: 2005/07/30 21:38:55; Author: nbk; Lines: (+47 -43) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/session.c Revisions: 1.27 Authors: nbk (+11 -4) ------------------------------- File: radiusd/src/modules/rlm_radutmp/rlm_radutmp.c Revisions: 1.30 Authors: nbk (+18 -15) ------------------------------- File: radiusd/src/modules/rlm_radutmp/rlm_radutmp2.c Revisions: 1.5 Authors: nbk (+24 -20) ------------------------------- File: radiusd/src/modules/rlm_sql/rlm_sql.c Revisions: 1.147 Authors: nbk (+47 -43) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 29.07.2005 - 30.07.2005 GMT
by Automatic cvs log generator 30 Jul '05

30 Jul '05

CVS log entries from 29.07.2005 (Fri) 08:00:00 - 30.07.2005 (Sat) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/client.c; Revisions: 1.44 ===================================================== Log entries ===================================================== Description: Don't use GCC-isms Modified files: File: radiusd/src/main/client.c; Revision: 1.44; Date: 2005/07/29 22:55:03; Author: aland; Lines: (+3 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/client.c Revisions: 1.44 Authors: aland (+3 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 28.07.2005 - 29.07.2005 GMT
by Automatic cvs log generator 29 Jul '05

29 Jul '05

CVS log entries from 28.07.2005 (Thu) 08:00:01 - 29.07.2005 (Fri) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/src/main/proxy.c; Revisions: 1.85 ===================================================== Log entries ===================================================== Description: Check the value of realm->striprealm before overwriting the User-Name with the Stripped-User-Name. Modified files: File: radiusd/src/main/proxy.c; Revision: 1.85; Date: 2005/07/28 19:47:32; Author: nbk; Lines: (+4 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/proxy.c Revisions: 1.85 Authors: nbk (+4 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

dialup_admin: list users and monthly stats
by Muenz, Michael 28 Jul '05

28 Jul '05

Hi List, I've just updated dialup_admin to the current CVS version. Works great so far, but I'm wondering why user_stats_month.php3 was removed? I've copied from old (CVS) version and edit buttons. Now it's like the old one. Second Q: I've read in the Changelog: * Make pagesize 'all' work again. That's true, it works, but now all other sizes don't work. Bug? Not tested the other new features, but seems to be working at all. I've also added "\#" to preg_replace("/[^\w\.\/\#\@\:\-]/",'',$login); in conf/config.php3 to allow hash key's in usernames. Michael

1 0

proxy configuration with ldap authorization(very urgent)
by sumi thra 28 Jul '05

28 Jul '05

Hi Im sending an authentication request to the radius server which proxy's the request to the other server. But After proxying the request it does ldap search & returns Access-Reject to the user. Why is this ldap authentication is needed for proxy requests?? Please help he in this regard. Awaiting for the earliest reply. Thanks Sumi

