January 2006 - Freeradius-Devel - lists.freeradius.org

server cycles and memory utilization blamed on large radutmp radwtmp
by Joe Maimon 25 Jan '06

25 Jan '06

Apparently something about those files being a couple hundered megabytes triggered the server to eat memory and cpu and generate<TIMEOUT> errors, no available thread, and core dumps. I have attached the probable locations of the (patched) segv's. #! /bin/sh /usr/share/dpatch/dpatch-run ## 310-rlm_exec-nullchecks.dpatch by <joe(a)nameserver3.ttec.com> ## ## All lines beginning with `## DP:' are a description of the patch. ## DP: No description. @DPATCH@ diff -urNad freeradius-2.0.0~/src/modules/rlm_exec/rlm_exec.c freeradius-2.0.0/src/modules/rlm_exec/rlm_exec.c --- freeradius-2.0.0~/src/modules/rlm_exec/rlm_exec.c 2005-12-22 09:40:30.000000000 -0500 +++ freeradius-2.0.0/src/modules/rlm_exec/rlm_exec.c 2006-01-24 18:35:58.000000000 -0500 @@ -281,6 +281,13 @@ VALUE_PAIR *answer; rlm_exec_t *inst = (rlm_exec_t *) instance; + if (!inst || !request) { + radlof(L_ERR, "%s: %s() line: %d , a very bad thing happened", + __FILE__, __func__, __LINE__); + return RLM_MODULE_NOOP; + } + + /* * We need a program to execute. */ @@ -294,8 +301,10 @@ * See if we're supposed to execute it now. */ if (!((inst->packet_code == 0) || - (request->packet->code == inst->packet_code) || - (request->reply->code == inst->packet_code) || + (request->packet && + request->packet->code == inst->packet_code) || + (request->reply && + request->reply->code == inst->packet_code) || (request->proxy && (request->proxy->code == inst->packet_code)) || (request->proxy_reply && #! /bin/sh /usr/share/dpatch/dpatch-run ## 300-request_procces-nosend.dpatch by <joe(a)nameserver3.ttec.com> ## ## All lines beginning with `## DP:' are a description of the patch. ## DP: No description. @DPATCH@ diff -urNad freeradius-2.0.0~pre0~cvs20051222-0-JM~/src/main/request_process.c freeradius-2.0.0~pre0~cvs20051222-0-JM/src/main/request_process.c --- freeradius-2.0.0~pre0~cvs20051222-0-JM~/src/main/request_process.c 2005-12-28 14:47:37.000000000 -0500 +++ freeradius-2.0.0~pre0~cvs20051222-0-JM/src/main/request_process.c 2006-01-24 17:41:13.000000000 -0500 @@ -559,6 +559,7 @@ * suppress packets which aren't supposed to be sent over * the wire, or to be delayed. */ + if (request && request->listener && request->listener->send) request->listener->send(request->listener, request); /* #! /bin/sh /usr/share/dpatch/dpatch-run ## 320-rad_account-replynull.dpatch by <joe(a)nameserver3.ttec.com> ## ## All lines beginning with `## DP:' are a description of the patch. ## DP: No description. @DPATCH@ diff -urNad freeradius-2.0.0~/src/main/acct.c freeradius-2.0.0/src/main/acct.c --- freeradius-2.0.0~/src/main/acct.c 2006-01-24 20:51:05.000000000 -0500 +++ freeradius-2.0.0/src/main/acct.c 2006-01-24 22:35:24.000000000 -0500 @@ -152,7 +152,8 @@ */ case RLM_MODULE_OK: case RLM_MODULE_UPDATED: - request->reply->code = PW_ACCOUNTING_RESPONSE; + if (request->reply) + request->reply->code = PW_ACCOUNTING_RESPONSE; break; /* * The module handled the request, don't reply.

2 3

MD5 Encryption
by shan t 25 Jan '06

25 Jan '06

Hi all, I am writing a demo program in C which sends packets to freeRadius Server. I am having difficulties in understanding the password encryption.. I am not sure how the hashing works.. The sample program given in the ftp site for MD5 hashing takes 2 parameters.. "Key" and "saltstring", Here the key is the Identifier (16 Byte Arbitrary number) and key is the shared secret? The documentation says the procedure is.. ----------------------------------------------------------------------------------------------------------------- The Access-Request packet contains a 16 octet Request Authenticator in the authenticator field. This Request authenticator is a randomly chosen 16 octet string. This packet is completely unprotected, except for the User-Password attribute, which is protected as follows: The client and server share a secret. That shared secret followed by the Request Authenticator is put through an MD5 hash to create a 16 octet value which is XORed with the password entered by the user. If the user password is greater than 16 octets, additional MD5 calculations are performed, using the previous ciphertext instead of the Request Authenticator. More formally: Call the shared secret S and the pseudo-random 128-bit Request Authenticator RA. The password is broken into 16-octet blocks p1, p2, ... pn, with the last block padded at the end with '0's to a 16-octet boundary. The ciphertext blocks are c1, c2... cn. c1 = p1 XOR MD5(S + RA) c2 = p2 XOR MD5(S + c1) . . . cn = pn XOR MD5(S + cn-1) The User-Password attribute contains c1+c2+...+cn, Where + denotes concatenation. ------------------------------------------------------------------------------------------ Please let me know if anyonbe has worked on similar stuff.. Regards, Shan

