August 2005 - Freeradius-Devel - lists.freeradius.org

Some notes on recent changes
by Alexander M. Pravking 02 Aug '05

02 Aug '05

First of all, I'd like to thank development team for great work done (I didn't keep trace of FreeRADIUS for some time). So I have some bug report (submitted to bugzilla) and some notes, hopefully useful for the project. The minimum-timeout of the rlm_logintime module is more likely to be a global post-authorization configuration option, i.e. if it's set, always check that Session-Timeout in reply of Access-Accept (if exists) is greater than specified, else reject the user. In doc/ChangeLog, virtual modules are mentioned, with a reference to "modules" section of radiusd.conf. However, a note on them is in "instantiate" section. For rlm_exec, it could be useful to set environment variables for script return codes, like char codestr[3]; snprintf(codestr, 3, "%d", RLM_MODULE_OK); setenv("RLM_MODULE_OK", codestr, 1); ... This may be done either after fork, or at module initialization, for the radiusd process itself. One may want to distinct zapped sessions from normally stopped ones. It's not good to extend standard RADIUS attributes, but how about to define a new value Acct-Terminate-Cause = Stale-Session and add it to the fake stop request? As an alternative, it might be a good idea to add an accounting_zap "method" for modules... In postgresql.conf, there are commented out authorize_check_query and authorize_reply_query noted as "for case sensitive usernames". First, that's wrong, they are for case-INsensitive searches. Second, for PostgreSQL it's more efficient to use lower(UserName) = lower('%{SQL-User-Name}') One using these queries might then want to build appropriate indices: CREATE INDEX radcheck_lower_username_idx ON radcheck (lower(UserName)); CREATE INDEX radreply_lower_username_idx ON radreply (lower(UserName)); The same for authorize_group_{check,reply}_query. I'd also recommend to replace most of VARCHAR(N) columns with TEXT in PostgreSQL database schema unless there's a real necessity to restrict their length at database level. Finally, TIMESTAMP WITH TIME ZONE may be written as TIMESTAMPTZ, which is much shorter ;) And there's no need to cast now() to timestamptz in queries - that's what it already is. -- Fduch M. Pravking

2 1

Automatic report from sources (radiusd) between 01.08.2005 - 02.08.2005 GMT
by Automatic cvs log generator 02 Aug '05

02 Aug '05

CVS log entries from 01.08.2005 (Mon) 08:00:00 - 02.08.2005 (Tue) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/auth.c; Revisions: 1.136.2.2 File: radiusd/src/main/mainconfig.c; Revisions: 1.70 File: radiusd/doc/duplicate-users; Revisions: 1.6 File: radiusd/src/modules/rlm_files/rlm_files.c; Revisions: 1.65 File: radiusd/raddb/radiusd.conf.in; Revisions: 1.217 File: radiusd/src/modules/rlm_fastusers/rlm_fastusers.c; Revisions: 1.36 File: radiusd/src/include/radiusd.h; Revisions: 1.197 ===================================================== Combined list of identical log entries ===================================================== Description: Removed usercollide functionality. It can be done with other features of the server (i.e. rlm_policy) Modified files: File: radiusd/doc/duplicate-users; Revision: 1.6; Date: 2005/08/01 17:11:10; Author: aland; Lines: (+0 -0) File: radiusd/raddb/radiusd.conf.in; Revision: 1.217; Date: 2005/08/01 17:11:09; Author: aland; Lines: (+1 -18) File: radiusd/src/include/radiusd.h; Revision: 1.197; Date: 2005/08/01 17:11:10; Author: aland; Lines: (+1 -2) File: radiusd/src/main/mainconfig.c; Revision: 1.70; Date: 2005/08/01 17:11:10; Author: aland; Lines: (+1 -2) File: radiusd/src/modules/rlm_fastusers/rlm_fastusers.c; Revision: 1.36; Date: 2005/08/01 17:11:10; Author: aland; Lines: (+1 -52) File: radiusd/src/modules/rlm_files/rlm_files.c; Revision: 1.65; Date: 2005/08/01 17:11:10; Author: aland; Lines: (+10 -56) ===================================================== Log entries ===================================================== Description: Make Expiration work Modified files: File: radiusd/src/main/auth.c; Revision: 1.136.2.2; Date: 2005/08/01 20:58:16; Author: aland; Lines: (+38 -31) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/duplicate-users Revisions: 1.6 Authors: aland (+0 -0) ------------------------------- File: radiusd/raddb/radiusd.conf.in Revisions: 1.217 Authors: aland (+1 -18) ------------------------------- File: radiusd/src/include/radiusd.h Revisions: 1.197 Authors: aland (+1 -2) ------------------------------- File: radiusd/src/main/auth.c Revisions: 1.136.2.2 Authors: aland (+38 -31) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.70 Authors: aland (+1 -2) ------------------------------- File: radiusd/src/modules/rlm_fastusers/rlm_fastusers.c Revisions: 1.36 Authors: aland (+1 -52) ------------------------------- File: radiusd/src/modules/rlm_files/rlm_files.c Revisions: 1.65 Authors: aland (+10 -56) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

[Q] FreeRadius proxy and Accounting-Off/Accounting-On packets
by Andrey Panin 01 Aug '05

01 Aug '05

Hello, how Freeradius handle Accounting-Off/Accounting-On packets in proxy mode ? Looks like it just drops them on the floor :( Best regards. -- Andrey Panin | Linux and UNIX system administrator pazke(a)donpac.ru | PGP key: wwwkeys.pgp.net

2 2

Automatic report from sources (radiusd) between 31.07.2005 - 01.08.2005 GMT
by Automatic cvs log generator 01 Aug '05

01 Aug '05

CVS log entries from 31.07.2005 (Sun) 08:00:03 - 01.08.2005 (Mon) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/src/modules/rules.mak; Revisions: 1.56, 1.49.6.2 ===================================================== Log entries ===================================================== Description: When linking, it's $(LDFLAGS) instead of $(CFLAGS). (closes: #208) Problem reported by Simon Dickhoven <simon(a)tachyon.net> Modified files: File: radiusd/src/modules/rules.mak; Revision: 1.56; Date: 2005/07/31 12:44:18; Author: nbk; Lines: (+4 -3) ------------------------------- Description: Pull from CVS head: When linking, it's $(LDFLAGS) instead of $(CFLAGS). Modified files: File: radiusd/src/modules/rules.mak; Revision: 1.49.6.2; Date: 2005/07/31 12:48:01; Author: nbk; Lines: (+4 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rules.mak Revisions: 1.56, 1.49.6.2 Authors: nbk (+4 -3), nbk (+4 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0