1 0

Proxy configuration with Free Radius
by sumi 28 Jul '05

28 Jul '05

Hi , Could you Plz help me to resolve this issue.. ? The issue is.. CASE 1: Step 1: Im using free radius latest version. I have two radius servers running in the same network. One is configured as direct authentication server and this primary server forwards(proxy's) the request to the second radius server. Primary radius servers radius.conf file... has the configuration... in the authorize module as , authorize { preprocess eap mschap suffix # ldap } Step 2 : Im sending an authentication request to the primary server which inturn forwards the request to the second server ( basically proxy's the request) Result : Authentication success. And the user got connected to the WLAN - X. CASE 2: Im changing the authorize module of primary server to .. STEP 1 : authorize { preprocess eap mschap suffix # Im uncommenting ldap ldap } STEP 2: Same as previous.. LDAP is not connected to the primary server. Result : rad_recv: Access-Request packet from host 192.168.0.1:12590<http://192.168.0.1:12590>, id=90, length=177 User-Name = "anonymous(a)symbol.com" Called-Station-Id = "00:a0:f8:bc:b4:3c" Calling-Station-Id = "00:0f:66:4f:54:41" NAS-Port = 1 NAS-Port-Type = Wireless-802.11 Framed-MTU = 1400 NAS-IP-Address = 192.168.0.1 <http://192.168.0.1> NAS-Identifier = "WS2000" Vendor-388-Attr-2 = 0x73756d695f72616474657374 EAP-Message = 0x0201001901616e6f6e796d6f75734073796d626f6c2e636f6d Message-Authenticator = 0xf2ffcd4c14e14277dde2bf1d7b66e41f Processing the authorize section of radiusd.conf modcall: entering group authorize for request 23 modcall[authorize]: module "preprocess" returns ok for request 23 modcall[authorize]: module "chap" returns noop for request 23 modcall[authorize]: module "mschap" returns noop for request 23 rlm_realm: Looking up realm "symbol.com <http://symbol.com>" for User-Name = "anonymous(a)symbol.com" rlm_realm: Found realm "symbol.com<http://symbol.com> " rlm_realm: Proxying request from user anonymous to realm symbol.com<http://symbol.com> rlm_realm: Adding Realm = "symbol.com <http://symbol.com>" rlm_realm: Preparing to proxy authentication request to realm "symbol.com<http://symbol.com> " modcall[authorize]: module "suffix" returns updated for request 23 rlm_eap: Request is supposed to be proxied to Realm symbol.com<http://symbol.com>. Not doing EAP. modcall[authorize]: module "eap" returns noop for request 23 users: Matched entry anonymous(a)symbol.com at line 96 modcall[authorize]: module "files" returns ok for request 23 rlm_ldap: - authorize rlm_ldap: performing user authorization for anonymous(a)symbol.com radius_xlat: '(uid=anonymous(a)symbol.com)' radius_xlat: 'o=My Org,c=UA' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to ldap.your.domain:389, authentication 0 rlm_ldap: bind as / to ldap.your.domain:389 rlm_ldap: bind to ldap.your.domain:389 failed: Can't contact LDAP server rlm_ldap: (re)connection attempt failed rlm_ldap: search failed rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap" returns fail for request 23 modcall: group authorize returns fail for request 23 Sending Access-Request of id 8 to 157.235.206.67:1812<http://157.235.206.67:1812> User-Name = "anonymous(a)symbol.com" Called-Station-Id = "00:a0:f8:bc:b4:3c" Calling-Station-Id = "00:0f:66:4f:54:41" NAS-Port = 1 NAS-Port-Type = Wireless-802.11 Framed-MTU = 1400 NAS-IP-Address = 192.168.0.1 <http://192.168.0.1> NAS-Identifier = "WS2000" Vendor-388-Attr-2 = 0x73756d695f72616474657374 EAP-Message = 0x0201001901616e6f6e796d6f75734073796d626f6c2e636f6d Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3930 --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.0.1:12590<http://192.168.0.1:12590>, id=90, length=177 Dropping conflicting packet from client ws2k:12590 - ID: 90 due to unfinished request 23 --- Walking the entire request list --- Waking up in 2 seconds... --- Walking the entire request list --- Re-sending Access-Request of id 8 to 157.235.206.67:1812<http://157.235.206.67:1812> User-Name = "anonymous(a)symbol.com" Called-Station-Id = "00:a0:f8:bc:b4:3c" Calling-Station-Id = "00:0f:66:4f:54:41" NAS-Port = 1 NAS-Port-Type = Wireless-802.11 Framed-MTU = 1400 NAS-IP-Address = 192.168.0.1 <http://192.168.0.1> NAS-Identifier = "WS2000" Vendor-388-Attr-2 = 0x73756d695f72616474657374 EAP-Message = 0x0201001901616e6f6e796d6f75734073796d626f6c2e636f6d Message-Authenticator = 0x00000000000000000000000000000000 Client-IP-Address = 192.168.0.1 <http://192.168.0.1> Realm = "symbol.com <http://symbol.com>" EAP-Type = Identity Realm = "symbol.com <http://symbol.com>" Proxy-State = 0x3930 Waking up in 5 seconds... rad_recv: Access-Request packet from host 192.168.0.1:12590<http://192.168.0.1:12590>, id=90, length=177 Dropping conflicting packet from client ws2k:12590 - ID: 90 due to unfinished request 23 --- Walking the entire request list --- Waking up in 2 seconds... --- Walking the entire request list --- Re-sending Access-Request of id 8 to 157.235.206.67:1812<http://157.235.206.67:1812> User-Name = "anonymous(a)symbol.com" Called-Station-Id = "00:a0:f8:bc:b4:3c" Calling-Station-Id = "00:0f:66:4f:54:41" NAS-Port = 1 NAS-Port-Type = Wireless-802.11 Framed-MTU = 1400 NAS-IP-Address = 192.168.0.1 <http://192.168.0.1> NAS-Identifier = "WS2000" Vendor-388-Attr-2 = 0x73756d695f72616474657374 EAP-Message = 0x0201001901616e6f6e796d6f75734073796d626f6c2e636f6d Message-Authenticator = 0x00000000000000000000000000000000 Client-IP-Address = 192.168.0.1 <http://192.168.0.1> Realm = "symbol.com <http://symbol.com>" EAP-Type = Identity Realm = "symbol.com <http://symbol.com>" Proxy-State = 0x3930 Waking up in 5 seconds... --- Walking the entire request list --- Server rejecting request 23. marking authentication server 157.235.206.67:1812<http://157.235.206.67:1812>for realm symbol.com <http://symbol.com> dead Waking up in 0 seconds... --- Walking the entire request list --- Sending Access-Reject of id 90 to 192.168.0.1:12590<http://192.168.0.1:12590> Cleaning up request 23 ID 90 with timestamp 42e83888 Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 192.168.0.1:12591<http://192.168.0.1:12591>, id=91, length=177 User-Name = "anonymous(a)symbol.com" Called-Station-Id = "00:a0:f8:bc:b4:3c" Calling-Station-Id = "00:0f:66:4f:54:41" NAS-Port = 1 NAS-Port-Type = Wireless-802.11 Framed-MTU = 1400 NAS-IP-Address = 192.168.0.1 <http://192.168.0.1> NAS-Identifier = "WS2000" Vendor-388-Attr-2 = 0x73756d695f72616474657374 EAP-Message = 0x0201001901616e6f6e796d6f75734073796d626f6c2e636f6d Message-Authenticator = 0x9e6c2754c62012077fa29b7696d5755e Processing the authorize section of radiusd.conf My doubt is why do we need to have an ldap setting for the proxy requests??? The secondary server when it gets the request for the first time it says.. Access Accept.. But for the next time onwards it rejects the user. Plz help me on this regard. Awaiting for your earliest reply. Thanks & Regards Sumi

1 0

(no subject)
by pks＠dpimatrix.com 27 Jul '05

27 Jul '05

Gentlemen: What would be a good place to look for FreeRadius developers for extension of features necessary for Telco and ISP operations? Thanks,

1 0

Automatic report from sources (radiusd) between 26.07.2005 - 27.07.2005 GMT
by Automatic cvs log generator 27 Jul '05

27 Jul '05

CVS log entries from 26.07.2005 (Tue) 08:00:01 - 27.07.2005 (Wed) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/radwho.c; Revisions: 1.55, 1.44.2.2 ===================================================== Combined list of identical log entries ===================================================== Description: Ports are unsigned int's Modified files: File: radiusd/src/main/radwho.c; Revision: 1.55; Date: 2005/07/26 22:27:23; Author: aland; Lines: (+5 -4) File: radiusd/src/main/radwho.c; Revision: 1.44.2.2; Date: 2005/07/26 22:26:43; Author: aland; Lines: (+5 -4) ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/radwho.c Revisions: 1.55, 1.44.2.2 Authors: aland (+5 -4), aland (+5 -4) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 25.07.2005 - 26.07.2005 GMT
by Automatic cvs log generator 26 Jul '05