2 1

Automatic report from sources (radiusd) between 24.01.2006 - 25.01.2006 GMT
by Automatic cvs log generator 25 Jan '06

25 Jan '06

CVS log entries from 24.01.2006 (Tue) 09:00:01 - 25.01.2006 (Wed) 09:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/Makefile.in; Revisions: 1.58 File: radiusd/src/lib/radius.c; Revisions: 1.177, 1.176 File: radiusd/src/include/libradius.h; Revisions: 1.115 File: radiusd/src/main/radsniff.c; Revisions: 1.2 File: radiusd/Make.inc.in; Revisions: 1.48.4.1 ===================================================== Combined list of identical log entries ===================================================== Description: Moved copied code in radsniff.c to rad_packet_ok() Made rad_recv() call rad_packet_ok() Updated radsniff to use more "const". Updated radsniff to accept "-d dictionary_dir" Modified files: File: radiusd/src/include/libradius.h; Revision: 1.115; Date: 2006/01/24 23:04:06; Author: aland; Lines: (+2 -1) File: radiusd/src/lib/radius.c; Revision: 1.177; Date: 2006/01/24 23:04:06; Author: aland; Lines: (+90 -79) File: radiusd/src/main/radsniff.c; Revision: 1.2; Date: 2006/01/24 23:04:06; Author: aland; Lines: (+19 -326) ===================================================== Log entries ===================================================== Description: Include CPPFLAGS, too. This fixes bug #321 Modified files: File: radiusd/Make.inc.in; Revision: 1.48.4.1; Date: 2006/01/24 21:02:20; Author: aland; Lines: (+3 -2) ------------------------------- Description: Be a little more paranoid about checking packet codes Modified files: File: radiusd/src/lib/radius.c; Revision: 1.176; Date: 2006/01/24 18:13:48; Author: aland; Lines: (+39 -8) ------------------------------- Description: Don't make radiusd depend on $(MODULE_LIBS), that is a macro which is passed to libtool, and may include things like "-dlpreopen" Modified files: File: radiusd/src/main/Makefile.in; Revision: 1.58; Date: 2006/01/24 22:46:41; Author: aland; Lines: (+2 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/Make.inc.in Revisions: 1.48.4.1 Authors: aland (+3 -2) ------------------------------- File: radiusd/src/include/libradius.h Revisions: 1.115 Authors: aland (+2 -1) ------------------------------- File: radiusd/src/lib/radius.c Revisions: 1.177, 1.176 Authors: aland (+90 -79), aland (+39 -8) ------------------------------- File: radiusd/src/main/Makefile.in Revisions: 1.58 Authors: aland (+2 -2) ------------------------------- File: radiusd/src/main/radsniff.c Revisions: 1.2 Authors: aland (+19 -326) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

4 4

Attributes location
by Santy Sari 25 Jan '06

25 Jan '06

Dear all, Could someone tell me where is the location of the Radius attributes in the freeradius? The attributes are used, when the NAS connect with the server. But after seeing the file that come in freeradius, what I can only see are modules and dictionary. The attributes are listed in the dictionary, but where is the actual location of the source code? I use Linux as my NAS. I want to extend some attributes. Really apreciate your guidance since I don't know where to search again. Many thanks Santy --