26 Jul '05

CVS log entries from 25.07.2005 (Mon) 08:00:01 - 26.07.2005 (Tue) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/files.c; Revisions: 1.90 File: radiusd/src/main/request_list.c; Revisions: 1.60 File: radiusd/src/main/request_process.c; Revisions: 1.8, 1.7 File: radiusd/src/include/radiusd.h; Revisions: 1.196 Author: nbk File: radiusd/src/modules/rlm_unix/compat.c; Revisions: 1.4.2.1 ===================================================== Combined list of identical log entries ===================================================== Description: Make realm_disable() work for all kinds of packets. Modified files: File: radiusd/src/include/radiusd.h; Revision: 1.196; Date: 2005/07/25 18:55:44; Author: aland; Lines: (+2 -2) File: radiusd/src/main/files.c; Revision: 1.90; Date: 2005/07/25 18:55:44; Author: aland; Lines: (+19 -7) File: radiusd/src/main/request_process.c; Revision: 1.7; Date: 2005/07/25 18:55:45; Author: aland; Lines: (+27 -30) ------------------------------- Description: Use new realm disable & stuff Modified files: File: radiusd/src/main/request_list.c; Revision: 1.60; Date: 2005/07/25 20:41:06; Author: aland; Lines: (+4 -6) File: radiusd/src/main/request_process.c; Revision: 1.8; Date: 2005/07/25 20:41:06; Author: aland; Lines: (+16 -22) ===================================================== Log entries ===================================================== Description: Remove the lines "buffer[BUFSIZE] ='\0';", which is an off-by-one error writing beyond the end of the array. We entrust fgets(3) to append a NUL character in any case. (closes: #251) Modified files: File: radiusd/src/modules/rlm_unix/compat.c; Revision: 1.4.2.1; Date: 2005/07/25 10:52:22; Author: nbk; Lines: (+2 -5) ===================================================== Summary of modified files ===================================================== File: radiusd/src/include/radiusd.h Revisions: 1.196 Authors: aland (+2 -2) ------------------------------- File: radiusd/src/main/files.c Revisions: 1.90 Authors: aland (+19 -7) ------------------------------- File: radiusd/src/main/request_list.c Revisions: 1.60 Authors: aland (+4 -6) ------------------------------- File: radiusd/src/main/request_process.c Revisions: 1.8, 1.7 Authors: aland (+16 -22), aland (+27 -30) ------------------------------- File: radiusd/src/modules/rlm_unix/compat.c Revisions: 1.4.2.1 Authors: nbk (+2 -5) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Proposition fo digest authentication support in pam_radius module
by Philippe Sultan 25 Jul '05

25 Jul '05

Hello everybody, first, thank you for all the work that is done on freeradius! I would like to propose a patch in order to use a the pam_radius module as a radius client supporting digest authentication. The provided patch applies to the pam_radius CVS version available at this time (eg v 1.3.17). Here is a rough description : - three files modified : pam_radius_auth.c, pam_radius_auth.h, radius.h - added support for an argument 'digest' in the /etc/pam.d/client_app configuration file, in order to use the feature - two new structures added in pam_radius_auth.h : digest_attr and digest_parameters In digest authentication mode (activated with the 'digest' argument in the corresponding pam.d configuration file), a call to the conversation function (provided by the client application) is expected to fill a digest_parameters structure with the necessary attributes. The pam_radius module will parse the digest_parameters structure, build a radius packet with all the Digest-Attributes and Digest-Response, and send it to a RADIUS server. A client application using this feature will have to be aware of these structs as they are expected to be filled by the 'conversation' function, for further processing by the pam_radius module. This module could eventually be used by an application such as Asterisk for SIP user authentication, as described in the draft-sterman-aaa-sip-00.txt doc. I successfully tested the module, along with a locally running freeradius server in version 1.0.2, and a client application I wrote, after I recorded a real SIP registration in order to grab two matching Nonce and Digest-Response attributes. I can give an example of such application if someone is interested. Bye, Philippe Sultan INRIA diff -urN pam_radius/pam_radius_auth.c pam_radius-digest_auth/pam_radius_auth.c --- pam_radius/pam_radius_auth.c 2005-04-06 01:08:30.000000000 +0200 +++ pam_radius-digest_auth/pam_radius_auth.c 2005-07-25 17:46:13.000000000 +0200 @@ -140,7 +140,11 @@ ctrl |= PAM_DEBUG_ARG; conf->debug = 1; - } else { + } else if (!strcmp(*argv, "digest")) { + ctrl |= DIGEST_AUTH; + conf->authmethod = DIGEST_AUTH; + } + else { _pam_log(LOG_WARNING, "unrecognized option '%s'", *argv); } } @@ -473,6 +477,28 @@ } /* + * Add a Digest-Attribute to a RADIUS packet. + */ +static void +add_digest_attribute(AUTH_HDR *request, unsigned char subtype, CONST unsigned char *subdata, int sublength) +{ + attribute_t *p; + attribute_t *sub; + + p = (attribute_t *) ((unsigned char *)request + ntohs(request->length)); + p->attribute = PW_DIGEST_ATTRIBUTES; + p->length = sublength + 4; /* the total size of the attribute */ + + sub = (attribute_t *)p->data; + sub->attribute = subtype; + sub->length = sublength + 2; + + request->length = htons(ntohs(request->length) + p->length); + memcpy(sub->data, subdata, sublength); + +} + +/* * Add an integer attribute to a RADIUS packet. */ static void @@ -709,16 +735,23 @@ add_attribute(request, PW_USER_NAME, (unsigned char *) user, strlen(user)); /* - * Add a password, if given. + * Add a password, if given. In case of digest authentication, the + * crendetials given by the application or user are added as a + * Digest-Response attribute. */ - if (password) { - add_password(request, PW_PASSWORD, password, conf->server->secret); - - /* - * Add a NULL password to non-accounting requests. - */ - } else if (request->code != PW_ACCOUNTING_REQUEST) { - add_password(request, PW_PASSWORD, "", conf->server->secret); + if (conf -> authmethod == DIGEST_AUTH) { + add_attribute(request, PW_DIGEST_RESPONSE, password, strlen(password)); + } + else if (conf->authmethod == PASSWD_AUTH) { + if (password) { + add_password(request, PW_PASSWORD, password, conf->server->secret); + + /* + * Add a NULL password to non-accounting requests. + */ + } else if (request->code != PW_ACCOUNTING_REQUEST) { + add_password(request, PW_PASSWORD, "", conf->server->secret); + } } /* the packet is from localhost if on localhost, to make configs easier */ @@ -1037,6 +1070,38 @@ return PAM_SUCCESS; } +static int rad_digest_converse(pam_handle_t *pamh, int msg_style, char *message, struct digest_parameters **params) +{ + CONST struct pam_conv *conv; + struct pam_message resp_msg; + CONST struct pam_message *msg[1]; + struct pam_response *resp = NULL; + struct digest_parameters *aux; + int retval; + + resp_msg.msg_style = msg_style; + resp_msg.msg = message; + msg[0] = &resp_msg; + + /* grab the digest response and the digest attributes */ + retval = pam_get_item(pamh, PAM_CONV, (CONST void **) &conv); + PAM_FAIL_CHECK; + + retval = conv->conv(1, msg, &resp,conv->appdata_ptr); + PAM_FAIL_CHECK; + + aux = (struct digest_parameters *)resp->resp; + + *params = (struct digest_parameters *)malloc(sizeof(struct digest_parameters)); + + /* copy the content of appdata_ptr into the params structure */ + memcpy(*params, resp->resp, sizeof(struct digest_parameters)); + + free(resp); + + return PAM_SUCCESS; +} + /************************************************************************** * GENERAL CODE **************************************************************************/ @@ -1054,6 +1119,7 @@ { CONST char *user; char *password = NULL; + struct digest_parameters *d_params; CONST char *rhost; char *resp2challenge = NULL; int ctrl; @@ -1066,6 +1132,10 @@ radius_conf_t config; int tries; + /* sets the authentication method to AUTH_PASSWD by default. Can be modified + in the configuration file */ + config.authmethod = PASSWD_AUTH; + ctrl = _pam_parse(argc, argv, &config); tries = ((ctrl & PAM_RETRY) >> 4) + 1; @@ -1126,16 +1196,28 @@ retval = PAM_AUTH_ERR; /* use one pass only, stopping if it fails */ goto error; } - + + /* which authentication method are we using? */ + if (ctrl & DIGEST_AUTH) { + retval = rad_digest_converse(pamh, PAM_PROMPT_ECHO_OFF, "Digest: ", &d_params); + PAM_FAIL_CHECK; + } + /* check to see if we send a NULL password the first time around */ - if (!(ctrl & PAM_SKIP_PASSWD)) { + else if (!(ctrl & PAM_SKIP_PASSWD)) { retval = rad_converse(pamh, PAM_PROMPT_ECHO_OFF, "Password: ", &password); PAM_FAIL_CHECK; } } /* end of password == NULL */ - build_radius_packet(request, user, password, &config); + /* for digest authentication, we give the digest response from + the application as credentials */ + if (ctrl & DIGEST_AUTH) { + build_radius_packet(request, user, d_params->digest_response, &config); + } + else + build_radius_packet(request, user, password, &config); /* not all servers understand this service type, but some do */ add_int_attribute(request, PW_USER_SERVICE_TYPE, PW_AUTHENTICATE_ONLY); @@ -1152,6 +1234,30 @@ strlen(rhost)); } + /* + * In case of digest authentication, build the necessary Digest-Attributes + * by parsing the d_params->d_attrs_list table. + */ + if (ctrl & DIGEST_AUTH) { + int i; + digest_attr_t *aux = d_params->d_attrs_list; + DPRINT(LOG_DEBUG, "Digest response : %s", + d_params->digest_response); + DPRINT(LOG_DEBUG, "number of digest attributes = %d", d_params->num_attrs); + for (i=0; i < d_params->num_attrs; i++) { + if (i >= MAX_DIGEST_ATTRS) { + DPRINT(LOG_DEBUG, "Number of maximum digest attributes (%d) exceeded. Ignoring new ones", MAX_DIGEST_ATTRS); + break; + } + DPRINT(LOG_DEBUG, "Type = %d", (int)aux->type); + DPRINT(LOG_DEBUG, "Length = %d", (int)aux->length); + DPRINT(LOG_DEBUG, "Value = %s", aux->value); + add_digest_attribute(request, aux->type, aux->value, strlen(aux->value)); + aux ++; + } + + } + DPRINT(LOG_DEBUG, "Sending RADIUS request code %d", request->code); retval = talk_radius(&config, request, response, password, NULL, tries); diff -urN pam_radius/pam_radius_auth.h pam_radius-digest_auth/pam_radius_auth.h --- pam_radius/pam_radius_auth.h 2003-09-19 16:41:32.000000000 +0200 +++ pam_radius-digest_auth/pam_radius_auth.h 2005-07-25 16:22:23.000000000 +0200 @@ -51,8 +51,23 @@ int accounting_bug; int sockfd; int debug; + int authmethod; } radius_conf_t; +typedef struct digest_attr { + char type; + char length; + char value[256]; +} digest_attr_t; + +#define MAX_DIGEST_ATTRS 10 + +struct digest_parameters { + char *digest_response; + int num_attrs; + digest_attr_t d_attrs_list[MAX_DIGEST_ATTRS]; +}; + /************************************************************************* * Platform specific defines @@ -83,6 +98,9 @@ #define PAM_USE_FIRST_PASS 4 #define PAM_TRY_FIRST_PASS 8 +#define PASSWD_AUTH 16 +#define DIGEST_AUTH 32 + #define PAM_RETRY 0x30 /* Module defines */ diff -urN pam_radius/radius.h pam_radius-digest_auth/radius.h --- pam_radius/radius.h 2000-08-22 17:24:47.000000000 +0200 +++ pam_radius-digest_auth/radius.h 2005-07-25 16:22:30.000000000 +0200 @@ -125,6 +125,21 @@ #define PW_LOGIN_LAT_PORT 63 /* string */ #define PW_PROMPT 64 /* integer */ +/* Experimental SIP-specific attributes (draft-sterman-aaa-sip-00.txt etc) */ + +#define PW_DIGEST_RESPONSE 206 /* string */ +#define PW_DIGEST_ATTRIBUTES 207 /* string */ +#define PW_DIGEST_REALM 1 /* string */ +#define PW_DIGEST_NONCE 2 /* string */ +#define PW_DIGEST_METHOD 3 /* string */ +#define PW_DIGEST_URI 4 /* string */ +#define PW_DIGEST_QOP 5 /* string */ +#define PW_DIGEST_ALGORITHM 6 /* string */ +#define PW_DIGEST_BODY_DIGEST 7 /* string */ +#define PW_DIGEST_CNONCE 8 /* string */ +#define PW_DIGEST_NONCE_COUNT 9 /* string */ +#define PW_DIGEST_USER_NAME 10 /* string */ + /* * INTEGER TRANSLATIONS */