4 6

Radius Engineer (Full time position)
by Krishna Gutti 24 Jan '06

24 Jan '06

We have a Software Engineer -Radius position available. Any one interested can forward your resume to krishna_k_gutti at yahoo.com Function Description We are looking for an experienced senior systems engineer to configure and manage our AAA (authentication, authorization, and accounting) system. Job responsibilities include configuring and maintaining our RADIUS servers, developing our mediation system, including translating session information into billable events. Candidates for this position should enjoy troubleshooting critical path systems and designing flexible solutions in a quickly evolving environment. Balancing short-term requests with long-term product requirements is required. Experience working in an organization providing AAA service, preferably an ISP or WISP, is a required. Application development in a UNIX/LINUX environment is required. This position requires expert-level Perl skills. V! ery strong SQL programming skills, including developing and optimizing stored procedures is required. The candidate should have extensive experience with XML including schema development. Required Experience and Skills · At least 3 years of AAA Server management, specifically using RADIUS, is required. · Experience processing AAA session data is required. · Expert level Perl skill is required. · PL/SQL experience is required. · Database engineering experience, including triggers, complex joins, and schema design. Perl:DBI/DBD experience. · Strong XML development experience including designing of DTDs and/or XML Schema. · Good software design skills including use of UML & Object-oriented design practices. · Ability to learn and contribute quickly, work independently. Experience leading other developers during the analysis, design, and execution phases of an engineering project is a big plus. · Experience with source control systems, such as CVS. · BS in Computer Science, or equivalent experience. Desired · Web application development experience. · Advanced Linux development skills including .rpm and kickstart configurations. Equal Oppurtunity Employer The position is in Santa Monica, CA. --------------------------------- Do you Yahoo!? With a free 1 GB, there's more in store with Yahoo! Mail.

2 1

64 bit issues?
by David Frascone 24 Jan '06

24 Jan '06

I'm having weird problems when building 1.1.0 code on x86_64 platforms. The code builds and installs fine, but the dictionary parsing routes seem to have many problems. Things seem to work properly on 32 bit machines. . . Here's the error I get: root@magneto:~ # radiusd -xx Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/etc/raddb/proxy.conf Config: including file: /usr/etc/raddb/clients.conf Config: including file: /usr/etc/raddb/snmp.conf Config: including file: /usr/etc/raddb/eap.conf Config: including file: /usr/etc/raddb/sql.conf main: prefix = "/usr" main: localstatedir = "/usr/var" main: logdir = "/usr/var/log/radius" main: libdir = "/usr/lib" main: radacctdir = "/usr/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/var/log/radius/radius.log" main: log_auth = yes main: log_auth_badpass = yes main: log_auth_goodpass = yes main: pidfile = "/usr/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary Errors reading dictionary: dict_init: /usr/share/freeradius/dictionary.ascend[1233]: dict_addvalue: Duplicate value name Route-IPX-No for attribute X-Ascend-Route-IPX Errors reading radiusd.conf I've tried fixing all the "duplicate" attributes, but then it fails with a similar error on a non duplicate AVP. Any ideas? -- David Frascone Useless Invention: Inflatable anchor.

3 4

Preparing a radius packet
by shan t 24 Jan '06

24 Jan '06

Is there any tool avilable for preparing a UDP packet radius format? I want to send a UDP message to the radius server from my application. Please let me know if anyone has any clue. Regards, Shanavas

3 2

FILES LOCATIONS
by Maria Ripolles 24 Jan '06

24 Jan '06

Hy all, I have developed a custom module called rlm_prueba In .../src/modules/rlm_prueba directory, I have: # pwd /usuarios/redIP/FreeRadius/freeradius-1.0.5/src/modules/rlm_prueba # ls Makefile rlm_prueba.a rlm_prueba.c rlm_prueba.la rlm_prueba.lo rlm_prueba.o # and my Makefile: TARGET = rlm_prueba SRCS = rlm_prueba.c HEADERS = RLM_CFLAGS = -I/opt/gadsl/contrib/include RLM_LIBS = -L/opt/gadsl/contrib/lib -lcurl # over-ride the previous assignment if we're not building anything include ../rules.mak $(STATIC_OBJS): $(HEADERS) $(DYNAMIC_OBJS): $(HEADERS) I compiled it: # make # make install and it worked fine. Now, I want to store my rlm_prueba.c in a repository. I use a propietary tool and a previous requisite is that the file compile. But I am not able to compile it. I suppose that my tool doesn´t link ok with the freeradius libraries, but I am not sure Where are the freeradius .h files located? And which are the freeradius libraries needed to compile and where are they located? Please, any help or hint or... is very wellcomed. Thanks a lot, Maria --------------------------------- LLama Gratis a cualquier PC del Mundo. Llamadas a fijos y móviles desde 1 céntimo por minuto. http://es.voice.yahoo.com

1 0

Automatic report from sources (radiusd) between 23.01.2006 - 24.01.2006 GMT
by Automatic cvs log generator 24 Jan '06