1 0

Automatic report from sources (radiusd) between 24.07.2005 - 25.07.2005 GMT
by Automatic cvs log generator 25 Jul '05

25 Jul '05

CVS log entries from 24.07.2005 (Sun) 08:00:00 - 25.07.2005 (Mon) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/share/dictionary.cisco; Revisions: 1.14 ===================================================== Log entries ===================================================== Description: Additional Cisco VoIP attributes, as posted to the bugzilla (closes: #249) Patch from Ilia Chipitsine <ilia(a)rediska.ru> Modified files: File: radiusd/share/dictionary.cisco; Revision: 1.14; Date: 2005/07/24 19:15:17; Author: nbk; Lines: (+8 -4) ===================================================== Summary of modified files ===================================================== File: radiusd/share/dictionary.cisco Revisions: 1.14 Authors: nbk (+8 -4) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 23.07.2005 - 24.07.2005 GMT
by Automatic cvs log generator 24 Jul '05

24 Jul '05

CVS log entries from 23.07.2005 (Sat) 08:00:01 - 24.07.2005 (Sun) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/raddb/postgresql.conf; Revisions: 1.26 ===================================================== Log entries ===================================================== Description: Replace '%{NAS-Port}' with %{NAS-Port:-NULL} because it was reported on the bugzilla that some NASes (for example AS5350 IOS 12.3.T) don't send the attribute in Accounting-Request packets. (closes: #223) Bug found by Ilia Chipitsine <ilia(a)rediska.ru> Modified files: File: radiusd/raddb/postgresql.conf; Revision: 1.26; Date: 2005/07/23 15:41:10; Author: nbk; Lines: (+4 -4) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/postgresql.conf Revisions: 1.26 Authors: nbk (+4 -4) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 22.07.2005 - 23.07.2005 GMT
by Automatic cvs log generator 23 Jul '05

23 Jul '05

CVS log entries from 22.07.2005 (Fri) 08:00:01 - 23.07.2005 (Sat) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/xlat.c; Revisions: 1.98 File: radiusd/src/main/radclient.c; Revisions: 1.89 File: radiusd/src/main/listen.c; Revisions: 1.29 Author: nbk File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_iodbc/sql_iodbc.c; Revisions: 1.19 ===================================================== Log entries ===================================================== Description: Fix test for port over-ride Modified files: File: radiusd/src/main/listen.c; Revision: 1.29; Date: 2005/07/22 23:31:02; Author: aland; Lines: (+2 -2) ------------------------------- Description: Check return code for rad_send() Modified files: File: radiusd/src/main/radclient.c; Revision: 1.89; Date: 2005/07/22 23:40:44; Author: aland; Lines: (+7 -4) ------------------------------- Description: Allow Attribute-Name[stuff] to work Modified files: File: radiusd/src/main/xlat.c; Revision: 1.98; Date: 2005/07/22 23:52:00; Author: aland; Lines: (+4 -3) ------------------------------- Description: As iODBC defines success codes other than SQL_SUCCESS, we now use their macro SQL_SUCCEEDED(). (closes: #138) Bug found by Jeff Brown <jeff.brn(a)gmail.com> Modified files: File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_iodbc/sql_iodbc.c; Revision: 1.19; Date: 2005/07/22 11:01:55; Author: nbk; Lines: (+18 -7) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/listen.c Revisions: 1.29 Authors: aland (+2 -2) ------------------------------- File: radiusd/src/main/radclient.c Revisions: 1.89 Authors: aland (+7 -4) ------------------------------- File: radiusd/src/main/xlat.c Revisions: 1.98 Authors: aland (+4 -3) ------------------------------- File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_iodbc/sql_iodbc.c Revisions: 1.19 Authors: nbk (+18 -7) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

usage of dictionary files to configure quintum??????
by Hafiz Muhammad Yasin Saleemi 22 Jul '05

22 Jul '05

Hello dear all, i am using free radius and want to configure the quintum equipment with it. tell me how can i do it???? one way is usage of dictionary files but i don't know the usage of dictionary file. can any one help me to do this? hope for the best YASIN -- Love cures both one who send and one who recieved

2 1

Automatic report from sources (radiusd) between 21.07.2005 - 22.07.2005 GMT
by Automatic cvs log generator 22 Jul '05

22 Jul '05

CVS log entries from 21.07.2005 (Thu) 08:00:01 - 22.07.2005 (Fri) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/mainconfig.c; Revisions: 1.69 File: radiusd/src/main/listen.c; Revisions: 1.28, 1.27 File: radiusd/src/main/client.c; Revisions: 1.43, 1.42 File: radiusd/src/include/radiusd.h; Revisions: 1.195 Author: nbk File: radiusd/scripts/Makefile; Revisions: 1.6 File: radiusd/src/modules/rlm_sql/rlm_sql.c; Revisions: 1.146 ===================================================== Combined list of identical log entries ===================================================== Description: Allow multiple "listen" sections to use the same clients section, by putting the RADCLIENT_LIST ptr into the clients section, via cf_data_add() Modified files: File: radiusd/src/include/radiusd.h; Revision: 1.195; Date: 2005/07/21 22:34:28; Author: aland; Lines: (+3 -4) File: radiusd/src/main/client.c; Revision: 1.42; Date: 2005/07/21 22:34:29; Author: aland; Lines: (+33 -10) File: radiusd/src/main/listen.c; Revision: 1.27; Date: 2005/07/21 22:34:28; Author: aland; Lines: (+4 -21) File: radiusd/src/main/mainconfig.c; Revision: 1.69; Date: 2005/07/21 22:34:28; Author: aland; Lines: (+6 -13) ------------------------------- Description: prefer shortname, and set it if unset Modified files: File: radiusd/src/main/client.c; Revision: 1.43; Date: 2005/07/21 22:44:39; Author: aland; Lines: (+7 -2) File: radiusd/src/main/listen.c; Revision: 1.28; Date: 2005/07/21 22:44:39; Author: aland; Lines: (+8 -8) ===================================================== Log entries ===================================================== Description: Install radsqlrelay, too. (the new Perl version) Modified files: File: radiusd/scripts/Makefile; Revision: 1.6; Date: 2005/07/21 08:07:48; Author: nbk; Lines: (+2 -1) ------------------------------- Description: s/mainconfig.client_trees/mainconfig.clients/ Modified files: File: radiusd/src/modules/rlm_sql/rlm_sql.c; Revision: 1.146; Date: 2005/07/21 13:10:42; Author: nbk; Lines: (+3 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/scripts/Makefile Revisions: 1.6 Authors: nbk (+2 -1) ------------------------------- File: radiusd/src/include/radiusd.h Revisions: 1.195 Authors: aland (+3 -4) ------------------------------- File: radiusd/src/main/client.c Revisions: 1.43, 1.42 Authors: aland (+7 -2), aland (+33 -10) ------------------------------- File: radiusd/src/main/listen.c Revisions: 1.28, 1.27 Authors: aland (+8 -8), aland (+4 -21) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.69 Authors: aland (+6 -13) ------------------------------- File: radiusd/src/modules/rlm_sql/rlm_sql.c Revisions: 1.146 Authors: nbk (+3 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 19.07.2005 - 20.07.2005 GMT
by Automatic cvs log generator 21 Jul '05

21 Jul '05

CVS log entries from 19.07.2005 (Tue) 08:00:01 - 20.07.2005 (Wed) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/Makefile.in; Revisions: 1.49 File: radiusd/src/main/mainconfig.c; Revisions: 1.67 File: radiusd/src/main/radsqlrelay.c; Revisions: 1.10 File: radiusd/src/main/radrelay.c; Revisions: 1.34 File: radiusd/man/man8/radrelay.8; Revisions: 1.5 File: radiusd/src/main/radius_snmp.c; Revisions: 1.23 File: radiusd/man/man5/rlm_sql_log.5; Revisions: 1.2 File: radiusd/src/main/client.c; Revisions: 1.40, 1.39 File: radiusd/src/include/radiusd.h; Revisions: 1.193 ===================================================== Combined list of identical log entries ===================================================== Description: Removed radrelay & radsqlrelay Modified files: File: radiusd/src/main/Makefile.in; Revision: 1.49; Date: 2005/07/19 20:57:09; Author: aland; Lines: (+2 -16) File: radiusd/src/main/radrelay.c; Revision: 1.34; Date: 2005/07/19 20:57:10; Author: aland; Lines: (+1 -1) File: radiusd/src/main/radsqlrelay.c; Revision: 1.10; Date: 2005/07/19 20:57:10; Author: aland; Lines: (+1 -1) ------------------------------- Description: Enable SNMP support for clients again. Modified files: File: radiusd/src/include/radiusd.h; Revision: 1.193; Date: 2005/07/19 20:15:30; Author: aland; Lines: (+13 -8) File: radiusd/src/main/client.c; Revision: 1.39; Date: 2005/07/19 20:15:30; Author: aland; Lines: (+78 -32) File: radiusd/src/main/mainconfig.c; Revision: 1.67; Date: 2005/07/19 20:15:30; Author: aland; Lines: (+14 -30) File: radiusd/src/main/radius_snmp.c; Revision: 1.23; Date: 2005/07/19 20:15:30; Author: aland; Lines: (+9 -25) ===================================================== Log entries ===================================================== Description: Updates Modified files: File: radiusd/man/man5/rlm_sql_log.5; Revision: 1.2; Date: 2005/07/19 23:05:46; Author: aland; Lines: (+34 -9) ------------------------------- Description: No more radrelay. Say so. Modified files: File: radiusd/man/man8/radrelay.8; Revision: 1.5; Date: 2005/07/19 23:05:55; Author: aland; Lines: (+11 -72) ------------------------------- Description: Lower the work we do to find a client. Modified files: File: radiusd/src/main/client.c; Revision: 1.40; Date: 2005/07/19 20:37:24; Author: aland; Lines: (+14 -4) ===================================================== Summary of modified files ===================================================== File: radiusd/man/man5/rlm_sql_log.5 Revisions: 1.2 Authors: aland (+34 -9) ------------------------------- File: radiusd/man/man8/radrelay.8 Revisions: 1.5 Authors: aland (+11 -72) ------------------------------- File: radiusd/src/include/radiusd.h Revisions: 1.193 Authors: aland (+13 -8) ------------------------------- File: radiusd/src/main/Makefile.in Revisions: 1.49 Authors: aland (+2 -16) ------------------------------- File: radiusd/src/main/client.c Revisions: 1.40, 1.39 Authors: aland (+14 -4), aland (+78 -32) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.67 Authors: aland (+14 -30) ------------------------------- File: radiusd/src/main/radius_snmp.c Revisions: 1.23 Authors: aland (+9 -25) ------------------------------- File: radiusd/src/main/radrelay.c Revisions: 1.34 Authors: aland (+1 -1) ------------------------------- File: radiusd/src/main/radsqlrelay.c Revisions: 1.10 Authors: aland (+1 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