24 Jan '06

CVS log entries from 23.01.2006 (Mon) 09:00:00 - 24.01.2006 (Tue) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/src/modules/rlm_ippool/Makefile.in; Revisions: 1.10 File: radiusd/src/modules/rlm_dbm/Makefile.in; Revisions: 1.8 File: radiusd/src/modules/rlm_sql_log/Makefile; Revisions: 1.1, 1.1.2.2, 1.1.2.1 File: radiusd/src/modules/rlm_sql_log/configure.in; Revisions: 1.2, 1.1.2.2 File: radiusd/src/modules/rlm_sql/drivers/Makefile.in; Revisions: 1.7 File: radiusd/src/modules/rlm_sql_log/configure; Revisions: 1.2, 1.1.2.2 File: radiusd/src/modules/rlm_sql_log/Makefile.in; Revisions: 1.3, 1.1.2.2 ===================================================== Combined list of identical log entries ===================================================== Description: Minimalist Makefile to build the module. Modified files: File: radiusd/src/modules/rlm_sql_log/Makefile; Revision: 1.1; Date: 2006/01/23 10:31:14; Author: nbk; File: radiusd/src/modules/rlm_sql_log/Makefile; Revision: 1.1.2.2; Date: 2006/01/23 10:32:02; Author: nbk; Lines: (+10 -0) ------------------------------- Description: Install stand-alone binaries with libtool, too. Modified files: File: radiusd/src/modules/rlm_dbm/Makefile.in; Revision: 1.8; Date: 2006/01/23 10:38:19; Author: nbk; Lines: (+4 -4) File: radiusd/src/modules/rlm_ippool/Makefile.in; Revision: 1.10; Date: 2006/01/23 10:38:19; Author: nbk; Lines: (+4 -4) ------------------------------- Description: This module doesn't need any autoconf test which is not already in top-level configure, therefore don't chew build time for nothing. Modified files: File: radiusd/src/modules/rlm_sql_log/Makefile.in; Revision: 1.3; Date: 2006/01/23 10:30:22; Author: nbk; Lines: (+0 -0) File: radiusd/src/modules/rlm_sql_log/Makefile.in; Revision: 1.1.2.2; Date: 2006/01/23 10:29:49; Author: nbk; Lines: (+0 -0) File: radiusd/src/modules/rlm_sql_log/configure; Revision: 1.2; Date: 2006/01/23 10:30:22; Author: nbk; Lines: (+0 -0) File: radiusd/src/modules/rlm_sql_log/configure; Revision: 1.1.2.2; Date: 2006/01/23 10:29:48; Author: nbk; Lines: (+0 -0) File: radiusd/src/modules/rlm_sql_log/configure.in; Revision: 1.2; Date: 2006/01/23 10:30:22; Author: nbk; Lines: (+1 -1) File: radiusd/src/modules/rlm_sql_log/configure.in; Revision: 1.1.2.2; Date: 2006/01/23 10:29:49; Author: nbk; Lines: (+1 -1) ===================================================== Log entries ===================================================== Description: "make clean" must delete lib/*.o files, too. Modified files: File: radiusd/src/modules/rlm_sql/drivers/Makefile.in; Revision: 1.7; Date: 2006/01/23 10:34:32; Author: nbk; Lines: (+1 -1) ------------------------------- Description: file Makefile was added on branch branch_1_1 on 2006-01-23 10:32:02 +0000 Modified files: File: radiusd/src/modules/rlm_sql_log/Makefile; Revision: 1.1.2.1; Date: 2006/01/23 10:31:14; Author: nbk; Lines: (+0 -10) ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_dbm/Makefile.in Revisions: 1.8 Authors: nbk (+4 -4) ------------------------------- File: radiusd/src/modules/rlm_ippool/Makefile.in Revisions: 1.10 Authors: nbk (+4 -4) ------------------------------- File: radiusd/src/modules/rlm_sql/drivers/Makefile.in Revisions: 1.7 Authors: nbk (+1 -1) ------------------------------- File: radiusd/src/modules/rlm_sql_log/Makefile Revisions: 1.1, 1.1.2.2, 1.1.2.1 Authors: nbk, nbk (+10 -0), nbk (+0 -10) ------------------------------- File: radiusd/src/modules/rlm_sql_log/Makefile.in Revisions: 1.3, 1.1.2.2 Authors: nbk (+0 -0), nbk (+0 -0) ------------------------------- File: radiusd/src/modules/rlm_sql_log/configure Revisions: 1.2, 1.1.2.2 Authors: nbk (+0 -0), nbk (+0 -0) ------------------------------- File: radiusd/src/modules/rlm_sql_log/configure.in Revisions: 1.2, 1.1.2.2 Authors: nbk (+1 -1), nbk (+1 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

copyright
by Valts Mazurs 23 Jan '06

23 Jan '06

I think that it would be worth changing the final copyright year number to the current one :) $> radiusd -v radiusd: FreeRADIUS Version 1.1.0, for host , built on Jan 18 2006 at 13:16:46 Copyright (C) 2000-2003 The FreeRADIUS server project. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License. For more information about these matters, see the file named COPYRIGHT. Regards, Valts.

2 1