2 1

Automatic report from sources (radiusd) between 20.07.2005 - 21.07.2005 GMT
by Automatic cvs log generator 21 Jul '05

21 Jul '05

CVS log entries from 20.07.2005 (Wed) 08:00:01 - 21.07.2005 (Thu) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/mainconfig.c; Revisions: 1.68 File: radiusd/raddb/radiusd.conf.in; Revisions: 1.216 File: radiusd/raddb/clients.conf; Revisions: 1.8 File: radiusd/src/main/listen.c; Revisions: 1.26 File: radiusd/src/main/client.c; Revisions: 1.41 File: radiusd/src/include/radiusd.h; Revisions: 1.194 ===================================================== Combined list of identical log entries ===================================================== Description: Added support for per-socket client lists. Right now, you can only have a global list, OR a per-socket list, but multiple sockets can use the same list. Modified files: File: radiusd/src/include/radiusd.h; Revision: 1.194; Date: 2005/07/21 03:07:28; Author: aland; Lines: (+4 -1) File: radiusd/src/main/client.c; Revision: 1.41; Date: 2005/07/21 03:07:28; Author: aland; Lines: (+114 -2) File: radiusd/src/main/listen.c; Revision: 1.26; Date: 2005/07/21 03:07:29; Author: aland; Lines: (+104 -22) File: radiusd/src/main/mainconfig.c; Revision: 1.68; Date: 2005/07/21 03:07:28; Author: aland; Lines: (+2 -111) ------------------------------- Description: Document "ipv6addr" in listen{} Document "clients" in listen{} Modified files: File: radiusd/raddb/clients.conf; Revision: 1.8; Date: 2005/07/21 03:18:16; Author: aland; Lines: (+13 -0) File: radiusd/raddb/radiusd.conf.in; Revision: 1.216; Date: 2005/07/21 03:18:16; Author: aland; Lines: (+31 -1) ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/clients.conf Revisions: 1.8 Authors: aland (+13 -0) ------------------------------- File: radiusd/raddb/radiusd.conf.in Revisions: 1.216 Authors: aland (+31 -1) ------------------------------- File: radiusd/src/include/radiusd.h Revisions: 1.194 Authors: aland (+4 -1) ------------------------------- File: radiusd/src/main/client.c Revisions: 1.41 Authors: aland (+114 -2) ------------------------------- File: radiusd/src/main/listen.c Revisions: 1.26 Authors: aland (+104 -22) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.68 Authors: aland (+2 -111) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 18.07.2005 - 19.07.2005 GMT
by Automatic cvs log generator 19 Jul '05

19 Jul '05

CVS log entries from 18.07.2005 (Mon) 08:00:00 - 19.07.2005 (Tue) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/xlat.c; Revisions: 1.97 File: radiusd/src/main/mainconfig.c; Revisions: 1.66, 1.65 File: radiusd/src/modules/rlm_unix/rlm_unix.c; Revisions: 1.69 File: radiusd/src/main/listen.c; Revisions: 1.25 File: radiusd/src/main/client.c; Revisions: 1.38, 1.37 File: radiusd/src/include/radiusd.h; Revisions: 1.192, 1.191 File: radiusd/src/modules/rlm_radutmp/rlm_radutmp.c; Revisions: 1.29 File: radiusd/src/main/auth.c; Revisions: 1.145 File: radiusd/src/main/files.c; Revisions: 1.89 File: radiusd/src/main/session.c; Revisions: 1.26 File: radiusd/src/main/request_list.c; Revisions: 1.59 File: radiusd/src/main/radius_snmp.c; Revisions: 1.22 File: radiusd/src/modules/rlm_sql/rlm_sql.c; Revisions: 1.145 ===================================================== Combined list of identical log entries ===================================================== Description: Call client_free() if client_add() fails. Update SQL code to call new routines. Untested, though... Modified files: File: radiusd/src/include/radiusd.h; Revision: 1.192; Date: 2005/07/18 20:26:38; Author: aland; Lines: (+2 -1) File: radiusd/src/main/client.c; Revision: 1.38; Date: 2005/07/18 20:26:38; Author: aland; Lines: (+3 -6) File: radiusd/src/main/mainconfig.c; Revision: 1.66; Date: 2005/07/18 20:26:38; Author: aland; Lines: (+2 -4) File: radiusd/src/modules/rlm_sql/rlm_sql.c; Revision: 1.145; Date: 2005/07/18 20:26:39; Author: aland; Lines: (+18 -7) ------------------------------- Description: Move RADCLIENT* in mainconfig to rbtree's. This means that lookups will be faster for large numbers of clients. Also, the "client_*()" functions now take a pointer to the "master client list" struct, which means it should be easier to allow per-"listen" socket clients. Caveats are - the SNMP code does NOT return the list of the clients This may be easy to fix, though. - due to allowing network/mask, we always walk through a list of 128 prefixes, even if only 1-2 are defined. This can be fixed easily, though. The SQL code has been updated, but not tested Modified files: File: radiusd/src/include/radiusd.h; Revision: 1.191; Date: 2005/07/18 20:22:20; Author: aland; Lines: (+12 -7) File: radiusd/src/main/auth.c; Revision: 1.145; Date: 2005/07/18 20:22:20; Author: aland; Lines: (+3 -3) File: radiusd/src/main/client.c; Revision: 1.37; Date: 2005/07/18 20:22:20; Author: aland; Lines: (+233 -109) File: radiusd/src/main/files.c; Revision: 1.89; Date: 2005/07/18 20:22:20; Author: aland; Lines: (+3 -3) File: radiusd/src/main/listen.c; Revision: 1.25; Date: 2005/07/18 20:22:20; Author: aland; Lines: (+11 -11) File: radiusd/src/main/mainconfig.c; Revision: 1.65; Date: 2005/07/18 20:22:21; Author: aland; Lines: (+72 -32) File: radiusd/src/main/radius_snmp.c; Revision: 1.22; Date: 2005/07/18 20:22:21; Author: aland; Lines: (+11 -6) File: radiusd/src/main/request_list.c; Revision: 1.59; Date: 2005/07/18 20:22:21; Author: aland; Lines: (+3 -3) File: radiusd/src/main/session.c; Revision: 1.26; Date: 2005/07/18 20:22:21; Author: aland; Lines: (+2 -2) File: radiusd/src/main/xlat.c; Revision: 1.97; Date: 2005/07/18 20:22:21; Author: aland; Lines: (+3 -3) File: radiusd/src/modules/rlm_radutmp/rlm_radutmp.c; Revision: 1.29; Date: 2005/07/18 20:22:21; Author: aland; Lines: (+3 -3) File: radiusd/src/modules/rlm_unix/rlm_unix.c; Revision: 1.69; Date: 2005/07/18 20:22:21; Author: aland; Lines: (+3 -3) ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/src/include/radiusd.h Revisions: 1.192, 1.191 Authors: aland (+2 -1), aland (+12 -7) ------------------------------- File: radiusd/src/main/auth.c Revisions: 1.145 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/main/client.c Revisions: 1.38, 1.37 Authors: aland (+3 -6), aland (+233 -109) ------------------------------- File: radiusd/src/main/files.c Revisions: 1.89 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/main/listen.c Revisions: 1.25 Authors: aland (+11 -11) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.66, 1.65 Authors: aland (+2 -4), aland (+72 -32) ------------------------------- File: radiusd/src/main/radius_snmp.c Revisions: 1.22 Authors: aland (+11 -6) ------------------------------- File: radiusd/src/main/request_list.c Revisions: 1.59 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/main/session.c Revisions: 1.26 Authors: aland (+2 -2) ------------------------------- File: radiusd/src/main/xlat.c Revisions: 1.97 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_radutmp/rlm_radutmp.c Revisions: 1.29 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_sql/rlm_sql.c Revisions: 1.145 Authors: aland (+18 -7) ------------------------------- File: radiusd/src/modules/rlm_unix/rlm_unix.c Revisions: 1.69 Authors: aland (+3 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Faster client lookups
by Alan DeKok 18 Jul '05

18 Jul '05

I've hacked the "client lookup" code so that it's now looking up clients in binary trees. This should allow 10^6 or so clients/server without the current linear lookup. I've updated the SQL "read clients" code, but I don't have SQL, so I haven't checked if it works. The change also removes the "get list of clients" from SNMP feature, but I don't see that as all that critical. Alan DeKok.

1 0

Nuking radrelay & radsqlrelay
by Alan DeKok 18 Jul '05

18 Jul '05

There hasn't been any discussion on this, so I'm going to delete the files from CVS later today, and update the various spec files. Alan DeKok.

1 0

Automatic report from sources (radiusd) between 15.07.2005 - 16.07.2005 GMT
by Automatic cvs log generator 16 Jul '05

16 Jul '05

CVS log entries from 15.07.2005 (Fri) 08:00:01 - 16.07.2005 (Sat) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/doc/ChangeLog; Revisions: 1.57.2.23 ===================================================== Log entries ===================================================== Description: Added latest set of changes - Fix quote removal of the values from a SQL database. - Reap the zombie process after a command run from "Exec-Program". - Allow to cancel proxy of accounting with "Proxy-To-Realm := LOCAL". - Don't copy VSA's to an Access-Reject packet. Modified files: File: radiusd/doc/ChangeLog; Revision: 1.57.2.23; Date: 2005/07/15 09:06:58; Author: nbk; Lines: (+6 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/ChangeLog Revisions: 1.57.2.23 Authors: nbk (+6 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 14.07.2005 - 15.07.2005 GMT
by Automatic cvs log generator 15 Jul '05

15 Jul '05

CVS log entries from 14.07.2005 (Thu) 08:00:00 - 15.07.2005 (Fri) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/src/main/util.c; Revisions: 1.37.2.1 ===================================================== Log entries ===================================================== Description: Pull from CVS head: Don't copy VSA's to an Access-Reject packet (closes: #207) Modified files: File: radiusd/src/main/util.c; Revision: 1.37.2.1; Date: 2005/07/14 17:53:36; Author: nbk; Lines: (+2 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/util.c Revisions: 1.37.2.1 Authors: nbk (+2 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0